@noodleseed/one 0.63.0 → 0.64.0

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-progress-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-progress-postgres.js","sourceRoot":"","sources":["../src/platform-auth-inventory-progress-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,qCAAqC,EACrC,wCAAwC,EACxC,yCAAyC,GAE1C,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAWxE,MAAM,OAAO,0CAA0C;IAC5C,KAAK,CAAO;IAErB,YAAY,IAAU;QACpB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAChC,2FAA2F,EAC3F,CAAC,KAAK,CAAC,CACR,CAAC;YACF,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACnF,MAAM,UAAU,CAAC,KAAK,CACpB;;;mDAG2C,EAC3C;gBACE,KAAK;gBACL,kBAAkB,CAAC,QAAQ,CAAC;gBAC5B,kBAAkB,CAAC,WAAW,CAAC;gBAC/B,kBAAkB,CAAC,UAAU,CAAC;aAC/B,CACF,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;YAC5E,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC;;;;;;oBAMY,gBAAgB,EAAE,EAC9B,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CACrE,CAAC;YACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,UAAkB;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;8DAEwD,EACxD,CAAC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,UAAkB;QAClD,OAAO,iCAAiC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAMtB;QACC,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACrE,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC,KAAK;gBACtD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,MAAM,sBAAsB,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;YAClE,MAAM,qBAAqB,GACzB,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7E,MAAM,YAAY,GAChB,UAAU,CAAC,MAAM,GAAG,wCAAwC;gBAC5D,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;gBAC1D,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC;gBAClE,QAAQ,CAAC,iBAAiB,GAAG,UAAU,CAAC,MAAM;oBAC5C,yCAAyC;gBAC3C,CAAC,QAAQ,CAAC,iBAAiB,GAAG,UAAU,CAAC,MAAM;oBAC7C,yCAAyC;oBACzC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YACnC,MAAM,UAAU,GACd,qBAAqB,KAAK,SAAS;gBACjC,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,CACE,MAAM,UAAU,CAAC,KAAK,CACpB;wFACwE,EACxE,CAAC,KAAK,CAAC,KAAK,EAAE,qBAAqB,CAAC,CACrC,CACF,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAC9B,MAAM,eAAe,GACnB,UAAU,CAAC,MAAM,KAAK,CAAC;gBACrB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,CACE,MAAM,UAAU,CAAC,KAAK,CACpB;2FAC2E,EAC3E,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CACjD,CACF,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAC9B,IAAI,YAAY,IAAI,UAAU,IAAI,eAAe,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC;;;;sBAIY,gBAAgB,EAAE,EAC9B,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAC/C,CAAC;gBACF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,GAAG,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAChE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YACD,MAAM,UAAU,GAAG,QAAQ,CAAC,iBAAiB,CAAC;YAC9C,MAAM,eAAe,GAAG,aAAa,CAAC;gBACpC,sBAAsB;gBACtB,qBAAqB;gBACrB,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC;aAC9C,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CACpB;;;6CAGqC,EACrC;gBACE,KAAK,CAAC,KAAK;gBACX,UAAU;gBACV,sBAAsB;gBACtB,KAAK,CAAC,SAAS,IAAI,IAAI;gBACvB,qBAAqB,IAAI,IAAI;gBAC7B,UAAU,CAAC,MAAM;gBACjB,eAAe;aAChB,CACF,CAAC;YACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,CAAC,KAAK,CACpB;;;;;;qFAM2E,EAC3E;oBACE,KAAK,CAAC,KAAK;oBACX,UAAU;oBACV,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;oBACjD,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC9C,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACvC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;oBACvC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;iBACtE,CACF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,GAAG,QAAQ,CAAC,iBAAiB,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,UAAU;gBAAE,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3F,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC;;;;;oBAKY,gBAAgB,EAAE,EAC9B;gBACE,KAAK,CAAC,KAAK;gBACX,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC/B,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBAClD,KAAK,CAAC,SAAS,IAAI,IAAI;gBACvB,UAAU,CAAC,MAAM;gBACjB,KAAK;aACN,CACF,CAAC;YACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,GAAG,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAChE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC,UAAU,gBAAgB;oCACI,EAC9B,CAAC,KAAK,CAAC,CACR,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,UAAqC,EACrC,KAAa;QAEb,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CACnC,UAAU,gBAAgB;+CACe,EACzC,CAAC,KAAK,CAAC,CACR,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAI,IAA4C;QAChE,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;mBAIb,CAAC;AAEpB,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;gBAIY,gBAAgB,EAAE,EAC9B,CAAC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CACnC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,IAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,UAAU,gBAAgB;6CACe,EACzC,CAAC,KAAK,CAAC,CACR,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IACE,GAAG,KAAK,SAAS;QACjB,GAAG,CAAC,KAAK,KAAK,OAAO;QACrB,GAAG,CAAC,cAAc,KAAK,IAAI;QAC3B,GAAG,CAAC,gBAAgB,KAAK,aAAa,CAAC,UAAU,CAAC;QAClD,GAAG,CAAC,gBAAgB,KAAK,IAAI;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAEtD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAiD;IAEjD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IACE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE;YAC1B,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;YACpB,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;YACpB,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;gBAC5B,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;YAE/E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,8BAA8B,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAqC;IACnE,OAAO;QACL,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAiD;IACrE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAClB,QAA8B,EAC9B,UAAkB,EAClB,KAAoC;IAEpC,IACE,QAAQ,CAAC,KAAK,KAAK,KAAK;QACxB,QAAQ,CAAC,cAAc,KAAK,IAAI;QAChC,QAAQ,CAAC,gBAAgB,KAAK,aAAa,CAAC,UAAU,CAAC;QACvD,QAAQ,CAAC,gBAAgB,KAAK,IAAI;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAE3D,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC7C,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.d.ts

@@ -0,0 +1,20 @@
+import { type PlatformAuthInventorySourceManifest } from './platform-auth-inventory-sources.js';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+type FenceConnection = PlatformIdentityQueryable & {
+    release?: () => void;
+};
+type FencePool = PlatformIdentityQueryable & {
+    connect?: () => Promise<FenceConnection>;
+};
+export declare const PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES: readonly ["platform_principals", "platform_identity_links", "platform_verified_emails"];
+/** Installs additive, statement-level change evidence without serializing writers on a counter row. */
+export declare function ensurePlatformAuthInventorySourceFenceSchema(pool: PlatformIdentityQueryable): Promise<void>;
+/** Reconciles triggers after later service schema initializers create their owned source tables. */
+export declare function installPlatformAuthInventorySourceFenceTriggers(pool: PlatformIdentityQueryable): Promise<void>;
+export declare function assertPlatformAuthInventorySourceFence(pool: PlatformIdentityQueryable, manifest: PlatformAuthInventorySourceManifest): Promise<void>;
+export declare function acquirePlatformAuthInventorySourceFence(connection: PlatformIdentityQueryable): Promise<void>;
+export declare function releasePlatformAuthInventorySourceFence(connection: PlatformIdentityQueryable): Promise<void>;
+export declare function readPlatformAuthInventorySourceEpoch(pool: PlatformIdentityQueryable): Promise<string>;
+export declare function runPlatformAuthInventorySourceFenceTransaction<T>(pool: FencePool, task: (connection: FenceConnection) => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=platform-auth-inventory-source-fence-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-source-fence-postgres.d.ts","sourceRoot":"","sources":["../src/platform-auth-inventory-source-fence-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mCAAmC,EACzC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,KAAK,eAAe,GAAG,yBAAyB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC;AAC5E,KAAK,SAAS,GAAG,yBAAyB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;CAAE,CAAC;AAI1F,eAAO,MAAM,wCAAwC,yFAI3C,CAAC;AAEX,uGAAuG;AACvG,wBAAsB,4CAA4C,CAChE,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,oGAAoG;AACpG,wBAAsB,+CAA+C,CACnE,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED,wBAAsB,sCAAsC,CAC1D,IAAI,EAAE,yBAAyB,EAC/B,QAAQ,EAAE,mCAAmC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,uCAAuC,CAC3D,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,uCAAuC,CAC3D,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,wBAAsB,8CAA8C,CAAC,CAAC,EACpE,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC,CAAC,CAAC,CAkBZ"}

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js

@@ -0,0 +1,126 @@
+import { PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES, } from './platform-auth-inventory-sources.js';
+import { PlatformAuthMigrationError } from './platform-auth-migration.js';
+const SOURCE_FENCE_TRIGGER = 'platform_auth_inventory_source_epoch_trigger';
+const SOURCE_FENCE_LOCK_PREFIX = 'platform-auth-inventory-source-fence:v1:';
+export const PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES = [
+    'platform_principals',
+    'platform_identity_links',
+    'platform_verified_emails',
+];
+/** Installs additive, statement-level change evidence without serializing writers on a counter row. */
+export async function ensurePlatformAuthInventorySourceFenceSchema(pool) {
+    await pool.query(`
+    ALTER TABLE platform_auth_inventory_progress
+      ADD COLUMN IF NOT EXISTS local_source_epoch bigint,
+      ADD COLUMN IF NOT EXISTS local_snapshot_at timestamptz
+  `);
+    await pool.query(`
+    CREATE SEQUENCE IF NOT EXISTS platform_auth_inventory_source_epoch_seq AS bigint;
+    DO $platform_auth_inventory_source_epoch_init$
+    BEGIN
+      IF NOT (SELECT is_called FROM platform_auth_inventory_source_epoch_seq) THEN
+        PERFORM setval(
+          'platform_auth_inventory_source_epoch_seq'::regclass,
+          (SELECT last_value FROM platform_auth_inventory_source_epoch_seq),
+          true
+        );
+      END IF;
+    END
+    $platform_auth_inventory_source_epoch_init$;
+    CREATE OR REPLACE FUNCTION platform_auth_inventory_bump_source_epoch() RETURNS trigger AS $$
+    BEGIN
+      PERFORM pg_advisory_xact_lock_shared(
+        hashtextextended('${SOURCE_FENCE_LOCK_PREFIX}' || TG_TABLE_SCHEMA, 0)
+      );
+      PERFORM nextval(
+        format('%I.%I', TG_TABLE_SCHEMA, 'platform_auth_inventory_source_epoch_seq')::regclass
+      );
+      RETURN NULL;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await installPlatformAuthInventorySourceFenceTriggers(pool);
+}
+/** Reconciles triggers after later service schema initializers create their owned source tables. */
+export async function installPlatformAuthInventorySourceFenceTriggers(pool) {
+    const foundation = await pool.query(`SELECT to_regclass('platform_auth_inventory_source_epoch_seq')::text AS sequence,
+            to_regprocedure('platform_auth_inventory_bump_source_epoch()')::text AS fn`);
+    const foundationRow = foundation.rows[0];
+    if (foundationRow === undefined || foundationRow.sequence === null || foundationRow.fn === null)
+        return;
+    for (const table of [
+        ...PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES,
+        ...PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES,
+    ]) {
+        const relation = await pool.query('SELECT relkind::text FROM pg_class WHERE oid = to_regclass($1)', [table]);
+        if (relation.rows[0]?.relkind !== 'r' && relation.rows[0]?.relkind !== 'p')
+            continue;
+        const installed = await pool.query(`SELECT 1 FROM pg_trigger
+        WHERE tgrelid = to_regclass($1) AND tgname = $2 AND NOT tgisinternal
+          AND tgenabled <> 'D'
+          AND tgfoid = to_regprocedure('platform_auth_inventory_bump_source_epoch()')`, [table, SOURCE_FENCE_TRIGGER]);
+        if (installed.rows[0] !== undefined)
+            continue;
+        await pool.query(`CREATE TRIGGER ${SOURCE_FENCE_TRIGGER}
+         AFTER INSERT OR UPDATE OR DELETE OR TRUNCATE ON "${table}"
+         FOR EACH STATEMENT EXECUTE FUNCTION platform_auth_inventory_bump_source_epoch()`);
+    }
+}
+export async function assertPlatformAuthInventorySourceFence(pool, manifest) {
+    const required = [
+        ...PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES,
+        ...PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES.filter((source) => manifest[source] === 'configured'),
+    ];
+    const coverage = await pool.query(`SELECT required.table_name
+       FROM unnest($1::text[]) AS required(table_name)
+      WHERE to_regclass(required.table_name) IS NULL
+         OR NOT EXISTS (
+              SELECT 1 FROM pg_trigger trigger
+               WHERE trigger.tgrelid = to_regclass(required.table_name)
+                 AND trigger.tgname = $2 AND NOT trigger.tgisinternal
+                 AND trigger.tgenabled <> 'D'
+                 AND trigger.tgfoid =
+                   to_regprocedure('platform_auth_inventory_bump_source_epoch()')
+            )`, [required, SOURCE_FENCE_TRIGGER]);
+    if (coverage.rows.length !== 0)
+        throw new PlatformAuthMigrationError('inventory_unavailable');
+}
+export async function acquirePlatformAuthInventorySourceFence(connection) {
+    await connection.query(`SELECT pg_advisory_lock(
+       hashtextextended($1 || current_schema(), 0)
+     )`, [SOURCE_FENCE_LOCK_PREFIX]);
+}
+export async function releasePlatformAuthInventorySourceFence(connection) {
+    await connection.query(`SELECT pg_advisory_unlock(
+       hashtextextended($1 || current_schema(), 0)
+     )`, [SOURCE_FENCE_LOCK_PREFIX]);
+}
+export async function readPlatformAuthInventorySourceEpoch(pool) {
+    const result = await pool.query('SELECT last_value::text AS epoch FROM platform_auth_inventory_source_epoch_seq');
+    const epoch = result.rows[0]?.epoch;
+    if (epoch === undefined)
+        throw new PlatformAuthMigrationError('inventory_unavailable');
+    return epoch;
+}
+export async function runPlatformAuthInventorySourceFenceTransaction(pool, task) {
+    const connection = pool.connect === undefined ? pool : await pool.connect();
+    let sourceFenceHeld = false;
+    try {
+        await acquirePlatformAuthInventorySourceFence(connection);
+        sourceFenceHeld = true;
+        await connection.query('BEGIN ISOLATION LEVEL REPEATABLE READ');
+        const result = await task(connection);
+        await connection.query('COMMIT');
+        return result;
+    }
+    catch (error) {
+        await connection.query('ROLLBACK').catch(() => undefined);
+        throw error;
+    }
+    finally {
+        if (sourceFenceHeld)
+            await releasePlatformAuthInventorySourceFence(connection).catch(() => undefined);
+        connection.release?.();
+    }
+}
+//# sourceMappingURL=platform-auth-inventory-source-fence-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-source-fence-postgres.js","sourceRoot":"","sources":["../src/platform-auth-inventory-source-fence-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yCAAyC,GAE1C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAM1E,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAC5E,MAAM,wBAAwB,GAAG,0CAA0C,CAAC;AAC5E,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,qBAAqB;IACrB,yBAAyB;IACzB,0BAA0B;CAClB,CAAC;AAEX,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;4BAgBS,wBAAwB;;;;;;;;GAQjD,CAAC,CAAC;IACH,MAAM,+CAA+C,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,+CAA+C,CACnE,IAA+B;IAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAIjC;uFACmF,CACpF,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,EAAE,KAAK,IAAI;QAC7F,OAAO;IACT,KAAK,MAAM,KAAK,IAAI;QAClB,GAAG,wCAAwC;QAC3C,GAAG,yCAAyC;KAC7C,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,gEAAgE,EAChE,CAAC,KAAK,CAAC,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,GAAG;YAAE,SAAS;QACrF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAChC;;;sFAGgF,EAChF,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAC9B,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9C,MAAM,IAAI,CAAC,KAAK,CACd,kBAAkB,oBAAoB;4DACgB,KAAK;yFACwB,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,IAA+B,EAC/B,QAA6C;IAE7C,MAAM,QAAQ,GAAG;QACf,GAAG,wCAAwC;QAC3C,GAAG,yCAAyC,CAAC,MAAM,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,YAAY,CAC9C;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;;;;;;cAUU,EACV,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CACjC,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC;IAErC,MAAM,UAAU,CAAC,KAAK,CACpB;;OAEG,EACH,CAAC,wBAAwB,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC;IAErC,MAAM,UAAU,CAAC,KAAK,CACpB;;OAEG,EACH,CAAC,wBAAwB,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,gFAAgF,CACjF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,IAAe,EACf,IAAiD;IAEjD,MAAM,UAAU,GAAoB,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7F,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,uCAAuC,CAAC,UAAU,CAAC,CAAC;QAC1D,eAAe,GAAG,IAAI,CAAC;QACvB,MAAM,UAAU,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,eAAe;YACjB,MAAM,uCAAuC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnF,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.d.ts

@@ -0,0 +1,8 @@
+export type PlatformAuthInventorySource = 'billing_accounts' | 'billing_account_members' | 'billing_account_defaults' | 'org_members' | 'oauth_refresh_tokens' | 'developer_access_grants' | 'deploy_records' | 'oauth_consent_grants' | 'oauth_device_authorizations' | 'welcome_email_outbox' | 'oauth_delegated_credentials' | 'org_invitations' | 'signup_allowlist' | 'audit_events';
+export type PlatformAuthInventorySourceManifest = Readonly<Record<PlatformAuthInventorySource, 'configured' | 'not_applicable'>>;
+export declare const PLATFORM_AUTH_INVENTORY_SOURCES: readonly PlatformAuthInventorySource[];
+/** Historical/support artifacts are validated by the manifest but never grant platform authority. */
+export declare const PLATFORM_AUTH_INVENTORY_NON_AUTHORITY_SOURCES: readonly ["org_invitations", "signup_allowlist", "audit_events"];
+export declare const PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES: PlatformAuthInventorySource[];
+export declare const PLATFORM_AUTH_INVENTORY_SOURCE_COLUMNS: Readonly<Record<PlatformAuthInventorySource, readonly (readonly [string, string])[]>>;
+//# sourceMappingURL=platform-auth-inventory-sources.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-sources.d.ts","sourceRoot":"","sources":["../src/platform-auth-inventory-sources.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,2BAA2B,GACnC,kBAAkB,GAClB,yBAAyB,GACzB,0BAA0B,GAC1B,aAAa,GACb,sBAAsB,GACtB,yBAAyB,GACzB,gBAAgB,GAChB,sBAAsB,GACtB,6BAA6B,GAC7B,sBAAsB,GACtB,6BAA6B,GAC7B,iBAAiB,GACjB,kBAAkB,GAClB,cAAc,CAAC;AAEnB,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CACxD,MAAM,CAAC,2BAA2B,EAAE,YAAY,GAAG,gBAAgB,CAAC,CACrE,CAAC;AAEF,eAAO,MAAM,+BAA+B,EAAE,SAAS,2BAA2B,EAejF,CAAC;AAEF,qGAAqG;AACrG,eAAO,MAAM,6CAA6C,kEAIC,CAAC;AAE5D,eAAO,MAAM,yCAAyC,+BAKrD,CAAC;AAEF,eAAO,MAAM,sCAAsC,EAAE,QAAQ,CAC3D,MAAM,CAAC,2BAA2B,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CA8D5E,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.js

@@ -0,0 +1,86 @@
+export const PLATFORM_AUTH_INVENTORY_SOURCES = [
+    'billing_accounts',
+    'billing_account_members',
+    'billing_account_defaults',
+    'org_members',
+    'oauth_refresh_tokens',
+    'developer_access_grants',
+    'deploy_records',
+    'oauth_consent_grants',
+    'oauth_device_authorizations',
+    'welcome_email_outbox',
+    'oauth_delegated_credentials',
+    'org_invitations',
+    'signup_allowlist',
+    'audit_events',
+];
+/** Historical/support artifacts are validated by the manifest but never grant platform authority. */
+export const PLATFORM_AUTH_INVENTORY_NON_AUTHORITY_SOURCES = [
+    'org_invitations',
+    'signup_allowlist',
+    'audit_events',
+];
+export const PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES = PLATFORM_AUTH_INVENTORY_SOURCES.filter((source) => !PLATFORM_AUTH_INVENTORY_NON_AUTHORITY_SOURCES.includes(source));
+export const PLATFORM_AUTH_INVENTORY_SOURCE_COLUMNS = {
+    billing_accounts: [
+        ['id', 'text'],
+        ['state', 'text'],
+    ],
+    billing_account_members: [
+        ['billing_account_id', 'text'],
+        ['identity_issuer', 'text'],
+        ['subject', 'text'],
+        ['email', 'text'],
+        ['role', 'text'],
+    ],
+    billing_account_defaults: [
+        ['billing_account_id', 'text'],
+        ['identity_issuer', 'text'],
+        ['subject', 'text'],
+    ],
+    org_members: [
+        ['subject', 'text'],
+        ['email', 'text'],
+    ],
+    oauth_refresh_tokens: [
+        ['owner_subject', 'text'],
+        ['owner_email', 'text'],
+        ['identity_kind', 'text'],
+        ['expires_at', 'timestamp with time zone'],
+        ['rotated_at', 'timestamp with time zone'],
+        ['superseded_by', 'text'],
+    ],
+    developer_access_grants: [
+        ['subject', 'text'],
+        ['expires_at', 'timestamp with time zone'],
+        ['revoked_at', 'timestamp with time zone'],
+    ],
+    deploy_records: [
+        ['created_by_subject', 'text'],
+        ['created_by_email', 'text'],
+        ['active', 'boolean'],
+        ['access_mode', 'text'],
+        ['deployment_source', 'text'],
+        ['archived_at', 'timestamp with time zone'],
+    ],
+    oauth_consent_grants: [['owner_subject', 'text']],
+    oauth_device_authorizations: [
+        ['owner_subject', 'text'],
+        ['owner_email', 'text'],
+        ['identity_kind', 'text'],
+        ['status', 'text'],
+        ['expires_at', 'timestamp with time zone'],
+    ],
+    welcome_email_outbox: [
+        ['subject', 'text'],
+        ['email', 'text'],
+    ],
+    oauth_delegated_credentials: [['subject', 'text']],
+    org_invitations: [['token_hash', 'text']],
+    signup_allowlist: [
+        ['kind', 'text'],
+        ['value', 'text'],
+    ],
+    audit_events: [],
+};
+//# sourceMappingURL=platform-auth-inventory-sources.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-sources.js","sourceRoot":"","sources":["../src/platform-auth-inventory-sources.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,+BAA+B,GAA2C;IACrF,kBAAkB;IAClB,yBAAyB;IACzB,0BAA0B;IAC1B,aAAa;IACb,sBAAsB;IACtB,yBAAyB;IACzB,gBAAgB;IAChB,sBAAsB;IACtB,6BAA6B;IAC7B,sBAAsB;IACtB,6BAA6B;IAC7B,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;CACf,CAAC;AAEF,qGAAqG;AACrG,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;CAC2C,CAAC;AAE5D,MAAM,CAAC,MAAM,yCAAyC,GAAG,+BAA+B,CAAC,MAAM,CAC7F,CAAC,MAAM,EAAE,EAAE,CACT,CACE,6CACD,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAE/C;IACF,gBAAgB,EAAE;QAChB,CAAC,IAAI,EAAE,MAAM,CAAC;QACd,CAAC,OAAO,EAAE,MAAM,CAAC;KAClB;IACD,uBAAuB,EAAE;QACvB,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAC9B,CAAC,iBAAiB,EAAE,MAAM,CAAC;QAC3B,CAAC,SAAS,EAAE,MAAM,CAAC;QACnB,CAAC,OAAO,EAAE,MAAM,CAAC;QACjB,CAAC,MAAM,EAAE,MAAM,CAAC;KACjB;IACD,wBAAwB,EAAE;QACxB,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAC9B,CAAC,iBAAiB,EAAE,MAAM,CAAC;QAC3B,CAAC,SAAS,EAAE,MAAM,CAAC;KACpB;IACD,WAAW,EAAE;QACX,CAAC,SAAS,EAAE,MAAM,CAAC;QACnB,CAAC,OAAO,EAAE,MAAM,CAAC;KAClB;IACD,oBAAoB,EAAE;QACpB,CAAC,eAAe,EAAE,MAAM,CAAC;QACzB,CAAC,aAAa,EAAE,MAAM,CAAC;QACvB,CAAC,eAAe,EAAE,MAAM,CAAC;QACzB,CAAC,YAAY,EAAE,0BAA0B,CAAC;QAC1C,CAAC,YAAY,EAAE,0BAA0B,CAAC;QAC1C,CAAC,eAAe,EAAE,MAAM,CAAC;KAC1B;IACD,uBAAuB,EAAE;QACvB,CAAC,SAAS,EAAE,MAAM,CAAC;QACnB,CAAC,YAAY,EAAE,0BAA0B,CAAC;QAC1C,CAAC,YAAY,EAAE,0BAA0B,CAAC;KAC3C;IACD,cAAc,EAAE;QACd,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAC9B,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAC5B,CAAC,QAAQ,EAAE,SAAS,CAAC;QACrB,CAAC,aAAa,EAAE,MAAM,CAAC;QACvB,CAAC,mBAAmB,EAAE,MAAM,CAAC;QAC7B,CAAC,aAAa,EAAE,0BAA0B,CAAC;KAC5C;IACD,oBAAoB,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACjD,2BAA2B,EAAE;QAC3B,CAAC,eAAe,EAAE,MAAM,CAAC;QACzB,CAAC,aAAa,EAAE,MAAM,CAAC;QACvB,CAAC,eAAe,EAAE,MAAM,CAAC;QACzB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAClB,CAAC,YAAY,EAAE,0BAA0B,CAAC;KAC3C;IACD,oBAAoB,EAAE;QACpB,CAAC,SAAS,EAAE,MAAM,CAAC;QACnB,CAAC,OAAO,EAAE,MAAM,CAAC;KAClB;IACD,2BAA2B,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,eAAe,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,gBAAgB,EAAE;QAChB,CAAC,MAAM,EAAE,MAAM,CAAC;QAChB,CAAC,OAAO,EAAE,MAAM,CAAC;KAClB;IACD,YAAY,EAAE,EAAE;CACjB,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-migration-postgres.d.ts

@@ -0,0 +1,42 @@
+import { type PlatformAuthImportInput, type PlatformAuthImportLease, type PlatformAuthMigrationStore } from './platform-auth-migration.js';
+import { type PlatformAuthFrozenCandidate, type PlatformAuthFrozenCandidatePage, type PlatformAuthMigrationRun, type PlatformAuthMigrationRunInput } from './platform-auth-migration-runs-postgres.js';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+export type { PlatformAuthFrozenCandidate, PlatformAuthFrozenCandidatePage, PlatformAuthMigrationRun, PlatformAuthMigrationRunInput, PlatformAuthMigrationRunKind, } from './platform-auth-migration-runs-postgres.js';
+/** Durable migration ledger adapter. It deliberately commits claims before calling an upstream directory. */
+export declare class PostgresPlatformAuthMigrationStore implements PlatformAuthMigrationStore {
+    #private;
+    constructor(pool: PlatformIdentityQueryable & {
+        connect?: () => Promise<PlatformIdentityQueryable & {
+            release?: () => void;
+        }>;
+    });
+    createRun(input: PlatformAuthMigrationRunInput): Promise<PlatformAuthMigrationRun>;
+    listFrozenCandidates(runId: string): Promise<readonly PlatformAuthFrozenCandidate[]>;
+    listFrozenCandidateBatch(runId: string, options: {
+        readonly limit: number;
+        readonly afterFingerprint?: string;
+        readonly eligibility?: 'all' | 'actionable' | 'operator_reconcile';
+    }): Promise<PlatformAuthFrozenCandidatePage>;
+    completeRun(runId: string): Promise<PlatformAuthMigrationRun>;
+    recordBackfill(input: {
+        readonly source: {
+            readonly provider: string;
+            readonly realm: string;
+            readonly subject: string;
+        };
+        readonly principalId: string;
+        readonly verifiedEmail?: string;
+        readonly runId?: string;
+    }): Promise<'backfilled' | 'already_backfilled'>;
+    claimImport(input: PlatformAuthImportInput, options?: {
+        readonly terminalRetry?: 'explicit_operator_reconcile';
+    }): Promise<PlatformAuthImportLease>;
+    finishImport(lease: PlatformAuthImportLease, result: {
+        readonly state: 'pending' | 'reconcile_required' | 'linked' | 'blocked' | 'failed';
+        readonly remoteUserId?: string;
+        readonly retryAt?: string;
+    }): Promise<{
+        readonly state: 'pending' | 'reconcile_required' | 'linked' | 'blocked' | 'failed';
+    }>;
+}
+//# sourceMappingURL=platform-auth-migration-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-migration-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-migration-postgres.d.ts","sourceRoot":"","sources":["../src/platform-auth-migration-postgres.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAE5B,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAGL,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAEnC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,YAAY,EACV,2BAA2B,EAC3B,+BAA+B,EAC/B,wBAAwB,EACxB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,4CAA4C,CAAC;AAEpD,6GAA6G;AAC7G,qBAAa,kCAAmC,YAAW,0BAA0B;;gBAOjF,IAAI,EAAE,yBAAyB,GAAG;QAChC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,yBAAyB,GAAG;YAAE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;SAAE,CAAC,CAAC;KAC/E;IAMH,SAAS,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIlF,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,2BAA2B,EAAE,CAAC;IAIpF,wBAAwB,CACtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,YAAY,GAAG,oBAAoB,CAAC;KACpE,GACA,OAAO,CAAC,+BAA+B,CAAC;IAI3C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIvD,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;SAC1B,CAAC;QACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,YAAY,GAAG,oBAAoB,CAAC;IAkO1C,WAAW,CACf,KAAK,EAAE,uBAAuB,EAC9B,OAAO,GAAE;QAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAA;KAAO,GACvE,OAAO,CAAC,uBAAuB,CAAC;IAwL7B,YAAY,CAChB,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE;QACN,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;QACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,GACA,OAAO,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;KACpF,CAAC;CA4EH"}