@opengeni/db 3.4.0-canary.2 → 3.6.0

package/dist/managed-auth-session-sets.d.ts

@@ -0,0 +1,145 @@
+import { type ManagedAuthLoginTransaction as ManagedAuthLoginTransactionType, type ManagedAuthLogoutAllReceipt as ManagedAuthLogoutAllReceiptType, type ManagedAuthSessionSetMode, type ManagedAuthSessionSetProjection as ManagedAuthSessionSetProjectionType } from "@opengeni/contracts/managed-auth-session-sets";
+import type { Database } from "./database.js";
+export type ManagedAuthDatabaseProjection = Omit<ManagedAuthSessionSetProjectionType, "csrfToken">;
+export type ManagedAuthSelectedSession = {
+    slotId: string;
+    authSessionId: string;
+    authUserId: string;
+    token: string;
+    email: string;
+    name: string;
+    emailVerified: boolean;
+};
+export type ManagedAuthInternalSlot = ManagedAuthSelectedSession;
+export type ManagedAuthAdoptedSessionSnapshot = {
+    authorityHash: string;
+    actorEpoch: string;
+    selected: ManagedAuthSelectedSession | null;
+};
+export declare class ManagedAuthSessionSetGenerationConflictError extends Error {
+    readonly name = "ManagedAuthSessionSetGenerationConflictError";
+    readonly code = "generation_conflict";
+    constructor();
+}
+export declare class ManagedAuthSessionSetOperationReuseError extends Error {
+    readonly name = "ManagedAuthSessionSetOperationReuseError";
+    constructor();
+}
+export declare class ManagedAuthSessionSetAuthorityError extends Error {
+    readonly name = "ManagedAuthSessionSetAuthorityError";
+}
+export declare class ManagedAuthLoginSlotUnavailableError extends Error {
+    readonly name = "ManagedAuthLoginSlotUnavailableError";
+}
+export declare class ManagedAuthLoginSlotLimitError extends Error {
+    readonly name = "ManagedAuthLoginSlotLimitError";
+}
+export declare class ManagedAuthLoginSlotAlreadyExistsError extends Error {
+    readonly name = "ManagedAuthLoginSlotAlreadyExistsError";
+    readonly code = "slot_already_exists";
+}
+export declare class ManagedAuthActorMutationInFlightError extends Error {
+    readonly name = "ManagedAuthActorMutationInFlightError";
+    readonly code = "actor_mutation_in_flight";
+}
+export declare class ManagedAuthLoginTransactionRateLimitError extends Error {
+    readonly name = "ManagedAuthLoginTransactionRateLimitError";
+    readonly code = "login_transaction_rate_limited";
+}
+export declare function getManagedAuthSessionSetAuthorityState(db: Database, authorityHash: string): Promise<"absent" | "active" | "retired">;
+export declare function getManagedAuthSessionSetSnapshot(db: Database, input: {
+    authorityHash: string;
+    mode: ManagedAuthSessionSetMode;
+    includeInternal?: boolean;
+    allowRecovery?: boolean;
+    readOnly?: boolean;
+}): Promise<{
+    projection: ManagedAuthDatabaseProjection;
+    selected: ManagedAuthSelectedSession | null;
+    internalSlots: ManagedAuthInternalSlot[];
+} | null>;
+export declare function bootstrapManagedAuthSessionSet(db: Database, input: {
+    authorityHash: string;
+    csrfHash: string;
+    authSessionId: string | null;
+    mode: ManagedAuthSessionSetMode;
+    operationId: string;
+    requestDigest: string;
+    expectedGeneration: string;
+    expectedActorEpoch: string;
+}): Promise<ManagedAuthDatabaseProjection>;
+export declare function beginManagedAuthLoginTransaction(db: Database, input: {
+    authorityHash: string;
+    csrfHash: string;
+    rateScopeHash?: string;
+    operationId: string;
+    requestDigest: string;
+    expectedGeneration: string;
+    expectedActorEpoch: string;
+    transactionId: string;
+    transactionSecretHash: string;
+    kind: "add" | "reauth";
+    targetSlotId: string | null;
+    returnIntentId: string | null;
+    returnPath: string | null;
+    expiresAt: Date;
+}): Promise<ManagedAuthLoginTransactionType>;
+export declare function completeManagedAuthLoginTransaction(db: Database, input: {
+    authorityHash: string;
+    csrfHash: string;
+    operationId: string;
+    requestDigest: string;
+    expectedGeneration: string;
+    expectedActorEpoch: string;
+    transactionId: string;
+    transactionSecretHash: string;
+    authSessionId: string;
+    mode: ManagedAuthSessionSetMode;
+}): Promise<{
+    projection: ManagedAuthDatabaseProjection;
+    returnIntent: string | null;
+}>;
+export declare function mutateManagedAuthSessionSet(db: Database, input: {
+    authorityHash: string;
+    csrfHash: string;
+    operationId: string;
+    requestDigest: string;
+    expectedGeneration: string;
+    expectedActorEpoch: string;
+    operationType: "cancel_transaction" | "select" | "logout_one" | "logout_all";
+    targetSlotId?: string | null;
+    replacementSlotId?: string | null;
+    transactionId?: string | null;
+    transactionSecretHash?: string | null;
+    mode: ManagedAuthSessionSetMode;
+}): Promise<ManagedAuthDatabaseProjection | ManagedAuthLogoutAllReceiptType>;
+export declare function getManagedAuthSessionSetOperationReceipt(db: Database, input: {
+    authorityHash: string;
+    operationId: string;
+    requestDigest: string;
+}): Promise<{
+    projection: ManagedAuthDatabaseProjection;
+    returnIntent: string | null;
+} | null>;
+export declare function acquireManagedAuthActorMutationLease(db: Database, input: {
+    authorityHash: string;
+    actorEpoch: string;
+    requestId: string;
+    leaseSeconds: number;
+}): Promise<Date>;
+export declare function releaseManagedAuthActorMutationLease(db: Database, input: {
+    authorityHash: string;
+    requestId: string;
+}): Promise<boolean>;
+/** Classify a legacy ambient session once it has entered session-set authority. */
+export declare function getManagedAuthAdoptedSessionSnapshot(db: Database, authSessionId: string): Promise<ManagedAuthAdoptedSessionSnapshot | null>;
+/** Exact post-handler proof that the request-owned actor lease is still live. */
+export declare function validateManagedAuthActorMutationLease(db: Database, input: {
+    authorityHash: string;
+    actorEpoch: string;
+    requestId: string;
+}): Promise<boolean>;
+/** Bounded cleanup for provider sessions left by a process death before adoption. */
+export declare function reapManagedAuthIsolatedSessions(db: Database, limit?: number): Promise<number>;
+/** Bounded, lease-aware retirement of expired installation/session-set authority. */
+export declare function reapExpiredManagedAuthSessionSets(db: Database, limit?: number): Promise<number>;

package/dist/managed-auth-session-sets.js

@@ -0,0 +1,50 @@
+import {
+  ManagedAuthActorMutationInFlightError,
+  ManagedAuthLoginSlotAlreadyExistsError,
+  ManagedAuthLoginSlotLimitError,
+  ManagedAuthLoginSlotUnavailableError,
+  ManagedAuthLoginTransactionRateLimitError,
+  ManagedAuthSessionSetAuthorityError,
+  ManagedAuthSessionSetGenerationConflictError,
+  ManagedAuthSessionSetOperationReuseError,
+  acquireManagedAuthActorMutationLease,
+  beginManagedAuthLoginTransaction,
+  bootstrapManagedAuthSessionSet,
+  completeManagedAuthLoginTransaction,
+  getManagedAuthAdoptedSessionSnapshot,
+  getManagedAuthSessionSetAuthorityState,
+  getManagedAuthSessionSetOperationReceipt,
+  getManagedAuthSessionSetSnapshot,
+  mutateManagedAuthSessionSet,
+  reapExpiredManagedAuthSessionSets,
+  reapManagedAuthIsolatedSessions,
+  releaseManagedAuthActorMutationLease,
+  validateManagedAuthActorMutationLease
+} from "./chunk-G3732M3T.js";
+import "./chunk-WW7AJ5IC.js";
+import "./chunk-UJ2EW3QI.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ManagedAuthActorMutationInFlightError,
+  ManagedAuthLoginSlotAlreadyExistsError,
+  ManagedAuthLoginSlotLimitError,
+  ManagedAuthLoginSlotUnavailableError,
+  ManagedAuthLoginTransactionRateLimitError,
+  ManagedAuthSessionSetAuthorityError,
+  ManagedAuthSessionSetGenerationConflictError,
+  ManagedAuthSessionSetOperationReuseError,
+  acquireManagedAuthActorMutationLease,
+  beginManagedAuthLoginTransaction,
+  bootstrapManagedAuthSessionSet,
+  completeManagedAuthLoginTransaction,
+  getManagedAuthAdoptedSessionSnapshot,
+  getManagedAuthSessionSetAuthorityState,
+  getManagedAuthSessionSetOperationReceipt,
+  getManagedAuthSessionSetSnapshot,
+  mutateManagedAuthSessionSet,
+  reapExpiredManagedAuthSessionSets,
+  reapManagedAuthIsolatedSessions,
+  releaseManagedAuthActorMutationLease,
+  validateManagedAuthActorMutationLease
+};
+//# sourceMappingURL=managed-auth-session-sets.js.map

package/dist/managed-auth-session-sets.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}