@raybase/openai-subscription 0.0.2 → 0.1.1

package/dist/provider.js

@@ -0,0 +1,361 @@
+import { createNotificationsRuntime, recordAudit, RaybaseInferenceProviderError } from "@raybase/core";
+import { openAISubscriptionScopeKey } from "./crypto.js";
+import { transitionOpenAISubscriptionHealth } from "./health.js";
+import { OpenAISubscriptionCredentialStore } from "./store.js";
+import { createOpenAISubscriptionTransportInternal, OpenAISubscriptionTransportHttpError } from "./transport.js";
+import { openaiSubscriptionProviderId } from "./types.js";
+const expirySkewMs = 60_000;
+export function createOpenAISubscriptionProviderFactory(options) {
+    return createOpenAISubscriptionProviderFactoryInternal(options);
+}
+export function createOpenAISubscriptionProviderFactoryForTesting(options, transportOptions) {
+    return createOpenAISubscriptionProviderFactoryInternal(options, transportOptions);
+}
+export function createOpenAISubscriptionProviderFactoryInternal(options, transportOptions) {
+    return async (context) => {
+        const secret = context.env.RAYBASE_OPENAI_SUBSCRIPTION_KEY;
+        if (!secret) {
+            throw new RaybaseInferenceProviderError({
+                code: "encryption_key_missing",
+                health: "reauth_required",
+                actionHref: "/admin/openai-subscription"
+            });
+        }
+        const scope = resolveOpenAISubscriptionCredentialScope(options, context);
+        const store = new OpenAISubscriptionCredentialStore(context.control, secret);
+        const transport = createOpenAISubscriptionTransportInternal(options, context.env, transportOptions);
+        return createProvider({
+            scope,
+            store,
+            transport,
+            onIncident: async (state, generation, incidentId) => {
+                const actionHref = "/admin/openai-subscription";
+                await recordAudit(context.control, {
+                    actor: context.principal,
+                    action: `openai-subscription.${state}`,
+                    target: { type: "openai_subscription_connection", id: scope.mode },
+                    metadata: { state, credentialMode: scope.mode, generation, actionHref },
+                    source: {
+                        surface: context.surface,
+                        requestId: context.requestId,
+                        moduleId: "openai-subscription",
+                        organizationId: scope.organizationId
+                    }
+                }).catch(() => undefined);
+                const currentUser = context.principal.kind === "user" ? context.principal.user : undefined;
+                const notifications = createNotificationsRuntime({
+                    env: context.env,
+                    config: context.config,
+                    notifications: { feed: { enabled: true } },
+                    db: context.control,
+                    currentUser,
+                    actor: { kind: "service", id: "openai-subscription" },
+                    source: { type: "openai_subscription_incident", id: incidentId }
+                });
+                await notifications.send({
+                    to: scope.mode === "user" ? [{ kind: "current-user" }] : [{ kind: "operator" }],
+                    title: state === "reauth_required"
+                        ? "Reconnect OpenAI subscription"
+                        : "Update OpenAI subscription module",
+                    body: state === "reauth_required"
+                        ? "The selected subscription credential needs to be reconnected."
+                        : "The pinned Codex compatibility protocol changed. Install a reviewed module update.",
+                    kind: `openai-subscription.${state}`,
+                    severity: "warning",
+                    target: { href: actionHref },
+                    channels: ["feed"],
+                    dedupeKey: `openai-subscription:${incidentId}`,
+                    metadata: { state, credentialMode: scope.mode, generation }
+                }).then(() => store.markIncidentNotified(incidentId)).catch(() => undefined);
+            }
+        });
+    };
+}
+export function resolveOpenAISubscriptionCredentialScope(options, context) {
+    const applicationScope = options.applicationScope?.trim() || context.config.appName;
+    const organizationId = context.organizationId ?? context.principal.organizationId ?? null;
+    const background = context.surface === "job" || context.surface === "scheduled" || context.surface === "maintenance";
+    if (background && options.background.strategy === "disabled") {
+        throw new RaybaseInferenceProviderError({ code: "background_credentials_disabled", health: "disconnected" });
+    }
+    if (options.credentialMode === "operator") {
+        if (background && options.background.strategy !== "run-as-operator") {
+            throw new RaybaseInferenceProviderError({ code: "background_scope_mismatch", health: "disconnected" });
+        }
+        return {
+            applicationScope,
+            organizationId,
+            mode: "operator",
+            subjectId: options.operatorSubjectId
+        };
+    }
+    if (options.credentialMode === "organization") {
+        if (!organizationId)
+            throw new RaybaseInferenceProviderError({ code: "organization_scope_missing", health: "disconnected" });
+        if (background && options.background.strategy !== "organization") {
+            throw new RaybaseInferenceProviderError({ code: "background_scope_mismatch", health: "disconnected" });
+        }
+        return { applicationScope, organizationId, mode: "organization", subjectId: null };
+    }
+    if (context.principal.kind !== "user") {
+        throw new RaybaseInferenceProviderError({ code: "user_scope_missing", health: "disconnected" });
+    }
+    if (background && options.background.strategy !== "run-as-user") {
+        throw new RaybaseInferenceProviderError({ code: "background_scope_mismatch", health: "disconnected" });
+    }
+    const subjectId = context.principal.membershipId
+        ?? context.principal.user.membershipId
+        ?? context.principal.user.id;
+    if (!subjectId)
+        throw new RaybaseInferenceProviderError({ code: "user_scope_missing", health: "disconnected" });
+    return { applicationScope, organizationId, mode: "user", subjectId };
+}
+function createProvider(input) {
+    const load = async (signal) => {
+        const credential = await input.store.read(input.scope);
+        if (!credential) {
+            throw new RaybaseInferenceProviderError({
+                code: "credential_missing",
+                health: "reauth_required",
+                actionHref: "/admin/openai-subscription"
+            });
+        }
+        if (new Date(credential.tokens.expiresAt).getTime() - Date.now() <= expirySkewMs) {
+            await refresh(credential.tokens, credential.revision, credential.generation, signal);
+            const refreshed = await input.store.read(input.scope);
+            if (!refreshed) {
+                throw new RaybaseInferenceProviderError({
+                    code: "credential_missing",
+                    health: "reauth_required",
+                    actionHref: "/admin/openai-subscription"
+                });
+            }
+            return refreshed;
+        }
+        return credential;
+    };
+    const refresh = async (current, revision, generation, signal) => {
+        throwIfAborted(signal);
+        const scopeKey = await openAISubscriptionScopeKey(input.scope);
+        const sharedRefresh = input.store.refreshSingleFlight(scopeKey, revision, async () => {
+            const leaseOwner = `refresh_${crypto.randomUUID()}`;
+            const acquired = await input.store.acquireRefreshLease(input.scope, revision, leaseOwner);
+            if (!acquired) {
+                const updated = await input.store.waitForRevisionChange(input.scope, revision);
+                if (!updated) {
+                    throw new RaybaseInferenceProviderError({
+                        code: "credential_missing",
+                        health: "reauth_required",
+                        actionHref: "/admin/openai-subscription"
+                    });
+                }
+                if (updated.revision === revision) {
+                    throw new RaybaseInferenceProviderError({
+                        code: "refresh_in_progress",
+                        health: "rate_limited",
+                        retryAt: new Date(Date.now() + 1_000).toISOString(),
+                        actionHref: "/admin/openai-subscription"
+                    });
+                }
+                return updated.tokens;
+            }
+            try {
+                const rotated = await input.transport.refresh(current.refreshToken);
+                // The transport builds its result from the refresh answer alone, and
+                // the answer is allowed to say less than the connection knows: no
+                // rotated refresh_token means "keep yours", and no id_token means the
+                // identity projection (accountId, workspaceId, plan) comes back empty.
+                // Identity is established at connect and bound to the refresh-token
+                // lineage — a refresh cannot move the credential to another account,
+                // and a genuine identity change arrives as a reconnect under a new
+                // generation. So absence in the answer is omission, never removal:
+                // carry the held values forward, letting a fresh id_token's claims win
+                // (a plan can legitimately change mid-connection). Dropping them here
+                // is silent, delayed data loss — accountId rides every Codex request
+                // as the chatgpt-account-id header, and the next call after the wipe
+                // fails upstream far from the refresh that caused it.
+                const next = {
+                    ...rotated,
+                    refreshToken: rotated.refreshToken || current.refreshToken,
+                    ...(rotated.accountId ?? current.accountId
+                        ? { accountId: rotated.accountId ?? current.accountId }
+                        : {}),
+                    ...(rotated.workspaceId ?? current.workspaceId
+                        ? { workspaceId: rotated.workspaceId ?? current.workspaceId }
+                        : {}),
+                    ...(rotated.plan ?? current.plan ? { plan: rotated.plan ?? current.plan } : {})
+                };
+                await input.store.write(input.scope, next, { expectedRevision: revision, generation });
+                return next;
+            }
+            catch (error) {
+                if (error instanceof OpenAISubscriptionTransportHttpError && error.code === "invalid_grant") {
+                    await transitionOpenAISubscriptionHealth(input, "reauth_required", generation);
+                    throw new RaybaseInferenceProviderError({
+                        code: "invalid_grant",
+                        health: "reauth_required",
+                        actionHref: "/admin/openai-subscription"
+                    });
+                }
+                throw await mapTransportError(error, generation, input);
+            }
+            finally {
+                await input.store.releaseRefreshLease(input.scope, revision, leaseOwner);
+            }
+        });
+        // Refreshes are shared by credential revision. A caller may stop waiting
+        // without cancelling work that another invocation already depends on.
+        return awaitWithCallerAbort(sharedRefresh, signal);
+    };
+    const withAuthRetry = async (run, signal) => {
+        const credential = await load(signal);
+        try {
+            return await run(credential.tokens);
+        }
+        catch (error) {
+            if (!(error instanceof OpenAISubscriptionTransportHttpError) || error.status !== 401) {
+                throw await mapTransportError(error, credential.generation, input);
+            }
+            const rotated = await refresh(credential.tokens, credential.revision, credential.generation, signal);
+            try {
+                return await run(rotated);
+            }
+            catch (retryError) {
+                if (retryError instanceof OpenAISubscriptionTransportHttpError && retryError.status === 401) {
+                    await transitionOpenAISubscriptionHealth(input, "reauth_required", credential.generation);
+                    throw new RaybaseInferenceProviderError({
+                        code: "unauthorized_after_refresh",
+                        health: "reauth_required",
+                        actionHref: "/admin/openai-subscription"
+                    });
+                }
+                throw await mapTransportError(retryError, credential.generation, input);
+            }
+        }
+    };
+    return {
+        id: openaiSubscriptionProviderId,
+        async chat(request, context) {
+            const result = await withAuthRetry((tokens) => input.transport.chat(tokens, request, context.signal), context.signal);
+            const credential = await input.store.read(input.scope);
+            await transitionOpenAISubscriptionHealth(input, "connected", credential?.generation ?? 0, {
+                lastSuccessAt: new Date().toISOString(),
+                accountId: credential?.tokens.accountId,
+                workspaceId: credential?.tokens.workspaceId,
+                plan: credential?.tokens.plan
+            });
+            return { ...result, provider: { ...result.provider, id: openaiSubscriptionProviderId } };
+        },
+        async chatStream(request, context) {
+            const source = await withAuthRetry((tokens) => input.transport.chatStream(tokens, request, context.signal), context.signal);
+            return streamWithHealth(source, input);
+        }
+    };
+}
+function abortedProviderError() {
+    return new RaybaseInferenceProviderError({
+        code: "aborted",
+        message: "OpenAI subscription request was cancelled."
+    });
+}
+function throwIfAborted(signal) {
+    if (signal?.aborted)
+        throw abortedProviderError();
+}
+async function awaitWithCallerAbort(operation, signal) {
+    if (!signal)
+        return operation;
+    throwIfAborted(signal);
+    let onAbort;
+    const aborted = new Promise((_resolve, reject) => {
+        onAbort = () => reject(abortedProviderError());
+        signal.addEventListener("abort", onAbort, { once: true });
+    });
+    try {
+        return await Promise.race([operation, aborted]);
+    }
+    finally {
+        if (onAbort)
+            signal.removeEventListener("abort", onAbort);
+    }
+}
+async function* streamWithHealth(source, input) {
+    let emitted = false;
+    try {
+        for await (const event of source) {
+            if (event.type === "text-delta" || event.type === "tool-call")
+                emitted = true;
+            yield event;
+        }
+        const credential = await input.store.read(input.scope);
+        await transitionOpenAISubscriptionHealth(input, "connected", credential?.generation ?? 0, {
+            lastSuccessAt: new Date().toISOString(),
+            accountId: credential?.tokens.accountId,
+            workspaceId: credential?.tokens.workspaceId,
+            plan: credential?.tokens.plan
+        });
+    }
+    catch (error) {
+        const credential = await input.store.read(input.scope);
+        const mapped = await mapTransportError(error, credential?.generation ?? 0, input);
+        if (emitted && mapped instanceof RaybaseInferenceProviderError) {
+            throw new RaybaseInferenceProviderError({
+                code: mapped.code,
+                health: mapped.health,
+                retryAt: mapped.retryAt,
+                actionHref: mapped.actionHref,
+                message: "The OpenAI subscription stream ended safely after partial output."
+            });
+        }
+        throw mapped;
+    }
+}
+async function mapTransportError(error, generation, input) {
+    if (error instanceof OpenAISubscriptionTransportHttpError && error.status === 429) {
+        await transitionOpenAISubscriptionHealth(input, "rate_limited", generation, { retryAt: error.retryAt });
+        return new RaybaseInferenceProviderError({
+            code: "rate_limited",
+            health: "rate_limited",
+            retryAt: error.retryAt,
+            actionHref: "/admin/openai-subscription"
+        });
+    }
+    if (error instanceof OpenAISubscriptionTransportHttpError && error.code === "egress_forbidden") {
+        await transitionOpenAISubscriptionHealth(input, "disconnected", generation);
+        return new RaybaseInferenceProviderError({
+            code: "codex_egress_forbidden",
+            health: "disconnected",
+            actionHref: "/admin/openai-subscription",
+            message: "Cloudflare's front door blocked this request before it reached the Codex API, so the credential is not the problem. This is the Codex egress path: check that no Cloudflare hop headers (cf-worker, cf-connecting-ip, cf-visitor) are reaching chatgpt.com."
+        });
+    }
+    if (error instanceof OpenAISubscriptionTransportHttpError && error.code === "account_forbidden") {
+        await transitionOpenAISubscriptionHealth(input, "reauth_required", generation);
+        return new RaybaseInferenceProviderError({
+            code: "codex_account_forbidden",
+            health: "reauth_required",
+            actionHref: "/admin/openai-subscription",
+            message: "The Codex API refused this account. Reconnect the subscription, or check that the linked plan still covers Codex."
+        });
+    }
+    if (error instanceof OpenAISubscriptionTransportHttpError && error.code === "invalid_function_parameters") {
+        // Name the tool. The API tells us exactly which one, as a path into the
+        // request the app itself built (`tools[7].parameters.draft`), and a
+        // developer who is told only "one of them" has to bisect sixteen schemas by
+        // hand. The path holds no user or account data.
+        return new RaybaseInferenceProviderError({
+            code: "invalid_function_parameters",
+            message: error.param
+                ? `The AI tool at ${error.param} is not a valid strict JSON Schema, so the provider refused the whole request and named no tool. Every object must set additionalProperties:false, list every property in required (optional ones as a null union), and drop validation keywords the strict subset does not support.`
+                : "One of the app's AI tools has an invalid strict JSON Schema."
+        });
+    }
+    if (error instanceof RaybaseInferenceProviderError && error.health === "protocol_update_required") {
+        await transitionOpenAISubscriptionHealth(input, "protocol_update_required", generation);
+        return error;
+    }
+    if (error instanceof RaybaseInferenceProviderError)
+        return error;
+    return new RaybaseInferenceProviderError({ code: "transport_error" });
+}
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,WAAW,EACX,6BAA6B,EAI9B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,kCAAkC,EAEnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAEL,yCAAyC,EACzC,oCAAoC,EAErC,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,MAAM,UAAU,uCAAuC,CACrD,OAAwC;IAExC,OAAO,+CAA+C,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iDAAiD,CAC/D,OAAwC,EACxC,gBAAoD;IAEpD,OAAO,+CAA+C,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,+CAA+C,CAC7D,OAAwC,EACxC,gBAAqD;IAErD,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,6BAA6B,CAAC;gBACtC,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,4BAA4B;aACzC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,wCAAwC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,iCAAiC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,yCAAyC,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACpG,OAAO,cAAc,CAAC;YACpB,KAAK;YACL,KAAK;YACL,SAAS;YACT,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;gBAClD,MAAM,UAAU,GAAG,4BAA4B,CAAC;gBAChD,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE;oBACjC,KAAK,EAAE,OAAO,CAAC,SAAS;oBACxB,MAAM,EAAE,uBAAuB,KAAK,EAAE;oBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE;oBAClE,QAAQ,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE;oBACvE,MAAM,EAAE;wBACN,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,QAAQ,EAAE,qBAAqB;wBAC/B,cAAc,EAAE,KAAK,CAAC,cAAc;qBACrC;iBACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3F,MAAM,aAAa,GAAG,0BAA0B,CAAC;oBAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;oBAC1C,EAAE,EAAE,OAAO,CAAC,OAAO;oBACnB,WAAW;oBACX,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,qBAAqB,EAAE;oBACrD,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,EAAE,UAAU,EAAE;iBACjE,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,IAAI,CAAC;oBACvB,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;oBAC/E,KAAK,EAAE,KAAK,KAAK,iBAAiB;wBAChC,CAAC,CAAC,+BAA+B;wBACjC,CAAC,CAAC,mCAAmC;oBACvC,IAAI,EAAE,KAAK,KAAK,iBAAiB;wBAC/B,CAAC,CAAC,+DAA+D;wBACjE,CAAC,CAAC,oFAAoF;oBACxF,IAAI,EAAE,uBAAuB,KAAK,EAAE;oBACpC,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;oBAC5B,QAAQ,EAAE,CAAC,MAAM,CAAC;oBAClB,SAAS,EAAE,uBAAuB,UAAU,EAAE;oBAC9C,QAAQ,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE;iBAC5D,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/E,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,OAAwC,EACxC,OAGC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;IACpF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IAC1F,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,CAAC;IACrH,IAAI,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAC1C,IAAI,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACpE,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO;YACL,gBAAgB;YAChB,cAAc;YACd,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,OAAO,CAAC,iBAAkB;SACtC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7H,IAAI,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;YACjE,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QAChE,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY;WAC3C,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY;WACnC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/B,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAChH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACvE,CAAC;AAMD,SAAS,cAAc,CAAC,KAAsC;IAC5D,MAAM,IAAI,GAAG,KAAK,EAChB,MAAoB,EACiE,EAAE;QACvF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,6BAA6B,CAAC;gBACtC,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,4BAA4B;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE,CAAC;YACjF,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,6BAA6B,CAAC;oBACtC,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,iBAAiB;oBACzB,UAAU,EAAE,4BAA4B;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EACnB,OAAiC,EACjC,QAAgB,EAChB,UAAkB,EAClB,MAAoB,EACe,EAAE;QACrC,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,UAAU,GAAG,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,6BAA6B,CAAC;wBACtC,IAAI,EAAE,oBAAoB;wBAC1B,MAAM,EAAE,iBAAiB;wBACzB,UAAU,EAAE,4BAA4B;qBACzC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAClC,MAAM,IAAI,6BAA6B,CAAC;wBACtC,IAAI,EAAE,qBAAqB;wBAC3B,MAAM,EAAE,cAAc;wBACtB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;wBACnD,UAAU,EAAE,4BAA4B;qBACzC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,OAAO,CAAC,MAAM,CAAC;YACxB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACpE,qEAAqE;gBACrE,kEAAkE;gBAClE,sEAAsE;gBACtE,uEAAuE;gBACvE,oEAAoE;gBACpE,qEAAqE;gBACrE,mEAAmE;gBACnE,mEAAmE;gBACnE,uEAAuE;gBACvE,sEAAsE;gBACtE,qEAAqE;gBACrE,qEAAqE;gBACrE,sDAAsD;gBACtD,MAAM,IAAI,GAAG;oBACX,GAAG,OAAO;oBACV,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;oBAC1D,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;wBACxC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE;wBACvD,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;wBAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE;wBAC7D,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF,CAAC;gBACF,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACvF,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oCAAoC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC5F,MAAM,kCAAkC,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;oBAC/E,MAAM,IAAI,6BAA6B,CAAC;wBACtC,IAAI,EAAE,eAAe;wBACrB,MAAM,EAAE,iBAAiB;wBACzB,UAAU,EAAE,4BAA4B;qBACzC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1D,CAAC;oBAAS,CAAC;gBACT,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,EACzB,GAAqD,EACrD,MAAoB,EACR,EAAE;QACd,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,oCAAoC,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrF,MAAM,MAAM,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,UAAU,EACrB,MAAM,CACP,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAI,UAAU,YAAY,oCAAoC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5F,MAAM,kCAAkC,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC1F,MAAM,IAAI,6BAA6B,CAAC;wBACtC,IAAI,EAAE,4BAA4B;wBAClC,MAAM,EAAE,iBAAiB;wBACzB,UAAU,EAAE,4BAA4B;qBACzC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;YACzB,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EACjE,OAAO,CAAC,MAAM,CACf,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,kCAAkC,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC,EAAE;gBACxF,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACvC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS;gBACvC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC3C,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;aAC9B,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,4BAA4B,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO;YAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EACvE,OAAO,CAAC,MAAM,CACf,CAAC;YACF,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,IAAI,6BAA6B,CAAC;QACvC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,4CAA4C;KACtD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,oBAAoB,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,SAAqB,EACrB,MAAoB;IAEpB,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,OAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,gBAAgB,CAC9B,MAAqE,EACrE,KAA2C;IAE3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC9E,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,kCAAkC,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC,EAAE;YACxF,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS;YACvC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW;YAC3C,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAClF,IAAI,OAAO,IAAI,MAAM,YAAY,6BAA6B,EAAE,CAAC;YAC/D,MAAM,IAAI,6BAA6B,CAAC;gBACtC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,mEAAmE;aAC7E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAc,EACd,UAAkB,EAClB,KAA2C;IAE3C,IAAI,KAAK,YAAY,oCAAoC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,MAAM,kCAAkC,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,OAAO,IAAI,6BAA6B,CAAC;YACvC,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,4BAA4B;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,oCAAoC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC/F,MAAM,kCAAkC,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAC5E,OAAO,IAAI,6BAA6B,CAAC;YACvC,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,4BAA4B;YACxC,OAAO,EAAE,6PAA6P;SACvQ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,oCAAoC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAChG,MAAM,kCAAkC,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAC/E,OAAO,IAAI,6BAA6B,CAAC;YACvC,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,4BAA4B;YACxC,OAAO,EAAE,mHAAmH;SAC7H,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,oCAAoC,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAC1G,wEAAwE;QACxE,oEAAoE;QACpE,4EAA4E;QAC5E,gDAAgD;QAChD,OAAO,IAAI,6BAA6B,CAAC;YACvC,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,KAAK,CAAC,KAAK;gBAClB,CAAC,CAAC,kBAAkB,KAAK,CAAC,KAAK,sRAAsR;gBACrT,CAAC,CAAC,8DAA8D;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,6BAA6B,IAAI,KAAK,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAClG,MAAM,kCAAkC,CAAC,KAAK,EAAE,0BAA0B,EAAE,UAAU,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,YAAY,6BAA6B;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,IAAI,6BAA6B,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/store.d.ts

@@ -0,0 +1,51 @@
+import { type SqlExecutor } from "@raybase/core";
+import type { OpenAISubscriptionCredentialScope, OpenAISubscriptionPendingDevice, OpenAISubscriptionSafeStatus, OpenAISubscriptionTokens } from "./types.js";
+export declare class OpenAISubscriptionCredentialStore {
+    #private;
+    private readonly control;
+    private readonly secret;
+    constructor(control: SqlExecutor, secret: string);
+    read(scope: OpenAISubscriptionCredentialScope): Promise<{
+        tokens: OpenAISubscriptionTokens;
+        revision: number;
+        generation: number;
+    } | null>;
+    write(scope: OpenAISubscriptionCredentialScope, tokens: OpenAISubscriptionTokens, options?: {
+        expectedRevision?: number;
+        generation?: number;
+    }): Promise<{
+        revision: number;
+        generation: number;
+    }>;
+    acquireRefreshLease(scope: OpenAISubscriptionCredentialScope, revision: number, owner: string, leaseMs?: number): Promise<boolean>;
+    releaseRefreshLease(scope: OpenAISubscriptionCredentialScope, revision: number, owner: string): Promise<void>;
+    waitForRevisionChange(scope: OpenAISubscriptionCredentialScope, revision: number, options?: {
+        attempts?: number;
+        intervalMs?: number;
+    }): Promise<{
+        tokens: OpenAISubscriptionTokens;
+        revision: number;
+        generation: number;
+    } | null>;
+    disconnect(scope: OpenAISubscriptionCredentialScope): Promise<number>;
+    writePending(scope: OpenAISubscriptionCredentialScope, pending: OpenAISubscriptionPendingDevice): Promise<void>;
+    commitPendingPoll(scope: OpenAISubscriptionCredentialScope, pending: OpenAISubscriptionPendingDevice, leaseOwner: string): Promise<boolean>;
+    commitPendingAuthorization(scope: OpenAISubscriptionCredentialScope, pending: OpenAISubscriptionPendingDevice, leaseOwner: string, tokens: OpenAISubscriptionTokens): Promise<boolean>;
+    readPending(scope: OpenAISubscriptionCredentialScope): Promise<OpenAISubscriptionPendingDevice | null>;
+    deletePending(scope: OpenAISubscriptionCredentialScope, expected?: {
+        generation?: number;
+        leaseOwner?: string;
+    }): Promise<void>;
+    acquirePendingPollLease(scope: OpenAISubscriptionCredentialScope, generation: number, owner: string, leaseMs?: number): Promise<boolean>;
+    releasePendingPollLease(scope: OpenAISubscriptionCredentialScope, generation: number, owner: string): Promise<void>;
+    status(scope: OpenAISubscriptionCredentialScope): Promise<OpenAISubscriptionSafeStatus>;
+    writeStatus(scope: OpenAISubscriptionCredentialScope, status: OpenAISubscriptionSafeStatus): Promise<void>;
+    openIncident(scope: OpenAISubscriptionCredentialScope, generation: number, kind: "reauth_required" | "protocol_update_required"): Promise<{
+        created: boolean;
+        id: string;
+    }>;
+    markIncidentNotified(id: string): Promise<void>;
+    resolveIncidents(scope: OpenAISubscriptionCredentialScope): Promise<void>;
+    refreshSingleFlight(scopeKey: string, revision: number, refresh: () => Promise<OpenAISubscriptionTokens>): Promise<OpenAISubscriptionTokens>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAatE,OAAO,KAAK,EACV,iCAAiC,EACjC,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAWpB,qBAAa,iCAAiC;;IAI1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM;IAG3B,IAAI,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,wBAAwB,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAmB1I,KAAK,CACT,KAAK,EAAE,iCAAiC,EACxC,MAAM,EAAE,wBAAwB,EAChC,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAC/D,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAsC9C,mBAAmB,CACvB,KAAK,EAAE,iCAAiC,EACxC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,SAAS,GACf,OAAO,CAAC,OAAO,CAAC;IAmBb,mBAAmB,CACvB,KAAK,EAAE,iCAAiC,EACxC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAUV,qBAAqB,CACzB,KAAK,EAAE,iCAAiC,EACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GACvD,OAAO,CAAC;QAAE,MAAM,EAAE,wBAAwB,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAWvF,UAAU,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBrE,YAAY,CAAC,KAAK,EAAE,iCAAiC,EAAE,OAAO,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/G,iBAAiB,CACrB,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,+BAA+B,EACxC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC;IAiCb,0BAA0B,CAC9B,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,+BAA+B,EACxC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,OAAO,CAAC;IA+Fb,WAAW,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;IAetG,aAAa,CACjB,KAAK,EAAE,iCAAiC,EACxC,QAAQ,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAC1D,OAAO,CAAC,IAAI,CAAC;IAkBV,uBAAuB,CAC3B,KAAK,EAAE,iCAAiC,EACxC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,SAAS,GACf,OAAO,CAAC,OAAO,CAAC;IAmBb,uBAAuB,CAC3B,KAAK,EAAE,iCAAiC,EACxC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAUV,MAAM,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAkCvF,WAAW,CAAC,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1G,YAAY,CAChB,KAAK,EAAE,iCAAiC,EACxC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,iBAAiB,GAAG,0BAA0B,GACnD,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IA4BtC,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/C,gBAAgB,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC;IAS/E,mBAAmB,CACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,GAC/C,OAAO,CAAC,wBAAwB,CAAC;CAQrC"}