@riffdb/better-auth 0.2.0 → 0.2.1

package/dist/generated/client.d.ts

@@ -1,7 +1,24 @@
-export declare const QUERY_MODULE_HASH: "18cfd99921406e15722f3ac45867d3fbe0cebd4f2ecdd86c0ba099547c58cd91";
+export declare const QUERY_MODULE_HASH: "8dff3a38f6c0a915d7653e7571a2ef5795a89b452990d705f38fe0ac93b5ad9a";
 export declare const CONTRACT_LINEAGE: "RiffDBBetterAuthCore";
 export declare const CONTRACT_VERSION: 1;
-export declare const CONTRACT_BUNDLE_HASH: "11c5a37724f40b92bf10b195e6a66ef30037f73f3df79a98e4c4ed1076883d2e";
+export declare const CONTRACT_BUNDLE_HASH: "74fd255eefcf04f0b054dbb6c4a0bed43a7312d82f7755687c9229ee3206ddfc";
+export interface ContractDriverIdentity {
+    readonly contractLineage: typeof CONTRACT_LINEAGE;
+    readonly contractVersion: bigint;
+    readonly contractBundleHash: typeof CONTRACT_BUNDLE_HASH;
+    readonly role: string;
+    readonly database?: string;
+    readonly applicationManifestHash?: string;
+    readonly operationCatalogHash?: string;
+    readonly roleDefinitionHash?: string;
+    readonly remoteIdentityHash?: string;
+}
+export declare const CONTRACT_DRIVER_IDENTITY: {
+    readonly contractLineage: "RiffDBBetterAuthCore";
+    readonly contractVersion: bigint;
+    readonly contractBundleHash: "74fd255eefcf04f0b054dbb6c4a0bed43a7312d82f7755687c9229ee3206ddfc";
+};
+export declare function driverIdentity(role: string, database?: string): ContractDriverIdentity;
 export declare const APPLICATION_ERROR_REGISTRY: {
     readonly "RDB-APP-0001": readonly ["application request is structurally invalid", "input", "correct_request", readonly ["correct_input"]];
     readonly "RDB-INPUT-0101": readonly ["application input is invalid", "input", "correct_request", readonly ["correct_input"]];
@@ -248,7 +265,7 @@ export type VectorModelVersionResult = {
     readonly items: ReadonlyArray<VectorModelVersionItem>;
     readonly observedFrontier: bigint | null;
 };
-export declare const ADMIN_USERS_ALL_EMAIL_ASC_QUERY_PLAN_HASH: "ea5056df116418329d03bc536a195247148360378e11444c10e7ca37df54c547";
+export declare const ADMIN_USERS_ALL_EMAIL_ASC_QUERY_PLAN_HASH: "056edbaabe43e1dc95f1f6af9838747f54d927a90d5bc9f2be045ae266d107d3";
 export interface AdminUsersAllEmailAscParams {
     readonly organization_id: string;
     readonly minimum_email: string;
@@ -283,7 +300,7 @@ export type AdminUsersAllEmailAscResult = AdminUsersAllEmailAscFound;
 export declare function isAdminUsersAllEmailAscFound(value: AdminUsersAllEmailAscResult): value is AdminUsersAllEmailAscFound;
 export declare function unwrapAdminUsersAllEmailAscFound(value: AdminUsersAllEmailAscResult | TypedQueryResult<AdminUsersAllEmailAscResult>): AdminUsersAllEmailAscFound;
 export declare function adminUsersAllEmailAsc(parameters: AdminUsersAllEmailAscParams): NamedQueryRequest<AdminUsersAllEmailAscParams, AdminUsersAllEmailAscResult>;
-export declare const ADMIN_USERS_CONTAINS_ASC_QUERY_PLAN_HASH: "56132d4a48f43731e36b69e0fe922d67491bc0ad611375fbc3d372a840b739df";
+export declare const ADMIN_USERS_CONTAINS_ASC_QUERY_PLAN_HASH: "b64d213477dd2275d98422a6c3460b0cae932dd96255fe9d565005e8afa37fc4";
 export interface AdminUsersContainsAscParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -318,7 +335,7 @@ export type AdminUsersContainsAscResult = AdminUsersContainsAscFound;
 export declare function isAdminUsersContainsAscFound(value: AdminUsersContainsAscResult): value is AdminUsersContainsAscFound;
 export declare function unwrapAdminUsersContainsAscFound(value: AdminUsersContainsAscResult | TypedQueryResult<AdminUsersContainsAscResult>): AdminUsersContainsAscFound;
 export declare function adminUsersContainsAsc(parameters: AdminUsersContainsAscParams): NamedQueryRequest<AdminUsersContainsAscParams, AdminUsersContainsAscResult>;
-export declare const ADMIN_USERS_CONTAINS_DESC_QUERY_PLAN_HASH: "470b720e68aa2261d902378ebc7fb1ce5be51582761672da7ecb87bece977f0f";
+export declare const ADMIN_USERS_CONTAINS_DESC_QUERY_PLAN_HASH: "57aba8cf311c301e985adc324f97b4d963a38e6efa6058a82e248854d75f2f05";
 export interface AdminUsersContainsDescParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -353,7 +370,7 @@ export type AdminUsersContainsDescResult = AdminUsersContainsDescFound;
 export declare function isAdminUsersContainsDescFound(value: AdminUsersContainsDescResult): value is AdminUsersContainsDescFound;
 export declare function unwrapAdminUsersContainsDescFound(value: AdminUsersContainsDescResult | TypedQueryResult<AdminUsersContainsDescResult>): AdminUsersContainsDescFound;
 export declare function adminUsersContainsDesc(parameters: AdminUsersContainsDescParams): NamedQueryRequest<AdminUsersContainsDescParams, AdminUsersContainsDescResult>;
-export declare const ADMIN_USERS_EMAIL_CONTAINS_CREATED_DESC_QUERY_PLAN_HASH: "51def4488ff2a35fee0c5d7f267daaca11e60a03521be0fdaf8923c5486c5485";
+export declare const ADMIN_USERS_EMAIL_CONTAINS_CREATED_DESC_QUERY_PLAN_HASH: "7aede9eda624f5b4eb4280ca7b8a1421466ce30091177c9abab4f125987eb4ff";
 export interface AdminUsersEmailContainsCreatedDescParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -388,7 +405,7 @@ export type AdminUsersEmailContainsCreatedDescResult = AdminUsersEmailContainsCr
 export declare function isAdminUsersEmailContainsCreatedDescFound(value: AdminUsersEmailContainsCreatedDescResult): value is AdminUsersEmailContainsCreatedDescFound;
 export declare function unwrapAdminUsersEmailContainsCreatedDescFound(value: AdminUsersEmailContainsCreatedDescResult | TypedQueryResult<AdminUsersEmailContainsCreatedDescResult>): AdminUsersEmailContainsCreatedDescFound;
 export declare function adminUsersEmailContainsCreatedDesc(parameters: AdminUsersEmailContainsCreatedDescParams): NamedQueryRequest<AdminUsersEmailContainsCreatedDescParams, AdminUsersEmailContainsCreatedDescResult>;
-export declare const ADMIN_USERS_EMAIL_CONTAINS_IMAGE_ASC_QUERY_PLAN_HASH: "fd5dc86099567113dcce8ef61c280b22f35a2c3b9e6fc592f0bcfaded4008f80";
+export declare const ADMIN_USERS_EMAIL_CONTAINS_IMAGE_ASC_QUERY_PLAN_HASH: "453cb6c81f506a1f0ac99bed3cc85da59176d2cb83597d5812d771683a60cb4c";
 export interface AdminUsersEmailContainsImageAscParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -423,7 +440,7 @@ export type AdminUsersEmailContainsImageAscResult = AdminUsersEmailContainsImage
 export declare function isAdminUsersEmailContainsImageAscFound(value: AdminUsersEmailContainsImageAscResult): value is AdminUsersEmailContainsImageAscFound;
 export declare function unwrapAdminUsersEmailContainsImageAscFound(value: AdminUsersEmailContainsImageAscResult | TypedQueryResult<AdminUsersEmailContainsImageAscResult>): AdminUsersEmailContainsImageAscFound;
 export declare function adminUsersEmailContainsImageAsc(parameters: AdminUsersEmailContainsImageAscParams): NamedQueryRequest<AdminUsersEmailContainsImageAscParams, AdminUsersEmailContainsImageAscResult>;
-export declare const ADMIN_USERS_ENDS_WITH_ASC_QUERY_PLAN_HASH: "a83229249df961abbc113e7b808af6beca7ca915835ddcd06cd5c28bb7d3c920";
+export declare const ADMIN_USERS_ENDS_WITH_ASC_QUERY_PLAN_HASH: "924c7acfdcf3f7970917ac611b6eafc9175ac69f735d9e1cc01414fcc6f0e696";
 export interface AdminUsersEndsWithAscParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -458,7 +475,7 @@ export type AdminUsersEndsWithAscResult = AdminUsersEndsWithAscFound;
 export declare function isAdminUsersEndsWithAscFound(value: AdminUsersEndsWithAscResult): value is AdminUsersEndsWithAscFound;
 export declare function unwrapAdminUsersEndsWithAscFound(value: AdminUsersEndsWithAscResult | TypedQueryResult<AdminUsersEndsWithAscResult>): AdminUsersEndsWithAscFound;
 export declare function adminUsersEndsWithAsc(parameters: AdminUsersEndsWithAscParams): NamedQueryRequest<AdminUsersEndsWithAscParams, AdminUsersEndsWithAscResult>;
-export declare const ADMIN_USERS_ENDS_WITH_DESC_QUERY_PLAN_HASH: "ac6fdfacb6f36e2a68e36429171b5d8d502b2fd43f781d72541ece961f1da93c";
+export declare const ADMIN_USERS_ENDS_WITH_DESC_QUERY_PLAN_HASH: "cab8ad8456533e4ce97388948e4f703cac6f2eebb641b83a91c3b005ece7fffb";
 export interface AdminUsersEndsWithDescParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -493,7 +510,7 @@ export type AdminUsersEndsWithDescResult = AdminUsersEndsWithDescFound;
 export declare function isAdminUsersEndsWithDescFound(value: AdminUsersEndsWithDescResult): value is AdminUsersEndsWithDescFound;
 export declare function unwrapAdminUsersEndsWithDescFound(value: AdminUsersEndsWithDescResult | TypedQueryResult<AdminUsersEndsWithDescResult>): AdminUsersEndsWithDescFound;
 export declare function adminUsersEndsWithDesc(parameters: AdminUsersEndsWithDescParams): NamedQueryRequest<AdminUsersEndsWithDescParams, AdminUsersEndsWithDescResult>;
-export declare const ADMIN_USERS_STARTS_WITH_ASC_QUERY_PLAN_HASH: "e9594b9b9631b78e8cbd9a89c4a2f1b43cb40b62ef55bb18b704f790044b2332";
+export declare const ADMIN_USERS_STARTS_WITH_ASC_QUERY_PLAN_HASH: "add0aed3dbd0caea0de2857133a857d49eb7bfc0e031d117270cc873137da5ec";
 export interface AdminUsersStartsWithAscParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -528,7 +545,7 @@ export type AdminUsersStartsWithAscResult = AdminUsersStartsWithAscFound;
 export declare function isAdminUsersStartsWithAscFound(value: AdminUsersStartsWithAscResult): value is AdminUsersStartsWithAscFound;
 export declare function unwrapAdminUsersStartsWithAscFound(value: AdminUsersStartsWithAscResult | TypedQueryResult<AdminUsersStartsWithAscResult>): AdminUsersStartsWithAscFound;
 export declare function adminUsersStartsWithAsc(parameters: AdminUsersStartsWithAscParams): NamedQueryRequest<AdminUsersStartsWithAscParams, AdminUsersStartsWithAscResult>;
-export declare const ADMIN_USERS_STARTS_WITH_DESC_QUERY_PLAN_HASH: "1f52bcc4f1f3e778f33e3e47299009ce70d3f4c541d1bed35e6f953d0e79ffea";
+export declare const ADMIN_USERS_STARTS_WITH_DESC_QUERY_PLAN_HASH: "23c1561fb3956217e79d1b358be468e55c4021b887e927a4fb3c0484c92be872";
 export interface AdminUsersStartsWithDescParams {
     readonly organization_id: string;
     readonly needle: string;
@@ -563,7 +580,7 @@ export type AdminUsersStartsWithDescResult = AdminUsersStartsWithDescFound;
 export declare function isAdminUsersStartsWithDescFound(value: AdminUsersStartsWithDescResult): value is AdminUsersStartsWithDescFound;
 export declare function unwrapAdminUsersStartsWithDescFound(value: AdminUsersStartsWithDescResult | TypedQueryResult<AdminUsersStartsWithDescResult>): AdminUsersStartsWithDescFound;
 export declare function adminUsersStartsWithDesc(parameters: AdminUsersStartsWithDescParams): NamedQueryRequest<AdminUsersStartsWithDescParams, AdminUsersStartsWithDescResult>;
-export declare const FIND_ACCOUNT_BY_ID_QUERY_PLAN_HASH: "51ece0c8e7396f3f9efea7595a4224f856ae7984ff9bf15bcf9049427ad1f110";
+export declare const FIND_ACCOUNT_BY_ID_QUERY_PLAN_HASH: "14a08df3dd8a74ea0a5622804bf0c2424086ee73eb10ce57d7df336a7d25f5ba";
 export declare const FIND_ACCOUNT_BY_ID_SECRET_OUTPUTS: readonly [{
     readonly query: "FindAccountById";
     readonly entity: "Account";
@@ -624,7 +641,7 @@ export declare function redactFindAccountByIdResult(value: FindAccountByIdResult
     readonly redactedSecretOutputs: typeof FIND_ACCOUNT_BY_ID_SECRET_OUTPUTS;
 };
 export declare function findAccountById(parameters: FindAccountByIdParams): NamedQueryRequest<FindAccountByIdParams, FindAccountByIdResult>;
-export declare const FIND_ACCOUNT_BY_PROVIDER_QUERY_PLAN_HASH: "b104b38050396d747e59735cea4b562c305dccb7614a973f5177501825c91089";
+export declare const FIND_ACCOUNT_BY_PROVIDER_QUERY_PLAN_HASH: "e6c4517a46d725780e79725ca3fdaba2208ef4b282d49f484121eee76c043831";
 export declare const FIND_ACCOUNT_BY_PROVIDER_SECRET_OUTPUTS: readonly [{
     readonly query: "FindAccountByProvider";
     readonly entity: "Account";
@@ -686,7 +703,7 @@ export declare function redactFindAccountByProviderResult(value: FindAccountByPr
     readonly redactedSecretOutputs: typeof FIND_ACCOUNT_BY_PROVIDER_SECRET_OUTPUTS;
 };
 export declare function findAccountByProvider(parameters: FindAccountByProviderParams): NamedQueryRequest<FindAccountByProviderParams, FindAccountByProviderResult>;
-export declare const FIND_ACCOUNTS_BY_USER_ID_QUERY_PLAN_HASH: "0e517c2b2a10d95c12812d6374107379c80ce4638b962fad6f9092cc6b8b6c2e";
+export declare const FIND_ACCOUNTS_BY_USER_ID_QUERY_PLAN_HASH: "ccdc524ca64ad667c209de25b4ce977f43b53ffdd8eb1b70fedf29fc99f27da6";
 export declare const FIND_ACCOUNTS_BY_USER_ID_SECRET_OUTPUTS: readonly [{
     readonly query: "FindAccountsByUserId";
     readonly entity: "Account";
@@ -748,7 +765,7 @@ export declare function redactFindAccountsByUserIdResult(value: FindAccountsByUs
     readonly redactedSecretOutputs: typeof FIND_ACCOUNTS_BY_USER_ID_SECRET_OUTPUTS;
 };
 export declare function findAccountsByUserId(parameters: FindAccountsByUserIdParams): NamedQueryRequest<FindAccountsByUserIdParams, FindAccountsByUserIdResult>;
-export declare const FIND_ACCOUNTS_BY_USER_PROVIDER_QUERY_PLAN_HASH: "44124fb19b8f7fe35bb15824b87a0ed593c86b5821e81ad7fae1ab8636725183";
+export declare const FIND_ACCOUNTS_BY_USER_PROVIDER_QUERY_PLAN_HASH: "21d13b3c30b4a4059f3c436e290d11c20f0f1d1154e05fb48ae3dd0da882526d";
 export declare const FIND_ACCOUNTS_BY_USER_PROVIDER_SECRET_OUTPUTS: readonly [{
     readonly query: "FindAccountsByUserProvider";
     readonly entity: "Account";
@@ -811,7 +828,7 @@ export declare function redactFindAccountsByUserProviderResult(value: FindAccoun
     readonly redactedSecretOutputs: typeof FIND_ACCOUNTS_BY_USER_PROVIDER_SECRET_OUTPUTS;
 };
 export declare function findAccountsByUserProvider(parameters: FindAccountsByUserProviderParams): NamedQueryRequest<FindAccountsByUserProviderParams, FindAccountsByUserProviderResult>;
-export declare const FIND_ACTIVE_SESSIONS_BY_USER_ID_QUERY_PLAN_HASH: "218dbdff73dce68ba48b7f8a179791e6b46139ee84da3edbd96438045f60f8dc";
+export declare const FIND_ACTIVE_SESSIONS_BY_USER_ID_QUERY_PLAN_HASH: "de1e5232a64a32057699b5ac21f1b43e69d755a3c143595f906fe63e16147264";
 export declare const FIND_ACTIVE_SESSIONS_BY_USER_ID_SECRET_OUTPUTS: readonly [{
     readonly query: "FindActiveSessionsByUserId";
     readonly entity: "Session";
@@ -857,7 +874,71 @@ export declare function redactFindActiveSessionsByUserIdResult(value: FindActive
     readonly redactedSecretOutputs: typeof FIND_ACTIVE_SESSIONS_BY_USER_ID_SECRET_OUTPUTS;
 };
 export declare function findActiveSessionsByUserId(parameters: FindActiveSessionsByUserIdParams): NamedQueryRequest<FindActiveSessionsByUserIdParams, FindActiveSessionsByUserIdResult>;
-export declare const FIND_EXPIRED_VERIFICATION_IDS_QUERY_PLAN_HASH: "e24fe82a3a724a9d45044dc668d450e61b1177f5866423c07bd33100d49428c1";
+export declare const FIND_CREDENTIAL_ACCOUNT_QUERY_PLAN_HASH: "f968271d103a76cc6b2a5496f5cceffe4cff5aa39d2a370379b518d8e7d90771";
+export declare const FIND_CREDENTIAL_ACCOUNT_SECRET_OUTPUTS: readonly [{
+    readonly query: "FindCredentialAccount";
+    readonly entity: "Account";
+    readonly field: "access_token";
+}, {
+    readonly query: "FindCredentialAccount";
+    readonly entity: "Account";
+    readonly field: "refresh_token";
+}, {
+    readonly query: "FindCredentialAccount";
+    readonly entity: "Account";
+    readonly field: "id_token";
+}, {
+    readonly query: "FindCredentialAccount";
+    readonly entity: "Account";
+    readonly field: "password";
+}];
+export interface FindCredentialAccountParams {
+    readonly organization_id: string;
+    readonly user_id: string;
+    readonly account_id: string;
+    readonly provider_id: string;
+}
+export interface FindCredentialAccountFound {
+    readonly outcome: "Found";
+    readonly accounts: ReadonlyArray<{
+        readonly organization_id: string;
+        readonly user_id: string;
+        readonly id: string;
+        readonly account_id: string;
+        readonly provider_id: string;
+        readonly access_token: string | null;
+        readonly refresh_token: string | null;
+        readonly id_token: string | null;
+        readonly password: string | null;
+        readonly access_token_expires_at: {
+            readonly seconds: bigint;
+            readonly nanos: number;
+        } | null;
+        readonly refresh_token_expires_at: {
+            readonly seconds: bigint;
+            readonly nanos: number;
+        } | null;
+        readonly scope: string | null;
+        readonly created_at: {
+            readonly seconds: bigint;
+            readonly nanos: number;
+        };
+        readonly updated_at: {
+            readonly seconds: bigint;
+            readonly nanos: number;
+        };
+        readonly revision: bigint;
+    }>;
+}
+export type FindCredentialAccountResult = FindCredentialAccountFound;
+export declare function isFindCredentialAccountFound(value: FindCredentialAccountResult): value is FindCredentialAccountFound;
+export declare function unwrapFindCredentialAccountFound(value: FindCredentialAccountResult | TypedQueryResult<FindCredentialAccountResult>): FindCredentialAccountFound;
+export declare function redactFindCredentialAccountResult(value: FindCredentialAccountResult): {
+    readonly outcome: string;
+    readonly redactedSecretOutputs: typeof FIND_CREDENTIAL_ACCOUNT_SECRET_OUTPUTS;
+};
+export declare function findCredentialAccount(parameters: FindCredentialAccountParams): NamedQueryRequest<FindCredentialAccountParams, FindCredentialAccountResult>;
+export declare const FIND_EXPIRED_VERIFICATION_IDS_QUERY_PLAN_HASH: "6c799850ba3b2eb3222aac85a76f40492c46de76870075b029f3b4ac897ed8b9";
 export interface FindExpiredVerificationIdsParams {
     readonly organization_id: string;
     readonly expires_before: {
@@ -876,7 +957,7 @@ export type FindExpiredVerificationIdsResult = FindExpiredVerificationIdsFound;
 export declare function isFindExpiredVerificationIdsFound(value: FindExpiredVerificationIdsResult): value is FindExpiredVerificationIdsFound;
 export declare function unwrapFindExpiredVerificationIdsFound(value: FindExpiredVerificationIdsResult | TypedQueryResult<FindExpiredVerificationIdsResult>): FindExpiredVerificationIdsFound;
 export declare function findExpiredVerificationIds(parameters: FindExpiredVerificationIdsParams): NamedQueryRequest<FindExpiredVerificationIdsParams, FindExpiredVerificationIdsResult>;
-export declare const FIND_LATEST_VERIFICATION_QUERY_PLAN_HASH: "54336205fa315da75d390d062055723e36d07ef6596e19f756d319a8bc875023";
+export declare const FIND_LATEST_VERIFICATION_QUERY_PLAN_HASH: "b3832c0a8a316d3fcbc62b388fbe09ceb6624b55482195f7642553467cba6fcb";
 export declare const FIND_LATEST_VERIFICATION_SECRET_OUTPUTS: readonly [{
     readonly query: "FindLatestVerification";
     readonly entity: "Verification";
@@ -915,7 +996,7 @@ export declare function redactFindLatestVerificationResult(value: FindLatestVeri
     readonly redactedSecretOutputs: typeof FIND_LATEST_VERIFICATION_SECRET_OUTPUTS;
 };
 export declare function findLatestVerification(parameters: FindLatestVerificationParams): NamedQueryRequest<FindLatestVerificationParams, FindLatestVerificationResult>;
-export declare const FIND_SESSION_BY_ID_QUERY_PLAN_HASH: "653cfab6a75b5e2624620b0b5504b19d36f778c8775606fa0f3bb0c1d51e6bc0";
+export declare const FIND_SESSION_BY_ID_QUERY_PLAN_HASH: "c92eb2035c0e3ca7dedbaa42a4e2efe7bc4786a65213394da7f5d3beb579a2a1";
 export declare const FIND_SESSION_BY_ID_SECRET_OUTPUTS: readonly [{
     readonly query: "FindSessionById";
     readonly entity: "Session";
@@ -956,7 +1037,7 @@ export declare function redactFindSessionByIdResult(value: FindSessionByIdResult
     readonly redactedSecretOutputs: typeof FIND_SESSION_BY_ID_SECRET_OUTPUTS;
 };
 export declare function findSessionById(parameters: FindSessionByIdParams): NamedQueryRequest<FindSessionByIdParams, FindSessionByIdResult>;
-export declare const FIND_SESSION_BY_TOKEN_QUERY_PLAN_HASH: "b5e701701b0ac99b4328200089b2507f31c0be55df78a275d83f7be99f8b7061";
+export declare const FIND_SESSION_BY_TOKEN_QUERY_PLAN_HASH: "a8a12334a3d34c30d54be828bdcc9b9b77223303c3f9681e4a602c92341876ec";
 export declare const FIND_SESSION_BY_TOKEN_SECRET_OUTPUTS: readonly [{
     readonly query: "FindSessionByToken";
     readonly entity: "Session";
@@ -997,7 +1078,8 @@ export declare function redactFindSessionByTokenResult(value: FindSessionByToken
     readonly redactedSecretOutputs: typeof FIND_SESSION_BY_TOKEN_SECRET_OUTPUTS;
 };
 export declare function findSessionByToken(parameters: FindSessionByTokenParams): NamedQueryRequest<FindSessionByTokenParams, FindSessionByTokenResult>;
-export declare const FIND_SESSIONS_BY_TOKEN_SET_QUERY_PLAN_HASH: "56c683d1815bf0c3e14c0585f314de378b43f9f4e401312c645efc70bd42969b";
+export declare const FIND_SESSIONS_BY_TOKEN_SET_QUERY_PLAN_HASH: "7e23187b537599c4c2361d34ea866b5b719f63feda0135587b5ec6afd5ce62f6";
+export declare const FIND_SESSIONS_BY_TOKEN_SET_TOKENS_MAX_ITEMS: 32;
 export declare const FIND_SESSIONS_BY_TOKEN_SET_SECRET_OUTPUTS: readonly [{
     readonly query: "FindSessionsByTokenSet";
     readonly entity: "Session";
@@ -1038,7 +1120,7 @@ export declare function redactFindSessionsByTokenSetResult(value: FindSessionsBy
     readonly redactedSecretOutputs: typeof FIND_SESSIONS_BY_TOKEN_SET_SECRET_OUTPUTS;
 };
 export declare function findSessionsByTokenSet(parameters: FindSessionsByTokenSetParams): NamedQueryRequest<FindSessionsByTokenSetParams, FindSessionsByTokenSetResult>;
-export declare const FIND_SESSIONS_BY_USER_ID_QUERY_PLAN_HASH: "84de4cd840d30dc9cd575e1f1daea8de94f0efa63187b646e273ba633a5d693f";
+export declare const FIND_SESSIONS_BY_USER_ID_QUERY_PLAN_HASH: "a3277546d8b0c0059b850c368ae4925000c255e69b7ff005f4b3d2ef61b504af";
 export declare const FIND_SESSIONS_BY_USER_ID_SECRET_OUTPUTS: readonly [{
     readonly query: "FindSessionsByUserId";
     readonly entity: "Session";
@@ -1080,7 +1162,7 @@ export declare function redactFindSessionsByUserIdResult(value: FindSessionsByUs
     readonly redactedSecretOutputs: typeof FIND_SESSIONS_BY_USER_ID_SECRET_OUTPUTS;
 };
 export declare function findSessionsByUserId(parameters: FindSessionsByUserIdParams): NamedQueryRequest<FindSessionsByUserIdParams, FindSessionsByUserIdResult>;
-export declare const FIND_USER_BY_EMAIL_QUERY_PLAN_HASH: "ef647a48d55b825dbe566c29b03dd3fb97444df49f991bd0441d60cbb4115078";
+export declare const FIND_USER_BY_EMAIL_QUERY_PLAN_HASH: "b167b8cb2fb5ce19685491b47da4e816665b840e0f0e463666f6302134472b9a";
 export interface FindUserByEmailParams {
     readonly organization_id: string;
     readonly email: string;
@@ -1108,7 +1190,7 @@ export type FindUserByEmailResult = FindUserByEmailFound;
 export declare function isFindUserByEmailFound(value: FindUserByEmailResult): value is FindUserByEmailFound;
 export declare function unwrapFindUserByEmailFound(value: FindUserByEmailResult | TypedQueryResult<FindUserByEmailResult>): FindUserByEmailFound;
 export declare function findUserByEmail(parameters: FindUserByEmailParams): NamedQueryRequest<FindUserByEmailParams, FindUserByEmailResult>;
-export declare const FIND_USER_BY_ID_QUERY_PLAN_HASH: "45fe0e1bda91ecd52e3a5c64c656c168c1200b1869b0f68665fd9e578439b9fd";
+export declare const FIND_USER_BY_ID_QUERY_PLAN_HASH: "25d4a0a77d5df64ab6187528f9fac6b205a03c33e01c9ea6b573e8316b78b924";
 export interface FindUserByIdParams {
     readonly organization_id: string;
     readonly id: string;
@@ -1140,7 +1222,7 @@ export declare function isFindUserByIdFound(value: FindUserByIdResult): value is
 export declare function isFindUserByIdMissing(value: FindUserByIdResult): value is FindUserByIdMissing;
 export declare function unwrapFindUserByIdFound(value: FindUserByIdResult | TypedQueryResult<FindUserByIdResult>): FindUserByIdFound;
 export declare function findUserById(parameters: FindUserByIdParams): NamedQueryRequest<FindUserByIdParams, FindUserByIdResult>;
-export declare const FIND_VERIFICATION_BY_ID_QUERY_PLAN_HASH: "3755eceb567801c6795c13a9e8868955cfe1bf185d204196f4c614d29f78c6aa";
+export declare const FIND_VERIFICATION_BY_ID_QUERY_PLAN_HASH: "54f07c7eba7d51857dd6473e39304dc798bf7084ca946dfa7f0203633a5133ac";
 export declare const FIND_VERIFICATION_BY_ID_SECRET_OUTPUTS: readonly [{
     readonly query: "FindVerificationById";
     readonly entity: "Verification";
@@ -1183,7 +1265,7 @@ export declare function redactFindVerificationByIdResult(value: FindVerification
     readonly redactedSecretOutputs: typeof FIND_VERIFICATION_BY_ID_SECRET_OUTPUTS;
 };
 export declare function findVerificationById(parameters: FindVerificationByIdParams): NamedQueryRequest<FindVerificationByIdParams, FindVerificationByIdResult>;
-export declare const FIND_VERIFICATIONS_BY_IDENTIFIER_QUERY_PLAN_HASH: "d98f43e146032b3cd1d0dfb2eacd432795f1545fcfa00e0e45b0fbd891d8b3ed";
+export declare const FIND_VERIFICATIONS_BY_IDENTIFIER_QUERY_PLAN_HASH: "4c768ae1d966454e9b791cd57a6311476947b5c457020943a50bc3cfee90765b";
 export declare const FIND_VERIFICATIONS_BY_IDENTIFIER_SECRET_OUTPUTS: readonly [{
     readonly query: "FindVerificationsByIdentifier";
     readonly entity: "Verification";
@@ -1285,6 +1367,30 @@ export declare function isConsumeVerificationSetVerificationConsumeMissing(value
 }>;
 export declare const CONSUME_VERIFICATION_SET_PLAN_HASH: "cc5e0d69851c61f11bbbca45ad00bec80b32687a94272379e133fbf854d59780";
 export declare function consumeVerificationSet(input: ConsumeVerificationSetInput): CommandRequest<ConsumeVerificationSetInput, ConsumeVerificationSetOutcome>;
+export interface ConsumeVerificationSnapshotInput {
+    readonly request_id: string;
+    readonly organization_id: string;
+    readonly verification_id: string;
+    readonly expected_revision: bigint;
+}
+export type ConsumeVerificationSnapshotOutcome = {
+    readonly outcome: "VerificationConsumed";
+} | {
+    readonly outcome: "VerificationConsumeStale";
+} | {
+    readonly outcome: "VerificationConsumeMissing";
+};
+export declare function isConsumeVerificationSnapshotVerificationConsumed(value: ConsumeVerificationSnapshotOutcome): value is Extract<ConsumeVerificationSnapshotOutcome, {
+    readonly outcome: "VerificationConsumed";
+}>;
+export declare function isConsumeVerificationSnapshotVerificationConsumeStale(value: ConsumeVerificationSnapshotOutcome): value is Extract<ConsumeVerificationSnapshotOutcome, {
+    readonly outcome: "VerificationConsumeStale";
+}>;
+export declare function isConsumeVerificationSnapshotVerificationConsumeMissing(value: ConsumeVerificationSnapshotOutcome): value is Extract<ConsumeVerificationSnapshotOutcome, {
+    readonly outcome: "VerificationConsumeMissing";
+}>;
+export declare const CONSUME_VERIFICATION_SNAPSHOT_PLAN_HASH: "1a80a36f34b4699c972fc1e6f48cad3f85da54e202831a6986aea084db09788b";
+export declare function consumeVerificationSnapshot(input: ConsumeVerificationSnapshotInput): CommandRequest<ConsumeVerificationSnapshotInput, ConsumeVerificationSnapshotOutcome>;
 export interface CreateAccountInput {
     readonly id: string;
     readonly scope: string | null;
@@ -1639,6 +1745,54 @@ export declare function isDeleteVerificationVerificationMissing(value: DeleteVer
 }>;
 export declare const DELETE_VERIFICATION_PLAN_HASH: "bffc0c5ef5ad2b602954492d043e833785ec3f9d6f0520fbc0f933422544ae6a";
 export declare function deleteVerification(input: DeleteVerificationInput): CommandRequest<DeleteVerificationInput, DeleteVerificationOutcome>;
+export interface ResetCredentialPasswordInput {
+    readonly user_id: string;
+    readonly password: string;
+    readonly account_id: string;
+    readonly request_id: string;
+    readonly updated_at: {
+        readonly seconds: bigint;
+        readonly nanos: number;
+    };
+    readonly organization_id: string;
+    readonly account_revision: bigint;
+    readonly verification_ids: ReadonlyArray<string>;
+    readonly external_account_id: string;
+    readonly verification_revision: bigint;
+}
+export type ResetCredentialPasswordOutcome = {
+    readonly outcome: "PasswordAccountStale";
+} | {
+    readonly outcome: "PasswordAccountMissing";
+} | {
+    readonly outcome: "CredentialPasswordReset";
+} | {
+    readonly outcome: "PasswordProviderMismatch";
+} | {
+    readonly outcome: "VerificationConsumeStale";
+} | {
+    readonly outcome: "VerificationConsumeMissing";
+};
+export declare function isResetCredentialPasswordPasswordAccountStale(value: ResetCredentialPasswordOutcome): value is Extract<ResetCredentialPasswordOutcome, {
+    readonly outcome: "PasswordAccountStale";
+}>;
+export declare function isResetCredentialPasswordPasswordAccountMissing(value: ResetCredentialPasswordOutcome): value is Extract<ResetCredentialPasswordOutcome, {
+    readonly outcome: "PasswordAccountMissing";
+}>;
+export declare function isResetCredentialPasswordCredentialPasswordReset(value: ResetCredentialPasswordOutcome): value is Extract<ResetCredentialPasswordOutcome, {
+    readonly outcome: "CredentialPasswordReset";
+}>;
+export declare function isResetCredentialPasswordPasswordProviderMismatch(value: ResetCredentialPasswordOutcome): value is Extract<ResetCredentialPasswordOutcome, {
+    readonly outcome: "PasswordProviderMismatch";
+}>;
+export declare function isResetCredentialPasswordVerificationConsumeStale(value: ResetCredentialPasswordOutcome): value is Extract<ResetCredentialPasswordOutcome, {
+    readonly outcome: "VerificationConsumeStale";
+}>;
+export declare function isResetCredentialPasswordVerificationConsumeMissing(value: ResetCredentialPasswordOutcome): value is Extract<ResetCredentialPasswordOutcome, {
+    readonly outcome: "VerificationConsumeMissing";
+}>;
+export declare const RESET_CREDENTIAL_PASSWORD_PLAN_HASH: "ed87f267831fb0823b0e9bbf51d7b302a715a95c0cea69faf7922c0e4e7f375e";
+export declare function resetCredentialPassword(input: ResetCredentialPasswordInput): CommandRequest<ResetCredentialPasswordInput, ResetCredentialPasswordOutcome>;
 export interface UpdateAccountInput {
     readonly scope: string | null;
     readonly user_id: string;
@@ -1723,6 +1877,42 @@ export declare function isUpdateAccountPasswordsPasswordProviderMismatch(value:
 }>;
 export declare const UPDATE_ACCOUNT_PASSWORDS_PLAN_HASH: "5f18c741b5e9c09203c67b5985af9d034fad670462ecdda32a0a1f031ef288f6";
 export declare function updateAccountPasswords(input: UpdateAccountPasswordsInput): CommandRequest<UpdateAccountPasswordsInput, UpdateAccountPasswordsOutcome>;
+export interface UpdateCredentialPasswordInput {
+    readonly user_id: string;
+    readonly password: string;
+    readonly account_id: string;
+    readonly request_id: string;
+    readonly updated_at: {
+        readonly seconds: bigint;
+        readonly nanos: number;
+    };
+    readonly organization_id: string;
+    readonly expected_revision: bigint;
+    readonly external_account_id: string;
+}
+export type UpdateCredentialPasswordOutcome = {
+    readonly outcome: "PasswordAccountStale";
+} | {
+    readonly outcome: "PasswordAccountMissing";
+} | {
+    readonly outcome: "PasswordProviderMismatch";
+} | {
+    readonly outcome: "CredentialPasswordUpdated";
+};
+export declare function isUpdateCredentialPasswordPasswordAccountStale(value: UpdateCredentialPasswordOutcome): value is Extract<UpdateCredentialPasswordOutcome, {
+    readonly outcome: "PasswordAccountStale";
+}>;
+export declare function isUpdateCredentialPasswordPasswordAccountMissing(value: UpdateCredentialPasswordOutcome): value is Extract<UpdateCredentialPasswordOutcome, {
+    readonly outcome: "PasswordAccountMissing";
+}>;
+export declare function isUpdateCredentialPasswordPasswordProviderMismatch(value: UpdateCredentialPasswordOutcome): value is Extract<UpdateCredentialPasswordOutcome, {
+    readonly outcome: "PasswordProviderMismatch";
+}>;
+export declare function isUpdateCredentialPasswordCredentialPasswordUpdated(value: UpdateCredentialPasswordOutcome): value is Extract<UpdateCredentialPasswordOutcome, {
+    readonly outcome: "CredentialPasswordUpdated";
+}>;
+export declare const UPDATE_CREDENTIAL_PASSWORD_PLAN_HASH: "08781a68739c705ab6ffe51a0de547605e1a7dd2fd2b8075445d40db923d1f15";
+export declare function updateCredentialPassword(input: UpdateCredentialPasswordInput): CommandRequest<UpdateCredentialPasswordInput, UpdateCredentialPasswordOutcome>;
 export interface UpdateSessionInput {
     readonly user_id: string;
     readonly expires_at: {
@@ -1830,6 +2020,48 @@ export declare class RiffDBBetterAuthCoreClient {
     private lastCommitSeq;
     constructor(transport: ApplicationTransport, commandAttemptBudget?: number, defaultReadAfterCommit?: bigint, trackCausalWrites?: boolean);
     static fromTransport(transport: ApplicationTransport, commandAttemptBudget?: number): RiffDBBetterAuthCoreClient;
+    static driverIdentity(role: string, database?: string): ContractDriverIdentity;
+    static connect(driver: {
+        connect(config: {
+            readonly socketPath: string;
+            readonly identity: ContractDriverIdentity;
+        }): Promise<ApplicationTransport>;
+    } | ((config: {
+        readonly socketPath: string;
+        readonly identity: ContractDriverIdentity;
+    }) => Promise<ApplicationTransport>), options: {
+        readonly socketPath: string;
+        readonly role: string;
+        readonly database?: string;
+        readonly commandAttemptBudget?: number;
+    }): Promise<RiffDBBetterAuthCoreClient>;
+    static connectFromEnv(driver: {
+        connectFromEnv(options: {
+            readonly socketPath?: string;
+            readonly role?: string;
+            readonly database?: string;
+            readonly tenant?: string;
+            readonly prefix?: string;
+            readonly envPrefix?: string;
+            readonly identity: typeof CONTRACT_DRIVER_IDENTITY;
+        }): Promise<ApplicationTransport>;
+    } | ((options: {
+        readonly socketPath?: string;
+        readonly role?: string;
+        readonly database?: string;
+        readonly tenant?: string;
+        readonly prefix?: string;
+        readonly envPrefix?: string;
+        readonly identity: typeof CONTRACT_DRIVER_IDENTITY;
+    }) => Promise<ApplicationTransport>), options?: {
+        readonly socketPath?: string;
+        readonly role?: string;
+        readonly database?: string;
+        readonly tenant?: string;
+        readonly prefix?: string;
+        readonly envPrefix?: string;
+        readonly commandAttemptBudget?: number;
+    }): Promise<RiffDBBetterAuthCoreClient>;
     withReadAfterCommit(commitSequence: bigint | undefined): RiffDBBetterAuthCoreClient;
     causalSession(initialCommitSequence?: bigint): RiffDBBetterAuthCoreClient;
     get lastCommitSequence(): bigint | undefined;
@@ -1864,6 +2096,8 @@ export declare class RiffDBBetterAuthCoreClient {
     findActiveSessionsByUserId(parameters: FindActiveSessionsByUserIdParams, options?: QueryOptions): Promise<TypedQueryResult<FindActiveSessionsByUserIdResult>>;
     findActiveSessionsByUserIdAfterCommit(parameters: FindActiveSessionsByUserIdParams, commitSequence: bigint, options?: QueryOptions): Promise<TypedQueryResult<FindActiveSessionsByUserIdResult>>;
     findActiveSessionsByUserIdPages(parameters: FindActiveSessionsByUserIdParams, maxPages?: number, options?: QueryOptions): AsyncGenerator<TypedQueryResult<FindActiveSessionsByUserIdResult>, void, undefined>;
+    findCredentialAccount(parameters: FindCredentialAccountParams, options?: QueryOptions): Promise<TypedQueryResult<FindCredentialAccountResult>>;
+    findCredentialAccountAfterCommit(parameters: FindCredentialAccountParams, commitSequence: bigint, options?: QueryOptions): Promise<TypedQueryResult<FindCredentialAccountResult>>;
     findExpiredVerificationIds(parameters: FindExpiredVerificationIdsParams, options?: QueryOptions): Promise<TypedQueryResult<FindExpiredVerificationIdsResult>>;
     findExpiredVerificationIdsAfterCommit(parameters: FindExpiredVerificationIdsParams, commitSequence: bigint, options?: QueryOptions): Promise<TypedQueryResult<FindExpiredVerificationIdsResult>>;
     findExpiredVerificationIdsPages(parameters: FindExpiredVerificationIdsParams, maxPages?: number, options?: QueryOptions): AsyncGenerator<TypedQueryResult<FindExpiredVerificationIdsResult>, void, undefined>;
@@ -1875,6 +2109,7 @@ export declare class RiffDBBetterAuthCoreClient {
     findSessionByTokenAfterCommit(parameters: FindSessionByTokenParams, commitSequence: bigint, options?: QueryOptions): Promise<TypedQueryResult<FindSessionByTokenResult>>;
     findSessionsByTokenSet(parameters: FindSessionsByTokenSetParams, options?: QueryOptions): Promise<TypedQueryResult<FindSessionsByTokenSetResult>>;
     findSessionsByTokenSetAfterCommit(parameters: FindSessionsByTokenSetParams, commitSequence: bigint, options?: QueryOptions): Promise<TypedQueryResult<FindSessionsByTokenSetResult>>;
+    findSessionsByTokenSetAll(parameters: FindSessionsByTokenSetParams, maxPages?: number, options?: QueryOptions): Promise<TypedQueryResult<FindSessionsByTokenSetFound>>;
     findSessionsByUserId(parameters: FindSessionsByUserIdParams, options?: QueryOptions): Promise<TypedQueryResult<FindSessionsByUserIdResult>>;
     findSessionsByUserIdAfterCommit(parameters: FindSessionsByUserIdParams, commitSequence: bigint, options?: QueryOptions): Promise<TypedQueryResult<FindSessionsByUserIdResult>>;
     findSessionsByUserIdPages(parameters: FindSessionsByUserIdParams, maxPages?: number, options?: QueryOptions): AsyncGenerator<TypedQueryResult<FindSessionsByUserIdResult>, void, undefined>;
@@ -1891,6 +2126,8 @@ export declare class RiffDBBetterAuthCoreClient {
     consumeVerificationBatch(inputs: ReadonlyArray<ConsumeVerificationInput>, options: CommandBatchOptions): Promise<CommandBatchResult<ConsumeVerificationOutcome>>;
     consumeVerificationSet(input: ConsumeVerificationSetInput): Promise<TypedCommandResult<ConsumeVerificationSetOutcome>>;
     consumeVerificationSetBatch(inputs: ReadonlyArray<ConsumeVerificationSetInput>, options: CommandBatchOptions): Promise<CommandBatchResult<ConsumeVerificationSetOutcome>>;
+    consumeVerificationSnapshot(input: ConsumeVerificationSnapshotInput): Promise<TypedCommandResult<ConsumeVerificationSnapshotOutcome>>;
+    consumeVerificationSnapshotBatch(inputs: ReadonlyArray<ConsumeVerificationSnapshotInput>, options: CommandBatchOptions): Promise<CommandBatchResult<ConsumeVerificationSnapshotOutcome>>;
     createAccount(input: CreateAccountInput): Promise<TypedCommandResult<CreateAccountOutcome>>;
     createAccountBatch(inputs: ReadonlyArray<CreateAccountInput>, options: CommandBatchOptions): Promise<CommandBatchResult<CreateAccountOutcome>>;
     createOAuthUserGraph(input: CreateOAuthUserGraphInput): Promise<TypedCommandResult<CreateOAuthUserGraphOutcome>>;
@@ -1911,10 +2148,14 @@ export declare class RiffDBBetterAuthCoreClient {
     deleteUserBatch(inputs: ReadonlyArray<DeleteUserInput>, options: CommandBatchOptions): Promise<CommandBatchResult<DeleteUserOutcome>>;
     deleteVerification(input: DeleteVerificationInput): Promise<TypedCommandResult<DeleteVerificationOutcome>>;
     deleteVerificationBatch(inputs: ReadonlyArray<DeleteVerificationInput>, options: CommandBatchOptions): Promise<CommandBatchResult<DeleteVerificationOutcome>>;
+    resetCredentialPassword(input: ResetCredentialPasswordInput): Promise<TypedCommandResult<ResetCredentialPasswordOutcome>>;
+    resetCredentialPasswordBatch(inputs: ReadonlyArray<ResetCredentialPasswordInput>, options: CommandBatchOptions): Promise<CommandBatchResult<ResetCredentialPasswordOutcome>>;
     updateAccount(input: UpdateAccountInput): Promise<TypedCommandResult<UpdateAccountOutcome>>;
     updateAccountBatch(inputs: ReadonlyArray<UpdateAccountInput>, options: CommandBatchOptions): Promise<CommandBatchResult<UpdateAccountOutcome>>;
     updateAccountPasswords(input: UpdateAccountPasswordsInput): Promise<TypedCommandResult<UpdateAccountPasswordsOutcome>>;
     updateAccountPasswordsBatch(inputs: ReadonlyArray<UpdateAccountPasswordsInput>, options: CommandBatchOptions): Promise<CommandBatchResult<UpdateAccountPasswordsOutcome>>;
+    updateCredentialPassword(input: UpdateCredentialPasswordInput): Promise<TypedCommandResult<UpdateCredentialPasswordOutcome>>;
+    updateCredentialPasswordBatch(inputs: ReadonlyArray<UpdateCredentialPasswordInput>, options: CommandBatchOptions): Promise<CommandBatchResult<UpdateCredentialPasswordOutcome>>;
     updateSession(input: UpdateSessionInput): Promise<TypedCommandResult<UpdateSessionOutcome>>;
     updateSessionBatch(inputs: ReadonlyArray<UpdateSessionInput>, options: CommandBatchOptions): Promise<CommandBatchResult<UpdateSessionOutcome>>;
     updateUser(input: UpdateUserInput): Promise<TypedCommandResult<UpdateUserOutcome>>;