@sixb/core 0.1.21 → 0.1.22

package/dist/artifacts/queries.d.ts

@@ -0,0 +1,95 @@
+import type { ObjectQuery } from "../objects/query/ir";
+import type { PrimitiveSchema } from "../ontology/types";
+import type { ObjectFacetRequest, ObjectFacetResult, ObjectRow } from "../storage/objects/types";
+import type { ArtifactKind } from "./kinds";
+/**
+ * A version's queries: one `queries/<name>.json` file each, holding what `sixb objects query
+ * --file` runs or `sixb objects facets --file` sends. Each reader runs them with their own rights,
+ * so what an artifact shows is never a copy of what its author could read.
+ */
+export declare const ARTIFACT_QUERIES_DIRECTORY = "queries/";
+/** The kinds that show live data. A document shows a live sheet instead, and a file is as it is. */
+export declare const ARTIFACT_QUERY_KINDS: readonly ArtifactKind[];
+/** A query read from its file: rows, or the facets of the rows. */
+export type ArtifactQuery = {
+    readonly kind: "objects";
+    readonly query: ObjectQuery;
+} | {
+    readonly kind: "facets";
+    readonly query: ObjectQuery;
+    readonly facets: readonly ObjectFacetRequest[];
+};
+/** What a query read for its reader: the rows they may see, or the facets of those rows. */
+export type ArtifactQueryResult = ArtifactObjectsQueryResult | ArtifactFacetsQueryResult;
+/** What a query returns and reads, as whoever runs it may see it. */
+export interface ArtifactQueryShape {
+    /** The object types the query returns. */
+    readonly resultObjectTypeIds: readonly string[];
+    /** Every object type the query reads: where it starts, and each type it traverses or expands. */
+    readonly readObjectTypeIds: readonly string[];
+    /** What each value of a row holds, from the ontology as whoever runs the query may view it. */
+    readonly schema: ArtifactQuerySchema;
+}
+/**
+ * The properties a query's rows hold, and those of the objects it expands on them: what a live
+ * view types its columns by. A property the reader's view of the ontology leaves out is absent.
+ */
+export interface ArtifactQuerySchema {
+    /** By property id, over the types the query returns; the first type's when two disagree. */
+    readonly properties: Readonly<Record<string, ArtifactQueryProperty>>;
+    /** By link id, for each link the query expands on its rows: the properties of what it reaches. */
+    readonly links: Readonly<Record<string, {
+        readonly properties: Readonly<Record<string, ArtifactQueryProperty>>;
+    }>>;
+}
+/** A property's type, with a value type resolved to the schema it names. */
+export interface ArtifactQueryProperty {
+    readonly type: ArtifactQueryPropertyType;
+    /** What an enum's values are. */
+    readonly valueType?: "string" | "integer";
+}
+export type ArtifactQueryPropertyType = PrimitiveSchema | "enum" | "array" | "object" | "map";
+/** What checking a query as its author learned: what it returns, reads, and holds. */
+export interface CheckedArtifactQuery extends ArtifactQueryShape {
+    readonly kind: ArtifactQuery["kind"];
+}
+export interface ArtifactObjectsQueryResult extends ArtifactQueryShape {
+    readonly kind: "objects";
+    /**
+     * At most `ARTIFACT_LIMITS.maxQueryRows`, as the reader reads them: a marked property they are
+     * not cleared for is left out and listed in the row's `redactions`.
+     */
+    readonly objects: readonly ObjectRow[];
+    /** Every row the query matches for the reader, those past the cap included. */
+    readonly total: number;
+    /** Whether rows are left out because of the cap. A query's own `limit` leaves none out. */
+    readonly truncated: boolean;
+}
+export interface ArtifactFacetsQueryResult extends ArtifactQueryShape {
+    readonly kind: "facets";
+    /** Every row the query matches for the reader. */
+    readonly total: number;
+    readonly facets: readonly ObjectFacetResult[];
+}
+export declare function isArtifactQueryName(name: string): boolean;
+export declare function artifactQueryPath(name: string): string;
+/** The query a path names, or `undefined` when it is not one `queries/<name>.json` file. */
+export declare function artifactQueryName(path: string): string | undefined;
+/**
+ * Reads a query file into its query, and where the query sits in the file (`$`, or `$.query` in
+ * a request) so a problem found later names its place in the file. A file is one of:
+ *
+ * - a query node, `{ "kind": "start", ... }`, for rows;
+ * - `{ "query": <node> }`, for rows;
+ * - `{ "query": <node>, "facets": [{ "propertyId": "status", "limit": 10 }] }`, for facets.
+ *
+ * Only what an author writes is read: the fields core resolves itself are refused, as the API
+ * refuses them. `page`, `vector` and `rerank` are refused too, saying why.
+ */
+export declare function parseArtifactQuery(path: string, text: string): {
+    readonly query: ArtifactQuery;
+    readonly at: "$" | "$.query";
+} | {
+    readonly error: string;
+};
+//# sourceMappingURL=queries.d.ts.map

package/dist/artifacts/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/artifacts/queries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,WAAW,EAGZ,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAE3C;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,aAAa,CAAA;AAEpD,oGAAoG;AACpG,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EAA0C,CAAA;AAElG,mEAAmE;AACnE,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GACzD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC/C,CAAA;AAEL,4FAA4F;AAC5F,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,yBAAyB,CAAA;AAExF,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC/C,iGAAiG;IACjG,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7C,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAA;IACpE,kGAAkG;IAClG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CACtB,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAA;KAAE,CAAC,CACzF,CAAA;CACF;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;IACxC,iCAAiC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC1C;AAED,MAAM,MAAM,yBAAyB,GAAG,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAA;AAE7F,sFAAsF;AACtF,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CACrC;AAED,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAA;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,yBAA0B,SAAQ,kBAAkB;IACnE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAC9C;AAKD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKlE;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,GAAG,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAe9F"}

package/dist/artifacts/resolve.d.ts

@@ -28,6 +28,12 @@ export type ResolvedArtifactPart = {
 } | {
     readonly type: "slide";
     readonly slide: number;
+} | {
+    readonly type: "board";
+    readonly id: string;
+} | {
+    readonly type: "region";
+    readonly id: string;
 };
 /**
  * Finds what an address names in a version, against its outline and files. A problem says what is

package/dist/artifacts/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/artifacts/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,SAAS,EAAkB,MAAM,WAAW,CAAA;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACrD;AAED,+CAA+C;AAC/C,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,qBAAqB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA+DxE"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/artifacts/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,SAAS,EAAkB,MAAM,WAAW,CAAA;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACrD;AAED,+CAA+C;AAC/C,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,qBAAqB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA4ExE"}

package/dist/artifacts/run-query.d.ts

@@ -0,0 +1,26 @@
+import type { AuthorizedOntologyView } from "../objects/authorized-ontology-view";
+import { type ValidatedObjectQuery } from "../objects/query/validate";
+import type { SixbRuntimeContext } from "../runtime/types";
+import type { ArtifactQuery, ArtifactQueryResult, ArtifactQuerySchema, ArtifactQueryShape } from "./queries";
+/**
+ * Runs one of a version's queries as the runtime's caller, through their object reader: what they
+ * cannot view refuses the query, and what they are not cleared for is left out of each row.
+ *
+ * The query was valid when it was published, but the ontology may have changed since: a query
+ * that no longer validates, or no longer plans, is `query_invalid`. Rows are read a page at a
+ * time, up to `ARTIFACT_LIMITS.maxQueryRows`, within any `limit` the query declares.
+ */
+export declare function runArtifactQuery(runtime: Pick<SixbRuntimeContext, "ontology" | "objectReader">, name: string, query: ArtifactQuery): Promise<ArtifactQueryResult>;
+/**
+ * What a query returns and reads, and what its rows hold as the runtime's caller may view them. It
+ * throws what validating the query throws.
+ */
+export declare function describeArtifactQuery(runtime: Pick<SixbRuntimeContext, "ontology" | "objectReader">, query: ArtifactQuery): ArtifactQueryShape;
+/**
+ * The properties of the types a validated query returns, and of those each link it expands on its
+ * rows reaches, read from `view`: a reader is never told of a property their view leaves out. A
+ * type the view leaves out adds none. Only the outermost expansions are read, where normalization
+ * puts every expansion of the rows; one nested in another is not.
+ */
+export declare function artifactQuerySchema(view: AuthorizedOntologyView, validated: ValidatedObjectQuery): ArtifactQuerySchema;
+//# sourceMappingURL=run-query.d.ts.map

package/dist/artifacts/run-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-query.d.ts","sourceRoot":"","sources":["../../src/artifacts/run-query.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AAGjF,OAAO,EAAE,KAAK,oBAAoB,EAAuB,MAAM,2BAA2B,CAAA;AAE1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAI1D,OAAO,KAAK,EACV,aAAa,EAEb,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,WAAW,CAAA;AAKlB;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,cAAc,CAAC,EAC9D,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAgB9B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,cAAc,CAAC,EAC9D,KAAK,EAAE,aAAa,GACnB,kBAAkB,CAQpB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,sBAAsB,EAC5B,SAAS,EAAE,oBAAoB,GAC9B,mBAAmB,CAarB"}

package/dist/artifacts/serialize-query.d.ts

@@ -0,0 +1,12 @@
+import { type SerializedExpandedObject } from "../objects/serialize";
+import type { ArtifactFacetsQueryResult, ArtifactObjectsQueryResult, ArtifactQueryResult } from "./queries";
+export type SerializedArtifactQueryResult = (Omit<ArtifactObjectsQueryResult, "objects"> & {
+    readonly objects: readonly SerializedExpandedObject[];
+}) | ArtifactFacetsQueryResult;
+/**
+ * An artifact query's result as `GET /api/artifacts/:id/versions/:v/queries/:name` answers it, and
+ * as a page's `sixb.query` resolves: its rows as the query route serializes them, or its facets.
+ * The route and the Agent's layout check both serve it, so a page reads the same JSON in either.
+ */
+export declare function serializeArtifactQueryResult(result: ArtifactQueryResult): SerializedArtifactQueryResult;
+//# sourceMappingURL=serialize-query.d.ts.map

package/dist/artifacts/serialize-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize-query.d.ts","sourceRoot":"","sources":["../../src/artifacts/serialize-query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,wBAAwB,EAA2B,MAAM,sBAAsB,CAAA;AAC7F,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,WAAW,CAAA;AAElB,MAAM,MAAM,6BAA6B,GACrC,CAAC,IAAI,CAAC,0BAA0B,EAAE,SAAS,CAAC,GAAG;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAA;CACtD,CAAC,GACF,yBAAyB,CAAA;AAE7B;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,mBAAmB,GAC1B,6BAA6B,CAI/B"}

package/dist/artifacts/sheet-rules.d.ts

@@ -0,0 +1,26 @@
+import type { CsvTable } from "./csv";
+import { type Workbook, type WorkbookSheet } from "./workbook";
+/**
+ * Whether a sheet's workbook and tables keep the rules publishing holds them to, whatever their
+ * cells hold: columns named once, every column the workbook names in its table, formulas that
+ * compute their columns, and charts that plot what they can draw. Returns the first rule broken,
+ * in the words publishing refuses the version with, or null. A sheet without a table here is not
+ * checked, nor a chart on it, so an editor can check only the sheet it changed.
+ */
+export declare function checkSheet(workbook: Workbook, tables: ReadonlyMap<string, CsvTable>): string | null;
+/**
+ * A table's header and size against its sheet: named, unique, and holding what the sheet names. A
+ * live sheet's header is the columns its workbook lists.
+ */
+export declare function sheetColumnsProblem(sheet: WorkbookSheet, table: CsvTable): string | null;
+/**
+ * Each computed column's formula against the columns it reads: it reads, its result fits the
+ * column, and no columns compute from each other.
+ */
+export declare function sheetFormulasProblem(sheet: WorkbookSheet, table: CsvTable): string | null;
+/**
+ * Each chart against its sheet: the columns it plots exist and are numbers, its right axis reads
+ * one kind, and a pie has few enough slices to tell apart.
+ */
+export declare function sheetChartsProblem(workbook: Workbook, tables: ReadonlyMap<string, CsvTable>): string | null;
+//# sourceMappingURL=sheet-rules.d.ts.map

package/dist/artifacts/sheet-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sheet-rules.d.ts","sourceRoot":"","sources":["../../src/artifacts/sheet-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAWrC,OAAO,EAIL,KAAK,QAAQ,EACb,KAAK,aAAa,EACnB,MAAM,YAAY,CAAA;AAEnB;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,GACpC,MAAM,GAAG,IAAI,CAUf;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAuCxF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAqCzF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,GACpC,MAAM,GAAG,IAAI,CA2Cf"}

package/dist/artifacts/tones.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The colors an artifact gives what it marks, a sheet's tag or a canvas's note: the theme's
+ * meanings, or one of its chart colors, so they follow the app's theme and dark mode.
+ */
+export declare const ARTIFACT_TONES: readonly ["neutral", "positive", "warning", "negative", "chart-1", "chart-2", "chart-3", "chart-4", "chart-5"];
+export type ArtifactTone = (typeof ARTIFACT_TONES)[number];
+export declare function isArtifactTone(value: unknown): value is ArtifactTone;
+//# sourceMappingURL=tones.d.ts.map

package/dist/artifacts/tones.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tones.d.ts","sourceRoot":"","sources":["../../src/artifacts/tones.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,cAAc,gHAUjB,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE"}

package/dist/artifacts/workbook.d.ts

@@ -1,21 +1,46 @@
+import { type ArtifactTone } from "./tones";
 /**
  * A sheet artifact is `workbook.json` and one CSV per sheet under `sheets/`. The CSV holds the
  * values; the workbook holds what CSV can't: sheet order, column types and formats, frozen rows
- * and columns, widths, and charts drawn from the sheets. Formulas belong in an `.xlsx` file.
+ * and columns, widths, descriptions and totals, computed columns' formulas, and charts drawn from
+ * the sheets. A live sheet has no CSV: its rows are one of the version's queries', as each reader
+ * reads them.
  */
 export declare const WORKBOOK_FILE = "workbook.json";
-export declare const SHEET_COLUMN_TYPES: readonly ["text", "number", "currency", "percent", "date", "link", "image"];
+export declare const SHEET_COLUMN_TYPES: readonly ["text", "number", "currency", "percent", "date", "link", "image", "boolean", "tag"];
 export type SheetColumnType = (typeof SHEET_COLUMN_TYPES)[number];
 /** Column types whose cells are numbers, so a chart can plot them and a range can sum them. */
 export declare const NUMERIC_COLUMN_TYPES: readonly SheetColumnType[];
-export declare const SHEET_CHART_TYPES: readonly ["bar", "line", "area", "pie"];
+/**
+ * How a numeric column's cells are shaded by value, across the column: a bar in the cell, a
+ * shade from light to dark, or two colors either side of zero.
+ */
+export declare const SHEET_HIGHLIGHTS: readonly ["bars", "scale", "diverging"];
+export type SheetHighlight = (typeof SHEET_HIGHLIGHTS)[number];
+/** What a sheet's totals row shows under a column, over the rows the reader sees. */
+export declare const SHEET_TOTALS: readonly ["sum", "average", "min", "max", "count"];
+export type SheetTotal = (typeof SHEET_TOTALS)[number];
+export declare const SHEET_CHART_TYPES: readonly ["bar", "line", "area", "pie", "scatter"];
 export type SheetChartType = (typeof SHEET_CHART_TYPES)[number];
+/** How a chart summarizes rows that share an x value: one point or slice for each value. */
+export declare const SHEET_CHART_AGGREGATES: readonly ["sum", "average", "count"];
+export type SheetChartAggregate = (typeof SHEET_CHART_AGGREGATES)[number];
 export interface SheetColumnFormat {
     readonly type: SheetColumnType;
     /** An ISO 4217 code, for a currency column. */
     readonly currency?: string;
     /** Digits after the decimal point, for numbers, currencies, and percents. */
     readonly decimals?: number;
+    /** `1.2M` for `1,204,330`, for numbers and currencies. */
+    readonly compact?: boolean;
+    /** A sign on positive values too, `+3.2%`, for numbers, currencies, and percents. */
+    readonly signed?: boolean;
+    /** A tag column's colors by value; a value not named is neutral. */
+    readonly tones?: Readonly<Record<string, ArtifactTone>>;
+    /** How a numeric column's cells are shaded by value. */
+    readonly highlight?: SheetHighlight;
+    /** The formula that computes the column's every value, as an Excel table's column does. */
+    readonly formula?: string;
 }
 export interface WorkbookSheet {
     readonly name: string;
@@ -27,6 +52,33 @@ export interface WorkbookSheet {
     readonly columns: Readonly<Record<string, SheetColumnFormat>>;
     /** Widths in pixels by column name. */
     readonly widths: Readonly<Record<string, number>>;
+    /** What a column means, shown on its header, by column name. */
+    readonly descriptions: Readonly<Record<string, string>>;
+    /** A totals row pinned under the rows: what each named column totals to. */
+    readonly totals: Readonly<Record<string, SheetTotal>>;
+    /** Where a live sheet's rows and columns come from; a sheet without it holds its CSV's. */
+    readonly live?: LiveSheetSource;
+}
+/**
+ * A live sheet's query and columns. Its columns are exactly those its workbook lists, in order,
+ * each showing a property of the rows or computed by a formula. A column whose type is its
+ * property's has no format in `columns` until the property's type is known: `liveSheetColumns`
+ * reads it then.
+ */
+export interface LiveSheetSource {
+    /** The query whose rows the sheet shows: `queries/<name>.json` in the version. */
+    readonly query: string;
+    readonly columns: readonly LiveSheetColumnSource[];
+}
+export interface LiveSheetColumnSource {
+    readonly name: string;
+    /**
+     * The property the column shows: a property id of the rows, or `<linkId>.<propertyId>` of a
+     * link the query expands. A computed column has none.
+     */
+    readonly from?: string;
+    /** The column's format as written, when it gives no type: its property's type is its type. */
+    readonly untyped?: Readonly<Record<string, unknown>>;
 }
 export interface WorkbookChart {
     /** What `#chart=<name>` names in an address; lowercase letters, digits, and hyphens. */
@@ -35,8 +87,15 @@ export interface WorkbookChart {
     readonly sheet: string;
     /** The column along the x axis, or a pie's slice labels. */
     readonly x: string;
-    /** The plotted columns: one series each, or a pie's one value column. */
+    /**
+     * The plotted columns: one series each, or a pie's one value column. Empty for a chart that
+     * counts rows.
+     */
     readonly y: readonly string[];
+    /** A bar chart's columns drawn as lines over its bars. */
+    readonly line: readonly string[];
+    /** Rows summarized by their x value, in the order the values first appear. */
+    readonly aggregate?: SheetChartAggregate;
     readonly title?: string;
     /** Stack a bar or area chart's series. */
     readonly stacked: boolean;
@@ -50,7 +109,8 @@ export declare function sheetFilePath(sheetName: string): string;
 /**
  * Reads `workbook.json` into its full form: `"Revenue": "currency"` becomes
  * `{ type: "currency" }`, a single `y` becomes a list, and defaults are filled. Returns what is
- * wrong in words the author can act on. Whether the columns exist is checked against the CSVs.
+ * wrong in words the author can act on. Whether the columns exist is checked against the CSVs, and
+ * a live sheet's against its query.
  */
 export declare function parseWorkbook(text: string): {
     readonly workbook: Workbook;
@@ -61,4 +121,15 @@ export declare function parseWorkbook(text: string): {
 export declare function parseSheetNumber(value: string): number | undefined;
 /** A date as a sheet stores it: `YYYY-MM-DD`, optionally with an ISO 8601 time. */
 export declare function parseSheetDate(value: string): Date | undefined;
+/** Why a column can't have its total, or null: only a numeric column has more than a count. */
+export declare function sheetTotalProblem(sheetAt: string, column: string, total: SheetTotal, type: SheetColumnType): string | null;
+/**
+ * A column's format as `columns` writes it, for a column whose type `type` gives when the format
+ * names none: a live column's property's. Returns what is wrong in the words parsing uses.
+ */
+export declare function readSheetColumnFormat(value: Readonly<Record<string, unknown>>, at: string, type: SheetColumnType): {
+    readonly format: SheetColumnFormat;
+} | {
+    readonly error: string;
+};
 //# sourceMappingURL=workbook.d.ts.map

package/dist/artifacts/workbook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workbook.d.ts","sourceRoot":"","sources":["../../src/artifacts/workbook.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,eAAO,MAAM,kBAAkB,6EAQrB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjE,+FAA+F;AAC/F,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EAAsC,CAAA;AAEjG,eAAO,MAAM,iBAAiB,yCAA0C,CAAA;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC7D,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,yEAAyE;IACzE,QAAQ,CAAC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;CAC1C;AAED,mDAAmD;AACnD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAa9D;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKlE;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAO9D"}
+{"version":3,"file":"workbook.d.ts","sourceRoot":"","sources":["../../src/artifacts/workbook.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,YAAY,EAAkB,MAAM,SAAS,CAAA;AAE3E;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,eAAO,MAAM,kBAAkB,+FAUrB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjE,+FAA+F;AAC/F,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EAAsC,CAAA;AAEjG;;;GAGG;AACH,eAAO,MAAM,gBAAgB,yCAA0C,CAAA;AACvE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D,qFAAqF;AACrF,eAAO,MAAM,YAAY,oDAAqD,CAAA;AAC9E,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtD,eAAO,MAAM,iBAAiB,oDAAqD,CAAA;AACnF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,4FAA4F;AAC5F,eAAO,MAAM,sBAAsB,sCAAuC,CAAA;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;IACvD,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;IACnC,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC7D,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACvD,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;IACrD,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAA;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAA;CACnD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACrD;AAED,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;CAC1C;AAED,mDAAmD;AACnD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAa9D;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKlE;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAO9D;AAwJD,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,eAAe,GACpB,MAAM,GAAG,IAAI,CAGf;AA+ED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOrE"}

package/dist/auth/index.d.ts

@@ -8,7 +8,7 @@ export { AuthRuntimeError, SignInRefusedError } from "./errors";
 export type { AuthRuntimeOptions } from "./runtime";
 export { AuthRuntime, DEFAULT_AUTH_INVITATION_TTL_MS, DEFAULT_AUTH_SESSION_CACHE_TTL_MS, DEFAULT_AUTH_SESSION_IDLE_TIMEOUT_MS, DEFAULT_AUTH_SESSION_RENEWAL_WINDOW_MS, MAX_AUTH_INVITATION_TTL_MS, resolveAuthConfig, } from "./runtime";
 export { createSessionCredential, formatSessionCookieValue, generateSessionSecret, hashSessionSecret, parseSessionCookieValue, } from "./sessions";
-export type { AuthCookieOptions, AuthCredentialSource, AuthEmailDeliveryStatus, AuthenticatedAuthSession, AuthenticatedRequestAuthSession, AuthenticatedServiceAccountAccessTokenSession, AuthenticatedUserAccessTokenSession, AuthenticatedUserRequestSession, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthSessionFailureReason, AuthSessionOptions, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, AuthStrategyKind, CreateAccessTokenResult, CreateInvitationCapability, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationDestination, InvitationGroupOption, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, MemberCapabilities, MemberSummary, MembershipCapabilities, MembershipOperationCapabilities, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, Principal, ReactivateMemberInput, ReactivateMemberResult, ResolvedAuthConfig, RevealedInvitationLink, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, ServiceAccountWithGroups, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UnauthenticatedAuthSession, UpdateMemberGroupsInput, UpdateMemberGroupsResult, } from "./types";
+export type { AuthCookieOptions, AuthCredentialSource, AuthEmailDeliveryStatus, AuthenticatedAuthSession, AuthenticatedRequestAuthSession, AuthenticatedServiceAccountAccessTokenSession, AuthenticatedUserAccessTokenSession, AuthenticatedUserRequestSession, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthSessionFailureReason, AuthSessionOptions, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, AuthStrategyKind, CreateAccessTokenResult, CreateInvitationCapability, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationDestination, InvitationGroupOption, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, MemberCapabilities, MemberSummary, MembershipCapabilities, MembershipOperationCapabilities, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, OwnProfile, Principal, ProfileField, ReactivateMemberInput, ReactivateMemberResult, ResolvedAuthConfig, RevealedInvitationLink, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, ServiceAccountWithGroups, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UnauthenticatedAuthSession, UpdateMemberGroupsInput, UpdateMemberGroupsResult, UpdateOwnProfileInput, UserPrincipal, } from "./types";
 export { principalsEqual, SYSTEM_PRINCIPAL } from "./types";
 export { isInvitationDeliveryAuthStrategy, isMagicLinkAuthStrategy, isOidcAuthStrategy, } from "./validation";
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAC/F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,mCAAmC,GACpC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,SAAS,EACT,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,GACvB,MAAM,QAAQ,CAAA;AACf,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,+BAA+B,EAC/B,6CAA6C,EAC7C,mCAAmC,EACnC,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,+BAA+B,EAC/B,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,SAAS,EACT,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAC/F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,mCAAmC,GACpC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,SAAS,EACT,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,GACvB,MAAM,QAAQ,CAAA;AACf,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,+BAA+B,EAC/B,6CAA6C,EAC7C,mCAAmC,EACnC,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,+BAA+B,EAC/B,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,EACV,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA"}

package/dist/auth/index.js

@@ -23,10 +23,12 @@ import {
   AuthRuntime2,
   SYSTEM_PRINCIPAL2,
   principalsEqual2
-} from "../chunk-nn5xnx3s.js";
-import"../chunk-447a5c0p.js";
-import"../chunk-s7jg7pmn.js";
-import"../chunk-f4pamkt9.js";
+} from "../chunk-h3pbv7n8.js";
+import"../chunk-6n69k945.js";
+import"../chunk-cdk3egjj.js";
+import"../chunk-bab05bhg.js";
+import"../chunk-zrvhsq7f.js";
+import"../chunk-73v685wb.js";
 import {
   DEFAULT_SESSION_COOKIE_NAME2,
   DEFAULT_CSRF_COOKIE_NAME2,
@@ -50,12 +52,13 @@ import {
   isMagicLinkAuthStrategy2,
   isInvitationDeliveryAuthStrategy2,
   isOidcAuthStrategy2
-} from "../chunk-hcbyfxbe.js";
-import"../chunk-6vb4st8k.js";
-import"../chunk-v4jbb3rs.js";
-import"../chunk-8frc8a4j.js";
-import"../chunk-dhdha526.js";
-import"../chunk-dvd2fp9q.js";
+} from "../chunk-5grk14e5.js";
+import"../chunk-yc9ners4.js";
+import"../chunk-rap5w0x0.js";
+import"../chunk-65pyhyas.js";
+import"../chunk-4y26vs3v.js";
+import"../chunk-vhbw5sqm.js";
+import"../chunk-zbc929zg.js";
 import"../chunk-6eqsgvxk.js";
 import"../chunk-wkv3h3q7.js";
 export {
@@ -106,4 +109,4 @@ export {
   verifyDoubleSubmitCsrf2 as verifyDoubleSubmitCsrf
 };
 
-//# debugId=8FFA124180A4D74264756E2164756E21
+//# debugId=F29DEBB720E424FF64756E2164756E21

package/dist/auth/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "8FFA124180A4D74264756E2164756E21",
+  "debugId": "F29DEBB720E424FF64756E2164756E21",
   "names": []
 }

package/dist/auth/member-events.d.ts

@@ -0,0 +1,13 @@
+import type { EventDraft } from "../events/types";
+import type { CompleteSignInResult, InvitationRecord, UserRecord } from "../storage/auth";
+import type { AuthenticatedUserRequestSession } from "./types";
+/**
+ * What a completed sign-in tells the project: a new member, or the profile their identity provider
+ * changed. A sign-in that changed nothing tells nothing.
+ */
+export declare function signInEvents(result: CompleteSignInResult): readonly EventDraft[];
+/** A member edited their own profile. Saving the values it already had tells nothing. */
+export declare function profileUpdatedEvents(caller: AuthenticatedUserRequestSession, previousUser: UserRecord, user: UserRecord): readonly EventDraft[];
+export declare function statusChangedEvents(caller: AuthenticatedUserRequestSession, previousUser: UserRecord, user: UserRecord): readonly EventDraft[];
+export declare function invitedEvents(caller: AuthenticatedUserRequestSession, invitation: InvitationRecord): readonly EventDraft[];
+//# sourceMappingURL=member-events.d.ts.map

package/dist/auth/member-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-events.d.ts","sourceRoot":"","sources":["../../src/auth/member-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAA2C,MAAM,iBAAiB,CAAA;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEzF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAA;AAI9D;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,SAAS,UAAU,EAAE,CAoBhF;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,+BAA+B,EACvC,YAAY,EAAE,UAAU,EACxB,IAAI,EAAE,UAAU,GACf,SAAS,UAAU,EAAE,CAUvB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,+BAA+B,EACvC,YAAY,EAAE,UAAU,EACxB,IAAI,EAAE,UAAU,GACf,SAAS,UAAU,EAAE,CASvB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,+BAA+B,EACvC,UAAU,EAAE,gBAAgB,GAC3B,SAAS,UAAU,EAAE,CAYvB"}

package/dist/auth/profile.d.ts

@@ -0,0 +1,11 @@
+import type { UpdateOwnProfileInput } from "./types";
+/** Validate the changes a person makes to their own profile. An empty value clears the field. */
+export declare function normalizeProfileChanges(input: UpdateOwnProfileInput): UpdateOwnProfileInput;
+/**
+ * A name a sign-in supplies, such as one an identity provider sent, held to the rules a person's own
+ * name follows. A value that breaks them counts as not sent, so it never makes a sign-in fail.
+ */
+export declare function signInDisplayName(value: unknown): string | undefined;
+/** A picture a sign-in supplies, treated as {@link signInDisplayName} treats a name. */
+export declare function signInAvatarUrl(value: unknown): string | undefined;
+//# sourceMappingURL=profile.d.ts.map

package/dist/auth/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/auth/profile.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAcpD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,qBAAqB,GAAG,qBAAqB,CAkB3F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElE"}

package/dist/auth/runtime.d.ts

@@ -1,16 +1,19 @@
 import { type AuthorizationContext } from "../authorization";
+import type { DomainEventLog } from "../events/service";
 import { type GroupReference, type SecurityDefinitionCatalog } from "../security";
 import type { Storage } from "../storage";
-import { type CompleteDeviceAuthorizationInput, type SessionRecord } from "../storage/auth";
+import { type CreateAuthSessionInput, type SessionRecord } from "../storage/auth";
 import { type ResolvedAuthCookieOptions } from "./cookies";
 import { type BearerSessionTokens } from "./sessions";
-import type { AuthenticatedRequestAuthSession, AuthenticatedUserRequestSession, AuthRequestResult, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, CreateAccessTokenResult, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDestination, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MembershipCapabilities, ReactivateMemberInput, ReactivateMemberResult, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UpdateMemberGroupsInput, UpdateMemberGroupsResult } from "./types";
+import type { AuthenticatedRequestAuthSession, AuthenticatedUserRequestSession, AuthRequestResult, AuthSessionResolutionOptions, AuthSessionResult, AuthStrategy, CreateAccessTokenResult, CreatePersonalAccessTokenInput, CreateServiceAccountAccessTokenInput, CreateServiceAccountAccessTokenResult, CreateServiceAccountInput, CreateServiceAccountResult, DisableServiceAccountInput, DisableServiceAccountResult, GetInvitationOptionsResult, GetMembershipOptionsResult, InvitationDestination, InviteUserInput, InviteUserResult, ListInvitationsInput, ListInvitationsResult, ListMembersInput, ListMembersResult, ListPersonalAccessTokensResult, ListServiceAccountAccessTokensInput, ListServiceAccountAccessTokensResult, ListServiceAccountsResult, MagicLinkCallbackInput, MagicLinkCallbackResult, MembershipCapabilities, OidcCallbackInput, OidcCallbackResult, OwnProfile, ReactivateMemberInput, ReactivateMemberResult, RevokeAccessTokenResult, RevokeInvitationInput, RevokeInvitationResult, RevokePersonalAccessTokenInput, RevokeServiceAccountAccessTokenInput, RevokeServiceAccountAccessTokenResult, SixbAuthConfig, SuspendMemberInput, SuspendMemberResult, UpdateMemberGroupsInput, UpdateMemberGroupsResult, UpdateOwnProfileInput } from "./types";
 export { DEFAULT_AUTH_INVITATION_TTL_MS, DEFAULT_AUTH_SESSION_CACHE_TTL_MS, DEFAULT_AUTH_SESSION_IDLE_TIMEOUT_MS, DEFAULT_AUTH_SESSION_RENEWAL_WINDOW_MS, MAX_AUTH_INVITATION_TTL_MS, resolveAuthConfig, } from "./validation";
 export interface AuthRuntimeOptions {
     readonly projectId: string;
     readonly storage: Storage;
     readonly security: SecurityDefinitionCatalog;
     readonly config?: SixbAuthConfig;
+    /** Where member events go: joined, suspended, reactivated, invited, profile updated. */
+    readonly events: DomainEventLog;
 }
 export declare class AuthRuntime {
     private readonly projectId;
@@ -18,6 +21,7 @@ export declare class AuthRuntime {
     private readonly security;
     private readonly config;
     private readonly sessionCache;
+    private readonly events;
     constructor(options: AuthRuntimeOptions);
     isEnabled(): boolean;
     getStrategy(): AuthStrategy | null;
@@ -49,7 +53,9 @@ export declare class AuthRuntime {
         readonly clientName: string;
         readonly now: Date;
     }): {
-        readonly session: CompleteDeviceAuthorizationInput["session"];
+        readonly session: CreateAuthSessionInput & {
+            readonly bearer: NonNullable<CreateAuthSessionInput["bearer"]>;
+        };
         readonly tokens: BearerSessionTokens;
     };
     /**
@@ -67,6 +73,14 @@ export declare class AuthRuntime {
     private loadActiveUser;
     private touchSessionLastSeen;
     private touchAccessTokenLastUsed;
+    /**
+     * Finish a magic-link sign-in: consume the link and start the session the server minted. Every
+     * sign-in goes through the runtime, so what follows one is decided here and not in each route.
+     * A name that breaks the profile rules is dropped: it never makes the sign-in fail.
+     */
+    completeMagicLinkSignIn(input: Pick<MagicLinkCallbackInput, "magicLinkId" | "token" | "session" | "displayName">): Promise<MagicLinkCallbackResult>;
+    /** Finish an OIDC sign-in from the provider's callback and start the session the server minted. */
+    completeOidcSignIn(input: Pick<OidcCallbackInput, "requestUrl" | "requestOrigin" | "session">): Promise<OidcCallbackResult>;
     /**
      * Resolve a caller's authorization context. Grants resolve eagerly
      * (`groups -> roles -> grants`, subtype-expanded), so checks against it are synchronous.
@@ -108,6 +122,14 @@ export declare class AuthRuntime {
     updateMemberGroups(caller: AuthenticatedUserRequestSession, input: UpdateMemberGroupsInput): Promise<UpdateMemberGroupsResult>;
     suspendMember(caller: AuthenticatedUserRequestSession, input: SuspendMemberInput): Promise<SuspendMemberResult>;
     reactivateMember(caller: AuthenticatedUserRequestSession, input: ReactivateMemberInput): Promise<ReactivateMemberResult>;
+    /** The caller's own profile, and which of its fields their identity provider manages. */
+    getProfile(caller: AuthenticatedUserRequestSession): Promise<OwnProfile>;
+    /**
+     * Change the caller's own name or picture. A field their identity provider manages is refused,
+     * because the next sign-in would overwrite it.
+     */
+    updateProfile(caller: AuthenticatedUserRequestSession, input: UpdateOwnProfileInput): Promise<OwnProfile>;
+    private managedProfileFields;
     /** The caller's active sessions, most recently active first. */
     listSessions(caller: AuthenticatedUserRequestSession): Promise<readonly SessionRecord[]>;
     /**
@@ -131,6 +153,12 @@ export declare class AuthRuntime {
     invite(caller: AuthenticatedUserRequestSession, input: InviteUserInput, destination: InvitationDestination): Promise<InviteUserResult>;
     listInvitations(caller: AuthenticatedUserRequestSession, input?: ListInvitationsInput): Promise<ListInvitationsResult>;
     revokeInvitation(caller: AuthenticatedUserRequestSession, input: RevokeInvitationInput): Promise<RevokeInvitationResult>;
+    /**
+     * Member events follow the auth write that caused them, which has already committed. Auth
+     * storage keeps no outbox, so an event the broker refuses is reported through `onError` and lost:
+     * delivery is at most once.
+     */
+    private emitMemberEvents;
     private requireAuthStorage;
     private resolveInviteGroupIds;
     private resolveMembershipPolicyScopeForUser;

package/dist/auth/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/auth/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,oBAAoB,EAA+B,MAAM,kBAAkB,CAAA;AACzF,OAAO,EAEL,KAAK,cAAc,EAKnB,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAIL,KAAK,gCAAgC,EAKrC,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AASxB,OAAO,EAAa,KAAK,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAGrE,OAAO,EACL,KAAK,mBAAmB,EAOzB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAEV,+BAA+B,EAC/B,+BAA+B,EAC/B,iBAAiB,EACjB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAE1B,qBAAqB,EAKrB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EAEzB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EAEtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EAEnB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,SAAS,CAAA;AAShB,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAarB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;gBAEtC,OAAO,EAAE,kBAAkB;IAgBvC,SAAS,IAAI,OAAO;IAKpB,WAAW,IAAI,YAAY,GAAG,IAAI;IAIlC,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG;QACjC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;QACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAA;KAClC;IAUD,gBAAgB,IAAI,yBAAyB;IAI7C,kBAAkB,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAgC5D,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAA;KAAE,GACjF,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAA;KAAE,GAC3E,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,iBAAiB,CAAC;YA2Bf,oBAAoB;YAoEpB,oBAAoB;IAiClC,4FAA4F;YAC9E,mBAAmB;IA8BjC;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG;QACF,QAAQ,CAAC,OAAO,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAA;QAC7D,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;KACrC;IAsBD;;;OAGG;IACG,cAAc,CAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IAyB5F,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,0BAA0B;YASpB,yBAAyB;IAwEvC,iFAAiF;YACnE,cAAc;YA6Bd,oBAAoB;YAgBpB,wBAAwB;IAwBtC;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,+BAA+B,GAAG,oBAAoB;IAS5E,wBAAwB,CAC5B,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,8BAA8B,CAAC;IAcpC,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IAyB7B,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IA0B7B,mBAAmB,CACvB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,yBAAyB,CAAC;IA4B/B,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC;IAgChC,qBAAqB,CACzB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC;IAiBjC,8BAA8B,CAClC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,oCAAoC,CAAC;IAmB1C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IAqC3C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IA8BjD;;;;;;;OAOG;YACW,+BAA+B;YA+B/B,0BAA0B;IAWlC,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAiBtC;;;;;;;OAOG;IACH,yBAAyB,CAAC,KAAK,EAAE;QAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAA;KACjD,GAAG,sBAAsB;IAMpB,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAWhC,WAAW,CACf,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,gBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IA4CvB,kBAAkB,CACtB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IA4E9B,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,mBAAmB,CAAC;IA8BzB,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAsBlC,gEAAgE;IAC1D,YAAY,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAQ9F;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC;IAgBnB,sEAAsE;IAChE,iBAAiB,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,MAAM,CAAC;IAYjF,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;OAOG;YACW,uBAAuB;IAyBrC,OAAO,CAAC,qBAAqB;IAavB,MAAM,CACV,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,qBAAqB,GACjC,OAAO,CAAC,gBAAgB,CAAC;IA+DtB,eAAe,CACnB,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,oBAAyB,GAC/B,OAAO,CAAC,qBAAqB,CAAC;IAsB3B,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAiClC,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,mCAAmC;IAO3C,OAAO,CAAC,iCAAiC;YAc3B,wBAAwB;YAwBxB,oCAAoC;IAYlD,OAAO,CAAC,6BAA6B;IAgBrC,OAAO,CAAC,mCAAmC;IAqB3C,OAAO,CAAC,+BAA+B;CAuBxC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/auth/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,oBAAoB,EAA+B,MAAM,kBAAkB,CAAA;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EAEL,KAAK,cAAc,EAKnB,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAIL,KAAK,sBAAsB,EAK3B,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAUxB,OAAO,EAAa,KAAK,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAUrE,OAAO,EACL,KAAK,mBAAmB,EAOzB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAEV,+BAA+B,EAC/B,+BAA+B,EAC/B,iBAAiB,EACjB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAE1B,qBAAqB,EAKrB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EAEvB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EAEV,qBAAqB,EACrB,sBAAsB,EAEtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,oCAAoC,EACpC,qCAAqC,EACrC,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EAEnB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAWhB,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,sCAAsC,EACtC,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAerB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAChC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,OAAO,EAAE,kBAAkB;IAiBvC,SAAS,IAAI,OAAO;IAKpB,WAAW,IAAI,YAAY,GAAG,IAAI;IAIlC,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG;QACjC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;QACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAA;KAClC;IAUD,gBAAgB,IAAI,yBAAyB;IAI7C,kBAAkB,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAgC5D,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAA;KAAE,GACjF,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GAAG;QAAE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAA;KAAE,GAC3E,OAAO,CAAC,iBAAiB,CAAC;IACvB,UAAU,CACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,iBAAiB,CAAC;YA2Bf,oBAAoB;YAoEpB,oBAAoB;IAiClC,4FAA4F;YAC9E,mBAAmB;IA8BjC;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG;QACF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG;YACzC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAA;SAC/D,CAAA;QACD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;KACrC;IAsBD;;;OAGG;IACG,cAAc,CAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IAyB5F,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,0BAA0B;YASpB,yBAAyB;IAwEvC,iFAAiF;YACnE,cAAc;YA6Bd,oBAAoB;YAgBpB,wBAAwB;IAwBtC;;;;OAIG;IACG,uBAAuB,CAC3B,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,aAAa,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC,GACvF,OAAO,CAAC,uBAAuB,CAAC;IAuBnC,mGAAmG;IAC7F,kBAAkB,CACtB,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,CAAC,GACzE,OAAO,CAAC,kBAAkB,CAAC;IA0B9B;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,+BAA+B,GAAG,oBAAoB;IAS5E,wBAAwB,CAC5B,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,8BAA8B,CAAC;IAcpC,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IAyB7B,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IA0B7B,mBAAmB,CACvB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,yBAAyB,CAAC;IA4B/B,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC;IAgChC,qBAAqB,CACzB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC;IAiBjC,8BAA8B,CAClC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,oCAAoC,CAAC;IAmB1C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IAqC3C,+BAA+B,CACnC,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,qCAAqC,CAAC;IA8BjD;;;;;;;OAOG;YACW,+BAA+B;YA+B/B,0BAA0B;IAWlC,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAiBtC;;;;;;;OAOG;IACH,yBAAyB,CAAC,KAAK,EAAE;QAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAA;KACjD,GAAG,sBAAsB;IAMpB,oBAAoB,CACxB,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,0BAA0B,CAAC;IAWhC,WAAW,CACf,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,gBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IA4CvB,kBAAkB,CACtB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IA4E9B,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,mBAAmB,CAAC;IAgCzB,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAwBlC,yFAAyF;IACnF,UAAU,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,UAAU,CAAC;IAgB9E;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,UAAU,CAAC;YAmCR,oBAAoB;IAuBlC,gEAAgE;IAC1D,YAAY,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAQ9F;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC;IAgBnB,sEAAsE;IAChE,iBAAiB,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,MAAM,CAAC;IAYjF,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;OAOG;YACW,uBAAuB;IAyBrC,OAAO,CAAC,qBAAqB;IAavB,MAAM,CACV,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,qBAAqB,GACjC,OAAO,CAAC,gBAAgB,CAAC;IA6DtB,eAAe,CACnB,MAAM,EAAE,+BAA+B,EACvC,KAAK,GAAE,oBAAyB,GAC/B,OAAO,CAAC,qBAAqB,CAAC;IAsB3B,gBAAgB,CACpB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IAiClC;;;;OAIG;YACW,gBAAgB;IAM9B,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,mCAAmC;IAO3C,OAAO,CAAC,iCAAiC;YAc3B,wBAAwB;YAwBxB,oCAAoC;IAYlD,OAAO,CAAC,6BAA6B;IAgBrC,OAAO,CAAC,mCAAmC;IAqB3C,OAAO,CAAC,+BAA+B;CAuBxC"}

package/dist/auth/strategy.d.ts

@@ -6,8 +6,10 @@
  * `./index` carries. Strategy authors should not need anything beyond this
  * entry plus the storage contracts from `@sixb/core/storage`.
  */
+export type { UserIdentityRecord } from "../storage/auth";
 export type { SignInRefusalReason } from "./errors";
 export { SignInRefusedError } from "./errors";
-export type { AuthEmailDeliveryStatus, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthStrategy, AuthStrategyKind, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, RevealedInvitationLink, } from "./types";
+export { signInAvatarUrl, signInDisplayName } from "./profile";
+export type { AuthEmailDeliveryStatus, AuthInvitationRecipientInput, AuthInvitationRecipientResult, AuthInvitationRecipientStatus, AuthRequestResult, AuthStrategy, AuthStrategyKind, InvitationDeliveryAuthStrategy, InvitationDeliveryInput, InvitationRecipientInput, InvitationRecipientResult, InvitationRecipientStatus, InviteDeliveryResult, InviteDeliveryStatus, MagicLinkAuthStrategy, MagicLinkCallbackInput, MagicLinkCallbackResult, MagicLinkInvitationRecipientInput, MagicLinkInvitationRecipientResult, MagicLinkInvitationRecipientStatus, MagicLinkPeekInput, MagicLinkPeekResult, MagicLinkRequestInput, MagicLinkRequestResult, MagicLinkRequestStatus, OidcAuthStrategy, OidcCallbackInput, OidcCallbackResult, OidcStartSignInInput, OidcStartSignInResult, ProfileField, RevealedInvitationLink, } from "./types";
 export { isInvitationDeliveryAuthStrategy, isMagicLinkAuthStrategy, isOidcAuthStrategy, } from "./validation";
 //# sourceMappingURL=strategy.d.ts.map