@sixb/core 0.1.5 → 0.1.7

package/dist/storage/ai-limits/types.d.ts

@@ -0,0 +1,175 @@
+import type { AiMoney } from "../ai-cost";
+/** A project-wide, group, or durable requester identity charged for AI model calls. */
+export type AiLimitSubject = {
+    readonly type: "project";
+} | {
+    readonly type: "group";
+    readonly id: string;
+} | {
+    readonly type: "user";
+    readonly id: string;
+} | {
+    readonly type: "serviceAccount";
+    readonly id: string;
+};
+/** Aggregate meters supported by the first AI usage-limit release. */
+export type AiLimitMeter = "tokens.total" | "cost.catalogEstimated";
+/** An exact quantity for one supported meter. */
+export type AiLimitQuantity = {
+    readonly meter: "tokens.total";
+    readonly amount: number;
+} | {
+    readonly meter: "cost.catalogEstimated";
+    readonly amount: AiMoney & {
+        readonly currency: "USD";
+    };
+};
+export type AiLimitPeriodKind = "calendarMonth";
+/** Inclusive start and exclusive end of one UTC accounting period. */
+export interface AiLimitPeriod {
+    readonly kind: AiLimitPeriodKind;
+    readonly start: Date;
+    readonly end: Date;
+    /** The first instant at which a denied call may be admitted in the next period. */
+    readonly resetAt: Date;
+}
+/** Editable policy. Consumption is intentionally stored independently from this record. */
+export interface AiLimitPolicy {
+    readonly id: string;
+    readonly projectId: string;
+    readonly subject: AiLimitSubject;
+    readonly limit: AiLimitQuantity;
+    readonly period: AiLimitPeriodKind;
+    readonly enabled: boolean;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export interface CreateAiLimitPolicyInput {
+    readonly id: string;
+    readonly projectId: string;
+    readonly subject: AiLimitSubject;
+    readonly limit: AiLimitQuantity;
+    readonly enabled?: boolean;
+    readonly createdAt?: Date;
+}
+export interface UpdateAiLimitPolicyInput {
+    readonly projectId: string;
+    readonly id: string;
+    /** The meter and cost currency are immutable; only the amount may change. */
+    readonly limit?: AiLimitQuantity;
+    readonly enabled?: boolean;
+    readonly updatedAt?: Date;
+}
+export interface GetAiLimitPolicyInput {
+    readonly projectId: string;
+    readonly id: string;
+}
+export interface DeleteAiLimitPolicyInput extends GetAiLimitPolicyInput {
+}
+export interface ListAiLimitPoliciesInput {
+    readonly projectId: string;
+    readonly includeDisabled?: boolean;
+}
+/** Current-period consumption for one policy, all expressed in the policy's meter. */
+export interface AiLimitConsumption {
+    readonly actual: AiLimitQuantity;
+    readonly reserved: AiLimitQuantity;
+    readonly unknown: AiLimitQuantity;
+    readonly remaining: AiLimitQuantity;
+}
+export interface AiLimitPolicyStatus {
+    readonly policy: AiLimitPolicy;
+    readonly period: AiLimitPeriod;
+    readonly consumption: AiLimitConsumption;
+    /** Whether every applicable immutable ledger record could be measured for this policy. */
+    readonly accountingStatus: "complete" | "unavailable";
+    readonly exhausted: boolean;
+    /** True only when the caller supplied the current group set and this group is absent. */
+    readonly orphaned: boolean;
+}
+export interface ListAiLimitPolicyStatusesInput {
+    readonly projectId: string;
+    readonly at?: Date;
+    readonly includeDisabled?: boolean;
+    /** Optional current group IDs used to report policies whose snapshotted group disappeared. */
+    readonly existingGroupIds?: readonly string[];
+}
+export interface AiModelCallReservationIdentity {
+    readonly projectId: string;
+    readonly executionId: string;
+    readonly attempt: number;
+    readonly callId: string;
+}
+export interface AiLimitReservationBucket {
+    readonly subject: AiLimitSubject;
+    readonly estimate: AiLimitQuantity;
+}
+export type AiModelCallReservationState = "active" | "reconciled" | "unknown";
+/** Durable reservation for one Sixb-owned provider attempt. */
+export interface AiModelCallReservation extends AiModelCallReservationIdentity {
+    /** Only policy dimensions that were applicable at admission time. */
+    readonly buckets: readonly AiLimitReservationBucket[];
+    /** Canonical admission request used to reject conflicting idempotent replays. */
+    readonly requestKey: string;
+    readonly period: AiLimitPeriod;
+    readonly state: AiModelCallReservationState;
+    readonly usageRecordId?: string;
+    readonly reservedAt: Date;
+    readonly updatedAt: Date;
+}
+export interface ReserveAiModelCallInput extends AiModelCallReservationIdentity {
+    /** The project subject is always added, even when omitted here. */
+    readonly subjects: readonly AiLimitSubject[];
+    readonly estimates: readonly AiLimitQuantity[];
+    readonly reservedAt?: Date;
+}
+export type ReserveAiModelCallResult = {
+    readonly status: "reserved";
+    readonly reservation: AiModelCallReservation;
+    /** False when the exact reservation identity and request were replayed. */
+    readonly created: boolean;
+} | {
+    /** No enabled policy matched a supplied subject and estimate. */
+    readonly status: "notRequired";
+} | {
+    /** Exact replay of a reservation that can no longer authorize a provider call. */
+    readonly status: "terminal";
+    readonly reservation: AiModelCallReservation;
+    readonly created: false;
+} | {
+    readonly status: "denied";
+    /** Every applicable policy that the proposed reservation would exceed. */
+    readonly exhaustedPolicies: readonly AiLimitPolicyStatus[];
+    readonly resetAt: Date;
+} | {
+    /** Admission failed closed because an applicable policy could not be measured safely. */
+    readonly status: "unavailable";
+    readonly unavailablePolicies: readonly AiLimitPolicyStatus[];
+    readonly reasons: readonly ("missingEstimate" | "incompleteAccounting")[];
+};
+export interface ReconcileAiModelCallInput extends AiModelCallReservationIdentity {
+    readonly usageRecordId: string;
+    readonly reconciledAt?: Date;
+}
+export interface MarkAiModelCallReservationUnknownInput extends AiModelCallReservationIdentity {
+    readonly markedAt?: Date;
+}
+export interface RecordAiModelCallLimitActualsInput {
+    readonly projectId: string;
+    readonly usageRecordId: string;
+    readonly recordedAt?: Date;
+}
+export interface AiLimitStorage {
+    createPolicy(input: CreateAiLimitPolicyInput): Promise<AiLimitPolicy>;
+    updatePolicy(input: UpdateAiLimitPolicyInput): Promise<AiLimitPolicy>;
+    deletePolicy(input: DeleteAiLimitPolicyInput): Promise<boolean>;
+    getPolicy(input: GetAiLimitPolicyInput): Promise<AiLimitPolicy | null>;
+    listPolicies(input: ListAiLimitPoliciesInput): Promise<readonly AiLimitPolicy[]>;
+    listPolicyStatuses(input: ListAiLimitPolicyStatusesInput): Promise<readonly AiLimitPolicyStatus[]>;
+    reserveModelCall(input: ReserveAiModelCallInput): Promise<ReserveAiModelCallResult>;
+    /** Applies a newly-created immutable usage record to initialized period counters. */
+    recordModelCallActuals(input: RecordAiModelCallLimitActualsInput): Promise<void>;
+    reconcileModelCall(input: ReconcileAiModelCallInput): Promise<AiModelCallReservation>;
+    markReservationUnknown(input: MarkAiModelCallReservationUnknownInput): Promise<AiModelCallReservation>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/storage/ai-limits/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-limits/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzC,uFAAuF;AACvF,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,sEAAsE;AACtE,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,uBAAuB,CAAA;AAEnE,iDAAiD;AACjD,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IACE,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG;QAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;KAAE,CAAA;CACxD,CAAA;AAEL,MAAM,MAAM,iBAAiB,GAAG,eAAe,CAAA;AAE/C,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;IAClB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CACvB;AAED,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,wBAAyB,SAAQ,qBAAqB;CAAG;AAE1E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CACnC;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,UAAU,GAAG,aAAa,CAAA;IACrD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,CAAA;IAClB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,8FAA8F;IAC9F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9C;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;CACnC;AAED,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAA;AAE7E,+DAA+D;AAC/D,MAAM,WAAW,sBAAuB,SAAQ,8BAA8B;IAC5E,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAA;IACrD,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAA;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,uBAAwB,SAAQ,8BAA8B;IAC7E,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAA;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAA;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,GACD;IACE,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAC/B,GACD;IACE,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAA;IAC5C,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAA;CACxB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAC1D,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CACvB,GACD;IACE,yFAAyF;IACzF,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,GAAG,sBAAsB,CAAC,EAAE,CAAA;CAC1E,CAAA;AAEL,MAAM,WAAW,yBAA0B,SAAQ,8BAA8B;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,sCAAuC,SAAQ,8BAA8B;IAC5F,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrE,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrE,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/D,SAAS,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IACtE,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;IAChF,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAA;IAElG,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACnF,qFAAqF;IACrF,sBAAsB,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChF,kBAAkB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACrF,sBAAsB,CACpB,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACnC"}

package/dist/storage/ai-usage/in-memory.d.ts

@@ -24,6 +24,10 @@ export declare class InMemoryAiUsageStorage implements AiUsageStorage {
     summarizeExecutions(input: SummarizeAiUsageExecutionsInput): Promise<readonly AiUsageExecutionSummary[]>;
     snapshot(): InMemoryAiUsageStorageSnapshot;
     restore(snapshot: InMemoryAiUsageStorageSnapshot): void;
+    /** @internal Immutable accounting source used by in-memory AI limit enforcement. */
+    getRecord(projectId: string, id: string): AiModelCallUsageRecord | null;
+    /** @internal Immutable accounting source used by in-memory AI limit status reads. */
+    listRecords(projectId: string): readonly AiModelCallUsageRecord[];
     private assertExecutionExists;
 }
 //# sourceMappingURL=in-memory.d.ts.map

package/dist/storage/ai-usage/in-memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"in-memory.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-usage/in-memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGrD,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,qCAAqC,EACrC,sBAAsB,EACtB,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,EAChC,MAAM,SAAS,CAAA;AAGhB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAA;IACrD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACxD,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;CACzD;AAED,2FAA2F;AAC3F,qBAAa,sBAAuB,YAAW,cAAc;IAK/C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAJvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IACpE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA4B;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6C;gBAE1C,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAEpE,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAoChF,qBAAqB,CACzB,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAoBnC,kBAAkB,CACtB,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IAQ7B,mBAAmB,CACvB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC;IA0B9C,QAAQ,IAAI,8BAA8B;IAQ1C,OAAO,CAAC,QAAQ,EAAE,8BAA8B,GAAG,IAAI;YAMzC,qBAAqB;CAQpC"}
+{"version":3,"file":"in-memory.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-usage/in-memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGrD,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,qCAAqC,EACrC,sBAAsB,EACtB,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,EAChC,MAAM,SAAS,CAAA;AAGhB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAA;IACrD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACxD,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;CACzD;AAED,2FAA2F;AAC3F,qBAAa,sBAAuB,YAAW,cAAc;IAK/C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAJvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IACpE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA4B;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6C;gBAE1C,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAEpE,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAoChF,qBAAqB,CACzB,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAoBnC,kBAAkB,CACtB,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,uBAAuB,CAAC;IAQ7B,mBAAmB,CACvB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC;IA0B9C,QAAQ,IAAI,8BAA8B;IAQ1C,OAAO,CAAC,QAAQ,EAAE,8BAA8B,GAAG,IAAI;IAMvD,oFAAoF;IACpF,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAKvE,qFAAqF;IACrF,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,sBAAsB,EAAE;YAMnD,qBAAqB;CAQpC"}

package/dist/storage/ai-usage/record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-usage/record.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAA;AAG7E,sFAAsF;AACtF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,sBAAsB,GAAG,sBAAsB,CAkChG;AAED,8EAA8E;AAC9E,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAElE"}
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-usage/record.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAA;AAG7E,sFAAsF;AACtF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,sBAAsB,GAAG,sBAAsB,CAuChG;AAYD,8EAA8E;AAC9E,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAElE"}

package/dist/storage/ai-usage/types.d.ts

@@ -1,4 +1,5 @@
 import type { ReadonlyJsonObject } from "../../json";
+import type { ModelReasoning } from "../../models/language-model";
 /** How much normalized token usage a provider reported for one model call. */
 export type AiUsageReportingStatus = "complete" | "partial" | "unavailable";
 /** Provider-neutral token counts accepted at the model-call boundary. */
@@ -26,22 +27,25 @@ export interface AiUsageExecutionSummary {
 }
 /** Input for an idempotent model-call ledger append. */
 export interface RecordAiModelCallInput {
+    readonly providerIds?: import("../../models/events").ModelProviderIds;
     readonly id: string;
     readonly projectId: string;
     /** Immutable execution-ledger record that owns this provider call. */
     readonly executionId: string;
     /** Queue delivery attempt that made the provider call. */
     readonly attempt: number;
-    /** AI SDK generation ID. Tool-loop model calls share it and are distinguished by responseId. */
+    /** Stable call ID generated by the owned model loop. */
     readonly callId: string;
     /**
      * Durable group memberships snapshotted when the parent run was admitted. The requester itself
      * is read from the immutable execution record.
      */
     readonly requesterGroupIds: readonly string[];
-    /** AI SDK provider that handled the call, such as `openai`, `anthropic`, or `gateway`. */
+    /** Provider contract that handled the call, such as `anthropic` or `vercel-ai-gateway`. */
     readonly providerId: string;
     readonly requestedModelId: string;
+    /** Provider-neutral reasoning preference used for this call, when explicitly configured. */
+    readonly requestedReasoning?: ModelReasoning;
     /** Provider-returned model identity when the capture path exposes it. */
     readonly responseModelId?: string;
     /** Provider-returned response ID used for later usage and cost reconciliation. */

package/dist/storage/ai-usage/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-usage/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEpD,8EAA8E;AAC9E,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAA;AAE3E,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;CACxC;AAED,uGAAuG;AACvG,MAAM,WAAW,gBAAiB,SAAQ,qBAAqB;IAC7D,gEAAgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAA;CACjD;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,6FAA6F;IAC7F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CACjC;AAED,wDAAwD;AACxD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,gGAAgG;IAChG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7C,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,yEAAyE;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IACtC,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B;AAED,yEAAyE;AACzE,MAAM,WAAW,sBAAuB,SAAQ,sBAAsB;IACpE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;IACvC,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAEhF,6FAA6F;IAC7F,qBAAqB,CACnB,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAA;IAEzC,0FAA0F;IAC1F,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAE3F;;;;OAIG;IACH,mBAAmB,CACjB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAA;CAC/C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/storage/ai-usage/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEjE,8EAA8E;AAC9E,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAA;AAE3E,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;CACxC;AAED,uGAAuG;AACvG,MAAM,WAAW,gBAAiB,SAAQ,qBAAqB;IAC7D,gEAAgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAA;CACjD;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,6FAA6F;IAC7F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CACjC;AAED,wDAAwD;AACxD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,qBAAqB,EAAE,gBAAgB,CAAA;IACrE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7C,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,4FAA4F;IAC5F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,cAAc,CAAA;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IACtC,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B;AAED,yEAAyE;AACzE,MAAM,WAAW,sBAAuB,SAAQ,sBAAsB;IACpE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;IACvC,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAEhF,6FAA6F;IAC7F,qBAAqB,CACnB,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAA;IAEzC,0FAA0F;IAC1F,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAE3F;;;;OAIG;IACH,mBAAmB,CACjB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAA;CAC/C"}

package/dist/storage/auth/errors.d.ts

@@ -1,4 +1,4 @@
-export type AuthStorageErrorCode = "duplicate_access_token" | "duplicate_identity" | "duplicate_invitation" | "duplicate_magic_link" | "duplicate_oidc_attempt" | "duplicate_service_account" | "duplicate_session" | "duplicate_user" | "email_link_not_allowed" | "expired_magic_link" | "expired_oidc_attempt" | "invalid_input" | "invalid_magic_link" | "invalid_oidc_attempt" | "missing_identity" | "missing_invitation" | "missing_magic_link" | "missing_oidc_attempt" | "missing_access_token" | "missing_service_account" | "missing_session" | "missing_user" | "suspended_service_account" | "suspended_user" | "user_creation_not_allowed";
+export type AuthStorageErrorCode = "device_authorization_denied" | "device_authorization_limit_exceeded" | "duplicate_device_authorization" | "duplicate_access_token" | "duplicate_identity" | "duplicate_invitation" | "duplicate_magic_link" | "duplicate_oidc_attempt" | "duplicate_service_account" | "duplicate_session" | "duplicate_user" | "email_link_not_allowed" | "expired_magic_link" | "expired_oidc_attempt" | "invalid_input" | "invalid_magic_link" | "invalid_oidc_attempt" | "invalid_device_authorization" | "missing_identity" | "missing_invitation" | "missing_magic_link" | "missing_oidc_attempt" | "missing_device_authorization" | "pending_device_authorization" | "missing_access_token" | "missing_service_account" | "missing_session" | "missing_user" | "suspended_service_account" | "suspended_user" | "user_creation_not_allowed";
 /**
  * Error for auth storage invariants and invalid auth state transitions.
  */

package/dist/storage/auth/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/storage/auth/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GACnB,gBAAgB,GAChB,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,eAAe,GACf,oBAAoB,GACpB,sBAAsB,GACtB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,iBAAiB,GACjB,cAAc,GACd,2BAA2B,GAC3B,gBAAgB,GAChB,2BAA2B,CAAA;AAE/B;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IAIvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IAHrC,QAAQ,CAAC,IAAI,sBAAqB;gBAGvB,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM;CAIlB"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/storage/auth/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,6BAA6B,GAC7B,qCAAqC,GACrC,gCAAgC,GAChC,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GACnB,gBAAgB,GAChB,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,eAAe,GACf,oBAAoB,GACpB,sBAAsB,GACtB,8BAA8B,GAC9B,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,GACpB,sBAAsB,GACtB,8BAA8B,GAC9B,8BAA8B,GAC9B,sBAAsB,GACtB,yBAAyB,GACzB,iBAAiB,GACjB,cAAc,GACd,2BAA2B,GAC3B,gBAAgB,GAChB,2BAA2B,CAAA;AAE/B;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IAIvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IAHrC,QAAQ,CAAC,IAAI,sBAAqB;gBAGvB,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM;CAIlB"}

package/dist/storage/auth/in-memory/auth-storage.d.ts

@@ -1,5 +1,6 @@
-import type { AuthStorage, CompleteMagicLinkSignInInput, CompleteOidcSignInInput, CompleteSignInResult, SuspendUserAndRevokeSessionsInput, UserRecord } from "../types";
+import type { AuthStorage, CompleteDeviceAuthorizationInput, CompleteDeviceAuthorizationResult, CompleteMagicLinkSignInInput, CompleteOidcSignInInput, CompleteSignInResult, SuspendUserAndRevokeSessionsInput, UserRecord } from "../types";
 import { InMemoryAuthAccessTokenStore } from "./access-tokens";
+import { InMemoryAuthDeviceAuthorizationStore } from "./device-authorizations";
 import { InMemoryAuthGroupMembershipStore } from "./group-memberships";
 import { InMemoryAuthUserIdentityStore } from "./identities";
 import { InMemoryAuthInvitationStore } from "./invitations";
@@ -22,8 +23,10 @@ export declare class InMemoryAuthStorage implements AuthStorage {
     readonly groupMemberships: InMemoryAuthGroupMembershipStore;
     readonly magicLinks: InMemoryAuthMagicLinkStore;
     readonly oidcAuthorizationAttempts: InMemoryAuthOidcAuthorizationAttemptStore;
+    readonly deviceAuthorizations: InMemoryAuthDeviceAuthorizationStore;
     snapshot(): InMemoryAuthStorageSnapshot;
     restore(snapshot: InMemoryAuthStorageSnapshot): void;
+    completeDeviceAuthorization(input: CompleteDeviceAuthorizationInput): Promise<CompleteDeviceAuthorizationResult>;
     completeMagicLinkSignIn(input: CompleteMagicLinkSignInInput): Promise<CompleteSignInResult>;
     completeOidcSignIn(input: CompleteOidcSignInInput): Promise<CompleteSignInResult>;
     suspendUserAndRevokeSessions(input: SuspendUserAndRevokeSessionsInput): Promise<UserRecord>;

package/dist/storage/auth/in-memory/auth-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-storage.d.ts","sourceRoot":"","sources":["../../../../src/storage/auth/in-memory/auth-storage.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,WAAW,EACX,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EAIpB,iCAAiC,EAEjC,UAAU,EACX,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAC1D,OAAO,EAAE,yCAAyC,EAAE,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,qCAAqC,CAAA;AACpG,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAA;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAuBhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAE/C,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6C;IAEnE,QAAQ,CAAC,KAAK,wBAAwC;IACtD,QAAQ,CAAC,UAAU,gCAAgD;IACnE,QAAQ,CAAC,eAAe,kCAAkD;IAC1E,QAAQ,CAAC,8BAA8B,iDAEtC;IACD,QAAQ,CAAC,QAAQ,2BAA2C;IAC5D,QAAQ,CAAC,YAAY,+BAA+C;IACpE,QAAQ,CAAC,WAAW,8BAA8C;IAClE,QAAQ,CAAC,gBAAgB,mCAAmD;IAC5E,QAAQ,CAAC,UAAU,6BAA6C;IAChE,QAAQ,CAAC,yBAAyB,4CAA4D;IAE9F,QAAQ,IAAI,2BAA2B;IAevC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI;IAa9C,uBAAuB,CAC3B,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAkJ1B,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyKjF,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,UAAU,CAAC;IAsBtB,OAAO,CAAC,8BAA8B;IAqCtC,OAAO,CAAC,iBAAiB;IAsBzB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,kBAAkB;CAY3B;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAA"}
+{"version":3,"file":"auth-storage.d.ts","sourceRoot":"","sources":["../../../../src/storage/auth/in-memory/auth-storage.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,WAAW,EACX,gCAAgC,EAChC,iCAAiC,EACjC,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EAIpB,iCAAiC,EAEjC,UAAU,EACX,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAA;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAC1D,OAAO,EAAE,yCAAyC,EAAE,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,qCAAqC,CAAA;AACpG,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAA;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAyBhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAE/C,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6C;IAEnE,QAAQ,CAAC,KAAK,wBAAwC;IACtD,QAAQ,CAAC,UAAU,gCAAgD;IACnE,QAAQ,CAAC,eAAe,kCAAkD;IAC1E,QAAQ,CAAC,8BAA8B,iDAEtC;IACD,QAAQ,CAAC,QAAQ,2BAA2C;IAC5D,QAAQ,CAAC,YAAY,+BAA+C;IACpE,QAAQ,CAAC,WAAW,8BAA8C;IAClE,QAAQ,CAAC,gBAAgB,mCAAmD;IAC5E,QAAQ,CAAC,UAAU,6BAA6C;IAChE,QAAQ,CAAC,yBAAyB,4CAA4D;IAC9F,QAAQ,CAAC,oBAAoB,uCAAuD;IAEpF,QAAQ,IAAI,2BAA2B;IAgBvC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI;IAc9C,2BAA2B,CAC/B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,iCAAiC,CAAC;IA2DvC,uBAAuB,CAC3B,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAkJ1B,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyKjF,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,UAAU,CAAC;IAsBtB,OAAO,CAAC,8BAA8B;IAqCtC,OAAO,CAAC,iBAAiB;IAsBzB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,kBAAkB;CAY3B;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAA"}

package/dist/storage/auth/in-memory/device-authorizations.d.ts

@@ -0,0 +1,29 @@
+import type { AuthDeviceAuthorizationStore, CreateDeviceAuthorizationInput, DeviceAuthorizationRecord } from "../types";
+import type { AuthStorageState } from "./shared";
+export declare class InMemoryAuthDeviceAuthorizationStore implements AuthDeviceAuthorizationStore {
+    private readonly state;
+    constructor(state: AuthStorageState);
+    create(input: CreateDeviceAuthorizationInput): Promise<DeviceAuthorizationRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<DeviceAuthorizationRecord | null>;
+    getByUserCode(params: {
+        readonly projectId: string;
+        readonly userCode: string;
+    }): Promise<DeviceAuthorizationRecord | null>;
+    approve(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly userId: string;
+        readonly sessionId: string;
+        readonly approvedAt: Date;
+    }): Promise<DeviceAuthorizationRecord>;
+    deny(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly deniedAt: Date;
+    }): Promise<DeviceAuthorizationRecord>;
+    private requirePending;
+}
+//# sourceMappingURL=device-authorizations.d.ts.map

package/dist/storage/auth/in-memory/device-authorizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-authorizations.d.ts","sourceRoot":"","sources":["../../../../src/storage/auth/in-memory/device-authorizations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,yBAAyB,EAC1B,MAAM,UAAU,CAAA;AAEjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAUhD,qBAAa,oCAAqC,YAAW,4BAA4B;IAC3E,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,gBAAgB;IAE9C,MAAM,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAqCjF,OAAO,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE;IAOnE,aAAa,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAS/E,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA2BhC,IAAI,CAAC,MAAM,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KACxB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAWtC,OAAO,CAAC,cAAc;CAgBvB"}

package/dist/storage/auth/in-memory/shared.d.ts

@@ -1,5 +1,5 @@
 import { type AuthSessionAudience } from "../../../auth/audience";
-import type { AccessTokenRecord, CompleteAuthSessionInput, CreateAuthAccessTokenInput, CreateAuthServiceAccountInput, CreateAuthSessionInput, GroupMembershipRecord, InvitationRecord, MagicLinkRecord, OidcAuthorizationAttemptRecord, ServiceAccountGroupMembershipRecord, ServiceAccountRecord, SessionRecord, UpsertAuthGroupMembershipInput, UpsertAuthServiceAccountGroupMembershipInput, UserIdentityRecord, UserRecord } from "../types";
+import type { AccessTokenRecord, CompleteAuthSessionInput, CreateAuthAccessTokenInput, CreateAuthServiceAccountInput, CreateAuthSessionInput, DeviceAuthorizationRecord, GroupMembershipRecord, InvitationRecord, MagicLinkRecord, OidcAuthorizationAttemptRecord, ServiceAccountGroupMembershipRecord, ServiceAccountRecord, SessionRecord, UpsertAuthGroupMembershipInput, UpsertAuthServiceAccountGroupMembershipInput, UserIdentityRecord, UserRecord } from "../types";
 export interface AuthStorageState {
     readonly users: Map<string, UserRecord>;
     readonly identities: Map<string, UserIdentityRecord>;
@@ -11,6 +11,7 @@ export interface AuthStorageState {
     readonly groupMemberships: Map<string, GroupMembershipRecord>;
     readonly magicLinks: Map<string, MagicLinkRecord>;
     readonly oidcAuthorizationAttempts: Map<string, OidcAuthorizationAttemptRecord>;
+    readonly deviceAuthorizations: Map<string, DeviceAuthorizationRecord>;
 }
 export declare function createAuthStorageState(): AuthStorageState;
 export declare function userKey(projectId: string, id: string): string;
@@ -18,6 +19,7 @@ export declare function identityKey(projectId: string, strategyId: string, subje
 export declare function serviceAccountKey(projectId: string, id: string): string;
 export declare function serviceAccountGroupMembershipKey(projectId: string, serviceAccountId: string, groupId: string): string;
 export declare function sessionKey(projectId: string, id: string): string;
+export declare function deviceAuthorizationKey(projectId: string, id: string): string;
 export declare function accessTokenKey(projectId: string, id: string): string;
 export declare function invitationKey(projectId: string, id: string): string;
 export declare function groupMembershipKey(projectId: string, userId: string, groupId: string): string;

package/dist/storage/auth/in-memory/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/storage/auth/in-memory/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAA8B,MAAM,wBAAwB,CAAA;AAE7F,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,aAAa,EACb,8BAA8B,EAC9B,4CAA4C,EAC5C,kBAAkB,EAClB,UAAU,EACX,MAAM,UAAU,CAAA;AAEjB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IACpD,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC3D,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAA;IACzF,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC7C,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IACrD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC7D,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACjD,QAAQ,CAAC,yBAAyB,EAAE,GAAG,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAA;CAChF;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CAazD;AAMD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7F;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAE3C;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAEjE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAE3C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI,CAEvD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAE5F;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACtC,SAAS,MAAM,EAAE,GAAG,SAAS,CAE/B;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GACpD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAE/C;AAED,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,EAC5F,CAAC,EAAE,CAAC,EACJ,CAAC,EAAE,CAAC,EACJ,KAAK,EAAE,KAAK,GAAG,MAAM,GACpB,MAAM,CAOR;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAM1E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAEhF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAEnF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAE3E;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,UAAU,GAAG,IAAI,CAQnB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,IAAI,GACR,gBAAgB,GAAG,IAAI,CASzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,IAAI,EACf,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,SAAS,aAAa,EAAE,CAyB1B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,IAAI,GACd,SAAS,eAAe,EAAE,CAsB5B;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,IAAI,CAON;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,GAChC,IAAI,CAKN;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,sBAAsB,GAC5B,aAAa,CA0Bf;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,6BAA6B,GACnC,oBAAoB,CA4BtB;AAED,wBAAgB,yCAAyC,CACvD,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,4CAA4C,GAClD,mCAAmC,CA2BrC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,0BAA0B,GAChC,iBAAiB,CAmCnB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,8BAA8B,GACpC,qBAAqB,CA4BvB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,qBAAqB,GAAG,IAAI,CAa9B;AAwCD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,eAAe,CAkCjB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,8BAA8B,CAkChC"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/storage/auth/in-memory/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAA8B,MAAM,wBAAwB,CAAA;AAE7F,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,aAAa,EACb,8BAA8B,EAC9B,4CAA4C,EAC5C,kBAAkB,EAClB,UAAU,EACX,MAAM,UAAU,CAAA;AAEjB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IACpD,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC3D,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAA;IACzF,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC7C,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IACrD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC7D,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACjD,QAAQ,CAAC,yBAAyB,EAAE,GAAG,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAA;IAC/E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAA;CACtE;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CAczD;AAMD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7F;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAE3C;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAEjE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAE3C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI,CAEvD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAE5F;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACtC,SAAS,MAAM,EAAE,GAAG,SAAS,CAE/B;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GACpD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAE/C;AAED,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,EAC5F,CAAC,EAAE,CAAC,EACJ,CAAC,EAAE,CAAC,EACJ,KAAK,EAAE,KAAK,GAAG,MAAM,GACpB,MAAM,CAOR;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAM1E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAEhF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAEnF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAE3E;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,UAAU,GAAG,IAAI,CAQnB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,IAAI,GACR,gBAAgB,GAAG,IAAI,CASzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,IAAI,EACf,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,SAAS,aAAa,EAAE,CAyB1B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,IAAI,GACd,SAAS,eAAe,EAAE,CAsB5B;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,IAAI,CAON;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,GAChC,IAAI,CAKN;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,sBAAsB,GAC5B,aAAa,CA0Bf;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,6BAA6B,GACnC,oBAAoB,CA4BtB;AAED,wBAAgB,yCAAyC,CACvD,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,4CAA4C,GAClD,mCAAmC,CA2BrC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,0BAA0B,GAChC,iBAAiB,CAmCnB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,8BAA8B,GACpC,qBAAqB,CA4BvB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,qBAAqB,GAAG,IAAI,CAa9B;AAwCD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,eAAe,CAkCjB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,8BAA8B,CAkChC"}

package/dist/storage/auth/index.d.ts

@@ -1,5 +1,6 @@
 export type { AuthStorageErrorCode } from "./errors";
 export { AuthStorageError } from "./errors";
 export { InMemoryAuthStorage } from "./in-memory";
-export type { AccessTokenRecord, AccessTokenSubjectType, AuthAccessTokenStore, AuthGroupMembershipStore, AuthInvitationStore, AuthMagicLinkStore, AuthOidcAuthorizationAttemptStore, AuthServiceAccountGroupMembershipStore, AuthServiceAccountStore, AuthSessionStore, AuthStorage, AuthUserIdentityStore, AuthUserStore, CompleteAuthSessionInput, CompleteMagicLinkSignInInput, CompleteOidcSignInInput, CompleteSignInResult, CreateAuthAccessTokenInput, CreateAuthMagicLinkInput, CreateAuthServiceAccountInput, CreateAuthSessionInput, CreateAuthUserInput, CreateOidcAuthorizationAttemptInput, CreateOrUpdateAuthInvitationInput, GroupMembershipRecord, GroupMembershipSource, InvitationRecord, InvitationStatus, ListAuthAccessTokensInput, ListAuthAccessTokensResult, ListAuthInvitationsInput, ListAuthInvitationsResult, ListAuthServiceAccountsInput, ListAuthServiceAccountsResult, ListAuthUsersInput, ListAuthUsersResult, MagicLinkRecord, OidcAuthorizationAttemptRecord, ReconcileAuthServiceAccountGroupMembershipsInput, ServiceAccountGroupMembershipRecord, ServiceAccountRecord, ServiceAccountStatus, SessionRecord, SuspendUserAndRevokeSessionsInput, UpdateAuthServiceAccountInput, UpdateAuthUserProfileInput, UpdateAuthUserStatusInput, UpsertAuthGroupMembershipInput, UpsertAuthServiceAccountGroupMembershipInput, UpsertAuthUserIdentityInput, UserIdentityRecord, UserRecord, UserStatus, } from "./types";
+export type { AccessTokenRecord, AccessTokenSubjectType, AuthAccessTokenStore, AuthDeviceAuthorizationStore, AuthGroupMembershipStore, AuthInvitationStore, AuthMagicLinkStore, AuthOidcAuthorizationAttemptStore, AuthServiceAccountGroupMembershipStore, AuthServiceAccountStore, AuthSessionStore, AuthStorage, AuthUserIdentityStore, AuthUserStore, CompleteAuthSessionInput, CompleteDeviceAuthorizationInput, CompleteDeviceAuthorizationResult, CompleteMagicLinkSignInInput, CompleteOidcSignInInput, CompleteSignInResult, CreateAuthAccessTokenInput, CreateAuthMagicLinkInput, CreateAuthServiceAccountInput, CreateAuthSessionInput, CreateAuthUserInput, CreateDeviceAuthorizationInput, CreateOidcAuthorizationAttemptInput, CreateOrUpdateAuthInvitationInput, DeviceAuthorizationRecord, DeviceAuthorizationStatus, GroupMembershipRecord, GroupMembershipSource, InvitationRecord, InvitationStatus, ListAuthAccessTokensInput, ListAuthAccessTokensResult, ListAuthInvitationsInput, ListAuthInvitationsResult, ListAuthServiceAccountsInput, ListAuthServiceAccountsResult, ListAuthUsersInput, ListAuthUsersResult, MagicLinkRecord, OidcAuthorizationAttemptRecord, ReconcileAuthServiceAccountGroupMembershipsInput, ServiceAccountGroupMembershipRecord, ServiceAccountRecord, ServiceAccountStatus, SessionRecord, SuspendUserAndRevokeSessionsInput, UpdateAuthServiceAccountInput, UpdateAuthUserProfileInput, UpdateAuthUserStatusInput, UpsertAuthGroupMembershipInput, UpsertAuthServiceAccountGroupMembershipInput, UpsertAuthUserIdentityInput, UserIdentityRecord, UserRecord, UserStatus, } from "./types";
+export { MAX_PENDING_DEVICE_AUTHORIZATIONS } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/storage/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,YAAY,EACV,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,iCAAiC,EACjC,sCAAsC,EACtC,uBAAuB,EACvB,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACtB,mBAAmB,EACnB,mCAAmC,EACnC,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,8BAA8B,EAC9B,gDAAgD,EAChD,mCAAmC,EACnC,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,iCAAiC,EACjC,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,4CAA4C,EAC5C,2BAA2B,EAC3B,kBAAkB,EAClB,UAAU,EACV,UAAU,GACX,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,YAAY,EACV,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,iCAAiC,EACjC,sCAAsC,EACtC,uBAAuB,EACvB,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,gCAAgC,EAChC,iCAAiC,EACjC,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACtB,mBAAmB,EACnB,8BAA8B,EAC9B,mCAAmC,EACnC,iCAAiC,EACjC,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,8BAA8B,EAC9B,gDAAgD,EAChD,mCAAmC,EACnC,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,iCAAiC,EACjC,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,4CAA4C,EAC5C,2BAA2B,EAC3B,kBAAkB,EAClB,UAAU,EACV,UAAU,GACX,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAA"}

package/dist/storage/auth/types.d.ts

@@ -4,6 +4,8 @@ export type ServiceAccountStatus = "active" | "suspended";
 export type InvitationStatus = "pending" | "accepted" | "revoked";
 export type GroupMembershipSource = "invitation" | "manual" | "agent";
 export type AccessTokenSubjectType = "user" | "serviceAccount";
+export type DeviceAuthorizationStatus = "pending" | "approved" | "denied" | "consumed";
+export declare const MAX_PENDING_DEVICE_AUTHORIZATIONS = 100;
 export interface UserRecord {
     readonly id: string;
     readonly projectId: string;
@@ -125,6 +127,23 @@ export interface OidcAuthorizationAttemptRecord {
     readonly expiresAt: Date;
     readonly consumedAt?: Date;
 }
+export interface DeviceAuthorizationRecord {
+    readonly id: string;
+    readonly projectId: string;
+    readonly deviceCodeHash: string;
+    readonly userCode: string;
+    readonly clientName: string;
+    readonly tokenName: string;
+    readonly tokenExpiresAt: Date;
+    readonly status: DeviceAuthorizationStatus;
+    readonly approvedUserId?: string;
+    readonly approvedSessionId?: string;
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+    readonly approvedAt?: Date;
+    readonly deniedAt?: Date;
+    readonly consumedAt?: Date;
+}
 export interface CreateAuthUserInput {
     readonly id: string;
     readonly projectId: string;
@@ -321,6 +340,28 @@ export interface CreateOidcAuthorizationAttemptInput {
     readonly createdAt: Date;
     readonly expiresAt: Date;
 }
+export interface CreateDeviceAuthorizationInput {
+    readonly id: string;
+    readonly projectId: string;
+    readonly deviceCodeHash: string;
+    readonly userCode: string;
+    readonly clientName: string;
+    readonly tokenName: string;
+    readonly tokenExpiresAt: Date;
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+}
+export interface CompleteDeviceAuthorizationInput {
+    readonly projectId: string;
+    readonly id: string;
+    readonly deviceCodeHash: string;
+    readonly accessToken: CreateAuthAccessTokenInput;
+    readonly completedAt: Date;
+}
+export interface CompleteDeviceAuthorizationResult {
+    readonly authorization: DeviceAuthorizationRecord;
+    readonly accessToken: AccessTokenRecord;
+}
 export interface CompleteMagicLinkSignInInput {
     readonly projectId: string;
     readonly magicLinkId: string;
@@ -567,6 +608,29 @@ export interface AuthOidcAuthorizationAttemptStore {
         readonly consumedAt: Date;
     }): Promise<OidcAuthorizationAttemptRecord>;
 }
+export interface AuthDeviceAuthorizationStore {
+    create(input: CreateDeviceAuthorizationInput): Promise<DeviceAuthorizationRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<DeviceAuthorizationRecord | null>;
+    getByUserCode(params: {
+        readonly projectId: string;
+        readonly userCode: string;
+    }): Promise<DeviceAuthorizationRecord | null>;
+    approve(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly userId: string;
+        readonly sessionId: string;
+        readonly approvedAt: Date;
+    }): Promise<DeviceAuthorizationRecord>;
+    deny(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly deniedAt: Date;
+    }): Promise<DeviceAuthorizationRecord>;
+}
 export interface AuthStorage {
     readonly users: AuthUserStore;
     readonly identities: AuthUserIdentityStore;
@@ -578,8 +642,10 @@ export interface AuthStorage {
     readonly groupMemberships: AuthGroupMembershipStore;
     readonly magicLinks: AuthMagicLinkStore;
     readonly oidcAuthorizationAttempts: AuthOidcAuthorizationAttemptStore;
+    readonly deviceAuthorizations: AuthDeviceAuthorizationStore;
     completeMagicLinkSignIn(input: CompleteMagicLinkSignInInput): Promise<CompleteSignInResult>;
     completeOidcSignIn(input: CompleteOidcSignInInput): Promise<CompleteSignInResult>;
+    completeDeviceAuthorization(input: CompleteDeviceAuthorizationInput): Promise<CompleteDeviceAuthorizationResult>;
     suspendUserAndRevokeSessions(input: SuspendUserAndRevokeSessionsInput): Promise<UserRecord>;
 }
 //# sourceMappingURL=types.d.ts.map