@sixb/pg 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sixb contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,73 @@
+# @sixb/pg
+
+PostgreSQL storage provider for Sixb.
+
+One shared connection pool (porsager `postgres`) backs every Sixb store: objects, ontology commits,
+auth, agents, timeseries, and the run history for actions, syncs, pipelines, projections, workflows,
+and webhooks. This is the provider to use for anything you intend to operate.
+
+## Install
+
+```bash
+bun add @sixb/pg
+```
+
+## Usage
+
+```ts
+import { PostgresStorage } from "@sixb/pg"
+import { createSixb } from "@sixb/core"
+
+const storage = new PostgresStorage({
+  connectionString: process.env.DATABASE_URL,
+})
+
+export const sixb = createSixb({ storage, broker })
+```
+
+All Sixb tables live in one schema, `sixb` by default. Set `schemaName` to share a database with
+other applications; it is pinned through `search_path` on every pooled connection.
+
+## Migrations
+
+`PostgresStorage` exposes core's `StorageMigrator` contract. The CLI runs it at startup and
+`sixb db migrate` runs it on demand — you do not write migrations, they ship inside this package.
+
+Before 1.0 the schema is a single migration whose checksum is verified at boot. A schema change
+**replaces** that migration instead of adding another, so moving between 0.x versions can require
+recreating the database. `dropSchema()` exists for exactly that, and for test teardown — it deletes
+every Sixb table and the schema itself.
+
+## Pooling and timeouts
+
+| Option | Default | Why you would set it |
+| --- | --- | --- |
+| `max` | `10` | Pool size. Size it per role, not per project — an API replica and a worker each get their own pool. |
+| `statementTimeoutMillis` | unset | A single stalled query can otherwise pin its connection until the process restarts. Keep it generous or unset for workers that run long bulk writes. |
+| `idleInTransactionSessionTimeoutMillis` | unset | Aborts transactions left open and idle, releasing the connection. |
+| `idleTimeoutMillis` | `30000` | Returns idle connections to the server. |
+| `connectTimeoutMillis` | `10000` | Fail fast when the database is unreachable. |
+| `shutdownTimeoutMillis` | `5000` | `close()` stops accepting queries and waits this long for in-flight work, so a restart drains instead of severing live writes. |
+
+Call `close()` on shutdown.
+
+### Behind a connection pooler
+
+`prepare` defaults to `true`, which is correct for a direct connection. In PgBouncer transaction
+mode, server-side prepared statements need PgBouncer >= 1.21 with `max_prepared_statements > 0`; set
+`prepare: false` for an older PgBouncer, or when that setting is `0`.
+
+## Transactions
+
+```ts
+await storage.transaction(
+  async (tx) => {
+    // Use `tx`, never the root storage — the root throws inside a transaction callback.
+  },
+  { isolation: "serializable" }
+)
+```
+
+Nested transactions are rejected. A serialization conflict or deadlock surfaces as a
+`StorageTransactionError` with `code: "serialization_failure"`, which is the signal that the
+operation is safe to retry.

package/dist/agents/agent-storage.d.ts

@@ -0,0 +1,20 @@
+import type { AgentStorage } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+import { PgAgentMessageStore } from "./messages";
+import { PgAgentRunStore } from "./runs";
+import { PgAgentThreadStore } from "./threads";
+export interface PgAgentStorageOptions {
+    readonly sql: PgStoreClient;
+}
+/**
+ * PostgreSQL-backed agent persistence: thread / run / message sub-stores sharing one connection.
+ * Cross-table writes (reserve + finish touch the thread anchor, append bumps thread stats) run
+ * inside `runPgTransaction` with `SELECT ... FOR UPDATE` row locks for single-flight safety.
+ */
+export declare class PgAgentStorage implements AgentStorage {
+    readonly threads: PgAgentThreadStore;
+    readonly runs: PgAgentRunStore;
+    readonly messages: PgAgentMessageStore;
+    constructor(options: PgAgentStorageOptions);
+}
+//# sourceMappingURL=agent-storage.d.ts.map

package/dist/agents/agent-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-storage.d.ts","sourceRoot":"","sources":["../../src/agents/agent-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;CAC5B;AAED;;;;GAIG;AACH,qBAAa,cAAe,YAAW,YAAY;IACjD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;gBAE1B,OAAO,EAAE,qBAAqB;CAK3C"}

package/dist/agents/index.d.ts

@@ -0,0 +1,6 @@
+export type { PgAgentStorageOptions } from "./agent-storage";
+export { PgAgentStorage } from "./agent-storage";
+export { PgAgentMessageStore } from "./messages";
+export { PgAgentRunStore } from "./runs";
+export { PgAgentThreadStore } from "./threads";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA"}

package/dist/agents/messages.d.ts

@@ -0,0 +1,13 @@
+import { type AgentMessageRecord, type AgentMessageStore, type AppendAgentMessageInput, type ListAgentMessagesInput, type ListAgentMessagesResult } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+export declare class PgAgentMessageStore implements AgentMessageStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    append(input: AppendAgentMessageInput): Promise<AgentMessageRecord>;
+    getById(params: {
+        projectId: string;
+        id: string;
+    }): Promise<AgentMessageRecord | null>;
+    list(input: ListAgentMessagesInput): Promise<ListAgentMessagesResult>;
+}
+//# sourceMappingURL=messages.d.ts.map

package/dist/agents/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/agents/messages.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EAEtB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,iBAAiB,CAAA;AAGtE,qBAAa,mBAAoB,YAAW,iBAAiB;IAC/C,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyFnE,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAQtF,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CA6B5E"}

package/dist/agents/rows.d.ts

@@ -0,0 +1,77 @@
+import { type AgentMessagePart, type Principal } from "@sixb/core";
+import { type AgentMessageRecord, type AgentRunDiagnostic, type AgentRunRecord, type AgentThreadRecord } from "@sixb/core/storage";
+import type { SQLClient, SqlParameter } from "../pg-client";
+export interface AgentThreadRow {
+    project_id: string;
+    id: string;
+    agent_id: string;
+    owner_principal_type: Principal["type"];
+    owner_principal_id: string;
+    title: string | null;
+    status: AgentThreadRecord["status"];
+    active_run_id: string | null;
+    last_message_at: Date | string | null;
+    message_count: number | string;
+    created_at: Date | string;
+    updated_at: Date | string;
+}
+export interface AgentRunRow {
+    project_id: string;
+    id: string;
+    thread_id: string;
+    agent_id: string;
+    trigger_message_id: string;
+    requested_by_principal_type: Principal["type"] | null;
+    requested_by_principal_id: string | null;
+    execution_principal_type: "serviceAccount" | null;
+    execution_principal_id: string | null;
+    status: AgentRunRecord["status"];
+    model_id: string | null;
+    finish_reason: string | null;
+    usage_input_tokens: number | string | null;
+    usage_output_tokens: number | string | null;
+    usage_total_tokens: number | string | null;
+    usage_reasoning_tokens: number | string | null;
+    usage_cached_input_tokens: number | string | null;
+    error: string | null;
+    diagnostics: AgentRunDiagnostic[] | string | null;
+    attempt: number | string;
+    execution_token: string | null;
+    execution_queue_lease_expires_at: Date | string | null;
+    created_at: Date | string;
+    started_at: Date | string | null;
+    completed_at: Date | string | null;
+}
+export interface AgentMessageRow {
+    project_id: string;
+    id: string;
+    thread_id: string;
+    run_id: string | null;
+    role: AgentMessageRecord["role"];
+    author_principal_type: Principal["type"] | null;
+    author_principal_id: string | null;
+    seq: number | string;
+    parts: AgentMessagePart[] | string;
+    metadata: unknown;
+    content_version: number | string;
+    created_at: Date | string;
+    completed_at: Date | string | null;
+}
+export declare function rowToThreadRecord(row: AgentThreadRow): AgentThreadRecord;
+export declare function rowToRunRecord(row: AgentRunRow): AgentRunRecord;
+export declare function rowToMessageRecord(row: AgentMessageRow): AgentMessageRecord;
+export declare function queryAgentList<TRow>(input: {
+    readonly sql: SQLClient;
+    readonly table: "agent_threads" | "agent_messages";
+    readonly whereClauses: readonly string[];
+    readonly params: readonly SqlParameter[];
+    readonly nextIndex: number;
+    readonly orderBy: string;
+    readonly limit?: number;
+    readonly offset?: number;
+}): Promise<{
+    readonly rows: readonly TRow[];
+    readonly total: number;
+    readonly hasMore: boolean;
+}>;
+//# sourceMappingURL=rows.d.ts.map

package/dist/agents/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../src/agents/rows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,SAAS,EAAoB,MAAM,YAAY,CAAA;AACpF,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAEnB,KAAK,iBAAiB,EAEvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAK3D,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACnC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,eAAe,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;IACrC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,UAAU,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,UAAU,EAAE,IAAI,GAAG,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,2BAA2B,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IACrD,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,wBAAwB,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACjD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC1C,mBAAmB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC3C,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC1C,sBAAsB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC9C,yBAAyB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACjD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,kBAAkB,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA;IACjD,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,gCAAgC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;IACtD,UAAU,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,UAAU,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;IAChC,YAAY,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChC,qBAAqB,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAC/C,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;IACpB,KAAK,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAA;IAClC,QAAQ,EAAE,OAAO,CAAA;IACjB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,YAAY,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CACnC;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,iBAAiB,CAcxE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAgC/D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,kBAAkB,CAkB3E;AAkDD,wBAAsB,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;IAChD,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAAA;IAClD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAwBjG"}

package/dist/agents/runs.d.ts

@@ -0,0 +1,25 @@
+import { type AgentRunRecord, type AgentRunStore, type ConfirmAgentRunExecutionOwnershipInput, type CreateAgentRunInput, type FinishAgentRunInput, type FinishQueuedAgentRunInput, type ListAgentRunsInput, type ListAgentRunsResult, type ReclaimAgentRunInput, type StartAgentRunInput } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+export declare class PgAgentRunStore implements AgentRunStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAgentRunInput): Promise<AgentRunRecord>;
+    start(input: StartAgentRunInput): Promise<AgentRunRecord>;
+    finishQueued(input: FinishQueuedAgentRunInput): Promise<AgentRunRecord>;
+    reclaim(input: ReclaimAgentRunInput): Promise<AgentRunRecord>;
+    confirmExecutionOwnership(input: ConfirmAgentRunExecutionOwnershipInput): Promise<AgentRunRecord>;
+    finish(input: FinishAgentRunInput): Promise<AgentRunRecord>;
+    getById(params: {
+        projectId: string;
+        id: string;
+    }): Promise<AgentRunRecord | null>;
+    getByIds(params: {
+        projectId: string;
+        ids: readonly string[];
+    }): Promise<readonly AgentRunRecord[]>;
+    list(input: ListAgentRunsInput): Promise<ListAgentRunsResult>;
+    private lockRunning;
+    private lockStatus;
+    private releaseThread;
+}
+//# sourceMappingURL=runs.d.ts.map

package/dist/agents/runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../../src/agents/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,KAAK,sCAAsC,EAC3C,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAA;AAI3B,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,iBAAiB,CAAA;AAKtE,qBAAa,eAAgB,YAAW,aAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAuE3D,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IAsBzD,YAAY,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;IAevE,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAiB7D,yBAAyB,CAC7B,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,cAAc,CAAC;IAuBpB,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAwC3D,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQlF,QAAQ,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,MAAM,CAAA;QACjB,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;KACvB,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC;IAwBhC,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyCnE,OAAO,CAAC,WAAW;YAIL,UAAU;YA6BV,aAAa;CAM5B"}

package/dist/agents/threads.d.ts

@@ -0,0 +1,13 @@
+import { type AgentThreadRecord, type AgentThreadStore, type CreateAgentThreadInput, type ListAgentThreadsInput, type ListAgentThreadsResult } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAgentThreadStore implements AgentThreadStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAgentThreadInput): Promise<AgentThreadRecord>;
+    getById(params: {
+        projectId: string;
+        id: string;
+    }): Promise<AgentThreadRecord | null>;
+    list(input: ListAgentThreadsInput): Promise<ListAgentThreadsResult>;
+}
+//# sourceMappingURL=threads.d.ts.map

package/dist/agents/threads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threads.d.ts","sourceRoot":"","sources":["../../src/agents/threads.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAA;AAG3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAGpD,qBAAa,kBAAmB,YAAW,gBAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2CjE,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAQrF,IAAI,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAgD1E"}

package/dist/auth-storage/access-tokens.d.ts

@@ -0,0 +1,33 @@
+import type { AccessTokenRecord, AuthAccessTokenStore, CreateAuthAccessTokenInput, ListAuthAccessTokensInput, ListAuthAccessTokensResult } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAuthAccessTokenStore implements AuthAccessTokenStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAuthAccessTokenInput): Promise<AccessTokenRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<AccessTokenRecord | null>;
+    list(input: ListAuthAccessTokensInput): Promise<ListAuthAccessTokensResult>;
+    findValidByTokenHash(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly kind: AccessTokenRecord["kind"];
+        readonly tokenHash: string;
+        readonly now: Date;
+    }): Promise<AccessTokenRecord | null>;
+    revoke(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly revokedAt: Date;
+    }): Promise<AccessTokenRecord>;
+    touch(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly lastUsedAt: Date;
+        readonly userAgent?: string;
+        readonly ipAddress?: string;
+    }): Promise<AccessTokenRecord>;
+    private assertSubjectExists;
+}
+//# sourceMappingURL=access-tokens.d.ts.map

package/dist/auth-storage/access-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-tokens.d.ts","sourceRoot":"","sources":["../../src/auth-storage/access-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAWpD,qBAAa,sBAAuB,YAAW,oBAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0DrE,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAU/B,IAAI,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAgD3E,oBAAoB,CAAC,MAAM,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;QACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAe/B,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAiBxB,KAAK,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;QACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC5B,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAmBhB,mBAAmB;CA+BlC"}

package/dist/auth-storage/auth-storage.d.ts

@@ -0,0 +1,41 @@
+import type { AuthStorage, CompleteMagicLinkSignInInput, CompleteOidcSignInInput, CompleteSignInResult, SuspendUserAndRevokeSessionsInput, UserRecord } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+import { PgAuthAccessTokenStore } from "./access-tokens";
+import { PgAuthGroupMembershipStore } from "./group-memberships";
+import { PgAuthUserIdentityStore } from "./identities";
+import { PgAuthInvitationStore } from "./invitations";
+import { PgAuthMagicLinkStore } from "./magic-links";
+import { PgAuthOidcAuthorizationAttemptStore } from "./oidc-attempts";
+import { PgAuthServiceAccountGroupMembershipStore } from "./service-account-group-memberships";
+import { PgAuthServiceAccountStore } from "./service-accounts";
+import { PgAuthSessionStore } from "./sessions";
+import { PgAuthUserStore } from "./users";
+export interface PgAuthStorageOptions {
+    readonly sql: PgStoreClient;
+}
+export declare class PgAuthStorage implements AuthStorage {
+    private readonly sql;
+    readonly users: PgAuthUserStore;
+    readonly identities: PgAuthUserIdentityStore;
+    readonly serviceAccounts: PgAuthServiceAccountStore;
+    readonly serviceAccountGroupMemberships: PgAuthServiceAccountGroupMembershipStore;
+    readonly sessions: PgAuthSessionStore;
+    readonly accessTokens: PgAuthAccessTokenStore;
+    readonly invitations: PgAuthInvitationStore;
+    readonly groupMemberships: PgAuthGroupMembershipStore;
+    readonly magicLinks: PgAuthMagicLinkStore;
+    readonly oidcAuthorizationAttempts: PgAuthOidcAuthorizationAttemptStore;
+    constructor(options: PgAuthStorageOptions);
+    completeMagicLinkSignIn(input: CompleteMagicLinkSignInInput): Promise<CompleteSignInResult>;
+    completeOidcSignIn(input: CompleteOidcSignInInput): Promise<CompleteSignInResult>;
+    suspendUserAndRevokeSessions(input: SuspendUserAndRevokeSessionsInput): Promise<UserRecord>;
+    private assertMagicLinkUsable;
+    private assertOidcAttemptUsable;
+    private insertUser;
+    private acceptInvitationAndApplyGroups;
+    private applyManualGroups;
+    private createSignInSession;
+    private consumeOidcAttempt;
+    private upsertIdentity;
+}
+//# sourceMappingURL=auth-storage.d.ts.map

package/dist/auth-storage/auth-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-storage.d.ts","sourceRoot":"","sources":["../../src/auth-storage/auth-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EAIpB,iCAAiC,EAEjC,UAAU,EACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAA;AAQrE,OAAO,EAAE,wCAAwC,EAAE,MAAM,qCAAqC,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAqB/C,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAMzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;CAC5B;AAED,qBAAa,aAAc,YAAW,WAAW;IAC/C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAA;IAC5C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAA;IACnD,QAAQ,CAAC,8BAA8B,EAAE,wCAAwC,CAAA;IACjF,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAA;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAA;IACrD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,yBAAyB,EAAE,mCAAmC,CAAA;gBAE3D,OAAO,EAAE,oBAAoB;IAcnC,uBAAuB,CAC3B,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAyL1B,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqNjF,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,UAAU,CAAC;IAsCtB,OAAO,CAAC,qBAAqB;IAiB7B,OAAO,CAAC,uBAAuB;YAiBjB,UAAU;YA6CV,8BAA8B;YA+C9B,iBAAiB;YA2BjB,mBAAmB;YA6BnB,kBAAkB;YAclB,cAAc;CAwC7B"}

package/dist/auth-storage/group-memberships.d.ts

@@ -0,0 +1,21 @@
+import type { AuthGroupMembershipStore, GroupMembershipRecord, UpsertAuthGroupMembershipInput } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAuthGroupMembershipStore implements AuthGroupMembershipStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    upsert(input: UpsertAuthGroupMembershipInput): Promise<GroupMembershipRecord>;
+    remove(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly groupId: string;
+    }): Promise<GroupMembershipRecord | null>;
+    listForUser(params: {
+        readonly projectId: string;
+        readonly userId: string;
+    }): Promise<readonly GroupMembershipRecord[]>;
+    listForGroup(params: {
+        readonly projectId: string;
+        readonly groupId: string;
+    }): Promise<readonly GroupMembershipRecord[]>;
+}
+//# sourceMappingURL=group-memberships.d.ts.map

package/dist/auth-storage/group-memberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-memberships.d.ts","sourceRoot":"","sources":["../../src/auth-storage/group-memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACrB,8BAA8B,EAC/B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAKpD,qBAAa,0BAA2B,YAAW,wBAAwB;IAC7D,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI7E,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACzB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAInC,WAAW,CAAC,MAAM,EAAE;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAIvC,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;CAW9C"}

package/dist/auth-storage/identities.d.ts

@@ -0,0 +1,17 @@
+import type { AuthUserIdentityStore, UpsertAuthUserIdentityInput, UserIdentityRecord } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAuthUserIdentityStore implements AuthUserIdentityStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    upsert(input: UpsertAuthUserIdentityInput): Promise<UserIdentityRecord>;
+    getBySubject(params: {
+        readonly projectId: string;
+        readonly strategyId: string;
+        readonly subject: string;
+    }): Promise<UserIdentityRecord | null>;
+    listForUser(params: {
+        readonly projectId: string;
+        readonly userId: string;
+    }): Promise<readonly UserIdentityRecord[]>;
+}
+//# sourceMappingURL=identities.d.ts.map

package/dist/auth-storage/identities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identities.d.ts","sourceRoot":"","sources":["../../src/auth-storage/identities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EACnB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAKpD,qBAAa,uBAAwB,YAAW,qBAAqB;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgDvE,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACzB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKhC,WAAW,CAAC,MAAM,EAAE;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC;CAW3C"}

package/dist/auth-storage/index.d.ts

@@ -0,0 +1,3 @@
+export type { PgAuthStorageOptions } from "./auth-storage";
+export { PgAuthStorage } from "./auth-storage";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth-storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth-storage/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/auth-storage/invitations.d.ts

@@ -0,0 +1,29 @@
+import type { AuthInvitationStore, CreateOrUpdateAuthInvitationInput, InvitationRecord, ListAuthInvitationsInput, ListAuthInvitationsResult } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+export declare class PgAuthInvitationStore implements AuthInvitationStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    createOrUpdateActive(input: CreateOrUpdateAuthInvitationInput): Promise<InvitationRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<InvitationRecord | null>;
+    getActiveByEmail(params: {
+        readonly projectId: string;
+        readonly email: string;
+        readonly now: Date;
+    }): Promise<InvitationRecord | null>;
+    list(input: ListAuthInvitationsInput): Promise<ListAuthInvitationsResult>;
+    accept(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly acceptedAt: Date;
+    }): Promise<InvitationRecord>;
+    revoke(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly revokedAt: Date;
+    }): Promise<InvitationRecord>;
+    private validateCreator;
+}
+//# sourceMappingURL=invitations.d.ts.map

package/dist/auth-storage/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../src/auth-storage/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,iCAAiC,EACjC,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAuBxB,qBAAa,qBAAsB,YAAW,mBAAmB;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,oBAAoB,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4FzF,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAI9B,gBAAgB,CAAC,MAAM,EAAE;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAI9B,IAAI,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA6EzE,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiBvB,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAiBf,eAAe;CAa9B"}

package/dist/auth-storage/magic-links.d.ts

@@ -0,0 +1,28 @@
+import type { AuthMagicLinkStore, CreateAuthMagicLinkInput, MagicLinkRecord } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+export declare class PgAuthMagicLinkStore implements AuthMagicLinkStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAuthMagicLinkInput): Promise<MagicLinkRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<MagicLinkRecord | null>;
+    getActiveByEmail(params: {
+        readonly projectId: string;
+        readonly email: string;
+        readonly now: Date;
+    }): Promise<MagicLinkRecord | null>;
+    consume(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly tokenHash: string;
+        readonly consumedAt: Date;
+    }): Promise<MagicLinkRecord>;
+    revokeActiveForEmail(params: {
+        readonly projectId: string;
+        readonly email: string;
+        readonly revokedAt: Date;
+    }): Promise<readonly MagicLinkRecord[]>;
+}
+//# sourceMappingURL=magic-links.d.ts.map

package/dist/auth-storage/magic-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-links.d.ts","sourceRoot":"","sources":["../../src/auth-storage/magic-links.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EAChB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAaxB,qBAAa,oBAAqB,YAAW,kBAAkB;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC;IA6DjE,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAI7B,gBAAgB,CAAC,MAAM,EAAE;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAgB7B,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,oBAAoB,CAAC,MAAM,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;CAUxC"}

package/dist/auth-storage/oidc-attempts.d.ts

@@ -0,0 +1,18 @@
+import type { AuthOidcAuthorizationAttemptStore, CreateOidcAuthorizationAttemptInput, OidcAuthorizationAttemptRecord } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+export declare class PgAuthOidcAuthorizationAttemptStore implements AuthOidcAuthorizationAttemptStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateOidcAuthorizationAttemptInput): Promise<OidcAuthorizationAttemptRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<OidcAuthorizationAttemptRecord | null>;
+    consume(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly stateHash: string;
+        readonly consumedAt: Date;
+    }): Promise<OidcAuthorizationAttemptRecord>;
+}
+//# sourceMappingURL=oidc-attempts.d.ts.map

package/dist/auth-storage/oidc-attempts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-attempts.d.ts","sourceRoot":"","sources":["../../src/auth-storage/oidc-attempts.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iCAAiC,EACjC,mCAAmC,EACnC,8BAA8B,EAC/B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,iBAAiB,CAAA;AAWtE,qBAAa,mCAAoC,YAAW,iCAAiC;IAC/E,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CACV,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,8BAA8B,CAAC;IAsDpC,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAI5C,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,8BAA8B,CAAC;CAG5C"}