@terrascale/sdk 0.0.2 → 0.0.3

package/types/ts-auth.d.ts

@@ -48,7 +48,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly email: string | null;
  *   readonly email_verified: boolean;
  *   readonly username: string | null;
@@ -63,7 +63,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly status: string;
  *   readonly created_at: number; // Unix seconds.
  *   readonly expires_at: number; // Unix seconds.
@@ -74,7 +74,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly type: string;
  *   readonly confirmed: boolean;
  *   readonly createdAt: number; // Unix seconds.
@@ -82,7 +82,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly nickname: string | null;
  *   readonly algorithm: string;
  *   readonly createdAt: number; // Unix seconds.
@@ -91,7 +91,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly slug: string;
  *   readonly created_at: number; // Unix seconds.
@@ -99,7 +99,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly role: string;
  *   readonly created_at: number; // Unix seconds.
  *   readonly organization: TsAuthOrganization | null;
@@ -307,7 +307,7 @@ export class TsAuthSessionsClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly api_key: string; // One-time full sk_ bearer; only the creating call returns it.
  *   readonly scopes: readonly string[];
@@ -315,7 +315,7 @@ export class TsAuthSessionsClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly scopes: readonly string[];
  *   readonly created_at: number; // Unix seconds.
@@ -352,9 +352,9 @@ export class TsAuthApiKeysClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly organization_id: string;
- *   readonly user_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly organization_id: import("./ids.js").EntityId;
+ *   readonly user_id: import("./ids.js").EntityId;
  *   readonly role: string;
  *   readonly created_at: number; // Unix seconds.
  * }} TsAuthMembership
@@ -362,7 +362,7 @@ export class TsAuthApiKeysClient {
 /**
  * @typedef {TsAuthMembership & {
  *   readonly user: {
- *     readonly id: string;
+ *     readonly id: import("./ids.js").EntityId;
  *     readonly email: string;
  *     readonly name: string;
  *   } | null;
@@ -370,8 +370,8 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly organization_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly organization_id: import("./ids.js").EntityId;
  *   readonly email: string;
  *   readonly role: string;
  *   readonly status: string;
@@ -381,13 +381,13 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly organization_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly organization_id: import("./ids.js").EntityId;
  *   readonly domain: string;
  *   readonly created_at: number; // Unix seconds.
  * }} TsAuthOrganizationDomain
  */
-/** @typedef {{ readonly org_id: string }} TsAuthDomainEnrollment */
+/** @typedef {{ readonly org_id: import("./ids.js").EntityId }} TsAuthDomainEnrollment */
 /**
  * @typedef {{
  *   readonly name: string;
@@ -401,7 +401,7 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly user_id: string;
+ *   readonly user_id: import("./ids.js").EntityId;
  *   readonly role: string;
  * }} TsAuthCreateMembershipRequest
  */
@@ -418,7 +418,7 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly user_id: string;
+ *   readonly user_id: import("./ids.js").EntityId;
  * }} TsAuthEnrollRequest
  */
 export class TsAuthOrganizationsClient {
@@ -552,8 +552,8 @@ export class TsAuthOrganizationsClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly client_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly client_id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly redirect_uris: readonly string[];
  *   readonly post_logout_redirect_uris: readonly string[];
@@ -613,7 +613,7 @@ export class TsAuthOauthClientsClient {
 /**
  * @typedef {{
  *   readonly audience: string;
- *   readonly allowed_client_ids: readonly string[];
+ *   readonly allowed_client_ids: readonly import("./ids.js").EntityId[];
  *   readonly allowed_grant_types: readonly TsAuthOauthGrantType[];
  *   readonly allowed_scopes: readonly string[];
  * }} TsAuthCreateOauthResourceRequest
@@ -621,7 +621,7 @@ export class TsAuthOauthClientsClient {
 /**
  * @typedef {{
  *   readonly expected_auth_epoch: number;
- *   readonly allowed_client_ids?: readonly string[] | undefined;
+ *   readonly allowed_client_ids?: readonly import("./ids.js").EntityId[] | undefined;
  *   readonly allowed_grant_types?: readonly TsAuthOauthGrantType[] | undefined;
  *   readonly allowed_scopes?: readonly string[] | undefined;
  *   readonly enabled?: boolean | undefined;
@@ -630,8 +630,8 @@ export class TsAuthOauthClientsClient {
  */
 /**
  * @typedef {TsAuthCreateOauthResourceRequest & {
- *   readonly id: string;
- *   readonly introspection_client_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly introspection_client_id: import("./ids.js").EntityId;
  *   readonly token_endpoint_auth_method: "client_secret_basic";
  *   readonly auth_epoch: number;
  *   readonly enabled: boolean;
@@ -679,11 +679,11 @@ export class TsAuthOauthResourcesClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly type: "oidc" | "saml";
  *   readonly name: string;
  *   readonly enabled: boolean;
- *   readonly org_id: string | null;
+ *   readonly org_id: import("./ids.js").EntityId | null;
  *   readonly issuer_url: string | null;
  *   readonly client_id: string | null;
  *   readonly authorization_endpoint: string | null;
@@ -756,15 +756,15 @@ export class TsAuthConnectionsClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly org_id: string | null;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly org_id: import("./ids.js").EntityId | null;
  *   readonly token: string; // One-time SCIM bearer; only create and rotate return it.
  * }} TsAuthDirectoryWithToken
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly org_id: string | null;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly org_id: import("./ids.js").EntityId | null;
  *   readonly created_at: number; // Unix seconds.
  * }} TsAuthDirectory
  */
@@ -825,17 +825,17 @@ export class TsAuthJwtTemplatesClient {
     delete(name: string): Promise<TerraScaleResult<void>>;
     /**
      * @param {string} name
-     * @param {{ readonly user_id: string }} request
+     * @param {{ readonly user_id: import("./ids.js").EntityId }} request
      * @returns {Promise<TerraScaleResult<TsAuthJwtTokenResponse>>}
      */
     issueToken(name: string, request: {
-        readonly user_id: string;
+        readonly user_id: import("./ids.js").EntityId;
     }): Promise<TerraScaleResult<TsAuthJwtTokenResponse>>;
     #private;
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly url: string;
  *   readonly events: readonly string[];
  *   readonly signing_secret: string; // One-time HMAC key for verifying deliveries; only create returns it.
@@ -843,7 +843,7 @@ export class TsAuthJwtTemplatesClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly url: string;
  *   readonly events: readonly string[];
  *   readonly enabled: boolean;
@@ -852,9 +852,9 @@ export class TsAuthJwtTemplatesClient {
  */
 /**
  * @typedef {{
- *   readonly id: string; // endpointId:eventId
- *   readonly endpoint_id: string;
- *   readonly event_id: string;
+ *   readonly id: `${import("./ids.js").EntityId}:${import("./ids.js").EntityId}`; // endpointId:eventId delivery selector.
+ *   readonly endpoint_id: import("./ids.js").EntityId;
+ *   readonly event_id: import("./ids.js").EntityId;
  *   readonly attempts: number;
  *   readonly last_error?: string | undefined;
  *   readonly updated_at: number; // Unix seconds.
@@ -901,10 +901,10 @@ export class TsAuthWebhooksClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly instance_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly instance_id: import("./ids.js").EntityId;
  *   readonly type: string;
- *   readonly actor_id?: string | undefined; // Omitted from the wire when null.
+ *   readonly actor_id?: import("./ids.js").EntityId | undefined; // Omitted from the wire when null.
  *   readonly data: Record<string, unknown>;
  *   readonly created_at: number; // Unix seconds.
  *   readonly integrity_version: number;
@@ -983,7 +983,7 @@ export class TsAuthBillingClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly slug: string;
  *   readonly name: string;
  *   readonly logo_url?: string | null | undefined;
@@ -1052,7 +1052,7 @@ export class TsAuthInstanceClient {
 /** @typedef {{ readonly keys: readonly TsAuthOidcJwk[] }} TsAuthOidcJwks */
 /**
  * @typedef {{
- *   readonly client_id: string;
+ *   readonly client_id: import("./ids.js").EntityId;
  *   readonly redirect_uri: string;
  *   readonly response_type: "code";
  *   readonly scope?: string | undefined;
@@ -1127,20 +1127,20 @@ export class TsAuthInstanceClient {
  *   readonly active: true;
  *   readonly token_type: "Bearer";
  *   readonly iss: string;
- *   readonly sub: string;
+ *   readonly sub: import("./ids.js").EntityId;
  *   readonly aud: string;
- *   readonly client_id: string;
+ *   readonly client_id: import("./ids.js").EntityId;
  *   readonly scope: string;
  *   readonly exp: number;
  *   readonly iat: number;
- *   readonly sid: string | null;
+ *   readonly sid: import("./ids.js").EntityId | null;
  *   readonly principal_kind: "user" | "service";
  * }} TsAuthOidcAccessIntrospection
  */
 /**
  * @typedef {Omit<TsAuthOidcAccessIntrospection, "token_type" | "principal_kind"> & {
  *   readonly token_type: "refresh_token";
- *   readonly family_id: string;
+ *   readonly family_id: import("./ids.js").EntityId;
  * }} TsAuthOidcRefreshIntrospection
  */
 /**
@@ -1151,7 +1151,7 @@ export class TsAuthInstanceClient {
 /**
  * @typedef {Omit<TsAuthOidcAccessIntrospection, "sid" | "principal_kind"> &
  *   (
- *     | { readonly principal_kind: "user"; readonly sid: string }
+ *     | { readonly principal_kind: "user"; readonly sid: import("./ids.js").EntityId }
  *     | { readonly principal_kind: "service"; readonly sid: null }
  *   )} TsAuthOidcResourceAccessIntrospection
  */
@@ -1163,13 +1163,13 @@ export class TsAuthInstanceClient {
  * @typedef {{
  *   readonly issuer: string; // Configured canonical provider issuer, independently trusted by the caller.
  *   readonly audience: string; // Exact registered resource URI; never derived from the response.
- *   readonly introspection_client_id: string;
+ *   readonly introspection_client_id: import("./ids.js").EntityId;
  *   readonly introspection_secret: string;
  * }} TsAuthOidcResourceCredentials
  */
 /**
  * @typedef {{
- *   readonly sub: string;
+ *   readonly sub: import("./ids.js").EntityId;
  *   readonly email?: string | undefined;
  *   readonly email_verified?: boolean | undefined;
  *   readonly name?: string | undefined;
@@ -1341,7 +1341,7 @@ export type TsAuthRequestOptions = {
     readonly signal?: AbortSignal | undefined;
 };
 export type TsAuthUser = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly email: string | null;
     readonly email_verified: boolean;
     readonly username: string | null;
@@ -1354,7 +1354,7 @@ export type TsAuthUser = {
     readonly private_metadata?: Record<string, unknown> | undefined;
 };
 export type TsAuthSession = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly status: string;
     readonly created_at: number;
     readonly expires_at: number;
@@ -1363,26 +1363,26 @@ export type TsAuthSession = {
     readonly ip_address?: string | null | undefined;
 };
 export type TsAuthMfaFactor = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly type: string;
     readonly confirmed: boolean;
     readonly createdAt: number;
 };
 export type TsAuthPasskey = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly nickname: string | null;
     readonly algorithm: string;
     readonly createdAt: number;
     readonly lastUsedAt: number | null;
 };
 export type TsAuthOrganization = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly slug: string;
     readonly created_at: number;
 };
 export type TsAuthUserOrganizationMembership = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly role: string;
     readonly created_at: number;
     readonly organization: TsAuthOrganization | null;
@@ -1420,13 +1420,13 @@ export type TsAuthCreateUserRequest = {
     readonly name?: string | undefined;
 };
 export type TsAuthApiKeyWithSecret = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly api_key: string;
     readonly scopes: readonly string[];
 };
 export type TsAuthApiKey = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly scopes: readonly string[];
     readonly created_at: number;
@@ -1441,22 +1441,22 @@ export type TsAuthCreateApiKeyRequest = {
     readonly scopes?: readonly string[] | undefined;
 };
 export type TsAuthMembership = {
-    readonly id: string;
-    readonly organization_id: string;
-    readonly user_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly organization_id: import("./ids.js").EntityId;
+    readonly user_id: import("./ids.js").EntityId;
     readonly role: string;
     readonly created_at: number;
 };
 export type TsAuthMembershipWithUser = TsAuthMembership & {
     readonly user: {
-        readonly id: string;
+        readonly id: import("./ids.js").EntityId;
         readonly email: string;
         readonly name: string;
     } | null;
 };
 export type TsAuthInvitation = {
-    readonly id: string;
-    readonly organization_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly organization_id: import("./ids.js").EntityId;
     readonly email: string;
     readonly role: string;
     readonly status: string;
@@ -1464,13 +1464,13 @@ export type TsAuthInvitation = {
     readonly created_at: number;
 };
 export type TsAuthOrganizationDomain = {
-    readonly id: string;
-    readonly organization_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly organization_id: import("./ids.js").EntityId;
     readonly domain: string;
     readonly created_at: number;
 };
 export type TsAuthDomainEnrollment = {
-    readonly org_id: string;
+    readonly org_id: import("./ids.js").EntityId;
 };
 export type TsAuthCreateOrganizationRequest = {
     readonly name: string;
@@ -1480,7 +1480,7 @@ export type TsAuthUpdateOrganizationRequest = {
     readonly name: string;
 };
 export type TsAuthCreateMembershipRequest = {
-    readonly user_id: string;
+    readonly user_id: import("./ids.js").EntityId;
     readonly role: string;
 };
 export type TsAuthCreateInvitationRequest = {
@@ -1491,7 +1491,7 @@ export type TsAuthAddDomainRequest = {
     readonly domain: string;
 };
 export type TsAuthEnrollRequest = {
-    readonly user_id: string;
+    readonly user_id: import("./ids.js").EntityId;
 };
 export type TsAuthOauthGrantType = "authorization_code" | "refresh_token" | "client_credentials" | "urn:ietf:params:oauth:grant-type:device_code";
 export type TsAuthOauthClientAuthMethod = "none" | "client_secret_post" | "client_secret_basic";
@@ -1513,8 +1513,8 @@ export type TsAuthUpdateOauthClientRequest = Omit<TsAuthCreateOauthClientRequest
     readonly rotate_secret?: boolean | undefined;
 };
 export type TsAuthOauthClientView = {
-    readonly id: string;
-    readonly client_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly client_id: import("./ids.js").EntityId;
     readonly name: string;
     readonly redirect_uris: readonly string[];
     readonly post_logout_redirect_uris: readonly string[];
@@ -1539,21 +1539,21 @@ export type TsAuthOauthClientList = {
 export type TsAuthOauthClientUpdate = TsAuthOauthClientView | TsAuthOauthClientWithSecret;
 export type TsAuthCreateOauthResourceRequest = {
     readonly audience: string;
-    readonly allowed_client_ids: readonly string[];
+    readonly allowed_client_ids: readonly import("./ids.js").EntityId[];
     readonly allowed_grant_types: readonly TsAuthOauthGrantType[];
     readonly allowed_scopes: readonly string[];
 };
 export type TsAuthUpdateOauthResourceRequest = {
     readonly expected_auth_epoch: number;
-    readonly allowed_client_ids?: readonly string[] | undefined;
+    readonly allowed_client_ids?: readonly import("./ids.js").EntityId[] | undefined;
     readonly allowed_grant_types?: readonly TsAuthOauthGrantType[] | undefined;
     readonly allowed_scopes?: readonly string[] | undefined;
     readonly enabled?: boolean | undefined;
     readonly rotate_secret?: boolean | undefined;
 };
 export type TsAuthOauthResourceView = TsAuthCreateOauthResourceRequest & {
-    readonly id: string;
-    readonly introspection_client_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly introspection_client_id: import("./ids.js").EntityId;
     readonly token_endpoint_auth_method: "client_secret_basic";
     readonly auth_epoch: number;
     readonly enabled: boolean;
@@ -1568,11 +1568,11 @@ export type TsAuthOauthResourceList = {
     readonly resources: readonly TsAuthOauthResourceView[];
 };
 export type TsAuthConnectionView = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly type: "oidc" | "saml";
     readonly name: string;
     readonly enabled: boolean;
-    readonly org_id: string | null;
+    readonly org_id: import("./ids.js").EntityId | null;
     readonly issuer_url: string | null;
     readonly client_id: string | null;
     readonly authorization_endpoint: string | null;
@@ -1608,17 +1608,17 @@ export type TsAuthConnectionPatch = {
     readonly client_secret?: string | undefined;
 };
 export type TsAuthDirectoryWithToken = {
-    readonly id: string;
-    readonly org_id: string | null;
+    readonly id: import("./ids.js").EntityId;
+    readonly org_id: import("./ids.js").EntityId | null;
     readonly token: string;
 };
 export type TsAuthDirectory = {
-    readonly id: string;
-    readonly org_id: string | null;
+    readonly id: import("./ids.js").EntityId;
+    readonly org_id: import("./ids.js").EntityId | null;
     readonly created_at: number;
 };
 export type TsAuthJwtTemplate = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly claims: Record<string, string>;
     readonly lifetime_seconds: number;
@@ -1638,31 +1638,31 @@ export type TsAuthUpdateJwtTemplateRequest = {
     readonly lifetime_seconds?: number | undefined;
 };
 export type TsAuthWebhookWithSecret = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly url: string;
     readonly events: readonly string[];
     readonly signing_secret: string;
 };
 export type TsAuthWebhook = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly url: string;
     readonly events: readonly string[];
     readonly enabled: boolean;
     readonly created_at: number;
 };
 export type TsAuthDeadLetterEntry = {
-    readonly id: string;
-    readonly endpoint_id: string;
-    readonly event_id: string;
+    readonly id: `${import("./ids.js").EntityId}:${import("./ids.js").EntityId}`;
+    readonly endpoint_id: import("./ids.js").EntityId;
+    readonly event_id: import("./ids.js").EntityId;
     readonly attempts: number;
     readonly last_error?: string | undefined;
     readonly updated_at: number;
 };
 export type TsAuthAuditEvent = {
-    readonly id: string;
-    readonly instance_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly instance_id: import("./ids.js").EntityId;
     readonly type: string;
-    readonly actor_id?: string | undefined;
+    readonly actor_id?: import("./ids.js").EntityId | undefined;
     readonly data: Record<string, unknown>;
     readonly created_at: number;
     readonly integrity_version: number;
@@ -1680,7 +1680,7 @@ export type TsAuthBillingOverview = {
     readonly quota: number;
 };
 export type TsAuthInstance = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly slug: string;
     readonly name: string;
     readonly logo_url?: string | null | undefined;
@@ -1730,7 +1730,7 @@ export type TsAuthOidcJwks = {
     readonly keys: readonly TsAuthOidcJwk[];
 };
 export type TsAuthOidcAuthorizationRequest = {
-    readonly client_id: string;
+    readonly client_id: import("./ids.js").EntityId;
     readonly redirect_uri: string;
     readonly response_type: "code";
     readonly scope?: string | undefined;
@@ -1788,23 +1788,23 @@ export type TsAuthOidcAccessIntrospection = {
     readonly active: true;
     readonly token_type: "Bearer";
     readonly iss: string;
-    readonly sub: string;
+    readonly sub: import("./ids.js").EntityId;
     readonly aud: string;
-    readonly client_id: string;
+    readonly client_id: import("./ids.js").EntityId;
     readonly scope: string;
     readonly exp: number;
     readonly iat: number;
-    readonly sid: string | null;
+    readonly sid: import("./ids.js").EntityId | null;
     readonly principal_kind: "user" | "service";
 };
 export type TsAuthOidcRefreshIntrospection = Omit<TsAuthOidcAccessIntrospection, "token_type" | "principal_kind"> & {
     readonly token_type: "refresh_token";
-    readonly family_id: string;
+    readonly family_id: import("./ids.js").EntityId;
 };
 export type TsAuthOidcIntrospection = TsAuthOidcInactiveIntrospection | TsAuthOidcAccessIntrospection | TsAuthOidcRefreshIntrospection;
 export type TsAuthOidcResourceAccessIntrospection = Omit<TsAuthOidcAccessIntrospection, "sid" | "principal_kind"> & ({
     readonly principal_kind: "user";
-    readonly sid: string;
+    readonly sid: import("./ids.js").EntityId;
 } | {
     readonly principal_kind: "service";
     readonly sid: null;
@@ -1813,11 +1813,11 @@ export type TsAuthOidcResourceIntrospection = TsAuthOidcInactiveIntrospection |
 export type TsAuthOidcResourceCredentials = {
     readonly issuer: string;
     readonly audience: string;
-    readonly introspection_client_id: string;
+    readonly introspection_client_id: import("./ids.js").EntityId;
     readonly introspection_secret: string;
 };
 export type TsAuthOidcUserInfo = {
-    readonly sub: string;
+    readonly sub: import("./ids.js").EntityId;
     readonly email?: string | undefined;
     readonly email_verified?: boolean | undefined;
     readonly name?: string | undefined;

package/types/v1/decode.d.ts

@@ -4,16 +4,16 @@
  * `document` is the value, or the LWW winner when a causal read answers `"conflict"` with `siblings`.
  * Unknown future states pass through.
  * @typedef {object} V1Document
- * @property {string} id
+ * @property {import("../ids.js").EntityId} id
  * @property {string} version
  * @property {"value" | "conflict" | (string & {})} state
  * @property {JsonObject} document
- * @property {readonly JsonValue[]} [siblings] Every live version, on a causal read with several.
+ * @property {readonly JsonValue[]} [siblings] Live versions and tombstones on a causal conflict.
  */
 /**
  * The result of a document write.
  * @typedef {object} V1WriteResult
- * @property {string} id
+ * @property {import("../ids.js").EntityId} id
  * @property {string} version For a delete, the tombstone's version.
  * @property {string} offset The database commit offset (decimal u64), usable with shape `waitFor`.
  * @property {V1Durability} durability
@@ -31,6 +31,8 @@ export function malformed(what: string): never;
  * @returns {JsonObject}
  */
 export function object(value: JsonValue | undefined, what: string): JsonObject;
+/** @param {JsonValue | undefined} value @returns {JsonObject} */
+export function documentObject(value: JsonValue | undefined): JsonObject;
 /**
  * @param {JsonValue | undefined} value
  * @param {string} what
@@ -83,12 +85,12 @@ export type V1Durability = "local_durable" | (string & {});
  * Unknown future states pass through.
  */
 export type V1Document = {
-    id: string;
+    id: import("../ids.js").EntityId;
     version: string;
     state: "value" | "conflict" | (string & {});
     document: JsonObject;
     /**
-     * Every live version, on a causal read with several.
+     * Live versions and tombstones on a causal conflict.
      */
     siblings?: readonly JsonValue[];
 };
@@ -96,7 +98,7 @@ export type V1Document = {
  * The result of a document write.
  */
 export type V1WriteResult = {
-    id: string;
+    id: import("../ids.js").EntityId;
     /**
      * For a delete, the tombstone's version.
      */