@voyant-travel/apps 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may accept and charge a
+      fee for, the acceptance of support, warranty, indemnity, or
+      other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 PixelMakers Studio SRL
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/contracts.d.ts

@@ -8,14 +8,14 @@ export declare const appOwnedCustomFieldDeclarationSchema: z.ZodObject<{
     label: z.ZodString;
     fieldType: z.ZodEnum<{
         boolean: "boolean";
-        text: "text";
-        date: "date";
-        monetary: "monetary";
-        json: "json";
         varchar: "varchar";
+        text: "text";
         double: "double";
+        monetary: "monetary";
+        date: "date";
         enum: "enum";
         set: "set";
+        json: "json";
         address: "address";
         phone: "phone";
     }>;
@@ -85,14 +85,14 @@ export declare const appManifestSchema: z.ZodPipe<z.ZodRecord<z.ZodString, z.Zod
         label: z.ZodString;
         fieldType: z.ZodEnum<{
             boolean: "boolean";
-            text: "text";
-            date: "date";
-            monetary: "monetary";
-            json: "json";
             varchar: "varchar";
+            text: "text";
             double: "double";
+            monetary: "monetary";
+            date: "date";
             enum: "enum";
             set: "set";
+            json: "json";
             address: "address";
             phone: "phone";
         }>;
@@ -176,88 +176,9 @@ export declare const appWebhookReplaySchema: z.ZodObject<{
     signingKeyId: z.ZodString;
     signingSecret: z.ZodString;
 }, z.core.$strict>;
-export declare const appOAuthAuthorizeQuerySchema: z.ZodObject<{
-    response_type: z.ZodLiteral<"code">;
-    client_id: z.ZodString;
-    release_id: z.ZodString;
-    redirect_uri: z.ZodString;
-    state: z.ZodString;
-    code_challenge: z.ZodString;
-    code_challenge_method: z.ZodLiteral<"S256">;
-    actor_id: z.ZodString;
-    operator_scopes: z.ZodDefault<z.ZodString>;
-    optional_scopes: z.ZodDefault<z.ZodString>;
-}, z.core.$strict>;
-export declare const appOAuthTokenSchema: z.ZodPipe<z.ZodDiscriminatedUnion<[z.ZodObject<{
-    grant_type: z.ZodLiteral<"authorization_code">;
-    code: z.ZodString;
-    redirect_uri: z.ZodString;
-    code_verifier: z.ZodString;
-    client_id: z.ZodString;
-    client_secret: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    grant_type: z.ZodLiteral<"refresh_token">;
-    refresh_token: z.ZodString;
-    client_id: z.ZodString;
-    client_secret: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    grant_type: z.ZodLiteral<"urn:voyant:params:oauth:grant-type:actor-token-exchange">;
-    installation_id: z.ZodString;
-    viewer_id: z.ZodString;
-    viewer_scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    contextual_scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    client_id: z.ZodString;
-    client_secret: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>], "grant_type">, z.ZodTransform<{
-    client_secret: string | undefined;
-    grant_type: "authorization_code";
-    code: string;
-    redirect_uri: string;
-    code_verifier: string;
-    client_id: string;
-} | {
-    client_secret: string | undefined;
-    grant_type: "refresh_token";
-    refresh_token: string;
-    client_id: string;
-} | {
-    client_secret: string | undefined;
-    grant_type: "urn:voyant:params:oauth:grant-type:actor-token-exchange";
-    installation_id: string;
-    viewer_id: string;
-    viewer_scopes: string[];
-    client_id: string;
-    contextual_scopes?: string[] | undefined;
-}, {
-    grant_type: "authorization_code";
-    code: string;
-    redirect_uri: string;
-    code_verifier: string;
-    client_id: string;
-    client_secret?: string | undefined;
-} | {
-    grant_type: "refresh_token";
-    refresh_token: string;
-    client_id: string;
-    client_secret?: string | undefined;
-} | {
-    grant_type: "urn:voyant:params:oauth:grant-type:actor-token-exchange";
-    installation_id: string;
-    viewer_id: string;
-    viewer_scopes: string[];
-    client_id: string;
-    contextual_scopes?: string[] | undefined;
-    client_secret?: string | undefined;
-}>>;
-export declare const appCredentialRevocationSchema: z.ZodObject<{
-    installationId: z.ZodString;
-    actorId: z.ZodString;
-}, z.core.$strict>;
 export type AppManifest = z.infer<typeof appManifestSchema>;
 export type CreateCustomAppRegistrationInput = z.infer<typeof createCustomAppRegistrationSchema>;
 export type ReleaseManifestUploadInput = z.infer<typeof releaseManifestUploadSchema>;
 export type ReleaseManifestFetchInput = z.infer<typeof releaseManifestFetchSchema>;
 export type AppListQuery = z.infer<typeof appListQuerySchema>;
 export type AppWebhookReplayInput = z.infer<typeof appWebhookReplaySchema>;
-export type AppOAuthAuthorizeQuery = z.infer<typeof appOAuthAuthorizeQuerySchema>;
-export type AppOAuthTokenInput = z.infer<typeof appOAuthTokenSchema>;

package/dist/contracts.js

@@ -221,53 +221,3 @@ export const appWebhookReplaySchema = z
     signingSecret: z.string().min(32),
 })
     .strict();
-export const appOAuthAuthorizeQuerySchema = z
-    .object({
-    response_type: z.literal("code"),
-    client_id: z.string().trim().min(1),
-    release_id: z.string().trim().min(1),
-    redirect_uri: z.string().url(),
-    state: z.string().trim().min(1),
-    code_challenge: z.string().trim().min(1),
-    code_challenge_method: z.literal("S256"),
-    actor_id: z.string().trim().min(1),
-    operator_scopes: z.string().trim().default(""),
-    optional_scopes: z.string().trim().default(""),
-})
-    .strict();
-export const appOAuthTokenSchema = z
-    .discriminatedUnion("grant_type", [
-    z.object({
-        grant_type: z.literal("authorization_code"),
-        code: z.string().trim().min(1),
-        redirect_uri: z.string().url(),
-        code_verifier: z.string().trim().min(43).max(128),
-        client_id: z.string().trim().min(1),
-        client_secret: z.string().trim().optional(),
-    }),
-    z.object({
-        grant_type: z.literal("refresh_token"),
-        refresh_token: z.string().trim().min(1),
-        client_id: z.string().trim().min(1),
-        client_secret: z.string().trim().optional(),
-    }),
-    z.object({
-        grant_type: z.literal("urn:voyant:params:oauth:grant-type:actor-token-exchange"),
-        installation_id: z.string().trim().min(1),
-        viewer_id: z.string().trim().min(1),
-        viewer_scopes: z.array(scopeSchema).default([]),
-        contextual_scopes: z.array(scopeSchema).optional(),
-        client_id: z.string().trim().min(1),
-        client_secret: z.string().trim().optional(),
-    }),
-])
-    .transform((input) => ({
-    ...input,
-    client_secret: input.client_secret?.trim() || undefined,
-}));
-export const appCredentialRevocationSchema = z
-    .object({
-    installationId: z.string().trim().min(1),
-    actorId: z.string().trim().min(1),
-})
-    .strict();

package/dist/index.d.ts

@@ -1,13 +1,9 @@
-export * from "./access-boundary.js";
 export * from "./compiler.js";
-export * from "./consent.js";
 export * from "./contracts.js";
 export * from "./ingestion.js";
 export * from "./installation-service.js";
-export * from "./oauth-crypto.js";
-export * from "./oauth-service.js";
 export { createAppsAdminRoutes } from "./routes.js";
-export { appAccessCredentialStatusEnum, appAccessCredentials, appAccessTokenModeEnum, appAuditEventKindEnum, appAuditEvents, appCredentialKindEnum, appCredentials, appDistributionEnum, appExtensionInstallations, appGrantStatusEnum, appGrants, appInstallationRegistrationStatusEnum, appInstallationSettings, appInstallationStatusEnum, appInstallations, appInstallationUpdatePolicyEnum, appLifecycleStateEnum, appOAuthAuthorizationCodes, appOAuthRefreshTokens, appRedirectUris, appReleaseArtifactStateEnum, appReleaseArtifacts, appReleaseLocalizations, appReleaseStateEnum, appReleases, appSecretReferences, apps, appWebhookSubscriptionStatusEnum, appWebhookSubscriptions, } from "./schema.js";
+export { appAccessCredentialStatusEnum, appAccessCredentials, appAuditEventKindEnum, appAuditEvents, appCredentialKindEnum, appCredentials, appDistributionEnum, appExtensionInstallations, appGrantStatusEnum, appGrants, appInstallationRegistrationStatusEnum, appInstallationSettings, appInstallationStatusEnum, appInstallations, appInstallationUpdatePolicyEnum, appLifecycleStateEnum, appRedirectUris, appReleaseArtifactStateEnum, appReleaseArtifacts, appReleaseLocalizations, appReleaseStateEnum, appReleases, appSecretReferences, apps, appWebhookSubscriptionStatusEnum, appWebhookSubscriptions, } from "./schema.js";
 export { createAppsService } from "./service.js";
 export type { AppWebhookDeliveryOptions } from "./webhook-delivery.js";
 export { createAppWebhookDeliveryStore, createAppWebhookEventQueue, enqueueAppWebhookEvent, listAppWebhookHealth, replayAppWebhookDelivery, } from "./webhook-delivery.js";

package/dist/index.js

@@ -1,12 +1,8 @@
-export * from "./access-boundary.js";
 export * from "./compiler.js";
-export * from "./consent.js";
 export * from "./contracts.js";
 export * from "./ingestion.js";
 export * from "./installation-service.js";
-export * from "./oauth-crypto.js";
-export * from "./oauth-service.js";
 export { createAppsAdminRoutes } from "./routes.js";
-export { appAccessCredentialStatusEnum, appAccessCredentials, appAccessTokenModeEnum, appAuditEventKindEnum, appAuditEvents, appCredentialKindEnum, appCredentials, appDistributionEnum, appExtensionInstallations, appGrantStatusEnum, appGrants, appInstallationRegistrationStatusEnum, appInstallationSettings, appInstallationStatusEnum, appInstallations, appInstallationUpdatePolicyEnum, appLifecycleStateEnum, appOAuthAuthorizationCodes, appOAuthRefreshTokens, appRedirectUris, appReleaseArtifactStateEnum, appReleaseArtifacts, appReleaseLocalizations, appReleaseStateEnum, appReleases, appSecretReferences, apps, appWebhookSubscriptionStatusEnum, appWebhookSubscriptions, } from "./schema.js";
+export { appAccessCredentialStatusEnum, appAccessCredentials, appAuditEventKindEnum, appAuditEvents, appCredentialKindEnum, appCredentials, appDistributionEnum, appExtensionInstallations, appGrantStatusEnum, appGrants, appInstallationRegistrationStatusEnum, appInstallationSettings, appInstallationStatusEnum, appInstallations, appInstallationUpdatePolicyEnum, appLifecycleStateEnum, appRedirectUris, appReleaseArtifactStateEnum, appReleaseArtifacts, appReleaseLocalizations, appReleaseStateEnum, appReleases, appSecretReferences, apps, appWebhookSubscriptionStatusEnum, appWebhookSubscriptions, } from "./schema.js";
 export { createAppsService } from "./service.js";
 export { createAppWebhookDeliveryStore, createAppWebhookEventQueue, enqueueAppWebhookEvent, listAppWebhookHealth, replayAppWebhookDelivery, } from "./webhook-delivery.js";

package/dist/installation-reconciliation.d.ts

@@ -14,5 +14,5 @@ export declare function deactivateRuntimeState(db: PostgresJsDatabase, installat
 export declare function deactivateResolvedRegistrations(db: PostgresJsDatabase, installation: AppInstallation): Promise<void>;
 export declare function markAppDefinitionsInactive(db: PostgresJsDatabase, installation: AppInstallation, actorId: string): Promise<void>;
 export declare function countInstallationRows(db: PostgresJsDatabase, table: typeof appGrants | typeof appAccessCredentials | typeof appExtensionInstallations | typeof appWebhookSubscriptions, installationId: string): Promise<number>;
-export declare function audit(db: PostgresJsDatabase, installation: AppInstallation, actorId: string, kind: "lifecycle" | "grant" | "consent" | "credential" | "token" | "reconciliation" | "purge", action: string, details: Record<string, unknown>): Promise<void>;
+export declare function audit(db: PostgresJsDatabase, installation: AppInstallation, actorId: string, kind: "lifecycle" | "grant" | "credential" | "reconciliation" | "purge", action: string, details: Record<string, unknown>): Promise<void>;
 export {};

package/dist/installation-reconciliation.js

@@ -1,7 +1,7 @@
 import { createAppCustomFieldDefinitionOwner, customFieldDefinitions, } from "@voyant-travel/custom-fields";
 import { ApiHttpError } from "@voyant-travel/hono";
 import { and, eq, sql } from "drizzle-orm";
-import { appAccessCredentials, appAuditEvents, appExtensionInstallations, appGrants, appOAuthRefreshTokens, appWebhookSubscriptions, } from "./schema.js";
+import { appAccessCredentials, appAuditEvents, appExtensionInstallations, appGrants, appWebhookSubscriptions, } from "./schema.js";
 export async function reconcileRelease(db, installation, release, actorId, action, options) {
     const normalized = parseNormalizedRelease(release.normalizedRecord);
     await reconcileCustomFields(db, installation, release, normalized, actorId, options);
@@ -78,10 +78,6 @@ export async function deactivateRuntimeState(db, installation) {
         .update(appAccessCredentials)
         .set({ status: "inactive", deactivatedAt: now })
         .where(eq(appAccessCredentials.installationId, installation.id));
-    await db
-        .update(appOAuthRefreshTokens)
-        .set({ status: "revoked", revokedAt: now })
-        .where(eq(appOAuthRefreshTokens.installationId, installation.id));
     await deactivateResolvedRegistrations(db, installation);
 }
 export async function deactivateResolvedRegistrations(db, installation) {

package/dist/installation-service.d.ts

@@ -58,8 +58,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -77,17 +76,16 @@ export declare function createAppInstallationService(options?: AppInstallationSe
         outcome: "unchanged";
     } | {
         installation: {
-            appId: string;
-            deploymentId: string;
+            status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            appId: string;
             releaseId: string;
-            status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
+            deploymentId: string;
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -111,8 +109,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -138,8 +135,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -166,8 +162,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -192,8 +187,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -219,8 +213,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -245,8 +238,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -272,8 +264,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -298,8 +289,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;
@@ -325,8 +315,7 @@ export declare function createAppInstallationService(options?: AppInstallationSe
             status: "active" | "pending" | "authorizing" | "paused" | "degraded" | "revoked" | "uninstalled";
             namespace: string;
             installedBy: string;
-            credentialGeneration: number;
-            updatePolicy: "patch" | "manual" | "compatible" | "pinned";
+            updatePolicy: "manual" | "compatible" | "patch" | "pinned";
             lastCompatibleReleaseCheckAt: Date | null;
             pendingReleaseId: string | null;
             pendingReason: string | null;

package/dist/installation-service.js

@@ -1,5 +1,5 @@
 import { ApiHttpError } from "@voyant-travel/hono";
-import { and, eq, sql } from "drizzle-orm";
+import { and, eq } from "drizzle-orm";
 import { audit, countInstallationRows, deactivateResolvedRegistrations, deactivateRuntimeState, markAppDefinitionsInactive, newlyRequiredScopes, reconcileGrants, reconcileRelease, rotateCredential, } from "./installation-reconciliation.js";
 import { canInstallOver, invalidTransition, planLifecycleTransition } from "./installation-state.js";
 import { appAccessCredentials, appExtensionInstallations, appGrants, appInstallations, appReleases, apps, appWebhookSubscriptions, } from "./schema.js";
@@ -295,29 +295,14 @@ function lifecyclePatch(to, now) {
     const base = { status: to, updatedAt: now };
     if (to === "active")
         return { ...base, activatedAt: now };
-    if (to === "paused") {
-        return {
-            ...base,
-            pausedAt: now,
-            credentialGeneration: sql `${appInstallations.credentialGeneration} + 1`,
-        };
-    }
+    if (to === "paused")
+        return { ...base, pausedAt: now };
     if (to === "degraded")
         return { ...base, degradedAt: now };
-    if (to === "revoked") {
-        return {
-            ...base,
-            revokedAt: now,
-            credentialGeneration: sql `${appInstallations.credentialGeneration} + 1`,
-        };
-    }
-    if (to === "uninstalled") {
-        return {
-            ...base,
-            uninstalledAt: now,
-            credentialGeneration: sql `${appInstallations.credentialGeneration} + 1`,
-        };
-    }
+    if (to === "revoked")
+        return { ...base, revokedAt: now };
+    if (to === "uninstalled")
+        return { ...base, uninstalledAt: now };
     return base;
 }
 function writeFailed() {

package/dist/routes.d.ts

@@ -1,4 +1,3 @@
-import type { AccessCatalog } from "@voyant-travel/types/api-keys";
 import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
 import { Hono } from "hono";
 import { type AppsServiceOptions } from "./service.js";
@@ -7,11 +6,5 @@ type Env = {
         db: PostgresJsDatabase;
     };
 };
-export interface AppsAdminRouteOptions extends AppsServiceOptions {
-    oauth?: {
-        accessCatalog: AccessCatalog;
-        deploymentId: string;
-    };
-}
-export declare function createAppsAdminRoutes(options?: AppsAdminRouteOptions): Hono<Env, import("hono/types").BlankSchema, "/">;
+export declare function createAppsAdminRoutes(options?: AppsServiceOptions): Hono<Env, import("hono/types").BlankSchema, "/">;
 export {};