rivet-design 0.21.1 → 0.21.2

package/dist/services/profiles/profileContext.d.ts

@@ -8,11 +8,11 @@ export declare const recordProfileRequest: (request: ChangeRequest) => Promise<P
 export declare const profileReferences: (comment: CommentChangeItem, dataUrl?: string) => {
     id: string;
     title: string;
+    url?: string | undefined;
     image?: {
         hash: string;
         mimeType: "image/png" | "image/jpeg" | "image/webp" | "image/gif" | "image/avif";
     } | undefined;
-    url?: string | undefined;
     reason?: string | undefined;
 }[] | undefined;
 //# sourceMappingURL=profileContext.d.ts.map

package/dist/storage/library/BrowserAuthorizationRecords.d.ts

@@ -0,0 +1,54 @@
+export interface AuthorizationSnapshot {
+    accountId: string | null;
+    generation: string;
+}
+interface AccountMutation {
+    read: () => string | null;
+    next: () => string | null;
+    write: () => void;
+    isLogout?: boolean;
+    expectedGeneration?: string;
+    isRecovery?: boolean;
+    isIdentityEnrichment?: () => boolean;
+}
+interface CredentialInput {
+    scope: string;
+    digest: string;
+    kind: 'session' | 'launch';
+    expiresAt: number;
+    now: number;
+    readIdentity: () => string | null;
+    expectedGeneration?: string;
+}
+interface CredentialLookup {
+    scope: string;
+    digest: string;
+    now: number;
+    readIdentity: () => string | null;
+}
+export declare class AuthorizationUnavailable extends Error {
+    constructor();
+}
+export declare class AuthorizationChanged extends Error {
+    constructor();
+}
+export declare class BrowserAuthorizationRecords {
+    private readonly db;
+    constructor(databasePath: string);
+    private authority;
+    private requireAccount;
+    snapshot(readIdentity: () => string | null): AuthorizationSnapshot;
+    signInGeneration(readIdentity: () => string | null): string;
+    mutateAccount(input: AccountMutation): AuthorizationSnapshot;
+    saveSettings(write: () => void): void;
+    create(input: CredentialInput): void;
+    isValid(input: CredentialLookup): boolean;
+    exchange(input: CredentialLookup & {
+        sessionDigest: string;
+        expiresAt: number;
+    }): boolean;
+    revoke(scope: string, digest: string): void;
+    close(): void;
+}
+export {};
+//# sourceMappingURL=BrowserAuthorizationRecords.d.ts.map

package/dist/storage/library/BrowserAuthorizationRecords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserAuthorizationRecords.d.ts","sourceRoot":"","sources":["../../../src/storage/library/BrowserAuthorizationRecords.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC;CACtC;AAED,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,gBAAgB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACnC;AAID,qBAAa,wBAAyB,SAAQ,KAAK;;CAMlD;AAED,qBAAa,oBAAqB,SAAQ,KAAK;;CAI9C;AAED,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA6C;gBAEpD,YAAY,EAAE,MAAM;IAOhC,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,cAAc;IAOtB,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,qBAAqB;IAIlE,gBAAgB,CAAC,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,MAAM;IAO3D,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,qBAAqB;IA2C5D,YAAY,CAAC,KAAK,EAAE,MAAM,IAAI,GAAG,IAAI;IAIrC,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAyBpC,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO;IAuBzC,QAAQ,CACN,KAAK,EAAE,gBAAgB,GAAG;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO;IAuCV,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAY3C,KAAK,IAAI,IAAI;CAGd"}

package/dist/storage/library/BrowserAuthorizationRecords.js

@@ -0,0 +1,175 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrowserAuthorizationRecords = exports.AuthorizationChanged = exports.AuthorizationUnavailable = void 0;
+const crypto_1 = require("crypto");
+const drizzle_orm_1 = require("drizzle-orm");
+const database_1 = require("./database");
+const migrations_1 = require("./migrations");
+const browserAuthorization_1 = require("./schema/browserAuthorization");
+const AUTHORITY_SINGLETON = 1;
+class AuthorizationUnavailable extends Error {
+    constructor() {
+        super('Browser authorization is temporarily unavailable. Sign in again or retry.');
+    }
+}
+exports.AuthorizationUnavailable = AuthorizationUnavailable;
+class AuthorizationChanged extends Error {
+    constructor() {
+        super('Rivet account changed during sign-in. Please try again.');
+    }
+}
+exports.AuthorizationChanged = AuthorizationChanged;
+class BrowserAuthorizationRecords {
+    db;
+    constructor(databasePath) {
+        this.db = (0, database_1.openDurableDatabaseSync)({
+            databasePath,
+            schema: migrations_1.BROWSER_AUTHORIZATION_SCHEMA,
+        });
+    }
+    authority(accountId) {
+        const record = this.db.select().from(browserAuthorization_1.browserAuthority).get();
+        if (record)
+            return record;
+        const initial = {
+            singleton: AUTHORITY_SINGLETON,
+            accountId,
+            generation: (0, crypto_1.randomUUID)(),
+            operationId: null,
+            phase: 'ready',
+        };
+        this.db.insert(browserAuthorization_1.browserAuthority).values(initial).run();
+        return initial;
+    }
+    requireAccount(accountId) {
+        const authority = this.authority(accountId);
+        if (authority.phase !== 'ready' || authority.accountId !== accountId)
+            throw new AuthorizationUnavailable();
+        return { accountId, generation: authority.generation };
+    }
+    snapshot(readIdentity) {
+        return (0, database_1.transaction)(this.db, () => this.requireAccount(readIdentity()));
+    }
+    signInGeneration(readIdentity) {
+        return (0, database_1.transaction)(this.db, () => this.authority(readIdentity()).generation);
+    }
+    mutateAccount(input) {
+        const reserved = (0, database_1.transaction)(this.db, () => {
+            const accountId = input.read();
+            const authority = this.authority(accountId);
+            if (input.expectedGeneration !== undefined &&
+                ((!input.isRecovery &&
+                    (authority.phase !== 'ready' || authority.accountId !== accountId)) ||
+                    authority.generation !== input.expectedGeneration))
+                throw new AuthorizationChanged();
+            const nextAccountId = input.next();
+            const mustRevoke = input.isLogout ||
+                authority.accountId !== accountId ||
+                (accountId !== nextAccountId && !input.isIdentityEnrichment?.());
+            const reservation = {
+                accountId: nextAccountId,
+                generation: mustRevoke ? (0, crypto_1.randomUUID)() : authority.generation,
+                operationId: (0, crypto_1.randomUUID)(),
+                phase: 'changing',
+            };
+            this.db.update(browserAuthorization_1.browserAuthority).set(reservation).run();
+            return reservation;
+        });
+        return (0, database_1.transaction)(this.db, () => {
+            const authority = this.db.select().from(browserAuthorization_1.browserAuthority).get();
+            if (authority?.operationId !== reserved.operationId)
+                throw new AuthorizationChanged();
+            input.write();
+            this.db
+                .update(browserAuthorization_1.browserCredentials)
+                .set({ accountId: reserved.accountId })
+                .where((0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.generation, reserved.generation))
+                .run();
+            this.db
+                .update(browserAuthorization_1.browserAuthority)
+                .set({ phase: 'ready', operationId: null })
+                .run();
+            return { accountId: reserved.accountId, generation: reserved.generation };
+        });
+    }
+    saveSettings(write) {
+        (0, database_1.transaction)(this.db, write);
+    }
+    create(input) {
+        (0, database_1.transaction)(this.db, () => {
+            const snapshot = this.requireAccount(input.readIdentity());
+            if (input.expectedGeneration !== undefined &&
+                input.expectedGeneration !== snapshot.generation)
+                throw new AuthorizationChanged();
+            this.db
+                .delete(browserAuthorization_1.browserCredentials)
+                .where((0, drizzle_orm_1.lte)(browserAuthorization_1.browserCredentials.expiresAt, input.now))
+                .run();
+            this.db
+                .insert(browserAuthorization_1.browserCredentials)
+                .values({
+                ...snapshot,
+                scope: input.scope,
+                digest: input.digest,
+                kind: input.kind,
+                expiresAt: input.expiresAt,
+            })
+                .run();
+        });
+    }
+    isValid(input) {
+        return (0, database_1.transaction)(this.db, () => {
+            const snapshot = this.requireAccount(input.readIdentity());
+            const credential = this.db
+                .select()
+                .from(browserAuthorization_1.browserCredentials)
+                .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.digest, input.digest), (0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.scope, input.scope), (0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.kind, 'session')))
+                .get();
+            return Boolean(credential &&
+                credential.expiresAt > input.now &&
+                credential.generation === snapshot.generation &&
+                credential.accountId === snapshot.accountId);
+        });
+    }
+    exchange(input) {
+        return (0, database_1.transaction)(this.db, () => {
+            const snapshot = this.requireAccount(input.readIdentity());
+            const credential = this.db
+                .select()
+                .from(browserAuthorization_1.browserCredentials)
+                .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.digest, input.digest), (0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.scope, input.scope), (0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.kind, 'launch')))
+                .get();
+            if (!credential ||
+                credential.expiresAt <= input.now ||
+                credential.generation !== snapshot.generation ||
+                credential.accountId !== snapshot.accountId)
+                return false;
+            this.db
+                .delete(browserAuthorization_1.browserCredentials)
+                .where((0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.digest, input.digest))
+                .run();
+            this.db
+                .insert(browserAuthorization_1.browserCredentials)
+                .values({
+                ...snapshot,
+                digest: input.sessionDigest,
+                scope: input.scope,
+                kind: 'session',
+                expiresAt: input.expiresAt,
+            })
+                .run();
+            return true;
+        });
+    }
+    revoke(scope, digest) {
+        this.db
+            .delete(browserAuthorization_1.browserCredentials)
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.scope, scope), (0, drizzle_orm_1.eq)(browserAuthorization_1.browserCredentials.digest, digest)))
+            .run();
+    }
+    close() {
+        (0, database_1.closeDatabase)(this.db);
+    }
+}
+exports.BrowserAuthorizationRecords = BrowserAuthorizationRecords;
+//# sourceMappingURL=BrowserAuthorizationRecords.js.map

package/dist/storage/library/BrowserAuthorizationRecords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserAuthorizationRecords.js","sourceRoot":"","sources":["../../../src/storage/library/BrowserAuthorizationRecords.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AACpC,6CAA2C;AAC3C,yCAIoB;AACpB,6CAA4D;AAC5D,wEAGuC;AAkCvC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAa,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CACH,2EAA2E,CAC5E,CAAC;IACJ,CAAC;CACF;AAND,4DAMC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnE,CAAC;CACF;AAJD,oDAIC;AAED,MAAa,2BAA2B;IACrB,EAAE,CAA6C;IAEhE,YAAY,YAAoB;QAC9B,IAAI,CAAC,EAAE,GAAG,IAAA,kCAAuB,EAAC;YAChC,YAAY;YACZ,MAAM,EAAE,yCAA4B;SACrC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,SAAwB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAgB,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7D,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,mBAAmB;YAC9B,SAAS;YACT,UAAU,EAAE,IAAA,mBAAU,GAAE;YACxB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,OAAgB;SACxB,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,uCAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,SAAwB;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;YAClE,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;IACzD,CAAC;IAED,QAAQ,CAAC,YAAiC;QACxC,OAAO,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB,CAAC,YAAiC;QAChD,OAAO,IAAA,sBAAW,EAChB,IAAI,CAAC,EAAE,EACP,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAChD,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,KAAsB;QAClC,MAAM,QAAQ,GAAG,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;YACzC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC5C,IACE,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACtC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;oBACjB,CAAC,SAAS,CAAC,KAAK,KAAK,OAAO,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;oBACnE,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,kBAAkB,CAAC;gBAEpD,MAAM,IAAI,oBAAoB,EAAE,CAAC;YACnC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,UAAU,GACd,KAAK,CAAC,QAAQ;gBACd,SAAS,CAAC,SAAS,KAAK,SAAS;gBACjC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACnE,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,aAAa;gBACxB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAA,mBAAU,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU;gBAC5D,WAAW,EAAE,IAAA,mBAAU,GAAE;gBACzB,KAAK,EAAE,UAAmB;aAC3B,CAAC;YACF,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,uCAAgB,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC;YACxD,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,OAAO,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAgB,CAAC,CAAC,GAAG,EAAE,CAAC;YAChE,IAAI,SAAS,EAAE,WAAW,KAAK,QAAQ,CAAC,WAAW;gBACjD,MAAM,IAAI,oBAAoB,EAAE,CAAC;YACnC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,yCAAkB,CAAC;iBAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;iBACtC,KAAK,CAAC,IAAA,gBAAE,EAAC,yCAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;iBAC7D,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,uCAAgB,CAAC;iBACxB,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;iBAC1C,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,KAAiB;QAC5B,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,KAAsB;QAC3B,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC3D,IACE,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACtC,KAAK,CAAC,kBAAkB,KAAK,QAAQ,CAAC,UAAU;gBAEhD,MAAM,IAAI,oBAAoB,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,yCAAkB,CAAC;iBAC1B,KAAK,CAAC,IAAA,iBAAG,EAAC,yCAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;iBACnD,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,yCAAkB,CAAC;iBAC1B,MAAM,CAAC;gBACN,GAAG,QAAQ;gBACX,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;iBACD,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,KAAuB;QAC7B,OAAO,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,yCAAkB,CAAC;iBACxB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,yCAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAC3C,IAAA,gBAAE,EAAC,yCAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EACzC,IAAA,gBAAE,EAAC,yCAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CACvC,CACF;iBACA,GAAG,EAAE,CAAC;YACT,OAAO,OAAO,CACZ,UAAU;gBACV,UAAU,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG;gBAChC,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;gBAC7C,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CACN,KAAsE;QAEtE,OAAO,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,yCAAkB,CAAC;iBACxB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,yCAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAC3C,IAAA,gBAAE,EAAC,yCAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EACzC,IAAA,gBAAE,EAAC,yCAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CACtC,CACF;iBACA,GAAG,EAAE,CAAC;YACT,IACE,CAAC,UAAU;gBACX,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG;gBACjC,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;gBAC7C,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;gBAE3C,OAAO,KAAK,CAAC;YACf,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,yCAAkB,CAAC;iBAC1B,KAAK,CAAC,IAAA,gBAAE,EAAC,yCAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;iBAClD,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,yCAAkB,CAAC;iBAC1B,MAAM,CAAC;gBACN,GAAG,QAAQ;gBACX,MAAM,EAAE,KAAK,CAAC,aAAa;gBAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;iBACD,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,MAAc;QAClC,IAAI,CAAC,EAAE;aACJ,MAAM,CAAC,yCAAkB,CAAC;aAC1B,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,yCAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,EACnC,IAAA,gBAAE,EAAC,yCAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CACtC,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;IAED,KAAK;QACH,IAAA,wBAAa,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;CACF;AAjMD,kEAiMC"}

package/dist/storage/library/database.d.ts

@@ -5,7 +5,8 @@ interface OpenDatabaseOptions {
     migrations?: readonly string[];
 }
 export declare const closeDatabase: (db: ReturnType<typeof drizzle>) => void;
-export declare const openDurableDatabase: ({ databasePath, schema, migrations, }: OpenDatabaseOptions) => Promise<ReturnType<typeof drizzle>>;
+export declare const openDurableDatabaseSync: ({ databasePath, schema, migrations, }: OpenDatabaseOptions) => ReturnType<typeof drizzle>;
+export declare const openDurableDatabase: (options: OpenDatabaseOptions) => Promise<ReturnType<typeof drizzle>>;
 export declare const transaction: <T>(db: ReturnType<typeof drizzle>, operation: () => T) => T;
 export {};
 //# sourceMappingURL=database.d.ts.map

package/dist/storage/library/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/storage/library/database.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD,UAAU,mBAAmB;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAKD,eAAO,MAAM,aAAa,GAAI,IAAI,UAAU,CAAC,OAAO,OAAO,CAAC,KAAG,IAE9D,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAU,uCAIvC,mBAAmB,KAAG,OAAO,CAAC,UAAU,CAAC,OAAO,OAAO,CAAC,CA4C1D,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,CAAC,EAC3B,IAAI,UAAU,CAAC,OAAO,OAAO,CAAC,EAC9B,WAAW,MAAM,CAAC,KACjB,CAYF,CAAC"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/storage/library/database.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD,UAAU,mBAAmB;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAKD,eAAO,MAAM,aAAa,GAAI,IAAI,UAAU,CAAC,OAAO,OAAO,CAAC,KAAG,IAE9D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,uCAIrC,mBAAmB,KAAG,UAAU,CAAC,OAAO,OAAO,CA8CjD,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,SAAS,mBAAmB,KAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,OAAO,CAAC,CAAqC,CAAC;AAE3E,eAAO,MAAM,WAAW,GAAI,CAAC,EAC3B,IAAI,UAAU,CAAC,OAAO,OAAO,CAAC,EAC9B,WAAW,MAAM,CAAC,KACjB,CAYF,CAAC"}

package/dist/storage/library/database.js

@@ -1,42 +1,9 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.transaction = exports.openDurableDatabase = exports.closeDatabase = void 0;
+exports.transaction = exports.openDurableDatabase = exports.openDurableDatabaseSync = exports.closeDatabase = void 0;
 const drizzle_orm_1 = require("drizzle-orm");
 const fs_1 = __importDefault(require("fs"));
 const node_sqlite_1 = require("drizzle-orm/node-sqlite");
@@ -47,9 +14,9 @@ const closeDatabase = (db) => {
     db.$client.close();
 };
 exports.closeDatabase = closeDatabase;
-const openDurableDatabase = async ({ databasePath, schema, migrations = [], }) => {
+const openDurableDatabaseSync = ({ databasePath, schema, migrations = [], }) => {
+    const { DatabaseSync } = process.getBuiltinModule('node:sqlite');
     const supportedVersion = INITIAL_SCHEMA_VERSION + migrations.length;
-    const { DatabaseSync } = await Promise.resolve().then(() => __importStar(require('node:sqlite')));
     fs_1.default.mkdirSync(path_1.default.dirname(databasePath), { recursive: true, mode: 0o700 });
     const db = new DatabaseSync(databasePath);
     try {
@@ -92,6 +59,8 @@ const openDurableDatabase = async ({ databasePath, schema, migrations = [], }) =
         throw error;
     }
 };
+exports.openDurableDatabaseSync = openDurableDatabaseSync;
+const openDurableDatabase = async (options) => (0, exports.openDurableDatabaseSync)(options);
 exports.openDurableDatabase = openDurableDatabase;
 const transaction = (db, operation) => {
     db.$client.exec('BEGIN IMMEDIATE');

package/dist/storage/library/database.js.map

@@ -1 +1 @@
-{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/storage/library/database.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAAgD;AAChD,4CAAoB;AACpB,yDAAkD;AAClD,gDAAwB;AAQxB,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,eAAe,GAAG,KAAK,CAAC;AAEvB,MAAM,aAAa,GAAG,CAAC,EAA8B,EAAQ,EAAE;IACpE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,YAAY,EACZ,MAAM,EACN,UAAU,GAAG,EAAE,GACK,EAAuC,EAAE;IAC7D,MAAM,gBAAgB,GAAG,sBAAsB,GAAG,UAAU,CAAC,MAAM,CAAC;IACpE,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;IACrD,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,yBAAyB,eAAe,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,GAAW,EAAE,CAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,GAAS,EAAE;YACjC,IAAI,OAAO,EAAE,GAAG,gBAAgB;gBAC9B,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,EAAE,gBAAgB,gBAAgB,cAAc,YAAY,YAAY,CAC/G,CAAC;QACN,CAAC,CAAC;QACF,eAAe,EAAE,CAAC;QAClB,IAAI,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;YACjC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,eAAe,EAAE,CAAC;gBAClB,IAAI,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;oBACpB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChB,EAAE,CAAC,IAAI,CAAC,yBAAyB,gBAAgB,EAAE,CAAC,CAAC;gBACvD,CAAC;qBAAM,CAAC;oBACN,OAAO,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;wBACpC,MAAM,cAAc,GAAG,OAAO,EAAE,CAAC;wBACjC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,GAAG,sBAAsB,CAAC,CAAC,CAAC;wBAC7D,EAAE,CAAC,IAAI,CAAC,yBAAyB,cAAc,GAAG,CAAC,EAAE,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACpB,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACrC,YAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO,IAAA,qBAAO,EAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAhDW,QAAA,mBAAmB,uBAgD9B;AAEK,MAAM,WAAW,GAAG,CACzB,EAA8B,EAC9B,SAAkB,EACf,EAAE;IACL,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,IAAI,KAAK,YAAY,+BAAiB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YACjE,MAAM,KAAK,CAAC,KAAK,CAAC;QACpB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAfW,QAAA,WAAW,eAetB"}
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/storage/library/database.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAgD;AAChD,4CAAoB;AACpB,yDAAkD;AAClD,gDAAwB;AAQxB,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,eAAe,GAAG,KAAK,CAAC;AAEvB,MAAM,aAAa,GAAG,CAAC,EAA8B,EAAQ,EAAE;IACpE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAEK,MAAM,uBAAuB,GAAG,CAAC,EACtC,YAAY,EACZ,MAAM,EACN,UAAU,GAAG,EAAE,GACK,EAA8B,EAAE;IACpD,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAC/C,aAAa,CACkB,CAAC;IAClC,MAAM,gBAAgB,GAAG,sBAAsB,GAAG,UAAU,CAAC,MAAM,CAAC;IACpE,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,yBAAyB,eAAe,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,GAAW,EAAE,CAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,GAAS,EAAE;YACjC,IAAI,OAAO,EAAE,GAAG,gBAAgB;gBAC9B,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,EAAE,gBAAgB,gBAAgB,cAAc,YAAY,YAAY,CAC/G,CAAC;QACN,CAAC,CAAC;QACF,eAAe,EAAE,CAAC;QAClB,IAAI,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;YACjC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,eAAe,EAAE,CAAC;gBAClB,IAAI,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;oBACpB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChB,EAAE,CAAC,IAAI,CAAC,yBAAyB,gBAAgB,EAAE,CAAC,CAAC;gBACvD,CAAC;qBAAM,CAAC;oBACN,OAAO,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;wBACpC,MAAM,cAAc,GAAG,OAAO,EAAE,CAAC;wBACjC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,GAAG,sBAAsB,CAAC,CAAC,CAAC;wBAC7D,EAAE,CAAC,IAAI,CAAC,yBAAyB,cAAc,GAAG,CAAC,EAAE,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACpB,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACrC,YAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO,IAAA,qBAAO,EAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAlDW,QAAA,uBAAuB,2BAkDlC;AAEK,MAAM,mBAAmB,GAAG,KAAK,EACtC,OAA4B,EACS,EAAE,CAAC,IAAA,+BAAuB,EAAC,OAAO,CAAC,CAAC;AAF9D,QAAA,mBAAmB,uBAE2C;AAEpE,MAAM,WAAW,GAAG,CACzB,EAA8B,EAC9B,SAAkB,EACf,EAAE;IACL,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,IAAI,KAAK,YAAY,+BAAiB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YACjE,MAAM,KAAK,CAAC,KAAK,CAAC;QACpB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAfW,QAAA,WAAW,eAetB"}

package/dist/storage/library/migrations.d.ts

@@ -3,4 +3,5 @@ export declare const REGISTRY_SCHEMA = "\n  CREATE TABLE projects (\n    id TEXT
 export declare const COORDINATOR_SCHEMA = "CREATE TABLE coordinator(singleton INTEGER PRIMARY KEY CHECK(singleton=1), pid INTEGER NOT NULL, token TEXT NOT NULL, port INTEGER)";
 export declare const REGISTRY_MIGRATIONS: readonly ["ALTER TABLE projects ADD COLUMN removed_at TEXT", "ALTER TABLE projects ADD COLUMN pinned_at TEXT"];
 export declare const PROJECT_RUNTIME_SCHEMA = "\n  CREATE TABLE project_runtime (\n    singleton INTEGER PRIMARY KEY CHECK(singleton = 1),\n    pid INTEGER NOT NULL CHECK(pid > 0),\n    token TEXT NOT NULL,\n    phase TEXT NOT NULL CHECK(phase IN ('active', 'starting', 'retiring'))\n  );\n";
+export declare const BROWSER_AUTHORIZATION_SCHEMA = "\n  CREATE TABLE browser_authority (\n    singleton INTEGER PRIMARY KEY CHECK(singleton = 1),\n    account_id TEXT, generation TEXT NOT NULL,\n    operation_id TEXT, phase TEXT NOT NULL CHECK(phase IN ('ready', 'changing'))\n  );\n  CREATE TABLE browser_credentials (\n    digest TEXT PRIMARY KEY, scope TEXT NOT NULL,\n    account_id TEXT, generation TEXT NOT NULL,\n    kind TEXT NOT NULL CHECK(kind IN ('session', 'launch')),\n    expires_at INTEGER NOT NULL\n  );\n";
 //# sourceMappingURL=migrations.d.ts.map

package/dist/storage/library/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/storage/library/migrations.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,osDAoCzB,CAAC;AAEF,eAAO,MAAM,eAAe,smBAmB3B,CAAC;AAEF,eAAO,MAAM,kBAAkB,wIACwG,CAAC;AAExI,eAAO,MAAM,mBAAmB,gHAGtB,CAAC;AAEX,eAAO,MAAM,sBAAsB,wPAOlC,CAAC"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/storage/library/migrations.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,osDAoCzB,CAAC;AAEF,eAAO,MAAM,eAAe,smBAmB3B,CAAC;AAEF,eAAO,MAAM,kBAAkB,wIACwG,CAAC;AAExI,eAAO,MAAM,mBAAmB,gHAGtB,CAAC;AAEX,eAAO,MAAM,sBAAsB,wPAOlC,CAAC;AAEF,eAAO,MAAM,4BAA4B,0dAYxC,CAAC"}

package/dist/storage/library/migrations.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PROJECT_RUNTIME_SCHEMA = exports.REGISTRY_MIGRATIONS = exports.COORDINATOR_SCHEMA = exports.REGISTRY_SCHEMA = exports.BUNDLE_SCHEMA = void 0;
+exports.BROWSER_AUTHORIZATION_SCHEMA = exports.PROJECT_RUNTIME_SCHEMA = exports.REGISTRY_MIGRATIONS = exports.COORDINATOR_SCHEMA = exports.REGISTRY_SCHEMA = exports.BUNDLE_SCHEMA = void 0;
 exports.BUNDLE_SCHEMA = `
   CREATE TABLE project (
     singleton INTEGER PRIMARY KEY CHECK(singleton = 1),
@@ -71,4 +71,17 @@ exports.PROJECT_RUNTIME_SCHEMA = `
     phase TEXT NOT NULL CHECK(phase IN ('active', 'starting', 'retiring'))
   );
 `;
+exports.BROWSER_AUTHORIZATION_SCHEMA = `
+  CREATE TABLE browser_authority (
+    singleton INTEGER PRIMARY KEY CHECK(singleton = 1),
+    account_id TEXT, generation TEXT NOT NULL,
+    operation_id TEXT, phase TEXT NOT NULL CHECK(phase IN ('ready', 'changing'))
+  );
+  CREATE TABLE browser_credentials (
+    digest TEXT PRIMARY KEY, scope TEXT NOT NULL,
+    account_id TEXT, generation TEXT NOT NULL,
+    kind TEXT NOT NULL CHECK(kind IN ('session', 'launch')),
+    expires_at INTEGER NOT NULL
+  );
+`;
 //# sourceMappingURL=migrations.js.map

package/dist/storage/library/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../src/storage/library/migrations.ts"],"names":[],"mappings":";;;AAAa,QAAA,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC5B,CAAC;AAEW,QAAA,eAAe,GAAG;;;;;;;;;;;;;;;;;;;CAmB9B,CAAC;AAEW,QAAA,kBAAkB,GAC7B,qIAAqI,CAAC;AAE3H,QAAA,mBAAmB,GAAG;IACjC,iDAAiD;IACjD,gDAAgD;CACxC,CAAC;AAEE,QAAA,sBAAsB,GAAG;;;;;;;CAOrC,CAAC"}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../src/storage/library/migrations.ts"],"names":[],"mappings":";;;AAAa,QAAA,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC5B,CAAC;AAEW,QAAA,eAAe,GAAG;;;;;;;;;;;;;;;;;;;CAmB9B,CAAC;AAEW,QAAA,kBAAkB,GAC7B,qIAAqI,CAAC;AAE3H,QAAA,mBAAmB,GAAG;IACjC,iDAAiD;IACjD,gDAAgD;CACxC,CAAC;AAEE,QAAA,sBAAsB,GAAG;;;;;;;CAOrC,CAAC;AAEW,QAAA,4BAA4B,GAAG;;;;;;;;;;;;CAY3C,CAAC"}

package/dist/storage/library/schema/browserAuthorization.d.ts

@@ -0,0 +1,191 @@
+export declare const browserAuthority: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "browser_authority";
+    schema: undefined;
+    columns: {
+        singleton: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_authority";
+            dataType: "number int53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        accountId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_authority";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        generation: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_authority";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        operationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_authority";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        phase: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_authority";
+            dataType: "string enum";
+            data: "ready" | "changing";
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["ready", "changing"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+    };
+    dialect: "sqlite";
+}>;
+export declare const browserCredentials: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "browser_credentials";
+    schema: undefined;
+    columns: {
+        digest: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_credentials";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        scope: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_credentials";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        accountId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_credentials";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        generation: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_credentials";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        kind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_credentials";
+            dataType: "string enum";
+            data: "session" | "launch";
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["session", "launch"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        expiresAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "browser_credentials";
+            dataType: "number int53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+    };
+    dialect: "sqlite";
+}>;
+//# sourceMappingURL=browserAuthorization.d.ts.map

package/dist/storage/library/schema/browserAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserAuthorization.d.ts","sourceRoot":"","sources":["../../../../src/storage/library/schema/browserAuthorization.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM3B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO7B,CAAC"}

package/dist/storage/library/schema/browserAuthorization.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.browserCredentials = exports.browserAuthority = void 0;
+const sqlite_core_1 = require("drizzle-orm/sqlite-core");
+exports.browserAuthority = (0, sqlite_core_1.sqliteTable)('browser_authority', {
+    singleton: (0, sqlite_core_1.integer)().primaryKey(),
+    accountId: (0, sqlite_core_1.text)('account_id'),
+    generation: (0, sqlite_core_1.text)().notNull(),
+    operationId: (0, sqlite_core_1.text)('operation_id'),
+    phase: (0, sqlite_core_1.text)({ enum: ['ready', 'changing'] }).notNull(),
+});
+exports.browserCredentials = (0, sqlite_core_1.sqliteTable)('browser_credentials', {
+    digest: (0, sqlite_core_1.text)().primaryKey(),
+    scope: (0, sqlite_core_1.text)().notNull(),
+    accountId: (0, sqlite_core_1.text)('account_id'),
+    generation: (0, sqlite_core_1.text)().notNull(),
+    kind: (0, sqlite_core_1.text)({ enum: ['session', 'launch'] }).notNull(),
+    expiresAt: (0, sqlite_core_1.integer)('expires_at').notNull(),
+});
+//# sourceMappingURL=browserAuthorization.js.map

package/dist/storage/library/schema/browserAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserAuthorization.js","sourceRoot":"","sources":["../../../../src/storage/library/schema/browserAuthorization.ts"],"names":[],"mappings":";;;AAAA,yDAAqE;AAExD,QAAA,gBAAgB,GAAG,IAAA,yBAAW,EAAC,mBAAmB,EAAE;IAC/D,SAAS,EAAE,IAAA,qBAAO,GAAE,CAAC,UAAU,EAAE;IACjC,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,IAAA,kBAAI,GAAE,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAA,kBAAI,EAAC,cAAc,CAAC;IACjC,KAAK,EAAE,IAAA,kBAAI,EAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;CACvD,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAAG,IAAA,yBAAW,EAAC,qBAAqB,EAAE;IACnE,MAAM,EAAE,IAAA,kBAAI,GAAE,CAAC,UAAU,EAAE;IAC3B,KAAK,EAAE,IAAA,kBAAI,GAAE,CAAC,OAAO,EAAE;IACvB,SAAS,EAAE,IAAA,kBAAI,EAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,IAAA,kBAAI,GAAE,CAAC,OAAO,EAAE;IAC5B,IAAI,EAAE,IAAA,kBAAI,EAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACrD,SAAS,EAAE,IAAA,qBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC3C,CAAC,CAAC"}