Permit database queries.
Permits are time-bounded, revocable grants of a role to an actor. The system is safe by default — no permit, no capability.
7 declarations
auth/permit_queries.ts view source
(deps: QueryDeps, input: GrantPermitInput): Promise<Permit> Grant a permit to an actor. Idempotent — if an active permit already exists for this actor and role, returns the existing permit instead of creating a duplicate.
depsquery dependencies
inputthe permit fields
Promise<Permit> the created or existing active permit
auth/permit_queries.ts view source
(deps: QueryDeps, role: string): Promise<string | null> Find the account ID of an account that holds an active permit for a given role.
Joins permit → actor → account. Returns the first match, or null if none.
depsquery dependencies
rolethe role to search for
stringPromise<string | null> the account ID, or null
auth/permit_queries.ts view source
(deps: QueryDeps, actor_id: string): Promise<Permit[]> Find all active (non-revoked, non-expired) permits for an actor.
depsactor_idstringPromise<Permit[]> auth/permit_queries.ts view source
(deps: QueryDeps, actor_id: string, role: string): Promise<boolean> Check if an actor has an active permit for a given role.
depsactor_idstringrolestringPromise<boolean> auth/permit_queries.ts view source
(deps: QueryDeps, actor_id: string): Promise<Permit[]> List all permits for an actor (including revoked/expired).
depsactor_idstringPromise<Permit[]> auth/permit_queries.ts view source
(deps: QueryDeps, actor_id: string, role: string, revoked_by: string | null): Promise<boolean> Revoke the active permit for an actor with a given role.
Due to the unique partial index on (actor_id, role) WHERE revoked_at IS NULL,
at most one active permit exists per actor+role combination.
depsquery dependencies
actor_idthe actor whose permit to revoke
stringrolethe role to revoke
stringrevoked_bythe actor who revoked it (for audit trail)
string | nullPromise<boolean> true if a permit was revoked, false if none was active
auth/permit_queries.ts view source
(deps: QueryDeps, permit_id: string, actor_id: string, revoked_by: string | null): Promise<{ id: string; role: string; } | null> Revoke a permit by id, constrained to a specific actor.
Requires actor_id to prevent cross-account revocation (IDOR guard).
Returns null if the permit is not found, already revoked, or belongs
to a different actor. Returns {id, role} on success for audit logging.
depsquery dependencies
permit_idthe permit to revoke
stringactor_idthe actor that must own the permit
stringrevoked_bythe actor who revoked it (for audit trail)
string | nullPromise<{ id: string; role: string; } | null>