@yielded/auth-persistence-drizzle 0.1.0-beta.0 → 0.1.0-beta.1

package/dist/drizzle/oauth-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-target.mjs","names":[],"sources":["../../src/drizzle/oauth-target.ts"],"sourcesContent":["import { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountRevision,\n  OAuthLinkClaimDecision,\n  OAuthLinkDecision,\n  OAuthLinkIssueDecision,\n  OAuthLinkPendingFlow,\n  OAuthUnlinkDecision,\n  OAuthUnlinkInspection,\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n  type PrepareOAuthCommit,\n  OAuthRegistrationIntent,\n  OAuthRegistrationFingerprint,\n  OAuthClaim,\n  OAuthClaimDecision,\n  OAuthCleanupInput,\n  OAuthIssueDecision,\n  OAuthPendingFlow,\n  OAuthSettlementDecision,\n  OAuthVerifiedExternalIdentity,\n  OAuthCredentialSnapshot,\n  snapshotOAuthSync,\n  type OAuthUnavailable,\n} from \"@yielded/auth/OAuth\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- concrete driver entry points restore table/database generics. */\nimport { eq, sql } from \"drizzle-orm\";\nimport { type Context, Effect, Layer } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport {\n  accountCurrent,\n  claimLink,\n  inspectUnlink,\n  issueLink,\n  preflightLink,\n  settleLink,\n  unlink,\n} from \"./oauth-accounts\";\nimport {\n  claimFlow,\n  cleanupFlows,\n  discoverOwned,\n  exactClaim,\n  issueFlow,\n  matchesAccess,\n  readFlow,\n  resolveOwned,\n  terminalFlow,\n} from \"./oauth-flow\";\nimport {\n  accountsInputs,\n  capturedOAuthService,\n  registrationInputs,\n  registrationIntentInputs,\n  signInInputs,\n} from \"./oauth-input\";\nimport type { OAuthRegistrationAuthority } from \"./oauth-model\";\nimport { both, col, equal, CurrentOAuthTransaction, type OAuthNativeDatabase } from \"./oauth-owner\";\nimport {\n  inspectIntent,\n  register,\n  registrationData,\n  registrationResources,\n  type RegistrationCallbacks,\n  settleRegistrationIntent,\n} from \"./oauth-registration\";\nimport { captureOAuthMapping, invariant, nonce, unavailable } from \"./oauth-state\";\nimport {\n  coordinateTransactionOwner,\n  makeTransactionExecution,\n  sqlClientTransactionStandaloneGuard,\n  type TransactionTargetConfiguration,\n  type TransactionCoordinatorError,\n  type TransactionExecution,\n} from \"./transaction-execution\";\n\nexport type OAuthTargetConfiguration = TransactionTargetConfiguration<OAuthUnavailable>;\nexport type OAuthCoordinatorError<E> = TransactionCoordinatorError<E, OAuthUnavailable>;\nexport type OAuthExecution = TransactionExecution<OAuthUnavailable, CurrentOAuthTransaction, never>;\n\nexport const sqlClientOAuthStandaloneGuard = (\n  database: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n) => sqlClientTransactionStandaloneGuard(unavailable, database);\n\nexport const makeOAuthExecution = (\n  database: OAuthNativeDatabase,\n  hooks: LifecycleHooks[\"Service\"],\n  configuration: OAuthTargetConfiguration,\n): OAuthExecution => {\n  const execution = makeTransactionExecution(\n    CurrentOAuthTransaction,\n    database,\n    configuration,\n    unavailable,\n    nonce,\n  );\n\n  return {\n    ...execution,\n    run: (operation, mutation) =>\n      execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  };\n};\n\nconst prepareValue = <Value, A>(value: Value, prepare: PrepareOAuthCommit<Value, A>) =>\n  Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n    Effect.sync(() => {\n      owner.guards.push(owner.journal.prepare(undefined));\n\n      return prepare(value, owner.journal);\n    }),\n  );\n\nexport const makeOAuthSignIn = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthSignInPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthSignInPersistence[\"Service\"]>(\n    {\n      issue: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const input = snapshotOAuthSync(OAuthPendingFlow, original);\n            const value = yield* issueFlow(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const read = yield* readFlow(mapping, input, \"sign-in\");\n\n            const claim =\n              read.row !== undefined && read.flow !== undefined && matchesAccess(read.flow, input)\n                ? yield* claimFlow(mapping, { row: read.row, flow: read.flow }, input.claimId)\n                : undefined;\n\n            return yield* prepareValue(\n              snapshotOAuthSync(\n                OAuthClaimDecision,\n                claim === undefined\n                  ? { _tag: \"Rejected\" }\n                  : { _tag: \"Claimed\", claim: claim as typeof OAuthClaim.Type },\n              ),\n              prepare,\n            );\n          }),\n        ),\n      settle: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const claim = snapshotOAuthSync(OAuthClaim, original.claim);\n            const outcome = original.outcome;\n\n            const identity =\n              outcome._tag === \"Verified\"\n                ? snapshotOAuthSync(OAuthVerifiedExternalIdentity, outcome.identity).identity\n                : undefined;\n\n            if (identity !== undefined)\n              invariant(\n                identity.provider === claim.flow.context.provider &&\n                  identity.issuer === claim.flow.context.issuer,\n              );\n\n            // Discover/lock the existing subject before locking its claimed flow.\n            const found =\n              identity === undefined ? undefined : yield* discoverOwned(mapping, identity);\n\n            const exact = yield* exactClaim(mapping, claim, \"sign-in\");\n            let value: typeof OAuthSettlementDecision.Type = { _tag: \"Rejected\" };\n\n            if (exact !== undefined) {\n              const credential =\n                identity === undefined\n                  ? undefined\n                  : resolveOwned(mapping, claim.flow.context.moduleId, identity, found);\n\n              value =\n                outcome._tag !== \"Verified\"\n                  ? { _tag: outcome._tag }\n                  : credential === undefined\n                    ? { _tag: \"Rejected\" }\n                    : { _tag: \"Verified\", credential };\n              yield* terminalFlow(mapping, claim.flow, value._tag);\n            }\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthSettlementDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* cleanupFlows(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    signInInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistrationIntents = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthRegistrationIntents[\"Service\"] =>\n  capturedOAuthService<OAuthRegistrationIntents[\"Service\"]>(\n    {\n      settle: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* settleRegistrationIntent(mapping, {\n              claim: snapshotOAuthSync(OAuthClaim, input.claim),\n              identity: snapshotOAuthSync(OAuthVerifiedExternalIdentity, input.identity),\n              ...(input.intent === undefined\n                ? {}\n                : { intent: snapshotOAuthSync(OAuthRegistrationIntent, input.intent) }),\n            });\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    registrationIntentInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistration = <Registration>(\n  mapping: any,\n  execute: OAuthExecution,\n  allocated?: Awaited<ReturnType<typeof registrationResources>> extends Effect.Effect<\n    infer A,\n    any,\n    any\n  >\n    ? A\n    : never,\n): OAuthRegistrationAuthority<Registration> =>\n  capturedOAuthService<OAuthRegistrationAuthority<Registration>>(\n    {\n      read: (input) =>\n        execute.run(\n          Effect.map(inspectIntent(mapping, input), (result) => result?.inspection),\n          false,\n        ),\n      inspect: (input) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const intent = snapshotOAuthSync(OAuthRegistrationIntent, input.intent);\n          const stored = mapping.application.encode(input.registration);\n\n          invariant(\n            typeof stored === \"string\" && new TextEncoder().encode(stored).length <= 1048576,\n          );\n          const detached = { intent, registration: mapping.application.decode(stored) };\n\n          const checked = execute.bound\n            ? (invariant(mapping.inspectSync !== undefined), mapping.inspectSync(detached))\n            : yield* (mapping as RegistrationCallbacks<Registration>).inspect(detached);\n\n          invariant(typeof checked.eligible === \"boolean\");\n\n          return {\n            fingerprint: snapshotOAuthSync(OAuthRegistrationFingerprint, checked.fingerprint),\n            eligible: checked.eligible,\n          };\n        }).pipe(\n          (effect) => (execute.bound ? execute.run(effect, false) : effect),\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      register: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const data = yield* registrationData(mapping, input, execute.bound);\n          const resources = allocated ?? (yield* registrationResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* register(mapping, input, data, resources);\n\n              return yield* prepareValue(value, prepare);\n            }),\n          );\n        }).pipe(\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      cleanup: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n\n            const input = snapshotOAuthSync(OAuthCleanupInput, original),\n              i = mapping.intent,\n              r = mapping.command;\n\n            const now = yield* owner.now(mapping.clock);\n\n            const candidates = yield* owner.read(\n              i.table,\n              both(\n                eq(col(i.table, i.moduleId), input.moduleId),\n                sql`${col(i.table, i.state)} <> 'ProvisioningPending' and ${col(i.table, i.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n              ),\n              { limit: input.limit, observe: false, takeOnly: true },\n            );\n\n            let removed = 0;\n\n            for (const candidate of candidates.rows) {\n              const selected = yield* owner.read(\n                i.table,\n                equal(i.table, {\n                  [i.moduleId]: input.moduleId,\n                  [i.reference]: candidate[i.reference],\n                }),\n                { limit: 1 },\n              );\n\n              const row = selected.rows[0];\n\n              if (row === undefined || row[i.state] === \"ProvisioningPending\") continue;\n              let horizon = mapping.clock.decodeInstant(row[i.retentionUntil]);\n\n              if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                continue;\n              if (row[i.commandId] !== null) {\n                const commands = yield* owner.read(\n                  r.table,\n                  equal(r.table, {\n                    [r.moduleId]: input.moduleId,\n                    [r.commandId]: row[i.commandId],\n                  }),\n                  { limit: 1 },\n                );\n\n                const command = commands.rows[0];\n\n                if (command === undefined) continue;\n                horizon = Math.max(horizon, mapping.clock.decodeInstant(command[r.retentionUntil]));\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, {\n                  [r.moduleId]: input.moduleId,\n                  [r.commandId]: row[i.commandId],\n                });\n              }\n              yield* owner.remove(i.table, {\n                [i.moduleId]: input.moduleId,\n                [i.reference]: row[i.reference],\n              });\n              owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n              removed++;\n            }\n\n            return yield* prepareValue(\n              { removed, hasMore: candidates.rows.length === input.limit },\n              prepare,\n            );\n          }),\n        ),\n    },\n    registrationInputs(mapping.application),\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthSignInServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthSignInPersistence: makeOAuthSignIn(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationIntentServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthRegistrationIntents: makeOAuthRegistrationIntents(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    registrationAuthority: makeOAuthRegistration<Registration>(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const coordinateOAuthOwner = <Services, Transaction, A, E, R>(\n  database: OAuthNativeDatabase,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  allocate: (mapping: any) => Effect.Effect<any, PersistenceMappingError>,\n  services: (mapping: any, execution: OAuthExecution, resources: any) => Services,\n  owner: (\n    transaction: Transaction,\n    services: Services,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, OAuthCoordinatorError<E>, R | LifecycleHooks> => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.flatMap(LifecycleHooks, (hooks) =>\n    coordinateTransactionOwner(\n      database,\n      CurrentOAuthTransaction,\n      configuration,\n      Effect.suspend(() => allocate(captured)),\n      unavailable,\n      nonce,\n      (execution, resources) =>\n        services(\n          captured,\n          {\n            ...execution,\n            run: (operation, mutation) =>\n              execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n          },\n          resources,\n        ),\n      owner,\n    ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  );\n};\n\nconst accountResources = (mapping: any) =>\n  Effect.gen(function* () {\n    return {\n      credentialId: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialId,\n        yield* mapping.allocateCredentialId as Effect.Effect<string, PersistenceMappingError>,\n      ),\n      revision: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialRevision,\n        yield* mapping.allocateRevision as Effect.Effect<SecurityRevision, PersistenceMappingError>,\n      ),\n    };\n  });\n\nexport const coordinateTargetOAuthRegistration = <Registration, Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    registrationResources,\n    (captured, execute, resources) => ({\n      registrationAuthority: makeOAuthRegistration<Registration>(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthSignIn = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({ oauthSignInPersistence: makeOAuthSignIn(captured, execute) }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthRegistrationIntents = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({\n      oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, execute),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthAccounts = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    accountResources,\n    (captured, execute, resources) => ({\n      oauthAccountsPersistence: makeOAuthAccounts(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const makeOAuthAccounts = (\n  mapping: any,\n  execute: OAuthExecution,\n  resources?: any,\n): OAuthAccountsPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthAccountsPersistence[\"Service\"]>(\n    {\n      capture: (input) =>\n        execute.run(\n          Effect.map(accountCurrent(mapping, input.subjectId), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthAccountRevision, current.revision),\n          ),\n          false,\n        ),\n      issue: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* issueLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      preflight: (input) =>\n        execute.run(\n          Effect.map(preflightLink(mapping, input), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthLinkPendingFlow, current.flow),\n          ),\n          false,\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* claimLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkClaimDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      settle: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const allocated = resources ?? (yield* accountResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* settleLink(mapping, input, allocated as never);\n\n              return yield* prepareValue(snapshotOAuthSync(OAuthLinkDecision, value), prepare);\n            }),\n          );\n        }).pipe(\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      inspectUnlink: (input) =>\n        execute.run(\n          Effect.map(inspectUnlink(mapping, input), (value) =>\n            snapshotOAuthSync(OAuthUnlinkInspection, value),\n          ),\n          false,\n        ),\n      unlink: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* unlink(mapping, input);\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthUnlinkDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n            const value = yield* cleanupFlows(mapping, input, \"link\");\n            const remaining = input.limit - value.terminalized - value.removed;\n\n            const now = yield* owner.now(mapping.clock),\n              r = mapping.command;\n\n            let removed = 0;\n\n            if (remaining > 0) {\n              const rows = yield* owner.read(\n                r.table,\n                both(\n                  eq(col(r.table, r.moduleId), input.moduleId),\n                  sql`${col(r.table, r.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n                ),\n                { limit: remaining, observe: false, takeOnly: true },\n              );\n\n              for (const row of rows.rows) {\n                const key = { [r.moduleId]: input.moduleId, [r.commandId]: row[r.commandId] };\n                const selected = yield* owner.read(r.table, equal(r.table, key), { limit: 1 });\n                const current = selected.rows[0];\n\n                if (current === undefined) continue;\n                const horizon = mapping.clock.decodeInstant(current[r.retentionUntil]);\n\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, key);\n                owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n                removed++;\n              }\n            }\n\n            return yield* prepareValue(\n              {\n                ...value,\n                removed: value.removed + removed,\n                hasMore: value.hasMore || remaining === removed,\n              },\n              prepare,\n            );\n          }),\n        ),\n    },\n    accountsInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthAccountsServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthAccountsPersistence: makeOAuthAccounts(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const oauthAccountsPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthAccountsServices>,\n) =>\n  Layer.effect(\n    OAuthAccountsPersistence,\n    Effect.map(services, (value) => value.oauthAccountsPersistence),\n  );\n\nexport const oauthSignInPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthSignInServices>,\n) =>\n  Layer.effect(\n    OAuthSignInPersistence,\n    Effect.map(services, (value) => value.oauthSignInPersistence),\n  );\n\nexport const oauthRegistrationIntentsLayer = (\n  services: ReturnType<typeof makeTargetOAuthRegistrationIntentServices>,\n) =>\n  Layer.effect(\n    OAuthRegistrationIntents,\n    Effect.map(services, (value) => value.oauthRegistrationIntents),\n  );\n\nexport const oauthRegistrationAuthorityLayer = <Id, Registration>(\n  tag: Context.Key<Id, OAuthRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;;;;;;AAoFA,MAAa,iCACX,aACG,oCAAoC,aAAa,QAAQ;AAE9D,MAAa,sBACX,UACA,OACA,kBACmB;CACnB,MAAM,YAAY,yBAChB,yBACA,UACA,eACA,aACA,KACF;CAEA,OAAO;EACL,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF;AACF;AAEA,MAAM,gBAA0B,OAAc,YAC5C,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,QAAQ,OAAO,MAAM,OAAO;AACrC,CAAC,CACH;AAEF,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,UAAU,YAChB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,kBAAkB,QAAQ;EAC1D,MAAM,QAAQ,OAAO,UAAU,SAAS,OAAO,SAAS;EAExD,OAAO,OAAO,aACZ,kBAAkB,oBAAoB,KAAc,GACpD,OACF;CACF,CAAC,CACH;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,OAAO,OAAO,SAAS,SAAS,OAAO,SAAS;EAEtD,MAAM,QACJ,KAAK,QAAQ,KAAA,KAAa,KAAK,SAAS,KAAA,KAAa,cAAc,KAAK,MAAM,KAAK,IAC/E,OAAO,UAAU,SAAS;GAAE,KAAK,KAAK;GAAK,MAAM,KAAK;EAAK,GAAG,MAAM,OAAO,IAC3E,KAAA;EAEN,OAAO,OAAO,aACZ,kBACE,oBACA,UAAU,KAAA,IACN,EAAE,MAAM,WAAW,IACnB;GAAE,MAAM;GAAkB;EAAgC,CAChE,GACA,OACF;CACF,CAAC,CACH;CACF,SAAS,UAAU,YACjB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,YAAY,SAAS,KAAK;EAC1D,MAAM,UAAU,SAAS;EAEzB,MAAM,WACJ,QAAQ,SAAS,aACb,kBAAkB,+BAA+B,QAAQ,QAAQ,CAAC,CAAC,WACnE,KAAA;EAEN,IAAI,aAAa,KAAA,GACf,UACE,SAAS,aAAa,MAAM,KAAK,QAAQ,YACvC,SAAS,WAAW,MAAM,KAAK,QAAQ,MAC3C;EAGF,MAAM,QACJ,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,cAAc,SAAS,QAAQ;EAE7E,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAS;EACzD,IAAI,QAA6C,EAAE,MAAM,WAAW;EAEpE,IAAI,UAAU,KAAA,GAAW;GACvB,MAAM,aACJ,aAAa,KAAA,IACT,KAAA,IACA,aAAa,SAAS,MAAM,KAAK,QAAQ,UAAU,UAAU,KAAK;GAExE,QACE,QAAQ,SAAS,aACb,EAAE,MAAM,QAAQ,KAAK,IACrB,eAAe,KAAA,IACb,EAAE,MAAM,WAAW,IACnB;IAAE,MAAM;IAAY;GAAW;GACvC,OAAO,aAAa,SAAS,MAAM,MAAM,MAAM,IAAI;EACrD;EAEA,OAAO,OAAO,aAAa,kBAAkB,yBAAyB,KAAK,GAAG,OAAO;CACvF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,SAAS;EAE3D,OAAO,OAAO,aAAa,OAAO,OAAO;CAC3C,CAAC,CACH;AACJ,GACA,cACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,gCACX,SACA,YAEA,qBACE,EACE,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,yBAAyB,SAAS;EACrD,OAAO,kBAAkB,YAAY,MAAM,KAAK;EAChD,UAAU,kBAAkB,+BAA+B,MAAM,QAAQ;EACzE,GAAI,MAAM,WAAW,KAAA,IACjB,CAAC,IACD,EAAE,QAAQ,kBAAkB,yBAAyB,MAAM,MAAM,EAAE;CACzE,CAAC;CAED,OAAO,OAAO,aAAa,OAAO,OAAO;AAC3C,CAAC,CACH,EACJ,GACA,0BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,yBACX,SACA,SACA,cAQA,qBACE;CACE,OAAO,UACL,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,WAAW,QAAQ,UAAU,GACxE,KACF;CACF,UAAU,UACR,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,SAAS,kBAAkB,yBAAyB,MAAM,MAAM;EACtE,MAAM,SAAS,QAAQ,YAAY,OAAO,MAAM,YAAY;EAE5D,UACE,OAAO,WAAW,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU,OAC3E;EACA,MAAM,WAAW;GAAE;GAAQ,cAAc,QAAQ,YAAY,OAAO,MAAM;EAAE;EAE5E,MAAM,UAAU,QAAQ,SACnB,UAAU,QAAQ,gBAAgB,KAAA,CAAS,GAAG,QAAQ,YAAY,QAAQ,KAC3E,OAAQ,QAAgD,QAAQ,QAAQ;EAE5E,UAAU,OAAO,QAAQ,aAAa,SAAS;EAE/C,OAAO;GACL,aAAa,kBAAkB,8BAA8B,QAAQ,WAAW;GAChF,UAAU,QAAQ;EACpB;CACF,CAAC,CAAC,CAAC,MACA,WAAY,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,KAAK,IAAI,QAC1D,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,WAAW,OAAO,YAChB,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,OAAO,OAAO,iBAAiB,SAAS,OAAO,QAAQ,KAAK;EAClE,MAAM,YAAY,cAAc,OAAO,sBAAsB,OAAO;EAEpE,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,SAAS,SAAS,OAAO,MAAM,SAAS;GAE7D,OAAO,OAAO,aAAa,OAAO,OAAO;EAC3C,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,UAAU,UAAU,YAClB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,MAAM,QAAQ,kBAAkB,mBAAmB,QAAQ,GACzD,IAAI,QAAQ,QACZ,IAAI,QAAQ;EAEd,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK;EAE1C,MAAM,aAAa,OAAO,MAAM,KAC9B,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GACjI,GACA;GAAE,OAAO,MAAM;GAAO,SAAS;GAAO,UAAU;EAAK,CACvD;EAEA,IAAI,UAAU;EAEd,KAAK,MAAM,aAAa,WAAW,MAAM;GAUvC,MAAM,OAAM,OATY,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;KACZ,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,UAAU,EAAE;GAC7B,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEqB,KAAK;GAE1B,IAAI,QAAQ,KAAA,KAAa,IAAI,EAAE,WAAW,uBAAuB;GACjE,IAAI,UAAU,QAAQ,MAAM,cAAc,IAAI,EAAE,eAAe;GAE/D,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;GACF,IAAI,IAAI,EAAE,eAAe,MAAM;IAU7B,MAAM,WAAU,OATQ,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;MACZ,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEyB,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,UAAU,KAAK,IAAI,SAAS,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe,CAAC;IAClF,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO;MAC1B,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC;GACH;GACA,OAAO,MAAM,OAAO,EAAE,OAAO;KAC1B,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,IAAI,EAAE;GACvB,CAAC;GACD,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;GAC5E;EACF;EAEA,OAAO,OAAO,aACZ;GAAE;GAAS,SAAS,WAAW,KAAK,WAAW,MAAM;EAAM,GAC3D,OACF;CACF,CAAC,CACH;AACJ,GACA,mBAAmB,QAAQ,WAAW,GACtC,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,iCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,wBAAwB,gBACtB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,6CACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,0BAA0B,6BACxB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,uCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,uBAAuB,sBACrB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,wBACX,UACA,SACA,eACA,UACA,UACA,UAKmE;CACnE,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,QAAQ,iBAAiB,UACrC,2BACE,UACA,yBACA,eACA,OAAO,cAAc,SAAS,QAAQ,CAAC,GACvC,aACA,QACC,WAAW,cACV,SACE,UACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF,GACA,SACF,GACF,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD;AACF;AAEA,MAAM,oBAAoB,YACxB,OAAO,IAAI,aAAa;CACtB,OAAO;EACL,cAAc,kBACZ,wBAAwB,OAAO,cAC/B,OAAO,QAAQ,oBACjB;EACA,UAAU,kBACR,wBAAwB,OAAO,oBAC/B,OAAO,QAAQ,gBACjB;CACF;AACF,CAAC;AAEH,MAAa,qCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,wBACC,UAAU,SAAS,eAAe,EACjC,uBAAuB,sBAAoC,UAAU,SAAS,SAAS,EACzF,IACA,KACF;AAEF,MAAa,+BACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EAAE,wBAAwB,gBAAgB,UAAU,OAAO,EAAE,IACrF,KACF;AAEF,MAAa,4CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EACtB,0BAA0B,6BAA6B,UAAU,OAAO,EAC1E,IACA,KACF;AAEF,MAAa,iCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,mBACC,UAAU,SAAS,eAAe,EACjC,0BAA0B,kBAAkB,UAAU,SAAS,SAAS,EAC1E,IACA,KACF;AAEF,MAAa,qBACX,SACA,SACA,cAEA,qBACE;CACE,UAAU,UACR,QAAQ,IACN,OAAO,IAAI,eAAe,SAAS,MAAM,SAAS,IAAI,YACpD,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,QAAQ,CAC9D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,YAAY,UACV,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,YACzC,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,IAAI,CAC1D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,SAAS,OAAO,YACd,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,YAAY,cAAc,OAAO,iBAAiB,OAAO;EAE/D,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAkB;GAElE,OAAO,OAAO,aAAa,kBAAkB,mBAAmB,KAAK,GAAG,OAAO;EACjF,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,gBAAgB,UACd,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,UACzC,kBAAkB,uBAAuB,KAAK,CAChD,GACA,KACF;CACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,OAAO,SAAS,KAAK;EAE1C,OAAO,OAAO,aAAa,kBAAkB,qBAAqB,KAAK,GAAG,OAAO;CACnF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,MAAM;EACxD,MAAM,YAAY,MAAM,QAAQ,MAAM,eAAe,MAAM;EAE3D,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,GACxC,IAAI,QAAQ;EAEd,IAAI,UAAU;EAEd,IAAI,YAAY,GAAG;GACjB,MAAM,OAAO,OAAO,MAAM,KACxB,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GAC3E,GACA;IAAE,OAAO;IAAW,SAAS;IAAO,UAAU;GAAK,CACrD;GAEA,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,MAAM,MAAM;MAAG,EAAE,WAAW,MAAM;MAAW,EAAE,YAAY,IAAI,EAAE;IAAW;IAE5E,MAAM,WAAU,OADQ,MAAM,KAAK,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAA,CACpD,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,MAAM,UAAU,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe;IAErE,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO,GAAG;IAChC,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;IAC5E;GACF;EACF;EAEA,OAAO,OAAO,aACZ;GACE,GAAG;GACH,SAAS,MAAM,UAAU;GACzB,SAAS,MAAM,WAAW,cAAc;EAC1C,GACA,OACF;CACF,CAAC,CACH;AACJ,GACA,gBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,mCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,0BAA0B,kBACxB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,+BACX,aAEA,MAAM,OACJ,wBACA,OAAO,IAAI,WAAW,UAAU,MAAM,sBAAsB,CAC9D;AAEF,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,mCACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}
+{"version":3,"file":"oauth-target.mjs","names":[],"sources":["../../src/drizzle/oauth-target.ts"],"sourcesContent":["import { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountRevision,\n  OAuthLinkClaimDecision,\n  OAuthLinkDecision,\n  OAuthLinkIssueDecision,\n  OAuthLinkPendingFlow,\n  OAuthUnlinkDecision,\n  OAuthUnlinkInspection,\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n  type PrepareOAuthCommit,\n  OAuthRegistrationIntent,\n  OAuthRegistrationFingerprint,\n  OAuthClaim,\n  OAuthClaimDecision,\n  OAuthCleanupInput,\n  OAuthIssueDecision,\n  OAuthPendingFlow,\n  OAuthSettlementDecision,\n  OAuthVerifiedExternalIdentity,\n  OAuthCredentialSnapshot,\n  snapshotOAuthSync,\n  type OAuthUnavailable,\n} from \"@yielded/auth/OAuth\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- concrete driver entry points restore table/database generics. */\nimport { eq, sql } from \"drizzle-orm\";\nimport { type Context, Effect, Layer } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport {\n  accountCurrent,\n  claimLink,\n  inspectUnlink,\n  issueLink,\n  preflightLink,\n  settleLink,\n  unlink,\n} from \"./oauth-accounts\";\nimport {\n  claimFlow,\n  cleanupFlows,\n  discoverOwned,\n  exactClaim,\n  issueFlow,\n  matchesAccess,\n  readFlow,\n  resolveOwned,\n  terminalFlow,\n} from \"./oauth-flow\";\nimport {\n  accountsInputs,\n  capturedOAuthService,\n  registrationInputs,\n  registrationIntentInputs,\n  signInInputs,\n} from \"./oauth-input\";\nimport type { OAuthRegistrationAuthority } from \"./oauth-model\";\nimport { both, col, equal, CurrentOAuthTransaction, type OAuthNativeDatabase } from \"./oauth-owner\";\nimport {\n  inspectIntent,\n  register,\n  registrationData,\n  registrationResources,\n  type RegistrationCallbacks,\n  settleRegistrationIntent,\n} from \"./oauth-registration\";\nimport { captureOAuthMapping, invariant, nonce, unavailable } from \"./oauth-state\";\nimport {\n  coordinateTransactionOwner,\n  makeTransactionExecution,\n  sqlClientTransactionStandaloneGuard,\n  type TransactionTargetConfiguration,\n  type TransactionCoordinatorError,\n  type TransactionExecution,\n} from \"./transaction-execution\";\n\nexport type OAuthTargetConfiguration = TransactionTargetConfiguration<OAuthUnavailable>;\nexport type OAuthCoordinatorError<E> = TransactionCoordinatorError<E, OAuthUnavailable>;\nexport type OAuthExecution = TransactionExecution<OAuthUnavailable, CurrentOAuthTransaction, never>;\n\nexport const sqlClientOAuthStandaloneGuard = (\n  database: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n) => sqlClientTransactionStandaloneGuard(unavailable, database);\n\nexport const makeOAuthExecution = (\n  database: OAuthNativeDatabase,\n  hooks: LifecycleHooks[\"Service\"],\n  configuration: OAuthTargetConfiguration,\n): OAuthExecution => {\n  const execution = makeTransactionExecution(\n    CurrentOAuthTransaction,\n    database,\n    configuration,\n    unavailable,\n    nonce,\n  );\n\n  return {\n    ...execution,\n    run: (operation, mutation) =>\n      execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  };\n};\n\nconst prepareValue = <Value, A>(value: Value, prepare: PrepareOAuthCommit<Value, A>) =>\n  Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n    Effect.sync(() => {\n      owner.guards.push(owner.journal.prepare(undefined));\n\n      return prepare(value, owner.journal);\n    }),\n  );\n\nexport const makeOAuthSignIn = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthSignInPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthSignInPersistence[\"Service\"]>(\n    {\n      issue: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const input = snapshotOAuthSync(OAuthPendingFlow, original);\n            const value = yield* issueFlow(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const read = yield* readFlow(mapping, input, \"sign-in\");\n\n            const claim =\n              read.row !== undefined && read.flow !== undefined && matchesAccess(read.flow, input)\n                ? yield* claimFlow(mapping, { row: read.row, flow: read.flow }, input.claimId)\n                : undefined;\n\n            return yield* prepareValue(\n              snapshotOAuthSync(\n                OAuthClaimDecision,\n                claim === undefined\n                  ? { _tag: \"Rejected\" }\n                  : { _tag: \"Claimed\", claim: claim as typeof OAuthClaim.Type },\n              ),\n              prepare,\n            );\n          }),\n        ),\n      settle: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const claim = snapshotOAuthSync(OAuthClaim, original.claim);\n            const outcome = original.outcome;\n\n            const identity =\n              outcome._tag === \"Verified\"\n                ? snapshotOAuthSync(OAuthVerifiedExternalIdentity, outcome.identity).identity\n                : undefined;\n\n            if (identity !== undefined)\n              invariant(\n                identity.provider === claim.flow.context.provider &&\n                  identity.issuer === claim.flow.context.issuer,\n              );\n\n            // Discover/lock the existing subject before locking its claimed flow.\n            const found =\n              identity === undefined ? undefined : yield* discoverOwned(mapping, identity);\n\n            const exact = yield* exactClaim(mapping, claim, \"sign-in\");\n            let value: typeof OAuthSettlementDecision.Type = { _tag: \"Rejected\" };\n\n            if (exact !== undefined) {\n              const credential =\n                identity === undefined\n                  ? undefined\n                  : resolveOwned(mapping, claim.flow.context.moduleId, identity, found);\n\n              value =\n                outcome._tag !== \"Verified\"\n                  ? { _tag: outcome._tag }\n                  : credential === undefined\n                    ? { _tag: \"Rejected\" }\n                    : { _tag: \"Verified\", credential };\n              yield* terminalFlow(mapping, claim.flow, value._tag);\n            }\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthSettlementDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* cleanupFlows(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    signInInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistrationIntents = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthRegistrationIntents[\"Service\"] =>\n  capturedOAuthService<OAuthRegistrationIntents[\"Service\"]>(\n    {\n      settle: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* settleRegistrationIntent(mapping, {\n              claim: snapshotOAuthSync(OAuthClaim, input.claim),\n              identity: snapshotOAuthSync(OAuthVerifiedExternalIdentity, input.identity),\n              ...(input.intent === undefined\n                ? {}\n                : { intent: snapshotOAuthSync(OAuthRegistrationIntent, input.intent) }),\n            });\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    registrationIntentInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistration = <Registration>(\n  mapping: any,\n  execute: OAuthExecution,\n  allocated?: Awaited<ReturnType<typeof registrationResources>> extends Effect.Effect<\n    infer A,\n    any,\n    any\n  >\n    ? A\n    : never,\n): OAuthRegistrationAuthority<Registration> =>\n  capturedOAuthService<OAuthRegistrationAuthority<Registration>>(\n    {\n      read: (input) =>\n        execute.run(\n          Effect.map(inspectIntent(mapping, input), (result) => result?.inspection),\n          false,\n        ),\n      inspect: (input) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const intent = snapshotOAuthSync(OAuthRegistrationIntent, input.intent);\n          const stored = mapping.application.encode(input.registration);\n\n          invariant(\n            typeof stored === \"string\" && new TextEncoder().encode(stored).length <= 1048576,\n          );\n          const detached = { intent, registration: mapping.application.decode(stored) };\n\n          const checked = execute.bound\n            ? (invariant(mapping.inspectSync !== undefined), mapping.inspectSync(detached))\n            : yield* (mapping as RegistrationCallbacks<Registration>).inspect(detached);\n\n          invariant(typeof checked.eligible === \"boolean\");\n\n          return {\n            fingerprint: snapshotOAuthSync(OAuthRegistrationFingerprint, checked.fingerprint),\n            eligible: checked.eligible,\n          };\n        }).pipe(\n          (effect) => (execute.bound ? execute.run(effect, false) : effect),\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      register: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const data = yield* registrationData(mapping, input, execute.bound);\n          const resources = allocated ?? (yield* registrationResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* register(mapping, input, data, resources);\n\n              return yield* prepareValue(value, prepare);\n            }),\n          );\n        }).pipe(\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      cleanup: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n\n            const input = snapshotOAuthSync(OAuthCleanupInput, original),\n              i = mapping.intent,\n              r = mapping.command;\n\n            const now = yield* owner.now(mapping.clock);\n\n            const candidates = yield* owner.read(\n              i.table,\n              both(\n                eq(col(i.table, i.moduleId), input.moduleId),\n                sql`${col(i.table, i.state)} <> 'ProvisioningPending' and ${col(i.table, i.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n              ),\n              { limit: input.limit, observe: false, takeOnly: true },\n            );\n\n            let removed = 0;\n\n            for (const candidate of candidates.rows) {\n              const selected = yield* owner.read(\n                i.table,\n                equal(i.table, {\n                  [i.moduleId]: input.moduleId,\n                  [i.reference]: candidate[i.reference],\n                }),\n                { limit: 1 },\n              );\n\n              const row = selected.rows[0];\n\n              if (row === undefined || row[i.state] === \"ProvisioningPending\") continue;\n              let horizon = mapping.clock.decodeInstant(row[i.retentionUntil]);\n\n              if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                continue;\n              if (row[i.commandId] !== null) {\n                const commands = yield* owner.read(\n                  r.table,\n                  equal(r.table, {\n                    [r.moduleId]: input.moduleId,\n                    [r.commandId]: row[i.commandId],\n                  }),\n                  { limit: 1 },\n                );\n\n                const command = commands.rows[0];\n\n                if (command === undefined) continue;\n                horizon = Math.max(horizon, mapping.clock.decodeInstant(command[r.retentionUntil]));\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, {\n                  [r.moduleId]: input.moduleId,\n                  [r.commandId]: row[i.commandId],\n                });\n              }\n              yield* owner.remove(i.table, {\n                [i.moduleId]: input.moduleId,\n                [i.reference]: row[i.reference],\n              });\n              owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n              removed++;\n            }\n\n            return yield* prepareValue(\n              { removed, hasMore: candidates.rows.length === input.limit },\n              prepare,\n            );\n          }),\n        ),\n    },\n    registrationInputs(mapping.application),\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthSignInServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthSignInPersistence: makeOAuthSignIn(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationIntentServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthRegistrationIntents: makeOAuthRegistrationIntents(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    registrationAuthority: makeOAuthRegistration<Registration>(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const coordinateOAuthOwner = <Services, Transaction, A, E, R>(\n  database: OAuthNativeDatabase,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  allocate: (mapping: any) => Effect.Effect<any, PersistenceMappingError>,\n  services: (mapping: any, execution: OAuthExecution, resources: any) => Services,\n  owner: (\n    transaction: Transaction,\n    services: Services,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, OAuthCoordinatorError<E>, R | LifecycleHooks> => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.flatMap(LifecycleHooks, (hooks) =>\n    coordinateTransactionOwner(\n      database,\n      CurrentOAuthTransaction,\n      configuration,\n      Effect.suspend(() => allocate(captured)),\n      unavailable,\n      nonce,\n      (execution, resources) =>\n        services(\n          captured,\n          {\n            ...execution,\n            run: (operation, mutation) =>\n              execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n          },\n          resources,\n        ),\n      owner,\n    ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  );\n};\n\nconst accountResources = (mapping: any) =>\n  Effect.gen(function* () {\n    return {\n      credentialId: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialId,\n        yield* mapping.allocateCredentialId as Effect.Effect<string, PersistenceMappingError>,\n      ),\n      revision: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialRevision,\n        yield* mapping.allocateRevision as Effect.Effect<SecurityRevision, PersistenceMappingError>,\n      ),\n    };\n  });\n\nexport const coordinateTargetOAuthRegistration = <Registration, Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    registrationResources,\n    (captured, execute, resources) => ({\n      registrationAuthority: makeOAuthRegistration<Registration>(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthSignIn = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({ oauthSignInPersistence: makeOAuthSignIn(captured, execute) }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthRegistrationIntents = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({\n      oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, execute),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthAccounts = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    accountResources,\n    (captured, execute, resources) => ({\n      oauthAccountsPersistence: makeOAuthAccounts(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const makeOAuthAccounts = (\n  mapping: any,\n  execute: OAuthExecution,\n  resources?: any,\n): OAuthAccountsPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthAccountsPersistence[\"Service\"]>(\n    {\n      capture: (input) =>\n        execute.run(\n          Effect.map(accountCurrent(mapping, input.subjectId), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthAccountRevision, current.revision),\n          ),\n          false,\n        ),\n      issue: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* issueLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      preflight: (input) =>\n        execute.run(\n          Effect.map(preflightLink(mapping, input), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthLinkPendingFlow, current.flow),\n          ),\n          false,\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* claimLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkClaimDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      settle: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const allocated = resources ?? (yield* accountResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* settleLink(mapping, input, allocated as never);\n\n              return yield* prepareValue(snapshotOAuthSync(OAuthLinkDecision, value), prepare);\n            }),\n          );\n        }).pipe(\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      inspectUnlink: (input) =>\n        execute.run(\n          Effect.map(inspectUnlink(mapping, input), (value) =>\n            snapshotOAuthSync(OAuthUnlinkInspection, value),\n          ),\n          false,\n        ),\n      unlink: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* unlink(mapping, input);\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthUnlinkDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n            const value = yield* cleanupFlows(mapping, input, \"link\");\n            const remaining = input.limit - value.terminalized - value.removed;\n\n            const now = yield* owner.now(mapping.clock),\n              r = mapping.command;\n\n            let removed = 0;\n\n            if (remaining > 0) {\n              const rows = yield* owner.read(\n                r.table,\n                both(\n                  eq(col(r.table, r.moduleId), input.moduleId),\n                  sql`${col(r.table, r.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n                ),\n                { limit: remaining, observe: false, takeOnly: true },\n              );\n\n              for (const row of rows.rows) {\n                const key = { [r.moduleId]: input.moduleId, [r.commandId]: row[r.commandId] };\n                const selected = yield* owner.read(r.table, equal(r.table, key), { limit: 1 });\n                const current = selected.rows[0];\n\n                if (current === undefined) continue;\n                const horizon = mapping.clock.decodeInstant(current[r.retentionUntil]);\n\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, key);\n                owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n                removed++;\n              }\n            }\n\n            return yield* prepareValue(\n              {\n                ...value,\n                removed: value.removed + removed,\n                hasMore: value.hasMore || remaining === removed,\n              },\n              prepare,\n            );\n          }),\n        ),\n    },\n    accountsInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthAccountsServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthAccountsPersistence: makeOAuthAccounts(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const oauthAccountsPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthAccountsServices>,\n) =>\n  Layer.effect(\n    OAuthAccountsPersistence,\n    Effect.map(services, (value) => value.oauthAccountsPersistence),\n  );\n\nexport const oauthSignInPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthSignInServices>,\n) =>\n  Layer.effect(\n    OAuthSignInPersistence,\n    Effect.map(services, (value) => value.oauthSignInPersistence),\n  );\n\nexport const oauthRegistrationIntentsLayer = (\n  services: ReturnType<typeof makeTargetOAuthRegistrationIntentServices>,\n) =>\n  Layer.effect(\n    OAuthRegistrationIntents,\n    Effect.map(services, (value) => value.oauthRegistrationIntents),\n  );\n\nexport const oauthRegistrationAuthorityLayer = <Id, Registration>(\n  tag: Context.Key<Id, OAuthRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;;;;;;AAoFA,MAAa,iCACX,aACG,oCAAoC,aAAa,QAAQ;AAE9D,MAAa,sBACX,UACA,OACA,kBACmB;CACnB,MAAM,YAAY,yBAChB,yBACA,UACA,eACA,aACA,KACF;CAEA,OAAO;EACL,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF;AACF;AAEA,MAAM,gBAA0B,OAAc,YAC5C,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,QAAQ,OAAO,MAAM,OAAO;AACrC,CAAC,CACH;AAEF,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,UAAU,YAChB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,kBAAkB,QAAQ;EAC1D,MAAM,QAAQ,OAAO,UAAU,SAAS,OAAO,SAAS;EAExD,OAAO,OAAO,aACZ,kBAAkB,oBAAoB,KAAc,GACpD,OACF;CACF,CAAC,CACH;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,OAAO,OAAO,SAAS,SAAS,OAAO,SAAS;EAEtD,MAAM,QACJ,KAAK,QAAQ,KAAA,KAAa,KAAK,SAAS,KAAA,KAAa,cAAc,KAAK,MAAM,KAAK,IAC/E,OAAO,UAAU,SAAS;GAAE,KAAK,KAAK;GAAK,MAAM,KAAK;EAAK,GAAG,MAAM,OAAO,IAC3E,KAAA;EAEN,OAAO,OAAO,aACZ,kBACE,oBACA,UAAU,KAAA,IACN,EAAE,MAAM,WAAW,IACnB;GAAE,MAAM;GAAkB;EAAgC,CAChE,GACA,OACF;CACF,CAAC,CACH;CACF,SAAS,UAAU,YACjB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,YAAY,SAAS,KAAK;EAC1D,MAAM,UAAU,SAAS;EAEzB,MAAM,WACJ,QAAQ,SAAS,aACb,kBAAkB,+BAA+B,QAAQ,QAAQ,CAAC,CAAC,WACnE,KAAA;EAEN,IAAI,aAAa,KAAA,GACf,UACE,SAAS,aAAa,MAAM,KAAK,QAAQ,YACvC,SAAS,WAAW,MAAM,KAAK,QAAQ,MAC3C;EAGF,MAAM,QACJ,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,cAAc,SAAS,QAAQ;EAE7E,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAS;EACzD,IAAI,QAA6C,EAAE,MAAM,WAAW;EAEpE,IAAI,UAAU,KAAA,GAAW;GACvB,MAAM,aACJ,aAAa,KAAA,IACT,KAAA,IACA,aAAa,SAAS,MAAM,KAAK,QAAQ,UAAU,UAAU,KAAK;GAExE,QACE,QAAQ,SAAS,aACb,EAAE,MAAM,QAAQ,KAAK,IACrB,eAAe,KAAA,IACb,EAAE,MAAM,WAAW,IACnB;IAAE,MAAM;IAAY;GAAW;GACvC,OAAO,aAAa,SAAS,MAAM,MAAM,MAAM,IAAI;EACrD;EAEA,OAAO,OAAO,aAAa,kBAAkB,yBAAyB,KAAK,GAAG,OAAO;CACvF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,SAAS;EAE3D,OAAO,OAAO,aAAa,OAAO,OAAO;CAC3C,CAAC,CACH;AACJ,GACA,cACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,gCACX,SACA,YAEA,qBACE,EACE,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,yBAAyB,SAAS;EACrD,OAAO,kBAAkB,YAAY,MAAM,KAAK;EAChD,UAAU,kBAAkB,+BAA+B,MAAM,QAAQ;EACzE,GAAI,MAAM,WAAW,KAAA,IACjB,CAAC,IACD,EAAE,QAAQ,kBAAkB,yBAAyB,MAAM,MAAM,EAAE;CACzE,CAAC;CAED,OAAO,OAAO,aAAa,OAAO,OAAO;AAC3C,CAAC,CACH,EACJ,GACA,0BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,yBACX,SACA,SACA,cAQA,qBACE;CACE,OAAO,UACL,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,WAAW,QAAQ,UAAU,GACxE,KACF;CACF,UAAU,UACR,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,SAAS,kBAAkB,yBAAyB,MAAM,MAAM;EACtE,MAAM,SAAS,QAAQ,YAAY,OAAO,MAAM,YAAY;EAE5D,UACE,OAAO,WAAW,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU,OAC3E;EACA,MAAM,WAAW;GAAE;GAAQ,cAAc,QAAQ,YAAY,OAAO,MAAM;EAAE;EAE5E,MAAM,UAAU,QAAQ,SACnB,UAAU,QAAQ,gBAAgB,KAAA,CAAS,GAAG,QAAQ,YAAY,QAAQ,KAC3E,OAAQ,QAAgD,QAAQ,QAAQ;EAE5E,UAAU,OAAO,QAAQ,aAAa,SAAS;EAE/C,OAAO;GACL,aAAa,kBAAkB,8BAA8B,QAAQ,WAAW;GAChF,UAAU,QAAQ;EACpB;CACF,CAAC,CAAC,CAAC,MACA,WAAY,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,KAAK,IAAI,QAC1D,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,WAAW,OAAO,YAChB,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,OAAO,OAAO,iBAAiB,SAAS,OAAO,QAAQ,KAAK;EAClE,MAAM,YAAY,cAAc,OAAO,sBAAsB,OAAO;EAEpE,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,SAAS,SAAS,OAAO,MAAM,SAAS;GAE7D,OAAO,OAAO,aAAa,OAAO,OAAO;EAC3C,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,UAAU,UAAU,YAClB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,MAAM,QAAQ,kBAAkB,mBAAmB,QAAQ,GACzD,IAAI,QAAQ,QACZ,IAAI,QAAQ;EAEd,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK;EAE1C,MAAM,aAAa,OAAO,MAAM,KAC9B,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GACjI,GACA;GAAE,OAAO,MAAM;GAAO,SAAS;GAAO,UAAU;EAAK,CACvD;EAEA,IAAI,UAAU;EAEd,KAAK,MAAM,aAAa,WAAW,MAAM;GAUvC,MAAM,OAAM,OATY,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;KACZ,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,UAAU,EAAE;GAC7B,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEqB,KAAK;GAE1B,IAAI,QAAQ,KAAA,KAAa,IAAI,EAAE,WAAW,uBAAuB;GACjE,IAAI,UAAU,QAAQ,MAAM,cAAc,IAAI,EAAE,eAAe;GAE/D,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;GACF,IAAI,IAAI,EAAE,eAAe,MAAM;IAU7B,MAAM,WAAU,OATQ,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;MACZ,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEyB,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,UAAU,KAAK,IAAI,SAAS,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe,CAAC;IAClF,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO;MAC1B,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC;GACH;GACA,OAAO,MAAM,OAAO,EAAE,OAAO;KAC1B,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,IAAI,EAAE;GACvB,CAAC;GACD,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;GAC5E;EACF;EAEA,OAAO,OAAO,aACZ;GAAE;GAAS,SAAS,WAAW,KAAK,WAAW,MAAM;EAAM,GAC3D,OACF;CACF,CAAC,CACH;AACJ,GACA,mBAAmB,QAAQ,WAAW,GACtC,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,iCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,wBAAwB,gBACtB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,6CACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,0BAA0B,6BACxB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,uCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,uBAAuB,sBACrB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,wBACX,UACA,SACA,eACA,UACA,UACA,UAKmE;CACnE,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,QAAQ,iBAAiB,UACrC,2BACE,UACA,yBACA,eACA,OAAO,cAAc,SAAS,QAAQ,CAAC,GACvC,aACA,QACC,WAAW,cACV,SACE,UACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF,GACA,SACF,GACF,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD;AACF;AAEA,MAAM,oBAAoB,YACxB,OAAO,IAAI,aAAa;CACtB,OAAO;EACL,cAAc,kBACZ,wBAAwB,OAAO,cAC/B,OAAO,QAAQ,oBACjB;EACA,UAAU,kBACR,wBAAwB,OAAO,oBAC/B,OAAO,QAAQ,gBACjB;CACF;AACF,CAAC;AAEH,MAAa,qCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,wBACC,UAAU,SAAS,eAAe,EACjC,uBAAuB,sBAAoC,UAAU,SAAS,SAAS,EACzF,IACA,KACF;AAEF,MAAa,+BACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EAAE,wBAAwB,gBAAgB,UAAU,OAAO,EAAE,IACrF,KACF;AAEF,MAAa,4CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EACtB,0BAA0B,6BAA6B,UAAU,OAAO,EAC1E,IACA,KACF;AAEF,MAAa,iCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,mBACC,UAAU,SAAS,eAAe,EACjC,0BAA0B,kBAAkB,UAAU,SAAS,SAAS,EAC1E,IACA,KACF;AAEF,MAAa,qBACX,SACA,SACA,cAEA,qBACE;CACE,UAAU,UACR,QAAQ,IACN,OAAO,IAAI,eAAe,SAAS,MAAM,SAAS,IAAI,YACpD,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,QAAQ,CAC9D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,YAAY,UACV,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,YACzC,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,IAAI,CAC1D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,SAAS,OAAO,YACd,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,YAAY,cAAc,OAAO,iBAAiB,OAAO;EAE/D,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAkB;GAElE,OAAO,OAAO,aAAa,kBAAkB,mBAAmB,KAAK,GAAG,OAAO;EACjF,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,gBAAgB,UACd,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,UACzC,kBAAkB,uBAAuB,KAAK,CAChD,GACA,KACF;CACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,OAAO,SAAS,KAAK;EAE1C,OAAO,OAAO,aAAa,kBAAkB,qBAAqB,KAAK,GAAG,OAAO;CACnF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,MAAM;EACxD,MAAM,YAAY,MAAM,QAAQ,MAAM,eAAe,MAAM;EAE3D,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,GACxC,IAAI,QAAQ;EAEd,IAAI,UAAU;EAEd,IAAI,YAAY,GAAG;GACjB,MAAM,OAAO,OAAO,MAAM,KACxB,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GAC3E,GACA;IAAE,OAAO;IAAW,SAAS;IAAO,UAAU;GAAK,CACrD;GAEA,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,MAAM,MAAM;MAAG,EAAE,WAAW,MAAM;MAAW,EAAE,YAAY,IAAI,EAAE;IAAW;IAE5E,MAAM,WAAU,OADQ,MAAM,KAAK,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAA,CACpD,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,MAAM,UAAU,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe;IAErE,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO,GAAG;IAChC,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;IAC5E;GACF;EACF;EAEA,OAAO,OAAO,aACZ;GACE,GAAG;GACH,SAAS,MAAM,UAAU;GACzB,SAAS,MAAM,WAAW,cAAc;EAC1C,GACA,OACF;CACF,CAAC,CACH;AACJ,GACA,gBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,mCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,0BAA0B,kBACxB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,+BACX,aAEA,MAAM,OACJ,wBACA,OAAO,IAAI,WAAW,UAAU,MAAM,sBAAsB,CAC9D;AAEF,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,mCACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/passkey-write-target.d.mts

@@ -1,5 +1,5 @@
 //#region src/drizzle/passkey-write-target.d.ts
-declare const passkeyManagementPersistenceLayer: <E, R>(services: import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, E, R>) => import("effect/Layer").Layer<import("@yielded/auth/Passkey").PasskeyManagementPersistence, E, Exclude<R, import("effect/Scope").Scope>>, makeTargetPasskeyManagement: <M, RSetup>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, makeTargetPasskeyRegistrationWriter: <M, R, RSetup>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<R>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateTargetPasskeyManagement: <M, RSetup, Transaction, A, E, R>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration, body: (transaction: Transaction, services: import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, append: (statement: import("effect/unstable/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateTargetPasskeyRegistrationWriter: <M, Value, RSetup, Transaction, A, E, R>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration, body: (transaction: Transaction, services: import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, append: (statement: import("effect/unstable/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
+declare const passkeyManagementPersistenceLayer: <E, R>(services: import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, E, R>) => import("effect/Layer").Layer<import("@yielded/auth/Passkey").PasskeyManagementPersistence, E, Exclude<R, import("effect/Scope").Scope>>, makeTargetPasskeyManagement: <M, RSetup>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, makeTargetPasskeyRegistrationWriter: <M, R, RSetup>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<R>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateTargetPasskeyManagement: <M, RSetup, Transaction, A, E, R>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration, body: (transaction: Transaction, services: import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, append: (statement: import("effect/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateTargetPasskeyRegistrationWriter: <M, Value, RSetup, Transaction, A, E, R>(database: any, source: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<M, RSetup>, configuration: import("@yielded/auth-persistence/Adapter").PasskeyTargetConfiguration, body: (transaction: Transaction, services: import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, append: (statement: import("effect/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
 //#endregion
 export { passkeyManagementPersistenceLayer };
 //# sourceMappingURL=passkey-write-target.d.mts.map

package/dist/drizzle/password-prepared-state.mjs

@@ -1,9 +1,9 @@
 import { passwordSqlKernel } from "./password-sql.mjs";
-import { SubjectId, TokenDigest } from "@yielded/auth/Schema";
 import { DateTime, Effect, Redacted, Schema } from "effect";
 import { AuthenticationProof, AuthenticationRequirement, SessionInvalidationWindow } from "@yielded/auth/Sessions";
 import { ProofBinding, ProofContinuationId, ProofPurpose } from "@yielded/auth/Proofs";
 import { PasswordAction, PasswordCommandId, PasswordCredentialSnapshot, PasswordPreparedConfiguration, PasswordPreparedIntentId, PasswordPreparedRequirement, PasswordPreparedReservation, PasswordPreparedReset, PasswordUnavailable, encodePasswordPreparedReady, snapshotPasswordPreparedReady, snapshotPasswordPreparedReservation } from "@yielded/auth/Password";
+import { SubjectId, TokenDigest } from "@yielded/auth/Schema";
 //#region src/drizzle/password-prepared-state.ts
 const unavailable = () => PasswordUnavailable.make({});
 const Instant = Schema.Int.check(Schema.isBetween({

package/dist/drizzle/password-prepared-target.d.mts

@@ -2,7 +2,7 @@ import "./password-target.mjs";
 import { Context, Effect, Layer } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
 import { PasswordPreparedPersistence } from "@yielded/auth/Password";
-import "effect/unstable/sql/SqlError";
+import "effect/sql/SqlError";
 //#region src/drizzle/password-prepared-target.d.ts
 export declare const passwordPreparedPersistenceLayer: <Id>(tag: Context.Key<Id, PasswordPreparedPersistence>, services: Effect.Effect<{
   readonly passwordPreparedPersistence: PasswordPreparedPersistence;

package/dist/drizzle/password-prepared-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"password-prepared-target.mjs","names":[],"sources":["../../src/drizzle/password-prepared-target.ts"],"sourcesContent":["import {\n  CurrentPasswordPreparedTransaction,\n  PasswordPreparedPostconditions,\n  PasswordPreparedJournalGuards,\n  type PasswordPreparedPostcondition,\n} from \"@yielded/auth-persistence/Adapter\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n} from \"@yielded/auth/Hooks\";\nimport { PasswordUnavailable, type PasswordPreparedPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- concrete driver modules restore native table/database types. */\nimport { type Context, Cause, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\n\nimport { makeSqlPasswordPreparedPersistence } from \"./password-prepared-sql\";\nimport type { PasswordSqlDatabase } from \"./password-sql\";\nimport {\n  passwordOptions,\n  type PasswordTargetConfiguration,\n  type PasswordCoordinatorError,\n} from \"./password-target\";\n\nexport const makeTargetPasswordPreparedPersistenceServices = (\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n) =>\n  Effect.gen(function* () {\n    return {\n      passwordPreparedPersistence: yield* makeSqlPasswordPreparedPersistence(\n        database,\n        mapping,\n        passwordOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const coordinateTargetPasswordPreparedPersistence = <Transaction, A, E, R>(\n  database: {\n    readonly transaction: <Out, Err, Env>(\n      body: (transaction: Transaction) => Effect.Effect<Out, Err, Env>,\n    ) => Effect.Effect<Out, Err | SqlError.SqlError, Env>;\n  },\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: any | undefined,\n  owner: (\n    transaction: Transaction,\n    services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* () {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            const guards: Array<PreparedCommit<void>> = [];\n            const postconditions: Array<PasswordPreparedPostcondition> = [];\n            let poisoned = false;\n            let acceptingPostconditions = true;\n\n            const services = yield* makeSqlPasswordPreparedPersistence(\n              transaction as unknown as PasswordSqlDatabase,\n              mapping,\n              passwordOptions(configuration, proofMapping, true),\n            );\n\n            const protect = <Out, Err, Env>(effect: Effect.Effect<Out, Err, Env>) =>\n              effect.pipe(\n                Effect.onError(() =>\n                  Effect.sync(() => {\n                    poisoned = true;\n                  }),\n                ),\n              );\n\n            const value = yield* owner(transaction, {\n              passwordPreparedPersistence: {\n                reserve: (input, prepare) => protect(services.reserve(input, prepare)),\n                publishReady: (input, prepare) => protect(services.publishReady(input, prepare)),\n                context: (input) => protect(services.context(input)),\n                complete: (input, prepare) => protect(services.complete(input, prepare)),\n                resetWithProof: (input, prepare) =>\n                  protect(services.resetWithProof(input, prepare)),\n                cancel: (input, prepare) => protect(services.cancel(input, prepare)),\n                cleanup: (input, prepare) => protect(services.cleanup(input, prepare)),\n              },\n            }).pipe(\n              Effect.provideService(PasswordPreparedJournalGuards, {\n                register: (guard) => {\n                  if (!acceptingPostconditions) return false;\n                  guards.push(guard);\n\n                  return true;\n                },\n              }),\n              Effect.provideService(PasswordPreparedPostconditions, {\n                register: (check) => {\n                  if (!acceptingPostconditions) return false;\n                  postconditions.push(check);\n\n                  return true;\n                },\n              }),\n              Effect.ensuring(\n                Effect.sync(() => {\n                  acceptingPostconditions = false;\n                }),\n              ),\n            );\n\n            if (poisoned) return yield* PasswordUnavailable.make({});\n            for (const guard of guards) {\n              const status = yield* Effect.result(guard.read);\n\n              if (status._tag === \"Success\" || status.failure._tag !== \"CommitPending\")\n                return yield* PasswordUnavailable.make({});\n            }\n\n            for (const check of postconditions)\n              yield* check.pipe(\n                Effect.provideService(\n                  CurrentPasswordPreparedTransaction,\n                  transaction as unknown as PasswordSqlDatabase,\n                ),\n                Effect.catchCause((cause) =>\n                  Effect.failCause(Cause.map(cause, () => PasswordUnavailable.make({}))),\n                ),\n              );\n\n            return value;\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const passwordPreparedPersistenceLayer = <Id>(\n  tag: Context.Key<Id, PasswordPreparedPersistence>,\n  services: Effect.Effect<\n    { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.passwordPreparedPersistence),\n  );\n"],"mappings":";;;;;;;AAyBA,MAAa,iDACX,UACA,SACA,eACA,iBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,6BAA6B,OAAO,mCAClC,UACA,SACA,gBAAgB,eAAe,YAAY,CAC7C,EACF;AACF,CAAC;AAEH,MAAa,+CACX,UAKA,SACA,eACA,cACA,UAKA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAsFvD,QAAO,OApFe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,MAAM,SAAsC,CAAC;EAC7C,MAAM,iBAAuD,CAAC;EAC9D,IAAI,WAAW;EACf,IAAI,0BAA0B;EAE9B,MAAM,WAAW,OAAO,mCACtB,aACA,SACA,gBAAgB,eAAe,cAAc,IAAI,CACnD;EAEA,MAAM,WAA0B,WAC9B,OAAO,KACL,OAAO,cACL,OAAO,WAAW;GAChB,WAAW;EACb,CAAC,CACH,CACF;EAEF,MAAM,QAAQ,OAAO,MAAM,aAAa,EACtC,6BAA6B;GAC3B,UAAU,OAAO,YAAY,QAAQ,SAAS,QAAQ,OAAO,OAAO,CAAC;GACrE,eAAe,OAAO,YAAY,QAAQ,SAAS,aAAa,OAAO,OAAO,CAAC;GAC/E,UAAU,UAAU,QAAQ,SAAS,QAAQ,KAAK,CAAC;GACnD,WAAW,OAAO,YAAY,QAAQ,SAAS,SAAS,OAAO,OAAO,CAAC;GACvE,iBAAiB,OAAO,YACtB,QAAQ,SAAS,eAAe,OAAO,OAAO,CAAC;GACjD,SAAS,OAAO,YAAY,QAAQ,SAAS,OAAO,OAAO,OAAO,CAAC;GACnE,UAAU,OAAO,YAAY,QAAQ,SAAS,QAAQ,OAAO,OAAO,CAAC;EACvE,EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,+BAA+B,EACnD,WAAW,UAAU;GACnB,IAAI,CAAC,yBAAyB,OAAO;GACrC,OAAO,KAAK,KAAK;GAEjB,OAAO;EACT,EACF,CAAC,GACD,OAAO,eAAe,gCAAgC,EACpD,WAAW,UAAU;GACnB,IAAI,CAAC,yBAAyB,OAAO;GACrC,eAAe,KAAK,KAAK;GAEzB,OAAO;EACT,EACF,CAAC,GACD,OAAO,SACL,OAAO,WAAW;GAChB,0BAA0B;EAC5B,CAAC,CACH,CACF;EAEA,IAAI,UAAU,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;EACvD,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,IAAI;GAE9C,IAAI,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,iBACvD,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;EAC7C;EAEA,KAAK,MAAM,SAAS,gBAClB,OAAO,MAAM,KACX,OAAO,eACL,oCACA,WACF,GACA,OAAO,YAAY,UACjB,OAAO,UAAU,MAAM,IAAI,aAAa,oBAAoB,KAAK,CAAC,CAAC,CAAC,CAAC,CACvE,CACF;EAEF,OAAO;CACT,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,oCACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,2BAA2B,CACnE"}
+{"version":3,"file":"password-prepared-target.mjs","names":[],"sources":["../../src/drizzle/password-prepared-target.ts"],"sourcesContent":["import {\n  CurrentPasswordPreparedTransaction,\n  PasswordPreparedPostconditions,\n  PasswordPreparedJournalGuards,\n  type PasswordPreparedPostcondition,\n} from \"@yielded/auth-persistence/Adapter\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n} from \"@yielded/auth/Hooks\";\nimport { PasswordUnavailable, type PasswordPreparedPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- concrete driver modules restore native table/database types. */\nimport { type Context, Cause, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport { makeSqlPasswordPreparedPersistence } from \"./password-prepared-sql\";\nimport type { PasswordSqlDatabase } from \"./password-sql\";\nimport {\n  passwordOptions,\n  type PasswordTargetConfiguration,\n  type PasswordCoordinatorError,\n} from \"./password-target\";\n\nexport const makeTargetPasswordPreparedPersistenceServices = (\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n) =>\n  Effect.gen(function* () {\n    return {\n      passwordPreparedPersistence: yield* makeSqlPasswordPreparedPersistence(\n        database,\n        mapping,\n        passwordOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const coordinateTargetPasswordPreparedPersistence = <Transaction, A, E, R>(\n  database: {\n    readonly transaction: <Out, Err, Env>(\n      body: (transaction: Transaction) => Effect.Effect<Out, Err, Env>,\n    ) => Effect.Effect<Out, Err | SqlError.SqlError, Env>;\n  },\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: any | undefined,\n  owner: (\n    transaction: Transaction,\n    services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* () {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            const guards: Array<PreparedCommit<void>> = [];\n            const postconditions: Array<PasswordPreparedPostcondition> = [];\n            let poisoned = false;\n            let acceptingPostconditions = true;\n\n            const services = yield* makeSqlPasswordPreparedPersistence(\n              transaction as unknown as PasswordSqlDatabase,\n              mapping,\n              passwordOptions(configuration, proofMapping, true),\n            );\n\n            const protect = <Out, Err, Env>(effect: Effect.Effect<Out, Err, Env>) =>\n              effect.pipe(\n                Effect.onError(() =>\n                  Effect.sync(() => {\n                    poisoned = true;\n                  }),\n                ),\n              );\n\n            const value = yield* owner(transaction, {\n              passwordPreparedPersistence: {\n                reserve: (input, prepare) => protect(services.reserve(input, prepare)),\n                publishReady: (input, prepare) => protect(services.publishReady(input, prepare)),\n                context: (input) => protect(services.context(input)),\n                complete: (input, prepare) => protect(services.complete(input, prepare)),\n                resetWithProof: (input, prepare) =>\n                  protect(services.resetWithProof(input, prepare)),\n                cancel: (input, prepare) => protect(services.cancel(input, prepare)),\n                cleanup: (input, prepare) => protect(services.cleanup(input, prepare)),\n              },\n            }).pipe(\n              Effect.provideService(PasswordPreparedJournalGuards, {\n                register: (guard) => {\n                  if (!acceptingPostconditions) return false;\n                  guards.push(guard);\n\n                  return true;\n                },\n              }),\n              Effect.provideService(PasswordPreparedPostconditions, {\n                register: (check) => {\n                  if (!acceptingPostconditions) return false;\n                  postconditions.push(check);\n\n                  return true;\n                },\n              }),\n              Effect.ensuring(\n                Effect.sync(() => {\n                  acceptingPostconditions = false;\n                }),\n              ),\n            );\n\n            if (poisoned) return yield* PasswordUnavailable.make({});\n            for (const guard of guards) {\n              const status = yield* Effect.result(guard.read);\n\n              if (status._tag === \"Success\" || status.failure._tag !== \"CommitPending\")\n                return yield* PasswordUnavailable.make({});\n            }\n\n            for (const check of postconditions)\n              yield* check.pipe(\n                Effect.provideService(\n                  CurrentPasswordPreparedTransaction,\n                  transaction as unknown as PasswordSqlDatabase,\n                ),\n                Effect.catchCause((cause) =>\n                  Effect.failCause(Cause.map(cause, () => PasswordUnavailable.make({}))),\n                ),\n              );\n\n            return value;\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const passwordPreparedPersistenceLayer = <Id>(\n  tag: Context.Key<Id, PasswordPreparedPersistence>,\n  services: Effect.Effect<\n    { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.passwordPreparedPersistence),\n  );\n"],"mappings":";;;;;;;AAyBA,MAAa,iDACX,UACA,SACA,eACA,iBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,6BAA6B,OAAO,mCAClC,UACA,SACA,gBAAgB,eAAe,YAAY,CAC7C,EACF;AACF,CAAC;AAEH,MAAa,+CACX,UAKA,SACA,eACA,cACA,UAKA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAsFvD,QAAO,OApFe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,MAAM,SAAsC,CAAC;EAC7C,MAAM,iBAAuD,CAAC;EAC9D,IAAI,WAAW;EACf,IAAI,0BAA0B;EAE9B,MAAM,WAAW,OAAO,mCACtB,aACA,SACA,gBAAgB,eAAe,cAAc,IAAI,CACnD;EAEA,MAAM,WAA0B,WAC9B,OAAO,KACL,OAAO,cACL,OAAO,WAAW;GAChB,WAAW;EACb,CAAC,CACH,CACF;EAEF,MAAM,QAAQ,OAAO,MAAM,aAAa,EACtC,6BAA6B;GAC3B,UAAU,OAAO,YAAY,QAAQ,SAAS,QAAQ,OAAO,OAAO,CAAC;GACrE,eAAe,OAAO,YAAY,QAAQ,SAAS,aAAa,OAAO,OAAO,CAAC;GAC/E,UAAU,UAAU,QAAQ,SAAS,QAAQ,KAAK,CAAC;GACnD,WAAW,OAAO,YAAY,QAAQ,SAAS,SAAS,OAAO,OAAO,CAAC;GACvE,iBAAiB,OAAO,YACtB,QAAQ,SAAS,eAAe,OAAO,OAAO,CAAC;GACjD,SAAS,OAAO,YAAY,QAAQ,SAAS,OAAO,OAAO,OAAO,CAAC;GACnE,UAAU,OAAO,YAAY,QAAQ,SAAS,QAAQ,OAAO,OAAO,CAAC;EACvE,EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,+BAA+B,EACnD,WAAW,UAAU;GACnB,IAAI,CAAC,yBAAyB,OAAO;GACrC,OAAO,KAAK,KAAK;GAEjB,OAAO;EACT,EACF,CAAC,GACD,OAAO,eAAe,gCAAgC,EACpD,WAAW,UAAU;GACnB,IAAI,CAAC,yBAAyB,OAAO;GACrC,eAAe,KAAK,KAAK;GAEzB,OAAO;EACT,EACF,CAAC,GACD,OAAO,SACL,OAAO,WAAW;GAChB,0BAA0B;EAC5B,CAAC,CACH,CACF;EAEA,IAAI,UAAU,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;EACvD,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,IAAI;GAE9C,IAAI,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,iBACvD,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;EAC7C;EAEA,KAAK,MAAM,SAAS,gBAClB,OAAO,MAAM,KACX,OAAO,eACL,oCACA,WACF,GACA,OAAO,YAAY,UACjB,OAAO,UAAU,MAAM,IAAI,aAAa,oBAAoB,KAAK,CAAC,CAAC,CAAC,CAAC,CACvE,CACF;EAEF,OAAO;CACT,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,oCACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,2BAA2B,CACnE"}

package/dist/drizzle/password-target.d.mts

@@ -4,7 +4,7 @@ import { PasswordRegistrationAuthority } from "./password-registration.mjs";
 import { Context, Effect, Layer } from "effect";
 import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
 import { PasswordPersistence, PasswordUnavailable } from "@yielded/auth/Password";
-import "effect/unstable/sql/SqlError";
+import "effect/sql/SqlError";
 //#region src/drizzle/password-target.d.ts
 export declare const passwordPersistenceLayer: (services: Effect.Effect<{
   readonly passwordPersistence: PasswordPersistence["Service"];

package/dist/drizzle/password-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"password-target.mjs","names":[],"sources":["../../src/drizzle/password-target.ts"],"sourcesContent":["import {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport { PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\n\nimport {\n  makeSqlPasswordRegistrationAuthority,\n  type PasswordRegistrationAuthority,\n  type PasswordRegistrationConfiguration,\n} from \"./password-registration\";\nimport {\n  makeSqlPasswordPersistence,\n  type PasswordSqlConfiguration,\n  type PasswordSqlDatabase,\n  type PasswordSqlQuery,\n} from \"./password-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard } from \"./standalone-guard\";\n\nexport interface PasswordTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, PasswordUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, PasswordUnavailable>;\n  readonly insertIfAbsent: (\n    query: PasswordSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => PasswordSqlQuery;\n  readonly generatedSubjectRows: (query: PasswordSqlQuery) => PasswordSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type PasswordCoordinatorError<E> =\n  | E\n  | PasswordUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientPasswordStandaloneGuard = (\n  database: unknown,\n): Effect.Effect<void, PasswordUnavailable> =>\n  sqlClientStandaloneGuard(database, () => PasswordUnavailable.make({}));\n\nexport const passwordOptions = (\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n  coordinated = false,\n): PasswordSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  insertIfAbsent: configuration.insertIfAbsent,\n  coordinated,\n  ...(proofMapping === undefined\n    ? {}\n    : {\n        proof: {\n          mapping: proofMapping,\n          configuration: {\n            mode: configuration.proof.mode,\n            locking: configuration.proof.locking,\n\n            standaloneGuard: Effect.void,\n\n            coordinated,\n            insertIfAbsent: configuration.proof.insertIfAbsent,\n          },\n        },\n      }),\n});\n\nconst registrationOptions = (\n  configuration: PasswordTargetConfiguration,\n  coordinated = false,\n): PasswordRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n});\n\nexport const makeTargetPasswordPersistenceServices = (\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n) =>\n  Effect.gen(function* () {\n    return {\n      passwordPersistence: yield* makeSqlPasswordPersistence(\n        database,\n        mapping,\n        passwordOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetPasswordRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n        database,\n        mapping,\n        registrationOptions(configuration),\n      ),\n    };\n  });\n\n/** Native transaction acquisition exposes SqlError; caller errors propagate unchanged. */\nexport const coordinateTargetPasswordPersistence = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: any | undefined,\n  owner: (\n    transaction: Transaction,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, PasswordCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              passwordPersistence: yield* makeSqlPasswordPersistence(\n                transaction as unknown as PasswordSqlDatabase,\n                mapping,\n                passwordOptions(configuration, proofMapping, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetPasswordRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: {\n      readonly registrationAuthority: PasswordRegistrationAuthority<Registration>;\n    },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, PasswordCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n                transaction as unknown as PasswordSqlDatabase,\n                mapping,\n                registrationOptions(configuration, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const passwordPersistenceLayer = (\n  services: Effect.Effect<\n    { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    PasswordPersistence,\n    Effect.map(services, (value) => value.passwordPersistence),\n  );\n\nexport const passwordRegistrationLayer = <Id, Registration>(\n  tag: Context.Key<Id, PasswordRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;AAmDA,MAAa,oCACX,aAEA,yBAAyB,gBAAgB,oBAAoB,KAAK,CAAC,CAAC,CAAC;AAEvE,MAAa,mBACX,eACA,cACA,cAAc,WACgB;CAC9B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,gBAAgB,cAAc;CAC9B;CACA,GAAI,iBAAiB,KAAA,IACjB,CAAC,IACD,EACE,OAAO;EACL,SAAS;EACT,eAAe;GACb,MAAM,cAAc,MAAM;GAC1B,SAAS,cAAc,MAAM;GAE7B,iBAAiB,OAAO;GAExB;GACA,gBAAgB,cAAc,MAAM;EACtC;CACF,EACF;AACN;AAEA,MAAM,uBACJ,eACA,cAAc,WACyB;CACvC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;AACF;AAEA,MAAa,yCACX,UACA,SACA,eACA,iBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,qBAAqB,OAAO,2BAC1B,UACA,SACA,gBAAgB,eAAe,YAAY,CAC7C,EACF;AACF,CAAC;AAEH,MAAa,0CACX,UACA,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,qCAC5B,UACA,SACA,oBAAoB,aAAa,CACnC,EACF;AACF,CAAC;;AAGH,MAAa,uCACX,UACA,SACA,eACA,cACA,UAKA,OAAO,IAAI,aAAmF;CAC5F,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,qBAAqB,OAAO,2BAC1B,aACA,SACA,gBAAgB,eAAe,cAAc,IAAI,CACnD,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,wCACX,UACA,SACA,eACA,UAOA,OAAO,IAAI,aAAmF;CAC5F,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,qCAC5B,aACA,SACA,oBAAoB,eAAe,IAAI,CACzC,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,4BACX,aAMA,MAAM,OACJ,qBACA,OAAO,IAAI,WAAW,UAAU,MAAM,mBAAmB,CAC3D;AAEF,MAAa,6BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}
+{"version":3,"file":"password-target.mjs","names":[],"sources":["../../src/drizzle/password-target.ts"],"sourcesContent":["import {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport { PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport {\n  makeSqlPasswordRegistrationAuthority,\n  type PasswordRegistrationAuthority,\n  type PasswordRegistrationConfiguration,\n} from \"./password-registration\";\nimport {\n  makeSqlPasswordPersistence,\n  type PasswordSqlConfiguration,\n  type PasswordSqlDatabase,\n  type PasswordSqlQuery,\n} from \"./password-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard } from \"./standalone-guard\";\n\nexport interface PasswordTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, PasswordUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, PasswordUnavailable>;\n  readonly insertIfAbsent: (\n    query: PasswordSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => PasswordSqlQuery;\n  readonly generatedSubjectRows: (query: PasswordSqlQuery) => PasswordSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type PasswordCoordinatorError<E> =\n  | E\n  | PasswordUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientPasswordStandaloneGuard = (\n  database: unknown,\n): Effect.Effect<void, PasswordUnavailable> =>\n  sqlClientStandaloneGuard(database, () => PasswordUnavailable.make({}));\n\nexport const passwordOptions = (\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n  coordinated = false,\n): PasswordSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  insertIfAbsent: configuration.insertIfAbsent,\n  coordinated,\n  ...(proofMapping === undefined\n    ? {}\n    : {\n        proof: {\n          mapping: proofMapping,\n          configuration: {\n            mode: configuration.proof.mode,\n            locking: configuration.proof.locking,\n\n            standaloneGuard: Effect.void,\n\n            coordinated,\n            insertIfAbsent: configuration.proof.insertIfAbsent,\n          },\n        },\n      }),\n});\n\nconst registrationOptions = (\n  configuration: PasswordTargetConfiguration,\n  coordinated = false,\n): PasswordRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n});\n\nexport const makeTargetPasswordPersistenceServices = (\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n) =>\n  Effect.gen(function* () {\n    return {\n      passwordPersistence: yield* makeSqlPasswordPersistence(\n        database,\n        mapping,\n        passwordOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetPasswordRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n        database,\n        mapping,\n        registrationOptions(configuration),\n      ),\n    };\n  });\n\n/** Native transaction acquisition exposes SqlError; caller errors propagate unchanged. */\nexport const coordinateTargetPasswordPersistence = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: any | undefined,\n  owner: (\n    transaction: Transaction,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, PasswordCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              passwordPersistence: yield* makeSqlPasswordPersistence(\n                transaction as unknown as PasswordSqlDatabase,\n                mapping,\n                passwordOptions(configuration, proofMapping, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetPasswordRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: {\n      readonly registrationAuthority: PasswordRegistrationAuthority<Registration>;\n    },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, PasswordCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n                transaction as unknown as PasswordSqlDatabase,\n                mapping,\n                registrationOptions(configuration, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const passwordPersistenceLayer = (\n  services: Effect.Effect<\n    { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    PasswordPersistence,\n    Effect.map(services, (value) => value.passwordPersistence),\n  );\n\nexport const passwordRegistrationLayer = <Id, Registration>(\n  tag: Context.Key<Id, PasswordRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;AAmDA,MAAa,oCACX,aAEA,yBAAyB,gBAAgB,oBAAoB,KAAK,CAAC,CAAC,CAAC;AAEvE,MAAa,mBACX,eACA,cACA,cAAc,WACgB;CAC9B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,gBAAgB,cAAc;CAC9B;CACA,GAAI,iBAAiB,KAAA,IACjB,CAAC,IACD,EACE,OAAO;EACL,SAAS;EACT,eAAe;GACb,MAAM,cAAc,MAAM;GAC1B,SAAS,cAAc,MAAM;GAE7B,iBAAiB,OAAO;GAExB;GACA,gBAAgB,cAAc,MAAM;EACtC;CACF,EACF;AACN;AAEA,MAAM,uBACJ,eACA,cAAc,WACyB;CACvC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;AACF;AAEA,MAAa,yCACX,UACA,SACA,eACA,iBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,qBAAqB,OAAO,2BAC1B,UACA,SACA,gBAAgB,eAAe,YAAY,CAC7C,EACF;AACF,CAAC;AAEH,MAAa,0CACX,UACA,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,qCAC5B,UACA,SACA,oBAAoB,aAAa,CACnC,EACF;AACF,CAAC;;AAGH,MAAa,uCACX,UACA,SACA,eACA,cACA,UAKA,OAAO,IAAI,aAAmF;CAC5F,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,qBAAqB,OAAO,2BAC1B,aACA,SACA,gBAAgB,eAAe,cAAc,IAAI,CACnD,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,wCACX,UACA,SACA,eACA,UAOA,OAAO,IAAI,aAAmF;CAC5F,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,qCAC5B,aACA,SACA,oBAAoB,eAAe,IAAI,CACzC,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,4BACX,aAMA,MAAM,OACJ,qBACA,OAAO,IAAI,WAAW,UAAU,MAAM,mBAAmB,CAC3D;AAEF,MAAa,6BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/pg-emails.d.mts

@@ -9,7 +9,7 @@ import { EmailAddressPersistence, EmailUnavailable } from "@yielded/auth/Email";
 import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
 import { AnyPgTable } from "drizzle-orm/pg-core";
 import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
-import { SqlError } from "effect/unstable/sql/SqlError";
+import { SqlError } from "effect/sql/SqlError";
 //#region src/drizzle/pg-emails.d.ts
 type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];

package/dist/drizzle/pg-emails.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pg-emails.mjs","names":[],"sources":["../../src/drizzle/pg-emails.ts"],"sourcesContent":["import { EmailAddressPersistence, type EmailUnavailable } from \"@yielded/auth/Email\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport type {\n  EmailAddressMapping,\n  EmailRegistrationMapping,\n  EmailSignInMapping,\n} from \"./email-model\";\nimport type { EmailRegistrationAuthority } from \"./email-registration\";\nimport type { EmailSqlQuery } from \"./email-sql\";\nimport {\n  coordinateTargetEmailAddress,\n  coordinateTargetEmailRegistration,\n  makeTargetEmailAddressServices,\n  makeTargetEmailRegistrationServices,\n  makeTargetEmailSignInServices,\n  sqlClientEmailStandaloneGuard,\n} from \"./email-target\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\ntype ProofMapping = ProofPersistenceMapping<\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any\n>;\n\nconst configuration = (database: Database) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientEmailStandaloneGuard(database),\n  generatedSubjectRows: (query: EmailSqlQuery) => query.returning(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(database),\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\nexport const makePgEmailSignInServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailSignInMapping<S, I, C, NativeId>,\n) => makeTargetEmailSignInServices(database, mapping, configuration(database));\n\nexport const makePgEmailAddressServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>,\n  proofMapping: ProofMapping,\n) => makeTargetEmailAddressServices(database, mapping, proofMapping, configuration(database));\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailAddress<TransactionOf<D>, Out, E, Exclude<R, EmailAddressPersistence>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport const makePgEmailRegistrationServices = <\n  Registration,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  proofMapping: ProofMapping,\n) =>\n  makeTargetEmailRegistrationServices<Registration>(\n    database,\n    mapping,\n    proofMapping,\n    configuration(database),\n  );\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailRegistration<Registration, TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;;AA+CA,MAAM,iBAAiB,cAAwB;CAC7C,MAAM;CACN,SAAS;CACT,iBAAiB,8BAA8B,QAAQ;CACvD,uBAAuB,UAAyB,MAAM,UAAU;CAChE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,QAAQ;EACvD,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAEA,MAAa,6BAMX,UACA,YACG,8BAA8B,UAAU,SAAS,cAAc,QAAQ,CAAC;AAE7E,MAAa,8BAQX,UACA,SACA,iBACG,+BAA+B,UAAU,SAAS,cAAc,cAAc,QAAQ,CAAC;AA0D5F,SAAgB,yBAgBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,6BACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;EACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAEA,MAAa,mCASX,UACA,SACA,iBAEA,oCACE,UACA,SACA,cACA,cAAc,QAAQ,CACxB;AAgEF,SAAgB,8BAkBd,SACA,SAMA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}
+{"version":3,"file":"pg-emails.mjs","names":[],"sources":["../../src/drizzle/pg-emails.ts"],"sourcesContent":["import { EmailAddressPersistence, type EmailUnavailable } from \"@yielded/auth/Email\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport type {\n  EmailAddressMapping,\n  EmailRegistrationMapping,\n  EmailSignInMapping,\n} from \"./email-model\";\nimport type { EmailRegistrationAuthority } from \"./email-registration\";\nimport type { EmailSqlQuery } from \"./email-sql\";\nimport {\n  coordinateTargetEmailAddress,\n  coordinateTargetEmailRegistration,\n  makeTargetEmailAddressServices,\n  makeTargetEmailRegistrationServices,\n  makeTargetEmailSignInServices,\n  sqlClientEmailStandaloneGuard,\n} from \"./email-target\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\ntype ProofMapping = ProofPersistenceMapping<\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any\n>;\n\nconst configuration = (database: Database) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientEmailStandaloneGuard(database),\n  generatedSubjectRows: (query: EmailSqlQuery) => query.returning(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(database),\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\nexport const makePgEmailSignInServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailSignInMapping<S, I, C, NativeId>,\n) => makeTargetEmailSignInServices(database, mapping, configuration(database));\n\nexport const makePgEmailAddressServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>,\n  proofMapping: ProofMapping,\n) => makeTargetEmailAddressServices(database, mapping, proofMapping, configuration(database));\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailAddress<TransactionOf<D>, Out, E, Exclude<R, EmailAddressPersistence>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport const makePgEmailRegistrationServices = <\n  Registration,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  proofMapping: ProofMapping,\n) =>\n  makeTargetEmailRegistrationServices<Registration>(\n    database,\n    mapping,\n    proofMapping,\n    configuration(database),\n  );\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailRegistration<Registration, TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;;AA+CA,MAAM,iBAAiB,cAAwB;CAC7C,MAAM;CACN,SAAS;CACT,iBAAiB,8BAA8B,QAAQ;CACvD,uBAAuB,UAAyB,MAAM,UAAU;CAChE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,QAAQ;EACvD,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAEA,MAAa,6BAMX,UACA,YACG,8BAA8B,UAAU,SAAS,cAAc,QAAQ,CAAC;AAE7E,MAAa,8BAQX,UACA,SACA,iBACG,+BAA+B,UAAU,SAAS,cAAc,cAAc,QAAQ,CAAC;AA0D5F,SAAgB,yBAgBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,6BACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;EACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAEA,MAAa,mCASX,UACA,SACA,iBAEA,oCACE,UACA,SACA,cACA,cAAc,QAAQ,CACxB;AAgEF,SAAgB,8BAkBd,SACA,SAMA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}

package/dist/drizzle/pg-identity.d.mts

@@ -0,0 +1,22 @@
+import { ExternalIdentityTables, SubjectProvisioningTables } from "./model.mjs";
+import { ExternalIdentity, IdentityConflict, IdentityUnavailable, SubjectProvisioningInput } from "@yielded/auth/Identity";
+import { AnyRelations } from "drizzle-orm";
+import { Effect } from "effect";
+import { SubjectId } from "@yielded/auth/Schema";
+import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
+import { AnyPgTable } from "drizzle-orm/pg-core";
+import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
+//#region src/drizzle/pg-identity.d.ts
+type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
+export declare const makePgSubjectProvisioningServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, Request extends AnyPgTable, NativeId>(database: Database, mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => {
+  readonly subjectProvisioner: {
+    readonly provision: (input: SubjectProvisioningInput) => Effect.Effect<import("@yielded/auth/Identity").ProvisioningResult, IdentityConflict | IdentityUnavailable>;
+  };
+};
+export declare const makePgExternalIdentityServices: <Subject extends AnyPgTable, External extends AnyPgTable, NativeId>(database: Database, mapping: ExternalIdentityTables<Subject, External, NativeId>) => {
+  readonly externalIdentityMutation: {
+    readonly bind: (subjectId: SubjectId, identity: ExternalIdentity) => Effect.Effect<void, IdentityConflict | IdentityUnavailable>;
+  };
+};
+//#endregion
+//# sourceMappingURL=pg-identity.d.mts.map

package/dist/drizzle/pg-identity.mjs

@@ -0,0 +1,89 @@
+import { PersistenceMappingError, column, isMappedConstraintConflict, provisioningFingerprint } from "./model.mjs";
+import { ExternalIdentityMutation, IdentityConflict, IdentityUnavailable, SubjectProvisioned, SubjectProvisioner } from "@yielded/auth/Identity";
+import { and, eq } from "drizzle-orm";
+import { Cause, Effect, Schema } from "effect";
+import { reportPersistenceFailure } from "@yielded/auth/Persistence";
+import "drizzle-orm/pg-core";
+//#region src/drizzle/pg-identity.ts
+const identityUnavailable = () => IdentityUnavailable.make();
+const isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));
+const mapIdentityFailure = (effect) => reportPersistenceFailure(effect, isIdentityFailure).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, (error) => isIdentityFailure(error) ? error : identityUnavailable()))));
+const makePgSubjectProvisioningServices = (database, mapping) => {
+	const db = database;
+	const requestTable = mapping.provisioningRequest.table;
+	const requestIdColumn = column(requestTable, mapping.provisioningRequest.requestId);
+	const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);
+	const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);
+	const identifierTable = mapping.identifier.table;
+	const identifierNamespaceColumn = column(identifierTable, mapping.identifier.namespace);
+	const identifierValueColumn = column(identifierTable, mapping.identifier.value);
+	const findReceipt = Effect.fn("DrizzlePgIdentity.findReceipt")(function* (requestId) {
+		return (yield* db.select({
+			fingerprint: requestFingerprintColumn,
+			subjectId: requestSubjectColumn
+		}).from(requestTable).where(eq(requestIdColumn, requestId)).limit(1))[0];
+	});
+	const provision = Effect.fn("DrizzlePgIdentity.provision")(function* (input) {
+		const fingerprint = provisioningFingerprint(input);
+		const existing = yield* findReceipt(input.requestId);
+		if (existing !== void 0) {
+			if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();
+			const id = yield* mapping.subjectId.toSubject(existing.subjectId);
+			return SubjectProvisioned.make({ subjectId: id });
+		}
+		const nativeId = yield* db.transaction((tx) => Effect.gen(function* () {
+			const allocated = mapping.subject.allocateId === void 0 ? void 0 : yield* mapping.subject.allocateId;
+			const nativeId = (yield* tx.insert(mapping.subject.table).values(mapping.subject.encodeInsert(input, allocated)).returning({ id: column(mapping.subject.table, mapping.subject.id) }))[0]?.id ?? allocated;
+			if (nativeId === void 0) return yield* PersistenceMappingError.make({
+				operation: "provisionSubject.generatedId",
+				cause: /* @__PURE__ */ new Error("subject insert did not return its native id")
+			});
+			if (input.identifier !== void 0) yield* tx.insert(identifierTable).values(mapping.identifier.encodeInsert(input.identifier, nativeId, input.verifiedAt));
+			yield* tx.insert(requestTable).values(mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, nativeId));
+			return nativeId;
+		})).pipe(Effect.catchCause((cause) => {
+			if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
+			return findReceipt(input.requestId).pipe(Effect.flatMap((receipt) => {
+				if (receipt !== void 0 && receipt.fingerprint === fingerprint) return Effect.succeed(receipt.subjectId);
+				if (input.identifier === void 0) return IdentityConflict.make();
+				return db.select({ subjectId: column(identifierTable, mapping.identifier.subjectId) }).from(identifierTable).where(and(eq(identifierNamespaceColumn, input.identifier.namespace), eq(identifierValueColumn, input.identifier.value))).limit(1).pipe(Effect.flatMap(() => IdentityConflict.make()));
+			}));
+		}));
+		const subjectId = yield* mapping.subjectId.toSubject(nativeId);
+		return SubjectProvisioned.make({ subjectId });
+	}, mapIdentityFailure);
+	return { subjectProvisioner: SubjectProvisioner.of({ provision }) };
+};
+const makePgExternalIdentityServices = (database, mapping) => {
+	const db = database;
+	const externalTable = mapping.externalIdentity.table;
+	const externalProviderColumn = column(externalTable, mapping.externalIdentity.provider);
+	const externalIssuerColumn = column(externalTable, mapping.externalIdentity.issuer);
+	const externalSubjectColumn = column(externalTable, mapping.externalIdentity.subject);
+	const externalSubjectIdColumn = column(externalTable, mapping.externalIdentity.subjectId);
+	const subjectIdColumn = column(mapping.subject.table, mapping.subject.id);
+	const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status);
+	const bind = Effect.fn("DrizzlePgIdentity.bindExternalIdentity")(function* (subjectId, identity) {
+		const nativeId = yield* mapping.subjectId.toNative(subjectId);
+		if ((yield* db.transaction((tx) => Effect.gen(function* () {
+			const subjects = yield* tx.select({ status: subjectStatusColumn }).from(mapping.subject.table).where(eq(subjectIdColumn, nativeId)).for("update").limit(1);
+			if (subjects[0] === void 0 || !mapping.subject.isActiveStatus(subjects[0].status)) return { _tag: "conflict" };
+			const links = yield* tx.select({ subjectId: externalSubjectIdColumn }).from(externalTable).where(and(eq(externalProviderColumn, identity.provider), eq(externalIssuerColumn, identity.issuer), eq(externalSubjectColumn, identity.subject))).for("update").limit(1);
+			if (links[0] !== void 0) return mapping.subjectId.equals(links[0].subjectId, nativeId) ? { _tag: "bound" } : { _tag: "conflict" };
+			yield* tx.insert(externalTable).values(mapping.externalIdentity.encodeInsert(identity, nativeId));
+			return { _tag: "bound" };
+		})).pipe(Effect.catchCause((cause) => {
+			if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
+			return db.select({ subjectId: externalSubjectIdColumn }).from(externalTable).where(and(eq(externalProviderColumn, identity.provider), eq(externalIssuerColumn, identity.issuer), eq(externalSubjectColumn, identity.subject))).limit(1).pipe(Effect.map((rows) => rows[0] !== void 0 && mapping.subjectId.equals(rows[0].subjectId, nativeId) ? { _tag: "bound" } : { _tag: "conflict" }));
+		})))._tag === "conflict") return yield* IdentityConflict.make();
+	}, mapIdentityFailure);
+	return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) };
+};
+const makePgIdentityServices = (database, mapping) => ({
+	...makePgSubjectProvisioningServices(database, mapping),
+	...makePgExternalIdentityServices(database, mapping)
+});
+//#endregion
+export { makePgExternalIdentityServices, makePgIdentityServices, makePgSubjectProvisioningServices };
+
+//# sourceMappingURL=pg-identity.mjs.map

package/dist/drizzle/pg-identity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-identity.mjs","names":[],"sources":["../../src/drizzle/pg-identity.ts"],"sourcesContent":["import {\n  ExternalIdentityMutation,\n  IdentityConflict,\n  IdentityUnavailable,\n  SubjectProvisioned,\n  type ExternalIdentity,\n  SubjectProvisioner,\n  type SubjectProvisioningInput,\n} from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport type { SubjectId } from \"@yielded/auth/Schema\";\n/* oxlint-disable no-explicit-any -- Drizzle's generic query builders lose the concrete consumer table through a runtime column map. Assertions stay in this adapter. */\nimport { and, eq, type AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PgDatabase } from \"drizzle-orm/effect-postgres\";\nimport { type AnyPgTable, type PgColumn } from \"drizzle-orm/pg-core\";\nimport { Cause, Effect, Schema } from \"effect\";\n\nimport {\n  column,\n  PersistenceMappingError,\n  isMappedConstraintConflict,\n  provisioningFingerprint,\n  type ExternalIdentityTables,\n  type IdentityTables,\n  type SubjectProvisioningTables,\n} from \"./model\";\n\ntype Database = PgDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype RuntimeDatabase = PgDatabase<any>;\n\nconst identityUnavailable = () => IdentityUnavailable.make();\nconst isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));\n\nconst mapIdentityFailure = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n  reportPersistenceFailure(effect, isIdentityFailure).pipe(\n    Effect.catchCause((cause) =>\n      Effect.failCause(\n        Cause.map(cause, (error) => (isIdentityFailure(error) ? error : identityUnavailable())),\n      ),\n    ),\n  );\n\nexport const makePgSubjectProvisioningServices = <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>,\n) => {\n  const db = database as RuntimeDatabase;\n  const requestTable = mapping.provisioningRequest.table;\n  const requestIdColumn = column(requestTable, mapping.provisioningRequest.requestId);\n  const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);\n  const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);\n  const identifierTable = mapping.identifier.table;\n  const identifierNamespaceColumn = column(identifierTable, mapping.identifier.namespace);\n  const identifierValueColumn = column(identifierTable, mapping.identifier.value);\n\n  const findReceipt = Effect.fn(\"DrizzlePgIdentity.findReceipt\")(function* (requestId: string) {\n    const rows = yield* db\n      .select({\n        fingerprint: requestFingerprintColumn as PgColumn,\n        subjectId: requestSubjectColumn as PgColumn,\n      })\n      .from(requestTable as any)\n      .where(eq(requestIdColumn, requestId))\n      .limit(1);\n\n    return rows[0];\n  });\n\n  const provision = Effect.fn(\"DrizzlePgIdentity.provision\")(function* (\n    input: SubjectProvisioningInput,\n  ) {\n    const fingerprint = provisioningFingerprint(input);\n    const existing = yield* findReceipt(input.requestId);\n\n    if (existing !== undefined) {\n      if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();\n      const id = yield* mapping.subjectId.toSubject(existing.subjectId as NativeId);\n\n      return SubjectProvisioned.make({ subjectId: id });\n    }\n\n    const attempt = db.transaction((tx) =>\n      Effect.gen(function* () {\n        const allocated =\n          mapping.subject.allocateId === undefined ? undefined : yield* mapping.subject.allocateId;\n\n        const inserted = yield* tx\n          .insert(mapping.subject.table as any)\n          .values(mapping.subject.encodeInsert(input, allocated) as any)\n          .returning({ id: column(mapping.subject.table, mapping.subject.id) as PgColumn });\n\n        const nativeId = (inserted[0]?.id ?? allocated) as NativeId | undefined;\n\n        if (nativeId === undefined) {\n          return yield* PersistenceMappingError.make({\n            operation: \"provisionSubject.generatedId\",\n            cause: new Error(\"subject insert did not return its native id\"),\n          });\n        }\n        if (input.identifier !== undefined) {\n          yield* tx\n            .insert(identifierTable as any)\n            .values(\n              mapping.identifier.encodeInsert(input.identifier, nativeId, input.verifiedAt) as any,\n            );\n        }\n        yield* tx\n          .insert(requestTable as any)\n          .values(\n            mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, nativeId) as any,\n          );\n\n        return nativeId;\n      }),\n    );\n\n    const nativeId = yield* attempt.pipe(\n      Effect.catchCause(\n        (\n          cause,\n        ): Effect.Effect<\n          NativeId,\n          | Effect.Error<typeof attempt>\n          | Effect.Error<ReturnType<typeof findReceipt>>\n          | IdentityConflict\n        > => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return findReceipt(input.requestId).pipe(\n            Effect.flatMap((receipt) => {\n              if (receipt !== undefined && receipt.fingerprint === fingerprint) {\n                return Effect.succeed(receipt.subjectId as NativeId);\n              }\n              if (input.identifier === undefined) return IdentityConflict.make();\n\n              return db\n                .select({\n                  subjectId: column(identifierTable, mapping.identifier.subjectId) as PgColumn,\n                })\n                .from(identifierTable as any)\n                .where(\n                  and(\n                    eq(identifierNamespaceColumn, input.identifier.namespace),\n                    eq(identifierValueColumn, input.identifier.value),\n                  ),\n                )\n                .limit(1)\n                .pipe(Effect.flatMap(() => IdentityConflict.make()));\n            }),\n          );\n        },\n      ),\n    );\n\n    const subjectId = yield* mapping.subjectId.toSubject(nativeId);\n\n    return SubjectProvisioned.make({ subjectId });\n  }, mapIdentityFailure);\n\n  return {\n    subjectProvisioner: SubjectProvisioner.of({ provision }),\n  } as const;\n};\n\nexport const makePgExternalIdentityServices = <\n  Subject extends AnyPgTable,\n  External extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: ExternalIdentityTables<Subject, External, NativeId>,\n) => {\n  const db = database as RuntimeDatabase;\n  const externalTable = mapping.externalIdentity.table;\n\n  const externalProviderColumn = column(\n    externalTable,\n    mapping.externalIdentity.provider,\n  ) as PgColumn;\n\n  const externalIssuerColumn = column(externalTable, mapping.externalIdentity.issuer) as PgColumn;\n  const externalSubjectColumn = column(externalTable, mapping.externalIdentity.subject) as PgColumn;\n\n  const externalSubjectIdColumn = column(\n    externalTable,\n    mapping.externalIdentity.subjectId,\n  ) as PgColumn;\n\n  const subjectIdColumn = column(mapping.subject.table, mapping.subject.id) as PgColumn;\n  const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status) as PgColumn;\n\n  const bind = Effect.fn(\"DrizzlePgIdentity.bindExternalIdentity\")(function* (\n    subjectId: SubjectId,\n    identity: ExternalIdentity,\n  ) {\n    const nativeId = yield* mapping.subjectId.toNative(subjectId);\n\n    const decision = yield* db\n      .transaction((tx) =>\n        Effect.gen(function* () {\n          const subjects = yield* tx\n            .select({ status: subjectStatusColumn })\n            .from(mapping.subject.table as any)\n            .where(eq(subjectIdColumn, nativeId))\n            .for(\"update\")\n            .limit(1);\n\n          if (subjects[0] === undefined || !mapping.subject.isActiveStatus(subjects[0].status))\n            return { _tag: \"conflict\" } as const;\n\n          const links = yield* tx\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .for(\"update\")\n            .limit(1);\n\n          if (links[0] !== undefined)\n            return mapping.subjectId.equals(links[0].subjectId as NativeId, nativeId)\n              ? ({ _tag: \"bound\" } as const)\n              : ({ _tag: \"conflict\" } as const);\n          yield* tx\n            .insert(externalTable as any)\n            .values(mapping.externalIdentity.encodeInsert(identity, nativeId) as any);\n\n          return { _tag: \"bound\" } as const;\n        }),\n      )\n      .pipe(\n        Effect.catchCause((cause) => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return db\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .limit(1)\n            .pipe(\n              Effect.map((rows) =>\n                rows[0] !== undefined &&\n                mapping.subjectId.equals(rows[0].subjectId as NativeId, nativeId)\n                  ? ({ _tag: \"bound\" } as const)\n                  : ({ _tag: \"conflict\" } as const),\n              ),\n            );\n        }),\n      );\n\n    if (decision._tag === \"conflict\") return yield* IdentityConflict.make();\n  }, mapIdentityFailure);\n\n  return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) } as const;\n};\n\nexport const makePgIdentityServices = <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  External extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>,\n) => ({\n  ...makePgSubjectProvisioningServices(database, mapping),\n  ...makePgExternalIdentityServices(database, mapping),\n});\n"],"mappings":";;;;;;;AA+BA,MAAM,4BAA4B,oBAAoB,KAAK;AAC3D,MAAM,oBAAoB,OAAO,GAAG,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,CAAC,CAAC;AAEzF,MAAM,sBAA+B,WACnC,yBAAyB,QAAQ,iBAAiB,CAAC,CAAC,KAClD,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAAW,kBAAkB,KAAK,IAAI,QAAQ,oBAAoB,CAAE,CACxF,CACF,CACF;AAEF,MAAa,qCAMX,UACA,YACG;CACH,MAAM,KAAK;CACX,MAAM,eAAe,QAAQ,oBAAoB;CACjD,MAAM,kBAAkB,OAAO,cAAc,QAAQ,oBAAoB,SAAS;CAClF,MAAM,2BAA2B,OAAO,cAAc,QAAQ,oBAAoB,WAAW;CAC7F,MAAM,uBAAuB,OAAO,cAAc,QAAQ,oBAAoB,SAAS;CACvF,MAAM,kBAAkB,QAAQ,WAAW;CAC3C,MAAM,4BAA4B,OAAO,iBAAiB,QAAQ,WAAW,SAAS;CACtF,MAAM,wBAAwB,OAAO,iBAAiB,QAAQ,WAAW,KAAK;CAE9E,MAAM,cAAc,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAAW,WAAmB;EAU3F,QAAO,OATa,GACjB,OAAO;GACN,aAAa;GACb,WAAW;EACb,CAAC,CAAC,CACD,KAAK,YAAmB,CAAC,CACzB,MAAM,GAAG,iBAAiB,SAAS,CAAC,CAAC,CACrC,MAAM,CAAC,EAAA,CAEE;CACd,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,6BAA6B,CAAC,CAAC,WACzD,OACA;EACA,MAAM,cAAc,wBAAwB,KAAK;EACjD,MAAM,WAAW,OAAO,YAAY,MAAM,SAAS;EAEnD,IAAI,aAAa,KAAA,GAAW;GAC1B,IAAI,SAAS,gBAAgB,aAAa,OAAO,OAAO,iBAAiB,KAAK;GAC9E,MAAM,KAAK,OAAO,QAAQ,UAAU,UAAU,SAAS,SAAqB;GAE5E,OAAO,mBAAmB,KAAK,EAAE,WAAW,GAAG,CAAC;EAClD;EAqCA,MAAM,WAAW,OAnCD,GAAG,aAAa,OAC9B,OAAO,IAAI,aAAa;GACtB,MAAM,YACJ,QAAQ,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,QAAQ;GAOhF,MAAM,YAAY,OALM,GACrB,OAAO,QAAQ,QAAQ,KAAY,CAAC,CACpC,OAAO,QAAQ,QAAQ,aAAa,OAAO,SAAS,CAAQ,CAAC,CAC7D,UAAU,EAAE,IAAI,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE,EAAc,CAAC,EAAA,CAEvD,EAAE,EAAE,MAAM;GAErC,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,wBAAwB,KAAK;IACzC,WAAW;IACX,uBAAO,IAAI,MAAM,6CAA6C;GAChE,CAAC;GAEH,IAAI,MAAM,eAAe,KAAA,GACvB,OAAO,GACJ,OAAO,eAAsB,CAAC,CAC9B,OACC,QAAQ,WAAW,aAAa,MAAM,YAAY,UAAU,MAAM,UAAU,CAC9E;GAEJ,OAAO,GACJ,OAAO,YAAmB,CAAC,CAC3B,OACC,QAAQ,oBAAoB,aAAa,MAAM,WAAW,aAAa,QAAQ,CACjF;GAEF,OAAO;EACT,CAAC,CAG2B,CAAC,CAAC,KAC9B,OAAO,YAEH,UAMG;GACH,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,YAAY,MAAM,SAAS,CAAC,CAAC,KAClC,OAAO,SAAS,YAAY;IAC1B,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,aACnD,OAAO,OAAO,QAAQ,QAAQ,SAAqB;IAErD,IAAI,MAAM,eAAe,KAAA,GAAW,OAAO,iBAAiB,KAAK;IAEjE,OAAO,GACJ,OAAO,EACN,WAAW,OAAO,iBAAiB,QAAQ,WAAW,SAAS,EACjE,CAAC,CAAC,CACD,KAAK,eAAsB,CAAC,CAC5B,MACC,IACE,GAAG,2BAA2B,MAAM,WAAW,SAAS,GACxD,GAAG,uBAAuB,MAAM,WAAW,KAAK,CAClD,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KAAK,OAAO,cAAc,iBAAiB,KAAK,CAAC,CAAC;GACvD,CAAC,CACH;EACF,CACF,CACF;EAEA,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,QAAQ;EAE7D,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;CAC9C,GAAG,kBAAkB;CAErB,OAAO,EACL,oBAAoB,mBAAmB,GAAG,EAAE,UAAU,CAAC,EACzD;AACF;AAEA,MAAa,kCAKX,UACA,YACG;CACH,MAAM,KAAK;CACX,MAAM,gBAAgB,QAAQ,iBAAiB;CAE/C,MAAM,yBAAyB,OAC7B,eACA,QAAQ,iBAAiB,QAC3B;CAEA,MAAM,uBAAuB,OAAO,eAAe,QAAQ,iBAAiB,MAAM;CAClF,MAAM,wBAAwB,OAAO,eAAe,QAAQ,iBAAiB,OAAO;CAEpF,MAAM,0BAA0B,OAC9B,eACA,QAAQ,iBAAiB,SAC3B;CAEA,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CACxE,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAEhF,MAAM,OAAO,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAC/D,WACA,UACA;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,SAAS,SAAS;EAyE5D,KAAI,OAvEoB,GACrB,aAAa,OACZ,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,GACrB,OAAO,EAAE,QAAQ,oBAAoB,CAAC,CAAC,CACvC,KAAK,QAAQ,QAAQ,KAAY,CAAC,CAClC,MAAM,GAAG,iBAAiB,QAAQ,CAAC,CAAC,CACpC,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,SAAS,OAAO,KAAA,KAAa,CAAC,QAAQ,QAAQ,eAAe,SAAS,EAAE,CAAC,MAAM,GACjF,OAAO,EAAE,MAAM,WAAW;GAE5B,MAAM,QAAQ,OAAO,GAClB,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,MAAM,OAAO,KAAA,GACf,OAAO,QAAQ,UAAU,OAAO,MAAM,EAAE,CAAC,WAAuB,QAAQ,IACnE,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW;GAC1B,OAAO,GACJ,OAAO,aAAoB,CAAC,CAC5B,OAAO,QAAQ,iBAAiB,aAAa,UAAU,QAAQ,CAAQ;GAE1E,OAAO,EAAE,MAAM,QAAQ;EACzB,CAAC,CACH,CAAC,CACA,KACC,OAAO,YAAY,UAAU;GAC3B,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,GACJ,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KACC,OAAO,KAAK,SACV,KAAK,OAAO,KAAA,KACZ,QAAQ,UAAU,OAAO,KAAK,EAAE,CAAC,WAAuB,QAAQ,IAC3D,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW,CAC1B,CACF;EACJ,CAAC,CACH,EAAA,CAEW,SAAS,YAAY,OAAO,OAAO,iBAAiB,KAAK;CACxE,GAAG,kBAAkB;CAErB,OAAO,EAAE,0BAA0B,yBAAyB,GAAG,EAAE,KAAK,CAAC,EAAE;AAC3E;AAEA,MAAa,0BAOX,UACA,aACI;CACJ,GAAG,kCAAkC,UAAU,OAAO;CACtD,GAAG,+BAA+B,UAAU,OAAO;AACrD"}

package/dist/drizzle/pg-password-prepared.d.mts

@@ -7,7 +7,7 @@ import { PasswordPreparedPersistence, PasswordUnavailable } from "@yielded/auth/
 import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
 import { AnyPgTable } from "drizzle-orm/pg-core";
 import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
-import { SqlError } from "effect/unstable/sql/SqlError";
+import { SqlError } from "effect/sql/SqlError";
 //#region src/drizzle/pg-password-prepared.d.ts
 type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];

package/dist/drizzle/pg-password-prepared.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pg-password-prepared.mjs","names":[],"sources":["../../src/drizzle/pg-password-prepared.ts"],"sourcesContent":["import type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport type { PasswordUnavailable, PasswordPreparedPersistence } from \"@yielded/auth/Password\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport type {\n  PasswordPreparedPersistenceMapping,\n  PasswordPreparedProofMapping,\n} from \"./password-prepared-model\";\nimport {\n  makeTargetPasswordPreparedPersistenceServices,\n  coordinateTargetPasswordPreparedPersistence,\n} from \"./password-prepared-target\";\nimport { pgPasswordConfiguration as configuration } from \"./pg-passwords\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nexport const makePgPasswordPreparedPersistenceServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable = AnyPgTable,\n  PC extends AnyPgTable = AnyPgTable,\n  PM extends AnyPgTable = AnyPgTable,\n  PSub extends AnyPgTable = AnyPgTable,\n  PI extends AnyPgTable = AnyPgTable,\n  PCr extends AnyPgTable = AnyPgTable,\n  PNativeId = unknown,\n>(\n  database: Database,\n  mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>,\n  proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>,\n) =>\n  makeTargetPasswordPreparedPersistenceServices(\n    database,\n    mapping,\n    configuration(database),\n    proofMapping,\n  );\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasswordPreparedPersistence<TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      configuration(database),\n      options.proofMapping,\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n      ) => {\n        const provided = Context.make(options.target, services.passwordPreparedPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;AAsBA,MAAa,6CAoBX,UACA,SACA,iBAEA,8CACE,UACA,SACA,cAAc,QAAQ,GACtB,YACF;AA0FF,SAAgB,wCA6Bd,SACA,SAQA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4CACE,UACA,QAAQ,SACR,cAAc,QAAQ,GACtB,QAAQ,eAEN,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,2BAA2B;EAClF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}
+{"version":3,"file":"pg-password-prepared.mjs","names":[],"sources":["../../src/drizzle/pg-password-prepared.ts"],"sourcesContent":["import type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport type { PasswordUnavailable, PasswordPreparedPersistence } from \"@yielded/auth/Password\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport type {\n  PasswordPreparedPersistenceMapping,\n  PasswordPreparedProofMapping,\n} from \"./password-prepared-model\";\nimport {\n  makeTargetPasswordPreparedPersistenceServices,\n  coordinateTargetPasswordPreparedPersistence,\n} from \"./password-prepared-target\";\nimport { pgPasswordConfiguration as configuration } from \"./pg-passwords\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nexport const makePgPasswordPreparedPersistenceServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable = AnyPgTable,\n  PC extends AnyPgTable = AnyPgTable,\n  PM extends AnyPgTable = AnyPgTable,\n  PSub extends AnyPgTable = AnyPgTable,\n  PI extends AnyPgTable = AnyPgTable,\n  PCr extends AnyPgTable = AnyPgTable,\n  PNativeId = unknown,\n>(\n  database: Database,\n  mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>,\n  proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>,\n) =>\n  makeTargetPasswordPreparedPersistenceServices(\n    database,\n    mapping,\n    configuration(database),\n    proofMapping,\n  );\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasswordPreparedPersistence<TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      configuration(database),\n      options.proofMapping,\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n      ) => {\n        const provided = Context.make(options.target, services.passwordPreparedPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;AAsBA,MAAa,6CAoBX,UACA,SACA,iBAEA,8CACE,UACA,SACA,cAAc,QAAQ,GACtB,YACF;AA0FF,SAAgB,wCA6Bd,SACA,SAQA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4CACE,UACA,QAAQ,SACR,cAAc,QAAQ,GACtB,QAAQ,eAEN,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,2BAA2B;EAClF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}

package/dist/drizzle/pg-passwords.d.mts

@@ -11,7 +11,7 @@ import { PasswordPersistence, PasswordUnavailable } from "@yielded/auth/Password
 import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
 import { AnyPgTable } from "drizzle-orm/pg-core";
 import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
-import { SqlError } from "effect/unstable/sql/SqlError";
+import { SqlError } from "effect/sql/SqlError";
 //#region src/drizzle/pg-passwords.d.ts
 type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];