@yielded/auth-persistence-drizzle 0.1.0-beta.0 → 0.1.0-beta.1

package/dist/Postgres.d.mts

@@ -1,4 +1,4 @@
-import { AuthTables, IdentityTables } from "./drizzle/model.mjs";
+import { IdentityTables } from "./drizzle/model.mjs";
 import { PasskeyCredentialMapping, PasskeyEnrollmentContextMapping, PasskeyPersistenceMapping } from "./drizzle/passkey-model.mjs";
 import { OAuthAccountsMapping, OAuthRegistrationAuthority, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./drizzle/oauth-model.mjs";
 import { OAuthConnectedMapping, OAuthConnectedRevocationMapping } from "./drizzle/oauth-connected-model.mjs";
@@ -12,7 +12,7 @@ import "./index.mjs";
 import { SuppliedService } from "./drizzle/SuppliedService.mjs";
 import { TotpCoordinatorError } from "./drizzle/totp-target.mjs";
 import { PhoneCoordinatorError } from "./drizzle/phone-target.mjs";
-import { coordinatePgAuthStoreTransaction, coordinatePgAuthTransaction, coordinatePgOAuthStateTransaction, makePgAuthStoreServices, makePgExternalIdentityServices, makePgOAuthStateServices, makePgSubjectProvisioningServices } from "./drizzle/pg.mjs";
+import { makePgExternalIdentityServices, makePgSubjectProvisioningServices } from "./drizzle/pg-identity.mjs";
 import { coordinatePgAuthenticationAuthority, coordinatePgPendingAuthentication, coordinatePgSessionStepUp, coordinatePgSignedSessionValidity, coordinatePgStatefulSessions, makePgAuthenticationAuthorityServices, makePgPendingAuthenticationServices, makePgSessionStepUpServices, makePgSignedSessionValidityServices, makePgStatefulSessionServices } from "./drizzle/pg-sessions.mjs";
 import { coordinatePgProofPersistence, makePgProofPersistenceServices } from "./drizzle/pg-proofs.mjs";
 import { coordinatePgPasswordPersistence, coordinatePgPasswordRegistration, makePgPasswordPersistenceServices, makePgPasswordRegistrationServices } from "./drizzle/pg-passwords.mjs";
@@ -24,24 +24,6 @@ import { AnyPgTable } from "drizzle-orm/pg-core";
 import { EffectPgDatabase } from "drizzle-orm/effect-postgres";
 //#region src/Postgres.d.ts
 export declare const commitMode: "interactive";
-export declare const makeAuthServices: <C extends AnyPgTable, R extends AnyPgTable, S extends AnyPgTable>(database: EffectPgDatabase<AnyRelations>, mapping: AuthTables<C, R, S>) => {
-  readonly authStore: {
-    readonly issueChallenge: (input: import("@yielded/auth/Schema").NewChallenge) => Effect.Effect<void, import("@yielded/auth/AuthStore").IssueChallengeError>;
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => Effect.Effect<import("@yielded/auth/Schema").VerifiedEmail, import("@yielded/auth/AuthStore").EmailOtpRejected | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly issueRegistration: (input: import("@yielded/auth/Schema").NewRegistration) => Effect.Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly inspectRegistration: (tokenDigest: import("@yielded/auth/Schema").TokenDigest) => Effect.Effect<import("@yielded/auth/Schema").PendingRegistration, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => Effect.Effect<void, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-  };
-  readonly oauthStateStore: {
-    readonly issue: (state: import("@yielded/auth/OAuth").OAuthState) => Effect.Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consume: (stateDigest: import("@yielded/auth/Schema").TokenDigest) => Effect.Effect<import("@yielded/auth/OAuth").OAuthState, import("@yielded/auth/OAuth").InvalidOAuthState | import("@yielded/auth/Errors").AuthStoreError>;
-  };
-  readonly decisions: {
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => Effect.Effect<import("@yielded/auth/AuthStore").ChallengeConsumeDecision, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => Effect.Effect<import("@yielded/auth/AuthStore").ConsumeDecision<void>, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeOAuthState: (digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) => Effect.Effect<import("@yielded/auth/AuthStore").ConsumeDecision<import("@yielded/auth/OAuth").OAuthState>, import("@yielded/auth/Errors").AuthStoreError, never>;
-  };
-};
 export declare const makeIdentityServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, External extends AnyPgTable, Request extends AnyPgTable, NativeId>(database: EffectPgDatabase<AnyRelations>, mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => {
   subjectProvisioner: {
     readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => Effect.Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
@@ -74,6 +56,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
       readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
       readonly _tag: "Issued";
       readonly flow: {
         readonly context: {
@@ -88,6 +72,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -114,8 +113,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
         };
         readonly retentionUntilMillis: number;
       };
-    } | {
-      readonly _tag: "Rejected";
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly preflight: (input: import("@yielded/auth/OAuth").OAuthLinkAccess) => Effect.Effect<import("@yielded/auth/OAuth").OAuthLinkPendingFlow | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -141,6 +138,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -179,11 +191,13 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly invalidation: import("@yielded/auth/Sessions").SessionInvalidationWindow;
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
       readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Rejected";
     } | {
       readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Linked";
       readonly credential: {
@@ -205,8 +219,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
         };
       };
       readonly changed: boolean;
-    } | {
-      readonly _tag: "Conflict";
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly inspectUnlink: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -539,6 +551,98 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }> = never>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => Effect.Effect<{
   oauthConnectedPersistence: {
+    readonly claimSignIn: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
+      readonly configuration: import("@yielded/auth/OAuth").OAuthConnectedConfiguration;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSignInAccessClaim, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
+    readonly inspectSignIn: (input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+    }) => Effect.Effect<import("@yielded/auth/OAuth").OAuthSignInAccessInspection, import("@yielded/auth/OAuth").OAuthUnavailable>;
+    readonly settleSignIn: <A>(input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly outcome: import("@yielded/auth/OAuth").OAuthSignInAccessOutcome;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Connected";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+              readonly avatarUrl?: string | undefined;
+              readonly profileUrl?: string | undefined;
+              readonly email?: string | undefined;
+              readonly emailVerified?: boolean | undefined;
+              readonly providerData?: {
+                readonly [x: string]: import("effect/Schema").Json;
+              } | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    } | {
+      readonly _tag: "Busy";
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
       readonly subjectId: import("@yielded/auth/Schema").SubjectId;
@@ -567,6 +671,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -669,6 +788,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -776,9 +910,9 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedActionAuthorization;
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
       readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Rejected";
     } | {
       readonly _tag: "Ambiguous";
     } | {
@@ -788,6 +922,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -898,6 +1033,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1003,6 +1139,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
     }) => Effect.Effect<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
     } | {
@@ -1010,6 +1148,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1073,8 +1212,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly ciphertext: import("effect/Redacted").Redacted<string>;
         };
       };
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     }, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly claimRefresh: <A>(input: {
       readonly grant: import("@yielded/auth/OAuth").OAuthConnectedStoredGrant;
@@ -1084,16 +1221,17 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly lifetimeMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Busy";
     } | {
       readonly _tag: "ReauthorizationRequired";
+    } | {
+      readonly _tag: "Busy";
     } | {
       readonly _tag: "Claimed";
       readonly claim: {
         readonly grant: {
           readonly context: {
             readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+            readonly exchangeOrder: string;
             readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
             readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
             readonly identity: {
@@ -1157,6 +1295,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly ciphertext: import("effect/Redacted").Redacted<string>;
           };
         };
+        readonly order: string;
         readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
         readonly claimedAtMillis: number;
         readonly claimExpiresAtMillis: number;
@@ -1176,6 +1315,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1247,10 +1387,10 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly lifetimeMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Busy";
     } | {
       readonly _tag: "ReauthorizationRequired";
+    } | {
+      readonly _tag: "Busy";
     } | {
       readonly _tag: "Admitted";
       readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
@@ -1294,6 +1434,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly jobId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
             readonly token: {
               readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+              readonly exchangeOrder: string;
               readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
               readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
               readonly identity: {
@@ -1814,8 +1955,8 @@ export declare const makePhonePersistenceServices: <Database extends EffectPgDat
 };
 export declare const AuthPersistence: {
   make: <C extends import("@yielded/auth-persistence/Adapter").ClaimsCodec, const Id extends string, const A extends import("@yielded/auth-persistence/Adapter").Definition<C, Id>>(auth: A & import("@yielded/auth-persistence/Adapter").Definition<C, Id>) => import("@yielded/auth-persistence/Adapter").BoundPersistence<import("drizzle-orm/pg-core").PgTable<import("drizzle-orm/pg-core").TableConfig>, import("@effect/sql-pg/PgClient").PgClient, C, Id, A>;
-  migrationsLayer: (options: import("drizzle-orm/migrator").MigrationConfig) => import("effect/Layer").Layer<never, import("drizzle-orm/effect-core").EffectDrizzleQueryError | import("drizzle-orm/effect-core").MigratorInitError | import("@yielded/auth-persistence/Adapter").PersistenceConfigurationError | import("effect/unstable/sql/SqlError").SqlError, import("@effect/sql-pg/PgClient").PgClient>;
+  migrationsLayer: (options: import("drizzle-orm/migrator").MigrationConfig) => import("effect/Layer").Layer<never, import("drizzle-orm/effect-core").EffectDrizzleQueryError | import("drizzle-orm/effect-core").MigratorInitError | import("@yielded/auth-persistence/Adapter").PersistenceConfigurationError | import("effect/sql/SqlError").SqlError, import("@effect/sql-pg/PgClient").PgClient>;
 };
 //#endregion
-export { coordinatePgAuthStoreTransaction as coordinateAuthStoreTransaction, coordinatePgAuthTransaction as coordinateAuthTransaction, coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinatePgOAuthStateTransaction as coordinateOAuthStateTransaction, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, makePgAuthStoreServices as makeAuthStoreServices, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgExternalIdentityServices as makeExternalIdentityServices, makePgOAuthStateServices as makeOAuthStateServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, makePgSubjectProvisioningServices as makeSubjectProvisioningServices, passwordPreparedPersistenceLayer };
+export { coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgExternalIdentityServices as makeExternalIdentityServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, makePgSubjectProvisioningServices as makeSubjectProvisioningServices, passwordPreparedPersistenceLayer };
 //# sourceMappingURL=Postgres.d.mts.map

package/dist/Postgres.mjs

@@ -6,7 +6,7 @@ import { makePasskeyTarget } from "./drizzle/passkey-drivers.mjs";
 import { makePhoneTarget, sqlClientPhoneStandaloneGuard } from "./drizzle/phone-target.mjs";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers.mjs";
 import { drizzleMigrationsLayer } from "./internal/drizzle-migrations.mjs";
-import { coordinatePgAuthStoreTransaction, coordinatePgAuthTransaction, coordinatePgOAuthStateTransaction, makePgAuthServices, makePgAuthStoreServices, makePgExternalIdentityServices, makePgIdentityServices, makePgOAuthStateServices, makePgSubjectProvisioningServices } from "./drizzle/pg.mjs";
+import { makePgExternalIdentityServices, makePgIdentityServices, makePgSubjectProvisioningServices } from "./drizzle/pg-identity.mjs";
 import { coordinatePgAuthenticationAuthority, coordinatePgPendingAuthentication, coordinatePgSessionStepUp, coordinatePgSignedSessionValidity, coordinatePgStatefulSessions, makePgAuthenticationAuthorityServices, makePgPendingAuthenticationServices, makePgSessionStepUpServices, makePgSignedSessionValidityServices, makePgStatefulSessionServices } from "./drizzle/pg-sessions.mjs";
 import { coordinatePgProofPersistence, makePgProofPersistenceServices } from "./drizzle/pg-proofs.mjs";
 import { coordinatePgPasswordPersistence, coordinatePgPasswordRegistration, makePgPasswordPersistenceServices, makePgPasswordRegistrationServices } from "./drizzle/pg-passwords.mjs";
@@ -17,7 +17,6 @@ import { Effect } from "effect";
 import { makeWithDefaults } from "drizzle-orm/effect-postgres";
 //#region src/Postgres.ts
 const commitMode = "interactive";
-const makeAuthServices = (database, mapping) => makePgAuthServices(database, mapping);
 const makeIdentityServices = (database, mapping) => makePgIdentityServices(database, mapping);
 const { makeOAuthAccountsServices, makeOAuthSignInServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, coordinateOAuthRegistration, coordinateOAuthSignIn, coordinateOAuthRegistrationIntents, coordinateOAuthAccounts, makeOAuthConnectedServices, makeOAuthConnectedRevocationServices, coordinateOAuthConnected, coordinateOAuthConnectedRevocations } = makeOAuthTarget({
 	mode: "interactive",
@@ -48,6 +47,6 @@ const AuthPersistence = {
 	migrationsLayer: drizzleMigrationsLayer(makeWithDefaults({}), Effect.promise(() => import("drizzle-orm/effect-postgres/migrator")).pipe(Effect.map((module) => module.migrate)))
 };
 //#endregion
-export { AuthPersistence, commitMode, coordinatePgAuthStoreTransaction as coordinateAuthStoreTransaction, coordinatePgAuthTransaction as coordinateAuthTransaction, coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, coordinatePgOAuthStateTransaction as coordinateOAuthStateTransaction, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makeAuthServices, makePgAuthStoreServices as makeAuthStoreServices, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgExternalIdentityServices as makeExternalIdentityServices, makeIdentityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, makePgOAuthStateServices as makeOAuthStateServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, makePgSubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
+export { AuthPersistence, commitMode, coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgExternalIdentityServices as makeExternalIdentityServices, makeIdentityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, makePgSubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
 
 //# sourceMappingURL=Postgres.mjs.map

package/dist/Postgres.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Postgres.mjs","names":[],"sources":["../src/Postgres.ts"],"sourcesContent":["import type { AnyRelations } from \"drizzle-orm\";\nimport { type EffectPgDatabase, makeWithDefaults } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect } from \"effect\";\n\nimport type { AuthTables, IdentityTables } from \"./drizzle/model\";\nimport {\n  coordinatePgAuthStoreTransaction,\n  coordinatePgAuthTransaction,\n  coordinatePgOAuthStateTransaction,\n  makePgAuthServices,\n  makePgAuthStoreServices,\n  makePgExternalIdentityServices,\n  makePgIdentityServices,\n  makePgOAuthStateServices,\n  makePgSubjectProvisioningServices,\n} from \"./drizzle/pg\";\n\nexport {\n  coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority,\n  coordinatePgPendingAuthentication as coordinatePendingAuthentication,\n  coordinatePgSignedSessionValidity as coordinateSignedSessionValidity,\n  coordinatePgStatefulSessions as coordinateStatefulSessions,\n  makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices,\n  makePgPendingAuthenticationServices as makePendingAuthenticationServices,\n  makePgSignedSessionValidityServices as makeSignedSessionValidityServices,\n  makePgStatefulSessionServices as makeStatefulSessionServices,\n} from \"./drizzle/pg-sessions\";\n\nexport {\n  coordinatePgProofPersistence as coordinateProofPersistence,\n  makePgProofPersistenceServices as makeProofPersistenceServices,\n} from \"./drizzle/pg-proofs\";\n\nexport {\n  coordinatePgPasswordPersistence as coordinatePasswordPersistence,\n  coordinatePgPasswordRegistration as coordinatePasswordRegistration,\n  makePgPasswordPersistenceServices as makePasswordPersistenceServices,\n  makePgPasswordRegistrationServices as makePasswordRegistrationServices,\n} from \"./drizzle/pg-passwords\";\n\nexport {\n  coordinatePgEmailAddress as coordinateEmailAddress,\n  coordinatePgEmailRegistration as coordinateEmailRegistration,\n  makePgEmailAddressServices as makeEmailAddressServices,\n  makePgEmailRegistrationServices as makeEmailRegistrationServices,\n  makePgEmailSignInServices as makeEmailSignInServices,\n} from \"./drizzle/pg-emails\";\n\nexport {\n  coordinatePgAuthStoreTransaction as coordinateAuthStoreTransaction,\n  coordinatePgAuthTransaction as coordinateAuthTransaction,\n  coordinatePgOAuthStateTransaction as coordinateOAuthStateTransaction,\n  makePgAuthStoreServices as makeAuthStoreServices,\n  makePgExternalIdentityServices as makeExternalIdentityServices,\n  makePgOAuthStateServices as makeOAuthStateServices,\n  makePgSubjectProvisioningServices as makeSubjectProvisioningServices,\n};\n\nexport const commitMode = \"interactive\" as const;\n\nexport const makeAuthServices = <C extends AnyPgTable, R extends AnyPgTable, S extends AnyPgTable>(\n  database: EffectPgDatabase<AnyRelations>,\n  mapping: AuthTables<C, R, S>,\n) => makePgAuthServices(database, mapping);\n\nexport const makeIdentityServices = <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  External extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(\n  database: EffectPgDatabase<AnyRelations>,\n  mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>,\n) => makePgIdentityServices(database, mapping);\n\nexport {\n  makePgSessionStepUpServices as makeSessionStepUpServices,\n  coordinatePgSessionStepUp as coordinateSessionStepUp,\n} from \"./drizzle/pg-sessions\";\n\nexport {\n  makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices,\n  coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence,\n} from \"./drizzle/pg-password-prepared\";\n\nexport { passwordPreparedPersistenceLayer } from \"./drizzle/password-prepared-target\";\n\nimport { makeOAuthTarget } from \"./drizzle/oauth-drivers\";\nimport { sqlClientOAuthStandaloneGuard } from \"./drizzle/oauth-target\";\n\nconst oauthTarget = makeOAuthTarget<EffectPgDatabase<AnyRelations>, AnyPgTable<{ dialect: \"pg\" }>>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientOAuthStandaloneGuard,\n});\n\nexport const {\n  makeOAuthAccountsServices,\n  makeOAuthSignInServices,\n  makeOAuthRegistrationIntentServices,\n  makeOAuthRegistrationServices,\n  coordinateOAuthRegistration,\n  coordinateOAuthSignIn,\n  coordinateOAuthRegistrationIntents,\n  coordinateOAuthAccounts,\n  makeOAuthConnectedServices,\n  makeOAuthConnectedRevocationServices,\n  coordinateOAuthConnected,\n  coordinateOAuthConnectedRevocations,\n} = oauthTarget;\n\nimport { makePasskeyTarget } from \"./drizzle/passkey-drivers\";\nimport { sqlClientPasskeyStandaloneGuard } from \"./drizzle/passkey-target\";\n\nconst passkeyTarget = makePasskeyTarget<\n  EffectPgDatabase<AnyRelations>,\n  AnyPgTable<{ dialect: \"pg\" }>\n>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientPasskeyStandaloneGuard,\n});\n\nexport const {\n  makePasskeyCredentialServices,\n  makePasskeyPersistenceServices,\n  makePasskeyEnrollmentContextServices,\n  makePasskeyRegistrationCeremonyServices,\n  coordinatePasskeyPersistence,\n  coordinatePasskeyRegistrationCeremony,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n  coordinatePasskeyManagement,\n  coordinatePasskeyRegistration,\n} = passkeyTarget;\n\nimport { makeTotpTarget, sqlClientTotpStandaloneGuard } from \"./drizzle/totp-target\";\n\nconst totpTarget = makeTotpTarget<EffectPgDatabase<AnyRelations>, AnyPgTable<{ dialect: \"pg\" }>>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientTotpStandaloneGuard,\n});\n\nexport const { makeTotpPersistenceServices, coordinateTotpPersistence } = totpTarget;\n\nimport { makePhoneTarget, sqlClientPhoneStandaloneGuard } from \"./drizzle/phone-target\";\n\nconst phoneTarget = makePhoneTarget<EffectPgDatabase<AnyRelations>, AnyPgTable<{ dialect: \"pg\" }>>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientPhoneStandaloneGuard,\n});\n\nexport const { makePhonePersistenceServices, coordinatePhonePersistence } = phoneTarget;\n\nimport { drizzleMigrationsLayer } from \"./internal/drizzle-migrations\";\nimport { postgresPersistence } from \"./internal/drizzle-postgres\";\n\nexport const AuthPersistence = {\n  ...postgresPersistence(makeWithDefaults({})),\n  migrationsLayer: drizzleMigrationsLayer(\n    makeWithDefaults({}),\n    Effect.promise(() => import(\"drizzle-orm/effect-postgres/migrator\")).pipe(\n      Effect.map((module) => module.migrate),\n    ),\n  ),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AA2DA,MAAa,aAAa;AAE1B,MAAa,oBACX,UACA,YACG,mBAAmB,UAAU,OAAO;AAEzC,MAAa,wBAOX,UACA,YACG,uBAAuB,UAAU,OAAO;AAwB7C,MAAa,EACX,2BACA,yBACA,qCACA,+BACA,6BACA,uBACA,oCACA,yBACA,4BACA,sCACA,0BACA,wCAnBkB,gBAA+E;CACjG,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAeI;AAeJ,MAAa,EACX,+BACA,gCACA,sCACA,yCACA,8BACA,uCACA,+BACA,iCACA,6BACA,kCApBoB,kBAGpB;CACA,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAaI;AAWJ,MAAa,EAAE,6BAA6B,8BAPzB,eAA8E;CAC/F,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAE0E;AAW1E,MAAa,EAAE,8BAA8B,+BAPzB,gBAA+E;CACjG,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAE4E;AAK5E,MAAa,kBAAkB;CAC7B,GAAG,oBAAoB,iBAAiB,CAAC,CAAC,CAAC;CAC3C,iBAAiB,uBACf,iBAAiB,CAAC,CAAC,GACnB,OAAO,cAAc,OAAO,uCAAuC,CAAC,CAAC,KACnE,OAAO,KAAK,WAAW,OAAO,OAAO,CACvC,CACF;AACF"}
+{"version":3,"file":"Postgres.mjs","names":[],"sources":["../src/Postgres.ts"],"sourcesContent":["import type { AnyRelations } from \"drizzle-orm\";\nimport { type EffectPgDatabase, makeWithDefaults } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect } from \"effect\";\n\nimport type { IdentityTables } from \"./drizzle/model\";\nimport {\n  makePgExternalIdentityServices,\n  makePgIdentityServices,\n  makePgSubjectProvisioningServices,\n} from \"./drizzle/pg-identity\";\n\nexport {\n  coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority,\n  coordinatePgPendingAuthentication as coordinatePendingAuthentication,\n  coordinatePgSignedSessionValidity as coordinateSignedSessionValidity,\n  coordinatePgStatefulSessions as coordinateStatefulSessions,\n  makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices,\n  makePgPendingAuthenticationServices as makePendingAuthenticationServices,\n  makePgSignedSessionValidityServices as makeSignedSessionValidityServices,\n  makePgStatefulSessionServices as makeStatefulSessionServices,\n} from \"./drizzle/pg-sessions\";\n\nexport {\n  coordinatePgProofPersistence as coordinateProofPersistence,\n  makePgProofPersistenceServices as makeProofPersistenceServices,\n} from \"./drizzle/pg-proofs\";\n\nexport {\n  coordinatePgPasswordPersistence as coordinatePasswordPersistence,\n  coordinatePgPasswordRegistration as coordinatePasswordRegistration,\n  makePgPasswordPersistenceServices as makePasswordPersistenceServices,\n  makePgPasswordRegistrationServices as makePasswordRegistrationServices,\n} from \"./drizzle/pg-passwords\";\n\nexport {\n  coordinatePgEmailAddress as coordinateEmailAddress,\n  coordinatePgEmailRegistration as coordinateEmailRegistration,\n  makePgEmailAddressServices as makeEmailAddressServices,\n  makePgEmailRegistrationServices as makeEmailRegistrationServices,\n  makePgEmailSignInServices as makeEmailSignInServices,\n} from \"./drizzle/pg-emails\";\n\nexport {\n  makePgExternalIdentityServices as makeExternalIdentityServices,\n  makePgSubjectProvisioningServices as makeSubjectProvisioningServices,\n};\n\nexport const commitMode = \"interactive\" as const;\n\nexport const makeIdentityServices = <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  External extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(\n  database: EffectPgDatabase<AnyRelations>,\n  mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>,\n) => makePgIdentityServices(database, mapping);\n\nexport {\n  makePgSessionStepUpServices as makeSessionStepUpServices,\n  coordinatePgSessionStepUp as coordinateSessionStepUp,\n} from \"./drizzle/pg-sessions\";\n\nexport {\n  makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices,\n  coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence,\n} from \"./drizzle/pg-password-prepared\";\n\nexport { passwordPreparedPersistenceLayer } from \"./drizzle/password-prepared-target\";\n\nimport { makeOAuthTarget } from \"./drizzle/oauth-drivers\";\nimport { sqlClientOAuthStandaloneGuard } from \"./drizzle/oauth-target\";\n\nconst oauthTarget = makeOAuthTarget<EffectPgDatabase<AnyRelations>, AnyPgTable<{ dialect: \"pg\" }>>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientOAuthStandaloneGuard,\n});\n\nexport const {\n  makeOAuthAccountsServices,\n  makeOAuthSignInServices,\n  makeOAuthRegistrationIntentServices,\n  makeOAuthRegistrationServices,\n  coordinateOAuthRegistration,\n  coordinateOAuthSignIn,\n  coordinateOAuthRegistrationIntents,\n  coordinateOAuthAccounts,\n  makeOAuthConnectedServices,\n  makeOAuthConnectedRevocationServices,\n  coordinateOAuthConnected,\n  coordinateOAuthConnectedRevocations,\n} = oauthTarget;\n\nimport { makePasskeyTarget } from \"./drizzle/passkey-drivers\";\nimport { sqlClientPasskeyStandaloneGuard } from \"./drizzle/passkey-target\";\n\nconst passkeyTarget = makePasskeyTarget<\n  EffectPgDatabase<AnyRelations>,\n  AnyPgTable<{ dialect: \"pg\" }>\n>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientPasskeyStandaloneGuard,\n});\n\nexport const {\n  makePasskeyCredentialServices,\n  makePasskeyPersistenceServices,\n  makePasskeyEnrollmentContextServices,\n  makePasskeyRegistrationCeremonyServices,\n  coordinatePasskeyPersistence,\n  coordinatePasskeyRegistrationCeremony,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n  coordinatePasskeyManagement,\n  coordinatePasskeyRegistration,\n} = passkeyTarget;\n\nimport { makeTotpTarget, sqlClientTotpStandaloneGuard } from \"./drizzle/totp-target\";\n\nconst totpTarget = makeTotpTarget<EffectPgDatabase<AnyRelations>, AnyPgTable<{ dialect: \"pg\" }>>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientTotpStandaloneGuard,\n});\n\nexport const { makeTotpPersistenceServices, coordinateTotpPersistence } = totpTarget;\n\nimport { makePhoneTarget, sqlClientPhoneStandaloneGuard } from \"./drizzle/phone-target\";\n\nconst phoneTarget = makePhoneTarget<EffectPgDatabase<AnyRelations>, AnyPgTable<{ dialect: \"pg\" }>>({\n  mode: \"interactive\",\n  dialect: \"pg\",\n  locking: true,\n  standaloneGuard: sqlClientPhoneStandaloneGuard,\n});\n\nexport const { makePhonePersistenceServices, coordinatePhonePersistence } = phoneTarget;\n\nimport { drizzleMigrationsLayer } from \"./internal/drizzle-migrations\";\nimport { postgresPersistence } from \"./internal/drizzle-postgres\";\n\nexport const AuthPersistence = {\n  ...postgresPersistence(makeWithDefaults({})),\n  migrationsLayer: drizzleMigrationsLayer(\n    makeWithDefaults({}),\n    Effect.promise(() => import(\"drizzle-orm/effect-postgres/migrator\")).pipe(\n      Effect.map((module) => module.migrate),\n    ),\n  ),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgDA,MAAa,aAAa;AAE1B,MAAa,wBAOX,UACA,YACG,uBAAuB,UAAU,OAAO;AAwB7C,MAAa,EACX,2BACA,yBACA,qCACA,+BACA,6BACA,uBACA,oCACA,yBACA,4BACA,sCACA,0BACA,wCAnBkB,gBAA+E;CACjG,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAeI;AAeJ,MAAa,EACX,+BACA,gCACA,sCACA,yCACA,8BACA,uCACA,+BACA,iCACA,6BACA,kCApBoB,kBAGpB;CACA,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAaI;AAWJ,MAAa,EAAE,6BAA6B,8BAPzB,eAA8E;CAC/F,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAE0E;AAW1E,MAAa,EAAE,8BAA8B,+BAPzB,gBAA+E;CACjG,MAAM;CACN,SAAS;CACT,SAAS;CACT,iBAAiB;AACnB,CAE4E;AAK5E,MAAa,kBAAkB;CAC7B,GAAG,oBAAoB,iBAAiB,CAAC,CAAC,CAAC;CAC3C,iBAAiB,uBACf,iBAAiB,CAAC,CAAC,GACnB,OAAO,cAAc,OAAO,uCAAuC,CAAC,CAAC,KACnE,OAAO,KAAK,WAAW,OAAO,OAAO,CACvC,CACF;AACF"}