@yielded/auth-persistence-drizzle 0.1.0-beta.1 → 0.1.0-beta.13

package/dist/drizzle/oauth-connected-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-connected-target.mjs","names":["S.nativeCopy","SignIn.claimSignIn","SignIn.inspectSignIn","SignIn.settleSignIn","F.capture","F.issue","F.preflight","F.claim","F.inspectGrant","Management.list","Management.inspectDisconnect","Management.disconnect","A.inspectAccess","A.claimRefresh","A.settleRefresh","A.admitUse","Maintenance.cleanup","Maintenance.claimRevocation","Maintenance.settleRevocation"],"sources":["../../src/drizzle/oauth-connected-target.ts"],"sourcesContent":["import { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport * as M from \"@yielded/auth/OAuth\";\nimport {\n  OAuthConnectedPersistence,\n  OAuthConnectedRevocations,\n  OAuthConnectedRevocationDecision,\n  OAuthExternalIdentity,\n  snapshotOAuthSync,\n  type PrepareOAuthCommit,\n} from \"@yielded/auth/OAuth\";\n/* oxlint-disable no-explicit-any -- concrete adapters retain the native database, table and ID types. */\nimport { Effect, Layer, Schema } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport * as A from \"./oauth-connected-access\";\nimport * as F from \"./oauth-connected-flow\";\nimport { connectedInputs, connectedRevocationInputs } from \"./oauth-connected-input\";\nimport * as Maintenance from \"./oauth-connected-maintenance\";\nimport * as Management from \"./oauth-connected-management\";\nimport { settle } from \"./oauth-connected-settlement\";\nimport * as SignIn from \"./oauth-connected-sign-in\";\nimport * as S from \"./oauth-connected-state\";\nimport { capturedOAuthService } from \"./oauth-input\";\nimport { CurrentOAuthTransaction } from \"./oauth-owner\";\nimport { captureOAuthMapping } from \"./oauth-state\";\nimport {\n  coordinateOAuthOwner,\n  makeOAuthExecution,\n  type OAuthExecution,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\n\nconst captured = <T extends S.Authority>(mapping: T): T => {\n  const retained = captureOAuthMapping(mapping),\n    codec = retained.subjectId;\n\n  const subjectId = {\n    ...codec,\n    toNative: (subject: Parameters<typeof codec.toNative>[0]) =>\n      Effect.map(codec.toNative(subject), S.nativeCopy),\n    toSubject: (native: unknown) => codec.toSubject(S.nativeCopy(native)),\n    equals: (a: unknown, b: unknown) => codec.equals(S.nativeCopy(a), S.nativeCopy(b)),\n  };\n\n  const ownership = retained.ownership;\n\n  if (ownership.mode === \"separate\" && \"encodeInsert\" in ownership.external) {\n    const encode = ownership.external.encodeInsert as (input: {\n      readonly identity: typeof OAuthExternalIdentity.Type;\n      readonly identityKey: string;\n      readonly subjectId: unknown;\n    }) => import(\"./oauth-owner\").Row;\n\n    return captureOAuthMapping({\n      ...retained,\n      subjectId,\n      ownership: {\n        ...ownership,\n        external: {\n          ...ownership.external,\n          encodeInsert: (input: Parameters<typeof encode>[0]) =>\n            encode({\n              ...input,\n              identity: snapshotOAuthSync(OAuthExternalIdentity, input.identity),\n              subjectId: S.nativeCopy(input.subjectId),\n            }),\n        },\n      },\n    });\n  }\n\n  return captureOAuthMapping({ ...retained, subjectId });\n};\n\nconst prepare = <Value, Encoded, A>(\n  schema: Schema.Codec<Value, Encoded, never, never>,\n  value: Value,\n  callback: PrepareOAuthCommit<Value, A>,\n) =>\n  Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n    Effect.sync(() => {\n      owner.guards.push(owner.journal.prepare(undefined));\n\n      return callback(snapshotOAuthSync(schema, value), owner.journal);\n    }),\n  );\n\nconst mutation =\n  <Input, Value, Encoded>(\n    mapping: S.Mapping,\n    execute: OAuthExecution,\n    body: (\n      mapping: S.Mapping,\n      input: Input,\n    ) => Effect.Effect<\n      Value,\n      import(\"@yielded/auth/OAuth\").OAuthUnavailable | PersistenceMappingError,\n      CurrentOAuthTransaction\n    >,\n    schema: Schema.Codec<Value, Encoded, never, never>,\n  ) =>\n  <A>(input: Input, callback: PrepareOAuthCommit<Value, A>) =>\n    execute.run(Effect.flatMap(body(mapping, input), (value) => prepare(schema, value, callback)));\n\nconst read =\n  <Input, Value>(\n    mapping: S.Mapping,\n    execute: OAuthExecution,\n    body: (\n      mapping: S.Mapping,\n      input: Input,\n    ) => Effect.Effect<\n      Value,\n      import(\"@yielded/auth/OAuth\").OAuthUnavailable | PersistenceMappingError,\n      CurrentOAuthTransaction\n    >,\n  ) =>\n  (input: Input) =>\n    execute.run(body(mapping, input), false);\n\nexport const makeConnected = (\n  mapping: S.Mapping,\n  execute: OAuthExecution,\n): OAuthConnectedPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthConnectedPersistence[\"Service\"]>(\n    {\n      claimSignIn: mutation(mapping, execute, SignIn.claimSignIn, M.OAuthSignInAccessClaim),\n      inspectSignIn: read(mapping, execute, SignIn.inspectSignIn),\n      settleSignIn: mutation(\n        mapping,\n        execute,\n        SignIn.settleSignIn,\n        M.OAuthConnectedSettlementDecision,\n      ),\n      capture: read(mapping, execute, F.capture),\n      issue: mutation(mapping, execute, F.issue, M.OAuthConnectedIssueDecision),\n      preflight: read(mapping, execute, F.preflight),\n      claim: mutation(mapping, execute, F.claim, M.OAuthConnectedClaimDecision),\n      inspectGrant: read(mapping, execute, F.inspectGrant),\n      settle: mutation(mapping, execute, settle, M.OAuthConnectedSettlementDecision),\n      list: read(mapping, execute, Management.list),\n      inspectDisconnect: read(mapping, execute, Management.inspectDisconnect),\n      disconnect: mutation(\n        mapping,\n        execute,\n        Management.disconnect,\n        M.OAuthConnectedDisconnectDecision,\n      ),\n      inspectAccess: read(mapping, execute, A.inspectAccess),\n      claimRefresh: mutation(mapping, execute, A.claimRefresh, M.OAuthConnectedRefreshDecision),\n      settleRefresh: mutation(mapping, execute, A.settleRefresh, M.OAuthConnectedRefreshSettlement),\n      admitUse: mutation(mapping, execute, A.admitUse, M.OAuthConnectedUseAdmission),\n      cleanup: mutation(mapping, execute, Maintenance.cleanup, M.OAuthConnectedCleanupResult),\n    },\n    connectedInputs,\n    execute.active,\n    execute.poison,\n  );\n\nconst settled = Schema.Struct({ settled: Schema.Boolean });\n\nexport const makeRevocations = (\n  mapping: S.Revocations,\n  execute: OAuthExecution,\n): OAuthConnectedRevocations[\"Service\"] =>\n  capturedOAuthService<OAuthConnectedRevocations[\"Service\"]>(\n    {\n      claim: (input, callback) =>\n        execute.run(\n          Effect.flatMap(Maintenance.claimRevocation(mapping, input), (value) =>\n            prepare(OAuthConnectedRevocationDecision, value, callback),\n          ),\n        ),\n      settle: (input, callback) =>\n        execute.run(\n          Effect.flatMap(Maintenance.settleRevocation(mapping, input), (value) =>\n            prepare(settled, value, callback),\n          ),\n        ),\n    },\n    connectedRevocationInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthConnectedServices = (\n  database: any,\n  mapping: S.Mapping,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const retained = captured(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthConnectedPersistence: makeConnected(\n      retained,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthConnectedRevocationServices = (\n  database: any,\n  mapping: S.Revocations,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const retained = captured(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthConnectedRevocations: makeRevocations(\n      retained,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const coordinateTargetOAuthConnected = <Transaction, A, E, R>(\n  database: any,\n  mapping: S.Mapping,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    captured(mapping),\n    configuration,\n    () => Effect.void,\n    (value: S.Mapping, execution) => ({\n      oauthConnectedPersistence: makeConnected(value, execution),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthConnectedRevocations = <Transaction, A, E, R>(\n  database: any,\n  mapping: S.Revocations,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    captured(mapping),\n    configuration,\n    () => Effect.void,\n    (value: S.Revocations, execution) => ({\n      oauthConnectedRevocations: makeRevocations(value, execution),\n    }),\n    owner,\n  );\n\nexport const oauthConnectedPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthConnectedServices>,\n) =>\n  Layer.effect(\n    OAuthConnectedPersistence,\n    Effect.map(services, (value) => value.oauthConnectedPersistence),\n  );\n\nexport const oauthConnectedRevocationsLayer = (\n  services: ReturnType<typeof makeTargetOAuthConnectedRevocationServices>,\n) =>\n  Layer.effect(\n    OAuthConnectedRevocations,\n    Effect.map(services, (value) => value.oauthConnectedRevocations),\n  );\n"],"mappings":";;;;;;;;;;;;;;;;;AAiCA,MAAM,YAAmC,YAAkB;CACzD,MAAM,WAAW,oBAAoB,OAAO,GAC1C,QAAQ,SAAS;CAEnB,MAAM,YAAY;EAChB,GAAG;EACH,WAAW,YACT,OAAO,IAAI,MAAM,SAAS,OAAO,GAAGA,UAAY;EAClD,YAAY,WAAoB,MAAM,UAAUA,WAAa,MAAM,CAAC;EACpE,SAAS,GAAY,MAAe,MAAM,OAAOA,WAAa,CAAC,GAAGA,WAAa,CAAC,CAAC;CACnF;CAEA,MAAM,YAAY,SAAS;CAE3B,IAAI,UAAU,SAAS,cAAc,kBAAkB,UAAU,UAAU;EACzE,MAAM,SAAS,UAAU,SAAS;EAMlC,OAAO,oBAAoB;GACzB,GAAG;GACH;GACA,WAAW;IACT,GAAG;IACH,UAAU;KACR,GAAG,UAAU;KACb,eAAe,UACb,OAAO;MACL,GAAG;MACH,UAAU,kBAAkB,uBAAuB,MAAM,QAAQ;MACjE,WAAWA,WAAa,MAAM,SAAS;KACzC,CAAC;IACL;GACF;EACF,CAAC;CACH;CAEA,OAAO,oBAAoB;EAAE,GAAG;EAAU;CAAU,CAAC;AACvD;AAEA,MAAM,WACJ,QACA,OACA,aAEA,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,SAAS,kBAAkB,QAAQ,KAAK,GAAG,MAAM,OAAO;AACjE,CAAC,CACH;AAEF,MAAM,YAEF,SACA,SACA,MAQA,YAEE,OAAc,aAChB,QAAQ,IAAI,OAAO,QAAQ,KAAK,SAAS,KAAK,IAAI,UAAU,QAAQ,QAAQ,OAAO,QAAQ,CAAC,CAAC;AAEjG,MAAM,QAEF,SACA,SACA,UASD,UACC,QAAQ,IAAI,KAAK,SAAS,KAAK,GAAG,KAAK;AAE3C,MAAa,iBACX,SACA,YAEA,qBACE;CACE,aAAa,SAAS,SAAS,SAASC,aAAoB,EAAE,sBAAsB;CACpF,eAAe,KAAK,SAAS,SAASC,aAAoB;CAC1D,cAAc,SACZ,SACA,SACAC,cACA,EAAE,gCACJ;CACA,SAAS,KAAK,SAAS,SAASC,OAAS;CACzC,OAAO,SAAS,SAAS,SAASC,OAAS,EAAE,2BAA2B;CACxE,WAAW,KAAK,SAAS,SAASC,SAAW;CAC7C,OAAO,SAAS,SAAS,SAASC,OAAS,EAAE,2BAA2B;CACxE,cAAc,KAAK,SAAS,SAASC,YAAc;CACnD,QAAQ,SAAS,SAAS,SAAS,QAAQ,EAAE,gCAAgC;CAC7E,MAAM,KAAK,SAAS,SAASC,IAAe;CAC5C,mBAAmB,KAAK,SAAS,SAASC,iBAA4B;CACtE,YAAY,SACV,SACA,SACAC,YACA,EAAE,gCACJ;CACA,eAAe,KAAK,SAAS,SAASC,aAAe;CACrD,cAAc,SAAS,SAAS,SAASC,cAAgB,EAAE,6BAA6B;CACxF,eAAe,SAAS,SAAS,SAASC,eAAiB,EAAE,+BAA+B;CAC5F,UAAU,SAAS,SAAS,SAASC,UAAY,EAAE,0BAA0B;CAC7E,SAAS,SAAS,SAAS,SAASC,SAAqB,EAAE,2BAA2B;AACxF,GACA,iBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAM,UAAU,OAAO,OAAO,EAAE,SAAS,OAAO,QAAQ,CAAC;AAEzD,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,OAAO,aACb,QAAQ,IACN,OAAO,QAAQC,gBAA4B,SAAS,KAAK,IAAI,UAC3D,QAAQ,kCAAkC,OAAO,QAAQ,CAC3D,CACF;CACF,SAAS,OAAO,aACd,QAAQ,IACN,OAAO,QAAQC,iBAA6B,SAAS,KAAK,IAAI,UAC5D,QAAQ,SAAS,OAAO,QAAQ,CAClC,CACF;AACJ,GACA,2BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,oCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,SAAS,OAAO;CAEjC,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,2BAA2B,cACzB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,8CACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,SAAS,OAAO;CAEjC,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,2BAA2B,gBACzB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,kCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SAAS,OAAO,GAChB,qBACM,OAAO,OACZ,OAAkB,eAAe,EAChC,2BAA2B,cAAc,OAAO,SAAS,EAC3D,IACA,KACF;AAEF,MAAa,6CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SAAS,OAAO,GAChB,qBACM,OAAO,OACZ,OAAsB,eAAe,EACpC,2BAA2B,gBAAgB,OAAO,SAAS,EAC7D,IACA,KACF;AAEF,MAAa,kCACX,aAEA,MAAM,OACJ,2BACA,OAAO,IAAI,WAAW,UAAU,MAAM,yBAAyB,CACjE;AAEF,MAAa,kCACX,aAEA,MAAM,OACJ,2BACA,OAAO,IAAI,WAAW,UAAU,MAAM,yBAAyB,CACjE"}
+{"version":3,"file":"oauth-connected-target.mjs","names":["S.nativeCopy","SignIn.claimSignIn","SignIn.inspectSignIn","SignIn.settleSignIn","F.capture","F.issue","F.preflight","F.claim","F.inspectGrant","Management.list","Management.inspectDisconnect","Management.disconnect","A.inspectAccess","A.claimRefresh","A.settleRefresh","A.admitUse","Maintenance.cleanup","Maintenance.claimRevocation","Maintenance.settleRevocation"],"sources":["../../src/drizzle/oauth-connected-target.ts"],"sourcesContent":["import * as M from \"@yielded/auth/OAuth\";\nimport {\n  OAuthConnectedPersistence,\n  OAuthConnectedRevocations,\n  OAuthConnectedRevocationDecision,\n  OAuthExternalIdentity,\n  snapshotOAuthSync,\n  type PrepareOAuthCommit,\n} from \"@yielded/auth/OAuth\";\n/* oxlint-disable no-explicit-any -- concrete adapters retain the native database, table and ID types. */\nimport { Effect, Layer, Schema } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport * as A from \"./oauth-connected-access\";\nimport * as F from \"./oauth-connected-flow\";\nimport { connectedInputs, connectedRevocationInputs } from \"./oauth-connected-input\";\nimport * as Maintenance from \"./oauth-connected-maintenance\";\nimport * as Management from \"./oauth-connected-management\";\nimport { settle } from \"./oauth-connected-settlement\";\nimport * as SignIn from \"./oauth-connected-sign-in\";\nimport * as S from \"./oauth-connected-state\";\nimport { capturedOAuthService } from \"./oauth-input\";\nimport { CurrentOAuthTransaction } from \"./oauth-owner\";\nimport { captureOAuthMapping } from \"./oauth-state\";\nimport {\n  coordinateOAuthOwner,\n  makeOAuthExecution,\n  type OAuthExecution,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\n\nconst captured = <T extends S.Authority>(mapping: T): T => {\n  const retained = captureOAuthMapping(mapping),\n    codec = retained.subjectId;\n\n  const subjectId = {\n    ...codec,\n    toNative: (subject: Parameters<typeof codec.toNative>[0]) =>\n      Effect.map(codec.toNative(subject), S.nativeCopy),\n    toSubject: (native: unknown) => codec.toSubject(S.nativeCopy(native)),\n    equals: (a: unknown, b: unknown) => codec.equals(S.nativeCopy(a), S.nativeCopy(b)),\n  };\n\n  const ownership = retained.ownership;\n\n  if (ownership.mode === \"separate\" && \"encodeInsert\" in ownership.external) {\n    const encode = ownership.external.encodeInsert as (input: {\n      readonly identity: typeof OAuthExternalIdentity.Type;\n      readonly identityKey: string;\n      readonly subjectId: unknown;\n    }) => import(\"./oauth-owner\").Row;\n\n    return captureOAuthMapping({\n      ...retained,\n      subjectId,\n      ownership: {\n        ...ownership,\n        external: {\n          ...ownership.external,\n          encodeInsert: (input: Parameters<typeof encode>[0]) =>\n            encode({\n              ...input,\n              identity: snapshotOAuthSync(OAuthExternalIdentity, input.identity),\n              subjectId: S.nativeCopy(input.subjectId),\n            }),\n        },\n      },\n    });\n  }\n\n  return captureOAuthMapping({ ...retained, subjectId });\n};\n\nconst prepare = <Value, Encoded, A>(\n  schema: Schema.Codec<Value, Encoded, never, never>,\n  value: Value,\n  callback: PrepareOAuthCommit<Value, A>,\n) =>\n  Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n    Effect.sync(() => {\n      owner.guards.push(owner.journal.prepare(undefined));\n\n      return callback(snapshotOAuthSync(schema, value), owner.journal);\n    }),\n  );\n\nconst mutation =\n  <Input, Value, Encoded>(\n    mapping: S.Mapping,\n    execute: OAuthExecution,\n    body: (\n      mapping: S.Mapping,\n      input: Input,\n    ) => Effect.Effect<\n      Value,\n      import(\"@yielded/auth/OAuth\").OAuthUnavailable | PersistenceMappingError,\n      CurrentOAuthTransaction\n    >,\n    schema: Schema.Codec<Value, Encoded, never, never>,\n  ) =>\n  <A>(input: Input, callback: PrepareOAuthCommit<Value, A>) =>\n    execute.run(Effect.flatMap(body(mapping, input), (value) => prepare(schema, value, callback)));\n\nconst read =\n  <Input, Value>(\n    mapping: S.Mapping,\n    execute: OAuthExecution,\n    body: (\n      mapping: S.Mapping,\n      input: Input,\n    ) => Effect.Effect<\n      Value,\n      import(\"@yielded/auth/OAuth\").OAuthUnavailable | PersistenceMappingError,\n      CurrentOAuthTransaction\n    >,\n  ) =>\n  (input: Input) =>\n    execute.run(body(mapping, input), false);\n\nexport const makeConnected = (\n  mapping: S.Mapping,\n  execute: OAuthExecution,\n): OAuthConnectedPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthConnectedPersistence[\"Service\"]>(\n    {\n      claimSignIn: mutation(mapping, execute, SignIn.claimSignIn, M.OAuthSignInAccessClaim),\n      inspectSignIn: read(mapping, execute, SignIn.inspectSignIn),\n      settleSignIn: mutation(\n        mapping,\n        execute,\n        SignIn.settleSignIn,\n        M.OAuthConnectedSettlementDecision,\n      ),\n      capture: read(mapping, execute, F.capture),\n      issue: mutation(mapping, execute, F.issue, M.OAuthConnectedIssueDecision),\n      preflight: read(mapping, execute, F.preflight),\n      claim: mutation(mapping, execute, F.claim, M.OAuthConnectedClaimDecision),\n      inspectGrant: read(mapping, execute, F.inspectGrant),\n      settle: mutation(mapping, execute, settle, M.OAuthConnectedSettlementDecision),\n      list: read(mapping, execute, Management.list),\n      inspectDisconnect: read(mapping, execute, Management.inspectDisconnect),\n      disconnect: mutation(\n        mapping,\n        execute,\n        Management.disconnect,\n        M.OAuthConnectedDisconnectDecision,\n      ),\n      inspectAccess: read(mapping, execute, A.inspectAccess),\n      claimRefresh: mutation(mapping, execute, A.claimRefresh, M.OAuthConnectedRefreshDecision),\n      settleRefresh: mutation(mapping, execute, A.settleRefresh, M.OAuthConnectedRefreshSettlement),\n      admitUse: mutation(mapping, execute, A.admitUse, M.OAuthConnectedUseAdmission),\n      cleanup: mutation(mapping, execute, Maintenance.cleanup, M.OAuthConnectedCleanupResult),\n    },\n    connectedInputs,\n    execute.active,\n    execute.poison,\n  );\n\nconst settled = Schema.Struct({ settled: Schema.Boolean });\n\nexport const makeRevocations = (\n  mapping: S.Revocations,\n  execute: OAuthExecution,\n): OAuthConnectedRevocations[\"Service\"] =>\n  capturedOAuthService<OAuthConnectedRevocations[\"Service\"]>(\n    {\n      claim: (input, callback) =>\n        execute.run(\n          Effect.flatMap(Maintenance.claimRevocation(mapping, input), (value) =>\n            prepare(OAuthConnectedRevocationDecision, value, callback),\n          ),\n        ),\n      settle: (input, callback) =>\n        execute.run(\n          Effect.flatMap(Maintenance.settleRevocation(mapping, input), (value) =>\n            prepare(settled, value, callback),\n          ),\n        ),\n    },\n    connectedRevocationInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthConnectedServices = (\n  mapping: S.Mapping,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const retained = captured(mapping);\n\n  return Effect.map(makeOAuthExecution(configuration), (execution) => ({\n    oauthConnectedPersistence: makeConnected(retained, execution),\n  }));\n};\n\nexport const makeTargetOAuthConnectedRevocationServices = (\n  mapping: S.Revocations,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const retained = captured(mapping);\n\n  return Effect.map(makeOAuthExecution(configuration), (execution) => ({\n    oauthConnectedRevocations: makeRevocations(retained, execution),\n  }));\n};\n\nexport const coordinateTargetOAuthConnected = <Transaction, A, E, R>(\n  database: any,\n  mapping: S.Mapping,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    captured(mapping),\n    configuration,\n    () => Effect.void,\n    (value: S.Mapping, execution) => ({\n      oauthConnectedPersistence: makeConnected(value, execution),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthConnectedRevocations = <Transaction, A, E, R>(\n  database: any,\n  mapping: S.Revocations,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    captured(mapping),\n    configuration,\n    () => Effect.void,\n    (value: S.Revocations, execution) => ({\n      oauthConnectedRevocations: makeRevocations(value, execution),\n    }),\n    owner,\n  );\n\nexport const oauthConnectedPersistenceLayer = <E, R>(\n  services: Effect.Effect<\n    Effect.Success<ReturnType<typeof makeTargetOAuthConnectedServices>>,\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    OAuthConnectedPersistence,\n    Effect.map(services, (value) => value.oauthConnectedPersistence),\n  );\n\nexport const oauthConnectedRevocationsLayer = <E, R>(\n  services: Effect.Effect<\n    Effect.Success<ReturnType<typeof makeTargetOAuthConnectedRevocationServices>>,\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    OAuthConnectedRevocations,\n    Effect.map(services, (value) => value.oauthConnectedRevocations),\n  );\n"],"mappings":";;;;;;;;;;;;;;;;AAgCA,MAAM,YAAmC,YAAkB;CACzD,MAAM,WAAW,oBAAoB,OAAO,GAC1C,QAAQ,SAAS;CAEnB,MAAM,YAAY;EAChB,GAAG;EACH,WAAW,YACT,OAAO,IAAI,MAAM,SAAS,OAAO,GAAGA,UAAY;EAClD,YAAY,WAAoB,MAAM,UAAUA,WAAa,MAAM,CAAC;EACpE,SAAS,GAAY,MAAe,MAAM,OAAOA,WAAa,CAAC,GAAGA,WAAa,CAAC,CAAC;CACnF;CAEA,MAAM,YAAY,SAAS;CAE3B,IAAI,UAAU,SAAS,cAAc,kBAAkB,UAAU,UAAU;EACzE,MAAM,SAAS,UAAU,SAAS;EAMlC,OAAO,oBAAoB;GACzB,GAAG;GACH;GACA,WAAW;IACT,GAAG;IACH,UAAU;KACR,GAAG,UAAU;KACb,eAAe,UACb,OAAO;MACL,GAAG;MACH,UAAU,kBAAkB,uBAAuB,MAAM,QAAQ;MACjE,WAAWA,WAAa,MAAM,SAAS;KACzC,CAAC;IACL;GACF;EACF,CAAC;CACH;CAEA,OAAO,oBAAoB;EAAE,GAAG;EAAU;CAAU,CAAC;AACvD;AAEA,MAAM,WACJ,QACA,OACA,aAEA,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,SAAS,kBAAkB,QAAQ,KAAK,GAAG,MAAM,OAAO;AACjE,CAAC,CACH;AAEF,MAAM,YAEF,SACA,SACA,MAQA,YAEE,OAAc,aAChB,QAAQ,IAAI,OAAO,QAAQ,KAAK,SAAS,KAAK,IAAI,UAAU,QAAQ,QAAQ,OAAO,QAAQ,CAAC,CAAC;AAEjG,MAAM,QAEF,SACA,SACA,UASD,UACC,QAAQ,IAAI,KAAK,SAAS,KAAK,GAAG,KAAK;AAE3C,MAAa,iBACX,SACA,YAEA,qBACE;CACE,aAAa,SAAS,SAAS,SAASC,aAAoB,EAAE,sBAAsB;CACpF,eAAe,KAAK,SAAS,SAASC,aAAoB;CAC1D,cAAc,SACZ,SACA,SACAC,cACA,EAAE,gCACJ;CACA,SAAS,KAAK,SAAS,SAASC,OAAS;CACzC,OAAO,SAAS,SAAS,SAASC,OAAS,EAAE,2BAA2B;CACxE,WAAW,KAAK,SAAS,SAASC,SAAW;CAC7C,OAAO,SAAS,SAAS,SAASC,OAAS,EAAE,2BAA2B;CACxE,cAAc,KAAK,SAAS,SAASC,YAAc;CACnD,QAAQ,SAAS,SAAS,SAAS,QAAQ,EAAE,gCAAgC;CAC7E,MAAM,KAAK,SAAS,SAASC,IAAe;CAC5C,mBAAmB,KAAK,SAAS,SAASC,iBAA4B;CACtE,YAAY,SACV,SACA,SACAC,YACA,EAAE,gCACJ;CACA,eAAe,KAAK,SAAS,SAASC,aAAe;CACrD,cAAc,SAAS,SAAS,SAASC,cAAgB,EAAE,6BAA6B;CACxF,eAAe,SAAS,SAAS,SAASC,eAAiB,EAAE,+BAA+B;CAC5F,UAAU,SAAS,SAAS,SAASC,UAAY,EAAE,0BAA0B;CAC7E,SAAS,SAAS,SAAS,SAASC,SAAqB,EAAE,2BAA2B;AACxF,GACA,iBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAM,UAAU,OAAO,OAAO,EAAE,SAAS,OAAO,QAAQ,CAAC;AAEzD,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,OAAO,aACb,QAAQ,IACN,OAAO,QAAQC,gBAA4B,SAAS,KAAK,IAAI,UAC3D,QAAQ,kCAAkC,OAAO,QAAQ,CAC3D,CACF;CACF,SAAS,OAAO,aACd,QAAQ,IACN,OAAO,QAAQC,iBAA6B,SAAS,KAAK,IAAI,UAC5D,QAAQ,SAAS,OAAO,QAAQ,CAClC,CACF;AACJ,GACA,2BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,oCACX,SACA,kBACG;CACH,MAAM,WAAW,SAAS,OAAO;CAEjC,OAAO,OAAO,IAAI,mBAAmB,aAAa,IAAI,eAAe,EACnE,2BAA2B,cAAc,UAAU,SAAS,EAC9D,EAAE;AACJ;AAEA,MAAa,8CACX,SACA,kBACG;CACH,MAAM,WAAW,SAAS,OAAO;CAEjC,OAAO,OAAO,IAAI,mBAAmB,aAAa,IAAI,eAAe,EACnE,2BAA2B,gBAAgB,UAAU,SAAS,EAChE,EAAE;AACJ;AAEA,MAAa,kCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SAAS,OAAO,GAChB,qBACM,OAAO,OACZ,OAAkB,eAAe,EAChC,2BAA2B,cAAc,OAAO,SAAS,EAC3D,IACA,KACF;AAEF,MAAa,6CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SAAS,OAAO,GAChB,qBACM,OAAO,OACZ,OAAsB,eAAe,EACpC,2BAA2B,gBAAgB,OAAO,SAAS,EAC7D,IACA,KACF;AAEF,MAAa,kCACX,aAMA,MAAM,OACJ,2BACA,OAAO,IAAI,WAAW,UAAU,MAAM,yBAAyB,CACjE;AAEF,MAAa,kCACX,aAMA,MAAM,OACJ,2BACA,OAAO,IAAI,WAAW,UAAU,MAAM,yBAAyB,CACjE"}

package/dist/drizzle/oauth-drivers.mjs

@@ -1,10 +1,12 @@
 import { coordinateTargetOAuthAccounts, coordinateTargetOAuthRegistration, coordinateTargetOAuthRegistrationIntents, coordinateTargetOAuthSignIn, makeTargetOAuthAccountsServices, makeTargetOAuthRegistrationIntentServices, makeTargetOAuthRegistrationServices, makeTargetOAuthSignInServices } from "./oauth-target.mjs";
+import { nativeDatabase } from "./native-database.mjs";
 import { makeOAuthConnectedTarget } from "./oauth-connected-drivers.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect } from "effect";
 import { OAuthAccountsPersistence, OAuthRegistrationIntents, OAuthSignInPersistence } from "@yielded/auth/OAuth";
 //#region src/drizzle/oauth-drivers.ts
 /** Driver-specific entry points instantiate both the database and table family. */
-const makeOAuthTarget = (configuration) => {
+const makeOAuthTarget = (databaseService, configuration) => {
 	function coordinateOAuthSignIn(acquire, options, body) {
 		return Effect.flatMap(acquire, (database) => coordinateTargetOAuthSignIn(database, options.mapping, configuration, (transaction, services) => {
 			const provided = Context.make(OAuthSignInPersistence, services.oauthSignInPersistence);
@@ -34,14 +36,14 @@ const makeOAuthTarget = (configuration) => {
 		}));
 	}
 	return {
-		...makeOAuthConnectedTarget(configuration),
+		...makeOAuthConnectedTarget(databaseService, configuration),
 		coordinateOAuthSignIn,
 		coordinateOAuthRegistrationIntents,
 		coordinateOAuthAccounts,
-		makeOAuthAccountsServices: (database, mapping) => makeTargetOAuthAccountsServices(database, mapping, configuration),
-		makeOAuthSignInServices: (database, mapping) => makeTargetOAuthSignInServices(database, mapping, configuration),
-		makeOAuthRegistrationIntentServices: (database, mapping) => makeTargetOAuthRegistrationIntentServices(database, mapping, configuration),
-		makeOAuthRegistrationServices: (database, mapping) => makeTargetOAuthRegistrationServices(database, mapping, configuration),
+		makeOAuthAccountsServices: (mapping) => makeTargetOAuthAccountsServices(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		makeOAuthSignInServices: (mapping) => makeTargetOAuthSignInServices(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		makeOAuthRegistrationIntentServices: (mapping) => makeTargetOAuthRegistrationIntentServices(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		makeOAuthRegistrationServices: (mapping) => makeTargetOAuthRegistrationServices(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
 		coordinateOAuthRegistration
 	};
 };

package/dist/drizzle/oauth-drivers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-drivers.mjs","names":[],"sources":["../../src/drizzle/oauth-drivers.ts"],"sourcesContent":["import type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n} from \"@yielded/auth/OAuth\";\nimport type { Table } from \"drizzle-orm\";\nimport { Effect, Context } from \"effect\";\n\nimport { makeOAuthConnectedTarget } from \"./oauth-connected-drivers\";\nimport type {\n  OAuthAccountsMapping,\n  OAuthRegistrationAuthority,\n  OAuthRegistrationIntentMapping,\n  OAuthRegistrationMapping,\n  OAuthSignInMapping,\n} from \"./oauth-model\";\nimport {\n  type OAuthCoordinatorError,\n  coordinateTargetOAuthAccounts,\n  coordinateTargetOAuthSignIn,\n  coordinateTargetOAuthRegistrationIntents,\n  coordinateTargetOAuthRegistration,\n  makeTargetOAuthRegistrationIntentServices,\n  makeTargetOAuthRegistrationServices,\n  makeTargetOAuthSignInServices,\n  makeTargetOAuthAccountsServices,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n// oxlint-disable-next-line no-explicit-any -- inspect the installed generic transaction signature without erasing its callback parameter.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\n/** Driver-specific entry points instantiate both the database and table family. */\nexport const makeOAuthTarget = <D, T extends Table, Synchronous extends boolean = false>(\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthSignInPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthSignInPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthSignInPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthSignInPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthSignInPersistence> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthSignIn<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthSignInPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(OAuthSignInPersistence, services.oauthSignInPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthRegistrationIntents> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthRegistrationIntents>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthRegistrationIntents | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthRegistrationIntents | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthRegistrationIntents> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthRegistrationIntents<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthRegistrationIntents>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthRegistrationIntents,\n            services.oauthRegistrationIntents,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthAccountsPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthAccountsPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthAccountsPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthAccountsPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthAccountsPersistence> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthAccounts<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthAccountsPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthAccountsPersistence,\n            services.oauthAccountsPersistence,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthRegistration<\n        Registration,\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, TargetId>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n        ) => {\n          const provided = Context.make(options.target, services.registrationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    ...makeOAuthConnectedTarget<D, T, {}, Synchronous>(configuration),\n    coordinateOAuthSignIn,\n    coordinateOAuthRegistrationIntents,\n    coordinateOAuthAccounts,\n    makeOAuthAccountsServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      TA extends T,\n      U extends T,\n      N,\n    >(\n      database: D,\n      mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>,\n    ) => makeTargetOAuthAccountsServices(database, mapping, configuration),\n    makeOAuthSignInServices: <S extends T, O extends T, C extends T, AC extends T, F extends T, N>(\n      database: D,\n      mapping: OAuthSignInMapping<S, O, C, AC, F, N>,\n    ) => makeTargetOAuthSignInServices(database, mapping, configuration),\n    makeOAuthRegistrationIntentServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      TA extends T,\n      I extends T,\n      N,\n    >(\n      database: D,\n      mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>,\n    ) => makeTargetOAuthRegistrationIntentServices(database, mapping, configuration),\n    makeOAuthRegistrationServices: <\n      Registration,\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      TA extends T,\n      I extends T,\n      R extends T,\n      N,\n    >(\n      database: D,\n      mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>,\n    ) => makeTargetOAuthRegistrationServices<Registration>(database, mapping, configuration),\n    coordinateOAuthRegistration,\n  };\n};\n"],"mappings":";;;;;;AAqCA,MAAa,mBACX,kBACG;CA6DH,SAAS,sBAgBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,wBAAwB,SAAS,sBAAsB;GACrF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAiEA,SAAS,mCAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yCAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAiEA,SAAS,wBAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,8BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAmEA,SAAS,4BAoBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCAOE,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,GAAG,yBAAgD,aAAa;EAChE;EACA;EACA;EACA,4BAUE,UACA,YACG,gCAAgC,UAAU,SAAS,aAAa;EACrE,0BACE,UACA,YACG,8BAA8B,UAAU,SAAS,aAAa;EACnE,sCAUE,UACA,YACG,0CAA0C,UAAU,SAAS,aAAa;EAC/E,gCAWE,UACA,YACG,oCAAkD,UAAU,SAAS,aAAa;EACvF;CACF;AACF"}
+{"version":3,"file":"oauth-drivers.mjs","names":[],"sources":["../../src/drizzle/oauth-drivers.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n} from \"@yielded/auth/OAuth\";\nimport type { Table } from \"drizzle-orm\";\nimport { Effect, Context } from \"effect\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport { makeOAuthConnectedTarget } from \"./oauth-connected-drivers\";\nimport type {\n  OAuthAccountsMapping,\n  OAuthRegistrationAuthority,\n  OAuthRegistrationIntentMapping,\n  OAuthRegistrationMapping,\n  OAuthSignInMapping,\n} from \"./oauth-model\";\nimport {\n  type OAuthCoordinatorError,\n  coordinateTargetOAuthAccounts,\n  coordinateTargetOAuthSignIn,\n  coordinateTargetOAuthRegistrationIntents,\n  coordinateTargetOAuthRegistration,\n  makeTargetOAuthRegistrationIntentServices,\n  makeTargetOAuthRegistrationServices,\n  makeTargetOAuthSignInServices,\n  makeTargetOAuthAccountsServices,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n// oxlint-disable-next-line no-explicit-any -- inspect the installed generic transaction signature without erasing its callback parameter.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\n/** Driver-specific entry points instantiate both the database and table family. */\nexport const makeOAuthTarget = <\n  DatabaseId,\n  D,\n  T extends Table,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthSignInPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthSignInPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthSignInPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthSignInPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthSignInPersistence> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthSignIn<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthSignInPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(OAuthSignInPersistence, services.oauthSignInPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthRegistrationIntents> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthRegistrationIntents>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthRegistrationIntents | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthRegistrationIntents | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthRegistrationIntents> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthRegistrationIntents<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthRegistrationIntents>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthRegistrationIntents,\n            services.oauthRegistrationIntents,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthAccountsPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthAccountsPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthAccountsPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthAccountsPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthAccountsPersistence> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthAccounts<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthAccountsPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthAccountsPersistence,\n            services.oauthAccountsPersistence,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetOAuthRegistration<\n        Registration,\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, TargetId>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n        ) => {\n          const provided = Context.make(options.target, services.registrationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    ...makeOAuthConnectedTarget<DatabaseId, D, T, {}, Synchronous>(databaseService, configuration),\n    coordinateOAuthSignIn,\n    coordinateOAuthRegistrationIntents,\n    coordinateOAuthAccounts,\n    makeOAuthAccountsServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      TA extends T,\n      U extends T,\n      N,\n    >(\n      mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>,\n    ) =>\n      makeTargetOAuthAccountsServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthSignInServices: <S extends T, O extends T, C extends T, AC extends T, F extends T, N>(\n      mapping: OAuthSignInMapping<S, O, C, AC, F, N>,\n    ) =>\n      makeTargetOAuthSignInServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthRegistrationIntentServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      TA extends T,\n      I extends T,\n      N,\n    >(\n      mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>,\n    ) =>\n      makeTargetOAuthRegistrationIntentServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthRegistrationServices: <\n      Registration,\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      TA extends T,\n      I extends T,\n      R extends T,\n      N,\n    >(\n      mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>,\n    ) =>\n      makeTargetOAuthRegistrationServices<Registration>(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateOAuthRegistration,\n  };\n};\n"],"mappings":";;;;;;;;AAuCA,MAAa,mBAMX,iBACA,kBACG;CA6DH,SAAS,sBAgBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,wBAAwB,SAAS,sBAAsB;GACrF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAiEA,SAAS,mCAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yCAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAiEA,SAAS,wBAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,8BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAmEA,SAAS,4BAoBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCAOE,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,GAAG,yBAA4D,iBAAiB,aAAa;EAC7F;EACA;EACA;EACA,4BAUE,YAEA,gCAAgC,SAAS,aAAa,CAAC,CAAC,KACtD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,0BACE,YAEA,8BAA8B,SAAS,aAAa,CAAC,CAAC,KACpD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,sCAUE,YAEA,0CAA0C,SAAS,aAAa,CAAC,CAAC,KAChE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,gCAWE,YAEA,oCAAkD,SAAS,aAAa,CAAC,CAAC,KACxE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}

package/dist/drizzle/oauth-target.d.mts

@@ -3,6 +3,7 @@ import { OAuthRegistrationAuthority } from "./oauth-model.mjs";
 import "./oauth-owner.mjs";
 import "./oauth-registration.mjs";
 import { TransactionCoordinatorError, TransactionTargetConfiguration } from "./transaction-execution.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect, Layer } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
 import { OAuthAccountRevision, OAuthAccountsPersistence, OAuthClaim, OAuthClaimDecision, OAuthCleanupInput, OAuthCredentialSnapshot, OAuthIssueDecision, OAuthLinkClaimDecision, OAuthLinkDecision, OAuthLinkIssueDecision, OAuthLinkPendingFlow, OAuthPendingFlow, OAuthRegistrationIntent, OAuthRegistrationIntents, OAuthSettlementDecision, OAuthSignInPersistence, OAuthUnavailable, OAuthUnlinkDecision, OAuthUnlinkInspection, OAuthVerifiedExternalIdentity, PrepareOAuthCommit } from "@yielded/auth/OAuth";
@@ -10,7 +11,7 @@ import { Statement } from "effect/sql/Statement";
 //#region src/drizzle/oauth-target.d.ts
 export type OAuthTargetConfiguration = TransactionTargetConfiguration<OAuthUnavailable>;
 export type OAuthCoordinatorError<E> = TransactionCoordinatorError<E, OAuthUnavailable>;
-export declare const makeTargetOAuthSignInServices: (database: any, mapping: any, configuration: OAuthTargetConfiguration) => Effect.Effect<{
+export declare const makeTargetOAuthSignInServices: (mapping: any, configuration: OAuthTargetConfiguration) => Effect.Effect<{
   oauthSignInPersistence: {
     readonly issue: <A>(input: OAuthPendingFlow, prepare: PrepareOAuthCommit<OAuthIssueDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -42,8 +43,8 @@ export declare const makeTargetOAuthSignInServices: (database: any, mapping: any
       readonly hasMore: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
   };
-}, never, LifecycleHooks>;
-export declare const makeTargetOAuthRegistrationIntentServices: (database: any, mapping: any, configuration: OAuthTargetConfiguration) => Effect.Effect<{
+}, never, LifecycleHooks | NativeDatabase>;
+export declare const makeTargetOAuthRegistrationIntentServices: (mapping: any, configuration: OAuthTargetConfiguration) => Effect.Effect<{
   oauthRegistrationIntents: {
     readonly settle: <A>(input: {
       readonly claim: OAuthClaim;
@@ -52,8 +53,8 @@ export declare const makeTargetOAuthRegistrationIntentServices: (database: any,
       readonly nowMillis: number;
     }, prepare: PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthRegistrationSettlement, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
   };
-}, never, LifecycleHooks>;
-export declare const makeTargetOAuthAccountsServices: (database: any, mapping: any, configuration: OAuthTargetConfiguration) => Effect.Effect<{
+}, never, LifecycleHooks | NativeDatabase>;
+export declare const makeTargetOAuthAccountsServices: (mapping: any, configuration: OAuthTargetConfiguration) => Effect.Effect<{
   oauthAccountsPersistence: {
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -98,12 +99,12 @@ export declare const makeTargetOAuthAccountsServices: (database: any, mapping: a
       readonly hasMore: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
   };
-}, never, LifecycleHooks>;
-export declare const oauthAccountsPersistenceLayer: (services: ReturnType<typeof makeTargetOAuthAccountsServices>) => Layer.Layer<OAuthAccountsPersistence, never, LifecycleHooks>;
-export declare const oauthSignInPersistenceLayer: (services: ReturnType<typeof makeTargetOAuthSignInServices>) => Layer.Layer<OAuthSignInPersistence, never, LifecycleHooks>;
-export declare const oauthRegistrationIntentsLayer: (services: ReturnType<typeof makeTargetOAuthRegistrationIntentServices>) => Layer.Layer<OAuthRegistrationIntents, never, LifecycleHooks>;
-export declare const oauthRegistrationAuthorityLayer: <Id, Registration>(tag: Context.Key<Id, OAuthRegistrationAuthority<Registration>>, services: Effect.Effect<{
+}, never, LifecycleHooks | NativeDatabase>;
+export declare const oauthAccountsPersistenceLayer: <E, R>(services: Effect.Effect<Effect.Success<ReturnType<typeof makeTargetOAuthAccountsServices>>, E, R>) => Layer.Layer<OAuthAccountsPersistence, E, Exclude<R, import("effect/Scope").Scope>>;
+export declare const oauthSignInPersistenceLayer: <E, R>(services: Effect.Effect<Effect.Success<ReturnType<typeof makeTargetOAuthSignInServices>>, E, R>) => Layer.Layer<OAuthSignInPersistence, E, Exclude<R, import("effect/Scope").Scope>>;
+export declare const oauthRegistrationIntentsLayer: <E, R>(services: Effect.Effect<Effect.Success<ReturnType<typeof makeTargetOAuthRegistrationIntentServices>>, E, R>) => Layer.Layer<OAuthRegistrationIntents, E, Exclude<R, import("effect/Scope").Scope>>;
+export declare const oauthRegistrationAuthorityLayer: <Id, Registration, E, R>(tag: Context.Key<Id, OAuthRegistrationAuthority<Registration>>, services: Effect.Effect<{
   readonly registrationAuthority: OAuthRegistrationAuthority<Registration>;
-}, never, LifecycleHooks>) => Layer.Layer<Id, never, LifecycleHooks>;
+}, E, R>) => Layer.Layer<Id, E, Exclude<R, import("effect/Scope").Scope>>;
 //#endregion
 //# sourceMappingURL=oauth-target.d.mts.map

package/dist/drizzle/oauth-target.mjs

@@ -11,14 +11,15 @@ import { Effect, Layer } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
 import { OAuthAccountRevision, OAuthAccountsPersistence, OAuthClaim, OAuthClaimDecision, OAuthCleanupInput, OAuthCredentialSnapshot, OAuthIssueDecision, OAuthLinkClaimDecision, OAuthLinkDecision, OAuthLinkIssueDecision, OAuthLinkPendingFlow, OAuthPendingFlow, OAuthRegistrationFingerprint, OAuthRegistrationIntent, OAuthRegistrationIntents, OAuthSettlementDecision, OAuthSignInPersistence, OAuthUnlinkDecision, OAuthUnlinkInspection, OAuthVerifiedExternalIdentity, snapshotOAuthSync } from "@yielded/auth/OAuth";
 //#region src/drizzle/oauth-target.ts
-const sqlClientOAuthStandaloneGuard = (database) => sqlClientTransactionStandaloneGuard(unavailable, database);
-const makeOAuthExecution = (database, hooks, configuration) => {
-	const execution = makeTransactionExecution(CurrentOAuthTransaction, database, configuration, unavailable, nonce);
+const sqlClientOAuthStandaloneGuard = (service) => sqlClientTransactionStandaloneGuard(unavailable, service);
+const makeOAuthExecution = Effect.fnUntraced(function* (configuration) {
+	const hooks = yield* LifecycleHooks;
+	const execution = yield* makeTransactionExecution(CurrentOAuthTransaction, configuration, unavailable, nonce);
 	return {
 		...execution,
 		run: (operation, mutation) => execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks))
 	};
-};
+});
 const prepareValue = (value, prepare) => Effect.flatMap(CurrentOAuthTransaction, (owner) => Effect.sync(() => {
 	owner.guards.push(owner.journal.prepare(void 0));
 	return prepare(value, owner.journal);
@@ -146,17 +147,17 @@ const makeOAuthRegistration = (mapping, execute, allocated) => capturedOAuthServ
 		}, prepare);
 	}))
 }, registrationInputs(mapping.application), execute.active, execute.poison);
-const makeTargetOAuthSignInServices = (database, mapping, configuration) => {
+const makeTargetOAuthSignInServices = (mapping, configuration) => {
 	const captured = captureOAuthMapping(mapping);
-	return Effect.map(LifecycleHooks, (hooks) => ({ oauthSignInPersistence: makeOAuthSignIn(captured, makeOAuthExecution(database, hooks, configuration)) }));
+	return Effect.map(makeOAuthExecution(configuration), (execution) => ({ oauthSignInPersistence: makeOAuthSignIn(captured, execution) }));
 };
-const makeTargetOAuthRegistrationIntentServices = (database, mapping, configuration) => {
+const makeTargetOAuthRegistrationIntentServices = (mapping, configuration) => {
 	const captured = captureOAuthMapping(mapping);
-	return Effect.map(LifecycleHooks, (hooks) => ({ oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, makeOAuthExecution(database, hooks, configuration)) }));
+	return Effect.map(makeOAuthExecution(configuration), (execution) => ({ oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, execution) }));
 };
-const makeTargetOAuthRegistrationServices = (database, mapping, configuration) => {
+const makeTargetOAuthRegistrationServices = (mapping, configuration) => {
 	const captured = captureOAuthMapping(mapping);
-	return Effect.map(LifecycleHooks, (hooks) => ({ registrationAuthority: makeOAuthRegistration(captured, makeOAuthExecution(database, hooks, configuration)) }));
+	return Effect.map(makeOAuthExecution(configuration), (execution) => ({ registrationAuthority: makeOAuthRegistration(captured, execution) }));
 };
 const coordinateOAuthOwner = (database, mapping, configuration, allocate, services, owner) => {
 	const captured = captureOAuthMapping(mapping);
@@ -232,9 +233,9 @@ const makeOAuthAccounts = (mapping, execute, resources) => capturedOAuthService(
 		}, prepare);
 	}))
 }, accountsInputs, execute.active, execute.poison);
-const makeTargetOAuthAccountsServices = (database, mapping, configuration) => {
+const makeTargetOAuthAccountsServices = (mapping, configuration) => {
 	const captured = captureOAuthMapping(mapping);
-	return Effect.map(LifecycleHooks, (hooks) => ({ oauthAccountsPersistence: makeOAuthAccounts(captured, makeOAuthExecution(database, hooks, configuration)) }));
+	return Effect.map(makeOAuthExecution(configuration), (execution) => ({ oauthAccountsPersistence: makeOAuthAccounts(captured, execution) }));
 };
 const oauthAccountsPersistenceLayer = (services) => Layer.effect(OAuthAccountsPersistence, Effect.map(services, (value) => value.oauthAccountsPersistence));
 const oauthSignInPersistenceLayer = (services) => Layer.effect(OAuthSignInPersistence, Effect.map(services, (value) => value.oauthSignInPersistence));

package/dist/drizzle/oauth-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-target.mjs","names":[],"sources":["../../src/drizzle/oauth-target.ts"],"sourcesContent":["import { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountRevision,\n  OAuthLinkClaimDecision,\n  OAuthLinkDecision,\n  OAuthLinkIssueDecision,\n  OAuthLinkPendingFlow,\n  OAuthUnlinkDecision,\n  OAuthUnlinkInspection,\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n  type PrepareOAuthCommit,\n  OAuthRegistrationIntent,\n  OAuthRegistrationFingerprint,\n  OAuthClaim,\n  OAuthClaimDecision,\n  OAuthCleanupInput,\n  OAuthIssueDecision,\n  OAuthPendingFlow,\n  OAuthSettlementDecision,\n  OAuthVerifiedExternalIdentity,\n  OAuthCredentialSnapshot,\n  snapshotOAuthSync,\n  type OAuthUnavailable,\n} from \"@yielded/auth/OAuth\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- concrete driver entry points restore table/database generics. */\nimport { eq, sql } from \"drizzle-orm\";\nimport { type Context, Effect, Layer } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport {\n  accountCurrent,\n  claimLink,\n  inspectUnlink,\n  issueLink,\n  preflightLink,\n  settleLink,\n  unlink,\n} from \"./oauth-accounts\";\nimport {\n  claimFlow,\n  cleanupFlows,\n  discoverOwned,\n  exactClaim,\n  issueFlow,\n  matchesAccess,\n  readFlow,\n  resolveOwned,\n  terminalFlow,\n} from \"./oauth-flow\";\nimport {\n  accountsInputs,\n  capturedOAuthService,\n  registrationInputs,\n  registrationIntentInputs,\n  signInInputs,\n} from \"./oauth-input\";\nimport type { OAuthRegistrationAuthority } from \"./oauth-model\";\nimport { both, col, equal, CurrentOAuthTransaction, type OAuthNativeDatabase } from \"./oauth-owner\";\nimport {\n  inspectIntent,\n  register,\n  registrationData,\n  registrationResources,\n  type RegistrationCallbacks,\n  settleRegistrationIntent,\n} from \"./oauth-registration\";\nimport { captureOAuthMapping, invariant, nonce, unavailable } from \"./oauth-state\";\nimport {\n  coordinateTransactionOwner,\n  makeTransactionExecution,\n  sqlClientTransactionStandaloneGuard,\n  type TransactionTargetConfiguration,\n  type TransactionCoordinatorError,\n  type TransactionExecution,\n} from \"./transaction-execution\";\n\nexport type OAuthTargetConfiguration = TransactionTargetConfiguration<OAuthUnavailable>;\nexport type OAuthCoordinatorError<E> = TransactionCoordinatorError<E, OAuthUnavailable>;\nexport type OAuthExecution = TransactionExecution<OAuthUnavailable, CurrentOAuthTransaction, never>;\n\nexport const sqlClientOAuthStandaloneGuard = (\n  database: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n) => sqlClientTransactionStandaloneGuard(unavailable, database);\n\nexport const makeOAuthExecution = (\n  database: OAuthNativeDatabase,\n  hooks: LifecycleHooks[\"Service\"],\n  configuration: OAuthTargetConfiguration,\n): OAuthExecution => {\n  const execution = makeTransactionExecution(\n    CurrentOAuthTransaction,\n    database,\n    configuration,\n    unavailable,\n    nonce,\n  );\n\n  return {\n    ...execution,\n    run: (operation, mutation) =>\n      execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  };\n};\n\nconst prepareValue = <Value, A>(value: Value, prepare: PrepareOAuthCommit<Value, A>) =>\n  Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n    Effect.sync(() => {\n      owner.guards.push(owner.journal.prepare(undefined));\n\n      return prepare(value, owner.journal);\n    }),\n  );\n\nexport const makeOAuthSignIn = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthSignInPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthSignInPersistence[\"Service\"]>(\n    {\n      issue: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const input = snapshotOAuthSync(OAuthPendingFlow, original);\n            const value = yield* issueFlow(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const read = yield* readFlow(mapping, input, \"sign-in\");\n\n            const claim =\n              read.row !== undefined && read.flow !== undefined && matchesAccess(read.flow, input)\n                ? yield* claimFlow(mapping, { row: read.row, flow: read.flow }, input.claimId)\n                : undefined;\n\n            return yield* prepareValue(\n              snapshotOAuthSync(\n                OAuthClaimDecision,\n                claim === undefined\n                  ? { _tag: \"Rejected\" }\n                  : { _tag: \"Claimed\", claim: claim as typeof OAuthClaim.Type },\n              ),\n              prepare,\n            );\n          }),\n        ),\n      settle: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const claim = snapshotOAuthSync(OAuthClaim, original.claim);\n            const outcome = original.outcome;\n\n            const identity =\n              outcome._tag === \"Verified\"\n                ? snapshotOAuthSync(OAuthVerifiedExternalIdentity, outcome.identity).identity\n                : undefined;\n\n            if (identity !== undefined)\n              invariant(\n                identity.provider === claim.flow.context.provider &&\n                  identity.issuer === claim.flow.context.issuer,\n              );\n\n            // Discover/lock the existing subject before locking its claimed flow.\n            const found =\n              identity === undefined ? undefined : yield* discoverOwned(mapping, identity);\n\n            const exact = yield* exactClaim(mapping, claim, \"sign-in\");\n            let value: typeof OAuthSettlementDecision.Type = { _tag: \"Rejected\" };\n\n            if (exact !== undefined) {\n              const credential =\n                identity === undefined\n                  ? undefined\n                  : resolveOwned(mapping, claim.flow.context.moduleId, identity, found);\n\n              value =\n                outcome._tag !== \"Verified\"\n                  ? { _tag: outcome._tag }\n                  : credential === undefined\n                    ? { _tag: \"Rejected\" }\n                    : { _tag: \"Verified\", credential };\n              yield* terminalFlow(mapping, claim.flow, value._tag);\n            }\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthSettlementDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* cleanupFlows(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    signInInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistrationIntents = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthRegistrationIntents[\"Service\"] =>\n  capturedOAuthService<OAuthRegistrationIntents[\"Service\"]>(\n    {\n      settle: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* settleRegistrationIntent(mapping, {\n              claim: snapshotOAuthSync(OAuthClaim, input.claim),\n              identity: snapshotOAuthSync(OAuthVerifiedExternalIdentity, input.identity),\n              ...(input.intent === undefined\n                ? {}\n                : { intent: snapshotOAuthSync(OAuthRegistrationIntent, input.intent) }),\n            });\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    registrationIntentInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistration = <Registration>(\n  mapping: any,\n  execute: OAuthExecution,\n  allocated?: Awaited<ReturnType<typeof registrationResources>> extends Effect.Effect<\n    infer A,\n    any,\n    any\n  >\n    ? A\n    : never,\n): OAuthRegistrationAuthority<Registration> =>\n  capturedOAuthService<OAuthRegistrationAuthority<Registration>>(\n    {\n      read: (input) =>\n        execute.run(\n          Effect.map(inspectIntent(mapping, input), (result) => result?.inspection),\n          false,\n        ),\n      inspect: (input) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const intent = snapshotOAuthSync(OAuthRegistrationIntent, input.intent);\n          const stored = mapping.application.encode(input.registration);\n\n          invariant(\n            typeof stored === \"string\" && new TextEncoder().encode(stored).length <= 1048576,\n          );\n          const detached = { intent, registration: mapping.application.decode(stored) };\n\n          const checked = execute.bound\n            ? (invariant(mapping.inspectSync !== undefined), mapping.inspectSync(detached))\n            : yield* (mapping as RegistrationCallbacks<Registration>).inspect(detached);\n\n          invariant(typeof checked.eligible === \"boolean\");\n\n          return {\n            fingerprint: snapshotOAuthSync(OAuthRegistrationFingerprint, checked.fingerprint),\n            eligible: checked.eligible,\n          };\n        }).pipe(\n          (effect) => (execute.bound ? execute.run(effect, false) : effect),\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      register: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const data = yield* registrationData(mapping, input, execute.bound);\n          const resources = allocated ?? (yield* registrationResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* register(mapping, input, data, resources);\n\n              return yield* prepareValue(value, prepare);\n            }),\n          );\n        }).pipe(\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      cleanup: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n\n            const input = snapshotOAuthSync(OAuthCleanupInput, original),\n              i = mapping.intent,\n              r = mapping.command;\n\n            const now = yield* owner.now(mapping.clock);\n\n            const candidates = yield* owner.read(\n              i.table,\n              both(\n                eq(col(i.table, i.moduleId), input.moduleId),\n                sql`${col(i.table, i.state)} <> 'ProvisioningPending' and ${col(i.table, i.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n              ),\n              { limit: input.limit, observe: false, takeOnly: true },\n            );\n\n            let removed = 0;\n\n            for (const candidate of candidates.rows) {\n              const selected = yield* owner.read(\n                i.table,\n                equal(i.table, {\n                  [i.moduleId]: input.moduleId,\n                  [i.reference]: candidate[i.reference],\n                }),\n                { limit: 1 },\n              );\n\n              const row = selected.rows[0];\n\n              if (row === undefined || row[i.state] === \"ProvisioningPending\") continue;\n              let horizon = mapping.clock.decodeInstant(row[i.retentionUntil]);\n\n              if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                continue;\n              if (row[i.commandId] !== null) {\n                const commands = yield* owner.read(\n                  r.table,\n                  equal(r.table, {\n                    [r.moduleId]: input.moduleId,\n                    [r.commandId]: row[i.commandId],\n                  }),\n                  { limit: 1 },\n                );\n\n                const command = commands.rows[0];\n\n                if (command === undefined) continue;\n                horizon = Math.max(horizon, mapping.clock.decodeInstant(command[r.retentionUntil]));\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, {\n                  [r.moduleId]: input.moduleId,\n                  [r.commandId]: row[i.commandId],\n                });\n              }\n              yield* owner.remove(i.table, {\n                [i.moduleId]: input.moduleId,\n                [i.reference]: row[i.reference],\n              });\n              owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n              removed++;\n            }\n\n            return yield* prepareValue(\n              { removed, hasMore: candidates.rows.length === input.limit },\n              prepare,\n            );\n          }),\n        ),\n    },\n    registrationInputs(mapping.application),\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthSignInServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthSignInPersistence: makeOAuthSignIn(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationIntentServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthRegistrationIntents: makeOAuthRegistrationIntents(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    registrationAuthority: makeOAuthRegistration<Registration>(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const coordinateOAuthOwner = <Services, Transaction, A, E, R>(\n  database: OAuthNativeDatabase,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  allocate: (mapping: any) => Effect.Effect<any, PersistenceMappingError>,\n  services: (mapping: any, execution: OAuthExecution, resources: any) => Services,\n  owner: (\n    transaction: Transaction,\n    services: Services,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, OAuthCoordinatorError<E>, R | LifecycleHooks> => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.flatMap(LifecycleHooks, (hooks) =>\n    coordinateTransactionOwner(\n      database,\n      CurrentOAuthTransaction,\n      configuration,\n      Effect.suspend(() => allocate(captured)),\n      unavailable,\n      nonce,\n      (execution, resources) =>\n        services(\n          captured,\n          {\n            ...execution,\n            run: (operation, mutation) =>\n              execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n          },\n          resources,\n        ),\n      owner,\n    ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  );\n};\n\nconst accountResources = (mapping: any) =>\n  Effect.gen(function* () {\n    return {\n      credentialId: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialId,\n        yield* mapping.allocateCredentialId as Effect.Effect<string, PersistenceMappingError>,\n      ),\n      revision: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialRevision,\n        yield* mapping.allocateRevision as Effect.Effect<SecurityRevision, PersistenceMappingError>,\n      ),\n    };\n  });\n\nexport const coordinateTargetOAuthRegistration = <Registration, Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    registrationResources,\n    (captured, execute, resources) => ({\n      registrationAuthority: makeOAuthRegistration<Registration>(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthSignIn = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({ oauthSignInPersistence: makeOAuthSignIn(captured, execute) }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthRegistrationIntents = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({\n      oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, execute),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthAccounts = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    accountResources,\n    (captured, execute, resources) => ({\n      oauthAccountsPersistence: makeOAuthAccounts(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const makeOAuthAccounts = (\n  mapping: any,\n  execute: OAuthExecution,\n  resources?: any,\n): OAuthAccountsPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthAccountsPersistence[\"Service\"]>(\n    {\n      capture: (input) =>\n        execute.run(\n          Effect.map(accountCurrent(mapping, input.subjectId), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthAccountRevision, current.revision),\n          ),\n          false,\n        ),\n      issue: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* issueLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      preflight: (input) =>\n        execute.run(\n          Effect.map(preflightLink(mapping, input), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthLinkPendingFlow, current.flow),\n          ),\n          false,\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* claimLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkClaimDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      settle: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const allocated = resources ?? (yield* accountResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* settleLink(mapping, input, allocated as never);\n\n              return yield* prepareValue(snapshotOAuthSync(OAuthLinkDecision, value), prepare);\n            }),\n          );\n        }).pipe(\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      inspectUnlink: (input) =>\n        execute.run(\n          Effect.map(inspectUnlink(mapping, input), (value) =>\n            snapshotOAuthSync(OAuthUnlinkInspection, value),\n          ),\n          false,\n        ),\n      unlink: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* unlink(mapping, input);\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthUnlinkDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n            const value = yield* cleanupFlows(mapping, input, \"link\");\n            const remaining = input.limit - value.terminalized - value.removed;\n\n            const now = yield* owner.now(mapping.clock),\n              r = mapping.command;\n\n            let removed = 0;\n\n            if (remaining > 0) {\n              const rows = yield* owner.read(\n                r.table,\n                both(\n                  eq(col(r.table, r.moduleId), input.moduleId),\n                  sql`${col(r.table, r.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n                ),\n                { limit: remaining, observe: false, takeOnly: true },\n              );\n\n              for (const row of rows.rows) {\n                const key = { [r.moduleId]: input.moduleId, [r.commandId]: row[r.commandId] };\n                const selected = yield* owner.read(r.table, equal(r.table, key), { limit: 1 });\n                const current = selected.rows[0];\n\n                if (current === undefined) continue;\n                const horizon = mapping.clock.decodeInstant(current[r.retentionUntil]);\n\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, key);\n                owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n                removed++;\n              }\n            }\n\n            return yield* prepareValue(\n              {\n                ...value,\n                removed: value.removed + removed,\n                hasMore: value.hasMore || remaining === removed,\n              },\n              prepare,\n            );\n          }),\n        ),\n    },\n    accountsInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthAccountsServices = (\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(LifecycleHooks, (hooks) => ({\n    oauthAccountsPersistence: makeOAuthAccounts(\n      captured,\n      makeOAuthExecution(database, hooks, configuration),\n    ),\n  }));\n};\n\nexport const oauthAccountsPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthAccountsServices>,\n) =>\n  Layer.effect(\n    OAuthAccountsPersistence,\n    Effect.map(services, (value) => value.oauthAccountsPersistence),\n  );\n\nexport const oauthSignInPersistenceLayer = (\n  services: ReturnType<typeof makeTargetOAuthSignInServices>,\n) =>\n  Layer.effect(\n    OAuthSignInPersistence,\n    Effect.map(services, (value) => value.oauthSignInPersistence),\n  );\n\nexport const oauthRegistrationIntentsLayer = (\n  services: ReturnType<typeof makeTargetOAuthRegistrationIntentServices>,\n) =>\n  Layer.effect(\n    OAuthRegistrationIntents,\n    Effect.map(services, (value) => value.oauthRegistrationIntents),\n  );\n\nexport const oauthRegistrationAuthorityLayer = <Id, Registration>(\n  tag: Context.Key<Id, OAuthRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;;;;;;AAoFA,MAAa,iCACX,aACG,oCAAoC,aAAa,QAAQ;AAE9D,MAAa,sBACX,UACA,OACA,kBACmB;CACnB,MAAM,YAAY,yBAChB,yBACA,UACA,eACA,aACA,KACF;CAEA,OAAO;EACL,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF;AACF;AAEA,MAAM,gBAA0B,OAAc,YAC5C,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,QAAQ,OAAO,MAAM,OAAO;AACrC,CAAC,CACH;AAEF,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,UAAU,YAChB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,kBAAkB,QAAQ;EAC1D,MAAM,QAAQ,OAAO,UAAU,SAAS,OAAO,SAAS;EAExD,OAAO,OAAO,aACZ,kBAAkB,oBAAoB,KAAc,GACpD,OACF;CACF,CAAC,CACH;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,OAAO,OAAO,SAAS,SAAS,OAAO,SAAS;EAEtD,MAAM,QACJ,KAAK,QAAQ,KAAA,KAAa,KAAK,SAAS,KAAA,KAAa,cAAc,KAAK,MAAM,KAAK,IAC/E,OAAO,UAAU,SAAS;GAAE,KAAK,KAAK;GAAK,MAAM,KAAK;EAAK,GAAG,MAAM,OAAO,IAC3E,KAAA;EAEN,OAAO,OAAO,aACZ,kBACE,oBACA,UAAU,KAAA,IACN,EAAE,MAAM,WAAW,IACnB;GAAE,MAAM;GAAkB;EAAgC,CAChE,GACA,OACF;CACF,CAAC,CACH;CACF,SAAS,UAAU,YACjB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,YAAY,SAAS,KAAK;EAC1D,MAAM,UAAU,SAAS;EAEzB,MAAM,WACJ,QAAQ,SAAS,aACb,kBAAkB,+BAA+B,QAAQ,QAAQ,CAAC,CAAC,WACnE,KAAA;EAEN,IAAI,aAAa,KAAA,GACf,UACE,SAAS,aAAa,MAAM,KAAK,QAAQ,YACvC,SAAS,WAAW,MAAM,KAAK,QAAQ,MAC3C;EAGF,MAAM,QACJ,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,cAAc,SAAS,QAAQ;EAE7E,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAS;EACzD,IAAI,QAA6C,EAAE,MAAM,WAAW;EAEpE,IAAI,UAAU,KAAA,GAAW;GACvB,MAAM,aACJ,aAAa,KAAA,IACT,KAAA,IACA,aAAa,SAAS,MAAM,KAAK,QAAQ,UAAU,UAAU,KAAK;GAExE,QACE,QAAQ,SAAS,aACb,EAAE,MAAM,QAAQ,KAAK,IACrB,eAAe,KAAA,IACb,EAAE,MAAM,WAAW,IACnB;IAAE,MAAM;IAAY;GAAW;GACvC,OAAO,aAAa,SAAS,MAAM,MAAM,MAAM,IAAI;EACrD;EAEA,OAAO,OAAO,aAAa,kBAAkB,yBAAyB,KAAK,GAAG,OAAO;CACvF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,SAAS;EAE3D,OAAO,OAAO,aAAa,OAAO,OAAO;CAC3C,CAAC,CACH;AACJ,GACA,cACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,gCACX,SACA,YAEA,qBACE,EACE,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,yBAAyB,SAAS;EACrD,OAAO,kBAAkB,YAAY,MAAM,KAAK;EAChD,UAAU,kBAAkB,+BAA+B,MAAM,QAAQ;EACzE,GAAI,MAAM,WAAW,KAAA,IACjB,CAAC,IACD,EAAE,QAAQ,kBAAkB,yBAAyB,MAAM,MAAM,EAAE;CACzE,CAAC;CAED,OAAO,OAAO,aAAa,OAAO,OAAO;AAC3C,CAAC,CACH,EACJ,GACA,0BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,yBACX,SACA,SACA,cAQA,qBACE;CACE,OAAO,UACL,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,WAAW,QAAQ,UAAU,GACxE,KACF;CACF,UAAU,UACR,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,SAAS,kBAAkB,yBAAyB,MAAM,MAAM;EACtE,MAAM,SAAS,QAAQ,YAAY,OAAO,MAAM,YAAY;EAE5D,UACE,OAAO,WAAW,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU,OAC3E;EACA,MAAM,WAAW;GAAE;GAAQ,cAAc,QAAQ,YAAY,OAAO,MAAM;EAAE;EAE5E,MAAM,UAAU,QAAQ,SACnB,UAAU,QAAQ,gBAAgB,KAAA,CAAS,GAAG,QAAQ,YAAY,QAAQ,KAC3E,OAAQ,QAAgD,QAAQ,QAAQ;EAE5E,UAAU,OAAO,QAAQ,aAAa,SAAS;EAE/C,OAAO;GACL,aAAa,kBAAkB,8BAA8B,QAAQ,WAAW;GAChF,UAAU,QAAQ;EACpB;CACF,CAAC,CAAC,CAAC,MACA,WAAY,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,KAAK,IAAI,QAC1D,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,WAAW,OAAO,YAChB,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,OAAO,OAAO,iBAAiB,SAAS,OAAO,QAAQ,KAAK;EAClE,MAAM,YAAY,cAAc,OAAO,sBAAsB,OAAO;EAEpE,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,SAAS,SAAS,OAAO,MAAM,SAAS;GAE7D,OAAO,OAAO,aAAa,OAAO,OAAO;EAC3C,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,UAAU,UAAU,YAClB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,MAAM,QAAQ,kBAAkB,mBAAmB,QAAQ,GACzD,IAAI,QAAQ,QACZ,IAAI,QAAQ;EAEd,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK;EAE1C,MAAM,aAAa,OAAO,MAAM,KAC9B,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GACjI,GACA;GAAE,OAAO,MAAM;GAAO,SAAS;GAAO,UAAU;EAAK,CACvD;EAEA,IAAI,UAAU;EAEd,KAAK,MAAM,aAAa,WAAW,MAAM;GAUvC,MAAM,OAAM,OATY,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;KACZ,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,UAAU,EAAE;GAC7B,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEqB,KAAK;GAE1B,IAAI,QAAQ,KAAA,KAAa,IAAI,EAAE,WAAW,uBAAuB;GACjE,IAAI,UAAU,QAAQ,MAAM,cAAc,IAAI,EAAE,eAAe;GAE/D,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;GACF,IAAI,IAAI,EAAE,eAAe,MAAM;IAU7B,MAAM,WAAU,OATQ,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;MACZ,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEyB,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,UAAU,KAAK,IAAI,SAAS,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe,CAAC;IAClF,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO;MAC1B,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC;GACH;GACA,OAAO,MAAM,OAAO,EAAE,OAAO;KAC1B,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,IAAI,EAAE;GACvB,CAAC;GACD,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;GAC5E;EACF;EAEA,OAAO,OAAO,aACZ;GAAE;GAAS,SAAS,WAAW,KAAK,WAAW,MAAM;EAAM,GAC3D,OACF;CACF,CAAC,CACH;AACJ,GACA,mBAAmB,QAAQ,WAAW,GACtC,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,iCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,wBAAwB,gBACtB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,6CACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,0BAA0B,6BACxB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,uCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,uBAAuB,sBACrB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,wBACX,UACA,SACA,eACA,UACA,UACA,UAKmE;CACnE,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,QAAQ,iBAAiB,UACrC,2BACE,UACA,yBACA,eACA,OAAO,cAAc,SAAS,QAAQ,CAAC,GACvC,aACA,QACC,WAAW,cACV,SACE,UACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF,GACA,SACF,GACF,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD;AACF;AAEA,MAAM,oBAAoB,YACxB,OAAO,IAAI,aAAa;CACtB,OAAO;EACL,cAAc,kBACZ,wBAAwB,OAAO,cAC/B,OAAO,QAAQ,oBACjB;EACA,UAAU,kBACR,wBAAwB,OAAO,oBAC/B,OAAO,QAAQ,gBACjB;CACF;AACF,CAAC;AAEH,MAAa,qCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,wBACC,UAAU,SAAS,eAAe,EACjC,uBAAuB,sBAAoC,UAAU,SAAS,SAAS,EACzF,IACA,KACF;AAEF,MAAa,+BACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EAAE,wBAAwB,gBAAgB,UAAU,OAAO,EAAE,IACrF,KACF;AAEF,MAAa,4CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EACtB,0BAA0B,6BAA6B,UAAU,OAAO,EAC1E,IACA,KACF;AAEF,MAAa,iCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,mBACC,UAAU,SAAS,eAAe,EACjC,0BAA0B,kBAAkB,UAAU,SAAS,SAAS,EAC1E,IACA,KACF;AAEF,MAAa,qBACX,SACA,SACA,cAEA,qBACE;CACE,UAAU,UACR,QAAQ,IACN,OAAO,IAAI,eAAe,SAAS,MAAM,SAAS,IAAI,YACpD,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,QAAQ,CAC9D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,YAAY,UACV,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,YACzC,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,IAAI,CAC1D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,SAAS,OAAO,YACd,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,YAAY,cAAc,OAAO,iBAAiB,OAAO;EAE/D,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAkB;GAElE,OAAO,OAAO,aAAa,kBAAkB,mBAAmB,KAAK,GAAG,OAAO;EACjF,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,gBAAgB,UACd,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,UACzC,kBAAkB,uBAAuB,KAAK,CAChD,GACA,KACF;CACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,OAAO,SAAS,KAAK;EAE1C,OAAO,OAAO,aAAa,kBAAkB,qBAAqB,KAAK,GAAG,OAAO;CACnF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,MAAM;EACxD,MAAM,YAAY,MAAM,QAAQ,MAAM,eAAe,MAAM;EAE3D,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,GACxC,IAAI,QAAQ;EAEd,IAAI,UAAU;EAEd,IAAI,YAAY,GAAG;GACjB,MAAM,OAAO,OAAO,MAAM,KACxB,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GAC3E,GACA;IAAE,OAAO;IAAW,SAAS;IAAO,UAAU;GAAK,CACrD;GAEA,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,MAAM,MAAM;MAAG,EAAE,WAAW,MAAM;MAAW,EAAE,YAAY,IAAI,EAAE;IAAW;IAE5E,MAAM,WAAU,OADQ,MAAM,KAAK,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAA,CACpD,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,MAAM,UAAU,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe;IAErE,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO,GAAG;IAChC,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;IAC5E;GACF;EACF;EAEA,OAAO,OAAO,aACZ;GACE,GAAG;GACH,SAAS,MAAM,UAAU;GACzB,SAAS,MAAM,WAAW,cAAc;EAC1C,GACA,OACF;CACF,CAAC,CACH;AACJ,GACA,gBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,mCACX,UACA,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,iBAAiB,WAAW,EAC5C,0BAA0B,kBACxB,UACA,mBAAmB,UAAU,OAAO,aAAa,CACnD,EACF,EAAE;AACJ;AAEA,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,+BACX,aAEA,MAAM,OACJ,wBACA,OAAO,IAAI,WAAW,UAAU,MAAM,sBAAsB,CAC9D;AAEF,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,mCACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}
+{"version":3,"file":"oauth-target.mjs","names":[],"sources":["../../src/drizzle/oauth-target.ts"],"sourcesContent":["import type { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountRevision,\n  OAuthLinkClaimDecision,\n  OAuthLinkDecision,\n  OAuthLinkIssueDecision,\n  OAuthLinkPendingFlow,\n  OAuthUnlinkDecision,\n  OAuthUnlinkInspection,\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n  type PrepareOAuthCommit,\n  OAuthRegistrationIntent,\n  OAuthRegistrationFingerprint,\n  OAuthClaim,\n  OAuthClaimDecision,\n  OAuthCleanupInput,\n  OAuthIssueDecision,\n  OAuthPendingFlow,\n  OAuthSettlementDecision,\n  OAuthVerifiedExternalIdentity,\n  OAuthCredentialSnapshot,\n  snapshotOAuthSync,\n  type OAuthUnavailable,\n} from \"@yielded/auth/OAuth\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- concrete driver entry points restore table/database generics. */\nimport { eq, sql } from \"drizzle-orm\";\nimport { type Context, Effect, Layer } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport {\n  accountCurrent,\n  claimLink,\n  inspectUnlink,\n  issueLink,\n  preflightLink,\n  settleLink,\n  unlink,\n} from \"./oauth-accounts\";\nimport {\n  claimFlow,\n  cleanupFlows,\n  discoverOwned,\n  exactClaim,\n  issueFlow,\n  matchesAccess,\n  readFlow,\n  resolveOwned,\n  terminalFlow,\n} from \"./oauth-flow\";\nimport {\n  accountsInputs,\n  capturedOAuthService,\n  registrationInputs,\n  registrationIntentInputs,\n  signInInputs,\n} from \"./oauth-input\";\nimport type { OAuthRegistrationAuthority } from \"./oauth-model\";\nimport { both, col, equal, CurrentOAuthTransaction, type OAuthNativeDatabase } from \"./oauth-owner\";\nimport {\n  inspectIntent,\n  register,\n  registrationData,\n  registrationResources,\n  type RegistrationCallbacks,\n  settleRegistrationIntent,\n} from \"./oauth-registration\";\nimport { captureOAuthMapping, invariant, nonce, unavailable } from \"./oauth-state\";\nimport {\n  coordinateTransactionOwner,\n  makeTransactionExecution,\n  sqlClientTransactionStandaloneGuard,\n  type TransactionTargetConfiguration,\n  type TransactionCoordinatorError,\n  type TransactionExecution,\n} from \"./transaction-execution\";\n\nexport type OAuthTargetConfiguration = TransactionTargetConfiguration<OAuthUnavailable>;\nexport type OAuthCoordinatorError<E> = TransactionCoordinatorError<E, OAuthUnavailable>;\nexport type OAuthExecution = TransactionExecution<OAuthUnavailable, CurrentOAuthTransaction, never>;\n\nexport const sqlClientOAuthStandaloneGuard = (\n  service: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n) => sqlClientTransactionStandaloneGuard(unavailable, service);\n\nexport const makeOAuthExecution = Effect.fnUntraced(function* (\n  configuration: OAuthTargetConfiguration,\n): Effect.fn.Return<OAuthExecution, never, LifecycleHooks | NativeDatabase> {\n  const hooks = yield* LifecycleHooks;\n\n  const execution = yield* makeTransactionExecution(\n    CurrentOAuthTransaction,\n    configuration,\n    unavailable,\n    nonce,\n  );\n\n  return {\n    ...execution,\n    run: (operation, mutation) =>\n      execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  };\n});\n\nconst prepareValue = <Value, A>(value: Value, prepare: PrepareOAuthCommit<Value, A>) =>\n  Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n    Effect.sync(() => {\n      owner.guards.push(owner.journal.prepare(undefined));\n\n      return prepare(value, owner.journal);\n    }),\n  );\n\nexport const makeOAuthSignIn = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthSignInPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthSignInPersistence[\"Service\"]>(\n    {\n      issue: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const input = snapshotOAuthSync(OAuthPendingFlow, original);\n            const value = yield* issueFlow(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const read = yield* readFlow(mapping, input, \"sign-in\");\n\n            const claim =\n              read.row !== undefined && read.flow !== undefined && matchesAccess(read.flow, input)\n                ? yield* claimFlow(mapping, { row: read.row, flow: read.flow }, input.claimId)\n                : undefined;\n\n            return yield* prepareValue(\n              snapshotOAuthSync(\n                OAuthClaimDecision,\n                claim === undefined\n                  ? { _tag: \"Rejected\" }\n                  : { _tag: \"Claimed\", claim: claim as typeof OAuthClaim.Type },\n              ),\n              prepare,\n            );\n          }),\n        ),\n      settle: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const claim = snapshotOAuthSync(OAuthClaim, original.claim);\n            const outcome = original.outcome;\n\n            const identity =\n              outcome._tag === \"Verified\"\n                ? snapshotOAuthSync(OAuthVerifiedExternalIdentity, outcome.identity).identity\n                : undefined;\n\n            if (identity !== undefined)\n              invariant(\n                identity.provider === claim.flow.context.provider &&\n                  identity.issuer === claim.flow.context.issuer,\n              );\n\n            // Discover/lock the existing subject before locking its claimed flow.\n            const found =\n              identity === undefined ? undefined : yield* discoverOwned(mapping, identity);\n\n            const exact = yield* exactClaim(mapping, claim, \"sign-in\");\n            let value: typeof OAuthSettlementDecision.Type = { _tag: \"Rejected\" };\n\n            if (exact !== undefined) {\n              const credential =\n                identity === undefined\n                  ? undefined\n                  : resolveOwned(mapping, claim.flow.context.moduleId, identity, found);\n\n              value =\n                outcome._tag !== \"Verified\"\n                  ? { _tag: outcome._tag }\n                  : credential === undefined\n                    ? { _tag: \"Rejected\" }\n                    : { _tag: \"Verified\", credential };\n              yield* terminalFlow(mapping, claim.flow, value._tag);\n            }\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthSettlementDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* cleanupFlows(mapping, input, \"sign-in\");\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    signInInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistrationIntents = (\n  mapping: any,\n  execute: OAuthExecution,\n): OAuthRegistrationIntents[\"Service\"] =>\n  capturedOAuthService<OAuthRegistrationIntents[\"Service\"]>(\n    {\n      settle: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* settleRegistrationIntent(mapping, {\n              claim: snapshotOAuthSync(OAuthClaim, input.claim),\n              identity: snapshotOAuthSync(OAuthVerifiedExternalIdentity, input.identity),\n              ...(input.intent === undefined\n                ? {}\n                : { intent: snapshotOAuthSync(OAuthRegistrationIntent, input.intent) }),\n            });\n\n            return yield* prepareValue(value, prepare);\n          }),\n        ),\n    },\n    registrationIntentInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeOAuthRegistration = <Registration>(\n  mapping: any,\n  execute: OAuthExecution,\n  allocated?: Awaited<ReturnType<typeof registrationResources>> extends Effect.Effect<\n    infer A,\n    any,\n    any\n  >\n    ? A\n    : never,\n): OAuthRegistrationAuthority<Registration> =>\n  capturedOAuthService<OAuthRegistrationAuthority<Registration>>(\n    {\n      read: (input) =>\n        execute.run(\n          Effect.map(inspectIntent(mapping, input), (result) => result?.inspection),\n          false,\n        ),\n      inspect: (input) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const intent = snapshotOAuthSync(OAuthRegistrationIntent, input.intent);\n          const stored = mapping.application.encode(input.registration);\n\n          invariant(\n            typeof stored === \"string\" && new TextEncoder().encode(stored).length <= 1048576,\n          );\n          const detached = { intent, registration: mapping.application.decode(stored) };\n\n          const checked = execute.bound\n            ? (invariant(mapping.inspectSync !== undefined), mapping.inspectSync(detached))\n            : yield* (mapping as RegistrationCallbacks<Registration>).inspect(detached);\n\n          invariant(typeof checked.eligible === \"boolean\");\n\n          return {\n            fingerprint: snapshotOAuthSync(OAuthRegistrationFingerprint, checked.fingerprint),\n            eligible: checked.eligible,\n          };\n        }).pipe(\n          (effect) => (execute.bound ? execute.run(effect, false) : effect),\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      register: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const data = yield* registrationData(mapping, input, execute.bound);\n          const resources = allocated ?? (yield* registrationResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* register(mapping, input, data, resources);\n\n              return yield* prepareValue(value, prepare);\n            }),\n          );\n        }).pipe(\n          Effect.onExit((exit) =>\n            Effect.sync(() => {\n              if (exit._tag === \"Failure\") execute.poison();\n            }),\n          ),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      cleanup: (original, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n\n            const input = snapshotOAuthSync(OAuthCleanupInput, original),\n              i = mapping.intent,\n              r = mapping.command;\n\n            const now = yield* owner.now(mapping.clock);\n\n            const candidates = yield* owner.read(\n              i.table,\n              both(\n                eq(col(i.table, i.moduleId), input.moduleId),\n                sql`${col(i.table, i.state)} <> 'ProvisioningPending' and ${col(i.table, i.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n              ),\n              { limit: input.limit, observe: false, takeOnly: true },\n            );\n\n            let removed = 0;\n\n            for (const candidate of candidates.rows) {\n              const selected = yield* owner.read(\n                i.table,\n                equal(i.table, {\n                  [i.moduleId]: input.moduleId,\n                  [i.reference]: candidate[i.reference],\n                }),\n                { limit: 1 },\n              );\n\n              const row = selected.rows[0];\n\n              if (row === undefined || row[i.state] === \"ProvisioningPending\") continue;\n              let horizon = mapping.clock.decodeInstant(row[i.retentionUntil]);\n\n              if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                continue;\n              if (row[i.commandId] !== null) {\n                const commands = yield* owner.read(\n                  r.table,\n                  equal(r.table, {\n                    [r.moduleId]: input.moduleId,\n                    [r.commandId]: row[i.commandId],\n                  }),\n                  { limit: 1 },\n                );\n\n                const command = commands.rows[0];\n\n                if (command === undefined) continue;\n                horizon = Math.max(horizon, mapping.clock.decodeInstant(command[r.retentionUntil]));\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, {\n                  [r.moduleId]: input.moduleId,\n                  [r.commandId]: row[i.commandId],\n                });\n              }\n              yield* owner.remove(i.table, {\n                [i.moduleId]: input.moduleId,\n                [i.reference]: row[i.reference],\n              });\n              owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n              removed++;\n            }\n\n            return yield* prepareValue(\n              { removed, hasMore: candidates.rows.length === input.limit },\n              prepare,\n            );\n          }),\n        ),\n    },\n    registrationInputs(mapping.application),\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthSignInServices = (\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(makeOAuthExecution(configuration), (execution) => ({\n    oauthSignInPersistence: makeOAuthSignIn(captured, execution),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationIntentServices = (\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(makeOAuthExecution(configuration), (execution) => ({\n    oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, execution),\n  }));\n};\n\nexport const makeTargetOAuthRegistrationServices = <Registration>(\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(makeOAuthExecution(configuration), (execution) => ({\n    registrationAuthority: makeOAuthRegistration<Registration>(captured, execution),\n  }));\n};\n\nexport const coordinateOAuthOwner = <Services, Transaction, A, E, R>(\n  database: OAuthNativeDatabase,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  allocate: (mapping: any) => Effect.Effect<any, PersistenceMappingError>,\n  services: (mapping: any, execution: OAuthExecution, resources: any) => Services,\n  owner: (\n    transaction: Transaction,\n    services: Services,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, OAuthCoordinatorError<E>, R | LifecycleHooks> => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.flatMap(LifecycleHooks, (hooks) =>\n    coordinateTransactionOwner(\n      database,\n      CurrentOAuthTransaction,\n      configuration,\n      Effect.suspend(() => allocate(captured)),\n      unavailable,\n      nonce,\n      (execution, resources) =>\n        services(\n          captured,\n          {\n            ...execution,\n            run: (operation, mutation) =>\n              execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n          },\n          resources,\n        ),\n      owner,\n    ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n  );\n};\n\nconst accountResources = (mapping: any) =>\n  Effect.gen(function* () {\n    return {\n      credentialId: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialId,\n        yield* mapping.allocateCredentialId as Effect.Effect<string, PersistenceMappingError>,\n      ),\n      revision: snapshotOAuthSync(\n        OAuthCredentialSnapshot.fields.credentialRevision,\n        yield* mapping.allocateRevision as Effect.Effect<SecurityRevision, PersistenceMappingError>,\n      ),\n    };\n  });\n\nexport const coordinateTargetOAuthRegistration = <Registration, Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    registrationResources,\n    (captured, execute, resources) => ({\n      registrationAuthority: makeOAuthRegistration<Registration>(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthSignIn = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({ oauthSignInPersistence: makeOAuthSignIn(captured, execute) }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthRegistrationIntents = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    () => Effect.void,\n    (captured, execute) => ({\n      oauthRegistrationIntents: makeOAuthRegistrationIntents(captured, execute),\n    }),\n    owner,\n  );\n\nexport const coordinateTargetOAuthAccounts = <Transaction, A, E, R>(\n  database: any,\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateOAuthOwner(\n    database,\n    mapping,\n    configuration,\n    accountResources,\n    (captured, execute, resources) => ({\n      oauthAccountsPersistence: makeOAuthAccounts(captured, execute, resources),\n    }),\n    owner,\n  );\n\nexport const makeOAuthAccounts = (\n  mapping: any,\n  execute: OAuthExecution,\n  resources?: any,\n): OAuthAccountsPersistence[\"Service\"] =>\n  capturedOAuthService<OAuthAccountsPersistence[\"Service\"]>(\n    {\n      capture: (input) =>\n        execute.run(\n          Effect.map(accountCurrent(mapping, input.subjectId), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthAccountRevision, current.revision),\n          ),\n          false,\n        ),\n      issue: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* issueLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkIssueDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      preflight: (input) =>\n        execute.run(\n          Effect.map(preflightLink(mapping, input), (current) =>\n            current === undefined\n              ? undefined\n              : snapshotOAuthSync(OAuthLinkPendingFlow, current.flow),\n          ),\n          false,\n        ),\n      claim: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* claimLink(mapping, input);\n\n            return yield* prepareValue(\n              snapshotOAuthSync(OAuthLinkClaimDecision, value as never),\n              prepare,\n            );\n          }),\n        ),\n      settle: (input, prepare) =>\n        Effect.gen(function* () {\n          yield* execute.admit;\n          const allocated = resources ?? (yield* accountResources(mapping));\n\n          return yield* execute.run(\n            Effect.gen(function* () {\n              const value = yield* settleLink(mapping, input, allocated as never);\n\n              return yield* prepareValue(snapshotOAuthSync(OAuthLinkDecision, value), prepare);\n            }),\n          );\n        }).pipe(\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        ) as never,\n      inspectUnlink: (input) =>\n        execute.run(\n          Effect.map(inspectUnlink(mapping, input), (value) =>\n            snapshotOAuthSync(OAuthUnlinkInspection, value),\n          ),\n          false,\n        ),\n      unlink: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const value = yield* unlink(mapping, input);\n\n            return yield* prepareValue(snapshotOAuthSync(OAuthUnlinkDecision, value), prepare);\n          }),\n        ),\n      cleanup: (input, prepare) =>\n        execute.run(\n          Effect.gen(function* () {\n            const owner = yield* CurrentOAuthTransaction;\n            const value = yield* cleanupFlows(mapping, input, \"link\");\n            const remaining = input.limit - value.terminalized - value.removed;\n\n            const now = yield* owner.now(mapping.clock),\n              r = mapping.command;\n\n            let removed = 0;\n\n            if (remaining > 0) {\n              const rows = yield* owner.read(\n                r.table,\n                both(\n                  eq(col(r.table, r.moduleId), input.moduleId),\n                  sql`${col(r.table, r.retentionUntil)} < ${mapping.clock.encodeInstant(now)}`,\n                ),\n                { limit: remaining, observe: false, takeOnly: true },\n              );\n\n              for (const row of rows.rows) {\n                const key = { [r.moduleId]: input.moduleId, [r.commandId]: row[r.commandId] };\n                const selected = yield* owner.read(r.table, equal(r.table, key), { limit: 1 });\n                const current = selected.rows[0];\n\n                if (current === undefined) continue;\n                const horizon = mapping.clock.decodeInstant(current[r.retentionUntil]);\n\n                if (!Number.isSafeInteger(horizon) || horizon >= (yield* owner.now(mapping.clock)))\n                  continue;\n                yield* owner.remove(r.table, key);\n                owner.postconditions.push(sql`${mapping.clock.engineNowMillis} > ${horizon}`);\n                removed++;\n              }\n            }\n\n            return yield* prepareValue(\n              {\n                ...value,\n                removed: value.removed + removed,\n                hasMore: value.hasMore || remaining === removed,\n              },\n              prepare,\n            );\n          }),\n        ),\n    },\n    accountsInputs,\n    execute.active,\n    execute.poison,\n  );\n\nexport const makeTargetOAuthAccountsServices = (\n  mapping: any,\n  configuration: OAuthTargetConfiguration,\n) => {\n  const captured = captureOAuthMapping(mapping);\n\n  return Effect.map(makeOAuthExecution(configuration), (execution) => ({\n    oauthAccountsPersistence: makeOAuthAccounts(captured, execution),\n  }));\n};\n\nexport const oauthAccountsPersistenceLayer = <E, R>(\n  services: Effect.Effect<Effect.Success<ReturnType<typeof makeTargetOAuthAccountsServices>>, E, R>,\n) =>\n  Layer.effect(\n    OAuthAccountsPersistence,\n    Effect.map(services, (value) => value.oauthAccountsPersistence),\n  );\n\nexport const oauthSignInPersistenceLayer = <E, R>(\n  services: Effect.Effect<Effect.Success<ReturnType<typeof makeTargetOAuthSignInServices>>, E, R>,\n) =>\n  Layer.effect(\n    OAuthSignInPersistence,\n    Effect.map(services, (value) => value.oauthSignInPersistence),\n  );\n\nexport const oauthRegistrationIntentsLayer = <E, R>(\n  services: Effect.Effect<\n    Effect.Success<ReturnType<typeof makeTargetOAuthRegistrationIntentServices>>,\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    OAuthRegistrationIntents,\n    Effect.map(services, (value) => value.oauthRegistrationIntents),\n  );\n\nexport const oauthRegistrationAuthorityLayer = <Id, Registration, E, R>(\n  tag: Context.Key<Id, OAuthRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;;;;;;AAqFA,MAAa,iCACX,YACG,oCAAoC,aAAa,OAAO;AAE7D,MAAa,qBAAqB,OAAO,WAAW,WAClD,eAC0E;CAC1E,MAAM,QAAQ,OAAO;CAErB,MAAM,YAAY,OAAO,yBACvB,yBACA,eACA,aACA,KACF;CAEA,OAAO;EACL,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF;AACF,CAAC;AAED,MAAM,gBAA0B,OAAc,YAC5C,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,QAAQ,OAAO,MAAM,OAAO;AACrC,CAAC,CACH;AAEF,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,UAAU,YAChB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,kBAAkB,QAAQ;EAC1D,MAAM,QAAQ,OAAO,UAAU,SAAS,OAAO,SAAS;EAExD,OAAO,OAAO,aACZ,kBAAkB,oBAAoB,KAAc,GACpD,OACF;CACF,CAAC,CACH;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,OAAO,OAAO,SAAS,SAAS,OAAO,SAAS;EAEtD,MAAM,QACJ,KAAK,QAAQ,KAAA,KAAa,KAAK,SAAS,KAAA,KAAa,cAAc,KAAK,MAAM,KAAK,IAC/E,OAAO,UAAU,SAAS;GAAE,KAAK,KAAK;GAAK,MAAM,KAAK;EAAK,GAAG,MAAM,OAAO,IAC3E,KAAA;EAEN,OAAO,OAAO,aACZ,kBACE,oBACA,UAAU,KAAA,IACN,EAAE,MAAM,WAAW,IACnB;GAAE,MAAM;GAAkB;EAAgC,CAChE,GACA,OACF;CACF,CAAC,CACH;CACF,SAAS,UAAU,YACjB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,kBAAkB,YAAY,SAAS,KAAK;EAC1D,MAAM,UAAU,SAAS;EAEzB,MAAM,WACJ,QAAQ,SAAS,aACb,kBAAkB,+BAA+B,QAAQ,QAAQ,CAAC,CAAC,WACnE,KAAA;EAEN,IAAI,aAAa,KAAA,GACf,UACE,SAAS,aAAa,MAAM,KAAK,QAAQ,YACvC,SAAS,WAAW,MAAM,KAAK,QAAQ,MAC3C;EAGF,MAAM,QACJ,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,cAAc,SAAS,QAAQ;EAE7E,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAS;EACzD,IAAI,QAA6C,EAAE,MAAM,WAAW;EAEpE,IAAI,UAAU,KAAA,GAAW;GACvB,MAAM,aACJ,aAAa,KAAA,IACT,KAAA,IACA,aAAa,SAAS,MAAM,KAAK,QAAQ,UAAU,UAAU,KAAK;GAExE,QACE,QAAQ,SAAS,aACb,EAAE,MAAM,QAAQ,KAAK,IACrB,eAAe,KAAA,IACb,EAAE,MAAM,WAAW,IACnB;IAAE,MAAM;IAAY;GAAW;GACvC,OAAO,aAAa,SAAS,MAAM,MAAM,MAAM,IAAI;EACrD;EAEA,OAAO,OAAO,aAAa,kBAAkB,yBAAyB,KAAK,GAAG,OAAO;CACvF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,SAAS;EAE3D,OAAO,OAAO,aAAa,OAAO,OAAO;CAC3C,CAAC,CACH;AACJ,GACA,cACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,gCACX,SACA,YAEA,qBACE,EACE,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,yBAAyB,SAAS;EACrD,OAAO,kBAAkB,YAAY,MAAM,KAAK;EAChD,UAAU,kBAAkB,+BAA+B,MAAM,QAAQ;EACzE,GAAI,MAAM,WAAW,KAAA,IACjB,CAAC,IACD,EAAE,QAAQ,kBAAkB,yBAAyB,MAAM,MAAM,EAAE;CACzE,CAAC;CAED,OAAO,OAAO,aAAa,OAAO,OAAO;AAC3C,CAAC,CACH,EACJ,GACA,0BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,yBACX,SACA,SACA,cAQA,qBACE;CACE,OAAO,UACL,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,WAAW,QAAQ,UAAU,GACxE,KACF;CACF,UAAU,UACR,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,SAAS,kBAAkB,yBAAyB,MAAM,MAAM;EACtE,MAAM,SAAS,QAAQ,YAAY,OAAO,MAAM,YAAY;EAE5D,UACE,OAAO,WAAW,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU,OAC3E;EACA,MAAM,WAAW;GAAE;GAAQ,cAAc,QAAQ,YAAY,OAAO,MAAM;EAAE;EAE5E,MAAM,UAAU,QAAQ,SACnB,UAAU,QAAQ,gBAAgB,KAAA,CAAS,GAAG,QAAQ,YAAY,QAAQ,KAC3E,OAAQ,QAAgD,QAAQ,QAAQ;EAE5E,UAAU,OAAO,QAAQ,aAAa,SAAS;EAE/C,OAAO;GACL,aAAa,kBAAkB,8BAA8B,QAAQ,WAAW;GAChF,UAAU,QAAQ;EACpB;CACF,CAAC,CAAC,CAAC,MACA,WAAY,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,KAAK,IAAI,QAC1D,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,WAAW,OAAO,YAChB,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,OAAO,OAAO,iBAAiB,SAAS,OAAO,QAAQ,KAAK;EAClE,MAAM,YAAY,cAAc,OAAO,sBAAsB,OAAO;EAEpE,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,SAAS,SAAS,OAAO,MAAM,SAAS;GAE7D,OAAO,OAAO,aAAa,OAAO,OAAO;EAC3C,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,UAAU,UAAU,YAClB,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,MAAM,QAAQ,kBAAkB,mBAAmB,QAAQ,GACzD,IAAI,QAAQ,QACZ,IAAI,QAAQ;EAEd,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK;EAE1C,MAAM,aAAa,OAAO,MAAM,KAC9B,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GACjI,GACA;GAAE,OAAO,MAAM;GAAO,SAAS;GAAO,UAAU;EAAK,CACvD;EAEA,IAAI,UAAU;EAEd,KAAK,MAAM,aAAa,WAAW,MAAM;GAUvC,MAAM,OAAM,OATY,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;KACZ,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,UAAU,EAAE;GAC7B,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEqB,KAAK;GAE1B,IAAI,QAAQ,KAAA,KAAa,IAAI,EAAE,WAAW,uBAAuB;GACjE,IAAI,UAAU,QAAQ,MAAM,cAAc,IAAI,EAAE,eAAe;GAE/D,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;GACF,IAAI,IAAI,EAAE,eAAe,MAAM;IAU7B,MAAM,WAAU,OATQ,MAAM,KAC5B,EAAE,OACF,MAAM,EAAE,OAAO;MACZ,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEyB,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,UAAU,KAAK,IAAI,SAAS,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe,CAAC;IAClF,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO;MAC1B,EAAE,WAAW,MAAM;MACnB,EAAE,YAAY,IAAI,EAAE;IACvB,CAAC;GACH;GACA,OAAO,MAAM,OAAO,EAAE,OAAO;KAC1B,EAAE,WAAW,MAAM;KACnB,EAAE,YAAY,IAAI,EAAE;GACvB,CAAC;GACD,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;GAC5E;EACF;EAEA,OAAO,OAAO,aACZ;GAAE;GAAS,SAAS,WAAW,KAAK,WAAW,MAAM;EAAM,GAC3D,OACF;CACF,CAAC,CACH;AACJ,GACA,mBAAmB,QAAQ,WAAW,GACtC,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,iCACX,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,mBAAmB,aAAa,IAAI,eAAe,EACnE,wBAAwB,gBAAgB,UAAU,SAAS,EAC7D,EAAE;AACJ;AAEA,MAAa,6CACX,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,mBAAmB,aAAa,IAAI,eAAe,EACnE,0BAA0B,6BAA6B,UAAU,SAAS,EAC5E,EAAE;AACJ;AAEA,MAAa,uCACX,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,mBAAmB,aAAa,IAAI,eAAe,EACnE,uBAAuB,sBAAoC,UAAU,SAAS,EAChF,EAAE;AACJ;AAEA,MAAa,wBACX,UACA,SACA,eACA,UACA,UACA,UAKmE;CACnE,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,QAAQ,iBAAiB,UACrC,2BACE,UACA,yBACA,eACA,OAAO,cAAc,SAAS,QAAQ,CAAC,GACvC,aACA,QACC,WAAW,cACV,SACE,UACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxF,GACA,SACF,GACF,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD;AACF;AAEA,MAAM,oBAAoB,YACxB,OAAO,IAAI,aAAa;CACtB,OAAO;EACL,cAAc,kBACZ,wBAAwB,OAAO,cAC/B,OAAO,QAAQ,oBACjB;EACA,UAAU,kBACR,wBAAwB,OAAO,oBAC/B,OAAO,QAAQ,gBACjB;CACF;AACF,CAAC;AAEH,MAAa,qCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,wBACC,UAAU,SAAS,eAAe,EACjC,uBAAuB,sBAAoC,UAAU,SAAS,SAAS,EACzF,IACA,KACF;AAEF,MAAa,+BACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EAAE,wBAAwB,gBAAgB,UAAU,OAAO,EAAE,IACrF,KACF;AAEF,MAAa,4CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,qBACM,OAAO,OACZ,UAAU,aAAa,EACtB,0BAA0B,6BAA6B,UAAU,OAAO,EAC1E,IACA,KACF;AAEF,MAAa,iCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SACA,eACA,mBACC,UAAU,SAAS,eAAe,EACjC,0BAA0B,kBAAkB,UAAU,SAAS,SAAS,EAC1E,IACA,KACF;AAEF,MAAa,qBACX,SACA,SACA,cAEA,qBACE;CACE,UAAU,UACR,QAAQ,IACN,OAAO,IAAI,eAAe,SAAS,MAAM,SAAS,IAAI,YACpD,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,QAAQ,CAC9D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,YAAY,UACV,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,YACzC,YAAY,KAAA,IACR,KAAA,IACA,kBAAkB,sBAAsB,QAAQ,IAAI,CAC1D,GACA,KACF;CACF,QAAQ,OAAO,YACb,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,UAAU,SAAS,KAAK;EAE7C,OAAO,OAAO,aACZ,kBAAkB,wBAAwB,KAAc,GACxD,OACF;CACF,CAAC,CACH;CACF,SAAS,OAAO,YACd,OAAO,IAAI,aAAa;EACtB,OAAO,QAAQ;EACf,MAAM,YAAY,cAAc,OAAO,iBAAiB,OAAO;EAE/D,OAAO,OAAO,QAAQ,IACpB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,WAAW,SAAS,OAAO,SAAkB;GAElE,OAAO,OAAO,aAAa,kBAAkB,mBAAmB,KAAK,GAAG,OAAO;EACjF,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;CACF,gBAAgB,UACd,QAAQ,IACN,OAAO,IAAI,cAAc,SAAS,KAAK,IAAI,UACzC,kBAAkB,uBAAuB,KAAK,CAChD,GACA,KACF;CACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,OAAO,SAAS,KAAK;EAE1C,OAAO,OAAO,aAAa,kBAAkB,qBAAqB,KAAK,GAAG,OAAO;CACnF,CAAC,CACH;CACF,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,OAAO,aAAa,SAAS,OAAO,MAAM;EACxD,MAAM,YAAY,MAAM,QAAQ,MAAM,eAAe,MAAM;EAE3D,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,GACxC,IAAI,QAAQ;EAEd,IAAI,UAAU;EAEd,IAAI,YAAY,GAAG;GACjB,MAAM,OAAO,OAAO,MAAM,KACxB,EAAE,OACF,KACE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC3C,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,MAAM,cAAc,GAAG,GAC3E,GACA;IAAE,OAAO;IAAW,SAAS;IAAO,UAAU;GAAK,CACrD;GAEA,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,MAAM,MAAM;MAAG,EAAE,WAAW,MAAM;MAAW,EAAE,YAAY,IAAI,EAAE;IAAW;IAE5E,MAAM,WAAU,OADQ,MAAM,KAAK,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAA,CACpD,KAAK;IAE9B,IAAI,YAAY,KAAA,GAAW;IAC3B,MAAM,UAAU,QAAQ,MAAM,cAAc,QAAQ,EAAE,eAAe;IAErE,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,YAAY,OAAO,MAAM,IAAI,QAAQ,KAAK,IAC9E;IACF,OAAO,MAAM,OAAO,EAAE,OAAO,GAAG;IAChC,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS;IAC5E;GACF;EACF;EAEA,OAAO,OAAO,aACZ;GACE,GAAG;GACH,SAAS,MAAM,UAAU;GACzB,SAAS,MAAM,WAAW,cAAc;EAC1C,GACA,OACF;CACF,CAAC,CACH;AACJ,GACA,gBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,mCACX,SACA,kBACG;CACH,MAAM,WAAW,oBAAoB,OAAO;CAE5C,OAAO,OAAO,IAAI,mBAAmB,aAAa,IAAI,eAAe,EACnE,0BAA0B,kBAAkB,UAAU,SAAS,EACjE,EAAE;AACJ;AAEA,MAAa,iCACX,aAEA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,+BACX,aAEA,MAAM,OACJ,wBACA,OAAO,IAAI,WAAW,UAAU,MAAM,sBAAsB,CAC9D;AAEF,MAAa,iCACX,aAMA,MAAM,OACJ,0BACA,OAAO,IAAI,WAAW,UAAU,MAAM,wBAAwB,CAChE;AAEF,MAAa,mCACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/passkey-drivers.mjs

@@ -1,9 +1,11 @@
+import { nativeDatabase } from "./native-database.mjs";
 import { coordinateTargetPasskey, coordinateTargetPasskeyRegistration, makeTargetPasskeyCredentials, makeTargetPasskeyEnrollmentContext, makeTargetPasskeyPersistence, makeTargetPasskeyRegistration } from "./passkey-target.mjs";
 import { makePasskeyWriteTarget } from "./passkey-write-drivers.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect } from "effect";
 import { PasskeyPersistence } from "@yielded/auth/Passkey";
 //#region src/drizzle/passkey-drivers.ts
-const makePasskeyTarget = (configuration) => {
+const makePasskeyTarget = (databaseService, configuration) => {
 	function coordinatePasskeyPersistence(acquire, options, body) {
 		return Effect.flatMap(acquire, (database) => coordinateTargetPasskey(database, options.mapping, configuration, (transaction, services) => {
 			const provided = Context.make(PasskeyPersistence, services.passkeyPersistence);
@@ -19,11 +21,11 @@ const makePasskeyTarget = (configuration) => {
 		}));
 	}
 	return {
-		...makePasskeyWriteTarget(configuration),
-		makePasskeyCredentialServices: (database, mapping) => makeTargetPasskeyCredentials(database, mapping, configuration),
-		makePasskeyEnrollmentContextServices: (database, mapping) => makeTargetPasskeyEnrollmentContext(database, mapping, configuration),
-		makePasskeyPersistenceServices: (database, mapping) => makeTargetPasskeyPersistence(database, mapping, configuration),
-		makePasskeyRegistrationCeremonyServices: (database, mapping) => makeTargetPasskeyRegistration(database, mapping, configuration),
+		...makePasskeyWriteTarget(databaseService, configuration),
+		makePasskeyCredentialServices: (mapping) => makeTargetPasskeyCredentials(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		makePasskeyEnrollmentContextServices: (mapping) => makeTargetPasskeyEnrollmentContext(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		makePasskeyPersistenceServices: (mapping) => makeTargetPasskeyPersistence(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		makePasskeyRegistrationCeremonyServices: (mapping) => makeTargetPasskeyRegistration(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
 		coordinatePasskeyPersistence,
 		coordinatePasskeyRegistrationCeremony
 	};

package/dist/drizzle/passkey-drivers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"passkey-drivers.mjs","names":[],"sources":["../../src/drizzle/passkey-drivers.ts"],"sourcesContent":["import type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { PasskeyPersistence } from \"@yielded/auth/Passkey\";\nimport type { Table } from \"drizzle-orm\";\nimport { Effect, Context } from \"effect\";\n\nimport type {\n  PasskeyCredentialMapping,\n  PasskeyEnrollmentContextMapping,\n  PasskeyMappingSource,\n  PasskeyPersistenceMapping,\n  PasskeyPersistenceServices,\n} from \"./passkey-model\";\nimport type {\n  PasskeyRegistrationCeremonyMapping,\n  PasskeyRegistrationCeremonyServices,\n} from \"./passkey-registration-ceremony-model\";\nimport {\n  type PasskeyCoordinatorError,\n  coordinateTargetPasskey,\n  coordinateTargetPasskeyRegistration,\n  makeTargetPasskeyCredentials,\n  makeTargetPasskeyEnrollmentContext,\n  makeTargetPasskeyPersistence,\n  makeTargetPasskeyRegistration,\n  type PasskeyTargetConfiguration,\n} from \"./passkey-target\";\nimport { makePasskeyWriteTarget } from \"./passkey-write-drivers\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n// oxlint-disable-next-line no-explicit-any -- inspect only the concrete database's installed generic transaction callback.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\nexport const makePasskeyTarget = <\n  D,\n  T extends Table,\n  Extra = unknown,\n  Synchronous extends boolean = false,\n>(\n  configuration: PasskeyTargetConfiguration,\n) => {\n  function coordinatePasskeyPersistence<\n    Database extends D,\n    S extends T,\n    C extends T,\n    F extends T,\n    O extends T,\n    H extends T,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    N,\n    A,\n    E,\n    R,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyPersistence<\n    Database extends D,\n    S extends T,\n    C extends T,\n    F extends T,\n    O extends T,\n    H extends T,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyPersistence<\n    Database extends D,\n    S extends T,\n    C extends T,\n    F extends T,\n    O extends T,\n    H extends T,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    Exclude<R, PasskeyPersistence> | LifecycleHooks | DatabaseRequirements | RSetup\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetPasskey(\n        database,\n        options.mapping,\n        configuration,\n        (transaction: TransactionOf<Database>, services: PasskeyPersistenceServices) => {\n          const provided = Context.make(PasskeyPersistence, services.passkeyPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinatePasskeyRegistrationCeremony<\n    Database extends D,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    Intent extends T,\n    H extends T,\n    A,\n    E,\n    R,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyRegistrationCeremony<\n    Database extends D,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    Intent extends T,\n    H extends T,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyRegistrationCeremony<\n    Database extends D,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    Intent extends T,\n    H extends T,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    Exclude<R, PasskeyPersistence> | LifecycleHooks | DatabaseRequirements | RSetup\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetPasskeyRegistration(\n        database,\n        options.mapping,\n        configuration,\n        (transaction: TransactionOf<Database>, services: PasskeyRegistrationCeremonyServices) => {\n          const provided = Context.make(PasskeyPersistence, services.passkeyPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    ...makePasskeyWriteTarget<D, T, Extra, Synchronous>(configuration),\n    makePasskeyCredentialServices: <\n      Database extends D,\n      S extends T,\n      C extends T,\n      F extends T,\n      O extends T,\n      H extends T,\n      N,\n      RSetup = never,\n    >(\n      database: Database,\n      mapping: PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N> & Extra, RSetup>,\n    ) => makeTargetPasskeyCredentials(database, mapping, configuration),\n    makePasskeyEnrollmentContextServices: <\n      Database extends D,\n      S extends T,\n      C extends T,\n      F extends T,\n      O extends T,\n      H extends T,\n      M extends T,\n      N,\n      RSetup = never,\n    >(\n      database: Database,\n      mapping: PasskeyMappingSource<\n        PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N> & Extra,\n        RSetup\n      >,\n    ) => makeTargetPasskeyEnrollmentContext(database, mapping, configuration),\n    makePasskeyPersistenceServices: <\n      Database extends D,\n      S extends T,\n      C extends T,\n      F extends T,\n      O extends T,\n      H extends T,\n      M extends T,\n      Flow extends T,\n      Admission extends T,\n      Charge extends T,\n      N,\n      RSetup = never,\n    >(\n      database: Database,\n      mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >,\n    ) => makeTargetPasskeyPersistence(database, mapping, configuration),\n    makePasskeyRegistrationCeremonyServices: <\n      Database extends D,\n      M extends T,\n      Flow extends T,\n      Admission extends T,\n      Charge extends T,\n      Intent extends T,\n      H extends T,\n      RSetup = never,\n    >(\n      database: Database,\n      mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >,\n    ) => makeTargetPasskeyRegistration(database, mapping, configuration),\n    coordinatePasskeyPersistence,\n    coordinatePasskeyRegistrationCeremony,\n  };\n};\n"],"mappings":";;;;;AAkCA,MAAa,qBAMX,kBACG;CA2FH,SAAS,6BAqBP,SACA,SAeA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,wBACE,UACA,QAAQ,SACR,gBACC,aAAsC,aAAyC;GAC9E,MAAM,WAAW,QAAQ,KAAK,oBAAoB,SAAS,kBAAkB;GAC7E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAmEA,SAAS,sCAiBP,SACA,SAOA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,oCACE,UACA,QAAQ,SACR,gBACC,aAAsC,aAAkD;GACvF,MAAM,WAAW,QAAQ,KAAK,oBAAoB,SAAS,kBAAkB;GAC7E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,GAAG,uBAAiD,aAAa;EACjE,gCAUE,UACA,YACG,6BAA6B,UAAU,SAAS,aAAa;EAClE,uCAWE,UACA,YAIG,mCAAmC,UAAU,SAAS,aAAa;EACxE,iCAcE,UACA,YAYG,6BAA6B,UAAU,SAAS,aAAa;EAClE,0CAUE,UACA,YAIG,8BAA8B,UAAU,SAAS,aAAa;EACnE;EACA;CACF;AACF"}
+{"version":3,"file":"passkey-drivers.mjs","names":[],"sources":["../../src/drizzle/passkey-drivers.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { PasskeyPersistence } from \"@yielded/auth/Passkey\";\nimport type { Table } from \"drizzle-orm\";\nimport { Effect, Context } from \"effect\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type {\n  PasskeyCredentialMapping,\n  PasskeyEnrollmentContextMapping,\n  PasskeyMappingSource,\n  PasskeyPersistenceMapping,\n  PasskeyPersistenceServices,\n} from \"./passkey-model\";\nimport type {\n  PasskeyRegistrationCeremonyMapping,\n  PasskeyRegistrationCeremonyServices,\n} from \"./passkey-registration-ceremony-model\";\nimport {\n  type PasskeyCoordinatorError,\n  coordinateTargetPasskey,\n  coordinateTargetPasskeyRegistration,\n  makeTargetPasskeyCredentials,\n  makeTargetPasskeyEnrollmentContext,\n  makeTargetPasskeyPersistence,\n  makeTargetPasskeyRegistration,\n  type PasskeyTargetConfiguration,\n} from \"./passkey-target\";\nimport { makePasskeyWriteTarget } from \"./passkey-write-drivers\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n// oxlint-disable-next-line no-explicit-any -- inspect only the concrete database's installed generic transaction callback.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\nexport const makePasskeyTarget = <\n  DatabaseId,\n  D,\n  T extends Table,\n  Extra = unknown,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: PasskeyTargetConfiguration,\n) => {\n  function coordinatePasskeyPersistence<\n    Database extends D,\n    S extends T,\n    C extends T,\n    F extends T,\n    O extends T,\n    H extends T,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    N,\n    A,\n    E,\n    R,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyPersistence<\n    Database extends D,\n    S extends T,\n    C extends T,\n    F extends T,\n    O extends T,\n    H extends T,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyPersistence<\n    Database extends D,\n    S extends T,\n    C extends T,\n    F extends T,\n    O extends T,\n    H extends T,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    Exclude<R, PasskeyPersistence> | LifecycleHooks | DatabaseRequirements | RSetup\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetPasskey(\n        database,\n        options.mapping,\n        configuration,\n        (transaction: TransactionOf<Database>, services: PasskeyPersistenceServices) => {\n          const provided = Context.make(PasskeyPersistence, services.passkeyPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n  function coordinatePasskeyRegistrationCeremony<\n    Database extends D,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    Intent extends T,\n    H extends T,\n    A,\n    E,\n    R,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyRegistrationCeremony<\n    Database extends D,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    Intent extends T,\n    H extends T,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PasskeyPersistence | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasskeyPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n    | RSetup\n  >;\n  function coordinatePasskeyRegistrationCeremony<\n    Database extends D,\n    M extends T,\n    Flow extends T,\n    Admission extends T,\n    Charge extends T,\n    Intent extends T,\n    H extends T,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    PasskeyCoordinatorError<E> | DatabaseError,\n    Exclude<R, PasskeyPersistence> | LifecycleHooks | DatabaseRequirements | RSetup\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetPasskeyRegistration(\n        database,\n        options.mapping,\n        configuration,\n        (transaction: TransactionOf<Database>, services: PasskeyRegistrationCeremonyServices) => {\n          const provided = Context.make(PasskeyPersistence, services.passkeyPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    ...makePasskeyWriteTarget<DatabaseId, D, T, Extra, Synchronous>(databaseService, configuration),\n    makePasskeyCredentialServices: <\n      S extends T,\n      C extends T,\n      F extends T,\n      O extends T,\n      H extends T,\n      N,\n      RSetup = never,\n    >(\n      mapping: PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N> & Extra, RSetup>,\n    ) =>\n      makeTargetPasskeyCredentials(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makePasskeyEnrollmentContextServices: <\n      S extends T,\n      C extends T,\n      F extends T,\n      O extends T,\n      H extends T,\n      M extends T,\n      N,\n      RSetup = never,\n    >(\n      mapping: PasskeyMappingSource<\n        PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N> & Extra,\n        RSetup\n      >,\n    ) =>\n      makeTargetPasskeyEnrollmentContext(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makePasskeyPersistenceServices: <\n      S extends T,\n      C extends T,\n      F extends T,\n      O extends T,\n      H extends T,\n      M extends T,\n      Flow extends T,\n      Admission extends T,\n      Charge extends T,\n      N,\n      RSetup = never,\n    >(\n      mapping: PasskeyMappingSource<\n        PasskeyPersistenceMapping<\n          PasskeyCredentialMapping<S, C, F, O, H, N>,\n          M,\n          Flow,\n          Admission,\n          Charge,\n          N\n        > &\n          Extra,\n        RSetup\n      >,\n    ) =>\n      makeTargetPasskeyPersistence(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makePasskeyRegistrationCeremonyServices: <\n      M extends T,\n      Flow extends T,\n      Admission extends T,\n      Charge extends T,\n      Intent extends T,\n      H extends T,\n      RSetup = never,\n    >(\n      mapping: PasskeyMappingSource<\n        PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & Extra,\n        RSetup\n      >,\n    ) =>\n      makeTargetPasskeyRegistration(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasskeyPersistence,\n    coordinatePasskeyRegistrationCeremony,\n  };\n};\n"],"mappings":";;;;;;;AAoCA,MAAa,qBAOX,iBACA,kBACG;CA2FH,SAAS,6BAqBP,SACA,SAeA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,wBACE,UACA,QAAQ,SACR,gBACC,aAAsC,aAAyC;GAC9E,MAAM,WAAW,QAAQ,KAAK,oBAAoB,SAAS,kBAAkB;GAC7E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAmEA,SAAS,sCAiBP,SACA,SAOA,MAKA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,oCACE,UACA,QAAQ,SACR,gBACC,aAAsC,aAAkD;GACvF,MAAM,WAAW,QAAQ,KAAK,oBAAoB,SAAS,kBAAkB;GAC7E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,GAAG,uBAA6D,iBAAiB,aAAa;EAC9F,gCASE,YAEA,6BAA6B,SAAS,aAAa,CAAC,CAAC,KACnD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,uCAUE,YAKA,mCAAmC,SAAS,aAAa,CAAC,CAAC,KACzD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,iCAaE,YAaA,6BAA6B,SAAS,aAAa,CAAC,CAAC,KACnD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,0CASE,YAKA,8BAA8B,SAAS,aAAa,CAAC,CAAC,KACpD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA;CACF;AACF"}