@yielded/auth-persistence-drizzle 0.1.0-beta.23 → 0.1.0-beta.24

package/dist/drizzle/storage-validation.mjs

@@ -1,196 +1,17 @@
-import { NativeDatabase, PersistenceMappingError, validateStorageBatch } from "@yielded/auth-persistence/Adapter";
+import { NativeDatabase, PersistenceMappingError, storageKeyPlans, validateStorageBatch } from "@yielded/auth-persistence/Adapter";
 import { Table, getTableColumns, getTableName, is } from "drizzle-orm";
-import { Effect, Predicate, Schema } from "effect";
+import { Effect } from "effect";
 import { MySqlTable, getTableConfig } from "drizzle-orm/mysql-core";
 import { PgTable, getTableConfig as getTableConfig$1 } from "drizzle-orm/pg-core";
 import { SqlClient } from "effect/sql/SqlClient";
 //#region src/drizzle/storage-validation.ts
-const uniquePlans = {
-	"unique(abuseEvent.moduleId,abuseEvent.action,abuseEvent.scopeKind,abuseEvent.scopeKey,abuseEvent.commandId)": ["abuseEvent", [
-		"moduleId",
-		"action",
-		"scopeKind",
-		"scopeKey",
-		"commandId"
-	]],
-	"unique(admission.moduleId)": ["admission", ["moduleId"]],
-	"unique(attempt.moduleId,attempt.attemptId)": ["attempt", ["moduleId", "attemptId"]],
-	"unique(authority.subjectId,authority.credentialId)": ["authority", ["subjectId", "credentialId"]],
-	"unique(authorityCredential.subjectId,authorityCredential.credentialId)": ["authorityCredential", ["subjectId", "credentialId"]],
-	"unique(command.moduleId,command.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(connectedAdmission.admissionId)": ["admission", ["admissionId"]],
-	"unique(connectedClient.clientKey)": ["client", ["clientKey"]],
-	"unique(connectedCohort.cohortKey)": ["cohort", ["cohortKey"]],
-	"unique(connectedCommand.moduleId,connectedCommand.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(connectedFlow.moduleId,connectedFlow.commandId)": ["flow", ["moduleId", "commandId"]],
-	"unique(connectedFlow.moduleId,connectedFlow.flowId)": ["flow", ["moduleId", "flowId"]],
-	"unique(connectedFlow.stateDigest)": ["flow", ["stateDigest"]],
-	"unique(connectedGrant.moduleId,connectedGrant.grantId)": ["grant", ["moduleId", "grantId"]],
-	"unique(connectedGrant.moduleId,connectedGrant.subjectId,connectedGrant.profileKey,connectedGrant.activeIdentityKey)": ["grant", [
-		"moduleId",
-		"subjectId",
-		"profileKey",
-		"activeIdentityKey"
-	]],
-	"unique(connectedRevocation.jobId)": ["job", ["jobId"]],
-	"unique(continuation.moduleId,continuation.continuationId)": ["continuation", ["moduleId", "continuationId"]],
-	"unique(continuation.moduleId,continuation.digest)": ["continuation", ["moduleId", "digest"]],
-	"unique(credential.credentialId)": ["credential", ["credentialId"]],
-	"unique(credential.identityKey)": ["credential", ["identityKey"]],
-	"unique(credential.moduleId,credential.credentialId)": ["credential", ["moduleId", "credentialId"]],
-	"unique(credential.moduleId,credential.subjectId)": ["credential", ["moduleId", "subjectId"]],
-	"unique(emailCommand.moduleId,emailCommand.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(emailCredential.moduleId,emailCredential.credentialId)": ["credential", ["moduleId", "credentialId"]],
-	"unique(emailCredential.moduleId,emailCredential.identifierNamespace,emailCredential.identifierValue)": ["credential", [
-		"moduleId",
-		"identifierNamespace",
-		"identifierValue"
-	]],
-	"unique(emailRegistration.moduleId,emailRegistration.commandId)": ["registration", ["moduleId", "commandId"]],
-	"unique(emailRegistration.pendingReference)": ["registration", ["pendingReference"]],
-	"unique(failureEvent.moduleId,failureEvent.seriesKey,failureEvent.commandId)": ["failureEvent", [
-		"moduleId",
-		"seriesKey",
-		"commandId"
-	]],
-	"unique(flow.flowId)": ["flow", ["flowId"]],
-	"unique(flow.moduleId,flow.commandId)": ["flow", ["moduleId", "commandId"]],
-	"unique(flow.moduleId,flow.flowId)": ["flow", ["moduleId", "flowId"]],
-	"unique(flow.stateDigest)": ["flow", ["stateDigest"]],
-	"unique(generation.moduleId,generation.deliveryId)": ["generation", ["moduleId", "deliveryId"]],
-	"unique(generation.moduleId,generation.proofId)": ["generation", ["moduleId", "proofId"]],
-	"unique(identifier.namespace,identifier.value)": ["identifier", ["namespace", "value"]],
-	"unique(intent.digest)": ["intent", ["digest"]],
-	"unique(intent.flowId)": ["intent", ["flowId"]],
-	"unique(intent.moduleId,intent.commandId)": ["intent", ["moduleId", "commandId"]],
-	"unique(intent.moduleId,intent.flowId)": ["intent", ["moduleId", "flowId"]],
-	"unique(intent.moduleId,intent.intentId)": ["intent", ["moduleId", "intentId"]],
-	"unique(intent.moduleId,intent.reference)": ["intent", ["moduleId", "reference"]],
-	"unique(ownership.identityKey)": ["ownership", ["identityKey"]],
-	"unique(pending.digest)": ["pending", ["digest"]],
-	"unique(pending.flowId)": ["pending", ["flowId"]],
-	"unique(rateScope.moduleId,rateScope.purpose,rateScope.action,rateScope.scopeKind,rateScope.scopeKey)": ["rateScope", [
-		"moduleId",
-		"purpose",
-		"action",
-		"scopeKind",
-		"scopeKey"
-	]],
-	"unique(registration.moduleId,registration.requestId)": ["registration", ["moduleId", "requestId"]],
-	"unique(registration.recoveryReference)": ["registration", ["recoveryReference"]],
-	"unique(registrationCommand.moduleId,registrationCommand.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(request.moduleId,request.requestId)": ["request", ["moduleId", "requestId"]],
-	"unique(series.moduleId,series.purpose,series.scopeKey)": ["series", [
-		"moduleId",
-		"purpose",
-		"scopeKey"
-	]],
-	"unique(session.digest)": ["session", ["digest"]],
-	"unique(tombstone.subjectId,tombstone.sessionId)": ["tombstone", ["subjectId", "sessionId"]],
-	"unique(tuple.identityKey)": ["ownership.tuple", ["identityKey"]],
-	"unique(unlinkCommand.moduleId,unlinkCommand.commandId)": ["command", ["moduleId", "commandId"]]
-};
-const arrayRoles = {
-	credentialId: "credential",
-	factor: "authority",
-	credentialOwnership: "credentialOwnership",
-	handleOwnership: "handleOwnership",
-	boundSubjectHandle: "handleOwnership",
-	flow: "flow",
-	command: "flow",
-	admission: "admission",
-	charge: "charge",
-	intentFlow: "intent",
-	intentCommand: "intent",
-	handle: "handle"
-};
-const nestedMappings = [
-	"read",
-	"signIn",
-	"password",
-	"proof",
-	"proofs",
-	"revocation",
-	"pending",
-	"session",
-	"source"
-];
-const constraintGroups = [
-	"constraints",
-	"tupleConstraints",
-	"registrationConstraints",
-	"managementConstraints"
-];
-const MappingRecord = Schema.Record(Schema.String, Schema.Unknown);
-const record = Schema.decodeUnknownSync(MappingRecord);
-const plans = (mapping) => {
-	const result = [];
-	for (const group of constraintGroups) {
-		if (mapping[group] === void 0) continue;
-		for (const [name, declaration] of Object.entries(record(mapping[group]))) {
-			if (declaration === "notNull(provisioningRequest.subjectId)") continue;
-			let role;
-			let keys;
-			if (typeof declaration === "string") {
-				const plan = uniquePlans[declaration];
-				if (plan !== void 0) [role, keys] = plan;
-				else if (declaration === "unique(id)") {
-					role = "subject";
-					keys = ["id"];
-				} else if (declaration === "unique(scope)") {
-					role = name;
-					keys = ["scope"];
-				} else if (declaration === "unique(credentialId)") {
-					role = "credential";
-					keys = ["id"];
-				} else if (declaration === "unique(namespace,value)") {
-					role = "identifier";
-					keys = ["namespace", "value"];
-				} else if (declaration === "unique(provider,issuer,subject)") {
-					role = "externalIdentity";
-					keys = [
-						"provider",
-						"issuer",
-						"subject"
-					];
-				} else if (declaration === "unique(requestId)") {
-					role = "provisioningRequest";
-					keys = ["requestId"];
-				} else throw new Error("Unknown storage constraint");
-			} else if (Array.isArray(declaration) && declaration.every(Predicate.isString)) {
-				const mappedRole = group === "managementConstraints" && name === "command" ? "command" : arrayRoles[name];
-				if (mappedRole === void 0) throw new Error("Unknown storage constraint");
-				role = mappedRole;
-				keys = declaration;
-			} else throw new Error("Invalid storage constraint");
-			let target = mapping;
-			for (const segment of role.split(".")) target = record(target)[segment];
-			if (target === void 0 && Schema.is(MappingRecord)(mapping.pending)) target = mapping.pending[role];
-			let mapped = record(target);
-			if (role === "pending" && mapped.table === void 0) mapped = record(mapped.pending);
-			if (role === "ownership" && mapped.table === void 0) mapped = record(mapped.external ?? mapped.tuple);
-			if (!is(mapped.table, Table)) throw new Error("Missing storage table");
-			const columns = getTableColumns(mapped.table);
-			result.push({
-				table: mapped.table,
-				keys: keys.map((key) => {
-					const value = mapped[key];
-					if (typeof value !== "string" || columns[value] === void 0) throw new Error("Missing mapped key");
-					return value;
-				})
-			});
-		}
-	}
-	for (const nested of nestedMappings) {
-		const value = mapping[nested];
-		if (Schema.is(MappingRecord)(value) && value.table === void 0) result.push(...plans(value));
-	}
-	return result;
-};
 /** Validate at acquisition using the root database supplied by the adapter. */
 const validateDrizzleStorage = Effect.fnUntraced(function* (mapping) {
 	const physical = yield* Effect.try({
-		try: () => plans(record(mapping)),
+		try: () => storageKeyPlans(mapping, (table) => {
+			if (!is(table, Table)) throw new Error("Missing storage table");
+			return getTableColumns(table);
+		}),
 		catch: () => PersistenceMappingError.make({
 			operation: "mapping",
 			cause: "Invalid storage key mapping"
@@ -199,6 +20,10 @@ const validateDrizzleStorage = Effect.fnUntraced(function* (mapping) {
 	const { $client: client } = yield* NativeDatabase;
 	const batches = /* @__PURE__ */ new Map();
 	for (const plan of physical) {
+		if (!is(plan.table, Table)) return yield* PersistenceMappingError.make({
+			operation: "mapping",
+			cause: "Missing storage table"
+		});
 		const pg = is(plan.table, PgTable);
 		const mysql = is(plan.table, MySqlTable);
 		const schema = pg ? getTableConfig$1(plan.table).schema : mysql ? getTableConfig(plan.table).schema : void 0;

package/dist/drizzle/storage-validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storage-validation.mjs","names":["getPgTableConfig","getMysqlTableConfig"],"sources":["../../src/drizzle/storage-validation.ts"],"sourcesContent":["import {\n  NativeDatabase,\n  PersistenceMappingError,\n  validateStorageBatch,\n  type StorageValidation,\n} from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns, getTableName, is, Table } from \"drizzle-orm\";\nimport { getTableConfig as getMysqlTableConfig, MySqlTable } from \"drizzle-orm/mysql-core\";\nimport { getTableConfig as getPgTableConfig, PgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Predicate, Schema } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\n\n// These are mapping contracts, not a parser for arbitrary constraint declarations.\n// Role aliases are explicit because their documentation names differ from mapping fields.\nconst uniquePlans: Readonly<Record<string, readonly [string, ReadonlyArray<string>]>> = {\n  \"unique(abuseEvent.moduleId,abuseEvent.action,abuseEvent.scopeKind,abuseEvent.scopeKey,abuseEvent.commandId)\":\n    [\"abuseEvent\", [\"moduleId\", \"action\", \"scopeKind\", \"scopeKey\", \"commandId\"]],\n  \"unique(admission.moduleId)\": [\"admission\", [\"moduleId\"]],\n  \"unique(attempt.moduleId,attempt.attemptId)\": [\"attempt\", [\"moduleId\", \"attemptId\"]],\n  \"unique(authority.subjectId,authority.credentialId)\": [\n    \"authority\",\n    [\"subjectId\", \"credentialId\"],\n  ],\n  \"unique(authorityCredential.subjectId,authorityCredential.credentialId)\": [\n    \"authorityCredential\",\n    [\"subjectId\", \"credentialId\"],\n  ],\n  \"unique(command.moduleId,command.commandId)\": [\"command\", [\"moduleId\", \"commandId\"]],\n  \"unique(connectedAdmission.admissionId)\": [\"admission\", [\"admissionId\"]],\n  \"unique(connectedClient.clientKey)\": [\"client\", [\"clientKey\"]],\n  \"unique(connectedCohort.cohortKey)\": [\"cohort\", [\"cohortKey\"]],\n  \"unique(connectedCommand.moduleId,connectedCommand.commandId)\": [\n    \"command\",\n    [\"moduleId\", \"commandId\"],\n  ],\n  \"unique(connectedFlow.moduleId,connectedFlow.commandId)\": [\"flow\", [\"moduleId\", \"commandId\"]],\n  \"unique(connectedFlow.moduleId,connectedFlow.flowId)\": [\"flow\", [\"moduleId\", \"flowId\"]],\n  \"unique(connectedFlow.stateDigest)\": [\"flow\", [\"stateDigest\"]],\n  \"unique(connectedGrant.moduleId,connectedGrant.grantId)\": [\"grant\", [\"moduleId\", \"grantId\"]],\n  \"unique(connectedGrant.moduleId,connectedGrant.subjectId,connectedGrant.profileKey,connectedGrant.activeIdentityKey)\":\n    [\"grant\", [\"moduleId\", \"subjectId\", \"profileKey\", \"activeIdentityKey\"]],\n  \"unique(connectedRevocation.jobId)\": [\"job\", [\"jobId\"]],\n  \"unique(continuation.moduleId,continuation.continuationId)\": [\n    \"continuation\",\n    [\"moduleId\", \"continuationId\"],\n  ],\n  \"unique(continuation.moduleId,continuation.digest)\": [\"continuation\", [\"moduleId\", \"digest\"]],\n  \"unique(credential.credentialId)\": [\"credential\", [\"credentialId\"]],\n  \"unique(credential.identityKey)\": [\"credential\", [\"identityKey\"]],\n  \"unique(credential.moduleId,credential.credentialId)\": [\n    \"credential\",\n    [\"moduleId\", \"credentialId\"],\n  ],\n  \"unique(credential.moduleId,credential.subjectId)\": [\"credential\", [\"moduleId\", \"subjectId\"]],\n  \"unique(emailCommand.moduleId,emailCommand.commandId)\": [\"command\", [\"moduleId\", \"commandId\"]],\n  \"unique(emailCredential.moduleId,emailCredential.credentialId)\": [\n    \"credential\",\n    [\"moduleId\", \"credentialId\"],\n  ],\n  \"unique(emailCredential.moduleId,emailCredential.identifierNamespace,emailCredential.identifierValue)\":\n    [\"credential\", [\"moduleId\", \"identifierNamespace\", \"identifierValue\"]],\n  \"unique(emailRegistration.moduleId,emailRegistration.commandId)\": [\n    \"registration\",\n    [\"moduleId\", \"commandId\"],\n  ],\n  \"unique(emailRegistration.pendingReference)\": [\"registration\", [\"pendingReference\"]],\n  \"unique(failureEvent.moduleId,failureEvent.seriesKey,failureEvent.commandId)\": [\n    \"failureEvent\",\n    [\"moduleId\", \"seriesKey\", \"commandId\"],\n  ],\n  \"unique(flow.flowId)\": [\"flow\", [\"flowId\"]],\n  \"unique(flow.moduleId,flow.commandId)\": [\"flow\", [\"moduleId\", \"commandId\"]],\n  \"unique(flow.moduleId,flow.flowId)\": [\"flow\", [\"moduleId\", \"flowId\"]],\n  \"unique(flow.stateDigest)\": [\"flow\", [\"stateDigest\"]],\n  \"unique(generation.moduleId,generation.deliveryId)\": [\"generation\", [\"moduleId\", \"deliveryId\"]],\n  \"unique(generation.moduleId,generation.proofId)\": [\"generation\", [\"moduleId\", \"proofId\"]],\n  \"unique(identifier.namespace,identifier.value)\": [\"identifier\", [\"namespace\", \"value\"]],\n  \"unique(intent.digest)\": [\"intent\", [\"digest\"]],\n  \"unique(intent.flowId)\": [\"intent\", [\"flowId\"]],\n  \"unique(intent.moduleId,intent.commandId)\": [\"intent\", [\"moduleId\", \"commandId\"]],\n  \"unique(intent.moduleId,intent.flowId)\": [\"intent\", [\"moduleId\", \"flowId\"]],\n  \"unique(intent.moduleId,intent.intentId)\": [\"intent\", [\"moduleId\", \"intentId\"]],\n  \"unique(intent.moduleId,intent.reference)\": [\"intent\", [\"moduleId\", \"reference\"]],\n  \"unique(ownership.identityKey)\": [\"ownership\", [\"identityKey\"]],\n  \"unique(pending.digest)\": [\"pending\", [\"digest\"]],\n  \"unique(pending.flowId)\": [\"pending\", [\"flowId\"]],\n  \"unique(rateScope.moduleId,rateScope.purpose,rateScope.action,rateScope.scopeKind,rateScope.scopeKey)\":\n    [\"rateScope\", [\"moduleId\", \"purpose\", \"action\", \"scopeKind\", \"scopeKey\"]],\n  \"unique(registration.moduleId,registration.requestId)\": [\n    \"registration\",\n    [\"moduleId\", \"requestId\"],\n  ],\n  \"unique(registration.recoveryReference)\": [\"registration\", [\"recoveryReference\"]],\n  \"unique(registrationCommand.moduleId,registrationCommand.commandId)\": [\n    \"command\",\n    [\"moduleId\", \"commandId\"],\n  ],\n  \"unique(request.moduleId,request.requestId)\": [\"request\", [\"moduleId\", \"requestId\"]],\n  \"unique(series.moduleId,series.purpose,series.scopeKey)\": [\n    \"series\",\n    [\"moduleId\", \"purpose\", \"scopeKey\"],\n  ],\n  \"unique(session.digest)\": [\"session\", [\"digest\"]],\n  \"unique(tombstone.subjectId,tombstone.sessionId)\": [\"tombstone\", [\"subjectId\", \"sessionId\"]],\n  \"unique(tuple.identityKey)\": [\"ownership.tuple\", [\"identityKey\"]],\n  \"unique(unlinkCommand.moduleId,unlinkCommand.commandId)\": [\"command\", [\"moduleId\", \"commandId\"]],\n};\n\nconst arrayRoles: Readonly<Record<string, string>> = {\n  credentialId: \"credential\",\n  factor: \"authority\",\n  credentialOwnership: \"credentialOwnership\",\n  handleOwnership: \"handleOwnership\",\n  boundSubjectHandle: \"handleOwnership\",\n  flow: \"flow\",\n  command: \"flow\",\n  admission: \"admission\",\n  charge: \"charge\",\n  intentFlow: \"intent\",\n  intentCommand: \"intent\",\n  handle: \"handle\",\n};\n\nconst nestedMappings = [\n  \"read\",\n  \"signIn\",\n  \"password\",\n  \"proof\",\n  \"proofs\",\n  \"revocation\",\n  \"pending\",\n  \"session\",\n  \"source\",\n];\n\nconst constraintGroups = [\n  \"constraints\",\n  \"tupleConstraints\",\n  \"registrationConstraints\",\n  \"managementConstraints\",\n];\n\nconst MappingRecord = Schema.Record(Schema.String, Schema.Unknown);\nconst record = Schema.decodeUnknownSync(MappingRecord);\n\nconst plans = (mapping: Readonly<Record<string, unknown>>) => {\n  const result: Array<{ readonly table: Table; readonly keys: ReadonlyArray<string> }> = [];\n\n  for (const group of constraintGroups) {\n    if (mapping[group] === undefined) continue;\n    for (const [name, declaration] of Object.entries(record(mapping[group]))) {\n      if (declaration === \"notNull(provisioningRequest.subjectId)\") continue;\n      let role: string;\n      let keys: ReadonlyArray<string>;\n\n      if (typeof declaration === \"string\") {\n        const plan = uniquePlans[declaration];\n\n        if (plan !== undefined) [role, keys] = plan;\n        else if (declaration === \"unique(id)\") {\n          role = \"subject\";\n          keys = [\"id\"];\n        } else if (declaration === \"unique(scope)\") {\n          role = name;\n          keys = [\"scope\"];\n        } else if (declaration === \"unique(credentialId)\") {\n          role = \"credential\";\n          keys = [\"id\"];\n        } else if (declaration === \"unique(namespace,value)\") {\n          role = \"identifier\";\n          keys = [\"namespace\", \"value\"];\n        } else if (declaration === \"unique(provider,issuer,subject)\") {\n          role = \"externalIdentity\";\n          keys = [\"provider\", \"issuer\", \"subject\"];\n        } else if (declaration === \"unique(requestId)\") {\n          role = \"provisioningRequest\";\n          keys = [\"requestId\"];\n        } else throw new Error(\"Unknown storage constraint\");\n      } else if (Array.isArray(declaration) && declaration.every(Predicate.isString)) {\n        const mappedRole =\n          group === \"managementConstraints\" && name === \"command\" ? \"command\" : arrayRoles[name];\n\n        if (mappedRole === undefined) throw new Error(\"Unknown storage constraint\");\n        role = mappedRole;\n        keys = declaration;\n      } else throw new Error(\"Invalid storage constraint\");\n\n      let target: unknown = mapping;\n\n      for (const segment of role.split(\".\")) target = record(target)[segment];\n      // Session authority places its pending tables in one nested mapping.\n      if (target === undefined && Schema.is(MappingRecord)(mapping.pending))\n        target = mapping.pending[role];\n      let mapped = record(target);\n\n      if (role === \"pending\" && mapped.table === undefined) mapped = record(mapped.pending);\n      // OAuth ownership can be integrated into its tuple authority or separate.\n      if (role === \"ownership\" && mapped.table === undefined)\n        mapped = record(mapped.external ?? mapped.tuple);\n      if (!is(mapped.table, Table)) throw new Error(\"Missing storage table\");\n      const columns = getTableColumns(mapped.table);\n\n      result.push({\n        table: mapped.table,\n        keys: keys.map((key) => {\n          const value = mapped[key];\n\n          if (typeof value !== \"string\" || columns[value] === undefined)\n            throw new Error(\"Missing mapped key\");\n\n          return value;\n        }),\n      });\n    }\n  }\n  for (const nested of nestedMappings) {\n    const value = mapping[nested];\n\n    if (Schema.is(MappingRecord)(value) && value.table === undefined) result.push(...plans(value));\n  }\n\n  return result;\n};\n\n/** Validate at acquisition using the root database supplied by the adapter. */\nexport const validateDrizzleStorage = Effect.fnUntraced(\n  function* (mapping: unknown) {\n    const physical = yield* Effect.try({\n      try: () => plans(record(mapping)),\n      catch: () =>\n        PersistenceMappingError.make({\n          operation: \"mapping\",\n          cause: \"Invalid storage key mapping\",\n        }),\n    });\n\n    const { $client: client } = yield* NativeDatabase;\n\n    const batches = new Map<\"pg\" | \"mysql\" | \"sqlite\", StorageValidation[]>();\n\n    for (const plan of physical) {\n      const pg = is(plan.table, PgTable);\n      const mysql = is(plan.table, MySqlTable);\n\n      const schema = pg\n        ? getPgTableConfig(plan.table).schema\n        : mysql\n          ? getMysqlTableConfig(plan.table).schema\n          : undefined;\n\n      const columns = getTableColumns(plan.table);\n\n      const dialect = pg ? \"pg\" : mysql ? \"mysql\" : \"sqlite\";\n      const batch = batches.get(dialect) ?? [];\n\n      batch.push({\n        table: {\n          name: getTableName(plan.table),\n          ...(schema === undefined ? {} : { schema }),\n          columns: Object.fromEntries(plan.keys.map((key) => [key, { name: columns[key]!.name }])),\n        },\n        required: [plan.keys],\n      });\n      batches.set(dialect, batch);\n    }\n    for (const [dialect, requirements] of batches) {\n      yield* validateStorageBatch(dialect, requirements).pipe(\n        Effect.provideService(SqlClient, client),\n        Effect.mapError(() =>\n          PersistenceMappingError.make({\n            operation: \"mapping\",\n            cause: \"Required SQL storage key is unavailable\",\n          }),\n        ),\n      );\n    }\n  },\n  Effect.catchDefect(() =>\n    Effect.fail(\n      PersistenceMappingError.make({\n        operation: \"mapping\",\n        cause: \"Cannot inspect SQL storage metadata\",\n      }),\n    ),\n  ),\n);\n"],"mappings":";;;;;;;AAcA,MAAM,cAAkF;CACtF,+GACE,CAAC,cAAc;EAAC;EAAY;EAAU;EAAa;EAAY;CAAW,CAAC;CAC7E,8BAA8B,CAAC,aAAa,CAAC,UAAU,CAAC;CACxD,8CAA8C,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CACnF,sDAAsD,CACpD,aACA,CAAC,aAAa,cAAc,CAC9B;CACA,0EAA0E,CACxE,uBACA,CAAC,aAAa,cAAc,CAC9B;CACA,8CAA8C,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CACnF,0CAA0C,CAAC,aAAa,CAAC,aAAa,CAAC;CACvE,qCAAqC,CAAC,UAAU,CAAC,WAAW,CAAC;CAC7D,qCAAqC,CAAC,UAAU,CAAC,WAAW,CAAC;CAC7D,gEAAgE,CAC9D,WACA,CAAC,YAAY,WAAW,CAC1B;CACA,0DAA0D,CAAC,QAAQ,CAAC,YAAY,WAAW,CAAC;CAC5F,uDAAuD,CAAC,QAAQ,CAAC,YAAY,QAAQ,CAAC;CACtF,qCAAqC,CAAC,QAAQ,CAAC,aAAa,CAAC;CAC7D,0DAA0D,CAAC,SAAS,CAAC,YAAY,SAAS,CAAC;CAC3F,uHACE,CAAC,SAAS;EAAC;EAAY;EAAa;EAAc;CAAmB,CAAC;CACxE,qCAAqC,CAAC,OAAO,CAAC,OAAO,CAAC;CACtD,6DAA6D,CAC3D,gBACA,CAAC,YAAY,gBAAgB,CAC/B;CACA,qDAAqD,CAAC,gBAAgB,CAAC,YAAY,QAAQ,CAAC;CAC5F,mCAAmC,CAAC,cAAc,CAAC,cAAc,CAAC;CAClE,kCAAkC,CAAC,cAAc,CAAC,aAAa,CAAC;CAChE,uDAAuD,CACrD,cACA,CAAC,YAAY,cAAc,CAC7B;CACA,oDAAoD,CAAC,cAAc,CAAC,YAAY,WAAW,CAAC;CAC5F,wDAAwD,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CAC7F,iEAAiE,CAC/D,cACA,CAAC,YAAY,cAAc,CAC7B;CACA,wGACE,CAAC,cAAc;EAAC;EAAY;EAAuB;CAAiB,CAAC;CACvE,kEAAkE,CAChE,gBACA,CAAC,YAAY,WAAW,CAC1B;CACA,8CAA8C,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;CACnF,+EAA+E,CAC7E,gBACA;EAAC;EAAY;EAAa;CAAW,CACvC;CACA,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC;CAC1C,wCAAwC,CAAC,QAAQ,CAAC,YAAY,WAAW,CAAC;CAC1E,qCAAqC,CAAC,QAAQ,CAAC,YAAY,QAAQ,CAAC;CACpE,4BAA4B,CAAC,QAAQ,CAAC,aAAa,CAAC;CACpD,qDAAqD,CAAC,cAAc,CAAC,YAAY,YAAY,CAAC;CAC9F,kDAAkD,CAAC,cAAc,CAAC,YAAY,SAAS,CAAC;CACxF,iDAAiD,CAAC,cAAc,CAAC,aAAa,OAAO,CAAC;CACtF,yBAAyB,CAAC,UAAU,CAAC,QAAQ,CAAC;CAC9C,yBAAyB,CAAC,UAAU,CAAC,QAAQ,CAAC;CAC9C,4CAA4C,CAAC,UAAU,CAAC,YAAY,WAAW,CAAC;CAChF,yCAAyC,CAAC,UAAU,CAAC,YAAY,QAAQ,CAAC;CAC1E,2CAA2C,CAAC,UAAU,CAAC,YAAY,UAAU,CAAC;CAC9E,4CAA4C,CAAC,UAAU,CAAC,YAAY,WAAW,CAAC;CAChF,iCAAiC,CAAC,aAAa,CAAC,aAAa,CAAC;CAC9D,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC;CAChD,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC;CAChD,wGACE,CAAC,aAAa;EAAC;EAAY;EAAW;EAAU;EAAa;CAAU,CAAC;CAC1E,wDAAwD,CACtD,gBACA,CAAC,YAAY,WAAW,CAC1B;CACA,0CAA0C,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;CAChF,sEAAsE,CACpE,WACA,CAAC,YAAY,WAAW,CAC1B;CACA,8CAA8C,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CACnF,0DAA0D,CACxD,UACA;EAAC;EAAY;EAAW;CAAU,CACpC;CACA,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC;CAChD,mDAAmD,CAAC,aAAa,CAAC,aAAa,WAAW,CAAC;CAC3F,6BAA6B,CAAC,mBAAmB,CAAC,aAAa,CAAC;CAChE,0DAA0D,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;AACjG;AAEA,MAAM,aAA+C;CACnD,cAAc;CACd,QAAQ;CACR,qBAAqB;CACrB,iBAAiB;CACjB,oBAAoB;CACpB,MAAM;CACN,SAAS;CACT,WAAW;CACX,QAAQ;CACR,YAAY;CACZ,eAAe;CACf,QAAQ;AACV;AAEA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;AACF;AAEA,MAAM,gBAAgB,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AACjE,MAAM,SAAS,OAAO,kBAAkB,aAAa;AAErD,MAAM,SAAS,YAA+C;CAC5D,MAAM,SAAiF,CAAC;CAExF,KAAK,MAAM,SAAS,kBAAkB;EACpC,IAAI,QAAQ,WAAW,KAAA,GAAW;EAClC,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAAO,QAAQ,OAAO,QAAQ,MAAM,CAAC,GAAG;GACxE,IAAI,gBAAgB,0CAA0C;GAC9D,IAAI;GACJ,IAAI;GAEJ,IAAI,OAAO,gBAAgB,UAAU;IACnC,MAAM,OAAO,YAAY;IAEzB,IAAI,SAAS,KAAA,GAAW,CAAC,MAAM,QAAQ;SAClC,IAAI,gBAAgB,cAAc;KACrC,OAAO;KACP,OAAO,CAAC,IAAI;IACd,OAAO,IAAI,gBAAgB,iBAAiB;KAC1C,OAAO;KACP,OAAO,CAAC,OAAO;IACjB,OAAO,IAAI,gBAAgB,wBAAwB;KACjD,OAAO;KACP,OAAO,CAAC,IAAI;IACd,OAAO,IAAI,gBAAgB,2BAA2B;KACpD,OAAO;KACP,OAAO,CAAC,aAAa,OAAO;IAC9B,OAAO,IAAI,gBAAgB,mCAAmC;KAC5D,OAAO;KACP,OAAO;MAAC;MAAY;MAAU;KAAS;IACzC,OAAO,IAAI,gBAAgB,qBAAqB;KAC9C,OAAO;KACP,OAAO,CAAC,WAAW;IACrB,OAAO,MAAM,IAAI,MAAM,4BAA4B;GACrD,OAAO,IAAI,MAAM,QAAQ,WAAW,KAAK,YAAY,MAAM,UAAU,QAAQ,GAAG;IAC9E,MAAM,aACJ,UAAU,2BAA2B,SAAS,YAAY,YAAY,WAAW;IAEnF,IAAI,eAAe,KAAA,GAAW,MAAM,IAAI,MAAM,4BAA4B;IAC1E,OAAO;IACP,OAAO;GACT,OAAO,MAAM,IAAI,MAAM,4BAA4B;GAEnD,IAAI,SAAkB;GAEtB,KAAK,MAAM,WAAW,KAAK,MAAM,GAAG,GAAG,SAAS,OAAO,MAAM,CAAC,CAAC;GAE/D,IAAI,WAAW,KAAA,KAAa,OAAO,GAAG,aAAa,CAAC,CAAC,QAAQ,OAAO,GAClE,SAAS,QAAQ,QAAQ;GAC3B,IAAI,SAAS,OAAO,MAAM;GAE1B,IAAI,SAAS,aAAa,OAAO,UAAU,KAAA,GAAW,SAAS,OAAO,OAAO,OAAO;GAEpF,IAAI,SAAS,eAAe,OAAO,UAAU,KAAA,GAC3C,SAAS,OAAO,OAAO,YAAY,OAAO,KAAK;GACjD,IAAI,CAAC,GAAG,OAAO,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACrE,MAAM,UAAU,gBAAgB,OAAO,KAAK;GAE5C,OAAO,KAAK;IACV,OAAO,OAAO;IACd,MAAM,KAAK,KAAK,QAAQ;KACtB,MAAM,QAAQ,OAAO;KAErB,IAAI,OAAO,UAAU,YAAY,QAAQ,WAAW,KAAA,GAClD,MAAM,IAAI,MAAM,oBAAoB;KAEtC,OAAO;IACT,CAAC;GACH,CAAC;EACH;CACF;CACA,KAAK,MAAM,UAAU,gBAAgB;EACnC,MAAM,QAAQ,QAAQ;EAEtB,IAAI,OAAO,GAAG,aAAa,CAAC,CAAC,KAAK,KAAK,MAAM,UAAU,KAAA,GAAW,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;CAC/F;CAEA,OAAO;AACT;;AAGA,MAAa,yBAAyB,OAAO,WAC3C,WAAW,SAAkB;CAC3B,MAAM,WAAW,OAAO,OAAO,IAAI;EACjC,WAAW,MAAM,OAAO,OAAO,CAAC;EAChC,aACE,wBAAwB,KAAK;GAC3B,WAAW;GACX,OAAO;EACT,CAAC;CACL,CAAC;CAED,MAAM,EAAE,SAAS,WAAW,OAAO;CAEnC,MAAM,0BAAU,IAAI,IAAoD;CAExE,KAAK,MAAM,QAAQ,UAAU;EAC3B,MAAM,KAAK,GAAG,KAAK,OAAO,OAAO;EACjC,MAAM,QAAQ,GAAG,KAAK,OAAO,UAAU;EAEvC,MAAM,SAAS,KACXA,iBAAiB,KAAK,KAAK,CAAC,CAAC,SAC7B,QACEC,eAAoB,KAAK,KAAK,CAAC,CAAC,SAChC,KAAA;EAEN,MAAM,UAAU,gBAAgB,KAAK,KAAK;EAE1C,MAAM,UAAU,KAAK,OAAO,QAAQ,UAAU;EAC9C,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK,CAAC;EAEvC,MAAM,KAAK;GACT,OAAO;IACL,MAAM,aAAa,KAAK,KAAK;IAC7B,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;IACzC,SAAS,OAAO,YAAY,KAAK,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,MAAM,QAAQ,IAAI,CAAE,KAAK,CAAC,CAAC,CAAC;GACzF;GACA,UAAU,CAAC,KAAK,IAAI;EACtB,CAAC;EACD,QAAQ,IAAI,SAAS,KAAK;CAC5B;CACA,KAAK,MAAM,CAAC,SAAS,iBAAiB,SACpC,OAAO,qBAAqB,SAAS,YAAY,CAAC,CAAC,KACjD,OAAO,eAAe,WAAW,MAAM,GACvC,OAAO,eACL,wBAAwB,KAAK;EAC3B,WAAW;EACX,OAAO;CACT,CAAC,CACH,CACF;AAEJ,GACA,OAAO,kBACL,OAAO,KACL,wBAAwB,KAAK;CAC3B,WAAW;CACX,OAAO;AACT,CAAC,CACH,CACF,CACF"}
+{"version":3,"file":"storage-validation.mjs","names":["getPgTableConfig","getMysqlTableConfig"],"sources":["../../src/drizzle/storage-validation.ts"],"sourcesContent":["import {\n  NativeDatabase,\n  PersistenceMappingError,\n  validateStorageBatch,\n  type StorageValidation,\n  storageKeyPlans,\n} from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns, getTableName, is, Table } from \"drizzle-orm\";\nimport { getTableConfig as getMysqlTableConfig, MySqlTable } from \"drizzle-orm/mysql-core\";\nimport { getTableConfig as getPgTableConfig, PgTable } from \"drizzle-orm/pg-core\";\nimport { Effect } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\n\n/** Validate at acquisition using the root database supplied by the adapter. */\nexport const validateDrizzleStorage = Effect.fnUntraced(\n  function* (mapping: unknown) {\n    const physical = yield* Effect.try({\n      try: () =>\n        storageKeyPlans(mapping, (table) => {\n          if (!is(table, Table)) throw new Error(\"Missing storage table\");\n\n          return getTableColumns(table);\n        }),\n      catch: () =>\n        PersistenceMappingError.make({\n          operation: \"mapping\",\n          cause: \"Invalid storage key mapping\",\n        }),\n    });\n\n    const { $client: client } = yield* NativeDatabase;\n\n    const batches = new Map<\"pg\" | \"mysql\" | \"sqlite\", StorageValidation[]>();\n\n    for (const plan of physical) {\n      if (!is(plan.table, Table))\n        return yield* PersistenceMappingError.make({\n          operation: \"mapping\",\n          cause: \"Missing storage table\",\n        });\n      const pg = is(plan.table, PgTable);\n      const mysql = is(plan.table, MySqlTable);\n\n      const schema = pg\n        ? getPgTableConfig(plan.table).schema\n        : mysql\n          ? getMysqlTableConfig(plan.table).schema\n          : undefined;\n\n      const columns = getTableColumns(plan.table);\n\n      const dialect = pg ? \"pg\" : mysql ? \"mysql\" : \"sqlite\";\n      const batch = batches.get(dialect) ?? [];\n\n      batch.push({\n        table: {\n          name: getTableName(plan.table),\n          ...(schema === undefined ? {} : { schema }),\n          columns: Object.fromEntries(plan.keys.map((key) => [key, { name: columns[key]!.name }])),\n        },\n        required: [plan.keys],\n      });\n      batches.set(dialect, batch);\n    }\n    for (const [dialect, requirements] of batches) {\n      yield* validateStorageBatch(dialect, requirements).pipe(\n        Effect.provideService(SqlClient, client),\n        Effect.mapError(() =>\n          PersistenceMappingError.make({\n            operation: \"mapping\",\n            cause: \"Required SQL storage key is unavailable\",\n          }),\n        ),\n      );\n    }\n  },\n  Effect.catchDefect(() =>\n    Effect.fail(\n      PersistenceMappingError.make({\n        operation: \"mapping\",\n        cause: \"Cannot inspect SQL storage metadata\",\n      }),\n    ),\n  ),\n);\n"],"mappings":";;;;;;;;AAcA,MAAa,yBAAyB,OAAO,WAC3C,WAAW,SAAkB;CAC3B,MAAM,WAAW,OAAO,OAAO,IAAI;EACjC,WACE,gBAAgB,UAAU,UAAU;GAClC,IAAI,CAAC,GAAG,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,uBAAuB;GAE9D,OAAO,gBAAgB,KAAK;EAC9B,CAAC;EACH,aACE,wBAAwB,KAAK;GAC3B,WAAW;GACX,OAAO;EACT,CAAC;CACL,CAAC;CAED,MAAM,EAAE,SAAS,WAAW,OAAO;CAEnC,MAAM,0BAAU,IAAI,IAAoD;CAExE,KAAK,MAAM,QAAQ,UAAU;EAC3B,IAAI,CAAC,GAAG,KAAK,OAAO,KAAK,GACvB,OAAO,OAAO,wBAAwB,KAAK;GACzC,WAAW;GACX,OAAO;EACT,CAAC;EACH,MAAM,KAAK,GAAG,KAAK,OAAO,OAAO;EACjC,MAAM,QAAQ,GAAG,KAAK,OAAO,UAAU;EAEvC,MAAM,SAAS,KACXA,iBAAiB,KAAK,KAAK,CAAC,CAAC,SAC7B,QACEC,eAAoB,KAAK,KAAK,CAAC,CAAC,SAChC,KAAA;EAEN,MAAM,UAAU,gBAAgB,KAAK,KAAK;EAE1C,MAAM,UAAU,KAAK,OAAO,QAAQ,UAAU;EAC9C,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK,CAAC;EAEvC,MAAM,KAAK;GACT,OAAO;IACL,MAAM,aAAa,KAAK,KAAK;IAC7B,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;IACzC,SAAS,OAAO,YAAY,KAAK,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,MAAM,QAAQ,IAAI,CAAE,KAAK,CAAC,CAAC,CAAC;GACzF;GACA,UAAU,CAAC,KAAK,IAAI;EACtB,CAAC;EACD,QAAQ,IAAI,SAAS,KAAK;CAC5B;CACA,KAAK,MAAM,CAAC,SAAS,iBAAiB,SACpC,OAAO,qBAAqB,SAAS,YAAY,CAAC,CAAC,KACjD,OAAO,eAAe,WAAW,MAAM,GACvC,OAAO,eACL,wBAAwB,KAAK;EAC3B,WAAW;EACX,OAAO;CACT,CAAC,CACH,CACF;AAEJ,GACA,OAAO,kBACL,OAAO,KACL,wBAAwB,KAAK;CAC3B,WAAW;CACX,OAAO;AACT,CAAC,CACH,CACF,CACF"}

package/dist/drizzle/totp-target.d.mts

@@ -1,8 +1,8 @@
 import { PersistenceMappingError as PersistenceMappingError$1 } from "./model.mjs";
-import "./transaction-owner.mjs";
-import { TransactionCoordinatorError } from "./transaction-execution.mjs";
 import "./totp-model.mjs";
+import "./transaction-owner.mjs";
 import "./SuppliedService.mjs";
+import { TransactionCoordinatorError } from "./transaction-execution.mjs";
 import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Table } from "drizzle-orm";
 import { Context, Crypto, Effect } from "effect";

package/dist/drizzle/totp-target.mjs

@@ -1,9 +1,9 @@
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { randomId } from "./crypto.mjs";
-import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
 import { requiredTotpConstraints } from "./totp-model.mjs";
+import { randomId } from "./crypto.mjs";
 import { CurrentTotpTransaction, captureTotp, invariant, mutateTotp, unavailable } from "./totp-state.mjs";
 import { nativeDatabase } from "./native-database.mjs";
+import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
 import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect, Schema } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";

package/dist/drizzle/transaction-execution.d.mts

@@ -1,2 +1,2 @@
-import { TransactionCoordinatorError, TransactionTargetConfiguration } from "@yielded/auth-persistence/Adapter";
-export type { TransactionCoordinatorError, TransactionTargetConfiguration };
+import { TransactionCoordinatorError } from "@yielded/auth-persistence/Adapter";
+export type { TransactionCoordinatorError };

package/dist/drizzle/transaction-owner.d.mts

@@ -1,2 +1 @@
-import { Row, TransactionOwner } from "@yielded/auth-persistence/Adapter";
-export type { Row, TransactionOwner };
+import "@yielded/auth-persistence/Adapter";

package/dist/index.d.mts

@@ -1,5 +1,6 @@
+import { OAuthProxyColumns } from "./drizzle/oauth-proxy.mjs";
 import { AnyEmailAddressMapping, AnyEmailRegistrationMapping, AnyEmailSignInMapping, D1EmailAddressMapping, D1EmailRegistrationMapping, EmailAddressMapping, EmailAuthorityCredentialTable, EmailCommandTable, EmailCredentialReadTable, EmailCredentialTable, EmailD1Clock, EmailIdentifierReadTable, EmailIdentifierTable, EmailRegistrationAuthorityCredentialTable, EmailRegistrationCredentialTable, EmailRegistrationIdentifierTable, EmailRegistrationIntent, EmailRegistrationMapping, EmailRegistrationProvisioning, EmailRegistrationState, EmailRegistrationTable, EmailSignInMapping, EmailSubjectReadTable, EmailSubjectTable, RequiredEmailAddressConstraints, RequiredEmailRegistrationConstraints, RequiredEmailSignInConstraints, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints } from "./drizzle/email-model.mjs";
-import { AnyPasswordPersistenceMapping, AnyPasswordRegistrationMapping, D1PasswordPersistenceMapping, PasswordAttemptAction, PasswordAttemptRecord, PasswordAttemptState, PasswordAttemptTable, PasswordAuthorityCredentialTable, PasswordCommandTable, PasswordConstraintClassifier, PasswordCredentialTable, PasswordD1Clock, PasswordIdentifierTable, PasswordPersistenceMapping, PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, PasswordRegistrationMapping, PasswordRegistrationProvisioning, PasswordRegistrationState, PasswordRegistrationTable, PasswordSubjectTable, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./drizzle/password-model.mjs";
+import { AnyPasswordPersistenceMapping, AnyPasswordRegistrationMapping, D1PasswordPersistenceMapping, PasswordAuthorityCredentialTable, PasswordCommandTable, PasswordConstraintClassifier, PasswordCredentialTable, PasswordD1Clock, PasswordIdentifierTable, PasswordPersistenceMapping, PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, PasswordRegistrationMapping, PasswordRegistrationProvisioning, PasswordRegistrationState, PasswordRegistrationTable, PasswordSubjectTable, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./drizzle/password-model.mjs";
 import { CommitMode, D1ExternalIdentityMapping, D1GeneratedIdentityMapping, D1SubjectProvisioningMapping, ExternalIdentityTables, IdentityTables, InstantCodec, PersistenceMappingError, RequiredExternalIdentityConstraints, RequiredIdentityConstraints, RequiredSubjectProvisioningConstraints, SubjectIdCodec, SubjectProvisioningTables, column, identityServicesLayer, isMappedConstraintConflict, provisioningFingerprint, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredSubjectProvisioningConstraints, updateValues } from "./drizzle/model.mjs";
 import { AnyProofPersistenceMapping, D1ProofPersistenceMapping, ProofAbuseEventTable, ProofAction, ProofAuthorityInput, ProofAuthorityTables, ProofCommandDecision, ProofCommandKind, ProofCommandTable, ProofConstraintClassifier, ProofContinuationRecord, ProofContinuationTable, ProofD1Clock, ProofDeliveryState, ProofFailureEventTable, ProofGenerationState, ProofGenerationTable, ProofPersistenceMapping, ProofRateScopeTable, ProofRequestTable, ProofScopeKeys, ProofScopeKind, ProofSeriesTable, RequiredProofConstraints, requiredProofConstraints } from "./drizzle/proof-model.mjs";
 import { AnyPasswordPreparedPersistenceMapping, D1PasswordPreparedPersistenceMapping, D1PasswordPreparedProofMapping, PasswordPreparedAdmissionTable, PasswordPreparedIntentTable, PasswordPreparedPersistenceMapping, PasswordPreparedProofMapping, PasswordPreparedState, RequiredPasswordPreparedConstraints, requiredPasswordPreparedConstraints } from "./drizzle/password-prepared-model.mjs";
@@ -22,4 +23,4 @@ import { decodeTotpRecord, encodeTotpRecord } from "./drizzle/totp-state.mjs";
 import { PasskeyCommandTable, PasskeyCredentialInsert, PasskeyInvalidationInput, PasskeyInvalidationMutation, PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter, PasskeyWriteTables, passkeyInvalidationMutation, requiredPasskeyManagementConstraints, requiredPasskeyRegistrationWriteConstraints } from "./drizzle/passkey-write-model.mjs";
 import { passkeyManagementPersistenceLayer } from "./drizzle/passkey-write-target.mjs";
 import { D1PhoneMapping, PhoneMapping, PhoneMappingSource, PhonePersistenceServices, PhoneProofCompletionMapping, phonePersistenceLayer, phoneProofCompletionMapping, requiredPhoneConstraints } from "./drizzle/phone-model.mjs";
-export { type AnyEmailAddressMapping, type AnyEmailRegistrationMapping, type AnyEmailSignInMapping, type AnyPasswordPersistenceMapping, type AnyPasswordPreparedPersistenceMapping, type AnyPasswordRegistrationMapping, type AnyProofPersistenceMapping, type AuthenticationAuthorityMapping, type CommitMode, type D1AuthenticationAuthorityMapping, type D1EmailAddressMapping, type D1EmailRegistrationMapping, type D1ExternalIdentityMapping, type D1GeneratedIdentityMapping, type D1PasskeyMapping, type D1PasswordPersistenceMapping, type D1PasswordPreparedPersistenceMapping, type D1PasswordPreparedProofMapping, type D1PendingAuthenticationMapping, type D1PhoneMapping, type D1ProofPersistenceMapping, type D1SessionClockMapping, type D1SessionStepUpMapping, type D1SignedSessionValidityMapping, type D1StatefulSessionMapping, type D1SubjectProvisioningMapping, type D1TotpMapping, type EmailAddressMapping, type EmailAuthorityCredentialTable, type EmailCommandTable, type EmailCredentialReadTable, type EmailCredentialTable, type EmailD1Clock, type EmailIdentifierReadTable, type EmailIdentifierTable, type EmailRegistrationAuthorityCredentialTable, type EmailRegistrationCredentialTable, type EmailRegistrationIdentifierTable, type EmailRegistrationIntent, type EmailRegistrationMapping, type EmailRegistrationProvisioning, type EmailRegistrationState, type EmailRegistrationTable, type EmailSignInMapping, type EmailSubjectReadTable, type EmailSubjectTable, type ExternalIdentityTables, type IdentityTables, type InstantCodec, type OAuthAccountsMapping, type OAuthAction, type OAuthAuthorityReadTable, type OAuthAuthorityTable, type OAuthCleanupDescriptor, type OAuthCleanupTable, type OAuthClock, type OAuthConnectedAction, type OAuthConnectedAdmissionTable, type OAuthConnectedAuthorityMapping, type OAuthConnectedClientRegistrationTable, type OAuthConnectedCohortTable, type OAuthConnectedCommandTable, type OAuthConnectedFlowTable, type OAuthConnectedGrantTable, type OAuthConnectedMapping, type OAuthConnectedOrderCodec, type OAuthConnectedOwnershipRead, type OAuthConnectedPolicyGuard, type OAuthConnectedPolicyGuardTable, type OAuthConnectedPolicyInput, type OAuthConnectedRevocationJobTable, type OAuthConnectedRevocationMapping, type OAuthConnectedSqlPolicy, type OAuthConnectedSubjectTable, type OAuthCredentialReadTable, type OAuthCredentialTable, type OAuthD1Mapping, type OAuthEligibilityDescriptor, type OAuthEligibilityFact, type OAuthEligibilityTable, type OAuthFlowState, type OAuthFlowTable, type OAuthMetadataPolicy, type OAuthOwnershipMutation, type OAuthOwnershipReadTable, type OAuthOwnershipTable, type OAuthReferenceGuardDescriptor, type OAuthReferenceGuardTable, type OAuthRegistrationAuthority, type OAuthRegistrationBase, type OAuthRegistrationCommandTable, type OAuthRegistrationEligibility, type OAuthRegistrationGuardDescriptor, type OAuthRegistrationGuardTable, type OAuthRegistrationIntentMapping, type OAuthRegistrationIntentTable, type OAuthRegistrationMapping, type OAuthRegistrationState, type OAuthSignInMapping, type OAuthSubjectReadTable, type OAuthSubjectTable, type OAuthTupleAuthorityTable, type OAuthTupleState, type OAuthUnlinkCommandTable, type PasskeyAdmissionTable, type PasskeyCeremonyMapping, type PasskeyChargeInsert, type PasskeyChargeKind, type PasskeyChargeTable, type PasskeyClock, type PasskeyColumn, type PasskeyCommandTable, type PasskeyCredentialInsert, type PasskeyCredentialMapping, type PasskeyCredentialOwnershipTable, type PasskeyCredentialReadTable, type PasskeyCredentialServices, type PasskeyEnrollmentContextMapping, type PasskeyEnrollmentContextServices, type PasskeyFactorReadTable, type PasskeyFlowInsert, type PasskeyFlowState, type PasskeyFlowTable, type PasskeyHandleOwnershipTable, type PasskeyHandleReadTable, type PasskeyHandleReservationTable, type PasskeyInvalidationInput, type PasskeyInvalidationMutation, type PasskeyManagementMapping, type PasskeyManagementServices, type PasskeyMappingSource, type PasskeyModuleTable, type PasskeyPersistenceMapping, type PasskeyPersistenceServices, type PasskeyPolicyGuard, type PasskeyRegistrationCeremonyCapabilities, type PasskeyRegistrationCeremonyMapping, type PasskeyRegistrationCeremonyServices, type PasskeyRegistrationIntentReadTable, type PasskeyRegistrationMapping, type PasskeyRegistrationServices, type PasskeyRegistrationWriter, type PasskeySubjectIdCodec, type PasskeySubjectReadTable, type PasskeyWriteTables, type PasswordAttemptAction, type PasswordAttemptRecord, type PasswordAttemptState, type PasswordAttemptTable, type PasswordAuthorityCredentialTable, type PasswordCommandTable, type PasswordConstraintClassifier, type PasswordCredentialTable, type PasswordD1Clock, type PasswordIdentifierTable, type PasswordPersistenceMapping, type PasswordPreparedAdmissionTable, type PasswordPreparedIntentTable, type PasswordPreparedPersistenceMapping, type PasswordPreparedProofMapping, type PasswordPreparedState, type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type PasswordRegistrationMapping, type PasswordRegistrationProvisioning, type PasswordRegistrationState, type PasswordRegistrationTable, type PasswordSubjectTable, type PendingAuthenticationMapping, type PendingAuthenticationTables, type PersistenceMappingError, type PhoneMapping, type PhoneMappingSource, type PhonePersistenceServices, type PhoneProofCompletionMapping, type ProofAbuseEventTable, type ProofAction, type ProofAuthorityInput, type ProofAuthorityTables, type ProofCommandDecision, type ProofCommandKind, type ProofCommandTable, type ProofConstraintClassifier, type ProofContinuationRecord, type ProofContinuationTable, type ProofD1Clock, type ProofDeliveryState, type ProofFailureEventTable, type ProofGenerationState, type ProofGenerationTable, type ProofPersistenceMapping, type ProofRateScopeTable, type ProofRequestTable, type ProofScopeKeys, type ProofScopeKind, type ProofSeriesTable, type RequiredEmailAddressConstraints, type RequiredEmailRegistrationConstraints, type RequiredEmailSignInConstraints, type RequiredExternalIdentityConstraints, type RequiredIdentityConstraints, type RequiredPasswordConstraints, type RequiredPasswordPreparedConstraints, type RequiredPasswordRegistrationConstraints, type RequiredPendingAuthenticationConstraints, type RequiredProofConstraints, type RequiredSessionConstraints, type RequiredSessionStepUpConstraints, type RequiredSignedValidityConstraints, type RequiredStatefulPendingConstraints, type RequiredSubjectProvisioningConstraints, type SessionAuthorityTables, type SessionConstraintClassifier, type SessionFlowTables, type SessionIdCodec, type SessionStepUpIntentTables, type SessionStepUpMapping, type SessionStepUpSourceTables, type SessionSubjectTables, type SignedSessionValidityMapping, type SignedSessionValidityTables, type StatefulSessionMapping, type StatefulSessionTables, type SubjectIdCodec, type SubjectProvisioningTables, type TotpMapping, type TotpMappingSource, type TotpPersistenceServices, authenticationAuthorityLayer, column, decodeTotpRecord, emailAddressPersistenceLayer, emailRegistrationLayer, emailSignInTargetsLayer, encodeTotpRecord, identityServicesLayer, isMappedConstraintConflict, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedOwnershipReferences, oauthConnectedPersistenceLayer, oauthConnectedPolicyGuard, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyInvalidationMutation, passkeyManagementPersistenceLayer, passkeyPersistenceLayer, passkeyPolicyGuard, passwordPersistenceLayer, passwordPreparedPersistenceLayer, passwordRegistrationLayer, pendingAuthenticationLayer, phonePersistenceLayer, phoneProofCompletionMapping, proofPersistenceLayer, provisioningFingerprint, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyManagementConstraints, requiredPasskeyPersistenceConstraints, requiredPasskeyRegistrationCeremonyConstraints, requiredPasskeyRegistrationWriteConstraints, requiredPasswordConstraints, requiredPasswordPreparedConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredPhoneConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, requiredSubjectProvisioningConstraints, requiredTotpConstraints, signedSessionValidityLayer, statefulSessionLayers, totpPersistenceLayer, updateValues };
+export { type AnyEmailAddressMapping, type AnyEmailRegistrationMapping, type AnyEmailSignInMapping, type AnyPasswordPersistenceMapping, type AnyPasswordPreparedPersistenceMapping, type AnyPasswordRegistrationMapping, type AnyProofPersistenceMapping, type AuthenticationAuthorityMapping, type CommitMode, type D1AuthenticationAuthorityMapping, type D1EmailAddressMapping, type D1EmailRegistrationMapping, type D1ExternalIdentityMapping, type D1GeneratedIdentityMapping, type D1PasskeyMapping, type D1PasswordPersistenceMapping, type D1PasswordPreparedPersistenceMapping, type D1PasswordPreparedProofMapping, type D1PendingAuthenticationMapping, type D1PhoneMapping, type D1ProofPersistenceMapping, type D1SessionClockMapping, type D1SessionStepUpMapping, type D1SignedSessionValidityMapping, type D1StatefulSessionMapping, type D1SubjectProvisioningMapping, type D1TotpMapping, type EmailAddressMapping, type EmailAuthorityCredentialTable, type EmailCommandTable, type EmailCredentialReadTable, type EmailCredentialTable, type EmailD1Clock, type EmailIdentifierReadTable, type EmailIdentifierTable, type EmailRegistrationAuthorityCredentialTable, type EmailRegistrationCredentialTable, type EmailRegistrationIdentifierTable, type EmailRegistrationIntent, type EmailRegistrationMapping, type EmailRegistrationProvisioning, type EmailRegistrationState, type EmailRegistrationTable, type EmailSignInMapping, type EmailSubjectReadTable, type EmailSubjectTable, type ExternalIdentityTables, type IdentityTables, type InstantCodec, type OAuthAccountsMapping, type OAuthAction, type OAuthAuthorityReadTable, type OAuthAuthorityTable, type OAuthCleanupDescriptor, type OAuthCleanupTable, type OAuthClock, type OAuthConnectedAction, type OAuthConnectedAdmissionTable, type OAuthConnectedAuthorityMapping, type OAuthConnectedClientRegistrationTable, type OAuthConnectedCohortTable, type OAuthConnectedCommandTable, type OAuthConnectedFlowTable, type OAuthConnectedGrantTable, type OAuthConnectedMapping, type OAuthConnectedOrderCodec, type OAuthConnectedOwnershipRead, type OAuthConnectedPolicyGuard, type OAuthConnectedPolicyGuardTable, type OAuthConnectedPolicyInput, type OAuthConnectedRevocationJobTable, type OAuthConnectedRevocationMapping, type OAuthConnectedSqlPolicy, type OAuthConnectedSubjectTable, type OAuthCredentialReadTable, type OAuthCredentialTable, type OAuthD1Mapping, type OAuthEligibilityDescriptor, type OAuthEligibilityFact, type OAuthEligibilityTable, type OAuthFlowState, type OAuthFlowTable, type OAuthMetadataPolicy, type OAuthOwnershipMutation, type OAuthOwnershipReadTable, type OAuthOwnershipTable, type OAuthProxyColumns, type OAuthReferenceGuardDescriptor, type OAuthReferenceGuardTable, type OAuthRegistrationAuthority, type OAuthRegistrationBase, type OAuthRegistrationCommandTable, type OAuthRegistrationEligibility, type OAuthRegistrationGuardDescriptor, type OAuthRegistrationGuardTable, type OAuthRegistrationIntentMapping, type OAuthRegistrationIntentTable, type OAuthRegistrationMapping, type OAuthRegistrationState, type OAuthSignInMapping, type OAuthSubjectReadTable, type OAuthSubjectTable, type OAuthTupleAuthorityTable, type OAuthTupleState, type OAuthUnlinkCommandTable, type PasskeyAdmissionTable, type PasskeyCeremonyMapping, type PasskeyChargeInsert, type PasskeyChargeKind, type PasskeyChargeTable, type PasskeyClock, type PasskeyColumn, type PasskeyCommandTable, type PasskeyCredentialInsert, type PasskeyCredentialMapping, type PasskeyCredentialOwnershipTable, type PasskeyCredentialReadTable, type PasskeyCredentialServices, type PasskeyEnrollmentContextMapping, type PasskeyEnrollmentContextServices, type PasskeyFactorReadTable, type PasskeyFlowInsert, type PasskeyFlowState, type PasskeyFlowTable, type PasskeyHandleOwnershipTable, type PasskeyHandleReadTable, type PasskeyHandleReservationTable, type PasskeyInvalidationInput, type PasskeyInvalidationMutation, type PasskeyManagementMapping, type PasskeyManagementServices, type PasskeyMappingSource, type PasskeyModuleTable, type PasskeyPersistenceMapping, type PasskeyPersistenceServices, type PasskeyPolicyGuard, type PasskeyRegistrationCeremonyCapabilities, type PasskeyRegistrationCeremonyMapping, type PasskeyRegistrationCeremonyServices, type PasskeyRegistrationIntentReadTable, type PasskeyRegistrationMapping, type PasskeyRegistrationServices, type PasskeyRegistrationWriter, type PasskeySubjectIdCodec, type PasskeySubjectReadTable, type PasskeyWriteTables, type PasswordAuthorityCredentialTable, type PasswordCommandTable, type PasswordConstraintClassifier, type PasswordCredentialTable, type PasswordD1Clock, type PasswordIdentifierTable, type PasswordPersistenceMapping, type PasswordPreparedAdmissionTable, type PasswordPreparedIntentTable, type PasswordPreparedPersistenceMapping, type PasswordPreparedProofMapping, type PasswordPreparedState, type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type PasswordRegistrationMapping, type PasswordRegistrationProvisioning, type PasswordRegistrationState, type PasswordRegistrationTable, type PasswordSubjectTable, type PendingAuthenticationMapping, type PendingAuthenticationTables, type PersistenceMappingError, type PhoneMapping, type PhoneMappingSource, type PhonePersistenceServices, type PhoneProofCompletionMapping, type ProofAbuseEventTable, type ProofAction, type ProofAuthorityInput, type ProofAuthorityTables, type ProofCommandDecision, type ProofCommandKind, type ProofCommandTable, type ProofConstraintClassifier, type ProofContinuationRecord, type ProofContinuationTable, type ProofD1Clock, type ProofDeliveryState, type ProofFailureEventTable, type ProofGenerationState, type ProofGenerationTable, type ProofPersistenceMapping, type ProofRateScopeTable, type ProofRequestTable, type ProofScopeKeys, type ProofScopeKind, type ProofSeriesTable, type RequiredEmailAddressConstraints, type RequiredEmailRegistrationConstraints, type RequiredEmailSignInConstraints, type RequiredExternalIdentityConstraints, type RequiredIdentityConstraints, type RequiredPasswordConstraints, type RequiredPasswordPreparedConstraints, type RequiredPasswordRegistrationConstraints, type RequiredPendingAuthenticationConstraints, type RequiredProofConstraints, type RequiredSessionConstraints, type RequiredSessionStepUpConstraints, type RequiredSignedValidityConstraints, type RequiredStatefulPendingConstraints, type RequiredSubjectProvisioningConstraints, type SessionAuthorityTables, type SessionConstraintClassifier, type SessionFlowTables, type SessionIdCodec, type SessionStepUpIntentTables, type SessionStepUpMapping, type SessionStepUpSourceTables, type SessionSubjectTables, type SignedSessionValidityMapping, type SignedSessionValidityTables, type StatefulSessionMapping, type StatefulSessionTables, type SubjectIdCodec, type SubjectProvisioningTables, type TotpMapping, type TotpMappingSource, type TotpPersistenceServices, authenticationAuthorityLayer, column, decodeTotpRecord, emailAddressPersistenceLayer, emailRegistrationLayer, emailSignInTargetsLayer, encodeTotpRecord, identityServicesLayer, isMappedConstraintConflict, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedOwnershipReferences, oauthConnectedPersistenceLayer, oauthConnectedPolicyGuard, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyInvalidationMutation, passkeyManagementPersistenceLayer, passkeyPersistenceLayer, passkeyPolicyGuard, passwordPersistenceLayer, passwordPreparedPersistenceLayer, passwordRegistrationLayer, pendingAuthenticationLayer, phonePersistenceLayer, phoneProofCompletionMapping, proofPersistenceLayer, provisioningFingerprint, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyManagementConstraints, requiredPasskeyPersistenceConstraints, requiredPasskeyRegistrationCeremonyConstraints, requiredPasskeyRegistrationWriteConstraints, requiredPasswordConstraints, requiredPasswordPreparedConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredPhoneConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, requiredSubjectProvisioningConstraints, requiredTotpConstraints, signedSessionValidityLayer, statefulSessionLayers, totpPersistenceLayer, updateValues };

package/dist/internal/drizzle-postgres-oauth-proxy.d.mts

@@ -0,0 +1,138 @@
+import { OAuthProxyColumns } from "../drizzle/oauth-proxy.mjs";
+import { PgTable } from "drizzle-orm/pg-core";
+//#region src/internal/drizzle-postgres-oauth-proxy.d.ts
+/** Export the returned table from your Drizzle Kit schema before applying the Layer. */
+declare const table: (name: string) => import("drizzle-orm/pg-core").PgTableWithColumns<{
+  name: string;
+  schema: undefined;
+  columns: {
+    namespace: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>>, {
+      name: string;
+      tableName: string;
+      dataType: "string";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    flowId: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>>, {
+      name: string;
+      tableName: string;
+      dataType: "string";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    version: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>>, {
+      name: string;
+      tableName: string;
+      dataType: "string";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    stage: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>>, {
+      name: string;
+      tableName: string;
+      dataType: "string";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    context: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>>, {
+      name: string;
+      tableName: string;
+      dataType: "string";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    expiresAtMillis: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgBigInt53Builder>, {
+      name: string;
+      tableName: string;
+      dataType: "number int53";
+      data: number;
+      driverParam: string | number;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    handoffExpiresAtMillis: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").PgBigInt53Builder, {
+      name: string;
+      tableName: string;
+      dataType: "number int53";
+      data: number;
+      driverParam: string | number;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+    payload: import("drizzle-orm/pg-core").PgBuildColumn<string, import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>>, {
+      name: string;
+      tableName: string;
+      dataType: "string";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      identity: undefined;
+      generated: undefined;
+    }>;
+  };
+  dialect: 'pg';
+}>;
+declare const layer: <T extends PgTable>(table: T, columns?: OAuthProxyColumns<T>) => import("effect/Layer").Layer<import("@yielded/auth/OAuthProxy").Persistence, import("@yielded/auth/OAuthProxy").ConfigurationError | import("@yielded/auth/OAuthProxy").Unavailable, import("effect/sql/SqlClient").SqlClient>;
+export declare const OAuthProxyPersistence: {
+  table: typeof table;
+  layer: typeof layer;
+};
+//#endregion
+//# sourceMappingURL=drizzle-postgres-oauth-proxy.d.mts.map

package/dist/internal/drizzle-postgres-oauth-proxy.mjs

@@ -0,0 +1,29 @@
+import { oauthProxyLayer } from "../drizzle/oauth-proxy.mjs";
+import { sql } from "drizzle-orm";
+import { bigint, check, pgTable, primaryKey, text } from "drizzle-orm/pg-core";
+//#region src/internal/drizzle-postgres-oauth-proxy.ts
+/** Export the returned table from your Drizzle Kit schema before applying the Layer. */
+const table = (name) => pgTable(name, {
+	namespace: text("namespace").notNull(),
+	flowId: text("flow_id").notNull(),
+	version: text("version").notNull(),
+	stage: text("stage").notNull(),
+	context: text("context").notNull(),
+	expiresAtMillis: bigint("expires_at_millis", { mode: "number" }).notNull(),
+	handoffExpiresAtMillis: bigint("handoff_expires_at_millis", { mode: "number" }),
+	payload: text("payload").notNull()
+}, (columns) => [
+	primaryKey({ columns: [columns.namespace, columns.flowId] }),
+	check(`${name}_stage`, sql`${columns.stage} in ('Pending', 'Exchanging', 'Ready', 'Consumed')`),
+	check(`${name}_handoff`, sql`(${columns.stage} = 'Ready' and ${columns.handoffExpiresAtMillis} is not null)
+    or (${columns.stage} <> 'Ready' and ${columns.handoffExpiresAtMillis} is null)`)
+]);
+const layer = (table, columns) => oauthProxyLayer("pg", table, columns);
+const OAuthProxyPersistence = {
+	table,
+	layer
+};
+//#endregion
+export { OAuthProxyPersistence };
+
+//# sourceMappingURL=drizzle-postgres-oauth-proxy.mjs.map

package/dist/internal/drizzle-postgres-oauth-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-postgres-oauth-proxy.mjs","names":[],"sources":["../../src/internal/drizzle-postgres-oauth-proxy.ts"],"sourcesContent":["import { sql } from \"drizzle-orm\";\nimport { bigint, check, pgTable, primaryKey, text, type PgTable } from \"drizzle-orm/pg-core\";\n\nimport { oauthProxyLayer, type OAuthProxyColumns } from \"../drizzle/oauth-proxy\";\n\n/** Export the returned table from your Drizzle Kit schema before applying the Layer. */\nconst table = (name: string) =>\n  pgTable(\n    name,\n    {\n      namespace: text(\"namespace\").notNull(),\n      flowId: text(\"flow_id\").notNull(),\n      version: text(\"version\").notNull(),\n      stage: text(\"stage\").notNull(),\n      context: text(\"context\").notNull(),\n      expiresAtMillis: bigint(\"expires_at_millis\", { mode: \"number\" }).notNull(),\n      handoffExpiresAtMillis: bigint(\"handoff_expires_at_millis\", { mode: \"number\" }),\n      payload: text(\"payload\").notNull(),\n    },\n    (columns) => [\n      primaryKey({ columns: [columns.namespace, columns.flowId] }),\n      check(\n        `${name}_stage`,\n        sql`${columns.stage} in ('Pending', 'Exchanging', 'Ready', 'Consumed')`,\n      ),\n      check(\n        `${name}_handoff`,\n        sql`(${columns.stage} = 'Ready' and ${columns.handoffExpiresAtMillis} is not null)\n    or (${columns.stage} <> 'Ready' and ${columns.handoffExpiresAtMillis} is null)`,\n      ),\n    ],\n  );\n\nconst layer = <T extends PgTable>(table: T, columns?: OAuthProxyColumns<T>) =>\n  oauthProxyLayer(\"pg\", table, columns);\n\nexport const OAuthProxyPersistence = { table, layer };\n"],"mappings":";;;;;AAMA,MAAM,SAAS,SACb,QACE,MACA;CACE,WAAW,KAAK,WAAW,CAAC,CAAC,QAAQ;CACrC,QAAQ,KAAK,SAAS,CAAC,CAAC,QAAQ;CAChC,SAAS,KAAK,SAAS,CAAC,CAAC,QAAQ;CACjC,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,SAAS,KAAK,SAAS,CAAC,CAAC,QAAQ;CACjC,iBAAiB,OAAO,qBAAqB,EAAE,MAAM,SAAS,CAAC,CAAC,CAAC,QAAQ;CACzE,wBAAwB,OAAO,6BAA6B,EAAE,MAAM,SAAS,CAAC;CAC9E,SAAS,KAAK,SAAS,CAAC,CAAC,QAAQ;AACnC,IACC,YAAY;CACX,WAAW,EAAE,SAAS,CAAC,QAAQ,WAAW,QAAQ,MAAM,EAAE,CAAC;CAC3D,MACE,GAAG,KAAK,SACR,GAAG,GAAG,QAAQ,MAAM,mDACtB;CACA,MACE,GAAG,KAAK,WACR,GAAG,IAAI,QAAQ,MAAM,iBAAiB,QAAQ,uBAAuB;UACnE,QAAQ,MAAM,kBAAkB,QAAQ,uBAAuB,UACnE;AACF,CACF;AAEF,MAAM,SAA4B,OAAU,YAC1C,gBAAgB,MAAM,OAAO,OAAO;AAEtC,MAAa,wBAAwB;CAAE;CAAO;AAAM"}