@yielded/auth-persistence-drizzle 0.1.0-beta.23 → 0.1.0-beta.24

package/src/drizzle/oauth-connected-target.ts

@@ -1,278 +1,21 @@
-import * as M from "@yielded/auth/OAuth";
-import {
-  OAuthConnectedPersistence,
-  OAuthConnectedRevocations,
-  OAuthConnectedRevocationDecision,
-  OAuthExternalIdentity,
-  snapshotOAuthSync,
-  type PrepareOAuthCommit,
-} from "@yielded/auth/OAuth";
-/* oxlint-disable no-explicit-any -- concrete adapters retain the native database, table and ID types. */
-import { type Crypto, Effect, Layer, type PlatformError, Schema } from "effect";
-import type { Statement } from "effect/sql/Statement";
+import type { OAuthKernel } from "@yielded/auth-persistence/Adapter";
 
-import type { PersistenceMappingError } from "./model";
-import * as A from "./oauth-connected-access";
-import * as F from "./oauth-connected-flow";
-import { connectedInputs, connectedRevocationInputs } from "./oauth-connected-input";
-import * as Maintenance from "./oauth-connected-maintenance";
-import * as Management from "./oauth-connected-management";
-import { settle } from "./oauth-connected-settlement";
-import * as SignIn from "./oauth-connected-sign-in";
-import * as S from "./oauth-connected-state";
-import { capturedOAuthService } from "./oauth-input";
-import { CurrentOAuthTransaction } from "./oauth-owner";
-import { captureOAuthMapping } from "./oauth-state";
-import {
-  coordinateOAuthOwner,
-  makeOAuthExecution,
-  type OAuthExecution,
-  type OAuthTargetConfiguration,
-} from "./oauth-target";
+import { oauthKernel } from "./oauth-kernel";
 
-const captured = <T extends S.Authority>(mapping: T): T => {
-  const retained = captureOAuthMapping(mapping),
-    codec = retained.subjectId;
+export const makeTargetOAuthConnectedServices: OAuthKernel["connectedTarget"]["makeTargetOAuthConnectedServices"] =
+  oauthKernel.connectedTarget.makeTargetOAuthConnectedServices;
 
-  const subjectId = {
-    ...codec,
-    toNative: (subject: Parameters<typeof codec.toNative>[0]) =>
-      Effect.map(codec.toNative(subject), S.nativeCopy),
-    toSubject: (native: unknown) => codec.toSubject(S.nativeCopy(native)),
-    equals: (a: unknown, b: unknown) => codec.equals(S.nativeCopy(a), S.nativeCopy(b)),
-  };
+export const makeTargetOAuthConnectedRevocationServices: OAuthKernel["connectedTarget"]["makeTargetOAuthConnectedRevocationServices"] =
+  oauthKernel.connectedTarget.makeTargetOAuthConnectedRevocationServices;
 
-  const ownership = retained.ownership;
+export const coordinateTargetOAuthConnected: OAuthKernel["connectedTarget"]["coordinateTargetOAuthConnected"] =
+  oauthKernel.connectedTarget.coordinateTargetOAuthConnected;
 
-  if (ownership.mode === "separate" && "encodeInsert" in ownership.external) {
-    const encode = ownership.external.encodeInsert as (input: {
-      readonly identity: typeof OAuthExternalIdentity.Type;
-      readonly identityKey: string;
-      readonly subjectId: unknown;
-    }) => import("./oauth-owner").Row;
+export const coordinateTargetOAuthConnectedRevocations: OAuthKernel["connectedTarget"]["coordinateTargetOAuthConnectedRevocations"] =
+  oauthKernel.connectedTarget.coordinateTargetOAuthConnectedRevocations;
 
-    return captureOAuthMapping({
-      ...retained,
-      subjectId,
-      ownership: {
-        ...ownership,
-        external: {
-          ...ownership.external,
-          encodeInsert: (input: Parameters<typeof encode>[0]) =>
-            encode({
-              ...input,
-              identity: snapshotOAuthSync(OAuthExternalIdentity, input.identity),
-              subjectId: S.nativeCopy(input.subjectId),
-            }),
-        },
-      },
-    });
-  }
+export const oauthConnectedPersistenceLayer: OAuthKernel["connectedTarget"]["oauthConnectedPersistenceLayer"] =
+  oauthKernel.connectedTarget.oauthConnectedPersistenceLayer;
 
-  return captureOAuthMapping({ ...retained, subjectId });
-};
-
-const prepare = <Value, Encoded, A>(
-  schema: Schema.Codec<Value, Encoded, never, never>,
-  value: Value,
-  callback: PrepareOAuthCommit<Value, A>,
-) =>
-  Effect.flatMap(CurrentOAuthTransaction, (owner) =>
-    Effect.sync(() => {
-      owner.guards.push(owner.journal.prepare(undefined));
-
-      return callback(snapshotOAuthSync(schema, value), owner.journal);
-    }),
-  );
-
-const mutation =
-  <Input, Value, Encoded>(
-    mapping: S.Mapping,
-    execute: OAuthExecution,
-    body: (
-      mapping: S.Mapping,
-      input: Input,
-    ) => Effect.Effect<
-      Value,
-      | import("@yielded/auth/OAuth").OAuthUnavailable
-      | PersistenceMappingError
-      | PlatformError.PlatformError,
-      CurrentOAuthTransaction | Crypto.Crypto
-    >,
-    schema: Schema.Codec<Value, Encoded, never, never>,
-  ) =>
-  <A>(input: Input, callback: PrepareOAuthCommit<Value, A>) =>
-    execute.run(Effect.flatMap(body(mapping, input), (value) => prepare(schema, value, callback)));
-
-const read =
-  <Input, Value>(
-    mapping: S.Mapping,
-    execute: OAuthExecution,
-    body: (
-      mapping: S.Mapping,
-      input: Input,
-    ) => Effect.Effect<
-      Value,
-      | import("@yielded/auth/OAuth").OAuthUnavailable
-      | PersistenceMappingError
-      | PlatformError.PlatformError,
-      CurrentOAuthTransaction | Crypto.Crypto
-    >,
-  ) =>
-  (input: Input) =>
-    execute.run(body(mapping, input), false);
-
-export const makeConnected = (
-  mapping: S.Mapping,
-  execute: OAuthExecution,
-): OAuthConnectedPersistence["Service"] =>
-  capturedOAuthService<OAuthConnectedPersistence["Service"]>(
-    {
-      claimSignIn: mutation(mapping, execute, SignIn.claimSignIn, M.OAuthSignInAccessClaim),
-      inspectSignIn: read(mapping, execute, SignIn.inspectSignIn),
-      settleSignIn: mutation(
-        mapping,
-        execute,
-        SignIn.settleSignIn,
-        M.OAuthConnectedSettlementDecision,
-      ),
-      capture: read(mapping, execute, F.capture),
-      issue: mutation(mapping, execute, F.issue, M.OAuthConnectedIssueDecision),
-      prepare: mutation(mapping, execute, F.prepare, M.OAuthConnectedIssueDecision),
-      inspectPrepared: read(mapping, execute, F.inspectPrepared),
-      preflight: read(mapping, execute, F.preflight),
-      claim: mutation(mapping, execute, F.claim, M.OAuthConnectedClaimDecision),
-      inspectGrant: read(mapping, execute, F.inspectGrant),
-      settle: mutation(mapping, execute, settle, M.OAuthConnectedSettlementDecision),
-      list: read(mapping, execute, Management.list),
-      inspectDisconnect: read(mapping, execute, Management.inspectDisconnect),
-      disconnect: mutation(
-        mapping,
-        execute,
-        Management.disconnect,
-        M.OAuthConnectedDisconnectDecision,
-      ),
-      inspectAccess: read(mapping, execute, A.inspectAccess),
-      claimRefresh: mutation(mapping, execute, A.claimRefresh, M.OAuthConnectedRefreshDecision),
-      settleRefresh: mutation(mapping, execute, A.settleRefresh, M.OAuthConnectedRefreshSettlement),
-      admitUse: mutation(mapping, execute, A.admitUse, M.OAuthConnectedUseAdmission),
-      cleanup: mutation(mapping, execute, Maintenance.cleanup, M.OAuthConnectedCleanupResult),
-    },
-    connectedInputs,
-    execute.active,
-    execute.poison,
-  );
-
-const settled = Schema.Struct({ settled: Schema.Boolean });
-
-export const makeRevocations = (
-  mapping: S.Revocations,
-  execute: OAuthExecution,
-): OAuthConnectedRevocations["Service"] =>
-  capturedOAuthService<OAuthConnectedRevocations["Service"]>(
-    {
-      claim: (input, callback) =>
-        execute.run(
-          Effect.flatMap(Maintenance.claimRevocation(mapping, input), (value) =>
-            prepare(OAuthConnectedRevocationDecision, value, callback),
-          ),
-        ),
-      settle: (input, callback) =>
-        execute.run(
-          Effect.flatMap(Maintenance.settleRevocation(mapping, input), (value) =>
-            prepare(settled, value, callback),
-          ),
-        ),
-    },
-    connectedRevocationInputs,
-    execute.active,
-    execute.poison,
-  );
-
-export const makeTargetOAuthConnectedServices = (
-  mapping: S.Mapping,
-  configuration: OAuthTargetConfiguration,
-) => {
-  const retained = captured(mapping);
-
-  return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({
-    oauthConnectedPersistence: makeConnected(retained, execution),
-  }));
-};
-
-export const makeTargetOAuthConnectedRevocationServices = (
-  mapping: S.Revocations,
-  configuration: OAuthTargetConfiguration,
-) => {
-  const retained = captured(mapping);
-
-  return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({
-    oauthConnectedRevocations: makeRevocations(retained, execution),
-  }));
-};
-
-export const coordinateTargetOAuthConnected = <Transaction, A, E, R>(
-  database: any,
-  mapping: S.Mapping,
-  configuration: OAuthTargetConfiguration,
-  owner: (
-    transaction: Transaction,
-    services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence["Service"] },
-    append: (statement: Statement<any>) => void,
-  ) => Effect.Effect<A, E, R>,
-) =>
-  coordinateOAuthOwner(
-    database,
-    captured(mapping),
-    configuration,
-    () => Effect.void,
-    (value: S.Mapping, execution) => ({
-      oauthConnectedPersistence: makeConnected(value, execution),
-    }),
-    owner,
-  );
-
-export const coordinateTargetOAuthConnectedRevocations = <Transaction, A, E, R>(
-  database: any,
-  mapping: S.Revocations,
-  configuration: OAuthTargetConfiguration,
-  owner: (
-    transaction: Transaction,
-    services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations["Service"] },
-    append: (statement: Statement<any>) => void,
-  ) => Effect.Effect<A, E, R>,
-) =>
-  coordinateOAuthOwner(
-    database,
-    captured(mapping),
-    configuration,
-    () => Effect.void,
-    (value: S.Revocations, execution) => ({
-      oauthConnectedRevocations: makeRevocations(value, execution),
-    }),
-    owner,
-  );
-
-export const oauthConnectedPersistenceLayer = <E, R>(
-  services: Effect.Effect<
-    Effect.Success<ReturnType<typeof makeTargetOAuthConnectedServices>>,
-    E,
-    R
-  >,
-) =>
-  Layer.effect(
-    OAuthConnectedPersistence,
-    Effect.map(services, (value) => value.oauthConnectedPersistence),
-  );
-
-export const oauthConnectedRevocationsLayer = <E, R>(
-  services: Effect.Effect<
-    Effect.Success<ReturnType<typeof makeTargetOAuthConnectedRevocationServices>>,
-    E,
-    R
-  >,
-) =>
-  Layer.effect(
-    OAuthConnectedRevocations,
-    Effect.map(services, (value) => value.oauthConnectedRevocations),
-  );
+export const oauthConnectedRevocationsLayer: OAuthKernel["connectedTarget"]["oauthConnectedRevocationsLayer"] =
+  oauthKernel.connectedTarget.oauthConnectedRevocationsLayer;

package/src/drizzle/oauth-kernel.ts

@@ -0,0 +1,10 @@
+import { makeOAuthKernel, type OAuthKernel } from "@yielded/auth-persistence/Adapter";
+import { is } from "drizzle-orm";
+import { MySqlTable } from "drizzle-orm/mysql-core";
+import { PgTable } from "drizzle-orm/pg-core";
+
+import { drizzleQueryOperations } from "./query-operations";
+
+export const oauthKernel: OAuthKernel = makeOAuthKernel(drizzleQueryOperations, (table) =>
+  is(table, MySqlTable) ? "mysql" : is(table, PgTable) ? "pg" : "sqlite",
+);