@yielded/auth-persistence-drizzle 0.1.0-beta.23 → 0.1.0-beta.25
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -0
- package/dist/D1.d.mts +9 -9
- package/dist/D1.mjs +2 -1
- package/dist/D1.mjs.map +1 -1
- package/dist/Libsql.d.mts +48 -64
- package/dist/Libsql.mjs +2 -1
- package/dist/Libsql.mjs.map +1 -1
- package/dist/Mysql2.d.mts +26 -27
- package/dist/Pglite.d.mts +28 -28
- package/dist/Pglite.mjs +2 -1
- package/dist/Pglite.mjs.map +1 -1
- package/dist/Postgres.d.mts +29 -29
- package/dist/Postgres.mjs +2 -1
- package/dist/Postgres.mjs.map +1 -1
- package/dist/SqliteBun.d.mts +49 -65
- package/dist/SqliteBun.mjs +2 -1
- package/dist/SqliteBun.mjs.map +1 -1
- package/dist/SqliteDo.d.mts +47 -63
- package/dist/SqliteDo.mjs +2 -1
- package/dist/SqliteDo.mjs.map +1 -1
- package/dist/SqliteNode.d.mts +51 -67
- package/dist/SqliteNode.mjs +2 -1
- package/dist/SqliteNode.mjs.map +1 -1
- package/dist/SqliteWasm.d.mts +47 -63
- package/dist/SqliteWasm.mjs +2 -1
- package/dist/SqliteWasm.mjs.map +1 -1
- package/dist/drizzle/crypto.mjs +1 -1
- package/dist/drizzle/d1-emails.d.mts +1 -1
- package/dist/drizzle/d1-oauth.d.mts +15 -15
- package/dist/drizzle/d1-passkey.d.mts +1 -1
- package/dist/drizzle/d1-password-prepared.d.mts +4 -4
- package/dist/drizzle/d1-password-prepared.mjs +1 -1
- package/dist/drizzle/d1-password-prepared.mjs.map +1 -1
- package/dist/drizzle/d1-passwords.d.mts +17 -33
- package/dist/drizzle/d1-passwords.mjs +57 -199
- package/dist/drizzle/d1-passwords.mjs.map +1 -1
- package/dist/drizzle/d1-phone.d.mts +1 -1
- package/dist/drizzle/d1-proofs.d.mts +1 -1
- package/dist/drizzle/d1-sessions.d.mts +2 -2
- package/dist/drizzle/d1-sessions.mjs +11 -6
- package/dist/drizzle/d1-sessions.mjs.map +1 -1
- package/dist/drizzle/d1-totp.d.mts +1 -1
- package/dist/drizzle/mysql-password-prepared.d.mts +5 -5
- package/dist/drizzle/mysql-password-prepared.mjs.map +1 -1
- package/dist/drizzle/mysql-passwords.d.mts +16 -32
- package/dist/drizzle/mysql-passwords.mjs.map +1 -1
- package/dist/drizzle/mysql-sessions.d.mts +1 -1
- package/dist/drizzle/native-sql-table.mjs +26 -1
- package/dist/drizzle/native-sql-table.mjs.map +1 -1
- package/dist/drizzle/oauth-connected-model.d.mts +20 -281
- package/dist/drizzle/oauth-connected-model.mjs +3 -17
- package/dist/drizzle/oauth-connected-model.mjs.map +1 -1
- package/dist/drizzle/oauth-connected-reference.d.mts +1 -3
- package/dist/drizzle/oauth-connected-reference.mjs +4 -53
- package/dist/drizzle/oauth-connected-reference.mjs.map +1 -1
- package/dist/drizzle/oauth-connected-target.d.mts +3 -990
- package/dist/drizzle/oauth-connected-target.mjs +8 -92
- package/dist/drizzle/oauth-connected-target.mjs.map +1 -1
- package/dist/drizzle/oauth-kernel.mjs +11 -0
- package/dist/drizzle/oauth-kernel.mjs.map +1 -0
- package/dist/drizzle/oauth-model.d.mts +35 -438
- package/dist/drizzle/oauth-model.mjs +6 -44
- package/dist/drizzle/oauth-model.mjs.map +1 -1
- package/dist/drizzle/oauth-mysql.mjs +2 -2
- package/dist/drizzle/oauth-mysql.mjs.map +1 -1
- package/dist/drizzle/oauth-proxy.d.mts +10 -0
- package/dist/drizzle/oauth-proxy.mjs +54 -0
- package/dist/drizzle/oauth-proxy.mjs.map +1 -0
- package/dist/drizzle/oauth-target.d.mts +6 -107
- package/dist/drizzle/oauth-target.mjs +15 -245
- package/dist/drizzle/oauth-target.mjs.map +1 -1
- package/dist/drizzle/password-model.d.mts +5 -6
- package/dist/drizzle/password-prepared-model.d.mts +5 -5
- package/dist/drizzle/password-prepared-model.mjs.map +1 -1
- package/dist/drizzle/password-prepared-sql.mjs +1 -1
- package/dist/drizzle/password-prepared-sql.mjs.map +1 -1
- package/dist/drizzle/password-prepared-state.mjs +1 -1
- package/dist/drizzle/pg-password-prepared.d.mts +5 -5
- package/dist/drizzle/pg-password-prepared.mjs.map +1 -1
- package/dist/drizzle/pg-passwords.d.mts +16 -32
- package/dist/drizzle/pg-passwords.mjs.map +1 -1
- package/dist/drizzle/pg-sessions.d.mts +1 -1
- package/dist/drizzle/phone-target.d.mts +1 -1
- package/dist/drizzle/phone-target.mjs +1 -1
- package/dist/drizzle/query-operations.mjs +3 -1
- package/dist/drizzle/query-operations.mjs.map +1 -1
- package/dist/drizzle/sqlite-password-prepared.mjs.map +1 -1
- package/dist/drizzle/sqlite-passwords.mjs.map +1 -1
- package/dist/drizzle/storage-validation.mjs +10 -185
- package/dist/drizzle/storage-validation.mjs.map +1 -1
- package/dist/drizzle/totp-target.d.mts +2 -2
- package/dist/drizzle/totp-target.mjs +2 -2
- package/dist/drizzle/transaction-execution.d.mts +2 -2
- package/dist/drizzle/transaction-owner.d.mts +1 -2
- package/dist/index.d.mts +3 -2
- package/dist/internal/drizzle-postgres-oauth-proxy.d.mts +138 -0
- package/dist/internal/drizzle-postgres-oauth-proxy.mjs +29 -0
- package/dist/internal/drizzle-postgres-oauth-proxy.mjs.map +1 -0
- package/dist/internal/drizzle-sqlite-oauth-proxy.d.mts +146 -0
- package/dist/internal/drizzle-sqlite-oauth-proxy.mjs +29 -0
- package/dist/internal/drizzle-sqlite-oauth-proxy.mjs.map +1 -0
- package/package.json +1 -1
- package/src/D1.ts +2 -0
- package/src/Libsql.ts +2 -0
- package/src/Pglite.ts +2 -0
- package/src/Postgres.ts +2 -0
- package/src/SqliteBun.ts +2 -0
- package/src/SqliteDo.ts +2 -0
- package/src/SqliteNode.ts +2 -0
- package/src/SqliteWasm.ts +2 -0
- package/src/drizzle/d1-password-prepared.ts +4 -6
- package/src/drizzle/d1-passwords.ts +125 -459
- package/src/drizzle/d1-sessions.ts +21 -6
- package/src/drizzle/mysql-password-prepared.ts +4 -8
- package/src/drizzle/mysql-passwords.ts +5 -10
- package/src/drizzle/native-sql-table.ts +30 -0
- package/src/drizzle/oauth-connected-model.ts +97 -315
- package/src/drizzle/oauth-connected-reference.ts +13 -93
- package/src/drizzle/oauth-connected-target.ts +14 -271
- package/src/drizzle/oauth-kernel.ts +10 -0
- package/src/drizzle/oauth-model.ts +188 -541
- package/src/drizzle/oauth-mysql.ts +2 -2
- package/src/drizzle/oauth-proxy.ts +101 -0
- package/src/drizzle/oauth-target.ts +33 -737
- package/src/drizzle/password-model.ts +0 -13
- package/src/drizzle/password-prepared-model.ts +0 -6
- package/src/drizzle/password-prepared-sql.ts +2 -1
- package/src/drizzle/pg-password-prepared.ts +4 -8
- package/src/drizzle/pg-passwords.ts +5 -10
- package/src/drizzle/query-operations.ts +4 -0
- package/src/drizzle/sqlite-password-prepared.ts +4 -8
- package/src/drizzle/sqlite-passwords.ts +7 -14
- package/src/drizzle/storage-validation.ts +13 -214
- package/src/index.ts +2 -4
- package/src/internal/drizzle-postgres-oauth-proxy.ts +37 -0
- package/src/internal/drizzle-sqlite-oauth-proxy.ts +44 -0
- package/dist/_virtual/_rolldown/runtime.mjs +0 -13
- package/dist/drizzle/oauth-accounts.mjs +0 -359
- package/dist/drizzle/oauth-accounts.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-access.mjs +0 -212
- package/dist/drizzle/oauth-connected-access.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-collection.mjs +0 -202
- package/dist/drizzle/oauth-connected-collection.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-custody.mjs +0 -147
- package/dist/drizzle/oauth-connected-custody.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-flow.mjs +0 -297
- package/dist/drizzle/oauth-connected-flow.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-input.mjs +0 -122
- package/dist/drizzle/oauth-connected-input.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-maintenance.mjs +0 -214
- package/dist/drizzle/oauth-connected-maintenance.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-management.mjs +0 -229
- package/dist/drizzle/oauth-connected-management.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-settlement.mjs +0 -128
- package/dist/drizzle/oauth-connected-settlement.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-sign-in.mjs +0 -265
- package/dist/drizzle/oauth-connected-sign-in.mjs.map +0 -1
- package/dist/drizzle/oauth-connected-state.d.mts +0 -2062
- package/dist/drizzle/oauth-connected-state.mjs +0 -430
- package/dist/drizzle/oauth-connected-state.mjs.map +0 -1
- package/dist/drizzle/oauth-flow.d.mts +0 -22
- package/dist/drizzle/oauth-flow.mjs +0 -253
- package/dist/drizzle/oauth-flow.mjs.map +0 -1
- package/dist/drizzle/oauth-input.mjs +0 -127
- package/dist/drizzle/oauth-input.mjs.map +0 -1
- package/dist/drizzle/oauth-owner.d.mts +0 -10
- package/dist/drizzle/oauth-owner.mjs +0 -10
- package/dist/drizzle/oauth-owner.mjs.map +0 -1
- package/dist/drizzle/oauth-registration.d.mts +0 -5
- package/dist/drizzle/oauth-registration.mjs +0 -374
- package/dist/drizzle/oauth-registration.mjs.map +0 -1
- package/dist/drizzle/oauth-state.mjs +0 -107
- package/dist/drizzle/oauth-state.mjs.map +0 -1
- package/src/drizzle/oauth-accounts.ts +0 -805
- package/src/drizzle/oauth-connected-access.ts +0 -361
- package/src/drizzle/oauth-connected-collection.ts +0 -324
- package/src/drizzle/oauth-connected-custody.ts +0 -279
- package/src/drizzle/oauth-connected-flow.ts +0 -529
- package/src/drizzle/oauth-connected-input.ts +0 -147
- package/src/drizzle/oauth-connected-maintenance.ts +0 -346
- package/src/drizzle/oauth-connected-management.ts +0 -365
- package/src/drizzle/oauth-connected-settlement.ts +0 -251
- package/src/drizzle/oauth-connected-sign-in.ts +0 -443
- package/src/drizzle/oauth-connected-state.ts +0 -872
- package/src/drizzle/oauth-flow.ts +0 -462
- package/src/drizzle/oauth-input.ts +0 -201
- package/src/drizzle/oauth-owner.ts +0 -29
- package/src/drizzle/oauth-registration.ts +0 -640
- package/src/drizzle/oauth-state.ts +0 -218
|
@@ -1,96 +1,12 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import { CurrentOAuthTransaction } from "./oauth-owner.mjs";
|
|
3
|
-
import { capturedOAuthService } from "./oauth-input.mjs";
|
|
4
|
-
import { coordinateOAuthOwner, makeOAuthExecution } from "./oauth-target.mjs";
|
|
5
|
-
import { nativeCopy } from "./oauth-connected-state.mjs";
|
|
6
|
-
import { capture, claim, inspectGrant, inspectPrepared, issue, preflight, prepare as prepare$1 } from "./oauth-connected-flow.mjs";
|
|
7
|
-
import { settle } from "./oauth-connected-settlement.mjs";
|
|
8
|
-
import { admitUse, claimRefresh, inspectAccess, settleRefresh } from "./oauth-connected-access.mjs";
|
|
9
|
-
import { connectedInputs, connectedRevocationInputs } from "./oauth-connected-input.mjs";
|
|
10
|
-
import { claimRevocation, cleanup, settleRevocation } from "./oauth-connected-maintenance.mjs";
|
|
11
|
-
import { disconnect, inspectDisconnect, list } from "./oauth-connected-management.mjs";
|
|
12
|
-
import { claimSignIn, inspectSignIn, settleSignIn } from "./oauth-connected-sign-in.mjs";
|
|
13
|
-
import { Effect, Layer, Schema } from "effect";
|
|
14
|
-
import * as M from "@yielded/auth/OAuth";
|
|
15
|
-
import { OAuthConnectedPersistence, OAuthConnectedRevocationDecision, OAuthConnectedRevocations, OAuthExternalIdentity, snapshotOAuthSync } from "@yielded/auth/OAuth";
|
|
1
|
+
import { oauthKernel } from "./oauth-kernel.mjs";
|
|
16
2
|
//#region src/drizzle/oauth-connected-target.ts
|
|
17
|
-
const
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
equals: (a, b) => codec.equals(nativeCopy(a), nativeCopy(b))
|
|
24
|
-
};
|
|
25
|
-
const ownership = retained.ownership;
|
|
26
|
-
if (ownership.mode === "separate" && "encodeInsert" in ownership.external) {
|
|
27
|
-
const encode = ownership.external.encodeInsert;
|
|
28
|
-
return captureOAuthMapping({
|
|
29
|
-
...retained,
|
|
30
|
-
subjectId,
|
|
31
|
-
ownership: {
|
|
32
|
-
...ownership,
|
|
33
|
-
external: {
|
|
34
|
-
...ownership.external,
|
|
35
|
-
encodeInsert: (input) => encode({
|
|
36
|
-
...input,
|
|
37
|
-
identity: snapshotOAuthSync(OAuthExternalIdentity, input.identity),
|
|
38
|
-
subjectId: nativeCopy(input.subjectId)
|
|
39
|
-
})
|
|
40
|
-
}
|
|
41
|
-
}
|
|
42
|
-
});
|
|
43
|
-
}
|
|
44
|
-
return captureOAuthMapping({
|
|
45
|
-
...retained,
|
|
46
|
-
subjectId
|
|
47
|
-
});
|
|
48
|
-
};
|
|
49
|
-
const prepare = (schema, value, callback) => Effect.flatMap(CurrentOAuthTransaction, (owner) => Effect.sync(() => {
|
|
50
|
-
owner.guards.push(owner.journal.prepare(void 0));
|
|
51
|
-
return callback(snapshotOAuthSync(schema, value), owner.journal);
|
|
52
|
-
}));
|
|
53
|
-
const mutation = (mapping, execute, body, schema) => (input, callback) => execute.run(Effect.flatMap(body(mapping, input), (value) => prepare(schema, value, callback)));
|
|
54
|
-
const read = (mapping, execute, body) => (input) => execute.run(body(mapping, input), false);
|
|
55
|
-
const makeConnected = (mapping, execute) => capturedOAuthService({
|
|
56
|
-
claimSignIn: mutation(mapping, execute, claimSignIn, M.OAuthSignInAccessClaim),
|
|
57
|
-
inspectSignIn: read(mapping, execute, inspectSignIn),
|
|
58
|
-
settleSignIn: mutation(mapping, execute, settleSignIn, M.OAuthConnectedSettlementDecision),
|
|
59
|
-
capture: read(mapping, execute, capture),
|
|
60
|
-
issue: mutation(mapping, execute, issue, M.OAuthConnectedIssueDecision),
|
|
61
|
-
prepare: mutation(mapping, execute, prepare$1, M.OAuthConnectedIssueDecision),
|
|
62
|
-
inspectPrepared: read(mapping, execute, inspectPrepared),
|
|
63
|
-
preflight: read(mapping, execute, preflight),
|
|
64
|
-
claim: mutation(mapping, execute, claim, M.OAuthConnectedClaimDecision),
|
|
65
|
-
inspectGrant: read(mapping, execute, inspectGrant),
|
|
66
|
-
settle: mutation(mapping, execute, settle, M.OAuthConnectedSettlementDecision),
|
|
67
|
-
list: read(mapping, execute, list),
|
|
68
|
-
inspectDisconnect: read(mapping, execute, inspectDisconnect),
|
|
69
|
-
disconnect: mutation(mapping, execute, disconnect, M.OAuthConnectedDisconnectDecision),
|
|
70
|
-
inspectAccess: read(mapping, execute, inspectAccess),
|
|
71
|
-
claimRefresh: mutation(mapping, execute, claimRefresh, M.OAuthConnectedRefreshDecision),
|
|
72
|
-
settleRefresh: mutation(mapping, execute, settleRefresh, M.OAuthConnectedRefreshSettlement),
|
|
73
|
-
admitUse: mutation(mapping, execute, admitUse, M.OAuthConnectedUseAdmission),
|
|
74
|
-
cleanup: mutation(mapping, execute, cleanup, M.OAuthConnectedCleanupResult)
|
|
75
|
-
}, connectedInputs, execute.active, execute.poison);
|
|
76
|
-
const settled = Schema.Struct({ settled: Schema.Boolean });
|
|
77
|
-
const makeRevocations = (mapping, execute) => capturedOAuthService({
|
|
78
|
-
claim: (input, callback) => execute.run(Effect.flatMap(claimRevocation(mapping, input), (value) => prepare(OAuthConnectedRevocationDecision, value, callback))),
|
|
79
|
-
settle: (input, callback) => execute.run(Effect.flatMap(settleRevocation(mapping, input), (value) => prepare(settled, value, callback)))
|
|
80
|
-
}, connectedRevocationInputs, execute.active, execute.poison);
|
|
81
|
-
const makeTargetOAuthConnectedServices = (mapping, configuration) => {
|
|
82
|
-
const retained = captured(mapping);
|
|
83
|
-
return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({ oauthConnectedPersistence: makeConnected(retained, execution) }));
|
|
84
|
-
};
|
|
85
|
-
const makeTargetOAuthConnectedRevocationServices = (mapping, configuration) => {
|
|
86
|
-
const retained = captured(mapping);
|
|
87
|
-
return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({ oauthConnectedRevocations: makeRevocations(retained, execution) }));
|
|
88
|
-
};
|
|
89
|
-
const coordinateTargetOAuthConnected = (database, mapping, configuration, owner) => coordinateOAuthOwner(database, captured(mapping), configuration, () => Effect.void, (value, execution) => ({ oauthConnectedPersistence: makeConnected(value, execution) }), owner);
|
|
90
|
-
const coordinateTargetOAuthConnectedRevocations = (database, mapping, configuration, owner) => coordinateOAuthOwner(database, captured(mapping), configuration, () => Effect.void, (value, execution) => ({ oauthConnectedRevocations: makeRevocations(value, execution) }), owner);
|
|
91
|
-
const oauthConnectedPersistenceLayer = (services) => Layer.effect(OAuthConnectedPersistence, Effect.map(services, (value) => value.oauthConnectedPersistence));
|
|
92
|
-
const oauthConnectedRevocationsLayer = (services) => Layer.effect(OAuthConnectedRevocations, Effect.map(services, (value) => value.oauthConnectedRevocations));
|
|
3
|
+
const makeTargetOAuthConnectedServices = oauthKernel.connectedTarget.makeTargetOAuthConnectedServices;
|
|
4
|
+
const makeTargetOAuthConnectedRevocationServices = oauthKernel.connectedTarget.makeTargetOAuthConnectedRevocationServices;
|
|
5
|
+
const coordinateTargetOAuthConnected = oauthKernel.connectedTarget.coordinateTargetOAuthConnected;
|
|
6
|
+
const coordinateTargetOAuthConnectedRevocations = oauthKernel.connectedTarget.coordinateTargetOAuthConnectedRevocations;
|
|
7
|
+
const oauthConnectedPersistenceLayer = oauthKernel.connectedTarget.oauthConnectedPersistenceLayer;
|
|
8
|
+
const oauthConnectedRevocationsLayer = oauthKernel.connectedTarget.oauthConnectedRevocationsLayer;
|
|
93
9
|
//#endregion
|
|
94
|
-
export { coordinateTargetOAuthConnected, coordinateTargetOAuthConnectedRevocations,
|
|
10
|
+
export { coordinateTargetOAuthConnected, coordinateTargetOAuthConnectedRevocations, makeTargetOAuthConnectedRevocationServices, makeTargetOAuthConnectedServices, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer };
|
|
95
11
|
|
|
96
12
|
//# sourceMappingURL=oauth-connected-target.mjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oauth-connected-target.mjs","names":["S.nativeCopy","SignIn.claimSignIn","SignIn.inspectSignIn","SignIn.settleSignIn","F.capture","F.issue","F.prepare","F.inspectPrepared","F.preflight","F.claim","F.inspectGrant","Management.list","Management.inspectDisconnect","Management.disconnect","A.inspectAccess","A.claimRefresh","A.settleRefresh","A.admitUse","Maintenance.cleanup","Maintenance.claimRevocation","Maintenance.settleRevocation"],"sources":["../../src/drizzle/oauth-connected-target.ts"],"sourcesContent":["import * as M from \"@yielded/auth/OAuth\";\nimport {\n OAuthConnectedPersistence,\n OAuthConnectedRevocations,\n OAuthConnectedRevocationDecision,\n OAuthExternalIdentity,\n snapshotOAuthSync,\n type PrepareOAuthCommit,\n} from \"@yielded/auth/OAuth\";\n/* oxlint-disable no-explicit-any -- concrete adapters retain the native database, table and ID types. */\nimport { type Crypto, Effect, Layer, type PlatformError, Schema } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport * as A from \"./oauth-connected-access\";\nimport * as F from \"./oauth-connected-flow\";\nimport { connectedInputs, connectedRevocationInputs } from \"./oauth-connected-input\";\nimport * as Maintenance from \"./oauth-connected-maintenance\";\nimport * as Management from \"./oauth-connected-management\";\nimport { settle } from \"./oauth-connected-settlement\";\nimport * as SignIn from \"./oauth-connected-sign-in\";\nimport * as S from \"./oauth-connected-state\";\nimport { capturedOAuthService } from \"./oauth-input\";\nimport { CurrentOAuthTransaction } from \"./oauth-owner\";\nimport { captureOAuthMapping } from \"./oauth-state\";\nimport {\n coordinateOAuthOwner,\n makeOAuthExecution,\n type OAuthExecution,\n type OAuthTargetConfiguration,\n} from \"./oauth-target\";\n\nconst captured = <T extends S.Authority>(mapping: T): T => {\n const retained = captureOAuthMapping(mapping),\n codec = retained.subjectId;\n\n const subjectId = {\n ...codec,\n toNative: (subject: Parameters<typeof codec.toNative>[0]) =>\n Effect.map(codec.toNative(subject), S.nativeCopy),\n toSubject: (native: unknown) => codec.toSubject(S.nativeCopy(native)),\n equals: (a: unknown, b: unknown) => codec.equals(S.nativeCopy(a), S.nativeCopy(b)),\n };\n\n const ownership = retained.ownership;\n\n if (ownership.mode === \"separate\" && \"encodeInsert\" in ownership.external) {\n const encode = ownership.external.encodeInsert as (input: {\n readonly identity: typeof OAuthExternalIdentity.Type;\n readonly identityKey: string;\n readonly subjectId: unknown;\n }) => import(\"./oauth-owner\").Row;\n\n return captureOAuthMapping({\n ...retained,\n subjectId,\n ownership: {\n ...ownership,\n external: {\n ...ownership.external,\n encodeInsert: (input: Parameters<typeof encode>[0]) =>\n encode({\n ...input,\n identity: snapshotOAuthSync(OAuthExternalIdentity, input.identity),\n subjectId: S.nativeCopy(input.subjectId),\n }),\n },\n },\n });\n }\n\n return captureOAuthMapping({ ...retained, subjectId });\n};\n\nconst prepare = <Value, Encoded, A>(\n schema: Schema.Codec<Value, Encoded, never, never>,\n value: Value,\n callback: PrepareOAuthCommit<Value, A>,\n) =>\n Effect.flatMap(CurrentOAuthTransaction, (owner) =>\n Effect.sync(() => {\n owner.guards.push(owner.journal.prepare(undefined));\n\n return callback(snapshotOAuthSync(schema, value), owner.journal);\n }),\n );\n\nconst mutation =\n <Input, Value, Encoded>(\n mapping: S.Mapping,\n execute: OAuthExecution,\n body: (\n mapping: S.Mapping,\n input: Input,\n ) => Effect.Effect<\n Value,\n | import(\"@yielded/auth/OAuth\").OAuthUnavailable\n | PersistenceMappingError\n | PlatformError.PlatformError,\n CurrentOAuthTransaction | Crypto.Crypto\n >,\n schema: Schema.Codec<Value, Encoded, never, never>,\n ) =>\n <A>(input: Input, callback: PrepareOAuthCommit<Value, A>) =>\n execute.run(Effect.flatMap(body(mapping, input), (value) => prepare(schema, value, callback)));\n\nconst read =\n <Input, Value>(\n mapping: S.Mapping,\n execute: OAuthExecution,\n body: (\n mapping: S.Mapping,\n input: Input,\n ) => Effect.Effect<\n Value,\n | import(\"@yielded/auth/OAuth\").OAuthUnavailable\n | PersistenceMappingError\n | PlatformError.PlatformError,\n CurrentOAuthTransaction | Crypto.Crypto\n >,\n ) =>\n (input: Input) =>\n execute.run(body(mapping, input), false);\n\nexport const makeConnected = (\n mapping: S.Mapping,\n execute: OAuthExecution,\n): OAuthConnectedPersistence[\"Service\"] =>\n capturedOAuthService<OAuthConnectedPersistence[\"Service\"]>(\n {\n claimSignIn: mutation(mapping, execute, SignIn.claimSignIn, M.OAuthSignInAccessClaim),\n inspectSignIn: read(mapping, execute, SignIn.inspectSignIn),\n settleSignIn: mutation(\n mapping,\n execute,\n SignIn.settleSignIn,\n M.OAuthConnectedSettlementDecision,\n ),\n capture: read(mapping, execute, F.capture),\n issue: mutation(mapping, execute, F.issue, M.OAuthConnectedIssueDecision),\n prepare: mutation(mapping, execute, F.prepare, M.OAuthConnectedIssueDecision),\n inspectPrepared: read(mapping, execute, F.inspectPrepared),\n preflight: read(mapping, execute, F.preflight),\n claim: mutation(mapping, execute, F.claim, M.OAuthConnectedClaimDecision),\n inspectGrant: read(mapping, execute, F.inspectGrant),\n settle: mutation(mapping, execute, settle, M.OAuthConnectedSettlementDecision),\n list: read(mapping, execute, Management.list),\n inspectDisconnect: read(mapping, execute, Management.inspectDisconnect),\n disconnect: mutation(\n mapping,\n execute,\n Management.disconnect,\n M.OAuthConnectedDisconnectDecision,\n ),\n inspectAccess: read(mapping, execute, A.inspectAccess),\n claimRefresh: mutation(mapping, execute, A.claimRefresh, M.OAuthConnectedRefreshDecision),\n settleRefresh: mutation(mapping, execute, A.settleRefresh, M.OAuthConnectedRefreshSettlement),\n admitUse: mutation(mapping, execute, A.admitUse, M.OAuthConnectedUseAdmission),\n cleanup: mutation(mapping, execute, Maintenance.cleanup, M.OAuthConnectedCleanupResult),\n },\n connectedInputs,\n execute.active,\n execute.poison,\n );\n\nconst settled = Schema.Struct({ settled: Schema.Boolean });\n\nexport const makeRevocations = (\n mapping: S.Revocations,\n execute: OAuthExecution,\n): OAuthConnectedRevocations[\"Service\"] =>\n capturedOAuthService<OAuthConnectedRevocations[\"Service\"]>(\n {\n claim: (input, callback) =>\n execute.run(\n Effect.flatMap(Maintenance.claimRevocation(mapping, input), (value) =>\n prepare(OAuthConnectedRevocationDecision, value, callback),\n ),\n ),\n settle: (input, callback) =>\n execute.run(\n Effect.flatMap(Maintenance.settleRevocation(mapping, input), (value) =>\n prepare(settled, value, callback),\n ),\n ),\n },\n connectedRevocationInputs,\n execute.active,\n execute.poison,\n );\n\nexport const makeTargetOAuthConnectedServices = (\n mapping: S.Mapping,\n configuration: OAuthTargetConfiguration,\n) => {\n const retained = captured(mapping);\n\n return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({\n oauthConnectedPersistence: makeConnected(retained, execution),\n }));\n};\n\nexport const makeTargetOAuthConnectedRevocationServices = (\n mapping: S.Revocations,\n configuration: OAuthTargetConfiguration,\n) => {\n const retained = captured(mapping);\n\n return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({\n oauthConnectedRevocations: makeRevocations(retained, execution),\n }));\n};\n\nexport const coordinateTargetOAuthConnected = <Transaction, A, E, R>(\n database: any,\n mapping: S.Mapping,\n configuration: OAuthTargetConfiguration,\n owner: (\n transaction: Transaction,\n services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence[\"Service\"] },\n append: (statement: Statement<any>) => void,\n ) => Effect.Effect<A, E, R>,\n) =>\n coordinateOAuthOwner(\n database,\n captured(mapping),\n configuration,\n () => Effect.void,\n (value: S.Mapping, execution) => ({\n oauthConnectedPersistence: makeConnected(value, execution),\n }),\n owner,\n );\n\nexport const coordinateTargetOAuthConnectedRevocations = <Transaction, A, E, R>(\n database: any,\n mapping: S.Revocations,\n configuration: OAuthTargetConfiguration,\n owner: (\n transaction: Transaction,\n services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations[\"Service\"] },\n append: (statement: Statement<any>) => void,\n ) => Effect.Effect<A, E, R>,\n) =>\n coordinateOAuthOwner(\n database,\n captured(mapping),\n configuration,\n () => Effect.void,\n (value: S.Revocations, execution) => ({\n oauthConnectedRevocations: makeRevocations(value, execution),\n }),\n owner,\n );\n\nexport const oauthConnectedPersistenceLayer = <E, R>(\n services: Effect.Effect<\n Effect.Success<ReturnType<typeof makeTargetOAuthConnectedServices>>,\n E,\n R\n >,\n) =>\n Layer.effect(\n OAuthConnectedPersistence,\n Effect.map(services, (value) => value.oauthConnectedPersistence),\n );\n\nexport const oauthConnectedRevocationsLayer = <E, R>(\n services: Effect.Effect<\n Effect.Success<ReturnType<typeof makeTargetOAuthConnectedRevocationServices>>,\n E,\n R\n >,\n) =>\n Layer.effect(\n OAuthConnectedRevocations,\n Effect.map(services, (value) => value.oauthConnectedRevocations),\n );\n"],"mappings":";;;;;;;;;;;;;;;;AAgCA,MAAM,YAAmC,YAAkB;CACzD,MAAM,WAAW,oBAAoB,OAAO,GAC1C,QAAQ,SAAS;CAEnB,MAAM,YAAY;EAChB,GAAG;EACH,WAAW,YACT,OAAO,IAAI,MAAM,SAAS,OAAO,GAAGA,UAAY;EAClD,YAAY,WAAoB,MAAM,UAAUA,WAAa,MAAM,CAAC;EACpE,SAAS,GAAY,MAAe,MAAM,OAAOA,WAAa,CAAC,GAAGA,WAAa,CAAC,CAAC;CACnF;CAEA,MAAM,YAAY,SAAS;CAE3B,IAAI,UAAU,SAAS,cAAc,kBAAkB,UAAU,UAAU;EACzE,MAAM,SAAS,UAAU,SAAS;EAMlC,OAAO,oBAAoB;GACzB,GAAG;GACH;GACA,WAAW;IACT,GAAG;IACH,UAAU;KACR,GAAG,UAAU;KACb,eAAe,UACb,OAAO;MACL,GAAG;MACH,UAAU,kBAAkB,uBAAuB,MAAM,QAAQ;MACjE,WAAWA,WAAa,MAAM,SAAS;KACzC,CAAC;IACL;GACF;EACF,CAAC;CACH;CAEA,OAAO,oBAAoB;EAAE,GAAG;EAAU;CAAU,CAAC;AACvD;AAEA,MAAM,WACJ,QACA,OACA,aAEA,OAAO,QAAQ,0BAA0B,UACvC,OAAO,WAAW;CAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;CAElD,OAAO,SAAS,kBAAkB,QAAQ,KAAK,GAAG,MAAM,OAAO;AACjE,CAAC,CACH;AAEF,MAAM,YAEF,SACA,SACA,MAUA,YAEE,OAAc,aAChB,QAAQ,IAAI,OAAO,QAAQ,KAAK,SAAS,KAAK,IAAI,UAAU,QAAQ,QAAQ,OAAO,QAAQ,CAAC,CAAC;AAEjG,MAAM,QAEF,SACA,SACA,UAWD,UACC,QAAQ,IAAI,KAAK,SAAS,KAAK,GAAG,KAAK;AAE3C,MAAa,iBACX,SACA,YAEA,qBACE;CACE,aAAa,SAAS,SAAS,SAASC,aAAoB,EAAE,sBAAsB;CACpF,eAAe,KAAK,SAAS,SAASC,aAAoB;CAC1D,cAAc,SACZ,SACA,SACAC,cACA,EAAE,gCACJ;CACA,SAAS,KAAK,SAAS,SAASC,OAAS;CACzC,OAAO,SAAS,SAAS,SAASC,OAAS,EAAE,2BAA2B;CACxE,SAAS,SAAS,SAAS,SAASC,WAAW,EAAE,2BAA2B;CAC5E,iBAAiB,KAAK,SAAS,SAASC,eAAiB;CACzD,WAAW,KAAK,SAAS,SAASC,SAAW;CAC7C,OAAO,SAAS,SAAS,SAASC,OAAS,EAAE,2BAA2B;CACxE,cAAc,KAAK,SAAS,SAASC,YAAc;CACnD,QAAQ,SAAS,SAAS,SAAS,QAAQ,EAAE,gCAAgC;CAC7E,MAAM,KAAK,SAAS,SAASC,IAAe;CAC5C,mBAAmB,KAAK,SAAS,SAASC,iBAA4B;CACtE,YAAY,SACV,SACA,SACAC,YACA,EAAE,gCACJ;CACA,eAAe,KAAK,SAAS,SAASC,aAAe;CACrD,cAAc,SAAS,SAAS,SAASC,cAAgB,EAAE,6BAA6B;CACxF,eAAe,SAAS,SAAS,SAASC,eAAiB,EAAE,+BAA+B;CAC5F,UAAU,SAAS,SAAS,SAASC,UAAY,EAAE,0BAA0B;CAC7E,SAAS,SAAS,SAAS,SAASC,SAAqB,EAAE,2BAA2B;AACxF,GACA,iBACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAM,UAAU,OAAO,OAAO,EAAE,SAAS,OAAO,QAAQ,CAAC;AAEzD,MAAa,mBACX,SACA,YAEA,qBACE;CACE,QAAQ,OAAO,aACb,QAAQ,IACN,OAAO,QAAQC,gBAA4B,SAAS,KAAK,IAAI,UAC3D,QAAQ,kCAAkC,OAAO,QAAQ,CAC3D,CACF;CACF,SAAS,OAAO,aACd,QAAQ,IACN,OAAO,QAAQC,iBAA6B,SAAS,KAAK,IAAI,UAC5D,QAAQ,SAAS,OAAO,QAAQ,CAClC,CACF;AACJ,GACA,2BACA,QAAQ,QACR,QAAQ,MACV;AAEF,MAAa,oCACX,SACA,kBACG;CACH,MAAM,WAAW,SAAS,OAAO;CAEjC,OAAO,OAAO,IAAI,mBAAmB,eAAe,QAAQ,IAAI,eAAe,EAC7E,2BAA2B,cAAc,UAAU,SAAS,EAC9D,EAAE;AACJ;AAEA,MAAa,8CACX,SACA,kBACG;CACH,MAAM,WAAW,SAAS,OAAO;CAEjC,OAAO,OAAO,IAAI,mBAAmB,eAAe,QAAQ,IAAI,eAAe,EAC7E,2BAA2B,gBAAgB,UAAU,SAAS,EAChE,EAAE;AACJ;AAEA,MAAa,kCACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SAAS,OAAO,GAChB,qBACM,OAAO,OACZ,OAAkB,eAAe,EAChC,2BAA2B,cAAc,OAAO,SAAS,EAC3D,IACA,KACF;AAEF,MAAa,6CACX,UACA,SACA,eACA,UAMA,qBACE,UACA,SAAS,OAAO,GAChB,qBACM,OAAO,OACZ,OAAsB,eAAe,EACpC,2BAA2B,gBAAgB,OAAO,SAAS,EAC7D,IACA,KACF;AAEF,MAAa,kCACX,aAMA,MAAM,OACJ,2BACA,OAAO,IAAI,WAAW,UAAU,MAAM,yBAAyB,CACjE;AAEF,MAAa,kCACX,aAMA,MAAM,OACJ,2BACA,OAAO,IAAI,WAAW,UAAU,MAAM,yBAAyB,CACjE"}
|
|
1
|
+
{"version":3,"file":"oauth-connected-target.mjs","names":[],"sources":["../../src/drizzle/oauth-connected-target.ts"],"sourcesContent":["import type { OAuthKernel } from \"@yielded/auth-persistence/Adapter\";\n\nimport { oauthKernel } from \"./oauth-kernel\";\n\nexport const makeTargetOAuthConnectedServices: OAuthKernel[\"connectedTarget\"][\"makeTargetOAuthConnectedServices\"] =\n oauthKernel.connectedTarget.makeTargetOAuthConnectedServices;\n\nexport const makeTargetOAuthConnectedRevocationServices: OAuthKernel[\"connectedTarget\"][\"makeTargetOAuthConnectedRevocationServices\"] =\n oauthKernel.connectedTarget.makeTargetOAuthConnectedRevocationServices;\n\nexport const coordinateTargetOAuthConnected: OAuthKernel[\"connectedTarget\"][\"coordinateTargetOAuthConnected\"] =\n oauthKernel.connectedTarget.coordinateTargetOAuthConnected;\n\nexport const coordinateTargetOAuthConnectedRevocations: OAuthKernel[\"connectedTarget\"][\"coordinateTargetOAuthConnectedRevocations\"] =\n oauthKernel.connectedTarget.coordinateTargetOAuthConnectedRevocations;\n\nexport const oauthConnectedPersistenceLayer: OAuthKernel[\"connectedTarget\"][\"oauthConnectedPersistenceLayer\"] =\n oauthKernel.connectedTarget.oauthConnectedPersistenceLayer;\n\nexport const oauthConnectedRevocationsLayer: OAuthKernel[\"connectedTarget\"][\"oauthConnectedRevocationsLayer\"] =\n oauthKernel.connectedTarget.oauthConnectedRevocationsLayer;\n"],"mappings":";;AAIA,MAAa,mCACX,YAAY,gBAAgB;AAE9B,MAAa,6CACX,YAAY,gBAAgB;AAE9B,MAAa,iCACX,YAAY,gBAAgB;AAE9B,MAAa,4CACX,YAAY,gBAAgB;AAE9B,MAAa,iCACX,YAAY,gBAAgB;AAE9B,MAAa,iCACX,YAAY,gBAAgB"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { drizzleQueryOperations } from "./query-operations.mjs";
|
|
2
|
+
import { makeOAuthKernel } from "@yielded/auth-persistence/Adapter";
|
|
3
|
+
import { is } from "drizzle-orm";
|
|
4
|
+
import { MySqlTable } from "drizzle-orm/mysql-core";
|
|
5
|
+
import { PgTable } from "drizzle-orm/pg-core";
|
|
6
|
+
//#region src/drizzle/oauth-kernel.ts
|
|
7
|
+
const oauthKernel = makeOAuthKernel(drizzleQueryOperations, (table) => is(table, MySqlTable) ? "mysql" : is(table, PgTable) ? "pg" : "sqlite");
|
|
8
|
+
//#endregion
|
|
9
|
+
export { oauthKernel };
|
|
10
|
+
|
|
11
|
+
//# sourceMappingURL=oauth-kernel.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"oauth-kernel.mjs","names":[],"sources":["../../src/drizzle/oauth-kernel.ts"],"sourcesContent":["import { makeOAuthKernel, type OAuthKernel } from \"@yielded/auth-persistence/Adapter\";\nimport { is } from \"drizzle-orm\";\nimport { MySqlTable } from \"drizzle-orm/mysql-core\";\nimport { PgTable } from \"drizzle-orm/pg-core\";\n\nimport { drizzleQueryOperations } from \"./query-operations\";\n\nexport const oauthKernel: OAuthKernel = makeOAuthKernel(drizzleQueryOperations, (table) =>\n is(table, MySqlTable) ? \"mysql\" : is(table, PgTable) ? \"pg\" : \"sqlite\",\n);\n"],"mappings":";;;;;;AAOA,MAAa,cAA2B,gBAAgB,yBAAyB,UAC/E,GAAG,OAAO,UAAU,IAAI,UAAU,GAAG,OAAO,OAAO,IAAI,OAAO,QAChE"}
|