@yielded/auth-persistence-drizzle 0.1.0-beta.23 → 0.1.0-beta.25

package/dist/drizzle/pg-passwords.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pg-passwords.mjs","names":["DatabaseService"],"sources":["../../src/drizzle/pg-passwords.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport { type PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type { PasswordPersistenceMapping, PasswordRegistrationMapping } from \"./password-model\";\nimport type { PasswordRegistrationAuthority } from \"./password-registration\";\nimport { CurrentPasswordSql } from \"./password-sql\";\nimport type { PasswordSqlQuery } from \"./password-sql\";\nimport {\n  coordinateTargetPasswordPersistence,\n  coordinateTargetPasswordRegistration,\n  makeTargetPasswordPersistenceServices,\n  makeTargetPasswordRegistrationServices,\n  sqlClientPasswordStandaloneGuard,\n} from \"./password-target\";\nimport { Database as DatabaseService } from \"./pg-database\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nconst configuration = (service: TransactionService | undefined) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientPasswordStandaloneGuard(service),\n  insertIfAbsent: (query: PasswordSqlQuery) => query.onConflictDoNothing(),\n  generatedSubjectRows: (query: PasswordSqlQuery) => query.returning(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(service),\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\ntype PasswordMapping<\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n> = PasswordPersistenceMapping<S, I, C, AC, A, M, NativeId>;\n\nexport const makePgPasswordPersistenceServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n>(\n  mapping: PasswordMapping<S, I, C, AC, A, M, NativeId>,\n  proofMapping?: ProofPersistenceMapping<\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any\n  >,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) => makeTargetPasswordPersistenceServices(mapping, configuration, proofMapping),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport function coordinatePgPasswordPersistence<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordMapping<S, I, C, AC, A, M, NativeId>;\n    readonly proofMapping?: PM;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPersistence<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordMapping<S, I, C, AC, A, M, NativeId>;\n    readonly proofMapping?: PM;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PasswordPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPersistence<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordMapping<S, I, C, AC, A, M, NativeId>;\n    readonly proofMapping?: PM;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetPasswordPersistence<TransactionOf<D>, Out, E, Exclude<R, PasswordPersistence>>(\n      database,\n      options.mapping,\n      configuration(transactionService(database)),\n      options.proofMapping,\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(PasswordPersistence, services.passwordPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n}\n\nexport const makePgPasswordRegistrationServices = <\n  Registration,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n>(\n  mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) => makeTargetPasswordRegistrationServices<Registration>(mapping, configuration),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport function coordinatePgPasswordRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetPasswordRegistration<\n      Registration,\n      TransactionOf<D>,\n      Out,\n      E,\n      Exclude<R, TargetId>\n    >(\n      database,\n      options.mapping,\n      configuration(transactionService(database)),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n}\n\nexport { configuration as pgPasswordConfiguration };\n"],"mappings":";;;;;;;;;;AAqCA,MAAM,iBAAiB,aAA6C;CAClE,MAAM;CACN,SAAS;CACT,iBAAiB,iCAAiC,OAAO;CACzD,iBAAiB,UAA4B,MAAM,oBAAoB;CACvE,uBAAuB,UAA4B,MAAM,UAAU;CACnE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,OAAO;EACtD,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAYA,MAAa,qCASX,SACA,iBAeA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBAAkB,sCAAsC,SAAS,eAAe,YAAY,CAC/F,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAeA,QAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AAkEF,SAAgB,gCAoBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,oCACE,UACA,QAAQ,SACR,cAAc,mBAAmB,QAAQ,CAAC,GAC1C,QAAQ,eAEN,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,qBAAqB,SAAS,mBAAmB;EAC/E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;AACF;AAEA,MAAa,sCASX,YAEA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBAAkB,uCAAqD,SAAS,aAAa,CAChG,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAeA,QAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AA8DF,SAAgB,iCAkBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,qCAOE,UACA,QAAQ,SACR,cAAc,mBAAmB,QAAQ,CAAC,IAExC,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;AACF"}
+{"version":3,"file":"pg-passwords.mjs","names":["DatabaseService"],"sources":["../../src/drizzle/pg-passwords.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport { type PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type { PasswordPersistenceMapping, PasswordRegistrationMapping } from \"./password-model\";\nimport type { PasswordRegistrationAuthority } from \"./password-registration\";\nimport { CurrentPasswordSql } from \"./password-sql\";\nimport type { PasswordSqlQuery } from \"./password-sql\";\nimport {\n  coordinateTargetPasswordPersistence,\n  coordinateTargetPasswordRegistration,\n  makeTargetPasswordPersistenceServices,\n  makeTargetPasswordRegistrationServices,\n  sqlClientPasswordStandaloneGuard,\n} from \"./password-target\";\nimport { Database as DatabaseService } from \"./pg-database\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nconst configuration = (service: TransactionService | undefined) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientPasswordStandaloneGuard(service),\n  insertIfAbsent: (query: PasswordSqlQuery) => query.onConflictDoNothing(),\n  generatedSubjectRows: (query: PasswordSqlQuery) => query.returning(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(service),\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\ntype PasswordMapping<\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n> = PasswordPersistenceMapping<S, I, C, AC, M, NativeId>;\n\nexport const makePgPasswordPersistenceServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n>(\n  mapping: PasswordMapping<S, I, C, AC, M, NativeId>,\n  proofMapping?: ProofPersistenceMapping<\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any\n  >,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) => makeTargetPasswordPersistenceServices(mapping, configuration, proofMapping),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport function coordinatePgPasswordPersistence<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping?: PM;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPersistence<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping?: PM;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PasswordPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPersistence<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping?: PM;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetPasswordPersistence<TransactionOf<D>, Out, E, Exclude<R, PasswordPersistence>>(\n      database,\n      options.mapping,\n      configuration(transactionService(database)),\n      options.proofMapping,\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(PasswordPersistence, services.passwordPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n}\n\nexport const makePgPasswordRegistrationServices = <\n  Registration,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n>(\n  mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) => makeTargetPasswordRegistrationServices<Registration>(mapping, configuration),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport function coordinatePgPasswordRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetPasswordRegistration<\n      Registration,\n      TransactionOf<D>,\n      Out,\n      E,\n      Exclude<R, TargetId>\n    >(\n      database,\n      options.mapping,\n      configuration(transactionService(database)),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n}\n\nexport { configuration as pgPasswordConfiguration };\n"],"mappings":";;;;;;;;;;AAqCA,MAAM,iBAAiB,aAA6C;CAClE,MAAM;CACN,SAAS;CACT,iBAAiB,iCAAiC,OAAO;CACzD,iBAAiB,UAA4B,MAAM,oBAAoB;CACvE,uBAAuB,UAA4B,MAAM,UAAU;CACnE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,OAAO;EACtD,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAWA,MAAa,qCAQX,SACA,iBAeA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBAAkB,sCAAsC,SAAS,eAAe,YAAY,CAC/F,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAeA,QAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AAgEF,SAAgB,gCAmBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,oCACE,UACA,QAAQ,SACR,cAAc,mBAAmB,QAAQ,CAAC,GAC1C,QAAQ,eAEN,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,qBAAqB,SAAS,mBAAmB;EAC/E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;AACF;AAEA,MAAa,sCASX,YAEA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBAAkB,uCAAqD,SAAS,aAAa,CAChG,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAeA,QAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AA8DF,SAAgB,iCAkBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,qCAOE,UACA,QAAQ,SACR,cAAc,mBAAmB,QAAQ,CAAC,IAExC,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;AACF"}

package/dist/drizzle/pg-sessions.d.mts

@@ -15,7 +15,7 @@ type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
 export declare const makePgAuthenticationAuthorityServices: <Claims, Subject extends AnyPgTable, Credential extends AnyPgTable, Flow extends AnyPgTable, Pending extends AnyPgTable, NativeSubjectId>(mapping: AuthenticationAuthorityMapping<Claims, Subject, Credential, Flow, Pending, NativeSubjectId>) => Effect.Effect<{
   authenticationAuthority: {
-    readonly capture: (subjectId: import("@yielded/auth/Schema").SubjectId, credentialIds: ReadonlyArray<string>) => Effect.Effect<import("@yielded/auth/Sessions").AuthenticationRevision, import("@yielded/auth/Sessions").StaleAuthentication | SessionUnavailable>;
+    readonly capture: (subjectId: import("@yielded/auth/Schema").SubjectId, credentialIds: ReadonlyArray<string>) => Effect.Effect<import("@yielded/auth/Sessions").AuthenticationCapture, import("@yielded/auth/Sessions").StaleAuthentication | SessionUnavailable>;
     readonly requirements: (evidence: import("@yielded/auth/Sessions").AuthenticationEvidence) => Effect.Effect<import("@yielded/auth/Sessions").AuthenticationRequirement, import("@yielded/auth/Sessions").StaleAuthentication | SessionUnavailable>;
     readonly approve: <A>(input: {
       readonly evidence: import("@yielded/auth/Sessions").AuthenticationEvidence;

package/dist/drizzle/phone-target.d.mts

@@ -1,8 +1,8 @@
 import { PersistenceMappingError as PersistenceMappingError$1 } from "./model.mjs";
 import "./transaction-owner.mjs";
-import { TransactionCoordinatorError } from "./transaction-execution.mjs";
 import "./phone-model.mjs";
 import "./SuppliedService.mjs";
+import { TransactionCoordinatorError } from "./transaction-execution.mjs";
 import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Table } from "drizzle-orm";
 import { Context, Crypto, Effect } from "effect";

package/dist/drizzle/phone-target.mjs

@@ -2,10 +2,10 @@ import { requiredProofConstraints } from "./proof-model.mjs";
 import { validateDrizzleStorage } from "./storage-validation.mjs";
 import { CurrentProofSql, completeProofPlanIn } from "./proof-sql.mjs";
 import { randomId } from "./crypto.mjs";
-import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
 import { phoneProofs, requiredPhoneConstraints } from "./phone-model.mjs";
 import { CurrentD1PlanningDatabase } from "./d1-planning.mjs";
 import { nativeDatabase } from "./native-database.mjs";
+import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
 import { compileD1ProofCompletionPlan } from "./d1-proofs.mjs";
 import { CurrentPhoneTransaction, admitPhone, capturePhone, cleanupPhoneAdmission, equal, invariant, lookupPhone, preparePhoneMutation, unavailable } from "./phone-state.mjs";
 import { NativeDatabase } from "@yielded/auth-persistence/Adapter";

package/dist/drizzle/query-operations.mjs

@@ -1,7 +1,7 @@
 import { column, updateValues } from "./model.mjs";
 import { balancedD1And, compactD1GeneratedStatement } from "./d1-generated-statement.mjs";
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { and, asc, eq, getTableColumns, gt, gte, inArray, isNull, lte, notExists, or, sql } from "drizzle-orm";
+import { and, asc, eq, getTableColumns, gt, gte, inArray, isNotNull, isNull, lte, ne, notExists, or, sql } from "drizzle-orm";
 /** The shared kernel only passes tables and expressions from this compiler.
 * Erasure stops at query shapes; row codecs and Effect errors remain explicit. */
 const drizzleQueryOperations = {
@@ -10,11 +10,13 @@ const drizzleQueryOperations = {
 	asc,
 	or,
 	eq,
+	ne,
 	gt,
 	gte,
 	lte,
 	inArray,
 	isNull,
+	isNotNull,
 	notExists,
 	sql,
 	getTableColumns,

package/dist/drizzle/query-operations.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"query-operations.mjs","names":[],"sources":["../../src/drizzle/query-operations.ts"],"sourcesContent":["import type { QueryOperations } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  type SQL,\n  type AnyColumn,\n  and,\n  asc,\n  or,\n  eq,\n  gt,\n  gte,\n  lte,\n  inArray,\n  isNull,\n  notExists,\n  sql,\n  getTableColumns,\n} from \"drizzle-orm\";\n\nimport { balancedD1And, compactD1GeneratedStatement } from \"./d1-generated-statement\";\nimport { column, updateValues } from \"./model\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nconst operations = {\n  validateStorage: validateDrizzleStorage,\n  and,\n  asc,\n  or,\n  eq,\n  gt,\n  gte,\n  lte,\n  inArray,\n  isNull,\n  notExists,\n  sql,\n  getTableColumns,\n  column,\n  updateValues,\n  balancedD1And,\n  compactD1GeneratedStatement,\n};\n\n/** The shared kernel only passes tables and expressions from this compiler.\n * Erasure stops at query shapes; row codecs and Effect errors remain explicit. */\nexport const drizzleQueryOperations = operations as unknown as QueryOperations<SQL, AnyColumn>;\n"],"mappings":";;;;;;AA4CA,MAAa,yBAAyB;CArBpC,iBAAiB;CACjB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAKoC"}
+{"version":3,"file":"query-operations.mjs","names":[],"sources":["../../src/drizzle/query-operations.ts"],"sourcesContent":["import type { QueryOperations } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  type SQL,\n  type AnyColumn,\n  and,\n  asc,\n  or,\n  eq,\n  ne,\n  gt,\n  gte,\n  lte,\n  inArray,\n  isNull,\n  isNotNull,\n  notExists,\n  sql,\n  getTableColumns,\n} from \"drizzle-orm\";\n\nimport { balancedD1And, compactD1GeneratedStatement } from \"./d1-generated-statement\";\nimport { column, updateValues } from \"./model\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nconst operations = {\n  validateStorage: validateDrizzleStorage,\n  and,\n  asc,\n  or,\n  eq,\n  ne,\n  gt,\n  gte,\n  lte,\n  inArray,\n  isNull,\n  isNotNull,\n  notExists,\n  sql,\n  getTableColumns,\n  column,\n  updateValues,\n  balancedD1And,\n  compactD1GeneratedStatement,\n};\n\n/** The shared kernel only passes tables and expressions from this compiler.\n * Erasure stops at query shapes; row codecs and Effect errors remain explicit. */\nexport const drizzleQueryOperations = operations as unknown as QueryOperations<SQL, AnyColumn>;\n"],"mappings":";;;;;;AAgDA,MAAa,yBAAyB;CAvBpC,iBAAiB;CACjB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAKoC"}

package/dist/drizzle/sqlite-password-prepared.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite-password-prepared.mjs","names":[],"sources":["../../src/drizzle/sqlite-password-prepared.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport type { PasswordUnavailable, PasswordPreparedPersistence } from \"@yielded/auth/Password\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type {\n  PasswordPreparedPersistenceMapping,\n  PasswordPreparedProofMapping,\n} from \"./password-prepared-model\";\nimport {\n  makeTargetPasswordPreparedPersistenceServices,\n  coordinateTargetPasswordPreparedPersistence,\n} from \"./password-prepared-target\";\nimport { CurrentPasswordSql } from \"./password-sql\";\nimport type { PasswordTargetConfiguration } from \"./password-target\";\nimport type { SqlitePasswordDatabase } from \"./sqlite-passwords\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype TransactionOf<D extends SqlitePasswordDatabase> = Parameters<\n  Parameters<D[\"transaction\"]>[0]\n>[0];\n\nexport const makeSqlitePasswordPreparedTarget = <\n  DatabaseId,\n  D extends SqlitePasswordDatabase,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration:\n    | PasswordTargetConfiguration\n    | ((service: TransactionService | undefined) => PasswordTargetConfiguration),\n) => {\n  const configurationFor = (database: D) =>\n    typeof configuration === \"function\"\n      ? configuration(transactionService(database))\n      : configuration;\n\n  const standaloneConfiguration =\n    typeof configuration === \"function\"\n      ? Effect.map(acquireTransactionService(databaseService), configuration)\n      : Effect.succeed(configuration);\n\n  function coordinatePasswordPreparedPersistence<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    A extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    B extends AnySQLiteTable,\n    NativeId,\n    PS extends AnySQLiteTable,\n    PC extends AnySQLiteTable,\n    PM extends AnySQLiteTable,\n    PSub extends AnySQLiteTable,\n    PI extends AnySQLiteTable,\n    PCr extends AnySQLiteTable,\n    PNativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, M, T, B, NativeId>;\n      readonly proofMapping?:\n        | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n        | undefined;\n      readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPreparedPersistence<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    A extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    B extends AnySQLiteTable,\n    NativeId,\n    PS extends AnySQLiteTable,\n    PC extends AnySQLiteTable,\n    PM extends AnySQLiteTable,\n    PSub extends AnySQLiteTable,\n    PI extends AnySQLiteTable,\n    PCr extends AnySQLiteTable,\n    PNativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, M, T, B, NativeId>;\n      readonly proofMapping?:\n        | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n        | undefined;\n      readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPreparedPersistence<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    A extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    B extends AnySQLiteTable,\n    NativeId,\n    PS extends AnySQLiteTable,\n    PC extends AnySQLiteTable,\n    PM extends AnySQLiteTable,\n    PSub extends AnySQLiteTable,\n    PI extends AnySQLiteTable,\n    PCr extends AnySQLiteTable,\n    PNativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, M, T, B, NativeId>;\n      readonly proofMapping?:\n        | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n        | undefined;\n      readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetPasswordPreparedPersistence<\n        TransactionOf<Database>,\n        Out,\n        E,\n        Exclude<R, TargetId>\n      >(\n        database,\n        options.mapping,\n        configurationFor(database),\n        options.proofMapping,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n        ) => {\n          const provided = Context.make(options.target, services.passwordPreparedPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makePasswordPreparedPersistenceServices: <\n      S extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      AC extends AnySQLiteTable,\n      A extends AnySQLiteTable,\n      M extends AnySQLiteTable,\n      T extends AnySQLiteTable,\n      B extends AnySQLiteTable,\n      NativeId,\n      PS extends AnySQLiteTable = AnySQLiteTable,\n      PC extends AnySQLiteTable = AnySQLiteTable,\n      PM extends AnySQLiteTable = AnySQLiteTable,\n      PSub extends AnySQLiteTable = AnySQLiteTable,\n      PI extends AnySQLiteTable = AnySQLiteTable,\n      PCr extends AnySQLiteTable = AnySQLiteTable,\n      PNativeId = unknown,\n    >(\n      mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, M, T, B, NativeId>,\n      proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeTargetPasswordPreparedPersistenceServices(mapping, configuration, proofMapping),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasswordPreparedPersistence,\n  };\n};\n"],"mappings":";;;;;;;AA6BA,MAAa,oCAKX,iBACA,kBAGG;CACH,MAAM,oBAAoB,aACxB,OAAO,kBAAkB,aACrB,cAAc,mBAAmB,QAAQ,CAAC,IAC1C;CAEN,MAAM,0BACJ,OAAO,kBAAkB,aACrB,OAAO,IAAI,0BAA0B,eAAe,GAAG,aAAa,IACpE,OAAO,QAAQ,aAAa;CAwFlC,SAAS,sCA2BP,SACA,SAQA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,4CAME,UACA,QAAQ,SACR,iBAAiB,QAAQ,GACzB,QAAQ,eAEN,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,2BAA2B;GAClF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,0CAkBE,SACA,iBAEA,OAAO,QAAQ,0BAA0B,kBACvC,8CAA8C,SAAS,eAAe,YAAY,CACpF,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAe,eAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}
+{"version":3,"file":"sqlite-password-prepared.mjs","names":[],"sources":["../../src/drizzle/sqlite-password-prepared.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport type { PasswordUnavailable, PasswordPreparedPersistence } from \"@yielded/auth/Password\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type {\n  PasswordPreparedPersistenceMapping,\n  PasswordPreparedProofMapping,\n} from \"./password-prepared-model\";\nimport {\n  makeTargetPasswordPreparedPersistenceServices,\n  coordinateTargetPasswordPreparedPersistence,\n} from \"./password-prepared-target\";\nimport { CurrentPasswordSql } from \"./password-sql\";\nimport type { PasswordTargetConfiguration } from \"./password-target\";\nimport type { SqlitePasswordDatabase } from \"./sqlite-passwords\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype TransactionOf<D extends SqlitePasswordDatabase> = Parameters<\n  Parameters<D[\"transaction\"]>[0]\n>[0];\n\nexport const makeSqlitePasswordPreparedTarget = <\n  DatabaseId,\n  D extends SqlitePasswordDatabase,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration:\n    | PasswordTargetConfiguration\n    | ((service: TransactionService | undefined) => PasswordTargetConfiguration),\n) => {\n  const configurationFor = (database: D) =>\n    typeof configuration === \"function\"\n      ? configuration(transactionService(database))\n      : configuration;\n\n  const standaloneConfiguration =\n    typeof configuration === \"function\"\n      ? Effect.map(acquireTransactionService(databaseService), configuration)\n      : Effect.succeed(configuration);\n\n  function coordinatePasswordPreparedPersistence<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    B extends AnySQLiteTable,\n    NativeId,\n    PS extends AnySQLiteTable,\n    PC extends AnySQLiteTable,\n    PM extends AnySQLiteTable,\n    PSub extends AnySQLiteTable,\n    PI extends AnySQLiteTable,\n    PCr extends AnySQLiteTable,\n    PNativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>;\n      readonly proofMapping?:\n        | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n        | undefined;\n      readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPreparedPersistence<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    B extends AnySQLiteTable,\n    NativeId,\n    PS extends AnySQLiteTable,\n    PC extends AnySQLiteTable,\n    PM extends AnySQLiteTable,\n    PSub extends AnySQLiteTable,\n    PI extends AnySQLiteTable,\n    PCr extends AnySQLiteTable,\n    PNativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>;\n      readonly proofMapping?:\n        | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n        | undefined;\n      readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPreparedPersistence<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    B extends AnySQLiteTable,\n    NativeId,\n    PS extends AnySQLiteTable,\n    PC extends AnySQLiteTable,\n    PM extends AnySQLiteTable,\n    PSub extends AnySQLiteTable,\n    PI extends AnySQLiteTable,\n    PCr extends AnySQLiteTable,\n    PNativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>;\n      readonly proofMapping?:\n        | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n        | undefined;\n      readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetPasswordPreparedPersistence<\n        TransactionOf<Database>,\n        Out,\n        E,\n        Exclude<R, TargetId>\n      >(\n        database,\n        options.mapping,\n        configurationFor(database),\n        options.proofMapping,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n        ) => {\n          const provided = Context.make(options.target, services.passwordPreparedPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makePasswordPreparedPersistenceServices: <\n      S extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      AC extends AnySQLiteTable,\n      M extends AnySQLiteTable,\n      T extends AnySQLiteTable,\n      B extends AnySQLiteTable,\n      NativeId,\n      PS extends AnySQLiteTable = AnySQLiteTable,\n      PC extends AnySQLiteTable = AnySQLiteTable,\n      PM extends AnySQLiteTable = AnySQLiteTable,\n      PSub extends AnySQLiteTable = AnySQLiteTable,\n      PI extends AnySQLiteTable = AnySQLiteTable,\n      PCr extends AnySQLiteTable = AnySQLiteTable,\n      PNativeId = unknown,\n    >(\n      mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>,\n      proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeTargetPasswordPreparedPersistenceServices(mapping, configuration, proofMapping),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasswordPreparedPersistence,\n  };\n};\n"],"mappings":";;;;;;;AA6BA,MAAa,oCAKX,iBACA,kBAGG;CACH,MAAM,oBAAoB,aACxB,OAAO,kBAAkB,aACrB,cAAc,mBAAmB,QAAQ,CAAC,IAC1C;CAEN,MAAM,0BACJ,OAAO,kBAAkB,aACrB,OAAO,IAAI,0BAA0B,eAAe,GAAG,aAAa,IACpE,OAAO,QAAQ,aAAa;CAsFlC,SAAS,sCA0BP,SACA,SAQA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,4CAME,UACA,QAAQ,SACR,iBAAiB,QAAQ,GACzB,QAAQ,eAEN,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,2BAA2B;GAClF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,0CAiBE,SACA,iBAEA,OAAO,QAAQ,0BAA0B,kBACvC,8CAA8C,SAAS,eAAe,YAAY,CACpF,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAe,eAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}

package/dist/drizzle/sqlite-passwords.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite-passwords.mjs","names":[],"sources":["../../src/drizzle/sqlite-passwords.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport { type PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectLibsqlDatabase } from \"drizzle-orm/effect-libsql\";\nimport type { EffectSQLiteBunDatabase } from \"drizzle-orm/effect-sqlite-bun\";\nimport type { EffectSQLiteNodeDatabase as NodeDatabase } from \"drizzle-orm/effect-sqlite-node\";\nimport type { EffectSQLiteWasmDatabase as WasmDatabase } from \"drizzle-orm/effect-sqlite-wasm\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type { PasswordPersistenceMapping, PasswordRegistrationMapping } from \"./password-model\";\nimport type { PasswordRegistrationAuthority } from \"./password-registration\";\nimport { CurrentPasswordSql } from \"./password-sql\";\nimport type { PasswordSqlQuery } from \"./password-sql\";\nimport {\n  coordinateTargetPasswordPersistence,\n  coordinateTargetPasswordRegistration,\n  makeTargetPasswordPersistenceServices,\n  makeTargetPasswordRegistrationServices,\n  type PasswordTargetConfiguration,\n} from \"./password-target\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport type { DatabaseValue as DODatabase } from \"./sqlite-do-database\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\nexport type SqlitePasswordDatabase =\n  | NodeDatabase<AnyRelations>\n  | EffectSQLiteBunDatabase<AnyRelations>\n  | EffectLibsqlDatabase<AnyRelations>\n  | WasmDatabase<AnyRelations>\n  | DODatabase<AnyRelations>;\n\ntype TransactionOf<D extends SqlitePasswordDatabase> = Parameters<\n  Parameters<D[\"transaction\"]>[0]\n>[0];\n\nexport const sqlitePasswordConfiguration = (\n  mode: \"interactive\" | \"synchronous\",\n  standaloneGuard: PasswordTargetConfiguration[\"standaloneGuard\"],\n  proofStandaloneGuard: PasswordTargetConfiguration[\"proof\"][\"standaloneGuard\"],\n  coordinatorGuard?: PasswordTargetConfiguration[\"coordinatorGuard\"],\n): PasswordTargetConfiguration => ({\n  mode,\n  locking: false,\n  standaloneGuard,\n  ...(coordinatorGuard === undefined ? {} : { coordinatorGuard }),\n  insertIfAbsent: (query: PasswordSqlQuery) => query.onConflictDoNothing(),\n  generatedSubjectRows: (query: PasswordSqlQuery) => query.returning(),\n  proof: {\n    mode,\n    locking: false,\n    standaloneGuard: proofStandaloneGuard,\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\ntype Mapping<\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  A extends AnySQLiteTable,\n  M extends AnySQLiteTable,\n  NativeId,\n> = PasswordPersistenceMapping<S, I, C, AC, A, M, NativeId>;\n\nexport const makeSqlitePasswordPersistenceServices = <\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  A extends AnySQLiteTable,\n  M extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: Mapping<S, I, C, AC, A, M, NativeId>,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: ProofPersistenceMapping<\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any\n  >,\n) => makeTargetPasswordPersistenceServices(mapping, configuration, proofMapping);\n\nexport const coordinateSqlitePasswordPersistence = <\n  D extends SqlitePasswordDatabase,\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  A extends AnySQLiteTable,\n  M extends AnySQLiteTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n>(\n  database: D,\n  mapping: Mapping<S, I, C, AC, A, M, NativeId>,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: PM,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<Out, E, R>,\n) =>\n  coordinateTargetPasswordPersistence<TransactionOf<D>, Out, E, R>(\n    database,\n    mapping,\n    configuration,\n    proofMapping,\n    owner,\n  );\n\nexport const makeSqlitePasswordRegistrationServices = <\n  Registration,\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  Rq extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  configuration: PasswordTargetConfiguration,\n) => makeTargetPasswordRegistrationServices<Registration>(mapping, configuration);\n\nexport const coordinateSqlitePasswordRegistration = <\n  Registration,\n  D extends SqlitePasswordDatabase,\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  Rq extends AnySQLiteTable,\n  NativeId,\n  Out,\n  E,\n  R,\n>(\n  database: D,\n  mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  configuration: PasswordTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n  ) => Effect.Effect<Out, E, R>,\n) =>\n  coordinateTargetPasswordRegistration<Registration, TransactionOf<D>, Out, E, R>(\n    database,\n    mapping,\n    configuration,\n    owner,\n  );\n\nexport const makeSqlitePasswordTarget = <\n  DatabaseId,\n  D extends SqlitePasswordDatabase,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration:\n    | PasswordTargetConfiguration\n    | ((service: TransactionService | undefined) => PasswordTargetConfiguration),\n) => {\n  const configurationFor = (database: D) =>\n    typeof configuration === \"function\"\n      ? configuration(transactionService(database))\n      : configuration;\n\n  const standaloneConfiguration =\n    typeof configuration === \"function\"\n      ? Effect.map(acquireTransactionService(databaseService), configuration)\n      : Effect.succeed(configuration);\n\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    A extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    NativeId,\n    PM extends\n      | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n      | undefined,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: Mapping<S, I, C, AC, A, M, NativeId>;\n      readonly proofMapping?: PM;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<PasswordPersistence> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasswordPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    A extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    NativeId,\n    PM extends\n      | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n      | undefined,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: Mapping<S, I, C, AC, A, M, NativeId>;\n      readonly proofMapping?: PM;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<PasswordPersistence | TxId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasswordPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    A extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    NativeId,\n    PM extends\n      | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n      | undefined,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: Mapping<S, I, C, AC, A, M, NativeId>;\n      readonly proofMapping?: PM;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqlitePasswordPersistence(\n        database,\n        options.mapping,\n        configurationFor(database),\n        options.proofMapping,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(PasswordPersistence, services.passwordPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinatePasswordRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    Rq extends AnySQLiteTable,\n    NativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<\n        NoInfer<Registration>,\n        S,\n        I,\n        C,\n        AC,\n        Rq,\n        NativeId\n      >;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    Rq extends AnySQLiteTable,\n    NativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<\n        NoInfer<Registration>,\n        S,\n        I,\n        C,\n        AC,\n        Rq,\n        NativeId\n      >;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    Rq extends AnySQLiteTable,\n    NativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<\n        NoInfer<Registration>,\n        S,\n        I,\n        C,\n        AC,\n        Rq,\n        NativeId\n      >;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqlitePasswordRegistration(\n        database,\n        options.mapping,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n        ) => {\n          const provided = Context.make(options.target, services.registrationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makePasswordPersistenceServices: <\n      S extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      AC extends AnySQLiteTable,\n      A extends AnySQLiteTable,\n      M extends AnySQLiteTable,\n      NativeId,\n    >(\n      mapping: Mapping<S, I, C, AC, A, M, NativeId>,\n      proofMapping?: ProofPersistenceMapping<\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any\n      >,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqlitePasswordPersistenceServices(mapping, configuration, proofMapping),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasswordPersistence,\n    makePasswordRegistrationServices: <\n      Registration,\n      S extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      AC extends AnySQLiteTable,\n      Rq extends AnySQLiteTable,\n      NativeId,\n    >(\n      mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqlitePasswordRegistrationServices(mapping, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasswordRegistration,\n  };\n};\n"],"mappings":";;;;;;;;AA8CA,MAAa,+BACX,MACA,iBACA,sBACA,sBACiC;CACjC;CACA,SAAS;CACT;CACA,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;CAC7D,iBAAiB,UAA4B,MAAM,oBAAoB;CACvE,uBAAuB,UAA4B,MAAM,UAAU;CACnE,OAAO;EACL;EACA,SAAS;EACT,iBAAiB;EACjB,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAYA,MAAa,yCASX,SACA,eACA,iBAcG,sCAAsC,SAAS,eAAe,YAAY;AAE/E,MAAa,uCAgBX,UACA,SACA,eACA,cACA,UAKA,oCACE,UACA,SACA,eACA,cACA,KACF;AAEF,MAAa,0CASX,SACA,kBACG,uCAAqD,SAAS,aAAa;AAEhF,MAAa,wCAaX,UACA,SACA,eACA,UAKA,qCACE,UACA,SACA,eACA,KACF;AAEF,MAAa,4BAKX,iBACA,kBAGG;CACH,MAAM,oBAAoB,aACxB,OAAO,kBAAkB,aACrB,cAAc,mBAAmB,QAAQ,CAAC,IAC1C;CAEN,MAAM,0BACJ,OAAO,kBAAkB,aACrB,OAAO,IAAI,0BAA0B,eAAe,GAAG,aAAa,IACpE,OAAO,QAAQ,aAAa;CAoElC,SAAS,8BAoBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,oCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,GACzB,QAAQ,eAEN,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,qBAAqB,SAAS,mBAAmB;GAC/E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA+EA,SAAS,+BAkBP,SACA,SAaA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,qCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,IAEvB,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,kCASE,SACA,iBAeA,OAAO,QAAQ,0BAA0B,kBACvC,sCAAsC,SAAS,eAAe,YAAY,CAC5E,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAe,eAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA,mCASE,YAEA,OAAO,QAAQ,0BAA0B,kBACvC,uCAAuC,SAAS,aAAa,CAC/D,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAe,eAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}
+{"version":3,"file":"sqlite-passwords.mjs","names":[],"sources":["../../src/drizzle/sqlite-passwords.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport { type PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectLibsqlDatabase } from \"drizzle-orm/effect-libsql\";\nimport type { EffectSQLiteBunDatabase } from \"drizzle-orm/effect-sqlite-bun\";\nimport type { EffectSQLiteNodeDatabase as NodeDatabase } from \"drizzle-orm/effect-sqlite-node\";\nimport type { EffectSQLiteWasmDatabase as WasmDatabase } from \"drizzle-orm/effect-sqlite-wasm\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type { PasswordPersistenceMapping, PasswordRegistrationMapping } from \"./password-model\";\nimport type { PasswordRegistrationAuthority } from \"./password-registration\";\nimport { CurrentPasswordSql } from \"./password-sql\";\nimport type { PasswordSqlQuery } from \"./password-sql\";\nimport {\n  coordinateTargetPasswordPersistence,\n  coordinateTargetPasswordRegistration,\n  makeTargetPasswordPersistenceServices,\n  makeTargetPasswordRegistrationServices,\n  type PasswordTargetConfiguration,\n} from \"./password-target\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport type { DatabaseValue as DODatabase } from \"./sqlite-do-database\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\nexport type SqlitePasswordDatabase =\n  | NodeDatabase<AnyRelations>\n  | EffectSQLiteBunDatabase<AnyRelations>\n  | EffectLibsqlDatabase<AnyRelations>\n  | WasmDatabase<AnyRelations>\n  | DODatabase<AnyRelations>;\n\ntype TransactionOf<D extends SqlitePasswordDatabase> = Parameters<\n  Parameters<D[\"transaction\"]>[0]\n>[0];\n\nexport const sqlitePasswordConfiguration = (\n  mode: \"interactive\" | \"synchronous\",\n  standaloneGuard: PasswordTargetConfiguration[\"standaloneGuard\"],\n  proofStandaloneGuard: PasswordTargetConfiguration[\"proof\"][\"standaloneGuard\"],\n  coordinatorGuard?: PasswordTargetConfiguration[\"coordinatorGuard\"],\n): PasswordTargetConfiguration => ({\n  mode,\n  locking: false,\n  standaloneGuard,\n  ...(coordinatorGuard === undefined ? {} : { coordinatorGuard }),\n  insertIfAbsent: (query: PasswordSqlQuery) => query.onConflictDoNothing(),\n  generatedSubjectRows: (query: PasswordSqlQuery) => query.returning(),\n  proof: {\n    mode,\n    locking: false,\n    standaloneGuard: proofStandaloneGuard,\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\ntype Mapping<\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  M extends AnySQLiteTable,\n  NativeId,\n> = PasswordPersistenceMapping<S, I, C, AC, M, NativeId>;\n\nexport const makeSqlitePasswordPersistenceServices = <\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  M extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: Mapping<S, I, C, AC, M, NativeId>,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: ProofPersistenceMapping<\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any,\n    any\n  >,\n) => makeTargetPasswordPersistenceServices(mapping, configuration, proofMapping);\n\nexport const coordinateSqlitePasswordPersistence = <\n  D extends SqlitePasswordDatabase,\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  M extends AnySQLiteTable,\n  NativeId,\n  PM extends\n    | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n    | undefined,\n  Out,\n  E,\n  R,\n>(\n  database: D,\n  mapping: Mapping<S, I, C, AC, M, NativeId>,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: PM,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<Out, E, R>,\n) =>\n  coordinateTargetPasswordPersistence<TransactionOf<D>, Out, E, R>(\n    database,\n    mapping,\n    configuration,\n    proofMapping,\n    owner,\n  );\n\nexport const makeSqlitePasswordRegistrationServices = <\n  Registration,\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  Rq extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  configuration: PasswordTargetConfiguration,\n) => makeTargetPasswordRegistrationServices<Registration>(mapping, configuration);\n\nexport const coordinateSqlitePasswordRegistration = <\n  Registration,\n  D extends SqlitePasswordDatabase,\n  S extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  AC extends AnySQLiteTable,\n  Rq extends AnySQLiteTable,\n  NativeId,\n  Out,\n  E,\n  R,\n>(\n  database: D,\n  mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  configuration: PasswordTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n  ) => Effect.Effect<Out, E, R>,\n) =>\n  coordinateTargetPasswordRegistration<Registration, TransactionOf<D>, Out, E, R>(\n    database,\n    mapping,\n    configuration,\n    owner,\n  );\n\nexport const makeSqlitePasswordTarget = <\n  DatabaseId,\n  D extends SqlitePasswordDatabase,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration:\n    | PasswordTargetConfiguration\n    | ((service: TransactionService | undefined) => PasswordTargetConfiguration),\n) => {\n  const configurationFor = (database: D) =>\n    typeof configuration === \"function\"\n      ? configuration(transactionService(database))\n      : configuration;\n\n  const standaloneConfiguration =\n    typeof configuration === \"function\"\n      ? Effect.map(acquireTransactionService(databaseService), configuration)\n      : Effect.succeed(configuration);\n\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    NativeId,\n    PM extends\n      | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n      | undefined,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: Mapping<S, I, C, AC, M, NativeId>;\n      readonly proofMapping?: PM;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<PasswordPersistence> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasswordPersistence>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    NativeId,\n    PM extends\n      | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n      | undefined,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: Mapping<S, I, C, AC, M, NativeId>;\n      readonly proofMapping?: PM;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<PasswordPersistence | TxId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PasswordPersistence | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    M extends AnySQLiteTable,\n    NativeId,\n    PM extends\n      | ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>\n      | undefined,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: Mapping<S, I, C, AC, M, NativeId>;\n      readonly proofMapping?: PM;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqlitePasswordPersistence(\n        database,\n        options.mapping,\n        configurationFor(database),\n        options.proofMapping,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(PasswordPersistence, services.passwordPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinatePasswordRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    Rq extends AnySQLiteTable,\n    NativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<\n        NoInfer<Registration>,\n        S,\n        I,\n        C,\n        AC,\n        Rq,\n        NativeId\n      >;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    Rq extends AnySQLiteTable,\n    NativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<\n        NoInfer<Registration>,\n        S,\n        I,\n        C,\n        AC,\n        Rq,\n        NativeId\n      >;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePasswordRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    AC extends AnySQLiteTable,\n    Rq extends AnySQLiteTable,\n    NativeId,\n    Out,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<\n        NoInfer<Registration>,\n        S,\n        I,\n        C,\n        AC,\n        Rq,\n        NativeId\n      >;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<Out, E, R>,\n  ): Effect.Effect<\n    Out,\n    E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqlitePasswordRegistration(\n        database,\n        options.mapping,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n        ) => {\n          const provided = Context.make(options.target, services.registrationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makePasswordPersistenceServices: <\n      S extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      AC extends AnySQLiteTable,\n      M extends AnySQLiteTable,\n      NativeId,\n    >(\n      mapping: Mapping<S, I, C, AC, M, NativeId>,\n      proofMapping?: ProofPersistenceMapping<\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any,\n        any\n      >,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqlitePasswordPersistenceServices(mapping, configuration, proofMapping),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasswordPersistence,\n    makePasswordRegistrationServices: <\n      Registration,\n      S extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      AC extends AnySQLiteTable,\n      Rq extends AnySQLiteTable,\n      NativeId,\n    >(\n      mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqlitePasswordRegistrationServices(mapping, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentPasswordSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePasswordRegistration,\n  };\n};\n"],"mappings":";;;;;;;;AA8CA,MAAa,+BACX,MACA,iBACA,sBACA,sBACiC;CACjC;CACA,SAAS;CACT;CACA,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;CAC7D,iBAAiB,UAA4B,MAAM,oBAAoB;CACvE,uBAAuB,UAA4B,MAAM,UAAU;CACnE,OAAO;EACL;EACA,SAAS;EACT,iBAAiB;EACjB,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAWA,MAAa,yCAQX,SACA,eACA,iBAcG,sCAAsC,SAAS,eAAe,YAAY;AAE/E,MAAa,uCAeX,UACA,SACA,eACA,cACA,UAKA,oCACE,UACA,SACA,eACA,cACA,KACF;AAEF,MAAa,0CASX,SACA,kBACG,uCAAqD,SAAS,aAAa;AAEhF,MAAa,wCAaX,UACA,SACA,eACA,UAKA,qCACE,UACA,SACA,eACA,KACF;AAEF,MAAa,4BAKX,iBACA,kBAGG;CACH,MAAM,oBAAoB,aACxB,OAAO,kBAAkB,aACrB,cAAc,mBAAmB,QAAQ,CAAC,IAC1C;CAEN,MAAM,0BACJ,OAAO,kBAAkB,aACrB,OAAO,IAAI,0BAA0B,eAAe,GAAG,aAAa,IACpE,OAAO,QAAQ,aAAa;CAkElC,SAAS,8BAmBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,oCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,GACzB,QAAQ,eAEN,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,qBAAqB,SAAS,mBAAmB;GAC/E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA+EA,SAAS,+BAkBP,SACA,SAaA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,qCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,IAEvB,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,kCAQE,SACA,iBAeA,OAAO,QAAQ,0BAA0B,kBACvC,sCAAsC,SAAS,eAAe,YAAY,CAC5E,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAe,eAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA,mCASE,YAEA,OAAO,QAAQ,0BAA0B,kBACvC,uCAAuC,SAAS,aAAa,CAC/D,CAAC,CAAC,KACA,OAAO,qBAAqB,oBAAoB,eAAe,eAAe,CAAC,GAC/E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}

package/dist/drizzle/storage-validation.mjs

@@ -1,196 +1,17 @@
-import { NativeDatabase, PersistenceMappingError, validateStorageBatch } from "@yielded/auth-persistence/Adapter";
+import { NativeDatabase, PersistenceMappingError, storageKeyPlans, validateStorageBatch } from "@yielded/auth-persistence/Adapter";
 import { Table, getTableColumns, getTableName, is } from "drizzle-orm";
-import { Effect, Predicate, Schema } from "effect";
+import { Effect } from "effect";
 import { MySqlTable, getTableConfig } from "drizzle-orm/mysql-core";
 import { PgTable, getTableConfig as getTableConfig$1 } from "drizzle-orm/pg-core";
 import { SqlClient } from "effect/sql/SqlClient";
 //#region src/drizzle/storage-validation.ts
-const uniquePlans = {
-	"unique(abuseEvent.moduleId,abuseEvent.action,abuseEvent.scopeKind,abuseEvent.scopeKey,abuseEvent.commandId)": ["abuseEvent", [
-		"moduleId",
-		"action",
-		"scopeKind",
-		"scopeKey",
-		"commandId"
-	]],
-	"unique(admission.moduleId)": ["admission", ["moduleId"]],
-	"unique(attempt.moduleId,attempt.attemptId)": ["attempt", ["moduleId", "attemptId"]],
-	"unique(authority.subjectId,authority.credentialId)": ["authority", ["subjectId", "credentialId"]],
-	"unique(authorityCredential.subjectId,authorityCredential.credentialId)": ["authorityCredential", ["subjectId", "credentialId"]],
-	"unique(command.moduleId,command.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(connectedAdmission.admissionId)": ["admission", ["admissionId"]],
-	"unique(connectedClient.clientKey)": ["client", ["clientKey"]],
-	"unique(connectedCohort.cohortKey)": ["cohort", ["cohortKey"]],
-	"unique(connectedCommand.moduleId,connectedCommand.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(connectedFlow.moduleId,connectedFlow.commandId)": ["flow", ["moduleId", "commandId"]],
-	"unique(connectedFlow.moduleId,connectedFlow.flowId)": ["flow", ["moduleId", "flowId"]],
-	"unique(connectedFlow.stateDigest)": ["flow", ["stateDigest"]],
-	"unique(connectedGrant.moduleId,connectedGrant.grantId)": ["grant", ["moduleId", "grantId"]],
-	"unique(connectedGrant.moduleId,connectedGrant.subjectId,connectedGrant.profileKey,connectedGrant.activeIdentityKey)": ["grant", [
-		"moduleId",
-		"subjectId",
-		"profileKey",
-		"activeIdentityKey"
-	]],
-	"unique(connectedRevocation.jobId)": ["job", ["jobId"]],
-	"unique(continuation.moduleId,continuation.continuationId)": ["continuation", ["moduleId", "continuationId"]],
-	"unique(continuation.moduleId,continuation.digest)": ["continuation", ["moduleId", "digest"]],
-	"unique(credential.credentialId)": ["credential", ["credentialId"]],
-	"unique(credential.identityKey)": ["credential", ["identityKey"]],
-	"unique(credential.moduleId,credential.credentialId)": ["credential", ["moduleId", "credentialId"]],
-	"unique(credential.moduleId,credential.subjectId)": ["credential", ["moduleId", "subjectId"]],
-	"unique(emailCommand.moduleId,emailCommand.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(emailCredential.moduleId,emailCredential.credentialId)": ["credential", ["moduleId", "credentialId"]],
-	"unique(emailCredential.moduleId,emailCredential.identifierNamespace,emailCredential.identifierValue)": ["credential", [
-		"moduleId",
-		"identifierNamespace",
-		"identifierValue"
-	]],
-	"unique(emailRegistration.moduleId,emailRegistration.commandId)": ["registration", ["moduleId", "commandId"]],
-	"unique(emailRegistration.pendingReference)": ["registration", ["pendingReference"]],
-	"unique(failureEvent.moduleId,failureEvent.seriesKey,failureEvent.commandId)": ["failureEvent", [
-		"moduleId",
-		"seriesKey",
-		"commandId"
-	]],
-	"unique(flow.flowId)": ["flow", ["flowId"]],
-	"unique(flow.moduleId,flow.commandId)": ["flow", ["moduleId", "commandId"]],
-	"unique(flow.moduleId,flow.flowId)": ["flow", ["moduleId", "flowId"]],
-	"unique(flow.stateDigest)": ["flow", ["stateDigest"]],
-	"unique(generation.moduleId,generation.deliveryId)": ["generation", ["moduleId", "deliveryId"]],
-	"unique(generation.moduleId,generation.proofId)": ["generation", ["moduleId", "proofId"]],
-	"unique(identifier.namespace,identifier.value)": ["identifier", ["namespace", "value"]],
-	"unique(intent.digest)": ["intent", ["digest"]],
-	"unique(intent.flowId)": ["intent", ["flowId"]],
-	"unique(intent.moduleId,intent.commandId)": ["intent", ["moduleId", "commandId"]],
-	"unique(intent.moduleId,intent.flowId)": ["intent", ["moduleId", "flowId"]],
-	"unique(intent.moduleId,intent.intentId)": ["intent", ["moduleId", "intentId"]],
-	"unique(intent.moduleId,intent.reference)": ["intent", ["moduleId", "reference"]],
-	"unique(ownership.identityKey)": ["ownership", ["identityKey"]],
-	"unique(pending.digest)": ["pending", ["digest"]],
-	"unique(pending.flowId)": ["pending", ["flowId"]],
-	"unique(rateScope.moduleId,rateScope.purpose,rateScope.action,rateScope.scopeKind,rateScope.scopeKey)": ["rateScope", [
-		"moduleId",
-		"purpose",
-		"action",
-		"scopeKind",
-		"scopeKey"
-	]],
-	"unique(registration.moduleId,registration.requestId)": ["registration", ["moduleId", "requestId"]],
-	"unique(registration.recoveryReference)": ["registration", ["recoveryReference"]],
-	"unique(registrationCommand.moduleId,registrationCommand.commandId)": ["command", ["moduleId", "commandId"]],
-	"unique(request.moduleId,request.requestId)": ["request", ["moduleId", "requestId"]],
-	"unique(series.moduleId,series.purpose,series.scopeKey)": ["series", [
-		"moduleId",
-		"purpose",
-		"scopeKey"
-	]],
-	"unique(session.digest)": ["session", ["digest"]],
-	"unique(tombstone.subjectId,tombstone.sessionId)": ["tombstone", ["subjectId", "sessionId"]],
-	"unique(tuple.identityKey)": ["ownership.tuple", ["identityKey"]],
-	"unique(unlinkCommand.moduleId,unlinkCommand.commandId)": ["command", ["moduleId", "commandId"]]
-};
-const arrayRoles = {
-	credentialId: "credential",
-	factor: "authority",
-	credentialOwnership: "credentialOwnership",
-	handleOwnership: "handleOwnership",
-	boundSubjectHandle: "handleOwnership",
-	flow: "flow",
-	command: "flow",
-	admission: "admission",
-	charge: "charge",
-	intentFlow: "intent",
-	intentCommand: "intent",
-	handle: "handle"
-};
-const nestedMappings = [
-	"read",
-	"signIn",
-	"password",
-	"proof",
-	"proofs",
-	"revocation",
-	"pending",
-	"session",
-	"source"
-];
-const constraintGroups = [
-	"constraints",
-	"tupleConstraints",
-	"registrationConstraints",
-	"managementConstraints"
-];
-const MappingRecord = Schema.Record(Schema.String, Schema.Unknown);
-const record = Schema.decodeUnknownSync(MappingRecord);
-const plans = (mapping) => {
-	const result = [];
-	for (const group of constraintGroups) {
-		if (mapping[group] === void 0) continue;
-		for (const [name, declaration] of Object.entries(record(mapping[group]))) {
-			if (declaration === "notNull(provisioningRequest.subjectId)") continue;
-			let role;
-			let keys;
-			if (typeof declaration === "string") {
-				const plan = uniquePlans[declaration];
-				if (plan !== void 0) [role, keys] = plan;
-				else if (declaration === "unique(id)") {
-					role = "subject";
-					keys = ["id"];
-				} else if (declaration === "unique(scope)") {
-					role = name;
-					keys = ["scope"];
-				} else if (declaration === "unique(credentialId)") {
-					role = "credential";
-					keys = ["id"];
-				} else if (declaration === "unique(namespace,value)") {
-					role = "identifier";
-					keys = ["namespace", "value"];
-				} else if (declaration === "unique(provider,issuer,subject)") {
-					role = "externalIdentity";
-					keys = [
-						"provider",
-						"issuer",
-						"subject"
-					];
-				} else if (declaration === "unique(requestId)") {
-					role = "provisioningRequest";
-					keys = ["requestId"];
-				} else throw new Error("Unknown storage constraint");
-			} else if (Array.isArray(declaration) && declaration.every(Predicate.isString)) {
-				const mappedRole = group === "managementConstraints" && name === "command" ? "command" : arrayRoles[name];
-				if (mappedRole === void 0) throw new Error("Unknown storage constraint");
-				role = mappedRole;
-				keys = declaration;
-			} else throw new Error("Invalid storage constraint");
-			let target = mapping;
-			for (const segment of role.split(".")) target = record(target)[segment];
-			if (target === void 0 && Schema.is(MappingRecord)(mapping.pending)) target = mapping.pending[role];
-			let mapped = record(target);
-			if (role === "pending" && mapped.table === void 0) mapped = record(mapped.pending);
-			if (role === "ownership" && mapped.table === void 0) mapped = record(mapped.external ?? mapped.tuple);
-			if (!is(mapped.table, Table)) throw new Error("Missing storage table");
-			const columns = getTableColumns(mapped.table);
-			result.push({
-				table: mapped.table,
-				keys: keys.map((key) => {
-					const value = mapped[key];
-					if (typeof value !== "string" || columns[value] === void 0) throw new Error("Missing mapped key");
-					return value;
-				})
-			});
-		}
-	}
-	for (const nested of nestedMappings) {
-		const value = mapping[nested];
-		if (Schema.is(MappingRecord)(value) && value.table === void 0) result.push(...plans(value));
-	}
-	return result;
-};
 /** Validate at acquisition using the root database supplied by the adapter. */
 const validateDrizzleStorage = Effect.fnUntraced(function* (mapping) {
 	const physical = yield* Effect.try({
-		try: () => plans(record(mapping)),
+		try: () => storageKeyPlans(mapping, (table) => {
+			if (!is(table, Table)) throw new Error("Missing storage table");
+			return getTableColumns(table);
+		}),
 		catch: () => PersistenceMappingError.make({
 			operation: "mapping",
 			cause: "Invalid storage key mapping"
@@ -199,6 +20,10 @@ const validateDrizzleStorage = Effect.fnUntraced(function* (mapping) {
 	const { $client: client } = yield* NativeDatabase;
 	const batches = /* @__PURE__ */ new Map();
 	for (const plan of physical) {
+		if (!is(plan.table, Table)) return yield* PersistenceMappingError.make({
+			operation: "mapping",
+			cause: "Missing storage table"
+		});
 		const pg = is(plan.table, PgTable);
 		const mysql = is(plan.table, MySqlTable);
 		const schema = pg ? getTableConfig$1(plan.table).schema : mysql ? getTableConfig(plan.table).schema : void 0;

package/dist/drizzle/storage-validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storage-validation.mjs","names":["getPgTableConfig","getMysqlTableConfig"],"sources":["../../src/drizzle/storage-validation.ts"],"sourcesContent":["import {\n  NativeDatabase,\n  PersistenceMappingError,\n  validateStorageBatch,\n  type StorageValidation,\n} from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns, getTableName, is, Table } from \"drizzle-orm\";\nimport { getTableConfig as getMysqlTableConfig, MySqlTable } from \"drizzle-orm/mysql-core\";\nimport { getTableConfig as getPgTableConfig, PgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Predicate, Schema } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\n\n// These are mapping contracts, not a parser for arbitrary constraint declarations.\n// Role aliases are explicit because their documentation names differ from mapping fields.\nconst uniquePlans: Readonly<Record<string, readonly [string, ReadonlyArray<string>]>> = {\n  \"unique(abuseEvent.moduleId,abuseEvent.action,abuseEvent.scopeKind,abuseEvent.scopeKey,abuseEvent.commandId)\":\n    [\"abuseEvent\", [\"moduleId\", \"action\", \"scopeKind\", \"scopeKey\", \"commandId\"]],\n  \"unique(admission.moduleId)\": [\"admission\", [\"moduleId\"]],\n  \"unique(attempt.moduleId,attempt.attemptId)\": [\"attempt\", [\"moduleId\", \"attemptId\"]],\n  \"unique(authority.subjectId,authority.credentialId)\": [\n    \"authority\",\n    [\"subjectId\", \"credentialId\"],\n  ],\n  \"unique(authorityCredential.subjectId,authorityCredential.credentialId)\": [\n    \"authorityCredential\",\n    [\"subjectId\", \"credentialId\"],\n  ],\n  \"unique(command.moduleId,command.commandId)\": [\"command\", [\"moduleId\", \"commandId\"]],\n  \"unique(connectedAdmission.admissionId)\": [\"admission\", [\"admissionId\"]],\n  \"unique(connectedClient.clientKey)\": [\"client\", [\"clientKey\"]],\n  \"unique(connectedCohort.cohortKey)\": [\"cohort\", [\"cohortKey\"]],\n  \"unique(connectedCommand.moduleId,connectedCommand.commandId)\": [\n    \"command\",\n    [\"moduleId\", \"commandId\"],\n  ],\n  \"unique(connectedFlow.moduleId,connectedFlow.commandId)\": [\"flow\", [\"moduleId\", \"commandId\"]],\n  \"unique(connectedFlow.moduleId,connectedFlow.flowId)\": [\"flow\", [\"moduleId\", \"flowId\"]],\n  \"unique(connectedFlow.stateDigest)\": [\"flow\", [\"stateDigest\"]],\n  \"unique(connectedGrant.moduleId,connectedGrant.grantId)\": [\"grant\", [\"moduleId\", \"grantId\"]],\n  \"unique(connectedGrant.moduleId,connectedGrant.subjectId,connectedGrant.profileKey,connectedGrant.activeIdentityKey)\":\n    [\"grant\", [\"moduleId\", \"subjectId\", \"profileKey\", \"activeIdentityKey\"]],\n  \"unique(connectedRevocation.jobId)\": [\"job\", [\"jobId\"]],\n  \"unique(continuation.moduleId,continuation.continuationId)\": [\n    \"continuation\",\n    [\"moduleId\", \"continuationId\"],\n  ],\n  \"unique(continuation.moduleId,continuation.digest)\": [\"continuation\", [\"moduleId\", \"digest\"]],\n  \"unique(credential.credentialId)\": [\"credential\", [\"credentialId\"]],\n  \"unique(credential.identityKey)\": [\"credential\", [\"identityKey\"]],\n  \"unique(credential.moduleId,credential.credentialId)\": [\n    \"credential\",\n    [\"moduleId\", \"credentialId\"],\n  ],\n  \"unique(credential.moduleId,credential.subjectId)\": [\"credential\", [\"moduleId\", \"subjectId\"]],\n  \"unique(emailCommand.moduleId,emailCommand.commandId)\": [\"command\", [\"moduleId\", \"commandId\"]],\n  \"unique(emailCredential.moduleId,emailCredential.credentialId)\": [\n    \"credential\",\n    [\"moduleId\", \"credentialId\"],\n  ],\n  \"unique(emailCredential.moduleId,emailCredential.identifierNamespace,emailCredential.identifierValue)\":\n    [\"credential\", [\"moduleId\", \"identifierNamespace\", \"identifierValue\"]],\n  \"unique(emailRegistration.moduleId,emailRegistration.commandId)\": [\n    \"registration\",\n    [\"moduleId\", \"commandId\"],\n  ],\n  \"unique(emailRegistration.pendingReference)\": [\"registration\", [\"pendingReference\"]],\n  \"unique(failureEvent.moduleId,failureEvent.seriesKey,failureEvent.commandId)\": [\n    \"failureEvent\",\n    [\"moduleId\", \"seriesKey\", \"commandId\"],\n  ],\n  \"unique(flow.flowId)\": [\"flow\", [\"flowId\"]],\n  \"unique(flow.moduleId,flow.commandId)\": [\"flow\", [\"moduleId\", \"commandId\"]],\n  \"unique(flow.moduleId,flow.flowId)\": [\"flow\", [\"moduleId\", \"flowId\"]],\n  \"unique(flow.stateDigest)\": [\"flow\", [\"stateDigest\"]],\n  \"unique(generation.moduleId,generation.deliveryId)\": [\"generation\", [\"moduleId\", \"deliveryId\"]],\n  \"unique(generation.moduleId,generation.proofId)\": [\"generation\", [\"moduleId\", \"proofId\"]],\n  \"unique(identifier.namespace,identifier.value)\": [\"identifier\", [\"namespace\", \"value\"]],\n  \"unique(intent.digest)\": [\"intent\", [\"digest\"]],\n  \"unique(intent.flowId)\": [\"intent\", [\"flowId\"]],\n  \"unique(intent.moduleId,intent.commandId)\": [\"intent\", [\"moduleId\", \"commandId\"]],\n  \"unique(intent.moduleId,intent.flowId)\": [\"intent\", [\"moduleId\", \"flowId\"]],\n  \"unique(intent.moduleId,intent.intentId)\": [\"intent\", [\"moduleId\", \"intentId\"]],\n  \"unique(intent.moduleId,intent.reference)\": [\"intent\", [\"moduleId\", \"reference\"]],\n  \"unique(ownership.identityKey)\": [\"ownership\", [\"identityKey\"]],\n  \"unique(pending.digest)\": [\"pending\", [\"digest\"]],\n  \"unique(pending.flowId)\": [\"pending\", [\"flowId\"]],\n  \"unique(rateScope.moduleId,rateScope.purpose,rateScope.action,rateScope.scopeKind,rateScope.scopeKey)\":\n    [\"rateScope\", [\"moduleId\", \"purpose\", \"action\", \"scopeKind\", \"scopeKey\"]],\n  \"unique(registration.moduleId,registration.requestId)\": [\n    \"registration\",\n    [\"moduleId\", \"requestId\"],\n  ],\n  \"unique(registration.recoveryReference)\": [\"registration\", [\"recoveryReference\"]],\n  \"unique(registrationCommand.moduleId,registrationCommand.commandId)\": [\n    \"command\",\n    [\"moduleId\", \"commandId\"],\n  ],\n  \"unique(request.moduleId,request.requestId)\": [\"request\", [\"moduleId\", \"requestId\"]],\n  \"unique(series.moduleId,series.purpose,series.scopeKey)\": [\n    \"series\",\n    [\"moduleId\", \"purpose\", \"scopeKey\"],\n  ],\n  \"unique(session.digest)\": [\"session\", [\"digest\"]],\n  \"unique(tombstone.subjectId,tombstone.sessionId)\": [\"tombstone\", [\"subjectId\", \"sessionId\"]],\n  \"unique(tuple.identityKey)\": [\"ownership.tuple\", [\"identityKey\"]],\n  \"unique(unlinkCommand.moduleId,unlinkCommand.commandId)\": [\"command\", [\"moduleId\", \"commandId\"]],\n};\n\nconst arrayRoles: Readonly<Record<string, string>> = {\n  credentialId: \"credential\",\n  factor: \"authority\",\n  credentialOwnership: \"credentialOwnership\",\n  handleOwnership: \"handleOwnership\",\n  boundSubjectHandle: \"handleOwnership\",\n  flow: \"flow\",\n  command: \"flow\",\n  admission: \"admission\",\n  charge: \"charge\",\n  intentFlow: \"intent\",\n  intentCommand: \"intent\",\n  handle: \"handle\",\n};\n\nconst nestedMappings = [\n  \"read\",\n  \"signIn\",\n  \"password\",\n  \"proof\",\n  \"proofs\",\n  \"revocation\",\n  \"pending\",\n  \"session\",\n  \"source\",\n];\n\nconst constraintGroups = [\n  \"constraints\",\n  \"tupleConstraints\",\n  \"registrationConstraints\",\n  \"managementConstraints\",\n];\n\nconst MappingRecord = Schema.Record(Schema.String, Schema.Unknown);\nconst record = Schema.decodeUnknownSync(MappingRecord);\n\nconst plans = (mapping: Readonly<Record<string, unknown>>) => {\n  const result: Array<{ readonly table: Table; readonly keys: ReadonlyArray<string> }> = [];\n\n  for (const group of constraintGroups) {\n    if (mapping[group] === undefined) continue;\n    for (const [name, declaration] of Object.entries(record(mapping[group]))) {\n      if (declaration === \"notNull(provisioningRequest.subjectId)\") continue;\n      let role: string;\n      let keys: ReadonlyArray<string>;\n\n      if (typeof declaration === \"string\") {\n        const plan = uniquePlans[declaration];\n\n        if (plan !== undefined) [role, keys] = plan;\n        else if (declaration === \"unique(id)\") {\n          role = \"subject\";\n          keys = [\"id\"];\n        } else if (declaration === \"unique(scope)\") {\n          role = name;\n          keys = [\"scope\"];\n        } else if (declaration === \"unique(credentialId)\") {\n          role = \"credential\";\n          keys = [\"id\"];\n        } else if (declaration === \"unique(namespace,value)\") {\n          role = \"identifier\";\n          keys = [\"namespace\", \"value\"];\n        } else if (declaration === \"unique(provider,issuer,subject)\") {\n          role = \"externalIdentity\";\n          keys = [\"provider\", \"issuer\", \"subject\"];\n        } else if (declaration === \"unique(requestId)\") {\n          role = \"provisioningRequest\";\n          keys = [\"requestId\"];\n        } else throw new Error(\"Unknown storage constraint\");\n      } else if (Array.isArray(declaration) && declaration.every(Predicate.isString)) {\n        const mappedRole =\n          group === \"managementConstraints\" && name === \"command\" ? \"command\" : arrayRoles[name];\n\n        if (mappedRole === undefined) throw new Error(\"Unknown storage constraint\");\n        role = mappedRole;\n        keys = declaration;\n      } else throw new Error(\"Invalid storage constraint\");\n\n      let target: unknown = mapping;\n\n      for (const segment of role.split(\".\")) target = record(target)[segment];\n      // Session authority places its pending tables in one nested mapping.\n      if (target === undefined && Schema.is(MappingRecord)(mapping.pending))\n        target = mapping.pending[role];\n      let mapped = record(target);\n\n      if (role === \"pending\" && mapped.table === undefined) mapped = record(mapped.pending);\n      // OAuth ownership can be integrated into its tuple authority or separate.\n      if (role === \"ownership\" && mapped.table === undefined)\n        mapped = record(mapped.external ?? mapped.tuple);\n      if (!is(mapped.table, Table)) throw new Error(\"Missing storage table\");\n      const columns = getTableColumns(mapped.table);\n\n      result.push({\n        table: mapped.table,\n        keys: keys.map((key) => {\n          const value = mapped[key];\n\n          if (typeof value !== \"string\" || columns[value] === undefined)\n            throw new Error(\"Missing mapped key\");\n\n          return value;\n        }),\n      });\n    }\n  }\n  for (const nested of nestedMappings) {\n    const value = mapping[nested];\n\n    if (Schema.is(MappingRecord)(value) && value.table === undefined) result.push(...plans(value));\n  }\n\n  return result;\n};\n\n/** Validate at acquisition using the root database supplied by the adapter. */\nexport const validateDrizzleStorage = Effect.fnUntraced(\n  function* (mapping: unknown) {\n    const physical = yield* Effect.try({\n      try: () => plans(record(mapping)),\n      catch: () =>\n        PersistenceMappingError.make({\n          operation: \"mapping\",\n          cause: \"Invalid storage key mapping\",\n        }),\n    });\n\n    const { $client: client } = yield* NativeDatabase;\n\n    const batches = new Map<\"pg\" | \"mysql\" | \"sqlite\", StorageValidation[]>();\n\n    for (const plan of physical) {\n      const pg = is(plan.table, PgTable);\n      const mysql = is(plan.table, MySqlTable);\n\n      const schema = pg\n        ? getPgTableConfig(plan.table).schema\n        : mysql\n          ? getMysqlTableConfig(plan.table).schema\n          : undefined;\n\n      const columns = getTableColumns(plan.table);\n\n      const dialect = pg ? \"pg\" : mysql ? \"mysql\" : \"sqlite\";\n      const batch = batches.get(dialect) ?? [];\n\n      batch.push({\n        table: {\n          name: getTableName(plan.table),\n          ...(schema === undefined ? {} : { schema }),\n          columns: Object.fromEntries(plan.keys.map((key) => [key, { name: columns[key]!.name }])),\n        },\n        required: [plan.keys],\n      });\n      batches.set(dialect, batch);\n    }\n    for (const [dialect, requirements] of batches) {\n      yield* validateStorageBatch(dialect, requirements).pipe(\n        Effect.provideService(SqlClient, client),\n        Effect.mapError(() =>\n          PersistenceMappingError.make({\n            operation: \"mapping\",\n            cause: \"Required SQL storage key is unavailable\",\n          }),\n        ),\n      );\n    }\n  },\n  Effect.catchDefect(() =>\n    Effect.fail(\n      PersistenceMappingError.make({\n        operation: \"mapping\",\n        cause: \"Cannot inspect SQL storage metadata\",\n      }),\n    ),\n  ),\n);\n"],"mappings":";;;;;;;AAcA,MAAM,cAAkF;CACtF,+GACE,CAAC,cAAc;EAAC;EAAY;EAAU;EAAa;EAAY;CAAW,CAAC;CAC7E,8BAA8B,CAAC,aAAa,CAAC,UAAU,CAAC;CACxD,8CAA8C,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CACnF,sDAAsD,CACpD,aACA,CAAC,aAAa,cAAc,CAC9B;CACA,0EAA0E,CACxE,uBACA,CAAC,aAAa,cAAc,CAC9B;CACA,8CAA8C,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CACnF,0CAA0C,CAAC,aAAa,CAAC,aAAa,CAAC;CACvE,qCAAqC,CAAC,UAAU,CAAC,WAAW,CAAC;CAC7D,qCAAqC,CAAC,UAAU,CAAC,WAAW,CAAC;CAC7D,gEAAgE,CAC9D,WACA,CAAC,YAAY,WAAW,CAC1B;CACA,0DAA0D,CAAC,QAAQ,CAAC,YAAY,WAAW,CAAC;CAC5F,uDAAuD,CAAC,QAAQ,CAAC,YAAY,QAAQ,CAAC;CACtF,qCAAqC,CAAC,QAAQ,CAAC,aAAa,CAAC;CAC7D,0DAA0D,CAAC,SAAS,CAAC,YAAY,SAAS,CAAC;CAC3F,uHACE,CAAC,SAAS;EAAC;EAAY;EAAa;EAAc;CAAmB,CAAC;CACxE,qCAAqC,CAAC,OAAO,CAAC,OAAO,CAAC;CACtD,6DAA6D,CAC3D,gBACA,CAAC,YAAY,gBAAgB,CAC/B;CACA,qDAAqD,CAAC,gBAAgB,CAAC,YAAY,QAAQ,CAAC;CAC5F,mCAAmC,CAAC,cAAc,CAAC,cAAc,CAAC;CAClE,kCAAkC,CAAC,cAAc,CAAC,aAAa,CAAC;CAChE,uDAAuD,CACrD,cACA,CAAC,YAAY,cAAc,CAC7B;CACA,oDAAoD,CAAC,cAAc,CAAC,YAAY,WAAW,CAAC;CAC5F,wDAAwD,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CAC7F,iEAAiE,CAC/D,cACA,CAAC,YAAY,cAAc,CAC7B;CACA,wGACE,CAAC,cAAc;EAAC;EAAY;EAAuB;CAAiB,CAAC;CACvE,kEAAkE,CAChE,gBACA,CAAC,YAAY,WAAW,CAC1B;CACA,8CAA8C,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;CACnF,+EAA+E,CAC7E,gBACA;EAAC;EAAY;EAAa;CAAW,CACvC;CACA,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC;CAC1C,wCAAwC,CAAC,QAAQ,CAAC,YAAY,WAAW,CAAC;CAC1E,qCAAqC,CAAC,QAAQ,CAAC,YAAY,QAAQ,CAAC;CACpE,4BAA4B,CAAC,QAAQ,CAAC,aAAa,CAAC;CACpD,qDAAqD,CAAC,cAAc,CAAC,YAAY,YAAY,CAAC;CAC9F,kDAAkD,CAAC,cAAc,CAAC,YAAY,SAAS,CAAC;CACxF,iDAAiD,CAAC,cAAc,CAAC,aAAa,OAAO,CAAC;CACtF,yBAAyB,CAAC,UAAU,CAAC,QAAQ,CAAC;CAC9C,yBAAyB,CAAC,UAAU,CAAC,QAAQ,CAAC;CAC9C,4CAA4C,CAAC,UAAU,CAAC,YAAY,WAAW,CAAC;CAChF,yCAAyC,CAAC,UAAU,CAAC,YAAY,QAAQ,CAAC;CAC1E,2CAA2C,CAAC,UAAU,CAAC,YAAY,UAAU,CAAC;CAC9E,4CAA4C,CAAC,UAAU,CAAC,YAAY,WAAW,CAAC;CAChF,iCAAiC,CAAC,aAAa,CAAC,aAAa,CAAC;CAC9D,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC;CAChD,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC;CAChD,wGACE,CAAC,aAAa;EAAC;EAAY;EAAW;EAAU;EAAa;CAAU,CAAC;CAC1E,wDAAwD,CACtD,gBACA,CAAC,YAAY,WAAW,CAC1B;CACA,0CAA0C,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;CAChF,sEAAsE,CACpE,WACA,CAAC,YAAY,WAAW,CAC1B;CACA,8CAA8C,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;CACnF,0DAA0D,CACxD,UACA;EAAC;EAAY;EAAW;CAAU,CACpC;CACA,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC;CAChD,mDAAmD,CAAC,aAAa,CAAC,aAAa,WAAW,CAAC;CAC3F,6BAA6B,CAAC,mBAAmB,CAAC,aAAa,CAAC;CAChE,0DAA0D,CAAC,WAAW,CAAC,YAAY,WAAW,CAAC;AACjG;AAEA,MAAM,aAA+C;CACnD,cAAc;CACd,QAAQ;CACR,qBAAqB;CACrB,iBAAiB;CACjB,oBAAoB;CACpB,MAAM;CACN,SAAS;CACT,WAAW;CACX,QAAQ;CACR,YAAY;CACZ,eAAe;CACf,QAAQ;AACV;AAEA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;AACF;AAEA,MAAM,gBAAgB,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AACjE,MAAM,SAAS,OAAO,kBAAkB,aAAa;AAErD,MAAM,SAAS,YAA+C;CAC5D,MAAM,SAAiF,CAAC;CAExF,KAAK,MAAM,SAAS,kBAAkB;EACpC,IAAI,QAAQ,WAAW,KAAA,GAAW;EAClC,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAAO,QAAQ,OAAO,QAAQ,MAAM,CAAC,GAAG;GACxE,IAAI,gBAAgB,0CAA0C;GAC9D,IAAI;GACJ,IAAI;GAEJ,IAAI,OAAO,gBAAgB,UAAU;IACnC,MAAM,OAAO,YAAY;IAEzB,IAAI,SAAS,KAAA,GAAW,CAAC,MAAM,QAAQ;SAClC,IAAI,gBAAgB,cAAc;KACrC,OAAO;KACP,OAAO,CAAC,IAAI;IACd,OAAO,IAAI,gBAAgB,iBAAiB;KAC1C,OAAO;KACP,OAAO,CAAC,OAAO;IACjB,OAAO,IAAI,gBAAgB,wBAAwB;KACjD,OAAO;KACP,OAAO,CAAC,IAAI;IACd,OAAO,IAAI,gBAAgB,2BAA2B;KACpD,OAAO;KACP,OAAO,CAAC,aAAa,OAAO;IAC9B,OAAO,IAAI,gBAAgB,mCAAmC;KAC5D,OAAO;KACP,OAAO;MAAC;MAAY;MAAU;KAAS;IACzC,OAAO,IAAI,gBAAgB,qBAAqB;KAC9C,OAAO;KACP,OAAO,CAAC,WAAW;IACrB,OAAO,MAAM,IAAI,MAAM,4BAA4B;GACrD,OAAO,IAAI,MAAM,QAAQ,WAAW,KAAK,YAAY,MAAM,UAAU,QAAQ,GAAG;IAC9E,MAAM,aACJ,UAAU,2BAA2B,SAAS,YAAY,YAAY,WAAW;IAEnF,IAAI,eAAe,KAAA,GAAW,MAAM,IAAI,MAAM,4BAA4B;IAC1E,OAAO;IACP,OAAO;GACT,OAAO,MAAM,IAAI,MAAM,4BAA4B;GAEnD,IAAI,SAAkB;GAEtB,KAAK,MAAM,WAAW,KAAK,MAAM,GAAG,GAAG,SAAS,OAAO,MAAM,CAAC,CAAC;GAE/D,IAAI,WAAW,KAAA,KAAa,OAAO,GAAG,aAAa,CAAC,CAAC,QAAQ,OAAO,GAClE,SAAS,QAAQ,QAAQ;GAC3B,IAAI,SAAS,OAAO,MAAM;GAE1B,IAAI,SAAS,aAAa,OAAO,UAAU,KAAA,GAAW,SAAS,OAAO,OAAO,OAAO;GAEpF,IAAI,SAAS,eAAe,OAAO,UAAU,KAAA,GAC3C,SAAS,OAAO,OAAO,YAAY,OAAO,KAAK;GACjD,IAAI,CAAC,GAAG,OAAO,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACrE,MAAM,UAAU,gBAAgB,OAAO,KAAK;GAE5C,OAAO,KAAK;IACV,OAAO,OAAO;IACd,MAAM,KAAK,KAAK,QAAQ;KACtB,MAAM,QAAQ,OAAO;KAErB,IAAI,OAAO,UAAU,YAAY,QAAQ,WAAW,KAAA,GAClD,MAAM,IAAI,MAAM,oBAAoB;KAEtC,OAAO;IACT,CAAC;GACH,CAAC;EACH;CACF;CACA,KAAK,MAAM,UAAU,gBAAgB;EACnC,MAAM,QAAQ,QAAQ;EAEtB,IAAI,OAAO,GAAG,aAAa,CAAC,CAAC,KAAK,KAAK,MAAM,UAAU,KAAA,GAAW,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;CAC/F;CAEA,OAAO;AACT;;AAGA,MAAa,yBAAyB,OAAO,WAC3C,WAAW,SAAkB;CAC3B,MAAM,WAAW,OAAO,OAAO,IAAI;EACjC,WAAW,MAAM,OAAO,OAAO,CAAC;EAChC,aACE,wBAAwB,KAAK;GAC3B,WAAW;GACX,OAAO;EACT,CAAC;CACL,CAAC;CAED,MAAM,EAAE,SAAS,WAAW,OAAO;CAEnC,MAAM,0BAAU,IAAI,IAAoD;CAExE,KAAK,MAAM,QAAQ,UAAU;EAC3B,MAAM,KAAK,GAAG,KAAK,OAAO,OAAO;EACjC,MAAM,QAAQ,GAAG,KAAK,OAAO,UAAU;EAEvC,MAAM,SAAS,KACXA,iBAAiB,KAAK,KAAK,CAAC,CAAC,SAC7B,QACEC,eAAoB,KAAK,KAAK,CAAC,CAAC,SAChC,KAAA;EAEN,MAAM,UAAU,gBAAgB,KAAK,KAAK;EAE1C,MAAM,UAAU,KAAK,OAAO,QAAQ,UAAU;EAC9C,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK,CAAC;EAEvC,MAAM,KAAK;GACT,OAAO;IACL,MAAM,aAAa,KAAK,KAAK;IAC7B,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;IACzC,SAAS,OAAO,YAAY,KAAK,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,MAAM,QAAQ,IAAI,CAAE,KAAK,CAAC,CAAC,CAAC;GACzF;GACA,UAAU,CAAC,KAAK,IAAI;EACtB,CAAC;EACD,QAAQ,IAAI,SAAS,KAAK;CAC5B;CACA,KAAK,MAAM,CAAC,SAAS,iBAAiB,SACpC,OAAO,qBAAqB,SAAS,YAAY,CAAC,CAAC,KACjD,OAAO,eAAe,WAAW,MAAM,GACvC,OAAO,eACL,wBAAwB,KAAK;EAC3B,WAAW;EACX,OAAO;CACT,CAAC,CACH,CACF;AAEJ,GACA,OAAO,kBACL,OAAO,KACL,wBAAwB,KAAK;CAC3B,WAAW;CACX,OAAO;AACT,CAAC,CACH,CACF,CACF"}
+{"version":3,"file":"storage-validation.mjs","names":["getPgTableConfig","getMysqlTableConfig"],"sources":["../../src/drizzle/storage-validation.ts"],"sourcesContent":["import {\n  NativeDatabase,\n  PersistenceMappingError,\n  validateStorageBatch,\n  type StorageValidation,\n  storageKeyPlans,\n} from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns, getTableName, is, Table } from \"drizzle-orm\";\nimport { getTableConfig as getMysqlTableConfig, MySqlTable } from \"drizzle-orm/mysql-core\";\nimport { getTableConfig as getPgTableConfig, PgTable } from \"drizzle-orm/pg-core\";\nimport { Effect } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\n\n/** Validate at acquisition using the root database supplied by the adapter. */\nexport const validateDrizzleStorage = Effect.fnUntraced(\n  function* (mapping: unknown) {\n    const physical = yield* Effect.try({\n      try: () =>\n        storageKeyPlans(mapping, (table) => {\n          if (!is(table, Table)) throw new Error(\"Missing storage table\");\n\n          return getTableColumns(table);\n        }),\n      catch: () =>\n        PersistenceMappingError.make({\n          operation: \"mapping\",\n          cause: \"Invalid storage key mapping\",\n        }),\n    });\n\n    const { $client: client } = yield* NativeDatabase;\n\n    const batches = new Map<\"pg\" | \"mysql\" | \"sqlite\", StorageValidation[]>();\n\n    for (const plan of physical) {\n      if (!is(plan.table, Table))\n        return yield* PersistenceMappingError.make({\n          operation: \"mapping\",\n          cause: \"Missing storage table\",\n        });\n      const pg = is(plan.table, PgTable);\n      const mysql = is(plan.table, MySqlTable);\n\n      const schema = pg\n        ? getPgTableConfig(plan.table).schema\n        : mysql\n          ? getMysqlTableConfig(plan.table).schema\n          : undefined;\n\n      const columns = getTableColumns(plan.table);\n\n      const dialect = pg ? \"pg\" : mysql ? \"mysql\" : \"sqlite\";\n      const batch = batches.get(dialect) ?? [];\n\n      batch.push({\n        table: {\n          name: getTableName(plan.table),\n          ...(schema === undefined ? {} : { schema }),\n          columns: Object.fromEntries(plan.keys.map((key) => [key, { name: columns[key]!.name }])),\n        },\n        required: [plan.keys],\n      });\n      batches.set(dialect, batch);\n    }\n    for (const [dialect, requirements] of batches) {\n      yield* validateStorageBatch(dialect, requirements).pipe(\n        Effect.provideService(SqlClient, client),\n        Effect.mapError(() =>\n          PersistenceMappingError.make({\n            operation: \"mapping\",\n            cause: \"Required SQL storage key is unavailable\",\n          }),\n        ),\n      );\n    }\n  },\n  Effect.catchDefect(() =>\n    Effect.fail(\n      PersistenceMappingError.make({\n        operation: \"mapping\",\n        cause: \"Cannot inspect SQL storage metadata\",\n      }),\n    ),\n  ),\n);\n"],"mappings":";;;;;;;;AAcA,MAAa,yBAAyB,OAAO,WAC3C,WAAW,SAAkB;CAC3B,MAAM,WAAW,OAAO,OAAO,IAAI;EACjC,WACE,gBAAgB,UAAU,UAAU;GAClC,IAAI,CAAC,GAAG,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,uBAAuB;GAE9D,OAAO,gBAAgB,KAAK;EAC9B,CAAC;EACH,aACE,wBAAwB,KAAK;GAC3B,WAAW;GACX,OAAO;EACT,CAAC;CACL,CAAC;CAED,MAAM,EAAE,SAAS,WAAW,OAAO;CAEnC,MAAM,0BAAU,IAAI,IAAoD;CAExE,KAAK,MAAM,QAAQ,UAAU;EAC3B,IAAI,CAAC,GAAG,KAAK,OAAO,KAAK,GACvB,OAAO,OAAO,wBAAwB,KAAK;GACzC,WAAW;GACX,OAAO;EACT,CAAC;EACH,MAAM,KAAK,GAAG,KAAK,OAAO,OAAO;EACjC,MAAM,QAAQ,GAAG,KAAK,OAAO,UAAU;EAEvC,MAAM,SAAS,KACXA,iBAAiB,KAAK,KAAK,CAAC,CAAC,SAC7B,QACEC,eAAoB,KAAK,KAAK,CAAC,CAAC,SAChC,KAAA;EAEN,MAAM,UAAU,gBAAgB,KAAK,KAAK;EAE1C,MAAM,UAAU,KAAK,OAAO,QAAQ,UAAU;EAC9C,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK,CAAC;EAEvC,MAAM,KAAK;GACT,OAAO;IACL,MAAM,aAAa,KAAK,KAAK;IAC7B,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;IACzC,SAAS,OAAO,YAAY,KAAK,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,MAAM,QAAQ,IAAI,CAAE,KAAK,CAAC,CAAC,CAAC;GACzF;GACA,UAAU,CAAC,KAAK,IAAI;EACtB,CAAC;EACD,QAAQ,IAAI,SAAS,KAAK;CAC5B;CACA,KAAK,MAAM,CAAC,SAAS,iBAAiB,SACpC,OAAO,qBAAqB,SAAS,YAAY,CAAC,CAAC,KACjD,OAAO,eAAe,WAAW,MAAM,GACvC,OAAO,eACL,wBAAwB,KAAK;EAC3B,WAAW;EACX,OAAO;CACT,CAAC,CACH,CACF;AAEJ,GACA,OAAO,kBACL,OAAO,KACL,wBAAwB,KAAK;CAC3B,WAAW;CACX,OAAO;AACT,CAAC,CACH,CACF,CACF"}

package/dist/drizzle/totp-target.d.mts

@@ -1,8 +1,8 @@
 import { PersistenceMappingError as PersistenceMappingError$1 } from "./model.mjs";
-import "./transaction-owner.mjs";
-import { TransactionCoordinatorError } from "./transaction-execution.mjs";
 import "./totp-model.mjs";
+import "./transaction-owner.mjs";
 import "./SuppliedService.mjs";
+import { TransactionCoordinatorError } from "./transaction-execution.mjs";
 import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Table } from "drizzle-orm";
 import { Context, Crypto, Effect } from "effect";

package/dist/drizzle/totp-target.mjs

@@ -1,9 +1,9 @@
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { randomId } from "./crypto.mjs";
-import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
 import { requiredTotpConstraints } from "./totp-model.mjs";
+import { randomId } from "./crypto.mjs";
 import { CurrentTotpTransaction, captureTotp, invariant, mutateTotp, unavailable } from "./totp-state.mjs";
 import { nativeDatabase } from "./native-database.mjs";
+import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
 import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect, Schema } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";

package/dist/drizzle/transaction-execution.d.mts

@@ -1,2 +1,2 @@
-import { TransactionCoordinatorError, TransactionTargetConfiguration } from "@yielded/auth-persistence/Adapter";
-export type { TransactionCoordinatorError, TransactionTargetConfiguration };
+import { TransactionCoordinatorError } from "@yielded/auth-persistence/Adapter";
+export type { TransactionCoordinatorError };

package/dist/drizzle/transaction-owner.d.mts

@@ -1,2 +1 @@
-import { Row, TransactionOwner } from "@yielded/auth-persistence/Adapter";
-export type { Row, TransactionOwner };
+import "@yielded/auth-persistence/Adapter";