@yielded/auth-persistence-drizzle 0.1.0-beta.24 → 0.1.0-beta.26

package/dist/drizzle/oauth-connected-drivers.mjs

@@ -1,12 +1,8 @@
-import { coordinateTargetOAuthConnected, coordinateTargetOAuthConnectedRevocations, makeTargetOAuthConnectedRevocationServices, makeTargetOAuthConnectedServices } from "./oauth-connected-target.mjs";
-import { D1BatchStatements } from "./D1BatchStatements.mjs";
-import { makeD1Owner } from "./d1-planning.mjs";
-import { nativeDatabase } from "./native-database.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
+import { NativeDatabase, nativeDatabase } from "./native-database.mjs";
+import { coordinateTargetOAuthConnected, coordinateTargetOAuthConnectedRevocations, makeTargetOAuthConnectedRevocationServices, makeTargetOAuthConnectedServices } from "./oauth-target.mjs";
 import { Context, Effect } from "effect";
-import { OAuthConnectedPersistence, OAuthConnectedRevocations, OAuthUnavailable } from "@yielded/auth/OAuth";
+import { OAuthConnectedPersistence, OAuthConnectedRevocations } from "@yielded/auth/OAuth";
 //#region src/drizzle/oauth-connected-drivers.ts
-const unavailable = () => OAuthUnavailable.make({});
 const makeOAuthConnectedTarget = (databaseService, configuration) => {
 	function coordinateOAuthConnected(acquire, options, body) {
 		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetOAuthConnected(database, options.mapping, configuration, (transaction, services) => {
@@ -29,55 +25,7 @@ const makeOAuthConnectedTarget = (databaseService, configuration) => {
 		coordinateOAuthConnectedRevocations
 	};
 };
-const makeD1OAuthConnectedTarget = (databaseService, configuration) => {
-	function coordinateOAuthConnected(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetOAuthConnected(database, options.mapping, configuration, (_tx, services, append) => Effect.gen(function* () {
-			const original = services.oauthConnectedPersistence;
-			const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
-			const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
-			const provided = Context.make(OAuthConnectedPersistence, {
-				claimSignIn: (input, prepare) => owner.run(original.claimSignIn(input, prepare)),
-				inspectSignIn: (input) => owner.run(original.inspectSignIn(input)),
-				settleSignIn: (input, prepare) => owner.run(original.settleSignIn(input, prepare)),
-				capture: (input) => owner.run(original.capture(input)),
-				issue: (input, prepare) => owner.run(original.issue(input, prepare)),
-				prepare: (input, prepare) => owner.run(original.prepare(input, prepare)),
-				inspectPrepared: (input) => owner.run(original.inspectPrepared(input)),
-				preflight: (input) => owner.run(original.preflight(input)),
-				claim: (input, prepare) => owner.run(original.claim(input, prepare)),
-				inspectGrant: (input) => owner.run(original.inspectGrant(input)),
-				settle: (input, prepare) => owner.run(original.settle(input, prepare)),
-				list: (input) => owner.run(original.list(input)),
-				inspectDisconnect: (input) => owner.run(original.inspectDisconnect(input)),
-				disconnect: (input, prepare) => owner.run(original.disconnect(input, prepare)),
-				inspectAccess: (input) => owner.run(original.inspectAccess(input)),
-				claimRefresh: (input, prepare) => owner.run(original.claimRefresh(input, prepare)),
-				settleRefresh: (input, prepare) => owner.run(original.settleRefresh(input, prepare)),
-				admitUse: (input, prepare) => owner.run(original.admitUse(input, prepare)),
-				cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
-			}).pipe(Context.add(D1BatchStatements, owner.collector));
-			return yield* owner.close(Effect.provideContext(body, provided));
-		})).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	function coordinateOAuthConnectedRevocations(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetOAuthConnectedRevocations(database, options.mapping, configuration, (_tx, services, append) => Effect.gen(function* () {
-			const original = services.oauthConnectedRevocations;
-			const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
-			const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
-			const provided = Context.make(OAuthConnectedRevocations, {
-				claim: (input, prepare) => owner.run(original.claim(input, prepare)),
-				settle: (input, prepare) => owner.run(original.settle(input, prepare))
-			}).pipe(Context.add(D1BatchStatements, owner.collector));
-			return yield* owner.close(Effect.provideContext(body, provided));
-		})).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	return {
-		...makeOAuthConnectedTarget(databaseService, configuration),
-		coordinateOAuthConnected,
-		coordinateOAuthConnectedRevocations
-	};
-};
 //#endregion
-export { makeD1OAuthConnectedTarget, makeOAuthConnectedTarget };
+export { makeOAuthConnectedTarget };
 
 //# sourceMappingURL=oauth-connected-drivers.mjs.map

package/dist/drizzle/oauth-connected-drivers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-connected-drivers.mjs","names":[],"sources":["../../src/drizzle/oauth-connected-drivers.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthConnectedPersistence,\n  OAuthConnectedRevocations,\n  OAuthUnavailable,\n} from \"@yielded/auth/OAuth\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Crypto, Effect, Context } from \"effect\";\n\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport { nativeDatabase } from \"./native-database\";\nimport type {\n  OAuthConnectedMapping,\n  OAuthConnectedRevocationMapping,\n} from \"./oauth-connected-model\";\nimport {\n  coordinateTargetOAuthConnected,\n  coordinateTargetOAuthConnectedRevocations,\n  makeTargetOAuthConnectedServices,\n  makeTargetOAuthConnectedRevocationServices,\n} from \"./oauth-connected-target\";\nimport { type OAuthCoordinatorError, type OAuthTargetConfiguration } from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n// oxlint-disable-next-line no-explicit-any -- inspect the actual installed native transaction callback without erasing it.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\nconst unavailable = () => OAuthUnavailable.make({});\n\nexport const makeOAuthConnectedTarget = <\n  DatabaseId,\n  Database,\n  Family extends Table,\n  Extra = {},\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, Database>,\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthConnected<\n    D extends Database,\n    S extends Family,\n    AC extends Family,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    UA extends Family,\n    DC extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthConnectedPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthConnectedPersistence>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnected<\n    D extends Database,\n    S extends Family,\n    AC extends Family,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    UA extends Family,\n    DC extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J> & Extra;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthConnectedPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthConnectedPersistence | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnected<\n    D extends Database,\n    S extends Family,\n    AC extends Family,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    UA extends Family,\n    DC extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthConnectedPersistence> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthConnected<TransactionOf<D>, A, E, Exclude<R, OAuthConnectedPersistence>>(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<D>,\n          services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthConnectedPersistence,\n            services.oauthConnectedPersistence,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthConnectedRevocations<\n    D extends Database,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthConnectedRevocations> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthConnectedRevocations>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnectedRevocations<\n    D extends Database,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N> & Extra;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthConnectedRevocations | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthConnectedRevocations | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnectedRevocations<\n    D extends Database,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthConnectedRevocations> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthConnectedRevocations<\n        TransactionOf<D>,\n        A,\n        E,\n        Exclude<R, OAuthConnectedRevocations>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<D>,\n          services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthConnectedRevocations,\n            services.oauthConnectedRevocations,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makeOAuthConnectedServices: <\n      S extends Family,\n      AC extends Family,\n      T extends Family,\n      O extends Family,\n      F extends Family,\n      G extends Family,\n      C extends Family,\n      H extends Family,\n      UA extends Family,\n      DC extends Family,\n      N,\n      J extends Family = never,\n    >(\n      mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J> & Extra,\n    ) =>\n      makeTargetOAuthConnectedServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthConnectedRevocationServices: <\n      T extends Family,\n      O extends Family,\n      F extends Family,\n      G extends Family,\n      C extends Family,\n      H extends Family,\n      J extends Family,\n      N,\n    >(\n      mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N> & Extra,\n    ) =>\n      makeTargetOAuthConnectedRevocationServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateOAuthConnected,\n    coordinateOAuthConnectedRevocations,\n  };\n};\n\nexport const makeD1OAuthConnectedTarget = <DatabaseId, Database, Family extends Table, Extra>(\n  databaseService: Context.Service<DatabaseId, Database>,\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthConnected<\n    S extends Family,\n    AC extends Family,\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    UA extends Family,\n    DC extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J> & Extra;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthConnectedPersistence | D1BatchStatements>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthConnected<\n        Database,\n        A,\n        E | OAuthUnavailable,\n        Exclude<R, OAuthConnectedPersistence | D1BatchStatements>\n      >(database, options.mapping, configuration, (_tx, services, append) =>\n        Effect.gen(function* () {\n          const original = services.oauthConnectedPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(unavailable()).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: OAuthConnectedPersistence[\"Service\"] = {\n            claimSignIn: (input, prepare) => owner.run(original.claimSignIn(input, prepare)),\n            inspectSignIn: (input) => owner.run(original.inspectSignIn(input)),\n            settleSignIn: (input, prepare) => owner.run(original.settleSignIn(input, prepare)),\n            capture: (input) => owner.run(original.capture(input)),\n            issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n            prepare: (input, prepare) => owner.run(original.prepare(input, prepare)),\n            inspectPrepared: (input) => owner.run(original.inspectPrepared(input)),\n            preflight: (input) => owner.run(original.preflight(input)),\n            claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n            inspectGrant: (input) => owner.run(original.inspectGrant(input)),\n            settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n            list: (input) => owner.run(original.list(input)),\n            inspectDisconnect: (input) => owner.run(original.inspectDisconnect(input)),\n            disconnect: (input, prepare) => owner.run(original.disconnect(input, prepare)),\n            inspectAccess: (input) => owner.run(original.inspectAccess(input)),\n            claimRefresh: (input, prepare) => owner.run(original.claimRefresh(input, prepare)),\n            settleRefresh: (input, prepare) => owner.run(original.settleRefresh(input, prepare)),\n            admitUse: (input, prepare) => owner.run(original.admitUse(input, prepare)),\n            cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n          };\n\n          const provided = Context.make(OAuthConnectedPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthConnectedRevocations<\n    T extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    C extends Family,\n    H extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: { readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N> & Extra },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthConnectedRevocations | D1BatchStatements>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthConnectedRevocations<\n        Database,\n        A,\n        E | OAuthUnavailable,\n        Exclude<R, OAuthConnectedRevocations | D1BatchStatements>\n      >(database, options.mapping, configuration, (_tx, services, append) =>\n        Effect.gen(function* () {\n          const original = services.oauthConnectedRevocations;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(unavailable()).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: OAuthConnectedRevocations[\"Service\"] = {\n            claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n            settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n          };\n\n          const provided = Context.make(OAuthConnectedRevocations, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    ...makeOAuthConnectedTarget<DatabaseId, Database, Family, Extra>(\n      databaseService,\n      configuration,\n    ),\n    coordinateOAuthConnected,\n    coordinateOAuthConnectedRevocations,\n  };\n};\n"],"mappings":";;;;;;;;AA6BA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAa,4BAOX,iBACA,kBACG;CA2EH,SAAS,yBAsBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,+BACE,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,2BACA,SAAS,yBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAmEA,SAAS,oCAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,0CAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,2BACA,SAAS,yBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,6BAcE,YAEA,iCAAiC,SAAS,aAAa,CAAC,CAAC,KACvD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,uCAUE,YAEA,2CAA2C,SAAS,aAAa,CAAC,CAAC,KACjE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA;CACF;AACF;AAEA,MAAa,8BACX,iBACA,kBACG;CACH,SAAS,yBAmBP,SACA,SAGA,MAQA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,+BAKE,UAAU,QAAQ,SAAS,gBAAgB,KAAK,UAAU,WAC1D,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,SAAS;GAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;GAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;GAwBA,MAAM,WAAW,QAAQ,KAAK,2BAA2B;IArBvD,cAAc,OAAO,YAAY,MAAM,IAAI,SAAS,YAAY,OAAO,OAAO,CAAC;IAC/E,gBAAgB,UAAU,MAAM,IAAI,SAAS,cAAc,KAAK,CAAC;IACjE,eAAe,OAAO,YAAY,MAAM,IAAI,SAAS,aAAa,OAAO,OAAO,CAAC;IACjF,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;IACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;IACnE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;IACvE,kBAAkB,UAAU,MAAM,IAAI,SAAS,gBAAgB,KAAK,CAAC;IACrE,YAAY,UAAU,MAAM,IAAI,SAAS,UAAU,KAAK,CAAC;IACzD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;IACnE,eAAe,UAAU,MAAM,IAAI,SAAS,aAAa,KAAK,CAAC;IAC/D,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;IACrE,OAAO,UAAU,MAAM,IAAI,SAAS,KAAK,KAAK,CAAC;IAC/C,oBAAoB,UAAU,MAAM,IAAI,SAAS,kBAAkB,KAAK,CAAC;IACzE,aAAa,OAAO,YAAY,MAAM,IAAI,SAAS,WAAW,OAAO,OAAO,CAAC;IAC7E,gBAAgB,UAAU,MAAM,IAAI,SAAS,cAAc,KAAK,CAAC;IACjE,eAAe,OAAO,YAAY,MAAM,IAAI,SAAS,aAAa,OAAO,OAAO,CAAC;IACjF,gBAAgB,OAAO,YAAY,MAAM,IAAI,SAAS,cAAc,OAAO,OAAO,CAAC;IACnF,WAAW,OAAO,YAAY,MAAM,IAAI,SAAS,SAAS,OAAO,OAAO,CAAC;IACzE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;GAGV,CAAC,CAAC,CAAC,KAChE,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;GAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;EACjE,CAAC,CACH,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CACA,SAAS,oCAeP,SACA,SACA,MAQA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,0CAKE,UAAU,QAAQ,SAAS,gBAAgB,KAAK,UAAU,WAC1D,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,SAAS;GAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;GAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;GAOA,MAAM,WAAW,QAAQ,KAAK,2BAA2B;IAJvD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;IACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GAGR,CAAC,CAAC,CAAC,KAChE,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;GAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;EACjE,CAAC,CACH,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,GAAG,yBACD,iBACA,aACF;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"oauth-connected-drivers.mjs","names":[],"sources":["../../src/drizzle/oauth-connected-drivers.ts"],"sourcesContent":["import type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { OAuthConnectedPersistence, OAuthConnectedRevocations } from \"@yielded/auth/OAuth\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Crypto, Effect, Context } from \"effect\";\n\nimport type { D1BatchStatements } from \"./D1BatchStatements\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport type {\n  OAuthConnectedMapping,\n  OAuthConnectedRevocationMapping,\n} from \"./oauth-connected-model\";\nimport {\n  coordinateTargetOAuthConnected,\n  coordinateTargetOAuthConnectedRevocations,\n  makeTargetOAuthConnectedServices,\n  makeTargetOAuthConnectedRevocationServices,\n  type OAuthCoordinatorError,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n// oxlint-disable-next-line no-explicit-any -- inspect the actual installed native transaction callback without erasing it.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\nexport const makeOAuthConnectedTarget = <\n  DatabaseId,\n  Database,\n  Family extends Table,\n  Extra = {},\n  Provided extends D1BatchStatements = never,\n>(\n  databaseService: Context.Service<DatabaseId, Database>,\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthConnected<\n    D extends Database,\n    S extends Family,\n    AC extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthConnectedPersistence | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnected<\n    D extends Database,\n    S extends Family,\n    AC extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J> & Extra;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthConnectedPersistence | TxId | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnected<\n    D extends Database,\n    S extends Family,\n    AC extends Family,\n    O extends Family,\n    F extends Family,\n    G extends Family,\n    N,\n    J extends Family,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthConnectedPersistence> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthConnected<TransactionOf<D>, A, E, Exclude<R, OAuthConnectedPersistence>>(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<D>,\n          services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthConnectedPersistence,\n            services.oauthConnectedPersistence,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthConnectedRevocations<\n    D extends Database,\n    O extends Family,\n    F extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedRevocationMapping<O, F, J, N> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthConnectedRevocations | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnectedRevocations<\n    D extends Database,\n    O extends Family,\n    F extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedRevocationMapping<O, F, J, N> & Extra;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthConnectedRevocations | TxId | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthConnectedRevocations<\n    D extends Database,\n    O extends Family,\n    F extends Family,\n    J extends Family,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthConnectedRevocationMapping<O, F, J, N> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthConnectedRevocations> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthConnectedRevocations<\n        TransactionOf<D>,\n        A,\n        E,\n        Exclude<R, OAuthConnectedRevocations>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<D>,\n          services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthConnectedRevocations,\n            services.oauthConnectedRevocations,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makeOAuthConnectedServices: <\n      S extends Family,\n      AC extends Family,\n      O extends Family,\n      F extends Family,\n      G extends Family,\n      N,\n      J extends Family = never,\n    >(\n      mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J> & Extra,\n    ) =>\n      makeTargetOAuthConnectedServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthConnectedRevocationServices: <O extends Family, F extends Family, J extends Family, N>(\n      mapping: OAuthConnectedRevocationMapping<O, F, J, N> & Extra,\n    ) =>\n      makeTargetOAuthConnectedRevocationServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateOAuthConnected,\n    coordinateOAuthConnectedRevocations,\n  };\n};\n"],"mappings":";;;;;AAyBA,MAAa,4BAOX,iBACA,kBACG;CA6DH,SAAS,yBAiBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,+BACE,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,2BACA,SAAS,yBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAuDA,SAAS,oCAcP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,0CAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,2BACA,SAAS,yBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,6BASE,YAEA,iCAAiC,SAAS,aAAa,CAAC,CAAC,KACvD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,uCACE,YAEA,2CAA2C,SAAS,aAAa,CAAC,CAAC,KACjE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA;CACF;AACF"}

package/dist/drizzle/oauth-connected-model.d.mts

@@ -1,30 +1,13 @@
 import { DrizzleTableModel } from "./table-model.mjs";
 import * as Shared from "@yielded/auth-persistence/Adapter";
-import { OAuthConnectedAction, OAuthConnectedOrderCodec, OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "@yielded/auth-persistence/Adapter";
+import { OAuthConnectedAction, OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "@yielded/auth-persistence/Adapter";
 import { SQL, Table } from "drizzle-orm";
 //#region src/drizzle/oauth-connected-model.d.ts
-export type OAuthConnectedSubjectTable<S extends Table> = Shared.OAuthConnectedSubjectTable<DrizzleTableModel<S>, SQL>;
-export type OAuthConnectedFlowTable<F extends Table, N> = Shared.OAuthConnectedFlowTable<DrizzleTableModel<F>, N>;
 export type OAuthConnectedGrantTable<G extends Table, N> = Shared.OAuthConnectedGrantTable<DrizzleTableModel<G>, N>;
-/** Also stores a permanent provider/issuer scope anchor. clientKey must fit 52
- * ASCII characters. Empty clientRegistrationId is reserved for that anchor;
- * actual profile registrations are nonempty. Scope counter stays zero. */
-export type OAuthConnectedClientRegistrationTable<C extends Table> = Shared.OAuthConnectedClientRegistrationTable<DrizzleTableModel<C>>;
-/** Remote authority: no local-subject column or subject-scoped key. Retain this
- * anchor/cutoff when a legitimately released tuple gains a different local owner. */
-export type OAuthConnectedCohortTable<C extends Table> = Shared.OAuthConnectedCohortTable<DrizzleTableModel<C>>;
-export type OAuthConnectedAdmissionTable<A extends Table, N> = Shared.OAuthConnectedAdmissionTable<DrizzleTableModel<A>, N>;
-export type OAuthConnectedCommandTable<C extends Table, N> = Shared.OAuthConnectedCommandTable<DrizzleTableModel<C>, N>;
 export type OAuthConnectedRevocationJobTable<J extends Table, N> = Shared.OAuthConnectedRevocationJobTable<DrizzleTableModel<J>, N>;
-export type OAuthConnectedPolicyGuardTable<T extends Table, N> = Shared.OAuthConnectedPolicyGuardTable<DrizzleTableModel<T>, N, SQL>;
-export type OAuthConnectedPolicyGuard<N> = Shared.OAuthConnectedPolicyGuard<N, SQL, Table>;
-export declare const oauthConnectedPolicyGuard: <T extends Table, N>(input: OAuthConnectedPolicyGuardTable<T, N>) => OAuthConnectedPolicyGuard<N>;
-export type OAuthConnectedSqlPolicy<N> = Shared.OAuthConnectedSqlPolicy<N, SQL, Table>;
-/** Existing ownership only; workers never allocate or acquire a tuple. */
-export type OAuthConnectedOwnershipRead<T extends Table, O extends Table, N> = Shared.OAuthConnectedOwnershipRead<DrizzleTableModel<T>, DrizzleTableModel<O>, N, SQL>;
-export type OAuthConnectedAuthorityMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, N> = Shared.OAuthConnectedAuthorityMapping<DrizzleTableModel<T>, DrizzleTableModel<O>, DrizzleTableModel<F>, DrizzleTableModel<G>, DrizzleTableModel<C>, DrizzleTableModel<H>, N, SQL>;
-export type OAuthConnectedMapping<S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table = never> = Shared.OAuthConnectedMapping<DrizzleTableModel<S>, DrizzleTableModel<AC>, DrizzleTableModel<T>, DrizzleTableModel<O>, DrizzleTableModel<F>, DrizzleTableModel<G>, DrizzleTableModel<C>, DrizzleTableModel<H>, DrizzleTableModel<A>, DrizzleTableModel<D>, N, DrizzleTableModel<J>, SQL, Table, DrizzleTableModel<Table>>;
-export type OAuthConnectedRevocationMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, J extends Table, N> = Shared.OAuthConnectedRevocationMapping<DrizzleTableModel<T>, DrizzleTableModel<O>, DrizzleTableModel<F>, DrizzleTableModel<G>, DrizzleTableModel<C>, DrizzleTableModel<H>, DrizzleTableModel<J>, N, SQL>;
+export type OAuthConnectedSqlPolicy<N> = Shared.OAuthConnectedSqlPolicy<N, SQL>;
+export type OAuthConnectedMapping<S extends Table, AC extends Table, O extends Table, F extends Table, G extends Table, N, J extends Table = Table> = Shared.OAuthConnectedMapping<DrizzleTableModel<S>, DrizzleTableModel<AC>, DrizzleTableModel<O>, DrizzleTableModel<F>, DrizzleTableModel<G>, N, DrizzleTableModel<J>, SQL, DrizzleTableModel<Table>>;
+export type OAuthConnectedRevocationMapping<O extends Table, G extends Table, J extends Table, N> = Shared.OAuthConnectedRevocationMapping<DrizzleTableModel<O>, DrizzleTableModel<G>, DrizzleTableModel<J>, N, SQL>;
 //#endregion
-export { type OAuthConnectedAction, type OAuthConnectedOrderCodec, type OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };
+export { type OAuthConnectedAction, type OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };
 //# sourceMappingURL=oauth-connected-model.d.mts.map

package/dist/drizzle/oauth-connected-model.mjs

@@ -1,8 +1,2 @@
-import * as Shared from "@yielded/auth-persistence/Adapter";
 import { requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "@yielded/auth-persistence/Adapter";
-//#region src/drizzle/oauth-connected-model.ts
-const oauthConnectedPolicyGuard = (input) => Shared.oauthConnectedPolicyGuard(input);
-//#endregion
-export { oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };
-
-//# sourceMappingURL=oauth-connected-model.mjs.map
+export { requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };

package/dist/drizzle/oauth-connected-reference.d.mts

@@ -1,14 +1,12 @@
-import { OAuthReferenceGuardDescriptor } from "./oauth-model.mjs";
 import { OAuthConnectedMapping } from "./oauth-connected-model.mjs";
-import { SQL, Table } from "drizzle-orm";
+import { Table } from "drizzle-orm";
 //#region src/drizzle/oauth-connected-reference.d.ts
-/** Compose login unlink with retained-grant ownership under this compiler. */
-export declare const oauthConnectedOwnershipReferences: <S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table>(original: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, A, D, N, J>) => {
-  readonly connectedReferenceGuards: ReadonlyArray<OAuthReferenceGuardDescriptor<N>>;
-  readonly connectedReference: (input: {
+/** Concrete grant/job references retain ownership after unlink. */
+export declare const oauthConnectedOwnershipReferences: <S extends Table, AC extends Table, O extends Table, F extends Table, G extends Table, N, J extends Table>(mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J>) => {
+  connectedReference: (input: {
     readonly identityKey: string;
     readonly subjectId: N;
-  }) => SQL;
+  }) => import("drizzle-orm").SQL<unknown>;
 };
 //#endregion
 //# sourceMappingURL=oauth-connected-reference.d.mts.map

package/dist/drizzle/oauth-connected-reference.mjs

@@ -1,7 +1,15 @@
-import { oauthKernel } from "./oauth-kernel.mjs";
+import { getTableColumns, sql } from "drizzle-orm";
 //#region src/drizzle/oauth-connected-reference.ts
-/** Compose login unlink with retained-grant ownership under this compiler. */
-const oauthConnectedOwnershipReferences = (original) => oauthKernel.connectedReference.oauthConnectedOwnershipReferences(original);
+/** Concrete grant/job references retain ownership after unlink. */
+const oauthConnectedOwnershipReferences = (mapping) => ({ connectedReference: (input) => {
+	const g = mapping.grant;
+	const columns = getTableColumns(g.table);
+	const grant = sql`exists(select 1 from ${g.table} where ${columns[g.identityKey]} = ${input.identityKey} and ${columns[g.subjectId]} = ${input.subjectId})`;
+	if (mapping.revocation.mode === "unsupported") return grant;
+	const j = mapping.revocation.job;
+	const jobs = getTableColumns(j.table);
+	return sql`(${grant}) or exists(select 1 from ${j.table} where ${jobs[j.identityKey]} = ${input.identityKey} and ${jobs[j.subjectId]} = ${input.subjectId})`;
+} });
 //#endregion
 export { oauthConnectedOwnershipReferences };
 

package/dist/drizzle/oauth-connected-reference.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-connected-reference.mjs","names":[],"sources":["../../src/drizzle/oauth-connected-reference.ts"],"sourcesContent":["import type { SQL, Table } from \"drizzle-orm\";\n\nimport type { OAuthConnectedMapping } from \"./oauth-connected-model\";\nimport { oauthKernel } from \"./oauth-kernel\";\nimport type { OAuthReferenceGuardDescriptor } from \"./oauth-model\";\n\n/** Compose login unlink with retained-grant ownership under this compiler. */\nexport const oauthConnectedOwnershipReferences = <\n  S extends Table,\n  AC extends Table,\n  T extends Table,\n  O extends Table,\n  F extends Table,\n  G extends Table,\n  C extends Table,\n  H extends Table,\n  A extends Table,\n  D extends Table,\n  N,\n  J extends Table,\n>(\n  original: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, A, D, N, J>,\n): {\n  readonly connectedReferenceGuards: ReadonlyArray<OAuthReferenceGuardDescriptor<N>>;\n  readonly connectedReference: (input: {\n    readonly identityKey: string;\n    readonly subjectId: N;\n  }) => SQL;\n} =>\n  // The shared kernel returns this adapter's expressions; only compiler handles are erased.\n  oauthKernel.connectedReference.oauthConnectedOwnershipReferences(original) as {\n    readonly connectedReferenceGuards: ReadonlyArray<OAuthReferenceGuardDescriptor<N>>;\n    readonly connectedReference: (input: {\n      readonly identityKey: string;\n      readonly subjectId: N;\n    }) => SQL;\n  };\n"],"mappings":";;;AAOA,MAAa,qCAcX,aASA,YAAY,mBAAmB,kCAAkC,QAAQ"}
+{"version":3,"file":"oauth-connected-reference.mjs","names":[],"sources":["../../src/drizzle/oauth-connected-reference.ts"],"sourcesContent":["import { getTableColumns, sql, type Table } from \"drizzle-orm\";\n\nimport type { OAuthConnectedMapping } from \"./oauth-connected-model\";\n\n/** Concrete grant/job references retain ownership after unlink. */\nexport const oauthConnectedOwnershipReferences = <\n  S extends Table,\n  AC extends Table,\n  O extends Table,\n  F extends Table,\n  G extends Table,\n  N,\n  J extends Table,\n>(\n  mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J>,\n) => ({\n  connectedReference: (input: { readonly identityKey: string; readonly subjectId: N }) => {\n    const g = mapping.grant;\n    const columns = getTableColumns(g.table);\n    const grant = sql`exists(select 1 from ${g.table} where ${columns[g.identityKey]} = ${input.identityKey} and ${columns[g.subjectId]} = ${input.subjectId})`;\n\n    if (mapping.revocation.mode === \"unsupported\") return grant;\n    const j = mapping.revocation.job;\n    const jobs = getTableColumns(j.table);\n\n    return sql`(${grant}) or exists(select 1 from ${j.table} where ${jobs[j.identityKey]} = ${input.identityKey} and ${jobs[j.subjectId]} = ${input.subjectId})`;\n  },\n});\n"],"mappings":";;;AAKA,MAAa,qCASX,aACI,EACJ,qBAAqB,UAAmE;CACtF,MAAM,IAAI,QAAQ;CAClB,MAAM,UAAU,gBAAgB,EAAE,KAAK;CACvC,MAAM,QAAQ,GAAG,wBAAwB,EAAE,MAAM,SAAS,QAAQ,EAAE,aAAa,KAAK,MAAM,YAAY,OAAO,QAAQ,EAAE,WAAW,KAAK,MAAM,UAAU;CAEzJ,IAAI,QAAQ,WAAW,SAAS,eAAe,OAAO;CACtD,MAAM,IAAI,QAAQ,WAAW;CAC7B,MAAM,OAAO,gBAAgB,EAAE,KAAK;CAEpC,OAAO,GAAG,IAAI,MAAM,4BAA4B,EAAE,MAAM,SAAS,KAAK,EAAE,aAAa,KAAK,MAAM,YAAY,OAAO,KAAK,EAAE,WAAW,KAAK,MAAM,UAAU;AAC5J,EACF"}

package/dist/drizzle/oauth-drivers.mjs

@@ -1,7 +1,6 @@
+import { NativeDatabase, nativeDatabase } from "./native-database.mjs";
 import { coordinateTargetOAuthAccounts, coordinateTargetOAuthRegistration, coordinateTargetOAuthRegistrationIntents, coordinateTargetOAuthSignIn, makeTargetOAuthAccountsServices, makeTargetOAuthRegistrationIntentServices, makeTargetOAuthRegistrationServices, makeTargetOAuthSignInServices } from "./oauth-target.mjs";
-import { nativeDatabase } from "./native-database.mjs";
 import { makeOAuthConnectedTarget } from "./oauth-connected-drivers.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect } from "effect";
 import { OAuthAccountsPersistence, OAuthRegistrationIntents, OAuthSignInPersistence } from "@yielded/auth/OAuth";
 //#region src/drizzle/oauth-drivers.ts

package/dist/drizzle/oauth-drivers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-drivers.mjs","names":[],"sources":["../../src/drizzle/oauth-drivers.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n} from \"@yielded/auth/OAuth\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Crypto, Effect, Context } from \"effect\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport { makeOAuthConnectedTarget } from \"./oauth-connected-drivers\";\nimport type {\n  OAuthAccountsMapping,\n  OAuthRegistrationAuthority,\n  OAuthRegistrationIntentMapping,\n  OAuthRegistrationMapping,\n  OAuthSignInMapping,\n} from \"./oauth-model\";\nimport {\n  type OAuthCoordinatorError,\n  coordinateTargetOAuthAccounts,\n  coordinateTargetOAuthSignIn,\n  coordinateTargetOAuthRegistrationIntents,\n  coordinateTargetOAuthRegistration,\n  makeTargetOAuthRegistrationIntentServices,\n  makeTargetOAuthRegistrationServices,\n  makeTargetOAuthSignInServices,\n  makeTargetOAuthAccountsServices,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n// oxlint-disable-next-line no-explicit-any -- inspect the installed generic transaction signature without erasing its callback parameter.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\n/** Driver-specific entry points instantiate both the database and table family. */\nexport const makeOAuthTarget = <\n  DatabaseId,\n  D,\n  T extends Table,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthSignInPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthSignInPersistence>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthSignInPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthSignInPersistence | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthSignInPersistence> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthSignIn<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthSignInPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(OAuthSignInPersistence, services.oauthSignInPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthRegistrationIntents> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthRegistrationIntents>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthRegistrationIntents | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthRegistrationIntents | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthRegistrationIntents> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthRegistrationIntents<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthRegistrationIntents>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthRegistrationIntents,\n            services.oauthRegistrationIntents,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<OAuthAccountsPersistence> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthAccountsPersistence>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<OAuthAccountsPersistence | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, OAuthAccountsPersistence | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    TA extends T,\n    U extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthAccountsPersistence> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthAccounts<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthAccountsPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthAccountsPersistence,\n            services.oauthAccountsPersistence,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    TA extends T,\n    I extends T,\n    Rq extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, TargetId> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthRegistration<\n        Registration,\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, TargetId>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n        ) => {\n          const provided = Context.make(options.target, services.registrationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    ...makeOAuthConnectedTarget<DatabaseId, D, T, {}, Synchronous>(databaseService, configuration),\n    coordinateOAuthSignIn,\n    coordinateOAuthRegistrationIntents,\n    coordinateOAuthAccounts,\n    makeOAuthAccountsServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      TA extends T,\n      U extends T,\n      N,\n    >(\n      mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>,\n    ) =>\n      makeTargetOAuthAccountsServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthSignInServices: <S extends T, O extends T, C extends T, AC extends T, F extends T, N>(\n      mapping: OAuthSignInMapping<S, O, C, AC, F, N>,\n    ) =>\n      makeTargetOAuthSignInServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthRegistrationIntentServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      TA extends T,\n      I extends T,\n      N,\n    >(\n      mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>,\n    ) =>\n      makeTargetOAuthRegistrationIntentServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthRegistrationServices: <\n      Registration,\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      TA extends T,\n      I extends T,\n      R extends T,\n      N,\n    >(\n      mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>,\n    ) =>\n      makeTargetOAuthRegistrationServices<Registration>(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateOAuthRegistration,\n  };\n};\n"],"mappings":";;;;;;;;AAuCA,MAAa,mBAMX,iBACA,kBACG;CA+DH,SAAS,sBAgBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,4BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,wBAAwB,SAAS,sBAAsB;GACrF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAmEA,SAAS,mCAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,yCAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAmEA,SAAS,wBAkBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,8BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAqEA,SAAS,4BAoBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,kCAOE,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,GAAG,yBAA4D,iBAAiB,aAAa;EAC7F;EACA;EACA;EACA,4BAUE,YAEA,gCAAgC,SAAS,aAAa,CAAC,CAAC,KACtD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,0BACE,YAEA,8BAA8B,SAAS,aAAa,CAAC,CAAC,KACpD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,sCAUE,YAEA,0CAA0C,SAAS,aAAa,CAAC,CAAC,KAChE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,gCAWE,YAEA,oCAAkD,SAAS,aAAa,CAAC,CAAC,KACxE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}
+{"version":3,"file":"oauth-drivers.mjs","names":[],"sources":["../../src/drizzle/oauth-drivers.ts"],"sourcesContent":["import type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n} from \"@yielded/auth/OAuth\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Crypto, Effect, Context } from \"effect\";\n\nimport type { D1BatchStatements } from \"./D1BatchStatements\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport { makeOAuthConnectedTarget } from \"./oauth-connected-drivers\";\nimport type {\n  OAuthAccountsMapping,\n  OAuthRegistrationAuthority,\n  OAuthRegistrationIntentMapping,\n  OAuthRegistrationMapping,\n  OAuthSignInMapping,\n} from \"./oauth-model\";\nimport {\n  type OAuthCoordinatorError,\n  coordinateTargetOAuthAccounts,\n  coordinateTargetOAuthSignIn,\n  coordinateTargetOAuthRegistrationIntents,\n  coordinateTargetOAuthRegistration,\n  makeTargetOAuthRegistrationIntentServices,\n  makeTargetOAuthRegistrationServices,\n  makeTargetOAuthSignInServices,\n  makeTargetOAuthAccountsServices,\n  type OAuthTargetConfiguration,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n// oxlint-disable-next-line no-explicit-any -- inspect the installed generic transaction signature without erasing its callback parameter.\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\n/** Driver-specific entry points instantiate both the database and table family. */\nexport const makeOAuthTarget = <\n  DatabaseId,\n  D,\n  T extends Table,\n  Extra = unknown,\n  Provided extends D1BatchStatements = never,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: OAuthTargetConfiguration,\n) => {\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthSignInPersistence | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & Extra;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<[Provided] extends [never] ? TransactionOf<Database> : never>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthSignInPersistence | TxId | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthSignIn<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthSignInPersistence> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthSignIn<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthSignInPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthSignInPersistence: OAuthSignInPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(OAuthSignInPersistence, services.oauthSignInPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    O extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<O, I, N> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthRegistrationIntents | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    O extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<O, I, N> & Extra;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<[Provided] extends [never] ? TransactionOf<Database> : never>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthRegistrationIntents | TxId | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistrationIntents<\n    Database extends D,\n    O extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationIntentMapping<O, I, N> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthRegistrationIntents> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthRegistrationIntents<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthRegistrationIntents>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthRegistrationIntents: OAuthRegistrationIntents[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthRegistrationIntents,\n            services.oauthRegistrationIntents,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, N> & Extra;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthAccountsPersistence | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, N> & Extra;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<[Provided] extends [never] ? TransactionOf<Database> : never>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    | Exclude<R, OAuthAccountsPersistence | TxId | Provided>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateOAuthAccounts<\n    Database extends D,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    F extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, N> & Extra;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, OAuthAccountsPersistence> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthAccounts<\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, OAuthAccountsPersistence>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly oauthAccountsPersistence: OAuthAccountsPersistence[\"Service\"] },\n        ) => {\n          const provided = Context.make(\n            OAuthAccountsPersistence,\n            services.oauthAccountsPersistence,\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, I, N> & Extra;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, TargetId | Provided> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, I, N> & Extra;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<[Provided] extends [never] ? TransactionOf<Database> : never>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, TargetId | TxId | Provided> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  >;\n  function coordinateOAuthRegistration<\n    Database extends D,\n    TargetId,\n    Registration,\n    S extends T,\n    O extends T,\n    C extends T,\n    AC extends T,\n    I extends T,\n    N,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, I, N> & Extra;\n      readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    OAuthCoordinatorError<E> | DatabaseError,\n    Exclude<R, TargetId> | Crypto.Crypto | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetOAuthRegistration<\n        Registration,\n        TransactionOf<Database>,\n        A,\n        E,\n        Exclude<R, TargetId>\n      >(\n        database,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly registrationAuthority: OAuthRegistrationAuthority<Registration> },\n        ) => {\n          const provided = Context.make(options.target, services.registrationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    ...makeOAuthConnectedTarget<DatabaseId, D, T, Extra, Provided>(databaseService, configuration),\n    coordinateOAuthSignIn,\n    coordinateOAuthRegistrationIntents,\n    coordinateOAuthAccounts,\n    makeOAuthAccountsServices: <\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      F extends T,\n      N,\n    >(\n      mapping: OAuthAccountsMapping<S, O, C, AC, F, N> & Extra,\n    ) =>\n      makeTargetOAuthAccountsServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthSignInServices: <S extends T, O extends T, C extends T, AC extends T, F extends T, N>(\n      mapping: OAuthSignInMapping<S, O, C, AC, F, N> & Extra,\n    ) =>\n      makeTargetOAuthSignInServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthRegistrationIntentServices: <O extends T, I extends T, N>(\n      mapping: OAuthRegistrationIntentMapping<O, I, N> & Extra,\n    ) =>\n      makeTargetOAuthRegistrationIntentServices(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeOAuthRegistrationServices: <\n      Registration,\n      S extends T,\n      O extends T,\n      C extends T,\n      AC extends T,\n      I extends T,\n      N,\n    >(\n      mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, I, N> & Extra,\n    ) =>\n      makeTargetOAuthRegistrationServices<Registration>(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateOAuthRegistration,\n  };\n};\n"],"mappings":";;;;;;;AAuCA,MAAa,mBAOX,iBACA,kBACG;CA+DH,SAAS,sBAgBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,4BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,wBAAwB,SAAS,sBAAsB;GACrF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAyDA,SAAS,mCAaP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,yCAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA+DA,SAAS,wBAgBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,8BAME,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KACvB,0BACA,SAAS,wBACX;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA+DA,SAAS,4BAkBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,kCAOE,UACA,QAAQ,SACR,gBAEE,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,GAAG,yBAA4D,iBAAiB,aAAa;EAC7F;EACA;EACA;EACA,4BAQE,YAEA,gCAAgC,SAAS,aAAa,CAAC,CAAC,KACtD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,0BACE,YAEA,8BAA8B,SAAS,aAAa,CAAC,CAAC,KACpD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,sCACE,YAEA,0CAA0C,SAAS,aAAa,CAAC,CAAC,KAChE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,gCASE,YAEA,oCAAkD,SAAS,aAAa,CAAC,CAAC,KACxE,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}

package/dist/drizzle/oauth-model.d.mts

@@ -1,58 +1,32 @@
 import { DrizzleTableModel } from "./table-model.mjs";
 import * as Shared from "@yielded/auth-persistence/Adapter";
-import { OAuthAction, OAuthD1Mapping, OAuthEligibilityFact, OAuthFlowState, OAuthRegistrationAuthority, OAuthRegistrationState, OAuthTupleState, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "@yielded/auth-persistence/Adapter";
+import { OAuthAction, OAuthD1Mapping, OAuthEligibilityFact, OAuthRegistrationAuthority, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints } from "@yielded/auth-persistence/Adapter";
 import { SQL, Table } from "drizzle-orm";
 //#region src/drizzle/oauth-model.d.ts
-/** The engine writes every critical column explicitly after applying the pure
- * consumer encoder. Native instant values must roundtrip without precision loss. */
 export type OAuthClock = Shared.OAuthClock<SQL>;
 export type OAuthSubjectReadTable<S extends Table> = Shared.OAuthSubjectReadTable<DrizzleTableModel<S>, SQL>;
 export type OAuthSubjectTable<S extends Table> = Shared.OAuthSubjectTable<DrizzleTableModel<S>, SQL>;
-export type OAuthOwnershipReadTable<O extends Table, N> = Shared.OAuthOwnershipReadTable<DrizzleTableModel<O>, N, SQL>;
-export type OAuthOwnershipTable<O extends Table, N> = Shared.OAuthOwnershipTable<DrizzleTableModel<O>, N, SQL>;
+export type OAuthOwnershipReadTable<O extends Table, N> = Shared.OAuthOwnershipReadTable<DrizzleTableModel<O>, N>;
+export type OAuthOwnershipTable<O extends Table, N> = Shared.OAuthOwnershipTable<DrizzleTableModel<O>, N>;
 export type OAuthCredentialReadTable<C extends Table> = Shared.OAuthCredentialReadTable<DrizzleTableModel<C>, SQL>;
 export type OAuthCredentialTable<C extends Table, N> = Shared.OAuthCredentialTable<DrizzleTableModel<C>, N, SQL>;
 export type OAuthAuthorityReadTable<C extends Table> = Shared.OAuthAuthorityReadTable<DrizzleTableModel<C>, SQL>;
 export type OAuthAuthorityTable<C extends Table, N> = Shared.OAuthAuthorityTable<DrizzleTableModel<C>, N, SQL>;
-/** Both purposes may use the same physical table. Shared tables share module/flow
- * and module/command uniqueness. The snapshot has the exact purpose-specific core
- * codec; terminal writes erase it, while identity, claim and retention columns remain. */
 export type OAuthFlowTable<F extends Table> = Shared.OAuthFlowTable<DrizzleTableModel<F>>;
-export type OAuthTupleAuthorityTable<T extends Table, N> = Shared.OAuthTupleAuthorityTable<DrizzleTableModel<T>, N>;
 export type OAuthRegistrationIntentTable<I extends Table> = Shared.OAuthRegistrationIntentTable<DrizzleTableModel<I>>;
-export type OAuthRegistrationCommandTable<R extends Table, Registration> = Shared.OAuthRegistrationCommandTable<DrizzleTableModel<R>, Registration>;
-export type OAuthUnlinkCommandTable<U extends Table> = Shared.OAuthUnlinkCommandTable<DrizzleTableModel<U>>;
-/** Each descriptor reads only its own subject-scoped method rows. The native row
- * projector and SQL condition must express the same installed method eligibility.
- * All source/identifier/policy mutations advance subject securityRevision. D1 also
- * guards exact selected IDs/versions and absence/count assumptions, never just a
- * stale boolean. An over-limit graph fails closed rather than truncating. */
 export type OAuthEligibilityTable<T extends Table, N> = Shared.OAuthEligibilityTable<DrizzleTableModel<T>, N, SQL>;
-/** Authenticated command replay uses current subject status and this additional
- * nonconsuming SQL policy. It never consumes a fresh action factor. */
-export type OAuthMetadataPolicy<N> = Shared.OAuthMetadataPolicy<N, SQL>;
 export type OAuthCleanupTable<T extends Table, N> = Shared.OAuthCleanupTable<DrizzleTableModel<T>, N, SQL>;
-export type OAuthRegistrationEligibility<N> = Shared.OAuthRegistrationEligibility<N, SQL>;
-export type OAuthSignInMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, N> = Shared.OAuthSignInMapping<DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<F>, N, SQL>;
-export type OAuthOwnershipMutation<T extends Table, O extends Table, N> = Shared.OAuthOwnershipMutation<DrizzleTableModel<T>, DrizzleTableModel<O>, N, SQL>;
-export type OAuthRegistrationIntentMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, T extends Table, I extends Table, N> = Shared.OAuthRegistrationIntentMapping<DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<F>, DrizzleTableModel<T>, DrizzleTableModel<I>, N, SQL>;
-export type OAuthRegistrationBase<Registration, T extends Table, O extends Table, I extends Table, R extends Table, N> = Shared.OAuthRegistrationBase<Registration, DrizzleTableModel<T>, DrizzleTableModel<O>, DrizzleTableModel<I>, DrizzleTableModel<R>, N, SQL, Table>;
 export type OAuthRegistrationGuardTable<T extends Table, Registration, N> = Shared.OAuthRegistrationGuardTable<DrizzleTableModel<T>, Registration, N, SQL>;
 export type OAuthRegistrationGuardDescriptor<Registration, N> = Shared.OAuthRegistrationGuardDescriptor<Registration, N, SQL, Table>;
-export declare const oauthRegistrationGuardTable: <T extends Table, Registration, N>(input: OAuthRegistrationGuardTable<T, Registration, N>) => OAuthRegistrationGuardDescriptor<Registration, N>;
-export type OAuthRegistrationMapping<Registration, S extends Table, O extends Table, C extends Table, AC extends Table, T extends Table, I extends Table, R extends Table, N> = Shared.OAuthRegistrationMapping<Registration, DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<T>, DrizzleTableModel<I>, DrizzleTableModel<R>, N, SQL, Table>;
-/** Heterogeneous descriptors are made by typed factories and projected privately. */
 export type OAuthEligibilityDescriptor<N> = Shared.OAuthEligibilityDescriptor<N, SQL, Table>;
-export declare const oauthEligibilityTable: <T extends Table, N>(input: OAuthEligibilityTable<T, N>) => OAuthEligibilityDescriptor<N>;
 export type OAuthCleanupDescriptor<N> = Shared.OAuthCleanupDescriptor<N, SQL, Table>;
-export declare const oauthCleanupTable: <T extends Table, N>(input: OAuthCleanupTable<T, N>) => OAuthCleanupDescriptor<N>;
-/** A stable application/reference lock acquired before an ownership target.
- * Missing rows retain ownership. Conditions use detached native IDs; every
- * writer of the guarded reference follows the same order. */
-export type OAuthReferenceGuardTable<T extends Table, N> = Shared.OAuthReferenceGuardTable<DrizzleTableModel<T>, N, SQL>;
-export type OAuthReferenceGuardDescriptor<N> = Shared.OAuthReferenceGuardDescriptor<N, SQL, Table>;
-export declare const oauthReferenceGuardTable: <T extends Table, N>(input: OAuthReferenceGuardTable<T, N>) => OAuthReferenceGuardDescriptor<N>;
-export type OAuthAccountsMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, T extends Table, U extends Table, N> = Shared.OAuthAccountsMapping<DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<F>, DrizzleTableModel<T>, DrizzleTableModel<U>, N, SQL, Table>;
+export type OAuthSignInMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, N> = Shared.OAuthSignInMapping<DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<F>, N, SQL>;
+export type OAuthAccountsMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, N> = Shared.OAuthAccountsMapping<DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<F>, N, SQL, Table>;
+export type OAuthRegistrationIntentMapping<O extends Table, I extends Table, N> = Shared.OAuthRegistrationIntentMapping<DrizzleTableModel<O>, DrizzleTableModel<I>, N, SQL>;
+export type OAuthRegistrationMapping<Registration, S extends Table, O extends Table, C extends Table, AC extends Table, I extends Table, N> = Shared.OAuthRegistrationMapping<Registration, DrizzleTableModel<S>, DrizzleTableModel<O>, DrizzleTableModel<C>, DrizzleTableModel<AC>, DrizzleTableModel<I>, N, SQL, Table>;
+export declare const oauthEligibilityTable: <T extends Table, N>(input: OAuthEligibilityTable<T, N>) => Shared.OAuthEligibilityDescriptor<N, SQL<unknown>, T>;
+export declare const oauthCleanupTable: <T extends Table, N>(input: OAuthCleanupTable<T, N>) => Shared.OAuthCleanupDescriptor<N, SQL<unknown>, T>;
+export declare const oauthRegistrationGuardTable: <T extends Table, Registration, N>(input: OAuthRegistrationGuardTable<T, Registration, N>) => Shared.OAuthRegistrationGuardDescriptor<Registration, N, SQL<unknown>, T>;
 //#endregion
-export { type OAuthAction, type OAuthD1Mapping, type OAuthEligibilityFact, type OAuthFlowState, type OAuthRegistrationAuthority, type OAuthRegistrationState, type OAuthTupleState, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints };
+export { type OAuthAction, type OAuthD1Mapping, type OAuthEligibilityFact, type OAuthRegistrationAuthority, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints };
 //# sourceMappingURL=oauth-model.d.mts.map

package/dist/drizzle/oauth-model.mjs

@@ -1,11 +1,10 @@
 import * as Shared from "@yielded/auth-persistence/Adapter";
-import { requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "@yielded/auth-persistence/Adapter";
+import { requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints } from "@yielded/auth-persistence/Adapter";
 //#region src/drizzle/oauth-model.ts
-const oauthRegistrationGuardTable = (input) => Shared.oauthRegistrationGuardTable(input);
 const oauthEligibilityTable = (input) => Shared.oauthEligibilityTable(input);
 const oauthCleanupTable = (input) => Shared.oauthCleanupTable(input);
-const oauthReferenceGuardTable = (input) => Shared.oauthReferenceGuardTable(input);
+const oauthRegistrationGuardTable = (input) => Shared.oauthRegistrationGuardTable(input);
 //#endregion
-export { oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints };
+export { oauthCleanupTable, oauthEligibilityTable, oauthRegistrationGuardTable, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints };
 
 //# sourceMappingURL=oauth-model.mjs.map

package/dist/drizzle/oauth-model.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-model.mjs","names":[],"sources":["../../src/drizzle/oauth-model.ts"],"sourcesContent":["import * as Shared from \"@yielded/auth-persistence/Adapter\";\nimport type { SQL, Table } from \"drizzle-orm\";\n\nimport type { DrizzleTableModel } from \"./table-model\";\n\nexport {\n  type OAuthFlowState,\n  type OAuthTupleState,\n  type OAuthRegistrationState,\n  type OAuthAction,\n  type OAuthEligibilityFact,\n  type OAuthD1Mapping,\n  requiredOAuthSignInConstraints,\n  requiredOAuthTupleConstraints,\n  requiredOAuthRegistrationConstraints,\n  requiredOAuthAccountsConstraints,\n  type OAuthRegistrationAuthority,\n} from \"@yielded/auth-persistence/Adapter\";\n\n/** The engine writes every critical column explicitly after applying the pure\n * consumer encoder. Native instant values must roundtrip without precision loss. */\nexport type OAuthClock = Shared.OAuthClock<SQL>;\n\nexport type OAuthSubjectReadTable<S extends Table> = Shared.OAuthSubjectReadTable<\n  DrizzleTableModel<S>,\n  SQL\n>;\n\nexport type OAuthSubjectTable<S extends Table> = Shared.OAuthSubjectTable<\n  DrizzleTableModel<S>,\n  SQL\n>;\n\nexport type OAuthOwnershipReadTable<O extends Table, N> = Shared.OAuthOwnershipReadTable<\n  DrizzleTableModel<O>,\n  N,\n  SQL\n>;\n\nexport type OAuthOwnershipTable<O extends Table, N> = Shared.OAuthOwnershipTable<\n  DrizzleTableModel<O>,\n  N,\n  SQL\n>;\n\nexport type OAuthCredentialReadTable<C extends Table> = Shared.OAuthCredentialReadTable<\n  DrizzleTableModel<C>,\n  SQL\n>;\n\nexport type OAuthCredentialTable<C extends Table, N> = Shared.OAuthCredentialTable<\n  DrizzleTableModel<C>,\n  N,\n  SQL\n>;\n\nexport type OAuthAuthorityReadTable<C extends Table> = Shared.OAuthAuthorityReadTable<\n  DrizzleTableModel<C>,\n  SQL\n>;\n\nexport type OAuthAuthorityTable<C extends Table, N> = Shared.OAuthAuthorityTable<\n  DrizzleTableModel<C>,\n  N,\n  SQL\n>;\n\n/** Both purposes may use the same physical table. Shared tables share module/flow\n * and module/command uniqueness. The snapshot has the exact purpose-specific core\n * codec; terminal writes erase it, while identity, claim and retention columns remain. */\nexport type OAuthFlowTable<F extends Table> = Shared.OAuthFlowTable<DrizzleTableModel<F>>;\n\nexport type OAuthTupleAuthorityTable<T extends Table, N> = Shared.OAuthTupleAuthorityTable<\n  DrizzleTableModel<T>,\n  N\n>;\n\nexport type OAuthRegistrationIntentTable<I extends Table> = Shared.OAuthRegistrationIntentTable<\n  DrizzleTableModel<I>\n>;\n\nexport type OAuthRegistrationCommandTable<\n  R extends Table,\n  Registration,\n> = Shared.OAuthRegistrationCommandTable<DrizzleTableModel<R>, Registration>;\n\nexport type OAuthUnlinkCommandTable<U extends Table> = Shared.OAuthUnlinkCommandTable<\n  DrizzleTableModel<U>\n>;\n\n/** Each descriptor reads only its own subject-scoped method rows. The native row\n * projector and SQL condition must express the same installed method eligibility.\n * All source/identifier/policy mutations advance subject securityRevision. D1 also\n * guards exact selected IDs/versions and absence/count assumptions, never just a\n * stale boolean. An over-limit graph fails closed rather than truncating. */\nexport type OAuthEligibilityTable<T extends Table, N> = Shared.OAuthEligibilityTable<\n  DrizzleTableModel<T>,\n  N,\n  SQL\n>;\n\n/** Authenticated command replay uses current subject status and this additional\n * nonconsuming SQL policy. It never consumes a fresh action factor. */\nexport type OAuthMetadataPolicy<N> = Shared.OAuthMetadataPolicy<N, SQL>;\n\nexport type OAuthCleanupTable<T extends Table, N> = Shared.OAuthCleanupTable<\n  DrizzleTableModel<T>,\n  N,\n  SQL\n>;\n\nexport type OAuthRegistrationEligibility<N> = Shared.OAuthRegistrationEligibility<N, SQL>;\n\nexport type OAuthSignInMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  N,\n> = Shared.OAuthSignInMapping<\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<F>,\n  N,\n  SQL\n>;\n\nexport type OAuthOwnershipMutation<\n  T extends Table,\n  O extends Table,\n  N,\n> = Shared.OAuthOwnershipMutation<DrizzleTableModel<T>, DrizzleTableModel<O>, N, SQL>;\n\nexport type OAuthRegistrationIntentMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  T extends Table,\n  I extends Table,\n  N,\n> = Shared.OAuthRegistrationIntentMapping<\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<F>,\n  DrizzleTableModel<T>,\n  DrizzleTableModel<I>,\n  N,\n  SQL\n>;\n\nexport type OAuthRegistrationBase<\n  Registration,\n  T extends Table,\n  O extends Table,\n  I extends Table,\n  R extends Table,\n  N,\n> = Shared.OAuthRegistrationBase<\n  Registration,\n  DrizzleTableModel<T>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<I>,\n  DrizzleTableModel<R>,\n  N,\n  SQL,\n  Table\n>;\n\nexport type OAuthRegistrationGuardTable<\n  T extends Table,\n  Registration,\n  N,\n> = Shared.OAuthRegistrationGuardTable<DrizzleTableModel<T>, Registration, N, SQL>;\n\nexport type OAuthRegistrationGuardDescriptor<Registration, N> =\n  Shared.OAuthRegistrationGuardDescriptor<Registration, N, SQL, Table>;\n\nexport const oauthRegistrationGuardTable = <T extends Table, Registration, N>(\n  input: OAuthRegistrationGuardTable<T, Registration, N>,\n): OAuthRegistrationGuardDescriptor<Registration, N> =>\n  Shared.oauthRegistrationGuardTable<DrizzleTableModel<T>, Registration, N, SQL>(input);\n\nexport type OAuthRegistrationMapping<\n  Registration,\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  T extends Table,\n  I extends Table,\n  R extends Table,\n  N,\n> = Shared.OAuthRegistrationMapping<\n  Registration,\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<T>,\n  DrizzleTableModel<I>,\n  DrizzleTableModel<R>,\n  N,\n  SQL,\n  Table\n>;\n\n/** Heterogeneous descriptors are made by typed factories and projected privately. */\nexport type OAuthEligibilityDescriptor<N> = Shared.OAuthEligibilityDescriptor<N, SQL, Table>;\n\nexport const oauthEligibilityTable = <T extends Table, N>(\n  input: OAuthEligibilityTable<T, N>,\n): OAuthEligibilityDescriptor<N> =>\n  Shared.oauthEligibilityTable<DrizzleTableModel<T>, N, SQL>(input);\n\nexport type OAuthCleanupDescriptor<N> = Shared.OAuthCleanupDescriptor<N, SQL, Table>;\n\nexport const oauthCleanupTable = <T extends Table, N>(\n  input: OAuthCleanupTable<T, N>,\n): OAuthCleanupDescriptor<N> => Shared.oauthCleanupTable<DrizzleTableModel<T>, N, SQL>(input);\n\n/** A stable application/reference lock acquired before an ownership target.\n * Missing rows retain ownership. Conditions use detached native IDs; every\n * writer of the guarded reference follows the same order. */\nexport type OAuthReferenceGuardTable<T extends Table, N> = Shared.OAuthReferenceGuardTable<\n  DrizzleTableModel<T>,\n  N,\n  SQL\n>;\n\nexport type OAuthReferenceGuardDescriptor<N> = Shared.OAuthReferenceGuardDescriptor<N, SQL, Table>;\n\nexport const oauthReferenceGuardTable = <T extends Table, N>(\n  input: OAuthReferenceGuardTable<T, N>,\n): OAuthReferenceGuardDescriptor<N> =>\n  Shared.oauthReferenceGuardTable<DrizzleTableModel<T>, N, SQL>(input);\n\nexport type OAuthAccountsMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  T extends Table,\n  U extends Table,\n  N,\n> = Shared.OAuthAccountsMapping<\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<F>,\n  DrizzleTableModel<T>,\n  DrizzleTableModel<U>,\n  N,\n  SQL,\n  Table\n>;\n"],"mappings":";;;AAwLA,MAAa,+BACX,UAEA,OAAO,4BAAwE,KAAK;AA6BtF,MAAa,yBACX,UAEA,OAAO,sBAAoD,KAAK;AAIlE,MAAa,qBACX,UAC8B,OAAO,kBAAgD,KAAK;AAa5F,MAAa,4BACX,UAEA,OAAO,yBAAuD,KAAK"}
+{"version":3,"file":"oauth-model.mjs","names":[],"sources":["../../src/drizzle/oauth-model.ts"],"sourcesContent":["import * as Shared from \"@yielded/auth-persistence/Adapter\";\nimport type { SQL, Table } from \"drizzle-orm\";\n\nimport type { DrizzleTableModel } from \"./table-model\";\n\nexport {\n  type OAuthAction,\n  type OAuthEligibilityFact,\n  type OAuthD1Mapping,\n  type OAuthRegistrationAuthority,\n  requiredOAuthSignInConstraints,\n  requiredOAuthRegistrationConstraints,\n} from \"@yielded/auth-persistence/Adapter\";\n\nexport type OAuthClock = Shared.OAuthClock<SQL>;\n\nexport type OAuthSubjectReadTable<S extends Table> = Shared.OAuthSubjectReadTable<\n  DrizzleTableModel<S>,\n  SQL\n>;\n\nexport type OAuthSubjectTable<S extends Table> = Shared.OAuthSubjectTable<\n  DrizzleTableModel<S>,\n  SQL\n>;\n\nexport type OAuthOwnershipReadTable<O extends Table, N> = Shared.OAuthOwnershipReadTable<\n  DrizzleTableModel<O>,\n  N\n>;\n\nexport type OAuthOwnershipTable<O extends Table, N> = Shared.OAuthOwnershipTable<\n  DrizzleTableModel<O>,\n  N\n>;\n\nexport type OAuthCredentialReadTable<C extends Table> = Shared.OAuthCredentialReadTable<\n  DrizzleTableModel<C>,\n  SQL\n>;\n\nexport type OAuthCredentialTable<C extends Table, N> = Shared.OAuthCredentialTable<\n  DrizzleTableModel<C>,\n  N,\n  SQL\n>;\n\nexport type OAuthAuthorityReadTable<C extends Table> = Shared.OAuthAuthorityReadTable<\n  DrizzleTableModel<C>,\n  SQL\n>;\n\nexport type OAuthAuthorityTable<C extends Table, N> = Shared.OAuthAuthorityTable<\n  DrizzleTableModel<C>,\n  N,\n  SQL\n>;\n\nexport type OAuthFlowTable<F extends Table> = Shared.OAuthFlowTable<DrizzleTableModel<F>>;\n\nexport type OAuthRegistrationIntentTable<I extends Table> = Shared.OAuthRegistrationIntentTable<\n  DrizzleTableModel<I>\n>;\n\nexport type OAuthEligibilityTable<T extends Table, N> = Shared.OAuthEligibilityTable<\n  DrizzleTableModel<T>,\n  N,\n  SQL\n>;\n\nexport type OAuthCleanupTable<T extends Table, N> = Shared.OAuthCleanupTable<\n  DrizzleTableModel<T>,\n  N,\n  SQL\n>;\n\nexport type OAuthRegistrationGuardTable<\n  T extends Table,\n  Registration,\n  N,\n> = Shared.OAuthRegistrationGuardTable<DrizzleTableModel<T>, Registration, N, SQL>;\n\nexport type OAuthRegistrationGuardDescriptor<Registration, N> =\n  Shared.OAuthRegistrationGuardDescriptor<Registration, N, SQL, Table>;\n\nexport type OAuthEligibilityDescriptor<N> = Shared.OAuthEligibilityDescriptor<N, SQL, Table>;\n\nexport type OAuthCleanupDescriptor<N> = Shared.OAuthCleanupDescriptor<N, SQL, Table>;\n\nexport type OAuthSignInMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  N,\n> = Shared.OAuthSignInMapping<\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<F>,\n  N,\n  SQL\n>;\n\nexport type OAuthAccountsMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  N,\n> = Shared.OAuthAccountsMapping<\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<F>,\n  N,\n  SQL,\n  Table\n>;\n\nexport type OAuthRegistrationIntentMapping<\n  O extends Table,\n  I extends Table,\n  N,\n> = Shared.OAuthRegistrationIntentMapping<DrizzleTableModel<O>, DrizzleTableModel<I>, N, SQL>;\n\nexport type OAuthRegistrationMapping<\n  Registration,\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  I extends Table,\n  N,\n> = Shared.OAuthRegistrationMapping<\n  Registration,\n  DrizzleTableModel<S>,\n  DrizzleTableModel<O>,\n  DrizzleTableModel<C>,\n  DrizzleTableModel<AC>,\n  DrizzleTableModel<I>,\n  N,\n  SQL,\n  Table\n>;\n\nexport const oauthEligibilityTable = <T extends Table, N>(input: OAuthEligibilityTable<T, N>) =>\n  Shared.oauthEligibilityTable<DrizzleTableModel<T>, N, SQL>(input);\n\nexport const oauthCleanupTable = <T extends Table, N>(input: OAuthCleanupTable<T, N>) =>\n  Shared.oauthCleanupTable<DrizzleTableModel<T>, N, SQL>(input);\n\nexport const oauthRegistrationGuardTable = <T extends Table, Registration, N>(\n  input: OAuthRegistrationGuardTable<T, Registration, N>,\n) => Shared.oauthRegistrationGuardTable<DrizzleTableModel<T>, Registration, N, SQL>(input);\n"],"mappings":";;;AAsJA,MAAa,yBAA6C,UACxD,OAAO,sBAAoD,KAAK;AAElE,MAAa,qBAAyC,UACpD,OAAO,kBAAgD,KAAK;AAE9D,MAAa,+BACX,UACG,OAAO,4BAAwE,KAAK"}

package/dist/drizzle/oauth-proxy.d.mts

@@ -1,8 +1,8 @@
 import { OAuthProxySqlTable } from "@yielded/auth-persistence/Adapter";
 import { Table } from "drizzle-orm";
 import { Layer } from "effect";
-import { ConfigurationError, Persistence } from "@yielded/auth/OAuthProxy";
 import { SqlClient } from "effect/sql";
+import { ConfigurationError, Persistence } from "@yielded/auth/OAuthProxy";
 //#region src/drizzle/oauth-proxy.d.ts
 /** Override logical column keys when using an application-owned table. */
 export type OAuthProxyColumns<T extends Table> = Partial<{ readonly [K in keyof OAuthProxySqlTable["columns"]]: Extract<keyof T["_"]["columns"], string>; }>;

package/dist/drizzle/oauth-proxy.mjs

@@ -1,10 +1,10 @@
 import { makeOAuthProxyPersistence, validateStorage } from "@yielded/auth-persistence/Adapter";
 import { getTableColumns, is } from "drizzle-orm";
 import { Effect, Layer } from "effect";
+import { SqlClient } from "effect/sql";
 import { PgTable, getTableConfig } from "drizzle-orm/pg-core";
 import { SQLiteTable, getTableConfig as getTableConfig$1 } from "drizzle-orm/sqlite-core";
 import { ConfigurationError, Persistence } from "@yielded/auth/OAuthProxy";
-import { SqlClient } from "effect/sql";
 //#region src/drizzle/oauth-proxy.ts
 /** The shared SQL kernel writes plain text and integer milliseconds directly;
 * Drizzle value codecs and write hooks do not run for these storage columns. */

package/dist/drizzle/oauth-target.d.mts

@@ -1,9 +1,12 @@
-import { OAuthCoordinatorError, OAuthKernel } from "@yielded/auth-persistence/Adapter";
+import "./native-database.mjs";
+import "./D1BatchStatements.mjs";
+import "./native-target.mjs";
+import { oauthAccountsPersistenceLayer, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer } from "@yielded/auth-persistence/Adapter";
+import { Effect } from "effect";
+import { LifecycleHooks } from "@yielded/auth/Hooks";
+import { OAuthUnavailable } from "@yielded/auth/OAuth";
 //#region src/drizzle/oauth-target.d.ts
-export declare const oauthAccountsPersistenceLayer: OAuthKernel["target"]["oauthAccountsPersistenceLayer"];
-export declare const oauthSignInPersistenceLayer: OAuthKernel["target"]["oauthSignInPersistenceLayer"];
-export declare const oauthRegistrationIntentsLayer: OAuthKernel["target"]["oauthRegistrationIntentsLayer"];
-export declare const oauthRegistrationAuthorityLayer: OAuthKernel["target"]["oauthRegistrationAuthorityLayer"];
+export type OAuthCoordinatorError<E> = E | OAuthUnavailable;
 //#endregion
-export type { OAuthCoordinatorError };
+export { oauthAccountsPersistenceLayer, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer };
 //# sourceMappingURL=oauth-target.d.mts.map