@yielded/auth-persistence-drizzle 0.1.0-beta.24 → 0.1.0-beta.26

package/dist/drizzle/password-drivers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-drivers.mjs","names":[],"sources":["../../src/drizzle/password-drivers.ts"],"sourcesContent":["import type { PasswordRegistrationAuthority } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { PasswordPersistence, type PasswordUnavailable } from \"@yielded/auth/Password\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Context, Effect, type Crypto } from \"effect\";\n\nimport type { NativeDriverDatabase, NativeDriverTransaction } from \"./driver-types\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport type { NativeTargetConfiguration } from \"./native-target\";\nimport type {\n  AnyPasswordPersistenceMapping,\n  AnyPasswordRegistrationMapping,\n  PasswordPersistenceMapping,\n  PasswordRegistrationMapping,\n} from \"./password-model\";\nimport {\n  coordinateTargetPasswordPersistence,\n  coordinateTargetPasswordRegistration,\n  makeTargetPasswordPersistenceServices,\n  makeTargetPasswordRegistrationServices,\n} from \"./password-target\";\nimport type { AnyProofPersistenceMapping, ProofPersistenceMapping } from \"./proof-model\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype ProofOption<Proof extends Table, Subject extends Table, NativeId> = {\n  readonly proofMapping?: ProofPersistenceMapping<Proof, Subject, NativeId>;\n};\n\n/** Foreign table callback variance is erased only after these public signatures;\n * the target validates physical metadata and the workflow invokes row codecs. */\nexport const makePasswordTarget = <DatabaseId, D extends NativeDriverDatabase>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: NativeTargetConfiguration,\n) => {\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends Table,\n    I extends Table,\n    C extends Table,\n    AC extends Table,\n    N,\n    Proof extends Table,\n    PS extends Table,\n    PN,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PasswordPersistenceMapping<S, I, C, AC, N>;\n      readonly transaction?: never;\n    } & ProofOption<Proof, PS, PN>,\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | PasswordUnavailable,\n    Exclude<R, PasswordPersistence> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends Table,\n    I extends Table,\n    C extends Table,\n    AC extends Table,\n    N,\n    Proof extends Table,\n    PS extends Table,\n    PN,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PasswordPersistenceMapping<S, I, C, AC, N>;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    } & ProofOption<Proof, PS, PN>,\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | PasswordUnavailable,\n    Exclude<R, PasswordPersistence | TxId> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinatePasswordPersistence<\n    Database extends D,\n    S extends Table,\n    I extends Table,\n    C extends Table,\n    AC extends Table,\n    N,\n    Proof extends Table,\n    PS extends Table,\n    PN,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PasswordPersistenceMapping<S, I, C, AC, N>;\n      readonly transaction?: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    } & ProofOption<Proof, PS, PN>,\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetPasswordPersistence(\n        database,\n        options.mapping as unknown as AnyPasswordPersistenceMapping,\n        configuration,\n        (transaction: NativeDriverTransaction<Database>, services) => {\n          const work = Effect.provideService(\n            body,\n            PasswordPersistence,\n            services.passwordPersistence,\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n        options.proofMapping as unknown as AnyProofPersistenceMapping | undefined,\n      ),\n    );\n  }\n\n  function coordinatePasswordRegistration<\n    TargetId,\n    Registration,\n    Database extends D,\n    S extends Table,\n    I extends Table,\n    C extends Table,\n    AC extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | PasswordUnavailable,\n    Exclude<R, TargetId> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinatePasswordRegistration<\n    TargetId,\n    Registration,\n    Database extends D,\n    S extends Table,\n    I extends Table,\n    C extends Table,\n    AC extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | PasswordUnavailable,\n    Exclude<R, TargetId | TxId> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinatePasswordRegistration<\n    TargetId,\n    Registration,\n    Database extends D,\n    S extends Table,\n    I extends Table,\n    C extends Table,\n    AC extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;\n      readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;\n      readonly transaction?: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetPasswordRegistration(\n        database,\n        options.mapping as unknown as AnyPasswordRegistrationMapping<Registration>,\n        configuration,\n        (transaction: NativeDriverTransaction<Database>, services) => {\n          const work = Effect.provideService(body, options.target, services.registrationAuthority);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    makePasswordPersistenceServices: <\n      S extends Table,\n      I extends Table,\n      C extends Table,\n      AC extends Table,\n      N,\n      Proof extends Table,\n      PS extends Table,\n      PN,\n    >(\n      mapping: PasswordPersistenceMapping<S, I, C, AC, N>,\n      proofMapping?: ProofPersistenceMapping<Proof, PS, PN>,\n    ) =>\n      makeTargetPasswordPersistenceServices(\n        mapping as unknown as AnyPasswordPersistenceMapping,\n        configuration,\n        proofMapping as unknown as AnyProofPersistenceMapping | undefined,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    makePasswordRegistrationServices: <\n      Registration,\n      S extends Table,\n      I extends Table,\n      C extends Table,\n      AC extends Table,\n      N,\n    >(\n      mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, N>,\n    ) =>\n      makeTargetPasswordRegistrationServices(\n        mapping as unknown as AnyPasswordRegistrationMapping<Registration>,\n        configuration,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    coordinatePasswordPersistence,\n    coordinatePasswordRegistration,\n  };\n};\n"],"mappings":";;;;;;;AA8BA,MAAa,sBACX,iBACA,kBACG;CA6DH,SAAS,8BAkBP,SACA,SAQA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,oCACE,UACA,QAAQ,SACR,gBACC,aAAgD,aAAa;GAC5D,MAAM,OAAO,OAAO,eAClB,MACA,qBACA,SAAS,mBACX;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,GACA,QAAQ,YACV,CACF;CACF;CA8DA,SAAS,+BAiBP,SACA,SASA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,qCACE,UACA,QAAQ,SACR,gBACC,aAAgD,aAAa;GAC5D,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ,QAAQ,SAAS,qBAAqB;GAEvF,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,kCAUE,SACA,iBAEA,sCACE,SACA,eACA,YACF,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF,mCAQE,YAEA,uCACE,SACA,aACF,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF;EACA;CACF;AACF"}

package/dist/drizzle/password-model.d.mts

@@ -1,21 +1,18 @@
+import { ClockMapping } from "./native-clock.mjs";
 import { DrizzleTableModel } from "./table-model.mjs";
 import * as Shared from "@yielded/auth-persistence/Adapter";
-import { PasswordConstraintClassifier, PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, PasswordRegistrationState, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "@yielded/auth-persistence/Adapter";
+import { PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "@yielded/auth-persistence/Adapter";
 import { SQL, Table } from "drizzle-orm";
 //#region src/drizzle/password-model.d.ts
 export type PasswordSubjectTable<Subject extends Table, _NativeSubjectId> = Shared.PasswordSubjectTable<DrizzleTableModel<Subject>, _NativeSubjectId>;
 export type PasswordIdentifierTable<Identifier extends Table, NativeSubjectId> = Shared.PasswordIdentifierTable<DrizzleTableModel<Identifier>, NativeSubjectId, SQL>;
 export type PasswordAuthorityCredentialTable<Credential extends Table, NativeSubjectId> = Shared.PasswordAuthorityCredentialTable<DrizzleTableModel<Credential>, NativeSubjectId>;
 export type PasswordCredentialTable<Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> = Shared.PasswordCredentialTable<DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, NativeSubjectId>;
-export type PasswordCommandTable<Command extends Table> = Shared.PasswordCommandTable<DrizzleTableModel<Command>>;
-export type PasswordD1Clock = Shared.PasswordD1Clock<SQL>;
-export type PasswordPersistenceMapping<Subject extends Table, Identifier extends Table, Credential extends Table, AuthorityCredential extends Table, Command extends Table, NativeSubjectId> = Shared.PasswordPersistenceMapping<DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, DrizzleTableModel<AuthorityCredential>, DrizzleTableModel<Command>, NativeSubjectId, SQL>;
-export type D1PasswordPersistenceMapping<Subject extends Table, Identifier extends Table, Credential extends Table, AuthorityCredential extends Table, Command extends Table, NativeSubjectId> = Shared.D1PasswordPersistenceMapping<DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, DrizzleTableModel<AuthorityCredential>, DrizzleTableModel<Command>, NativeSubjectId, SQL>;
-export type PasswordRegistrationTable<Registration, Request extends Table, NativeSubjectId> = Shared.PasswordRegistrationTable<Registration, DrizzleTableModel<Request>, NativeSubjectId>;
+export type PasswordPersistenceMapping<Subject extends Table, Identifier extends Table, Credential extends Table, AuthorityCredential extends Table, NativeSubjectId> = ClockMapping<Shared.PasswordPersistenceMapping<DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, DrizzleTableModel<AuthorityCredential>, NativeSubjectId, SQL>>;
 export type PasswordRegistrationProvisioning<Registration, Subject extends Table, NativeSubjectId> = Shared.PasswordRegistrationProvisioning<Registration, DrizzleTableModel<Subject>, NativeSubjectId>;
-export type PasswordRegistrationMapping<Registration, Subject extends Table, Identifier extends Table, Credential extends Table, AuthorityCredential extends Table, Request extends Table, NativeSubjectId> = Shared.PasswordRegistrationMapping<Registration, DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, DrizzleTableModel<AuthorityCredential>, DrizzleTableModel<Request>, NativeSubjectId, SQL>;
-export type AnyPasswordPersistenceMapping = PasswordPersistenceMapping<Table, Table, Table, Table, Table, unknown>;
-export type AnyPasswordRegistrationMapping<Registration = unknown> = PasswordRegistrationMapping<Registration, Table, Table, Table, Table, Table, unknown>;
+export type PasswordRegistrationMapping<Registration, Subject extends Table, Identifier extends Table, Credential extends Table, AuthorityCredential extends Table, NativeSubjectId> = Shared.PasswordRegistrationMapping<Registration, DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, DrizzleTableModel<AuthorityCredential>, NativeSubjectId, SQL>;
+export type AnyPasswordPersistenceMapping = PasswordPersistenceMapping<Table, Table, Table, Table, unknown>;
+export type AnyPasswordRegistrationMapping<Registration = unknown> = PasswordRegistrationMapping<Registration, Table, Table, Table, Table, unknown>;
 //#endregion
-export { type PasswordConstraintClassifier, type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type PasswordRegistrationState, type RequiredPasswordConstraints, type RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints };
+export { type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type RequiredPasswordConstraints, type RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints };
 //# sourceMappingURL=password-model.d.mts.map

package/dist/drizzle/password-target.d.mts

@@ -1,17 +1,16 @@
-import "./standalone-guard.mjs";
-import "./proof-target.mjs";
-import "./password-sql.mjs";
-import { PasswordRegistrationAuthority } from "./password-registration.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
+import "./password-model.mjs";
+import "./proof-model.mjs";
+import "./native-database.mjs";
+import "./D1BatchStatements.mjs";
+import "./native-target.mjs";
+import { PasswordRegistrationAuthority, requireStandalone } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect, Layer } from "effect";
-import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
 import { PasswordPersistence, PasswordUnavailable } from "@yielded/auth/Password";
-import "effect/sql/SqlError";
 //#region src/drizzle/password-target.d.ts
 export declare const passwordPersistenceLayer: <E, R>(services: Effect.Effect<{
   readonly passwordPersistence: PasswordPersistence["Service"];
 }, E, R>) => Layer.Layer<PasswordPersistence, E, Exclude<R, import("effect/Scope").Scope>>;
-export declare const passwordRegistrationLayer: <Id, Registration, E, R>(tag: Context.Key<Id, PasswordRegistrationAuthority<Registration>>, services: Effect.Effect<{
+export declare const passwordRegistrationLayer: <Id, Registration, E, R>(target: Context.Key<Id, PasswordRegistrationAuthority<Registration>>, services: Effect.Effect<{
   readonly registrationAuthority: PasswordRegistrationAuthority<Registration>;
 }, E, R>) => Layer.Layer<Id, E, Exclude<R, import("effect/Scope").Scope>>;
 //#endregion

package/dist/drizzle/password-target.mjs

@@ -1,78 +1,33 @@
+import { nativeClock } from "./native-clock.mjs";
+import { coordinateNativeTarget, nativeTarget } from "./native-target.mjs";
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { sqlClientStandaloneGuard } from "./standalone-guard.mjs";
-import { CurrentPasswordSql, makeSqlPasswordPersistence } from "./password-sql.mjs";
-import { makeSqlPasswordRegistrationAuthority } from "./password-registration.mjs";
-import { CurrentPasswordPreparedTransaction, PasswordPreparedPostconditions } from "@yielded/auth-persistence/Adapter";
-import { Cause, Effect, Layer } from "effect";
-import { LifecycleHooks, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
+import { nativeProofMapping } from "./proof-target.mjs";
+import { makeNativePasswordRegistrationServices, makeNativePasswordServices } from "@yielded/auth-persistence/Adapter";
+import { Effect, Layer } from "effect";
 import { PasswordPersistence, PasswordUnavailable } from "@yielded/auth/Password";
 //#region src/drizzle/password-target.ts
-const sqlClientPasswordStandaloneGuard = (service) => sqlClientStandaloneGuard(service, () => PasswordUnavailable.make({}));
-const passwordOptions = (configuration, proofMapping, coordinated = false) => ({
-	mode: configuration.mode,
-	locking: configuration.locking,
-	standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,
-	insertIfAbsent: configuration.insertIfAbsent,
-	coordinated,
-	...proofMapping === void 0 ? {} : { proof: {
-		mapping: proofMapping,
-		configuration: {
-			mode: configuration.proof.mode,
-			locking: configuration.proof.locking,
-			standaloneGuard: Effect.void,
-			coordinated,
-			insertIfAbsent: configuration.proof.insertIfAbsent
-		}
-	} }
+const unavailable = () => PasswordUnavailable.make({});
+const mapped = (value) => ({
+	...value,
+	clock: nativeClock(value.clock)
 });
-const registrationOptions = (configuration, coordinated = false) => ({
-	mode: configuration.mode,
-	locking: configuration.locking,
-	standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,
-	generatedSubjectRows: configuration.generatedSubjectRows,
-	coordinated
+const makeTargetPasswordPersistenceServices = Effect.fnUntraced(function* (mapping, configuration, proofs) {
+	yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+	if (proofs !== void 0) yield* validateDrizzleStorage(proofs).pipe(Effect.mapError(unavailable));
+	if (configuration.mode === "batch" && (mapping.d1?.primary !== true || proofs !== void 0 && proofs.d1?.primary !== true)) return yield* unavailable();
+	const target = yield* nativeTarget(configuration);
+	return yield* target.provide(makeNativePasswordServices(target.tables, mapped(mapping), proofs === void 0 ? void 0 : nativeProofMapping(proofs)));
 });
-const makeTargetPasswordPersistenceServices = (mapping, configuration, proofMapping) => Effect.gen(function* () {
-	return { passwordPersistence: yield* makeSqlPasswordPersistence(mapping, passwordOptions(configuration, proofMapping)) };
-});
-const makeTargetPasswordRegistrationServices = (mapping, configuration) => Effect.gen(function* () {
-	return { registrationAuthority: yield* makeSqlPasswordRegistrationAuthority(mapping, registrationOptions(configuration)) };
-});
-/** Native transaction acquisition exposes SqlError; caller errors propagate unchanged. */
-const coordinateTargetPasswordPersistence = (database, mapping, configuration, proofMapping, owner) => Effect.gen(function* () {
-	const hooks = yield* LifecycleHooks;
-	if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});
-	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
-	yield* validateDrizzleStorage({
-		...mapping,
-		proof: proofMapping
-	}).pipe(Effect.mapError(() => PasswordUnavailable.make({})));
-	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
-		const postconditions = [];
-		let acceptingPostconditions = true;
-		const value = yield* owner(transaction, { passwordPersistence: yield* makeSqlPasswordPersistence(mapping, passwordOptions(configuration, proofMapping, true)).pipe(Effect.provideService(CurrentPasswordSql, transaction)) }).pipe(Effect.provideService(PasswordPreparedPostconditions, { register: (check) => {
-			if (!acceptingPostconditions) return false;
-			postconditions.push(check);
-			return true;
-		} }), Effect.ensuring(Effect.sync(() => {
-			acceptingPostconditions = false;
-		})));
-		for (const check of postconditions) yield* check.pipe(Effect.provideService(CurrentPasswordPreparedTransaction, transaction), Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => PasswordUnavailable.make({})))));
-		return value;
-	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
-});
-const coordinateTargetPasswordRegistration = (database, mapping, configuration, owner) => Effect.gen(function* () {
-	const hooks = yield* LifecycleHooks;
-	if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});
-	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
-	yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(() => PasswordUnavailable.make({})));
-	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
-		return yield* owner(transaction, { registrationAuthority: yield* makeSqlPasswordRegistrationAuthority(mapping, registrationOptions(configuration, true)).pipe(Effect.provideService(CurrentPasswordSql, transaction)) });
-	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
+const makeTargetPasswordRegistrationServices = Effect.fnUntraced(function* (mapping, configuration) {
+	yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+	const target = yield* nativeTarget(configuration);
+	return yield* target.provide(makeNativePasswordRegistrationServices(target.tables, mapping, target.batch));
 });
+const coordinateTargetPasswordPersistence = (database, mapping, configuration, body, proofs) => coordinateNativeTarget(unavailable, database, configuration, makeTargetPasswordPersistenceServices(mapping, configuration, proofs), body);
+const coordinateTargetPasswordRegistration = (database, mapping, configuration, body) => coordinateNativeTarget(unavailable, database, configuration, makeTargetPasswordRegistrationServices(mapping, configuration), body);
 const passwordPersistenceLayer = (services) => Layer.effect(PasswordPersistence, Effect.map(services, (value) => value.passwordPersistence));
-const passwordRegistrationLayer = (tag, services) => Layer.effect(tag, Effect.map(services, (value) => value.registrationAuthority));
+const passwordRegistrationLayer = (target, services) => Layer.effect(target, Effect.map(services, (value) => value.registrationAuthority));
 //#endregion
-export { coordinateTargetPasswordPersistence, coordinateTargetPasswordRegistration, makeTargetPasswordPersistenceServices, makeTargetPasswordRegistrationServices, passwordOptions, passwordPersistenceLayer, passwordRegistrationLayer, sqlClientPasswordStandaloneGuard };
+export { coordinateTargetPasswordPersistence, coordinateTargetPasswordRegistration, makeTargetPasswordPersistenceServices, makeTargetPasswordRegistrationServices, passwordPersistenceLayer, passwordRegistrationLayer };
 
 //# sourceMappingURL=password-target.mjs.map

package/dist/drizzle/password-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"password-target.mjs","names":[],"sources":["../../src/drizzle/password-target.ts"],"sourcesContent":["import {\n  CurrentPasswordPreparedTransaction,\n  type NativeDatabase,\n  type PasswordPreparedPostcondition,\n  PasswordPreparedPostconditions,\n} from \"@yielded/auth-persistence/Adapter\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport { PasswordUnavailable, PasswordPersistence } from \"@yielded/auth/Password\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { Cause, type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport {\n  makeSqlPasswordRegistrationAuthority,\n  type PasswordRegistrationAuthority,\n  type PasswordRegistrationConfiguration,\n} from \"./password-registration\";\nimport {\n  CurrentPasswordSql,\n  makeSqlPasswordPersistence,\n  type PasswordSqlConfiguration,\n  type PasswordSqlDatabase,\n  type PasswordSqlQuery,\n} from \"./password-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard, type TransactionService } from \"./standalone-guard\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nexport interface PasswordTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, PasswordUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, PasswordUnavailable>;\n  readonly insertIfAbsent: (\n    query: PasswordSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => PasswordSqlQuery;\n  readonly generatedSubjectRows: (query: PasswordSqlQuery) => PasswordSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type PasswordCoordinatorError<E> =\n  | E\n  | PasswordUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientPasswordStandaloneGuard = (\n  service: TransactionService | undefined,\n): Effect.Effect<void, PasswordUnavailable> =>\n  sqlClientStandaloneGuard(service, () => PasswordUnavailable.make({}));\n\nexport const passwordOptions = (\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n  coordinated = false,\n): PasswordSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  insertIfAbsent: configuration.insertIfAbsent,\n  coordinated,\n  ...(proofMapping === undefined\n    ? {}\n    : {\n        proof: {\n          mapping: proofMapping,\n          configuration: {\n            mode: configuration.proof.mode,\n            locking: configuration.proof.locking,\n\n            standaloneGuard: Effect.void,\n\n            coordinated,\n            insertIfAbsent: configuration.proof.insertIfAbsent,\n          },\n        },\n      }),\n});\n\nconst registrationOptions = (\n  configuration: PasswordTargetConfiguration,\n  coordinated = false,\n): PasswordRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n});\n\nexport const makeTargetPasswordPersistenceServices = (\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n) =>\n  Effect.gen(function* () {\n    return {\n      passwordPersistence: yield* makeSqlPasswordPersistence(\n        mapping,\n        passwordOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetPasswordRegistrationServices = <Registration>(\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n        mapping,\n        registrationOptions(configuration),\n      ),\n    };\n  });\n\n/** Native transaction acquisition exposes SqlError; caller errors propagate unchanged. */\nexport const coordinateTargetPasswordPersistence = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: any | undefined,\n  owner: (\n    transaction: Transaction,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks | NativeDatabase> =>\n  Effect.gen(function* (): Effect.fn.Return<\n    A,\n    PasswordCoordinatorError<E>,\n    R | LifecycleHooks | NativeDatabase\n  > {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    yield* validateDrizzleStorage({ ...mapping, proof: proofMapping }).pipe(\n      Effect.mapError(() => PasswordUnavailable.make({})),\n    );\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            const postconditions: Array<PasswordPreparedPostcondition> = [];\n            let acceptingPostconditions = true;\n\n            const value = yield* owner(transaction, {\n              passwordPersistence: yield* makeSqlPasswordPersistence(\n                mapping,\n                passwordOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(\n                  CurrentPasswordSql,\n                  transaction as unknown as PasswordSqlDatabase,\n                ),\n              ),\n            }).pipe(\n              Effect.provideService(PasswordPreparedPostconditions, {\n                register: (check) => {\n                  if (!acceptingPostconditions) return false;\n                  postconditions.push(check);\n\n                  return true;\n                },\n              }),\n              Effect.ensuring(\n                Effect.sync(() => {\n                  acceptingPostconditions = false;\n                }),\n              ),\n            );\n\n            // Application work in this transaction must not change what the\n            // password mutations committed to; a failure here rolls back both.\n            for (const check of postconditions)\n              yield* check.pipe(\n                Effect.provideService(\n                  CurrentPasswordPreparedTransaction,\n                  transaction as unknown as PasswordSqlDatabase,\n                ),\n                Effect.catchCause((cause) =>\n                  Effect.failCause(Cause.map(cause, () => PasswordUnavailable.make({}))),\n                ),\n              );\n\n            return value;\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetPasswordRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: {\n      readonly registrationAuthority: PasswordRegistrationAuthority<Registration>;\n    },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks | NativeDatabase> =>\n  Effect.gen(function* (): Effect.fn.Return<\n    A,\n    PasswordCoordinatorError<E>,\n    R | LifecycleHooks | NativeDatabase\n  > {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    yield* validateDrizzleStorage(mapping).pipe(\n      Effect.mapError(() => PasswordUnavailable.make({})),\n    );\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n                mapping,\n                registrationOptions(configuration, true),\n              ).pipe(\n                Effect.provideService(\n                  CurrentPasswordSql,\n                  transaction as unknown as PasswordSqlDatabase,\n                ),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const passwordPersistenceLayer = <E, R>(\n  services: Effect.Effect<{ readonly passwordPersistence: PasswordPersistence[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    PasswordPersistence,\n    Effect.map(services, (value) => value.passwordPersistence),\n  );\n\nexport const passwordRegistrationLayer = <Id, Registration, E, R>(\n  tag: Context.Key<Id, PasswordRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;;AA2DA,MAAa,oCACX,YAEA,yBAAyB,eAAe,oBAAoB,KAAK,CAAC,CAAC,CAAC;AAEtE,MAAa,mBACX,eACA,cACA,cAAc,WACgB;CAC9B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,gBAAgB,cAAc;CAC9B;CACA,GAAI,iBAAiB,KAAA,IACjB,CAAC,IACD,EACE,OAAO;EACL,SAAS;EACT,eAAe;GACb,MAAM,cAAc,MAAM;GAC1B,SAAS,cAAc,MAAM;GAE7B,iBAAiB,OAAO;GAExB;GACA,gBAAgB,cAAc,MAAM;EACtC;CACF,EACF;AACN;AAEA,MAAM,uBACJ,eACA,cAAc,WACyB;CACvC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;AACF;AAEA,MAAa,yCACX,SACA,eACA,iBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,qBAAqB,OAAO,2BAC1B,SACA,gBAAgB,eAAe,YAAY,CAC7C,EACF;AACF,CAAC;AAEH,MAAa,0CACX,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,qCAC5B,SACA,oBAAoB,aAAa,CACnC,EACF;AACF,CAAC;;AAGH,MAAa,uCACX,UACA,SACA,eACA,cACA,UAKA,OAAO,IAAI,aAIT;CACA,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAEvD,OAAO,uBAAuB;EAAE,GAAG;EAAS,OAAO;CAAa,CAAC,CAAC,CAAC,KACjE,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAAC,CAAC,CACpD;CAsDA,QAAO,OApDe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,MAAM,iBAAuD,CAAC;EAC9D,IAAI,0BAA0B;EAE9B,MAAM,QAAQ,OAAO,MAAM,aAAa,EACtC,qBAAqB,OAAO,2BAC1B,SACA,gBAAgB,eAAe,cAAc,IAAI,CACnD,CAAC,CAAC,KACA,OAAO,eACL,oBACA,WACF,CACF,EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,gCAAgC,EACpD,WAAW,UAAU;GACnB,IAAI,CAAC,yBAAyB,OAAO;GACrC,eAAe,KAAK,KAAK;GAEzB,OAAO;EACT,EACF,CAAC,GACD,OAAO,SACL,OAAO,WAAW;GAChB,0BAA0B;EAC5B,CAAC,CACH,CACF;EAIA,KAAK,MAAM,SAAS,gBAClB,OAAO,MAAM,KACX,OAAO,eACL,oCACA,WACF,GACA,OAAO,YAAY,UACjB,OAAO,UAAU,MAAM,IAAI,aAAa,oBAAoB,KAAK,CAAC,CAAC,CAAC,CAAC,CACvE,CACF;EAEF,OAAO;CACT,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,wCACX,UACA,SACA,eACA,UAOA,OAAO,IAAI,aAIT;CACA,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAEvD,OAAO,uBAAuB,OAAO,CAAC,CAAC,KACrC,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAAC,CAAC,CACpD;CAsBA,QAAO,OApBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,qCAC5B,SACA,oBAAoB,eAAe,IAAI,CACzC,CAAC,CAAC,KACA,OAAO,eACL,oBACA,WACF,CACF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,4BACX,aAEA,MAAM,OACJ,qBACA,OAAO,IAAI,WAAW,UAAU,MAAM,mBAAmB,CAC3D;AAEF,MAAa,6BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}
+{"version":3,"file":"password-target.mjs","names":[],"sources":["../../src/drizzle/password-target.ts"],"sourcesContent":["import {\n  makeNativePasswordServices,\n  makeNativePasswordRegistrationServices,\n  requireStandalone,\n  type AnyPasswordPersistenceMapping as SharedPasswordMapping,\n  type PasswordRegistrationAuthority,\n} from \"@yielded/auth-persistence/Adapter\";\nimport { PasswordPersistence, PasswordUnavailable } from \"@yielded/auth/Password\";\nimport { type Context, Effect, Layer } from \"effect\";\n\nimport { nativeClock } from \"./native-clock\";\nimport type { NativeDatabaseHandle } from \"./native-database\";\nimport {\n  nativeTarget,\n  coordinateNativeTarget,\n  type NativeTargetConfiguration,\n} from \"./native-target\";\nimport type {\n  AnyPasswordPersistenceMapping,\n  AnyPasswordRegistrationMapping,\n} from \"./password-model\";\nimport type { AnyProofPersistenceMapping } from \"./proof-model\";\nimport { nativeProofMapping } from \"./proof-target\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nconst unavailable = () => PasswordUnavailable.make({});\n\nexport const sqlClientPasswordStandaloneGuard = (marker: Parameters<typeof requireStandalone>[1]) =>\n  requireStandalone(unavailable, marker);\n\nconst mapped = (value: AnyPasswordPersistenceMapping): SharedPasswordMapping => ({\n  ...value,\n  clock: nativeClock(value.clock),\n});\n\nexport const makeTargetPasswordPersistenceServices = Effect.fnUntraced(function* (\n  mapping: AnyPasswordPersistenceMapping,\n  configuration: NativeTargetConfiguration,\n  proofs?: AnyProofPersistenceMapping,\n) {\n  yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n  if (proofs !== undefined)\n    yield* validateDrizzleStorage(proofs).pipe(Effect.mapError(unavailable));\n  if (\n    configuration.mode === \"batch\" &&\n    (mapping.d1?.primary !== true || (proofs !== undefined && proofs.d1?.primary !== true))\n  )\n    return yield* unavailable();\n  const target = yield* nativeTarget(configuration);\n\n  return yield* target.provide(\n    makeNativePasswordServices(\n      target.tables,\n      mapped(mapping),\n      proofs === undefined ? undefined : nativeProofMapping(proofs),\n    ),\n  );\n});\n\nexport const makeTargetPasswordRegistrationServices = Effect.fnUntraced(function* <Registration>(\n  mapping: AnyPasswordRegistrationMapping<Registration>,\n  configuration: NativeTargetConfiguration,\n) {\n  yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n  const target = yield* nativeTarget(configuration);\n\n  return yield* target.provide(\n    makeNativePasswordRegistrationServices(target.tables, mapping, target.batch),\n  );\n});\n\nexport const coordinateTargetPasswordPersistence = <Transaction, A, E, R>(\n  database: NativeDatabaseHandle,\n  mapping: AnyPasswordPersistenceMapping,\n  configuration: NativeTargetConfiguration,\n  body: (\n    transaction: Transaction,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n  proofs?: AnyProofPersistenceMapping,\n) =>\n  coordinateNativeTarget(\n    unavailable,\n    database,\n    configuration,\n    makeTargetPasswordPersistenceServices(mapping, configuration, proofs),\n    body,\n  );\n\nexport const coordinateTargetPasswordRegistration = <Registration, Transaction, A, E, R>(\n  database: NativeDatabaseHandle,\n  mapping: AnyPasswordRegistrationMapping<Registration>,\n  configuration: NativeTargetConfiguration,\n  body: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateNativeTarget(\n    unavailable,\n    database,\n    configuration,\n    makeTargetPasswordRegistrationServices(mapping, configuration),\n    body,\n  );\n\nexport const passwordPersistenceLayer = <E, R>(\n  services: Effect.Effect<{ readonly passwordPersistence: PasswordPersistence[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    PasswordPersistence,\n    Effect.map(services, (value) => value.passwordPersistence),\n  );\n\nexport const passwordRegistrationLayer = <Id, Registration, E, R>(\n  target: Context.Key<Id, PasswordRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    target,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;AAyBA,MAAM,oBAAoB,oBAAoB,KAAK,CAAC,CAAC;AAKrD,MAAM,UAAU,WAAiE;CAC/E,GAAG;CACH,OAAO,YAAY,MAAM,KAAK;AAChC;AAEA,MAAa,wCAAwC,OAAO,WAAW,WACrE,SACA,eACA,QACA;CACA,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CACxE,IAAI,WAAW,KAAA,GACb,OAAO,uBAAuB,MAAM,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CACzE,IACE,cAAc,SAAS,YACtB,QAAQ,IAAI,YAAY,QAAS,WAAW,KAAA,KAAa,OAAO,IAAI,YAAY,OAEjF,OAAO,OAAO,YAAY;CAC5B,MAAM,SAAS,OAAO,aAAa,aAAa;CAEhD,OAAO,OAAO,OAAO,QACnB,2BACE,OAAO,QACP,OAAO,OAAO,GACd,WAAW,KAAA,IAAY,KAAA,IAAY,mBAAmB,MAAM,CAC9D,CACF;AACF,CAAC;AAED,MAAa,yCAAyC,OAAO,WAAW,WACtE,SACA,eACA;CACA,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CACxE,MAAM,SAAS,OAAO,aAAa,aAAa;CAEhD,OAAO,OAAO,OAAO,QACnB,uCAAuC,OAAO,QAAQ,SAAS,OAAO,KAAK,CAC7E;AACF,CAAC;AAED,MAAa,uCACX,UACA,SACA,eACA,MAIA,WAEA,uBACE,aACA,UACA,eACA,sCAAsC,SAAS,eAAe,MAAM,GACpE,IACF;AAEF,MAAa,wCACX,UACA,SACA,eACA,SAKA,uBACE,aACA,UACA,eACA,uCAAuC,SAAS,aAAa,GAC7D,IACF;AAEF,MAAa,4BACX,aAEA,MAAM,OACJ,qBACA,OAAO,IAAI,WAAW,UAAU,MAAM,mBAAmB,CAC3D;AAEF,MAAa,6BACX,QACA,aAMA,MAAM,OACJ,QACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/pg-identity.mjs

@@ -1,8 +1,8 @@
 import { PersistenceMappingError as PersistenceMappingError$1, column, isMappedConstraintConflict, provisioningFingerprint } from "./model.mjs";
+import { NativeDatabase, nativeDatabase } from "./native-database.mjs";
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { nativeDatabase } from "./native-database.mjs";
 import { Database } from "./pg-database.mjs";
-import { NativeDatabase, withStorageValidation } from "@yielded/auth-persistence/Adapter";
+import { withStorageValidation } from "@yielded/auth-persistence/Adapter";
 import { ExternalIdentityMutation, IdentityConflict, IdentityUnavailable, SubjectProvisioned, SubjectProvisioner } from "@yielded/auth/Identity";
 import { and, eq } from "drizzle-orm";
 import { Cause, Effect, Schema } from "effect";
@@ -21,8 +21,6 @@ const makePgSubjectProvisioningServices = Effect.fnUntraced(function* (mapping)
 	const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);
 	const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);
 	const identifierTable = mapping.identifier.table;
-	const identifierNamespaceColumn = column(identifierTable, mapping.identifier.namespace);
-	const identifierValueColumn = column(identifierTable, mapping.identifier.value);
 	const findReceipt = Effect.fn("DrizzlePgIdentity.findReceipt")(function* (requestId) {
 		return (yield* db.select({
 			fingerprint: requestFingerprintColumn,
@@ -51,8 +49,7 @@ const makePgSubjectProvisioningServices = Effect.fnUntraced(function* (mapping)
 			if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
 			return findReceipt(input.requestId).pipe(Effect.flatMap((receipt) => {
 				if (receipt !== void 0 && receipt.fingerprint === fingerprint) return Effect.succeed(receipt.subjectId);
-				if (input.identifier === void 0) return IdentityConflict.make();
-				return db.select({ subjectId: column(identifierTable, mapping.identifier.subjectId) }).from(identifierTable).where(and(eq(identifierNamespaceColumn, input.identifier.namespace), eq(identifierValueColumn, input.identifier.value))).limit(1).pipe(Effect.flatMap(() => IdentityConflict.make()));
+				return IdentityConflict.make();
 			}));
 		}));
 		const subjectId = yield* mapping.subjectId.toSubject(nativeId);

package/dist/drizzle/pg-identity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pg-identity.mjs","names":["DatabaseService","PersistenceMappingError"],"sources":["../../src/drizzle/pg-identity.ts"],"sourcesContent":["import { withStorageValidation, NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  ExternalIdentityMutation,\n  IdentityConflict,\n  IdentityUnavailable,\n  SubjectProvisioned,\n  type ExternalIdentity,\n  SubjectProvisioner,\n  type SubjectProvisioningInput,\n} from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport type { SubjectId } from \"@yielded/auth/Schema\";\n/* oxlint-disable no-explicit-any -- Drizzle's generic query builders lose the concrete consumer table through a runtime column map. Assertions stay in this adapter. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgDatabase } from \"drizzle-orm/effect-postgres\";\nimport { type AnyPgTable, type PgColumn } from \"drizzle-orm/pg-core\";\nimport { Cause, Effect, Schema } from \"effect\";\n\nimport {\n  column,\n  PersistenceMappingError,\n  isMappedConstraintConflict,\n  provisioningFingerprint,\n  type ExternalIdentityTables,\n  type IdentityTables,\n  type SubjectProvisioningTables,\n} from \"./model\";\nimport { nativeDatabase } from \"./native-database\";\nimport { Database as DatabaseService } from \"./pg-database\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\ntype RuntimeDatabase = PgDatabase<any>;\n\nconst identityUnavailable = () => IdentityUnavailable.make();\nconst isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));\n\nconst mapIdentityFailure = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n  reportPersistenceFailure(effect, isIdentityFailure).pipe(\n    Effect.catchCause((cause) =>\n      Effect.failCause(\n        Cause.map(cause, (error) => (isIdentityFailure(error) ? error : identityUnavailable())),\n      ),\n    ),\n  );\n\nexport const makePgSubjectProvisioningServices = Effect.fnUntraced(function* <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) {\n  const database = yield* DatabaseService;\n\n  yield* validateDrizzleStorage(mapping).pipe(\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n    Effect.mapError(() => IdentityUnavailable.make()),\n  );\n\n  const db = database as RuntimeDatabase;\n  const requestTable = mapping.provisioningRequest.table;\n  const requestIdColumn = column(requestTable, mapping.provisioningRequest.requestId);\n  const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);\n  const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);\n  const identifierTable = mapping.identifier.table;\n  const identifierNamespaceColumn = column(identifierTable, mapping.identifier.namespace);\n  const identifierValueColumn = column(identifierTable, mapping.identifier.value);\n\n  const findReceipt = Effect.fn(\"DrizzlePgIdentity.findReceipt\")(function* (requestId: string) {\n    const rows = yield* db\n      .select({\n        fingerprint: requestFingerprintColumn as PgColumn,\n        subjectId: requestSubjectColumn as PgColumn,\n      })\n      .from(requestTable as any)\n      .where(eq(requestIdColumn, requestId))\n      .limit(1);\n\n    return rows[0];\n  });\n\n  const provision = Effect.fn(\"DrizzlePgIdentity.provision\")(function* (\n    input: SubjectProvisioningInput,\n  ) {\n    const fingerprint = provisioningFingerprint(input);\n    const existing = yield* findReceipt(input.requestId);\n\n    if (existing !== undefined) {\n      if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();\n      const id = yield* mapping.subjectId.toSubject(existing.subjectId as NativeId);\n\n      return SubjectProvisioned.make({ subjectId: id });\n    }\n\n    const attempt = db.transaction((tx) =>\n      Effect.gen(function* () {\n        const allocated =\n          mapping.subject.allocateId === undefined ? undefined : yield* mapping.subject.allocateId;\n\n        const inserted = yield* tx\n          .insert(mapping.subject.table as any)\n          .values(mapping.subject.encodeInsert(input, allocated) as any)\n          .returning({ id: column(mapping.subject.table, mapping.subject.id) as PgColumn });\n\n        const nativeId = (inserted[0]?.id ?? allocated) as NativeId | undefined;\n\n        if (nativeId === undefined) {\n          return yield* PersistenceMappingError.make({\n            operation: \"provisionSubject.generatedId\",\n            cause: new Error(\"subject insert did not return its native id\"),\n          });\n        }\n        if (input.identifier !== undefined) {\n          yield* tx\n            .insert(identifierTable as any)\n            .values(\n              mapping.identifier.encodeInsert(input.identifier, nativeId, input.verifiedAt) as any,\n            );\n        }\n        yield* tx\n          .insert(requestTable as any)\n          .values(\n            mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, nativeId) as any,\n          );\n\n        return nativeId;\n      }),\n    );\n\n    const nativeId = yield* attempt.pipe(\n      Effect.catchCause(\n        (\n          cause,\n        ): Effect.Effect<\n          NativeId,\n          | Effect.Error<typeof attempt>\n          | Effect.Error<ReturnType<typeof findReceipt>>\n          | IdentityConflict\n        > => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return findReceipt(input.requestId).pipe(\n            Effect.flatMap((receipt) => {\n              if (receipt !== undefined && receipt.fingerprint === fingerprint) {\n                return Effect.succeed(receipt.subjectId as NativeId);\n              }\n              if (input.identifier === undefined) return IdentityConflict.make();\n\n              return db\n                .select({\n                  subjectId: column(identifierTable, mapping.identifier.subjectId) as PgColumn,\n                })\n                .from(identifierTable as any)\n                .where(\n                  and(\n                    eq(identifierNamespaceColumn, input.identifier.namespace),\n                    eq(identifierValueColumn, input.identifier.value),\n                  ),\n                )\n                .limit(1)\n                .pipe(Effect.flatMap(() => IdentityConflict.make()));\n            }),\n          );\n        },\n      ),\n    );\n\n    const subjectId = yield* mapping.subjectId.toSubject(nativeId);\n\n    return SubjectProvisioned.make({ subjectId });\n  }, mapIdentityFailure);\n\n  return {\n    subjectProvisioner: SubjectProvisioner.of({ provision }),\n  } as const;\n});\n\nexport const makePgExternalIdentityServices = Effect.fnUntraced(function* <\n  Subject extends AnyPgTable,\n  External extends AnyPgTable,\n  NativeId,\n>(mapping: ExternalIdentityTables<Subject, External, NativeId>) {\n  const database = yield* DatabaseService;\n\n  yield* validateDrizzleStorage(mapping).pipe(\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n    Effect.mapError(() => IdentityUnavailable.make()),\n  );\n\n  const db = database as RuntimeDatabase;\n  const externalTable = mapping.externalIdentity.table;\n\n  const externalProviderColumn = column(\n    externalTable,\n    mapping.externalIdentity.provider,\n  ) as PgColumn;\n\n  const externalIssuerColumn = column(externalTable, mapping.externalIdentity.issuer) as PgColumn;\n  const externalSubjectColumn = column(externalTable, mapping.externalIdentity.subject) as PgColumn;\n\n  const externalSubjectIdColumn = column(\n    externalTable,\n    mapping.externalIdentity.subjectId,\n  ) as PgColumn;\n\n  const subjectIdColumn = column(mapping.subject.table, mapping.subject.id) as PgColumn;\n  const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status) as PgColumn;\n\n  const bind = Effect.fn(\"DrizzlePgIdentity.bindExternalIdentity\")(function* (\n    subjectId: SubjectId,\n    identity: ExternalIdentity,\n  ) {\n    const nativeId = yield* mapping.subjectId.toNative(subjectId);\n\n    const decision = yield* db\n      .transaction((tx) =>\n        Effect.gen(function* () {\n          const subjects = yield* tx\n            .select({ status: subjectStatusColumn })\n            .from(mapping.subject.table as any)\n            .where(eq(subjectIdColumn, nativeId))\n            .for(\"update\")\n            .limit(1);\n\n          if (subjects[0] === undefined || !mapping.subject.isActiveStatus(subjects[0].status))\n            return { _tag: \"conflict\" } as const;\n\n          const links = yield* tx\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .for(\"update\")\n            .limit(1);\n\n          if (links[0] !== undefined)\n            return mapping.subjectId.equals(links[0].subjectId as NativeId, nativeId)\n              ? ({ _tag: \"bound\" } as const)\n              : ({ _tag: \"conflict\" } as const);\n          yield* tx\n            .insert(externalTable as any)\n            .values(mapping.externalIdentity.encodeInsert(identity, nativeId) as any);\n\n          return { _tag: \"bound\" } as const;\n        }),\n      )\n      .pipe(\n        Effect.catchCause((cause) => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return db\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .limit(1)\n            .pipe(\n              Effect.map((rows) =>\n                rows[0] !== undefined &&\n                mapping.subjectId.equals(rows[0].subjectId as NativeId, nativeId)\n                  ? ({ _tag: \"bound\" } as const)\n                  : ({ _tag: \"conflict\" } as const),\n              ),\n            );\n        }),\n      );\n\n    if (decision._tag === \"conflict\") return yield* IdentityConflict.make();\n  }, mapIdentityFailure);\n\n  return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) } as const;\n});\n\nexport const makePgIdentityServices = Effect.fnUntraced(function* <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  External extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) {\n  return {\n    ...(yield* makePgSubjectProvisioningServices(mapping)),\n    ...(yield* makePgExternalIdentityServices(mapping)),\n  };\n}, withStorageValidation);\n"],"mappings":";;;;;;;;;;;AAiCA,MAAM,4BAA4B,oBAAoB,KAAK;AAC3D,MAAM,oBAAoB,OAAO,GAAG,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,CAAC,CAAC;AAEzF,MAAM,sBAA+B,WACnC,yBAAyB,QAAQ,iBAAiB,CAAC,CAAC,KAClD,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAAW,kBAAkB,KAAK,IAAI,QAAQ,oBAAoB,CAAE,CACxF,CACF,CACF;AAEF,MAAa,oCAAoC,OAAO,WAAW,WAKjE,SAA4E;CAC5E,MAAM,WAAW,OAAOA;CAExB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KACrC,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,GAC3E,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAClD;CAEA,MAAM,KAAK;CACX,MAAM,eAAe,QAAQ,oBAAoB;CACjD,MAAM,kBAAkB,OAAO,cAAc,QAAQ,oBAAoB,SAAS;CAClF,MAAM,2BAA2B,OAAO,cAAc,QAAQ,oBAAoB,WAAW;CAC7F,MAAM,uBAAuB,OAAO,cAAc,QAAQ,oBAAoB,SAAS;CACvF,MAAM,kBAAkB,QAAQ,WAAW;CAC3C,MAAM,4BAA4B,OAAO,iBAAiB,QAAQ,WAAW,SAAS;CACtF,MAAM,wBAAwB,OAAO,iBAAiB,QAAQ,WAAW,KAAK;CAE9E,MAAM,cAAc,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAAW,WAAmB;EAU3F,QAAO,OATa,GACjB,OAAO;GACN,aAAa;GACb,WAAW;EACb,CAAC,CAAC,CACD,KAAK,YAAmB,CAAC,CACzB,MAAM,GAAG,iBAAiB,SAAS,CAAC,CAAC,CACrC,MAAM,CAAC,EAAA,CAEE;CACd,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,6BAA6B,CAAC,CAAC,WACzD,OACA;EACA,MAAM,cAAc,wBAAwB,KAAK;EACjD,MAAM,WAAW,OAAO,YAAY,MAAM,SAAS;EAEnD,IAAI,aAAa,KAAA,GAAW;GAC1B,IAAI,SAAS,gBAAgB,aAAa,OAAO,OAAO,iBAAiB,KAAK;GAC9E,MAAM,KAAK,OAAO,QAAQ,UAAU,UAAU,SAAS,SAAqB;GAE5E,OAAO,mBAAmB,KAAK,EAAE,WAAW,GAAG,CAAC;EAClD;EAqCA,MAAM,WAAW,OAnCD,GAAG,aAAa,OAC9B,OAAO,IAAI,aAAa;GACtB,MAAM,YACJ,QAAQ,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,QAAQ;GAOhF,MAAM,YAAY,OALM,GACrB,OAAO,QAAQ,QAAQ,KAAY,CAAC,CACpC,OAAO,QAAQ,QAAQ,aAAa,OAAO,SAAS,CAAQ,CAAC,CAC7D,UAAU,EAAE,IAAI,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE,EAAc,CAAC,EAAA,CAEvD,EAAE,EAAE,MAAM;GAErC,IAAI,aAAa,KAAA,GACf,OAAO,OAAOC,0BAAwB,KAAK;IACzC,WAAW;IACX,uBAAO,IAAI,MAAM,6CAA6C;GAChE,CAAC;GAEH,IAAI,MAAM,eAAe,KAAA,GACvB,OAAO,GACJ,OAAO,eAAsB,CAAC,CAC9B,OACC,QAAQ,WAAW,aAAa,MAAM,YAAY,UAAU,MAAM,UAAU,CAC9E;GAEJ,OAAO,GACJ,OAAO,YAAmB,CAAC,CAC3B,OACC,QAAQ,oBAAoB,aAAa,MAAM,WAAW,aAAa,QAAQ,CACjF;GAEF,OAAO;EACT,CAAC,CAG2B,CAAC,CAAC,KAC9B,OAAO,YAEH,UAMG;GACH,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,YAAY,MAAM,SAAS,CAAC,CAAC,KAClC,OAAO,SAAS,YAAY;IAC1B,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,aACnD,OAAO,OAAO,QAAQ,QAAQ,SAAqB;IAErD,IAAI,MAAM,eAAe,KAAA,GAAW,OAAO,iBAAiB,KAAK;IAEjE,OAAO,GACJ,OAAO,EACN,WAAW,OAAO,iBAAiB,QAAQ,WAAW,SAAS,EACjE,CAAC,CAAC,CACD,KAAK,eAAsB,CAAC,CAC5B,MACC,IACE,GAAG,2BAA2B,MAAM,WAAW,SAAS,GACxD,GAAG,uBAAuB,MAAM,WAAW,KAAK,CAClD,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KAAK,OAAO,cAAc,iBAAiB,KAAK,CAAC,CAAC;GACvD,CAAC,CACH;EACF,CACF,CACF;EAEA,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,QAAQ;EAE7D,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;CAC9C,GAAG,kBAAkB;CAErB,OAAO,EACL,oBAAoB,mBAAmB,GAAG,EAAE,UAAU,CAAC,EACzD;AACF,CAAC;AAED,MAAa,iCAAiC,OAAO,WAAW,WAI9D,SAA8D;CAC9D,MAAM,WAAW,OAAOD;CAExB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KACrC,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,GAC3E,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAClD;CAEA,MAAM,KAAK;CACX,MAAM,gBAAgB,QAAQ,iBAAiB;CAE/C,MAAM,yBAAyB,OAC7B,eACA,QAAQ,iBAAiB,QAC3B;CAEA,MAAM,uBAAuB,OAAO,eAAe,QAAQ,iBAAiB,MAAM;CAClF,MAAM,wBAAwB,OAAO,eAAe,QAAQ,iBAAiB,OAAO;CAEpF,MAAM,0BAA0B,OAC9B,eACA,QAAQ,iBAAiB,SAC3B;CAEA,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CACxE,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAEhF,MAAM,OAAO,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAC/D,WACA,UACA;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,SAAS,SAAS;EAyE5D,KAAI,OAvEoB,GACrB,aAAa,OACZ,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,GACrB,OAAO,EAAE,QAAQ,oBAAoB,CAAC,CAAC,CACvC,KAAK,QAAQ,QAAQ,KAAY,CAAC,CAClC,MAAM,GAAG,iBAAiB,QAAQ,CAAC,CAAC,CACpC,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,SAAS,OAAO,KAAA,KAAa,CAAC,QAAQ,QAAQ,eAAe,SAAS,EAAE,CAAC,MAAM,GACjF,OAAO,EAAE,MAAM,WAAW;GAE5B,MAAM,QAAQ,OAAO,GAClB,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,MAAM,OAAO,KAAA,GACf,OAAO,QAAQ,UAAU,OAAO,MAAM,EAAE,CAAC,WAAuB,QAAQ,IACnE,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW;GAC1B,OAAO,GACJ,OAAO,aAAoB,CAAC,CAC5B,OAAO,QAAQ,iBAAiB,aAAa,UAAU,QAAQ,CAAQ;GAE1E,OAAO,EAAE,MAAM,QAAQ;EACzB,CAAC,CACH,CAAC,CACA,KACC,OAAO,YAAY,UAAU;GAC3B,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,GACJ,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KACC,OAAO,KAAK,SACV,KAAK,OAAO,KAAA,KACZ,QAAQ,UAAU,OAAO,KAAK,EAAE,CAAC,WAAuB,QAAQ,IAC3D,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW,CAC1B,CACF;EACJ,CAAC,CACH,EAAA,CAEW,SAAS,YAAY,OAAO,OAAO,iBAAiB,KAAK;CACxE,GAAG,kBAAkB;CAErB,OAAO,EAAE,0BAA0B,yBAAyB,GAAG,EAAE,KAAK,CAAC,EAAE;AAC3E,CAAC;AAED,MAAa,yBAAyB,OAAO,WAAW,WAMtD,SAA2E;CAC3E,OAAO;EACL,GAAI,OAAO,kCAAkC,OAAO;EACpD,GAAI,OAAO,+BAA+B,OAAO;CACnD;AACF,GAAG,qBAAqB"}
+{"version":3,"file":"pg-identity.mjs","names":["DatabaseService","PersistenceMappingError"],"sources":["../../src/drizzle/pg-identity.ts"],"sourcesContent":["import { withStorageValidation } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  ExternalIdentityMutation,\n  IdentityConflict,\n  IdentityUnavailable,\n  SubjectProvisioned,\n  type ExternalIdentity,\n  SubjectProvisioner,\n  type SubjectProvisioningInput,\n} from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport type { SubjectId } from \"@yielded/auth/Schema\";\n/* oxlint-disable no-explicit-any -- Drizzle's generic query builders lose the concrete consumer table through a runtime column map. Assertions stay in this adapter. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgDatabase } from \"drizzle-orm/effect-postgres\";\nimport { type AnyPgTable, type PgColumn } from \"drizzle-orm/pg-core\";\nimport { Cause, Effect, Schema } from \"effect\";\n\nimport {\n  column,\n  PersistenceMappingError,\n  isMappedConstraintConflict,\n  provisioningFingerprint,\n  type ExternalIdentityTables,\n  type IdentityTables,\n  type SubjectProvisioningTables,\n} from \"./model\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport { Database as DatabaseService } from \"./pg-database\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\ntype RuntimeDatabase = PgDatabase<any>;\n\nconst identityUnavailable = () => IdentityUnavailable.make();\nconst isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));\n\nconst mapIdentityFailure = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n  reportPersistenceFailure(effect, isIdentityFailure).pipe(\n    Effect.catchCause((cause) =>\n      Effect.failCause(\n        Cause.map(cause, (error) => (isIdentityFailure(error) ? error : identityUnavailable())),\n      ),\n    ),\n  );\n\nexport const makePgSubjectProvisioningServices = Effect.fnUntraced(function* <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) {\n  const database = yield* DatabaseService;\n\n  yield* validateDrizzleStorage(mapping).pipe(\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n    Effect.mapError(() => IdentityUnavailable.make()),\n  );\n\n  const db = database as RuntimeDatabase;\n  const requestTable = mapping.provisioningRequest.table;\n  const requestIdColumn = column(requestTable, mapping.provisioningRequest.requestId);\n  const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);\n  const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);\n  const identifierTable = mapping.identifier.table;\n\n  const findReceipt = Effect.fn(\"DrizzlePgIdentity.findReceipt\")(function* (requestId: string) {\n    const rows = yield* db\n      .select({\n        fingerprint: requestFingerprintColumn as PgColumn,\n        subjectId: requestSubjectColumn as PgColumn,\n      })\n      .from(requestTable as any)\n      .where(eq(requestIdColumn, requestId))\n      .limit(1);\n\n    return rows[0];\n  });\n\n  const provision = Effect.fn(\"DrizzlePgIdentity.provision\")(function* (\n    input: SubjectProvisioningInput,\n  ) {\n    const fingerprint = provisioningFingerprint(input);\n    const existing = yield* findReceipt(input.requestId);\n\n    if (existing !== undefined) {\n      if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();\n      const id = yield* mapping.subjectId.toSubject(existing.subjectId as NativeId);\n\n      return SubjectProvisioned.make({ subjectId: id });\n    }\n\n    const attempt = db.transaction((tx) =>\n      Effect.gen(function* () {\n        const allocated =\n          mapping.subject.allocateId === undefined ? undefined : yield* mapping.subject.allocateId;\n\n        const inserted = yield* tx\n          .insert(mapping.subject.table as any)\n          .values(mapping.subject.encodeInsert(input, allocated) as any)\n          .returning({ id: column(mapping.subject.table, mapping.subject.id) as PgColumn });\n\n        const nativeId = (inserted[0]?.id ?? allocated) as NativeId | undefined;\n\n        if (nativeId === undefined) {\n          return yield* PersistenceMappingError.make({\n            operation: \"provisionSubject.generatedId\",\n            cause: new Error(\"subject insert did not return its native id\"),\n          });\n        }\n        if (input.identifier !== undefined) {\n          yield* tx\n            .insert(identifierTable as any)\n            .values(\n              mapping.identifier.encodeInsert(input.identifier, nativeId, input.verifiedAt) as any,\n            );\n        }\n        yield* tx\n          .insert(requestTable as any)\n          .values(\n            mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, nativeId) as any,\n          );\n\n        return nativeId;\n      }),\n    );\n\n    const nativeId = yield* attempt.pipe(\n      Effect.catchCause(\n        (\n          cause,\n        ): Effect.Effect<\n          NativeId,\n          | Effect.Error<typeof attempt>\n          | Effect.Error<ReturnType<typeof findReceipt>>\n          | IdentityConflict\n        > => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return findReceipt(input.requestId).pipe(\n            Effect.flatMap((receipt) => {\n              if (receipt !== undefined && receipt.fingerprint === fingerprint) {\n                return Effect.succeed(receipt.subjectId as NativeId);\n              }\n\n              return IdentityConflict.make();\n            }),\n          );\n        },\n      ),\n    );\n\n    const subjectId = yield* mapping.subjectId.toSubject(nativeId);\n\n    return SubjectProvisioned.make({ subjectId });\n  }, mapIdentityFailure);\n\n  return {\n    subjectProvisioner: SubjectProvisioner.of({ provision }),\n  } as const;\n});\n\nexport const makePgExternalIdentityServices = Effect.fnUntraced(function* <\n  Subject extends AnyPgTable,\n  External extends AnyPgTable,\n  NativeId,\n>(mapping: ExternalIdentityTables<Subject, External, NativeId>) {\n  const database = yield* DatabaseService;\n\n  yield* validateDrizzleStorage(mapping).pipe(\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n    Effect.mapError(() => IdentityUnavailable.make()),\n  );\n\n  const db = database as RuntimeDatabase;\n  const externalTable = mapping.externalIdentity.table;\n\n  const externalProviderColumn = column(\n    externalTable,\n    mapping.externalIdentity.provider,\n  ) as PgColumn;\n\n  const externalIssuerColumn = column(externalTable, mapping.externalIdentity.issuer) as PgColumn;\n  const externalSubjectColumn = column(externalTable, mapping.externalIdentity.subject) as PgColumn;\n\n  const externalSubjectIdColumn = column(\n    externalTable,\n    mapping.externalIdentity.subjectId,\n  ) as PgColumn;\n\n  const subjectIdColumn = column(mapping.subject.table, mapping.subject.id) as PgColumn;\n  const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status) as PgColumn;\n\n  const bind = Effect.fn(\"DrizzlePgIdentity.bindExternalIdentity\")(function* (\n    subjectId: SubjectId,\n    identity: ExternalIdentity,\n  ) {\n    const nativeId = yield* mapping.subjectId.toNative(subjectId);\n\n    const decision = yield* db\n      .transaction((tx) =>\n        Effect.gen(function* () {\n          const subjects = yield* tx\n            .select({ status: subjectStatusColumn })\n            .from(mapping.subject.table as any)\n            .where(eq(subjectIdColumn, nativeId))\n            .for(\"update\")\n            .limit(1);\n\n          if (subjects[0] === undefined || !mapping.subject.isActiveStatus(subjects[0].status))\n            return { _tag: \"conflict\" } as const;\n\n          const links = yield* tx\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .for(\"update\")\n            .limit(1);\n\n          if (links[0] !== undefined)\n            return mapping.subjectId.equals(links[0].subjectId as NativeId, nativeId)\n              ? ({ _tag: \"bound\" } as const)\n              : ({ _tag: \"conflict\" } as const);\n          yield* tx\n            .insert(externalTable as any)\n            .values(mapping.externalIdentity.encodeInsert(identity, nativeId) as any);\n\n          return { _tag: \"bound\" } as const;\n        }),\n      )\n      .pipe(\n        Effect.catchCause((cause) => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return db\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .limit(1)\n            .pipe(\n              Effect.map((rows) =>\n                rows[0] !== undefined &&\n                mapping.subjectId.equals(rows[0].subjectId as NativeId, nativeId)\n                  ? ({ _tag: \"bound\" } as const)\n                  : ({ _tag: \"conflict\" } as const),\n              ),\n            );\n        }),\n      );\n\n    if (decision._tag === \"conflict\") return yield* IdentityConflict.make();\n  }, mapIdentityFailure);\n\n  return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) } as const;\n});\n\nexport const makePgIdentityServices = Effect.fnUntraced(function* <\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  External extends AnyPgTable,\n  Request extends AnyPgTable,\n  NativeId,\n>(mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) {\n  return {\n    ...(yield* makePgSubjectProvisioningServices(mapping)),\n    ...(yield* makePgExternalIdentityServices(mapping)),\n  };\n}, withStorageValidation);\n"],"mappings":";;;;;;;;;;;AAiCA,MAAM,4BAA4B,oBAAoB,KAAK;AAC3D,MAAM,oBAAoB,OAAO,GAAG,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,CAAC,CAAC;AAEzF,MAAM,sBAA+B,WACnC,yBAAyB,QAAQ,iBAAiB,CAAC,CAAC,KAClD,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAAW,kBAAkB,KAAK,IAAI,QAAQ,oBAAoB,CAAE,CACxF,CACF,CACF;AAEF,MAAa,oCAAoC,OAAO,WAAW,WAKjE,SAA4E;CAC5E,MAAM,WAAW,OAAOA;CAExB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KACrC,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,GAC3E,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAClD;CAEA,MAAM,KAAK;CACX,MAAM,eAAe,QAAQ,oBAAoB;CACjD,MAAM,kBAAkB,OAAO,cAAc,QAAQ,oBAAoB,SAAS;CAClF,MAAM,2BAA2B,OAAO,cAAc,QAAQ,oBAAoB,WAAW;CAC7F,MAAM,uBAAuB,OAAO,cAAc,QAAQ,oBAAoB,SAAS;CACvF,MAAM,kBAAkB,QAAQ,WAAW;CAE3C,MAAM,cAAc,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAAW,WAAmB;EAU3F,QAAO,OATa,GACjB,OAAO;GACN,aAAa;GACb,WAAW;EACb,CAAC,CAAC,CACD,KAAK,YAAmB,CAAC,CACzB,MAAM,GAAG,iBAAiB,SAAS,CAAC,CAAC,CACrC,MAAM,CAAC,EAAA,CAEE;CACd,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,6BAA6B,CAAC,CAAC,WACzD,OACA;EACA,MAAM,cAAc,wBAAwB,KAAK;EACjD,MAAM,WAAW,OAAO,YAAY,MAAM,SAAS;EAEnD,IAAI,aAAa,KAAA,GAAW;GAC1B,IAAI,SAAS,gBAAgB,aAAa,OAAO,OAAO,iBAAiB,KAAK;GAC9E,MAAM,KAAK,OAAO,QAAQ,UAAU,UAAU,SAAS,SAAqB;GAE5E,OAAO,mBAAmB,KAAK,EAAE,WAAW,GAAG,CAAC;EAClD;EAqCA,MAAM,WAAW,OAnCD,GAAG,aAAa,OAC9B,OAAO,IAAI,aAAa;GACtB,MAAM,YACJ,QAAQ,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,QAAQ;GAOhF,MAAM,YAAY,OALM,GACrB,OAAO,QAAQ,QAAQ,KAAY,CAAC,CACpC,OAAO,QAAQ,QAAQ,aAAa,OAAO,SAAS,CAAQ,CAAC,CAC7D,UAAU,EAAE,IAAI,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE,EAAc,CAAC,EAAA,CAEvD,EAAE,EAAE,MAAM;GAErC,IAAI,aAAa,KAAA,GACf,OAAO,OAAOC,0BAAwB,KAAK;IACzC,WAAW;IACX,uBAAO,IAAI,MAAM,6CAA6C;GAChE,CAAC;GAEH,IAAI,MAAM,eAAe,KAAA,GACvB,OAAO,GACJ,OAAO,eAAsB,CAAC,CAC9B,OACC,QAAQ,WAAW,aAAa,MAAM,YAAY,UAAU,MAAM,UAAU,CAC9E;GAEJ,OAAO,GACJ,OAAO,YAAmB,CAAC,CAC3B,OACC,QAAQ,oBAAoB,aAAa,MAAM,WAAW,aAAa,QAAQ,CACjF;GAEF,OAAO;EACT,CAAC,CAG2B,CAAC,CAAC,KAC9B,OAAO,YAEH,UAMG;GACH,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,YAAY,MAAM,SAAS,CAAC,CAAC,KAClC,OAAO,SAAS,YAAY;IAC1B,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,aACnD,OAAO,OAAO,QAAQ,QAAQ,SAAqB;IAGrD,OAAO,iBAAiB,KAAK;GAC/B,CAAC,CACH;EACF,CACF,CACF;EAEA,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,QAAQ;EAE7D,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;CAC9C,GAAG,kBAAkB;CAErB,OAAO,EACL,oBAAoB,mBAAmB,GAAG,EAAE,UAAU,CAAC,EACzD;AACF,CAAC;AAED,MAAa,iCAAiC,OAAO,WAAW,WAI9D,SAA8D;CAC9D,MAAM,WAAW,OAAOD;CAExB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KACrC,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,GAC3E,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAClD;CAEA,MAAM,KAAK;CACX,MAAM,gBAAgB,QAAQ,iBAAiB;CAE/C,MAAM,yBAAyB,OAC7B,eACA,QAAQ,iBAAiB,QAC3B;CAEA,MAAM,uBAAuB,OAAO,eAAe,QAAQ,iBAAiB,MAAM;CAClF,MAAM,wBAAwB,OAAO,eAAe,QAAQ,iBAAiB,OAAO;CAEpF,MAAM,0BAA0B,OAC9B,eACA,QAAQ,iBAAiB,SAC3B;CAEA,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CACxE,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAEhF,MAAM,OAAO,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAC/D,WACA,UACA;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,SAAS,SAAS;EAyE5D,KAAI,OAvEoB,GACrB,aAAa,OACZ,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,GACrB,OAAO,EAAE,QAAQ,oBAAoB,CAAC,CAAC,CACvC,KAAK,QAAQ,QAAQ,KAAY,CAAC,CAClC,MAAM,GAAG,iBAAiB,QAAQ,CAAC,CAAC,CACpC,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,SAAS,OAAO,KAAA,KAAa,CAAC,QAAQ,QAAQ,eAAe,SAAS,EAAE,CAAC,MAAM,GACjF,OAAO,EAAE,MAAM,WAAW;GAE5B,MAAM,QAAQ,OAAO,GAClB,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,MAAM,OAAO,KAAA,GACf,OAAO,QAAQ,UAAU,OAAO,MAAM,EAAE,CAAC,WAAuB,QAAQ,IACnE,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW;GAC1B,OAAO,GACJ,OAAO,aAAoB,CAAC,CAC5B,OAAO,QAAQ,iBAAiB,aAAa,UAAU,QAAQ,CAAQ;GAE1E,OAAO,EAAE,MAAM,QAAQ;EACzB,CAAC,CACH,CAAC,CACA,KACC,OAAO,YAAY,UAAU;GAC3B,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,GACJ,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KACC,OAAO,KAAK,SACV,KAAK,OAAO,KAAA,KACZ,QAAQ,UAAU,OAAO,KAAK,EAAE,CAAC,WAAuB,QAAQ,IAC3D,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW,CAC1B,CACF;EACJ,CAAC,CACH,EAAA,CAEW,SAAS,YAAY,OAAO,OAAO,iBAAiB,KAAK;CACxE,GAAG,kBAAkB;CAErB,OAAO,EAAE,0BAA0B,yBAAyB,GAAG,EAAE,KAAK,CAAC,EAAE;AAC3E,CAAC;AAED,MAAa,yBAAyB,OAAO,WAAW,WAMtD,SAA2E;CAC3E,OAAO;EACL,GAAI,OAAO,kCAAkC,OAAO;EACpD,GAAI,OAAO,+BAA+B,OAAO;CACnD;AACF,GAAG,qBAAqB"}

package/dist/drizzle/phone-drivers.mjs

@@ -0,0 +1,24 @@
+import { NativeDatabase, nativeDatabase } from "./native-database.mjs";
+import { coordinateTargetPhonePersistence, makeTargetPhonePersistenceServices } from "./phone-target.mjs";
+import { Effect } from "effect";
+import { PhonePersistence, PhoneSignInTargets } from "@yielded/auth/PhoneOtp";
+//#region src/drizzle/phone-drivers.ts
+/** Physical driver selection; the phone workflow has one implementation.
+* Erase only foreign table/ID callback variance at the validated mapping boundary;
+* decoded phone and subject values still pass through their owning codecs. */
+const makePhoneTarget = (databaseService, configuration) => {
+	function coordinatePhonePersistence(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetPhonePersistence(database, options.mapping, configuration, (transaction, services) => {
+			const work = body.pipe(Effect.provideService(PhonePersistence, services.phonePersistence), Effect.provideService(PhoneSignInTargets, services.phoneSignInTargets));
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	return {
+		makePhonePersistenceServices: (mapping) => makeTargetPhonePersistenceServices(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		coordinatePhonePersistence
+	};
+};
+//#endregion
+export { makePhoneTarget };
+
+//# sourceMappingURL=phone-drivers.mjs.map

package/dist/drizzle/phone-drivers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-drivers.mjs","names":[],"sources":["../../src/drizzle/phone-drivers.ts"],"sourcesContent":["import type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  PhonePersistence,\n  PhoneSignInTargets,\n  type PhoneConfigurationError,\n  type PhoneOtpUnavailable,\n} from \"@yielded/auth/PhoneOtp\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Context, Effect, type Crypto } from \"effect\";\n\nimport type { NativeDriverDatabase, NativeDriverTransaction } from \"./driver-types\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport type { NativeTargetConfiguration } from \"./native-target\";\nimport type { AnyPhoneMapping, PhoneMapping } from \"./phone-model\";\nimport {\n  coordinateTargetPhonePersistence,\n  makeTargetPhonePersistenceServices,\n} from \"./phone-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n/** Physical driver selection; the phone workflow has one implementation.\n * Erase only foreign table/ID callback variance at the validated mapping boundary;\n * decoded phone and subject values still pass through their owning codecs. */\nexport const makePhoneTarget = <DatabaseId, D extends NativeDriverDatabase>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: NativeTargetConfiguration,\n) => {\n  function coordinatePhonePersistence<\n    Database extends D,\n    Subject extends Table,\n    Identifier extends Table,\n    Credential extends Table,\n    Proof extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | PhoneOtpUnavailable | PhoneConfigurationError,\n    Exclude<R, PhonePersistence | PhoneSignInTargets> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinatePhonePersistence<\n    Database extends D,\n    Subject extends Table,\n    Identifier extends Table,\n    Credential extends Table,\n    Proof extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | PhoneOtpUnavailable | PhoneConfigurationError,\n    Exclude<R, PhonePersistence | PhoneSignInTargets | TxId> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinatePhonePersistence<\n    Database extends D,\n    Subject extends Table,\n    Identifier extends Table,\n    Credential extends Table,\n    Proof extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>;\n      readonly transaction?: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetPhonePersistence(\n        database,\n        options.mapping as unknown as AnyPhoneMapping,\n        configuration,\n        (transaction: NativeDriverTransaction<Database>, services) => {\n          const work = body.pipe(\n            Effect.provideService(PhonePersistence, services.phonePersistence),\n            Effect.provideService(PhoneSignInTargets, services.phoneSignInTargets),\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    makePhonePersistenceServices: <\n      Subject extends Table,\n      Identifier extends Table,\n      Credential extends Table,\n      Proof extends Table,\n      NativeId,\n    >(\n      mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>,\n    ) =>\n      makeTargetPhonePersistenceServices(mapping as unknown as AnyPhoneMapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePhonePersistence,\n  };\n};\n"],"mappings":";;;;;;;;AAuBA,MAAa,mBACX,iBACA,kBACG;CAuDH,SAAS,2BAeP,SACA,SAQA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,iCACE,UACA,QAAQ,SACR,gBACC,aAAgD,aAAa;GAC5D,MAAM,OAAO,KAAK,KAChB,OAAO,eAAe,kBAAkB,SAAS,gBAAgB,GACjE,OAAO,eAAe,oBAAoB,SAAS,kBAAkB,CACvE;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,+BAOE,YAEA,mCAAmC,SAAuC,aAAa,CAAC,CAAC,KACvF,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}

package/dist/drizzle/phone-model.d.mts

@@ -1,113 +1,22 @@
-import { PersistenceMappingError } from "./model.mjs";
-import { AnyProofPersistenceMapping, ProofPersistenceMapping } from "./proof-model.mjs";
-import { InferInsertModel, InferSelectModel, SQL, Table } from "drizzle-orm";
+import { DrizzleTableModel } from "./table-model.mjs";
+import { ProofPersistenceMapping } from "./proof-model.mjs";
+import { PersistenceMappingError as PersistenceMappingError$1 } from "./model.mjs";
+import * as Shared from "@yielded/auth-persistence/Adapter";
+import { requiredPhoneConstraints } from "@yielded/auth-persistence/Adapter";
+import { SQL, Table } from "drizzle-orm";
 import { Effect, Layer } from "effect";
-import { AuthenticationRequirement } from "@yielded/auth/Sessions";
-import { SubjectId } from "@yielded/auth/Schema";
-import { PhoneAdmission, PhoneAdmissionPolicy, PhoneLifecyclePolicy, PhoneNumber, PhonePersistence, PhoneSignInTargets } from "@yielded/auth/PhoneOtp";
+import { PhonePersistence, PhoneSignInTargets } from "@yielded/auth/PhoneOtp";
 //#region src/drizzle/phone-model.d.ts
-declare const proofMapping: unique symbol;
-/** Opaque same-owner proof mapping. The builder preserves the consumer's table codecs. */
-export interface PhoneProofCompletionMapping {
-  readonly [proofMapping]: AnyProofPersistenceMapping;
-}
-export declare const phoneProofCompletionMapping: <Rq extends Table, S extends Table, G extends Table, Cn extends Table, Rs extends Table, A extends Table, F extends Table, C extends Table, Sub extends Table, I extends Table, Cr extends Table, N>(mapping: ProofPersistenceMapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, N>) => PhoneProofCompletionMapping;
-export type PhoneColumn<T extends Table> = Extract<keyof T["_"]["columns"], string>;
-export type PhoneMappingSource<M, R = never> = M | Effect.Effect<M, PersistenceMappingError, R>;
-export declare const requiredPhoneConstraints: {
-  readonly subject: "unique(id)";
-  readonly identifier: "unique(namespace,value)";
-  readonly credential: "unique(credentialId)";
-  readonly state: "unique(scope)";
+export type PhoneMappingSource<M, R = never> = M | Effect.Effect<M, PersistenceMappingError$1, R>;
+export type PhoneMapping<S extends Table, I extends Table, C extends Table, P extends Table, N> = Omit<Shared.PhoneMapping<DrizzleTableModel<S>, DrizzleTableModel<I>, DrizzleTableModel<C>, DrizzleTableModel<P>, N, SQL>, "proofs"> & {
+  readonly proofs: ProofPersistenceMapping<P, S, N>;
 };
-/** Consumer-owned schema; encoders and allocators are synchronous and side-effect free.
- * State stores permanent number custody and command tombstones, plus bounded admission
- * counters. Never delete custody rows to make a recycled number eligible. A consumer's
- * explicit recovery workflow may resolve custody only after independent authentication.
- * Subject defaults own account provisioning; no email/profile schema is prescribed. */
-export interface PhoneMapping<S extends Table, I extends Table, C extends Table, T extends Table, N> {
-  readonly moduleId: string;
-  readonly policy: PhoneLifecyclePolicy;
-  readonly admission: PhoneAdmissionPolicy;
-  readonly constraints: typeof requiredPhoneConstraints;
-  readonly proofs: PhoneProofCompletionMapping;
-  readonly subjectIds: {
-    readonly toNative: (id: SubjectId) => N;
-    readonly toSubject: (id: N) => SubjectId;
-    readonly allocate: () => N;
-  };
-  readonly subject: {
-    readonly table: S;
-    readonly id: PhoneColumn<S>;
-    readonly securityRevision: PhoneColumn<S>;
-    readonly activeCondition: SQL;
-    readonly decodeRequirement: (row: InferSelectModel<S>) => AuthenticationRequirement;
-    /** Current action policy, independently from primary sign-in assurance. */
-    readonly decodeActionRequirement?: (row: InferSelectModel<S>, action: "verify" | "change") => AuthenticationRequirement;
-    readonly encodeInsert: (input: {
-      readonly id: N;
-      readonly securityRevision: string;
-      readonly phoneNumber: PhoneNumber;
-    }) => InferInsertModel<S>;
-  };
-  readonly identifier: {
-    readonly table: I;
-    readonly namespace: PhoneColumn<I>;
-    readonly value: PhoneColumn<I>;
-    readonly subjectId: PhoneColumn<I>;
-    readonly revision: PhoneColumn<I>;
-    readonly verifiedAt: PhoneColumn<I>;
-    readonly status: PhoneColumn<I>;
-    readonly activeCondition: SQL;
-    readonly encodeStatus: (active: boolean) => unknown;
-    readonly encodeInsert: (input: {
-      readonly phoneNumber: PhoneNumber;
-      readonly subjectId: N;
-      readonly revision: string;
-      readonly verifiedAtMillis: number;
-      readonly active: boolean;
-    }) => InferInsertModel<I>;
-  };
-  readonly credential: {
-    readonly table: C;
-    readonly id: PhoneColumn<C>;
-    readonly subjectId: PhoneColumn<C>;
-    readonly revision: PhoneColumn<C>;
-    readonly status: PhoneColumn<C>;
-    readonly activeCondition: SQL;
-    readonly encodeStatus: (active: boolean) => unknown;
-    readonly encodeInsert: (input: {
-      readonly credentialId: string;
-      readonly subjectId: N;
-      readonly revision: string;
-      readonly active: boolean;
-    }) => InferInsertModel<C>;
-  };
-  readonly state: {
-    readonly table: T;
-    readonly scope: PhoneColumn<T>;
-    readonly state: PhoneColumn<T>;
-    readonly version: PhoneColumn<T>;
-    readonly encodeInsert: (input: {
-      readonly scope: string;
-      readonly state: string;
-      readonly version: string;
-    }) => InferInsertModel<T>;
-  };
-  readonly encodeInstant: (millis: number) => unknown;
-  readonly engineNowMillis: SQL;
-}
-export interface D1PhoneMapping {
-  readonly d1: {
-    readonly primary: true;
-  };
-}
 export interface PhonePersistenceServices {
   readonly phonePersistence: PhonePersistence["Service"];
-  readonly phoneAdmission: PhoneAdmission["Service"];
   readonly phoneSignInTargets: PhoneSignInTargets["Service"];
 }
-/** Bundle phone storage, admission, and lookup with empty hook defaults. */
-export declare const phonePersistenceLayer: <E, R>(services: Effect.Effect<PhonePersistenceServices, E, R>) => Layer.Layer<PhoneAdmission | PhonePersistence | PhoneSignInTargets, E, Exclude<Exclude<R, import("effect/Scope").Scope>, import("@yielded/auth/Hooks").LifecycleHooks>>;
+/** Bundle phone storage and lookup with empty hook defaults. */
+export declare const phonePersistenceLayer: <E, R>(services: Effect.Effect<PhonePersistenceServices, E, R>) => Layer.Layer<PhonePersistence | PhoneSignInTargets, E, Exclude<Exclude<R, import("effect/Scope").Scope>, import("@yielded/auth/Hooks").LifecycleHooks>>;
 //#endregion
+export { requiredPhoneConstraints };
 //# sourceMappingURL=phone-model.d.mts.map

package/dist/drizzle/phone-model.mjs

@@ -1,39 +1,11 @@
+import { requiredPhoneConstraints } from "@yielded/auth-persistence/Adapter";
 import { Effect, Layer } from "effect";
 import { hooksLayer } from "@yielded/auth/Persistence";
-import { PhoneAdmission, PhonePersistence, PhoneSignInTargets } from "@yielded/auth/PhoneOtp";
+import { PhonePersistence, PhoneSignInTargets } from "@yielded/auth/PhoneOtp";
 //#region src/drizzle/phone-model.ts
-const proofMapping = Symbol("effect-auth/phone/proofs");
-const phoneProofCompletionMapping = (mapping) => Object.freeze({ [proofMapping]: Object.freeze({
-	...mapping,
-	request: Object.freeze({ ...mapping.request }),
-	series: Object.freeze({ ...mapping.series }),
-	generation: Object.freeze({ ...mapping.generation }),
-	continuation: Object.freeze({ ...mapping.continuation }),
-	rateScope: Object.freeze({ ...mapping.rateScope }),
-	abuseEvent: Object.freeze({ ...mapping.abuseEvent }),
-	failureEvent: Object.freeze({ ...mapping.failureEvent }),
-	command: Object.freeze({ ...mapping.command }),
-	constraints: Object.freeze({ ...mapping.constraints }),
-	authority: Object.freeze({
-		...mapping.authority,
-		identifier: Object.freeze({ ...mapping.authority.identifier }),
-		...mapping.authority.subject === void 0 ? {} : { subject: Object.freeze({ ...mapping.authority.subject }) },
-		...mapping.authority.credential === void 0 ? {} : { credential: Object.freeze({ ...mapping.authority.credential }) },
-		...mapping.authority.subjectId === void 0 ? {} : { subjectId: Object.freeze({ ...mapping.authority.subjectId }) }
-	}),
-	...mapping.d1 === void 0 ? {} : { d1: Object.freeze({ ...mapping.d1 }) }
-}) });
-/** @internal */
-const phoneProofs = (mapping) => mapping[proofMapping];
-const requiredPhoneConstraints = {
-	subject: "unique(id)",
-	identifier: "unique(namespace,value)",
-	credential: "unique(credentialId)",
-	state: "unique(scope)"
-};
-/** Bundle phone storage, admission, and lookup with empty hook defaults. */
-const phonePersistenceLayer = (services) => Layer.unwrap(Effect.map(services, (value) => Layer.mergeAll(Layer.succeed(PhonePersistence, value.phonePersistence), Layer.succeed(PhoneAdmission, value.phoneAdmission), Layer.succeed(PhoneSignInTargets, value.phoneSignInTargets)))).pipe(Layer.provide(hooksLayer));
+/** Bundle phone storage and lookup with empty hook defaults. */
+const phonePersistenceLayer = (services) => Layer.unwrap(Effect.map(services, (value) => Layer.mergeAll(Layer.succeed(PhonePersistence, value.phonePersistence), Layer.succeed(PhoneSignInTargets, value.phoneSignInTargets)))).pipe(Layer.provide(hooksLayer));
 //#endregion
-export { phonePersistenceLayer, phoneProofCompletionMapping, phoneProofs, requiredPhoneConstraints };
+export { phonePersistenceLayer, requiredPhoneConstraints };
 
 //# sourceMappingURL=phone-model.mjs.map

package/dist/drizzle/phone-model.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"phone-model.mjs","names":[],"sources":["../../src/drizzle/phone-model.ts"],"sourcesContent":["import { hooksLayer } from \"@yielded/auth/Persistence\";\nimport {\n  type PhoneAdmissionPolicy,\n  type PhoneLifecyclePolicy,\n  type PhoneNumber,\n  PhoneAdmission,\n  PhonePersistence,\n  PhoneSignInTargets,\n} from \"@yielded/auth/PhoneOtp\";\nimport type { SubjectId } from \"@yielded/auth/Schema\";\nimport type { AuthenticationRequirement } from \"@yielded/auth/Sessions\";\nimport type { InferInsertModel, InferSelectModel, SQL, Table } from \"drizzle-orm\";\nimport { Effect, Layer } from \"effect\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport type { AnyProofPersistenceMapping, ProofPersistenceMapping } from \"./proof-model\";\nconst proofMapping = Symbol(\"effect-auth/phone/proofs\");\n\n/** Opaque same-owner proof mapping. The builder preserves the consumer's table codecs. */\nexport interface PhoneProofCompletionMapping {\n  readonly [proofMapping]: AnyProofPersistenceMapping;\n}\n\nexport const phoneProofCompletionMapping = <\n  Rq extends Table,\n  S extends Table,\n  G extends Table,\n  Cn extends Table,\n  Rs extends Table,\n  A extends Table,\n  F extends Table,\n  C extends Table,\n  Sub extends Table,\n  I extends Table,\n  Cr extends Table,\n  N,\n>(\n  mapping: ProofPersistenceMapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, N>,\n): PhoneProofCompletionMapping =>\n  Object.freeze({\n    [proofMapping]: Object.freeze({\n      ...mapping,\n      request: Object.freeze({ ...mapping.request }),\n      series: Object.freeze({ ...mapping.series }),\n      generation: Object.freeze({ ...mapping.generation }),\n      continuation: Object.freeze({ ...mapping.continuation }),\n      rateScope: Object.freeze({ ...mapping.rateScope }),\n      abuseEvent: Object.freeze({ ...mapping.abuseEvent }),\n      failureEvent: Object.freeze({ ...mapping.failureEvent }),\n      command: Object.freeze({ ...mapping.command }),\n      constraints: Object.freeze({ ...mapping.constraints }),\n      authority: Object.freeze({\n        ...mapping.authority,\n        identifier: Object.freeze({ ...mapping.authority.identifier }),\n        ...(mapping.authority.subject === undefined\n          ? {}\n          : { subject: Object.freeze({ ...mapping.authority.subject }) }),\n        ...(mapping.authority.credential === undefined\n          ? {}\n          : { credential: Object.freeze({ ...mapping.authority.credential }) }),\n        ...(mapping.authority.subjectId === undefined\n          ? {}\n          : { subjectId: Object.freeze({ ...mapping.authority.subjectId }) }),\n      }),\n      ...(mapping.d1 === undefined ? {} : { d1: Object.freeze({ ...mapping.d1 }) }),\n    }) as unknown as AnyProofPersistenceMapping,\n  });\n\n/** @internal */\nexport const phoneProofs = (mapping: PhoneProofCompletionMapping) => mapping[proofMapping];\nexport type PhoneColumn<T extends Table> = Extract<keyof T[\"_\"][\"columns\"], string>;\nexport type PhoneMappingSource<M, R = never> = M | Effect.Effect<M, PersistenceMappingError, R>;\n\nexport const requiredPhoneConstraints = {\n  subject: \"unique(id)\",\n  identifier: \"unique(namespace,value)\",\n  credential: \"unique(credentialId)\",\n  state: \"unique(scope)\",\n} as const;\n\n/** Consumer-owned schema; encoders and allocators are synchronous and side-effect free.\n * State stores permanent number custody and command tombstones, plus bounded admission\n * counters. Never delete custody rows to make a recycled number eligible. A consumer's\n * explicit recovery workflow may resolve custody only after independent authentication.\n * Subject defaults own account provisioning; no email/profile schema is prescribed. */\nexport interface PhoneMapping<\n  S extends Table,\n  I extends Table,\n  C extends Table,\n  T extends Table,\n  N,\n> {\n  readonly moduleId: string;\n  readonly policy: PhoneLifecyclePolicy;\n  readonly admission: PhoneAdmissionPolicy;\n  readonly constraints: typeof requiredPhoneConstraints;\n  readonly proofs: PhoneProofCompletionMapping;\n  readonly subjectIds: {\n    readonly toNative: (id: SubjectId) => N;\n    readonly toSubject: (id: N) => SubjectId;\n    readonly allocate: () => N;\n  };\n  readonly subject: {\n    readonly table: S;\n    readonly id: PhoneColumn<S>;\n    readonly securityRevision: PhoneColumn<S>;\n    readonly activeCondition: SQL;\n    readonly decodeRequirement: (row: InferSelectModel<S>) => AuthenticationRequirement;\n    /** Current action policy, independently from primary sign-in assurance. */\n    readonly decodeActionRequirement?: (\n      row: InferSelectModel<S>,\n      action: \"verify\" | \"change\",\n    ) => AuthenticationRequirement;\n    readonly encodeInsert: (input: {\n      readonly id: N;\n      readonly securityRevision: string;\n      readonly phoneNumber: PhoneNumber;\n    }) => InferInsertModel<S>;\n  };\n  readonly identifier: {\n    readonly table: I;\n    readonly namespace: PhoneColumn<I>;\n    readonly value: PhoneColumn<I>;\n    readonly subjectId: PhoneColumn<I>;\n    readonly revision: PhoneColumn<I>;\n    readonly verifiedAt: PhoneColumn<I>;\n    readonly status: PhoneColumn<I>;\n    readonly activeCondition: SQL;\n    readonly encodeStatus: (active: boolean) => unknown;\n    readonly encodeInsert: (input: {\n      readonly phoneNumber: PhoneNumber;\n      readonly subjectId: N;\n      readonly revision: string;\n      readonly verifiedAtMillis: number;\n      readonly active: boolean;\n    }) => InferInsertModel<I>;\n  };\n  readonly credential: {\n    readonly table: C;\n    readonly id: PhoneColumn<C>;\n    readonly subjectId: PhoneColumn<C>;\n    readonly revision: PhoneColumn<C>;\n    readonly status: PhoneColumn<C>;\n    readonly activeCondition: SQL;\n    readonly encodeStatus: (active: boolean) => unknown;\n    readonly encodeInsert: (input: {\n      readonly credentialId: string;\n      readonly subjectId: N;\n      readonly revision: string;\n      readonly active: boolean;\n    }) => InferInsertModel<C>;\n  };\n  readonly state: {\n    readonly table: T;\n    readonly scope: PhoneColumn<T>;\n    readonly state: PhoneColumn<T>;\n    readonly version: PhoneColumn<T>;\n    readonly encodeInsert: (input: {\n      readonly scope: string;\n      readonly state: string;\n      readonly version: string;\n    }) => InferInsertModel<T>;\n  };\n  readonly encodeInstant: (millis: number) => unknown;\n  readonly engineNowMillis: SQL;\n}\n\nexport interface D1PhoneMapping {\n  readonly d1: { readonly primary: true };\n}\n\nexport interface PhonePersistenceServices {\n  readonly phonePersistence: PhonePersistence[\"Service\"];\n  readonly phoneAdmission: PhoneAdmission[\"Service\"];\n  readonly phoneSignInTargets: PhoneSignInTargets[\"Service\"];\n}\n\n/** Bundle phone storage, admission, and lookup with empty hook defaults. */\nexport const phonePersistenceLayer = <E, R>(\n  services: Effect.Effect<PhonePersistenceServices, E, R>,\n) =>\n  Layer.unwrap(\n    Effect.map(services, (value) =>\n      Layer.mergeAll(\n        Layer.succeed(PhonePersistence, value.phonePersistence),\n        Layer.succeed(PhoneAdmission, value.phoneAdmission),\n        Layer.succeed(PhoneSignInTargets, value.phoneSignInTargets),\n      ),\n    ),\n  ).pipe(Layer.provide(hooksLayer));\n"],"mappings":";;;;AAgBA,MAAM,eAAe,OAAO,0BAA0B;AAOtD,MAAa,+BAcX,YAEA,OAAO,OAAO,GACX,eAAe,OAAO,OAAO;CAC5B,GAAG;CACH,SAAS,OAAO,OAAO,EAAE,GAAG,QAAQ,QAAQ,CAAC;CAC7C,QAAQ,OAAO,OAAO,EAAE,GAAG,QAAQ,OAAO,CAAC;CAC3C,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;CACnD,cAAc,OAAO,OAAO,EAAE,GAAG,QAAQ,aAAa,CAAC;CACvD,WAAW,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,CAAC;CACjD,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;CACnD,cAAc,OAAO,OAAO,EAAE,GAAG,QAAQ,aAAa,CAAC;CACvD,SAAS,OAAO,OAAO,EAAE,GAAG,QAAQ,QAAQ,CAAC;CAC7C,aAAa,OAAO,OAAO,EAAE,GAAG,QAAQ,YAAY,CAAC;CACrD,WAAW,OAAO,OAAO;EACvB,GAAG,QAAQ;EACX,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,WAAW,CAAC;EAC7D,GAAI,QAAQ,UAAU,YAAY,KAAA,IAC9B,CAAC,IACD,EAAE,SAAS,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,QAAQ,CAAC,EAAE;EAC/D,GAAI,QAAQ,UAAU,eAAe,KAAA,IACjC,CAAC,IACD,EAAE,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,WAAW,CAAC,EAAE;EACrE,GAAI,QAAQ,UAAU,cAAc,KAAA,IAChC,CAAC,IACD,EAAE,WAAW,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,UAAU,CAAC,EAAE;CACrE,CAAC;CACD,GAAI,QAAQ,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,OAAO,OAAO,EAAE,GAAG,QAAQ,GAAG,CAAC,EAAE;AAC7E,CAAC,EACH,CAAC;;AAGH,MAAa,eAAe,YAAyC,QAAQ;AAI7E,MAAa,2BAA2B;CACtC,SAAS;CACT,YAAY;CACZ,YAAY;CACZ,OAAO;AACT;;AAoGA,MAAa,yBACX,aAEA,MAAM,OACJ,OAAO,IAAI,WAAW,UACpB,MAAM,SACJ,MAAM,QAAQ,kBAAkB,MAAM,gBAAgB,GACtD,MAAM,QAAQ,gBAAgB,MAAM,cAAc,GAClD,MAAM,QAAQ,oBAAoB,MAAM,kBAAkB,CAC5D,CACF,CACF,CAAC,CAAC,KAAK,MAAM,QAAQ,UAAU,CAAC"}
+{"version":3,"file":"phone-model.mjs","names":[],"sources":["../../src/drizzle/phone-model.ts"],"sourcesContent":["import type * as Shared from \"@yielded/auth-persistence/Adapter\";\nimport { hooksLayer } from \"@yielded/auth/Persistence\";\nimport { PhonePersistence, PhoneSignInTargets } from \"@yielded/auth/PhoneOtp\";\nimport type { SQL, Table } from \"drizzle-orm\";\nimport { Effect, Layer } from \"effect\";\n\nimport type { PersistenceMappingError } from \"./model\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { DrizzleTableModel } from \"./table-model\";\n\nexport { requiredPhoneConstraints } from \"@yielded/auth-persistence/Adapter\";\nexport type PhoneMappingSource<M, R = never> = M | Effect.Effect<M, PersistenceMappingError, R>;\n\nexport type PhoneMapping<\n  S extends Table,\n  I extends Table,\n  C extends Table,\n  P extends Table,\n  N,\n> = Omit<\n  Shared.PhoneMapping<\n    DrizzleTableModel<S>,\n    DrizzleTableModel<I>,\n    DrizzleTableModel<C>,\n    DrizzleTableModel<P>,\n    N,\n    SQL\n  >,\n  \"proofs\"\n> & { readonly proofs: ProofPersistenceMapping<P, S, N> };\n\nexport type AnyPhoneMapping = PhoneMapping<Table, Table, Table, Table, unknown>;\n\nexport interface PhonePersistenceServices {\n  readonly phonePersistence: PhonePersistence[\"Service\"];\n  readonly phoneSignInTargets: PhoneSignInTargets[\"Service\"];\n}\n\n/** Bundle phone storage and lookup with empty hook defaults. */\nexport const phonePersistenceLayer = <E, R>(\n  services: Effect.Effect<PhonePersistenceServices, E, R>,\n) =>\n  Layer.unwrap(\n    Effect.map(services, (value) =>\n      Layer.mergeAll(\n        Layer.succeed(PhonePersistence, value.phonePersistence),\n        Layer.succeed(PhoneSignInTargets, value.phoneSignInTargets),\n      ),\n    ),\n  ).pipe(Layer.provide(hooksLayer));\n"],"mappings":";;;;;;AAuCA,MAAa,yBACX,aAEA,MAAM,OACJ,OAAO,IAAI,WAAW,UACpB,MAAM,SACJ,MAAM,QAAQ,kBAAkB,MAAM,gBAAgB,GACtD,MAAM,QAAQ,oBAAoB,MAAM,kBAAkB,CAC5D,CACF,CACF,CAAC,CAAC,KAAK,MAAM,QAAQ,UAAU,CAAC"}