@yielded/auth-persistence-drizzle 0.1.0-beta.25 → 0.1.0-beta.26

package/dist/drizzle/sqlite-sessions.mjs

@@ -1,79 +0,0 @@
-import { CurrentSessionSql } from "./session-sql.mjs";
-import { acquireTransactionService, transactionService } from "./standalone-guard.mjs";
-import { coordinateTargetAuthenticationAuthority, coordinateTargetPendingAuthentication, coordinateTargetSessionStepUp, coordinateTargetSignedSessionValidity, coordinateTargetStatefulSessions, makeTargetAuthenticationAuthorityServices, makeTargetPendingAuthenticationServices, makeTargetSessionStepUpServices, makeTargetSignedSessionValidityServices, makeTargetStatefulSessionServices } from "./session-target.mjs";
-import { nativeDatabase } from "./native-database.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
-import { Context, Effect } from "effect";
-import { AuthenticationAuthority } from "@yielded/auth/Sessions";
-//#region src/drizzle/sqlite-sessions.ts
-const sqliteSessionConfiguration = (mode, standaloneGuard, coordinatorGuard) => ({
-	mode,
-	locking: false,
-	standaloneGuard,
-	...coordinatorGuard === void 0 ? {} : { coordinatorGuard }
-});
-const makeSqliteAuthenticationAuthorityServices = (mapping, configuration) => makeTargetAuthenticationAuthorityServices(mapping, configuration);
-const makeSqlitePendingAuthenticationServices = (mapping, configuration) => makeTargetPendingAuthenticationServices(mapping, configuration);
-const makeSqliteStatefulSessionServices = (mapping, configuration) => makeTargetStatefulSessionServices(mapping, configuration);
-const makeSqliteSignedSessionValidityServices = (mapping, configuration) => makeTargetSignedSessionValidityServices(mapping, configuration);
-const coordinateSqliteAuthenticationAuthority = (database, mapping, configuration, owner) => coordinateTargetAuthenticationAuthority(database, mapping, configuration, owner);
-const coordinateSqlitePendingAuthentication = (database, mapping, configuration, owner) => coordinateTargetPendingAuthentication(database, mapping, configuration, owner);
-const coordinateSqliteStatefulSessions = (database, mapping, configuration, owner) => coordinateTargetStatefulSessions(database, mapping, configuration, owner);
-const coordinateSqliteSignedSessionValidity = (database, mapping, configuration, owner) => coordinateTargetSignedSessionValidity(database, mapping, configuration, owner);
-const makeSqliteSessionTarget = (databaseService, configuration) => {
-	const configurationFor = (database) => typeof configuration === "function" ? configuration(transactionService(database)) : configuration;
-	const standaloneConfiguration = typeof configuration === "function" ? Effect.map(acquireTransactionService(databaseService), configuration) : Effect.succeed(configuration);
-	function coordinateSessionStepUp(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateSqliteSessionStepUp(database, options.mapping, options.target, configurationFor(database), (transaction, services) => {
-			const provided = Context.make(options.target, services.sessionStepUpPersistence);
-			const work = Effect.provideContext(body, provided);
-			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-		}).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	function coordinateAuthenticationAuthority(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateSqliteAuthenticationAuthority(database, options.mapping, configurationFor(database), (transaction, services) => {
-			const provided = Context.make(AuthenticationAuthority, services.authenticationAuthority);
-			const work = Effect.provideContext(body, provided);
-			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-		}).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	function coordinatePendingAuthentication(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateSqlitePendingAuthentication(database, options.mapping, configurationFor(database), (transaction, services) => {
-			const provided = Context.make(options.target, services.pendingAuthentication);
-			const work = Effect.provideContext(body, provided);
-			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-		}).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	function coordinateStatefulSessions(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateSqliteStatefulSessions(database, options.mapping, configurationFor(database), (transaction, services) => {
-			const provided = Context.make(options.persistence, services.statefulSessionPersistence).pipe(Context.add(options.repository, services.sessionRepository));
-			const work = Effect.provideContext(body, provided);
-			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-		}).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	function coordinateSignedSessionValidity(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateSqliteSignedSessionValidity(database, options.mapping, configurationFor(database), (transaction, services) => {
-			const provided = Context.make(options.target, services.signedSessionValidity);
-			const work = Effect.provideContext(body, provided);
-			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-		}).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	return {
-		makeSessionStepUpServices: (mapping, target) => Effect.flatMap(standaloneConfiguration, (configuration) => makeSqliteSessionStepUpServices(mapping, target, configuration)).pipe(Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
-		coordinateSessionStepUp,
-		makeAuthenticationAuthorityServices: (mapping) => Effect.flatMap(standaloneConfiguration, (configuration) => makeSqliteAuthenticationAuthorityServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
-		makePendingAuthenticationServices: (mapping) => Effect.flatMap(standaloneConfiguration, (configuration) => makeSqlitePendingAuthenticationServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
-		makeStatefulSessionServices: (mapping) => Effect.flatMap(standaloneConfiguration, (configuration) => makeSqliteStatefulSessionServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
-		makeSignedSessionValidityServices: (mapping) => Effect.flatMap(standaloneConfiguration, (configuration) => makeSqliteSignedSessionValidityServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
-		coordinateAuthenticationAuthority,
-		coordinatePendingAuthentication,
-		coordinateStatefulSessions,
-		coordinateSignedSessionValidity
-	};
-};
-const makeSqliteSessionStepUpServices = (mapping, target, configuration) => makeTargetSessionStepUpServices(mapping, target, configuration);
-const coordinateSqliteSessionStepUp = (database, mapping, target, configuration, owner) => coordinateTargetSessionStepUp(database, mapping, target, configuration, owner);
-//#endregion
-export { coordinateSqliteAuthenticationAuthority, coordinateSqlitePendingAuthentication, coordinateSqliteSessionStepUp, coordinateSqliteSignedSessionValidity, coordinateSqliteStatefulSessions, makeSqliteAuthenticationAuthorityServices, makeSqlitePendingAuthenticationServices, makeSqliteSessionStepUpServices, makeSqliteSessionTarget, makeSqliteSignedSessionValidityServices, makeSqliteStatefulSessionServices, sqliteSessionConfiguration };
-
-//# sourceMappingURL=sqlite-sessions.mjs.map

package/dist/drizzle/sqlite-sessions.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"sqlite-sessions.mjs","names":[],"sources":["../../src/drizzle/sqlite-sessions.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport {\n  AuthenticationAuthority,\n  type SessionUnavailable,\n  type PendingAuthentication,\n  type SessionRepository,\n  type SignedSessionValidity,\n  type StatefulSessionPersistence,\n  type SessionStepUpPersistence,\n} from \"@yielded/auth/Sessions\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectLibsqlDatabase } from \"drizzle-orm/effect-libsql\";\nimport type { EffectSQLiteBunDatabase } from \"drizzle-orm/effect-sqlite-bun\";\nimport type { EffectSQLiteNodeDatabase } from \"drizzle-orm/effect-sqlite-node\";\nimport type { EffectSQLiteWasmDatabase } from \"drizzle-orm/effect-sqlite-wasm\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Context, Effect } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { nativeDatabase } from \"./native-database\";\nimport type {\n  AuthenticationAuthorityMapping,\n  PendingAuthenticationMapping,\n  SignedSessionValidityMapping,\n  StatefulSessionMapping,\n} from \"./session-model\";\nimport { CurrentSessionSql } from \"./session-sql\";\nimport {\n  coordinateTargetAuthenticationAuthority,\n  coordinateTargetPendingAuthentication,\n  coordinateTargetSignedSessionValidity,\n  coordinateTargetStatefulSessions,\n  makeTargetAuthenticationAuthorityServices,\n  makeTargetPendingAuthenticationServices,\n  makeTargetSignedSessionValidityServices,\n  makeTargetStatefulSessionServices,\n  type SessionTargetConfiguration,\n  makeTargetSessionStepUpServices,\n  coordinateTargetSessionStepUp,\n} from \"./session-target\";\nimport type { DatabaseValue } from \"./sqlite-do-database\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database =\n  | EffectLibsqlDatabase<AnyRelations>\n  | EffectSQLiteBunDatabase<AnyRelations>\n  | DatabaseValue<AnyRelations>\n  | EffectSQLiteNodeDatabase<AnyRelations>\n  | EffectSQLiteWasmDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nexport const sqliteSessionConfiguration = (\n  mode: \"interactive\" | \"synchronous\",\n  standaloneGuard: Effect.Effect<void, SessionUnavailable>,\n  coordinatorGuard?: Effect.Effect<void, SessionUnavailable>,\n): SessionTargetConfiguration => ({\n  mode,\n  locking: false,\n  standaloneGuard,\n  ...(coordinatorGuard === undefined ? {} : { coordinatorGuard }),\n});\n\nexport const makeSqliteAuthenticationAuthorityServices = <\n  Claims,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  F extends AnySQLiteTable,\n  P extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>,\n  configuration: SessionTargetConfiguration,\n) => makeTargetAuthenticationAuthorityServices<Claims>(mapping, configuration);\n\nexport const makeSqlitePendingAuthenticationServices = <\n  Claims,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  P extends AnySQLiteTable,\n  F extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: PendingAuthenticationMapping<Claims, S, C, P, F, NativeId>,\n  configuration: SessionTargetConfiguration,\n) => makeTargetPendingAuthenticationServices<Claims>(mapping, configuration);\n\nexport const makeSqliteStatefulSessionServices = <\n  Claims,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  F extends AnySQLiteTable,\n  P extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n>(\n  mapping: StatefulSessionMapping<Claims, S, C, Session, F, P, NativeId, NativeSessionId>,\n  configuration: SessionTargetConfiguration,\n) => makeTargetStatefulSessionServices<Claims>(mapping, configuration);\n\nexport const makeSqliteSignedSessionValidityServices = <\n  S extends AnySQLiteTable,\n  T extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n>(\n  mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>,\n  configuration: SessionTargetConfiguration,\n) => makeTargetSignedSessionValidityServices(mapping, configuration);\n\nexport const coordinateSqliteAuthenticationAuthority = <\n  Claims,\n  D extends Database,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  F extends AnySQLiteTable,\n  P extends AnySQLiteTable,\n  NativeId,\n  A,\n  E,\n  R,\n>(\n  database: D,\n  mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>,\n  configuration: SessionTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly authenticationAuthority: AuthenticationAuthority[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateTargetAuthenticationAuthority<Claims, TransactionOf<D>, A, E, R>(\n    database,\n    mapping,\n    configuration,\n    owner,\n  );\n\nexport const coordinateSqlitePendingAuthentication = <\n  Claims,\n  D extends Database,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  P extends AnySQLiteTable,\n  F extends AnySQLiteTable,\n  NativeId,\n  A,\n  E,\n  R,\n>(\n  database: D,\n  mapping: PendingAuthenticationMapping<Claims, S, C, P, F, NativeId>,\n  configuration: SessionTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly pendingAuthentication: PendingAuthentication<Claims> },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateTargetPendingAuthentication<Claims, TransactionOf<D>, A, E, R>(\n    database,\n    mapping,\n    configuration,\n    owner,\n  );\n\nexport const coordinateSqliteStatefulSessions = <\n  Claims,\n  D extends Database,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  F extends AnySQLiteTable,\n  P extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n>(\n  database: D,\n  mapping: StatefulSessionMapping<Claims, S, C, Session, F, P, NativeId, NativeSessionId>,\n  configuration: SessionTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: {\n      readonly statefulSessionPersistence: StatefulSessionPersistence<Claims>;\n      readonly sessionRepository: SessionRepository;\n    },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateTargetStatefulSessions<Claims, TransactionOf<D>, A, E, R>(\n    database,\n    mapping,\n    configuration,\n    owner,\n  );\n\nexport const coordinateSqliteSignedSessionValidity = <\n  D extends Database,\n  S extends AnySQLiteTable,\n  T extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n>(\n  database: D,\n  mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>,\n  configuration: SessionTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly signedSessionValidity: SignedSessionValidity },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateTargetSignedSessionValidity<TransactionOf<D>, A, E, R>(\n    database,\n    mapping,\n    configuration,\n    owner,\n  );\n\nexport const makeSqliteSessionTarget = <\n  DatabaseId,\n  D extends Database,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration:\n    | SessionTargetConfiguration\n    | ((service: TransactionService | undefined) => SessionTargetConfiguration),\n) => {\n  const configurationFor = (database: D) =>\n    typeof configuration === \"function\"\n      ? configuration(transactionService(database))\n      : configuration;\n\n  const standaloneConfiguration =\n    typeof configuration === \"function\"\n      ? Effect.map(acquireTransactionService(databaseService), configuration)\n      : Effect.succeed(configuration);\n\n  function coordinateSessionStepUp<\n    Database extends D,\n    Claims,\n    Id,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    Session extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: SessionStepUpMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        I,\n        Session,\n        T,\n        NativeId,\n        NativeSessionId\n      >;\n      readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<Id> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    (Synchronous extends true ? never : Exclude<R, Id>) | LifecycleHooks | DatabaseRequirements\n  >;\n  function coordinateSessionStepUp<\n    Database extends D,\n    Claims,\n    Id,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    Session extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: SessionStepUpMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        I,\n        Session,\n        T,\n        NativeId,\n        NativeSessionId\n      >;\n      readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<Id | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, Id | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateSessionStepUp<\n    Database extends D,\n    Claims,\n    Id,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    I extends AnySQLiteTable,\n    Session extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: SessionStepUpMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        I,\n        Session,\n        T,\n        NativeId,\n        NativeSessionId\n      >;\n      readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, Id> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqliteSessionStepUp(\n        database,\n        options.mapping,\n        options.target,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly sessionStepUpPersistence: SessionStepUpPersistence<Claims> },\n        ) => {\n          const provided = Context.make(options.target, services.sessionStepUpPersistence);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateAuthenticationAuthority<\n    Database extends D,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    NativeId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<AuthenticationAuthority> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, AuthenticationAuthority>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateAuthenticationAuthority<\n    Database extends D,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    NativeId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<AuthenticationAuthority | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, AuthenticationAuthority | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateAuthenticationAuthority<\n    Database extends D,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    NativeId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, AuthenticationAuthority> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqliteAuthenticationAuthority(\n        database,\n        options.mapping,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly authenticationAuthority: AuthenticationAuthority[\"Service\"] },\n        ) => {\n          const provided = Context.make(AuthenticationAuthority, services.authenticationAuthority);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinatePendingAuthentication<\n    Database extends D,\n    TargetId,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    NativeId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;\n      readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePendingAuthentication<\n    Database extends D,\n    TargetId,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    NativeId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;\n      readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinatePendingAuthentication<\n    Database extends D,\n    TargetId,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    NativeId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;\n      readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqlitePendingAuthentication(\n        database,\n        options.mapping,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly pendingAuthentication: PendingAuthentication<Claims> },\n        ) => {\n          const provided = Context.make(options.target, services.pendingAuthentication);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateStatefulSessions<\n    Database extends D,\n    PersistenceId,\n    RepositoryId,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    Session extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: StatefulSessionMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        Session,\n        F,\n        P,\n        NativeId,\n        NativeSessionId\n      >;\n      readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n      readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<PersistenceId | RepositoryId> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PersistenceId | RepositoryId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateStatefulSessions<\n    Database extends D,\n    PersistenceId,\n    RepositoryId,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    Session extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: StatefulSessionMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        Session,\n        F,\n        P,\n        NativeId,\n        NativeSessionId\n      >;\n      readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n      readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<PersistenceId | RepositoryId | TxId> : R\n    >,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, PersistenceId | RepositoryId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateStatefulSessions<\n    Database extends D,\n    PersistenceId,\n    RepositoryId,\n    Claims,\n    S extends AnySQLiteTable,\n    C extends AnySQLiteTable,\n    Session extends AnySQLiteTable,\n    F extends AnySQLiteTable,\n    P extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: StatefulSessionMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        Session,\n        F,\n        P,\n        NativeId,\n        NativeSessionId\n      >;\n      readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n      readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, PersistenceId | RepositoryId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqliteStatefulSessions(\n        database,\n        options.mapping,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: {\n            readonly statefulSessionPersistence: StatefulSessionPersistence<Claims>;\n            readonly sessionRepository: SessionRepository;\n          },\n        ) => {\n          const provided = Context.make(\n            options.persistence,\n            services.statefulSessionPersistence,\n          ).pipe(Context.add(options.repository, services.sessionRepository));\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n  function coordinateSignedSessionValidity<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;\n      readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateSignedSessionValidity<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;\n      readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, Synchronous extends true ? NoInfer<TargetId | TxId> : R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    | (Synchronous extends true ? never : Exclude<R, TargetId | TxId>)\n    | LifecycleHooks\n    | DatabaseRequirements\n  >;\n  function coordinateSignedSessionValidity<\n    Database extends D,\n    TargetId,\n    S extends AnySQLiteTable,\n    T extends AnySQLiteTable,\n    NativeId,\n    NativeSessionId,\n    A,\n    E,\n    R,\n    DatabaseError,\n    DatabaseRequirements,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;\n      readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n    Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateSqliteSignedSessionValidity(\n        database,\n        options.mapping,\n        configurationFor(database),\n        (\n          transaction: TransactionOf<Database>,\n          services: { readonly signedSessionValidity: SignedSessionValidity },\n        ) => {\n          const provided = Context.make(options.target, services.signedSessionValidity);\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makeSessionStepUpServices: <\n      Claims,\n      Id,\n      S extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      I extends AnySQLiteTable,\n      Session extends AnySQLiteTable,\n      T extends AnySQLiteTable,\n      NativeId,\n      NativeSessionId,\n    >(\n      mapping: SessionStepUpMapping<\n        NoInfer<Claims>,\n        S,\n        C,\n        I,\n        Session,\n        T,\n        NativeId,\n        NativeSessionId\n      >,\n      target: Context.Service<Id, SessionStepUpPersistence<Claims>>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqliteSessionStepUpServices(mapping, target, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateSessionStepUp,\n    makeAuthenticationAuthorityServices: <\n      Claims,\n      S extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      F extends AnySQLiteTable,\n      P extends AnySQLiteTable,\n      NativeId,\n    >(\n      mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqliteAuthenticationAuthorityServices(mapping, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makePendingAuthenticationServices: <\n      Claims,\n      S extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      P extends AnySQLiteTable,\n      F extends AnySQLiteTable,\n      NativeId,\n    >(\n      mapping: PendingAuthenticationMapping<Claims, S, C, P, F, NativeId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqlitePendingAuthenticationServices(mapping, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeStatefulSessionServices: <\n      Claims,\n      S extends AnySQLiteTable,\n      C extends AnySQLiteTable,\n      Session extends AnySQLiteTable,\n      F extends AnySQLiteTable,\n      P extends AnySQLiteTable,\n      NativeId,\n      NativeSessionId,\n    >(\n      mapping: StatefulSessionMapping<Claims, S, C, Session, F, P, NativeId, NativeSessionId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqliteStatefulSessionServices(mapping, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    makeSignedSessionValidityServices: <\n      S extends AnySQLiteTable,\n      T extends AnySQLiteTable,\n      NativeId,\n      NativeSessionId,\n    >(\n      mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>,\n    ) =>\n      Effect.flatMap(standaloneConfiguration, (configuration) =>\n        makeSqliteSignedSessionValidityServices(mapping, configuration),\n      ).pipe(\n        Effect.provideServiceEffect(CurrentSessionSql, nativeDatabase(databaseService)),\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinateAuthenticationAuthority,\n    coordinatePendingAuthentication,\n    coordinateStatefulSessions,\n    coordinateSignedSessionValidity,\n  };\n};\n\nimport type { SessionStepUpMapping } from \"./step-up-model\";\n\nexport const makeSqliteSessionStepUpServices = <\n  Claims,\n  Id,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  T extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n>(\n  mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>,\n  target: Context.Service<Id, SessionStepUpPersistence<Claims>>,\n  configuration: SessionTargetConfiguration,\n) => makeTargetSessionStepUpServices(mapping, target, configuration);\n\nexport const coordinateSqliteSessionStepUp = <\n  Claims,\n  Id,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  T extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n  D extends Database,\n  A,\n  E,\n  R,\n>(\n  database: D,\n  mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>,\n  target: Context.Service<Id, SessionStepUpPersistence<Claims>>,\n  configuration: SessionTargetConfiguration,\n  owner: (\n    transaction: TransactionOf<D>,\n    services: { readonly sessionStepUpPersistence: SessionStepUpPersistence<Claims> },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateTargetSessionStepUp<Claims, Id, TransactionOf<D>, A, E, R>(\n    database,\n    mapping,\n    target,\n    configuration,\n    owner,\n  );\n"],"mappings":";;;;;;;;AAyDA,MAAa,8BACX,MACA,iBACA,sBACgC;CAChC;CACA,SAAS;CACT;CACA,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;AAC/D;AAEA,MAAa,6CAQX,SACA,kBACG,0CAAkD,SAAS,aAAa;AAE7E,MAAa,2CAQX,SACA,kBACG,wCAAgD,SAAS,aAAa;AAE3E,MAAa,qCAUX,SACA,kBACG,kCAA0C,SAAS,aAAa;AAErE,MAAa,2CAMX,SACA,kBACG,wCAAwC,SAAS,aAAa;AAEnE,MAAa,2CAYX,UACA,SACA,eACA,UAKA,wCACE,UACA,SACA,eACA,KACF;AAEF,MAAa,yCAYX,UACA,SACA,eACA,UAKA,sCACE,UACA,SACA,eACA,KACF;AAEF,MAAa,oCAcX,UACA,SACA,eACA,UAQA,iCACE,UACA,SACA,eACA,KACF;AAEF,MAAa,yCAUX,UACA,SACA,eACA,UAKA,sCACE,UACA,SACA,eACA,KACF;AAEF,MAAa,2BAKX,iBACA,kBAGG;CACH,MAAM,oBAAoB,aACxB,OAAO,kBAAkB,aACrB,cAAc,mBAAmB,QAAQ,CAAC,IAC1C;CAEN,MAAM,0BACJ,OAAO,kBAAkB,aACrB,OAAO,IAAI,0BAA0B,eAAe,GAAG,aAAa,IACpE,OAAO,QAAQ,aAAa;CAkFlC,SAAS,wBAmBP,SACA,SAcA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,8BACE,UACA,QAAQ,SACR,QAAQ,QACR,iBAAiB,QAAQ,IAEvB,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,wBAAwB;GAC/E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA6DA,SAAS,kCAgBP,SACA,SAIA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,wCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,IAEvB,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;GACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA6DA,SAAS,gCAiBP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,sCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,IAEvB,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CA2FA,SAAS,2BAoBP,SACA,SAeA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,iCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,IAEvB,aACA,aAIG;GACH,MAAM,WAAW,QAAQ,KACvB,QAAQ,aACR,SAAS,0BACX,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,YAAY,SAAS,iBAAiB,CAAC;GAElE,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAyDA,SAAS,gCAeP,SACA,SAKA,MAKA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,sCACE,UACA,QAAQ,SACR,iBAAiB,QAAQ,IAEvB,aACA,aACG;GACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;GAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,4BAWE,SAUA,WAEA,OAAO,QAAQ,0BAA0B,kBACvC,gCAAgC,SAAS,QAAQ,aAAa,CAChE,CAAC,CAAC,KACA,OAAO,qBAAqB,mBAAmB,eAAe,eAAe,CAAC,GAC9E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA,sCAQE,YAEA,OAAO,QAAQ,0BAA0B,kBACvC,0CAA0C,SAAS,aAAa,CAClE,CAAC,CAAC,KACA,OAAO,qBAAqB,mBAAmB,eAAe,eAAe,CAAC,GAC9E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,oCAQE,YAEA,OAAO,QAAQ,0BAA0B,kBACvC,wCAAwC,SAAS,aAAa,CAChE,CAAC,CAAC,KACA,OAAO,qBAAqB,mBAAmB,eAAe,eAAe,CAAC,GAC9E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,8BAUE,YAEA,OAAO,QAAQ,0BAA0B,kBACvC,kCAAkC,SAAS,aAAa,CAC1D,CAAC,CAAC,KACA,OAAO,qBAAqB,mBAAmB,eAAe,eAAe,CAAC,GAC9E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF,oCAME,YAEA,OAAO,QAAQ,0BAA0B,kBACvC,wCAAwC,SAAS,aAAa,CAChE,CAAC,CAAC,KACA,OAAO,qBAAqB,mBAAmB,eAAe,eAAe,CAAC,GAC9E,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;EACA;EACA;EACA;CACF;AACF;AAIA,MAAa,mCAWX,SACA,QACA,kBACG,gCAAgC,SAAS,QAAQ,aAAa;AAEnE,MAAa,iCAeX,UACA,SACA,QACA,eACA,UAKA,8BACE,UACA,SACA,QACA,eACA,KACF"}

package/dist/drizzle/standalone-guard.d.mts

@@ -1,2 +0,0 @@
-import { Context, Effect } from "effect";
-import "effect/sql/SqlClient";

package/dist/drizzle/standalone-guard.mjs

@@ -1,21 +0,0 @@
-import { requireStandalone } from "@yielded/auth-persistence/Adapter";
-import { Context, Effect, Predicate } from "effect";
-//#region src/drizzle/standalone-guard.ts
-const transactionService = (database) => {
-	if (!Predicate.hasProperty(database, "$client") || !Predicate.hasProperty(database.$client, "transactionService") || !Context.isKey(database.$client.transactionService)) return;
-	return database.$client.transactionService;
-};
-/** Capture the foreign client's marker while acquiring standalone services. */
-const acquireTransactionService = (service) => Effect.map(Effect.service(service), (database) => {
-	if (!Predicate.hasProperty(database, "$client") || !Predicate.hasProperty(database.$client, "transactionService") || !Context.isKey(database.$client.transactionService)) return;
-	return database.$client.transactionService;
-});
-/** Bind the client-specific transaction marker at foreign adapter construction. */
-const sqlClientStandaloneGuard = (service, unavailable) => {
-	if (service === void 0) return Effect.suspend(() => Effect.fail(unavailable()));
-	return requireStandalone(unavailable, service);
-};
-//#endregion
-export { acquireTransactionService, sqlClientStandaloneGuard, transactionService };
-
-//# sourceMappingURL=standalone-guard.mjs.map

package/dist/drizzle/standalone-guard.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"standalone-guard.mjs","names":[],"sources":["../../src/drizzle/standalone-guard.ts"],"sourcesContent":["import { requireStandalone } from \"@yielded/auth-persistence/Adapter\";\nimport { Context, Effect, Predicate } from \"effect\";\nimport type * as SqlClient from \"effect/sql/SqlClient\";\n\nexport type TransactionService = Context.Key<\n  SqlClient.TransactionConnection,\n  SqlClient.TransactionConnection.Service\n>;\n\nexport const transactionService = (database: unknown): TransactionService | undefined => {\n  if (\n    !Predicate.hasProperty(database, \"$client\") ||\n    !Predicate.hasProperty(database.$client, \"transactionService\") ||\n    !Context.isKey(database.$client.transactionService)\n  ) {\n    return undefined;\n  }\n\n  return database.$client.transactionService;\n};\n\n/** Capture the foreign client's marker while acquiring standalone services. */\nexport const acquireTransactionService = <Id, Database>(service: Context.Key<Id, Database>) =>\n  Effect.map(Effect.service(service), (database): TransactionService | undefined => {\n    if (\n      !Predicate.hasProperty(database, \"$client\") ||\n      !Predicate.hasProperty(database.$client, \"transactionService\") ||\n      !Context.isKey(database.$client.transactionService)\n    ) {\n      return undefined;\n    }\n\n    return database.$client.transactionService;\n  });\n\n/** Bind the client-specific transaction marker at foreign adapter construction. */\nexport const sqlClientStandaloneGuard = <Failure>(\n  service: TransactionService | undefined,\n  unavailable: () => Failure,\n): Effect.Effect<void, Failure> => {\n  if (service === undefined) return Effect.suspend(() => Effect.fail(unavailable()));\n\n  return requireStandalone(unavailable, service);\n};\n"],"mappings":";;;AASA,MAAa,sBAAsB,aAAsD;CACvF,IACE,CAAC,UAAU,YAAY,UAAU,SAAS,KAC1C,CAAC,UAAU,YAAY,SAAS,SAAS,oBAAoB,KAC7D,CAAC,QAAQ,MAAM,SAAS,QAAQ,kBAAkB,GAElD;CAGF,OAAO,SAAS,QAAQ;AAC1B;;AAGA,MAAa,6BAA2C,YACtD,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,aAA6C;CAChF,IACE,CAAC,UAAU,YAAY,UAAU,SAAS,KAC1C,CAAC,UAAU,YAAY,SAAS,SAAS,oBAAoB,KAC7D,CAAC,QAAQ,MAAM,SAAS,QAAQ,kBAAkB,GAElD;CAGF,OAAO,SAAS,QAAQ;AAC1B,CAAC;;AAGH,MAAa,4BACX,SACA,gBACiC;CACjC,IAAI,YAAY,KAAA,GAAW,OAAO,OAAO,cAAc,OAAO,KAAK,YAAY,CAAC,CAAC;CAEjF,OAAO,kBAAkB,aAAa,OAAO;AAC/C"}

package/dist/drizzle/totp-state.d.mts

@@ -1,37 +0,0 @@
-import "./transaction-owner.mjs";
-import { SQL } from "drizzle-orm";
-import { Context, Effect } from "effect";
-import { TotpRecord, TotpUnavailable } from "@yielded/auth/Totp";
-//#region src/drizzle/totp-state.d.ts
-export declare const encodeTotpRecord: (record: TotpRecord) => string;
-export declare const decodeTotpRecord: (state: string) => {
-  readonly moduleId: string;
-  readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-  readonly credentialId: string;
-  readonly revision: string;
-  readonly version: string;
-  readonly secret: {
-    readonly keyId: string;
-    readonly nonce: string;
-    readonly ciphertext: string;
-    readonly revision: string;
-  } | null;
-  readonly pending: {
-    readonly revision: string;
-    readonly enrollmentId: string;
-    readonly secret: {
-      readonly keyId: string;
-      readonly nonce: string;
-      readonly ciphertext: string;
-      readonly revision: string;
-    };
-    readonly expiresAtMillis: number;
-    readonly failedAttempts: number;
-  } | null;
-  readonly recoveryDigests: readonly (string & import("effect/Brand").Brand<"effect-auth/TokenDigest">)[];
-  readonly acceptedStep: number;
-  readonly attemptWindow: number;
-  readonly failedAttempts: number;
-};
-//#endregion
-//# sourceMappingURL=totp-state.d.mts.map

package/dist/drizzle/totp-state.mjs

@@ -1,287 +0,0 @@
-import { digest, randomId } from "./crypto.mjs";
-import { both, makeTransactionRows } from "./transaction-owner.mjs";
-import { sql } from "drizzle-orm";
-import { Context, Effect, Schema } from "effect";
-import { AuthenticationRequirement, SecurityRevision } from "@yielded/auth/Sessions";
-import { TotpPolicy, TotpRecord, TotpUnavailable } from "@yielded/auth/Totp";
-//#region src/drizzle/totp-state.ts
-const unavailable = () => TotpUnavailable.make({});
-const invariant = (condition) => {
-	if (!condition) throw unavailable();
-};
-var CurrentTotpTransaction = class extends Context.Service()("effect-auth/drizzle/CurrentTotpTransaction") {};
-const { equal, col, copiedRow } = makeTransactionRows(unavailable);
-const codec = Schema.fromJsonString(TotpRecord);
-const encodeTotpRecord = (record) => Schema.encodeSync(codec)(record);
-const decodeTotpRecord = (state) => Schema.decodeSync(codec)(state);
-const scopeFor = (moduleId, subjectId) => digest(`effect-auth/totp/scope/v1/${moduleId.length}:${moduleId}/${subjectId}`);
-const captureTotp = Effect.fn("TotpNative.capture")(function* (mapping, subjectId) {
-	const owner = yield* CurrentTotpTransaction, subject = mapping.subject, factor = mapping.factor, nativeId = mapping.subjectIds.toNative(subjectId);
-	invariant(mapping.subjectIds.toSubject(nativeId) === subjectId);
-	const subjectRow = (yield* owner.read(subject.table, equal(subject.table, { [subject.id]: nativeId }), { limit: 1 })).rows[0];
-	if (subjectRow === void 0 || !(yield* owner.check(sql`exists(select 1 from ${subject.table} where ${both(owner.exact(subject.table, subjectRow), subject.activeCondition)})`))) return void 0;
-	const scope = yield* scopeFor(mapping.moduleId, subjectId), found = yield* owner.read(factor.table, equal(factor.table, { [factor.scope]: scope }), { limit: 1 }), row = found.rows[0];
-	const record = row === void 0 ? null : decodeTotpRecord(row[factor.state]);
-	invariant(record === null || (record.secret === null || record.secret.revision === record.revision) && (record.pending === null || record.pending.secret.revision === record.pending.revision));
-	invariant(record === null || record.moduleId === mapping.moduleId && record.subjectId === subjectId && record.version === row[factor.version]);
-	return {
-		nativeId,
-		subjectRow,
-		factorRow: row,
-		factorObservation: found,
-		scope,
-		snapshot: {
-			revision: {
-				subjectId,
-				securityRevision: SecurityRevision.make(subjectRow[subject.securityRevision]),
-				credentials: record === null || record.secret === null ? [] : [{
-					credentialId: record.credentialId,
-					revision: SecurityRevision.make(record.revision)
-				}]
-			},
-			record
-		}
-	};
-});
-const reject = { _tag: "Rejected" };
-const mutateTotp = Effect.fn("TotpNative.mutate")(function* (mapping, input) {
-	const owner = yield* CurrentTotpTransaction;
-	invariant(input.moduleId === mapping.moduleId && Schema.encodeSync(Schema.fromJsonString(TotpPolicy))(input.policy) === Schema.encodeSync(Schema.fromJsonString(TotpPolicy))(mapping.policy));
-	const captured = yield* captureTotp(mapping, input.subjectId);
-	if (captured === void 0) return reject;
-	const { snapshot, subjectRow, factorRow, factorObservation, scope, nativeId } = captured, current = snapshot.record, policy = input.policy, action = input.action;
-	if (snapshot.revision.securityRevision !== input.snapshot.revision.securityRevision || (current?.version ?? null) !== (input.snapshot.record?.version ?? null)) return reject;
-	if (current === null !== (input.snapshot.record === null) || current !== null && encodeTotpRecord(current) !== encodeTotpRecord(input.snapshot.record)) return reject;
-	const now = yield* owner.now({ engineNowMillis: mapping.engineNowMillis });
-	const guards = [];
-	const credentialGuards = [];
-	const commandScope = yield* digest(`effect-auth/totp/command/v1/${mapping.moduleId.length}:${mapping.moduleId}/${input.subjectId.length}:${input.subjectId}/${input.commandId}`);
-	const commandObservation = [
-		"Enroll",
-		"Confirm",
-		"Disable",
-		"Regenerate"
-	].includes(action._tag) ? yield* owner.read(mapping.factor.table, equal(mapping.factor.table, { [mapping.factor.scope]: commandScope }), { limit: 1 }) : void 0;
-	if (commandObservation !== void 0 && commandObservation.rows.length !== 0) return reject;
-	const timeGuards = [];
-	const timeBound = (start, end) => {
-		timeGuards.push(sql`${mapping.engineNowMillis} >= ${start} and ${mapping.engineNowMillis} < ${end}`);
-	};
-	if (action._tag === "Enroll" || action._tag === "Confirm" || action._tag === "Disable" || action._tag === "Regenerate") {
-		const authorization = input.authorization;
-		if (authorization === void 0) return reject;
-		const { challenge, evidence } = authorization;
-		const expectedAction = {
-			Enroll: "enroll",
-			Confirm: "confirm",
-			Disable: "disable",
-			Regenerate: "regenerate"
-		}[action._tag];
-		if (challenge.action !== expectedAction || challenge.moduleId !== mapping.moduleId || challenge.commandId !== input.commandId || challenge.revision.subjectId !== input.subjectId || challenge.revision.securityRevision !== snapshot.revision.securityRevision || evidence.flowId !== challenge.flowId || evidence.bindingDigest !== challenge.bindingDigest || evidence.revision.subjectId !== input.subjectId || evidence.revision.securityRevision !== snapshot.revision.securityRevision) return reject;
-		const auth = mapping.credential;
-		for (const revision of [...evidence.revision.credentials].sort((a, b) => a.credentialId.localeCompare(b.credentialId))) {
-			const row = (yield* owner.read(auth.table, equal(auth.table, {
-				[auth.id]: revision.credentialId,
-				[auth.subjectId]: nativeId
-			}), { limit: 1 })).rows[0];
-			if (row === void 0 || row[auth.revision] !== revision.revision) return reject;
-			const condition = sql`exists(select 1 from ${auth.table} where ${both(owner.exact(auth.table, row), auth.activeCondition)})`;
-			if (!(yield* owner.check(condition))) return reject;
-			credentialGuards.push({
-				credentialId: revision.credentialId,
-				condition
-			});
-		}
-		const eligible = evidence.proofs.filter((proof) => evidence.revision.credentials.some((revision) => revision.credentialId === proof.credentialId));
-		if (eligible.length !== evidence.proofs.length || eligible.length === 0) return reject;
-		const requirements = [authorization.requirement, Schema.decodeSync(AuthenticationRequirement)(mapping.subject.decodeRequirement(copiedRow(subjectRow)))];
-		const maximumAge = Math.min(policy.maximumEvidenceAgeMillis, ...requirements.map((requirement) => requirement.maximumAgeMillis));
-		const evidenceFactors = new Set(eligible.flatMap((proof) => proof.factors));
-		const evidenceCredentials = new Set(eligible.map((proof) => proof.credentialId));
-		for (const requirement of requirements) if (!requirement.alternatives.some((alternative) => alternative.factors.every((factor) => evidenceFactors.has(factor)) && evidenceCredentials.size >= alternative.minimumCredentials && eligible.some((proof) => (!alternative.userVerified || proof.userVerified) && (!alternative.phishingResistant || proof.phishingResistant)))) return reject;
-		for (const proof of eligible) {
-			const verifiedAt = proof.verifiedAt.epochMilliseconds;
-			if (verifiedAt > now || now - verifiedAt >= maximumAge) return reject;
-			timeBound(verifiedAt, verifiedAt + maximumAge);
-		}
-		if (current !== null && current.secret !== null || action._tag === "Disable" || action._tag === "Regenerate") {
-			const factors = new Set(eligible.flatMap((proof) => proof.factors));
-			if (!(eligible.some((proof) => proof.userVerified && proof.phishingResistant && proof.factors.includes("possession")) || factors.has("knowledge") && factors.has("possession") && new Set(eligible.map((proof) => proof.credentialId)).size >= 2)) return reject;
-		}
-	}
-	if (action._tag === "Recovery" && action.reset) {
-		const target = action.pending;
-		if (target === void 0 || mapping.pendingCondition === void 0 || target.revision.subjectId !== input.subjectId || target.revision.securityRevision !== snapshot.revision.securityRevision || target.expiresAtMillis <= now) return reject;
-		const condition = mapping.pendingCondition(target, nativeId);
-		if (!(yield* owner.check(condition))) return reject;
-		guards.push(condition);
-		timeBound(0, target.expiresAtMillis);
-	}
-	let next, semantic = false, accepted = true;
-	if (action._tag === "Enroll") {
-		const candidate = action.record;
-		if (candidate.subjectId !== input.subjectId || candidate.moduleId !== input.moduleId || candidate.pending === null || candidate.pending.expiresAtMillis <= now || candidate.pending.expiresAtMillis > now + policy.enrollmentLifetimeMillis || candidate.pending.failedAttempts !== 0 || candidate.pending.secret.revision !== candidate.pending.revision) return reject;
-		if (current !== null && current.pending !== null && current.pending.expiresAtMillis > now) return reject;
-		if (current !== null && (candidate.credentialId !== current.credentialId || encodeTotpRecord({
-			...candidate,
-			pending: current.pending
-		}) !== encodeTotpRecord(current))) return reject;
-		if (current === null && (candidate.secret !== null || candidate.recoveryDigests.length !== 0 || candidate.acceptedStep !== -1 || candidate.failedAttempts !== 0)) return reject;
-		next = candidate;
-		timeBound(0, candidate.pending.expiresAtMillis);
-	} else {
-		if (current === null) return reject;
-		next = { ...current };
-		if (action._tag === "Confirm") {
-			const pending = current.pending;
-			if (pending === null || pending.enrollmentId !== action.enrollmentId || pending.expiresAtMillis <= now || pending.failedAttempts >= policy.attemptLimit) return reject;
-			timeBound(0, pending.expiresAtMillis);
-			if (action.matchedStep === null || Math.abs(Math.floor(now / 3e4) - action.matchedStep) > policy.clockSkewSteps) {
-				next = {
-					...current,
-					pending: {
-						...pending,
-						failedAttempts: pending.failedAttempts + 1
-					}
-				};
-				accepted = false;
-			} else {
-				if (new Set(action.recoveryDigests).size !== 10) return reject;
-				next = {
-					...current,
-					secret: pending.secret,
-					revision: pending.secret.revision,
-					pending: null,
-					recoveryDigests: action.recoveryDigests,
-					acceptedStep: action.matchedStep,
-					attemptWindow: now,
-					failedAttempts: 0
-				};
-				semantic = true;
-				timeBound(Math.max(0, (action.matchedStep - policy.clockSkewSteps) * 3e4), (action.matchedStep + policy.clockSkewSteps + 1) * 3e4);
-			}
-		} else if (action._tag === "Verify" || action._tag === "Recovery") {
-			if (current.secret === null) return reject;
-			const expired = now >= current.attemptWindow + policy.attemptWindowMillis, attempts = expired ? 0 : current.failedAttempts, start = expired ? now : current.attemptWindow;
-			if (attempts >= policy.attemptLimit) return reject;
-			next = {
-				...current,
-				attemptWindow: start,
-				failedAttempts: attempts + 1
-			};
-			if (action._tag === "Verify") {
-				if (action.matchedStep === null || action.matchedStep <= current.acceptedStep || Math.abs(Math.floor(now / 3e4) - action.matchedStep) > policy.clockSkewSteps) accepted = false;
-				else {
-					next = {
-						...next,
-						acceptedStep: action.matchedStep,
-						failedAttempts: 0
-					};
-					timeBound(Math.max(0, (action.matchedStep - policy.clockSkewSteps) * 3e4), (action.matchedStep + policy.clockSkewSteps + 1) * 3e4);
-				}
-			} else if ((action.reset ? policy.lostFactorRecovery !== "reset-with-recovery-code" : !policy.allowRecoveryCodeForPending) || !current.recoveryDigests.includes(action.digest)) accepted = false;
-			else {
-				next = {
-					...next,
-					recoveryDigests: current.recoveryDigests.filter((value) => value !== action.digest),
-					failedAttempts: 0
-				};
-				if (action.reset) {
-					next = {
-						...next,
-						secret: null,
-						pending: null,
-						recoveryDigests: [],
-						revision: yield* randomId
-					};
-					semantic = true;
-				}
-			}
-		} else {
-			if (current.secret === null) return reject;
-			semantic = true;
-			if (action._tag === "Disable") next = {
-				...current,
-				secret: null,
-				pending: null,
-				recoveryDigests: [],
-				revision: yield* randomId
-			};
-			else {
-				if (new Set(action.recoveryDigests).size !== 10) return reject;
-				next = {
-					...current,
-					recoveryDigests: action.recoveryDigests
-				};
-			}
-		}
-	}
-	next = {
-		...next,
-		version: yield* randomId
-	};
-	const subject = mapping.subject, factor = mapping.factor, auth = mapping.credential;
-	const subjectKey = { [subject.id]: nativeId };
-	if (semantic) {
-		const revision = yield* randomId, updates = {
-			[subject.securityRevision]: revision,
-			[subject.factorEnabled]: subject.encodeEnabled(next.secret !== null)
-		};
-		yield* owner.update(subject.table, subjectKey, updates);
-		const idKey = {
-			[auth.id]: next.credentialId,
-			[auth.subjectId]: nativeId
-		};
-		const existing = yield* owner.read(auth.table, equal(auth.table, idKey), { limit: 1 });
-		if (existing.rows.length === 0) {
-			const values = {
-				...auth.encodeInsert({
-					credentialId: next.credentialId,
-					subjectId: nativeId,
-					revision: next.revision,
-					active: next.secret !== null
-				}),
-				[auth.id]: next.credentialId,
-				[auth.subjectId]: nativeId,
-				[auth.revision]: next.revision,
-				[auth.status]: auth.encodeStatus(next.secret !== null)
-			};
-			existing.rows = (yield* owner.insert(auth.table, values, { [auth.id]: next.credentialId })).rows;
-		} else yield* owner.update(auth.table, idKey, {
-			[auth.revision]: next.revision,
-			[auth.status]: auth.encodeStatus(next.secret !== null)
-		});
-	}
-	const state = encodeTotpRecord(next), values = {
-		[factor.state]: state,
-		[factor.version]: next.version
-	};
-	if (factorRow === void 0) {
-		const insert = factor.encodeInsert({
-			scope,
-			state,
-			version: next.version
-		});
-		invariant(insert[factor.scope] === scope && insert[factor.state] === state && insert[factor.version] === next.version);
-		factorObservation.rows = (yield* owner.insert(factor.table, insert, { [factor.scope]: scope })).rows;
-	} else yield* owner.update(factor.table, { [factor.scope]: scope }, values);
-	if (commandObservation !== void 0) {
-		const values = factor.encodeInsert({
-			scope: commandScope,
-			state: "totp-command/v1",
-			version: yield* randomId
-		});
-		invariant(values[factor.scope] === commandScope && values[factor.state] === "totp-command/v1");
-		commandObservation.rows = (yield* owner.insert(factor.table, values, { [factor.scope]: commandScope })).rows;
-	}
-	guards.push(sql`exists(select 1 from ${subject.table} where ${both(equal(subject.table, subjectKey), subject.activeCondition)})`);
-	owner.postconditions.push(...guards, ...timeGuards, ...credentialGuards.filter((guard) => !semantic || guard.credentialId !== next.credentialId).map((guard) => guard.condition));
-	return accepted ? {
-		_tag: "Accepted",
-		record: next
-	} : reject;
-});
-//#endregion
-export { CurrentTotpTransaction, captureTotp, copiedRow, decodeTotpRecord, encodeTotpRecord, equal, invariant, mutateTotp, unavailable };
-
-//# sourceMappingURL=totp-state.mjs.map

package/dist/drizzle/totp-state.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"totp-state.mjs","names":[],"sources":["../../src/drizzle/totp-state.ts"],"sourcesContent":["import { AuthenticationRequirement, SecurityRevision } from \"@yielded/auth/Sessions\";\nimport {\n  TotpUnavailable,\n  type TotpMutation,\n  TotpPolicy,\n  TotpRecord,\n  type TotpDecision,\n} from \"@yielded/auth/Totp\";\n/* oxlint-disable no-explicit-any -- private native driver bridge; public makers preserve table and ID types. */\nimport { sql, type SQL } from \"drizzle-orm\";\nimport { Context, Effect, Schema } from \"effect\";\n\nimport { randomId, digest } from \"./crypto\";\nimport { both, makeTransactionRows, type TransactionOwner } from \"./transaction-owner\";\nexport const unavailable = () => TotpUnavailable.make({});\n\nexport const invariant: (condition: unknown) => asserts condition = (condition) => {\n  if (!condition) throw unavailable();\n};\n\nexport class CurrentTotpTransaction extends Context.Service<\n  CurrentTotpTransaction,\n  TransactionOwner<TotpUnavailable>\n>()(\"effect-auth/drizzle/CurrentTotpTransaction\") {}\n\nexport const { equal, col, copiedRow } = makeTransactionRows(unavailable);\nconst codec = Schema.fromJsonString(TotpRecord);\n\nexport const encodeTotpRecord = (record: TotpRecord) => Schema.encodeSync(codec)(record);\nexport const decodeTotpRecord = (state: string) => Schema.decodeSync(codec)(state);\n\nconst scopeFor = (moduleId: string, subjectId: string) =>\n  digest(`effect-auth/totp/scope/v1/${moduleId.length}:${moduleId}/${subjectId}`);\n\nexport const captureTotp = Effect.fn(\"TotpNative.capture\")(function* (\n  mapping: any,\n  subjectId: typeof TotpRecord.Type.subjectId,\n) {\n  const owner = yield* CurrentTotpTransaction,\n    subject = mapping.subject,\n    factor = mapping.factor,\n    nativeId = mapping.subjectIds.toNative(subjectId);\n\n  invariant(mapping.subjectIds.toSubject(nativeId) === subjectId);\n\n  const selected = yield* owner.read(\n    subject.table,\n    equal(subject.table, { [subject.id]: nativeId }),\n    { limit: 1 },\n  );\n\n  const subjectRow = selected.rows[0];\n\n  if (\n    subjectRow === undefined ||\n    !(yield* owner.check(\n      sql`exists(select 1 from ${subject.table} where ${both(owner.exact(subject.table, subjectRow), subject.activeCondition)})`,\n    ))\n  )\n    return undefined;\n\n  const scope = yield* scopeFor(mapping.moduleId, subjectId),\n    found = yield* owner.read(factor.table, equal(factor.table, { [factor.scope]: scope }), {\n      limit: 1,\n    }),\n    row = found.rows[0];\n\n  const record = row === undefined ? null : decodeTotpRecord(row[factor.state] as string);\n\n  invariant(\n    record === null ||\n      ((record.secret === null || record.secret.revision === record.revision) &&\n        (record.pending === null || record.pending.secret.revision === record.pending.revision)),\n  );\n  invariant(\n    record === null ||\n      (record.moduleId === mapping.moduleId &&\n        record.subjectId === subjectId &&\n        record.version === row![factor.version]),\n  );\n\n  return {\n    nativeId,\n    subjectRow,\n    factorRow: row,\n    factorObservation: found,\n    scope,\n    snapshot: {\n      revision: {\n        subjectId,\n        securityRevision: SecurityRevision.make(subjectRow[subject.securityRevision] as string),\n        credentials:\n          record === null || record.secret === null\n            ? []\n            : [\n                {\n                  credentialId: record.credentialId,\n                  revision: SecurityRevision.make(record.revision),\n                },\n              ],\n      },\n      record,\n    },\n  };\n});\n\nconst reject: TotpDecision = { _tag: \"Rejected\" };\n\nexport const mutateTotp = Effect.fn(\"TotpNative.mutate\")(function* (\n  mapping: any,\n  input: TotpMutation,\n) {\n  const owner = yield* CurrentTotpTransaction;\n\n  invariant(\n    input.moduleId === mapping.moduleId &&\n      Schema.encodeSync(Schema.fromJsonString(TotpPolicy))(input.policy) ===\n        Schema.encodeSync(Schema.fromJsonString(TotpPolicy))(mapping.policy),\n  );\n  const captured = yield* captureTotp(mapping, input.subjectId);\n\n  if (captured === undefined) return reject;\n\n  const { snapshot, subjectRow, factorRow, factorObservation, scope, nativeId } = captured,\n    current = snapshot.record,\n    policy = input.policy,\n    action = input.action;\n\n  if (\n    snapshot.revision.securityRevision !== input.snapshot.revision.securityRevision ||\n    (current?.version ?? null) !== (input.snapshot.record?.version ?? null)\n  )\n    return reject;\n  if (\n    (current === null) !== (input.snapshot.record === null) ||\n    (current !== null && encodeTotpRecord(current) !== encodeTotpRecord(input.snapshot.record!))\n  )\n    return reject;\n  const now = yield* owner.now({ engineNowMillis: mapping.engineNowMillis });\n  const guards: SQL[] = [];\n  const credentialGuards: { credentialId: string; condition: SQL }[] = [];\n\n  const commandScope = yield* digest(\n    `effect-auth/totp/command/v1/${mapping.moduleId.length}:${mapping.moduleId}/${input.subjectId.length}:${input.subjectId}/${input.commandId}`,\n  );\n\n  const management = [\"Enroll\", \"Confirm\", \"Disable\", \"Regenerate\"].includes(action._tag);\n\n  const commandObservation = management\n    ? yield* owner.read(\n        mapping.factor.table,\n        equal(mapping.factor.table, { [mapping.factor.scope]: commandScope }),\n        { limit: 1 },\n      )\n    : undefined;\n\n  if (commandObservation !== undefined && commandObservation.rows.length !== 0) return reject;\n  const timeGuards: SQL[] = [];\n\n  const timeBound = (start: number, end: number) => {\n    timeGuards.push(\n      sql`${mapping.engineNowMillis} >= ${start} and ${mapping.engineNowMillis} < ${end}`,\n    );\n  };\n\n  if (\n    action._tag === \"Enroll\" ||\n    action._tag === \"Confirm\" ||\n    action._tag === \"Disable\" ||\n    action._tag === \"Regenerate\"\n  ) {\n    const authorization = input.authorization;\n\n    if (authorization === undefined) return reject;\n    const { challenge, evidence } = authorization;\n\n    const expectedAction = {\n      Enroll: \"enroll\",\n      Confirm: \"confirm\",\n      Disable: \"disable\",\n      Regenerate: \"regenerate\",\n    }[action._tag];\n\n    if (\n      challenge.action !== expectedAction ||\n      challenge.moduleId !== mapping.moduleId ||\n      challenge.commandId !== input.commandId ||\n      challenge.revision.subjectId !== input.subjectId ||\n      challenge.revision.securityRevision !== snapshot.revision.securityRevision ||\n      evidence.flowId !== challenge.flowId ||\n      evidence.bindingDigest !== challenge.bindingDigest ||\n      evidence.revision.subjectId !== input.subjectId ||\n      evidence.revision.securityRevision !== snapshot.revision.securityRevision\n    )\n      return reject;\n    const auth = mapping.credential;\n\n    for (const revision of [...evidence.revision.credentials].sort((a, b) =>\n      a.credentialId.localeCompare(b.credentialId),\n    )) {\n      const found = yield* owner.read(\n        auth.table,\n        equal(auth.table, { [auth.id]: revision.credentialId, [auth.subjectId]: nativeId }),\n        { limit: 1 },\n      );\n\n      const row = found.rows[0];\n\n      if (row === undefined || row[auth.revision] !== revision.revision) return reject;\n      const condition = sql`exists(select 1 from ${auth.table} where ${both(owner.exact(auth.table, row), auth.activeCondition)})`;\n\n      if (!(yield* owner.check(condition))) return reject;\n      credentialGuards.push({ credentialId: revision.credentialId, condition });\n    }\n\n    const eligible = evidence.proofs.filter((proof) =>\n      evidence.revision.credentials.some(\n        (revision) => revision.credentialId === proof.credentialId,\n      ),\n    );\n\n    if (eligible.length !== evidence.proofs.length || eligible.length === 0) return reject;\n\n    const requirements = [\n      authorization.requirement,\n      Schema.decodeSync(AuthenticationRequirement)(\n        mapping.subject.decodeRequirement(copiedRow(subjectRow)),\n      ),\n    ];\n\n    const maximumAge = Math.min(\n      policy.maximumEvidenceAgeMillis,\n      ...requirements.map((requirement) => requirement.maximumAgeMillis),\n    );\n\n    const evidenceFactors = new Set(eligible.flatMap((proof) => proof.factors));\n    const evidenceCredentials = new Set(eligible.map((proof) => proof.credentialId));\n\n    for (const requirement of requirements) {\n      if (\n        !requirement.alternatives.some(\n          (alternative) =>\n            alternative.factors.every((factor) => evidenceFactors.has(factor)) &&\n            evidenceCredentials.size >= alternative.minimumCredentials &&\n            eligible.some(\n              (proof) =>\n                (!alternative.userVerified || proof.userVerified) &&\n                (!alternative.phishingResistant || proof.phishingResistant),\n            ),\n        )\n      )\n        return reject;\n    }\n    for (const proof of eligible) {\n      const verifiedAt = proof.verifiedAt.epochMilliseconds;\n\n      if (verifiedAt > now || now - verifiedAt >= maximumAge) return reject;\n      timeBound(verifiedAt, verifiedAt + maximumAge);\n    }\n    if (\n      (current !== null && current.secret !== null) ||\n      action._tag === \"Disable\" ||\n      action._tag === \"Regenerate\"\n    ) {\n      const factors = new Set(eligible.flatMap((proof) => proof.factors));\n\n      if (\n        !(\n          eligible.some(\n            (proof) =>\n              proof.userVerified && proof.phishingResistant && proof.factors.includes(\"possession\"),\n          ) ||\n          (factors.has(\"knowledge\") &&\n            factors.has(\"possession\") &&\n            new Set(eligible.map((proof) => proof.credentialId)).size >= 2)\n        )\n      )\n        return reject;\n    }\n  }\n  if (action._tag === \"Recovery\" && action.reset) {\n    const target = action.pending;\n\n    if (\n      target === undefined ||\n      mapping.pendingCondition === undefined ||\n      target.revision.subjectId !== input.subjectId ||\n      target.revision.securityRevision !== snapshot.revision.securityRevision ||\n      target.expiresAtMillis <= now\n    )\n      return reject;\n    const condition = mapping.pendingCondition(target, nativeId);\n\n    if (!(yield* owner.check(condition))) return reject;\n    guards.push(condition);\n    timeBound(0, target.expiresAtMillis);\n  }\n\n  let next: TotpRecord,\n    semantic = false,\n    accepted = true;\n\n  if (action._tag === \"Enroll\") {\n    const candidate = action.record;\n\n    if (\n      candidate.subjectId !== input.subjectId ||\n      candidate.moduleId !== input.moduleId ||\n      candidate.pending === null ||\n      candidate.pending.expiresAtMillis <= now ||\n      candidate.pending.expiresAtMillis > now + policy.enrollmentLifetimeMillis ||\n      candidate.pending.failedAttempts !== 0 ||\n      candidate.pending.secret.revision !== candidate.pending.revision\n    )\n      return reject;\n    // Reissuing cannot erase the confirmation budget during its current enrollment lifetime.\n    if (current !== null && current.pending !== null && current.pending.expiresAtMillis > now)\n      return reject;\n    if (\n      current !== null &&\n      (candidate.credentialId !== current.credentialId ||\n        encodeTotpRecord({ ...candidate, pending: current.pending }) !== encodeTotpRecord(current))\n    )\n      return reject;\n    if (\n      current === null &&\n      (candidate.secret !== null ||\n        candidate.recoveryDigests.length !== 0 ||\n        candidate.acceptedStep !== -1 ||\n        candidate.failedAttempts !== 0)\n    )\n      return reject;\n    next = candidate;\n    timeBound(0, candidate.pending.expiresAtMillis);\n  } else {\n    if (current === null) return reject;\n    next = { ...current };\n    if (action._tag === \"Confirm\") {\n      const pending = current.pending;\n\n      if (\n        pending === null ||\n        pending.enrollmentId !== action.enrollmentId ||\n        pending.expiresAtMillis <= now ||\n        pending.failedAttempts >= policy.attemptLimit\n      )\n        return reject;\n      timeBound(0, pending.expiresAtMillis);\n      if (\n        action.matchedStep === null ||\n        Math.abs(Math.floor(now / 30000) - action.matchedStep) > policy.clockSkewSteps\n      ) {\n        next = { ...current, pending: { ...pending, failedAttempts: pending.failedAttempts + 1 } };\n        accepted = false;\n      } else {\n        if (new Set(action.recoveryDigests).size !== 10) return reject;\n        next = {\n          ...current,\n          secret: pending.secret,\n          revision: pending.secret.revision,\n          pending: null,\n          recoveryDigests: action.recoveryDigests,\n          acceptedStep: action.matchedStep,\n          attemptWindow: now,\n          failedAttempts: 0,\n        };\n        semantic = true;\n        timeBound(\n          Math.max(0, (action.matchedStep - policy.clockSkewSteps) * 30000),\n          (action.matchedStep + policy.clockSkewSteps + 1) * 30000,\n        );\n      }\n    } else if (action._tag === \"Verify\" || action._tag === \"Recovery\") {\n      if (current.secret === null) return reject;\n\n      const expired = now >= current.attemptWindow + policy.attemptWindowMillis,\n        attempts = expired ? 0 : current.failedAttempts,\n        start = expired ? now : current.attemptWindow;\n\n      if (attempts >= policy.attemptLimit) return reject;\n      next = { ...current, attemptWindow: start, failedAttempts: attempts + 1 };\n      if (action._tag === \"Verify\") {\n        if (\n          action.matchedStep === null ||\n          action.matchedStep <= current.acceptedStep ||\n          Math.abs(Math.floor(now / 30000) - action.matchedStep) > policy.clockSkewSteps\n        )\n          accepted = false;\n        else {\n          next = { ...next, acceptedStep: action.matchedStep, failedAttempts: 0 };\n          timeBound(\n            Math.max(0, (action.matchedStep - policy.clockSkewSteps) * 30000),\n            (action.matchedStep + policy.clockSkewSteps + 1) * 30000,\n          );\n        }\n      } else {\n        if (\n          (action.reset\n            ? policy.lostFactorRecovery !== \"reset-with-recovery-code\"\n            : !policy.allowRecoveryCodeForPending) ||\n          !current.recoveryDigests.includes(action.digest)\n        )\n          accepted = false;\n        else {\n          next = {\n            ...next,\n            recoveryDigests: current.recoveryDigests.filter((value) => value !== action.digest),\n            failedAttempts: 0,\n          };\n          if (action.reset) {\n            next = {\n              ...next,\n              secret: null,\n              pending: null,\n              recoveryDigests: [],\n              revision: yield* randomId,\n            };\n            semantic = true;\n          }\n        }\n      }\n    } else {\n      if (current.secret === null) return reject;\n      semantic = true;\n      if (action._tag === \"Disable\")\n        next = {\n          ...current,\n          secret: null,\n          pending: null,\n          recoveryDigests: [],\n          revision: yield* randomId,\n        };\n      else {\n        if (new Set(action.recoveryDigests).size !== 10) return reject;\n        next = { ...current, recoveryDigests: action.recoveryDigests };\n      }\n    }\n  }\n  next = { ...next, version: yield* randomId };\n\n  const subject = mapping.subject,\n    factor = mapping.factor,\n    auth = mapping.credential;\n\n  const subjectKey = { [subject.id]: nativeId };\n\n  if (semantic) {\n    const revision = yield* randomId,\n      updates = {\n        [subject.securityRevision]: revision,\n        [subject.factorEnabled]: subject.encodeEnabled(next.secret !== null),\n      };\n\n    yield* owner.update(subject.table, subjectKey, updates);\n    const idKey = { [auth.id]: next.credentialId, [auth.subjectId]: nativeId };\n    const existing = yield* owner.read(auth.table, equal(auth.table, idKey), { limit: 1 });\n\n    if (existing.rows.length === 0) {\n      const values = {\n        ...auth.encodeInsert({\n          credentialId: next.credentialId,\n          subjectId: nativeId,\n          revision: next.revision,\n          active: next.secret !== null,\n        }),\n        [auth.id]: next.credentialId,\n        [auth.subjectId]: nativeId,\n        [auth.revision]: next.revision,\n        [auth.status]: auth.encodeStatus(next.secret !== null),\n      };\n\n      existing.rows = (yield* owner.insert(auth.table, values, {\n        [auth.id]: next.credentialId,\n      })).rows;\n    } else\n      yield* owner.update(auth.table, idKey, {\n        [auth.revision]: next.revision,\n        [auth.status]: auth.encodeStatus(next.secret !== null),\n      });\n    // Management proof observations precede its own credential/revision mutation.\n    // Retain all unrelated credential authority checks at final commit.\n  }\n\n  const state = encodeTotpRecord(next),\n    values = { [factor.state]: state, [factor.version]: next.version };\n\n  if (factorRow === undefined) {\n    const insert = factor.encodeInsert({ scope, state, version: next.version });\n\n    invariant(\n      insert[factor.scope] === scope &&\n        insert[factor.state] === state &&\n        insert[factor.version] === next.version,\n    );\n    factorObservation.rows = (yield* owner.insert(factor.table, insert, {\n      [factor.scope]: scope,\n    })).rows;\n  } else yield* owner.update(factor.table, { [factor.scope]: scope }, values);\n  if (commandObservation !== undefined) {\n    const values = factor.encodeInsert({\n      scope: commandScope,\n      state: \"totp-command/v1\",\n      version: yield* randomId,\n    });\n\n    invariant(values[factor.scope] === commandScope && values[factor.state] === \"totp-command/v1\");\n    commandObservation.rows = (yield* owner.insert(factor.table, values, {\n      [factor.scope]: commandScope,\n    })).rows;\n  }\n  // Exact pre-write observations plus final readback are asserted by the common owner.\n  // Include active subject and native time at finalization, including on rejection commits.\n  guards.push(\n    sql`exists(select 1 from ${subject.table} where ${both(equal(subject.table, subjectKey), subject.activeCondition)})`,\n  );\n  owner.postconditions.push(\n    ...guards,\n    ...timeGuards,\n    ...credentialGuards\n      .filter((guard) => !semantic || guard.credentialId !== next.credentialId)\n      .map((guard) => guard.condition),\n  );\n\n  return accepted ? { _tag: \"Accepted\" as const, record: next } : reject;\n});\n"],"mappings":";;;;;;;AAcA,MAAa,oBAAoB,gBAAgB,KAAK,CAAC,CAAC;AAExD,MAAa,aAAwD,cAAc;CACjF,IAAI,CAAC,WAAW,MAAM,YAAY;AACpC;AAEA,IAAa,yBAAb,cAA4C,QAAQ,QAGlD,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC;AAEnD,MAAa,EAAE,OAAO,KAAK,cAAc,oBAAoB,WAAW;AACxE,MAAM,QAAQ,OAAO,eAAe,UAAU;AAE9C,MAAa,oBAAoB,WAAuB,OAAO,WAAW,KAAK,CAAC,CAAC,MAAM;AACvF,MAAa,oBAAoB,UAAkB,OAAO,WAAW,KAAK,CAAC,CAAC,KAAK;AAEjF,MAAM,YAAY,UAAkB,cAClC,OAAO,6BAA6B,SAAS,OAAO,GAAG,SAAS,GAAG,WAAW;AAEhF,MAAa,cAAc,OAAO,GAAG,oBAAoB,CAAC,CAAC,WACzD,SACA,WACA;CACA,MAAM,QAAQ,OAAO,wBACnB,UAAU,QAAQ,SAClB,SAAS,QAAQ,QACjB,WAAW,QAAQ,WAAW,SAAS,SAAS;CAElD,UAAU,QAAQ,WAAW,UAAU,QAAQ,MAAM,SAAS;CAQ9D,MAAM,cAAa,OANK,MAAM,KAC5B,QAAQ,OACR,MAAM,QAAQ,OAAO,GAAG,QAAQ,KAAK,SAAS,CAAC,GAC/C,EAAE,OAAO,EAAE,CACb,EAAA,CAE4B,KAAK;CAEjC,IACE,eAAe,KAAA,KACf,EAAE,OAAO,MAAM,MACb,GAAG,wBAAwB,QAAQ,MAAM,SAAS,KAAK,MAAM,MAAM,QAAQ,OAAO,UAAU,GAAG,QAAQ,eAAe,EAAE,EAC1H,IAEA,OAAO,KAAA;CAET,MAAM,QAAQ,OAAO,SAAS,QAAQ,UAAU,SAAS,GACvD,QAAQ,OAAO,MAAM,KAAK,OAAO,OAAO,MAAM,OAAO,OAAO,GAAG,OAAO,QAAQ,MAAM,CAAC,GAAG,EACtF,OAAO,EACT,CAAC,GACD,MAAM,MAAM,KAAK;CAEnB,MAAM,SAAS,QAAQ,KAAA,IAAY,OAAO,iBAAiB,IAAI,OAAO,MAAgB;CAEtF,UACE,WAAW,SACP,OAAO,WAAW,QAAQ,OAAO,OAAO,aAAa,OAAO,cAC3D,OAAO,YAAY,QAAQ,OAAO,QAAQ,OAAO,aAAa,OAAO,QAAQ,SACpF;CACA,UACE,WAAW,QACR,OAAO,aAAa,QAAQ,YAC3B,OAAO,cAAc,aACrB,OAAO,YAAY,IAAK,OAAO,QACrC;CAEA,OAAO;EACL;EACA;EACA,WAAW;EACX,mBAAmB;EACnB;EACA,UAAU;GACR,UAAU;IACR;IACA,kBAAkB,iBAAiB,KAAK,WAAW,QAAQ,iBAA2B;IACtF,aACE,WAAW,QAAQ,OAAO,WAAW,OACjC,CAAC,IACD,CACE;KACE,cAAc,OAAO;KACrB,UAAU,iBAAiB,KAAK,OAAO,QAAQ;IACjD,CACF;GACR;GACA;EACF;CACF;AACF,CAAC;AAED,MAAM,SAAuB,EAAE,MAAM,WAAW;AAEhD,MAAa,aAAa,OAAO,GAAG,mBAAmB,CAAC,CAAC,WACvD,SACA,OACA;CACA,MAAM,QAAQ,OAAO;CAErB,UACE,MAAM,aAAa,QAAQ,YACzB,OAAO,WAAW,OAAO,eAAe,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,MAC/D,OAAO,WAAW,OAAO,eAAe,UAAU,CAAC,CAAC,CAAC,QAAQ,MAAM,CACzE;CACA,MAAM,WAAW,OAAO,YAAY,SAAS,MAAM,SAAS;CAE5D,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,EAAE,UAAU,YAAY,WAAW,mBAAmB,OAAO,aAAa,UAC9E,UAAU,SAAS,QACnB,SAAS,MAAM,QACf,SAAS,MAAM;CAEjB,IACE,SAAS,SAAS,qBAAqB,MAAM,SAAS,SAAS,qBAC9D,SAAS,WAAW,WAAW,MAAM,SAAS,QAAQ,WAAW,OAElE,OAAO;CACT,IACG,YAAY,UAAW,MAAM,SAAS,WAAW,SACjD,YAAY,QAAQ,iBAAiB,OAAO,MAAM,iBAAiB,MAAM,SAAS,MAAO,GAE1F,OAAO;CACT,MAAM,MAAM,OAAO,MAAM,IAAI,EAAE,iBAAiB,QAAQ,gBAAgB,CAAC;CACzE,MAAM,SAAgB,CAAC;CACvB,MAAM,mBAA+D,CAAC;CAEtE,MAAM,eAAe,OAAO,OAC1B,+BAA+B,QAAQ,SAAS,OAAO,GAAG,QAAQ,SAAS,GAAG,MAAM,UAAU,OAAO,GAAG,MAAM,UAAU,GAAG,MAAM,WACnI;CAIA,MAAM,qBAFa;EAAC;EAAU;EAAW;EAAW;CAAY,CAAC,CAAC,SAAS,OAAO,IAE9C,IAChC,OAAO,MAAM,KACX,QAAQ,OAAO,OACf,MAAM,QAAQ,OAAO,OAAO,GAAG,QAAQ,OAAO,QAAQ,aAAa,CAAC,GACpE,EAAE,OAAO,EAAE,CACb,IACA,KAAA;CAEJ,IAAI,uBAAuB,KAAA,KAAa,mBAAmB,KAAK,WAAW,GAAG,OAAO;CACrF,MAAM,aAAoB,CAAC;CAE3B,MAAM,aAAa,OAAe,QAAgB;EAChD,WAAW,KACT,GAAG,GAAG,QAAQ,gBAAgB,MAAM,MAAM,OAAO,QAAQ,gBAAgB,KAAK,KAChF;CACF;CAEA,IACE,OAAO,SAAS,YAChB,OAAO,SAAS,aAChB,OAAO,SAAS,aAChB,OAAO,SAAS,cAChB;EACA,MAAM,gBAAgB,MAAM;EAE5B,IAAI,kBAAkB,KAAA,GAAW,OAAO;EACxC,MAAM,EAAE,WAAW,aAAa;EAEhC,MAAM,iBAAiB;GACrB,QAAQ;GACR,SAAS;GACT,SAAS;GACT,YAAY;EACd,EAAE,OAAO;EAET,IACE,UAAU,WAAW,kBACrB,UAAU,aAAa,QAAQ,YAC/B,UAAU,cAAc,MAAM,aAC9B,UAAU,SAAS,cAAc,MAAM,aACvC,UAAU,SAAS,qBAAqB,SAAS,SAAS,oBAC1D,SAAS,WAAW,UAAU,UAC9B,SAAS,kBAAkB,UAAU,iBACrC,SAAS,SAAS,cAAc,MAAM,aACtC,SAAS,SAAS,qBAAqB,SAAS,SAAS,kBAEzD,OAAO;EACT,MAAM,OAAO,QAAQ;EAErB,KAAK,MAAM,YAAY,CAAC,GAAG,SAAS,SAAS,WAAW,CAAC,CAAC,MAAM,GAAG,MACjE,EAAE,aAAa,cAAc,EAAE,YAAY,CAC7C,GAAG;GAOD,MAAM,OAAM,OANS,MAAM,KACzB,KAAK,OACL,MAAM,KAAK,OAAO;KAAG,KAAK,KAAK,SAAS;KAAe,KAAK,YAAY;GAAS,CAAC,GAClF,EAAE,OAAO,EAAE,CACb,EAAA,CAEkB,KAAK;GAEvB,IAAI,QAAQ,KAAA,KAAa,IAAI,KAAK,cAAc,SAAS,UAAU,OAAO;GAC1E,MAAM,YAAY,GAAG,wBAAwB,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK,OAAO,GAAG,GAAG,KAAK,eAAe,EAAE;GAE1H,IAAI,EAAE,OAAO,MAAM,MAAM,SAAS,IAAI,OAAO;GAC7C,iBAAiB,KAAK;IAAE,cAAc,SAAS;IAAc;GAAU,CAAC;EAC1E;EAEA,MAAM,WAAW,SAAS,OAAO,QAAQ,UACvC,SAAS,SAAS,YAAY,MAC3B,aAAa,SAAS,iBAAiB,MAAM,YAChD,CACF;EAEA,IAAI,SAAS,WAAW,SAAS,OAAO,UAAU,SAAS,WAAW,GAAG,OAAO;EAEhF,MAAM,eAAe,CACnB,cAAc,aACd,OAAO,WAAW,yBAAyB,CAAC,CAC1C,QAAQ,QAAQ,kBAAkB,UAAU,UAAU,CAAC,CACzD,CACF;EAEA,MAAM,aAAa,KAAK,IACtB,OAAO,0BACP,GAAG,aAAa,KAAK,gBAAgB,YAAY,gBAAgB,CACnE;EAEA,MAAM,kBAAkB,IAAI,IAAI,SAAS,SAAS,UAAU,MAAM,OAAO,CAAC;EAC1E,MAAM,sBAAsB,IAAI,IAAI,SAAS,KAAK,UAAU,MAAM,YAAY,CAAC;EAE/E,KAAK,MAAM,eAAe,cACxB,IACE,CAAC,YAAY,aAAa,MACvB,gBACC,YAAY,QAAQ,OAAO,WAAW,gBAAgB,IAAI,MAAM,CAAC,KACjE,oBAAoB,QAAQ,YAAY,sBACxC,SAAS,MACN,WACE,CAAC,YAAY,gBAAgB,MAAM,kBACnC,CAAC,YAAY,qBAAqB,MAAM,kBAC7C,CACJ,GAEA,OAAO;EAEX,KAAK,MAAM,SAAS,UAAU;GAC5B,MAAM,aAAa,MAAM,WAAW;GAEpC,IAAI,aAAa,OAAO,MAAM,cAAc,YAAY,OAAO;GAC/D,UAAU,YAAY,aAAa,UAAU;EAC/C;EACA,IACG,YAAY,QAAQ,QAAQ,WAAW,QACxC,OAAO,SAAS,aAChB,OAAO,SAAS,cAChB;GACA,MAAM,UAAU,IAAI,IAAI,SAAS,SAAS,UAAU,MAAM,OAAO,CAAC;GAElE,IACE,EACE,SAAS,MACN,UACC,MAAM,gBAAgB,MAAM,qBAAqB,MAAM,QAAQ,SAAS,YAAY,CACxF,KACC,QAAQ,IAAI,WAAW,KACtB,QAAQ,IAAI,YAAY,KACxB,IAAI,IAAI,SAAS,KAAK,UAAU,MAAM,YAAY,CAAC,CAAC,CAAC,QAAQ,IAGjE,OAAO;EACX;CACF;CACA,IAAI,OAAO,SAAS,cAAc,OAAO,OAAO;EAC9C,MAAM,SAAS,OAAO;EAEtB,IACE,WAAW,KAAA,KACX,QAAQ,qBAAqB,KAAA,KAC7B,OAAO,SAAS,cAAc,MAAM,aACpC,OAAO,SAAS,qBAAqB,SAAS,SAAS,oBACvD,OAAO,mBAAmB,KAE1B,OAAO;EACT,MAAM,YAAY,QAAQ,iBAAiB,QAAQ,QAAQ;EAE3D,IAAI,EAAE,OAAO,MAAM,MAAM,SAAS,IAAI,OAAO;EAC7C,OAAO,KAAK,SAAS;EACrB,UAAU,GAAG,OAAO,eAAe;CACrC;CAEA,IAAI,MACF,WAAW,OACX,WAAW;CAEb,IAAI,OAAO,SAAS,UAAU;EAC5B,MAAM,YAAY,OAAO;EAEzB,IACE,UAAU,cAAc,MAAM,aAC9B,UAAU,aAAa,MAAM,YAC7B,UAAU,YAAY,QACtB,UAAU,QAAQ,mBAAmB,OACrC,UAAU,QAAQ,kBAAkB,MAAM,OAAO,4BACjD,UAAU,QAAQ,mBAAmB,KACrC,UAAU,QAAQ,OAAO,aAAa,UAAU,QAAQ,UAExD,OAAO;EAET,IAAI,YAAY,QAAQ,QAAQ,YAAY,QAAQ,QAAQ,QAAQ,kBAAkB,KACpF,OAAO;EACT,IACE,YAAY,SACX,UAAU,iBAAiB,QAAQ,gBAClC,iBAAiB;GAAE,GAAG;GAAW,SAAS,QAAQ;EAAQ,CAAC,MAAM,iBAAiB,OAAO,IAE3F,OAAO;EACT,IACE,YAAY,SACX,UAAU,WAAW,QACpB,UAAU,gBAAgB,WAAW,KACrC,UAAU,iBAAiB,MAC3B,UAAU,mBAAmB,IAE/B,OAAO;EACT,OAAO;EACP,UAAU,GAAG,UAAU,QAAQ,eAAe;CAChD,OAAO;EACL,IAAI,YAAY,MAAM,OAAO;EAC7B,OAAO,EAAE,GAAG,QAAQ;EACpB,IAAI,OAAO,SAAS,WAAW;GAC7B,MAAM,UAAU,QAAQ;GAExB,IACE,YAAY,QACZ,QAAQ,iBAAiB,OAAO,gBAChC,QAAQ,mBAAmB,OAC3B,QAAQ,kBAAkB,OAAO,cAEjC,OAAO;GACT,UAAU,GAAG,QAAQ,eAAe;GACpC,IACE,OAAO,gBAAgB,QACvB,KAAK,IAAI,KAAK,MAAM,MAAM,GAAK,IAAI,OAAO,WAAW,IAAI,OAAO,gBAChE;IACA,OAAO;KAAE,GAAG;KAAS,SAAS;MAAE,GAAG;MAAS,gBAAgB,QAAQ,iBAAiB;KAAE;IAAE;IACzF,WAAW;GACb,OAAO;IACL,IAAI,IAAI,IAAI,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,OAAO;IACxD,OAAO;KACL,GAAG;KACH,QAAQ,QAAQ;KAChB,UAAU,QAAQ,OAAO;KACzB,SAAS;KACT,iBAAiB,OAAO;KACxB,cAAc,OAAO;KACrB,eAAe;KACf,gBAAgB;IAClB;IACA,WAAW;IACX,UACE,KAAK,IAAI,IAAI,OAAO,cAAc,OAAO,kBAAkB,GAAK,IAC/D,OAAO,cAAc,OAAO,iBAAiB,KAAK,GACrD;GACF;EACF,OAAO,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,YAAY;GACjE,IAAI,QAAQ,WAAW,MAAM,OAAO;GAEpC,MAAM,UAAU,OAAO,QAAQ,gBAAgB,OAAO,qBACpD,WAAW,UAAU,IAAI,QAAQ,gBACjC,QAAQ,UAAU,MAAM,QAAQ;GAElC,IAAI,YAAY,OAAO,cAAc,OAAO;GAC5C,OAAO;IAAE,GAAG;IAAS,eAAe;IAAO,gBAAgB,WAAW;GAAE;GACxE,IAAI,OAAO,SAAS,UAAU;IAC5B,IACE,OAAO,gBAAgB,QACvB,OAAO,eAAe,QAAQ,gBAC9B,KAAK,IAAI,KAAK,MAAM,MAAM,GAAK,IAAI,OAAO,WAAW,IAAI,OAAO,gBAEhE,WAAW;SACR;KACH,OAAO;MAAE,GAAG;MAAM,cAAc,OAAO;MAAa,gBAAgB;KAAE;KACtE,UACE,KAAK,IAAI,IAAI,OAAO,cAAc,OAAO,kBAAkB,GAAK,IAC/D,OAAO,cAAc,OAAO,iBAAiB,KAAK,GACrD;IACF;GACF,OACE,KACG,OAAO,QACJ,OAAO,uBAAuB,6BAC9B,CAAC,OAAO,gCACZ,CAAC,QAAQ,gBAAgB,SAAS,OAAO,MAAM,GAE/C,WAAW;QACR;IACH,OAAO;KACL,GAAG;KACH,iBAAiB,QAAQ,gBAAgB,QAAQ,UAAU,UAAU,OAAO,MAAM;KAClF,gBAAgB;IAClB;IACA,IAAI,OAAO,OAAO;KAChB,OAAO;MACL,GAAG;MACH,QAAQ;MACR,SAAS;MACT,iBAAiB,CAAC;MAClB,UAAU,OAAO;KACnB;KACA,WAAW;IACb;GACF;EAEJ,OAAO;GACL,IAAI,QAAQ,WAAW,MAAM,OAAO;GACpC,WAAW;GACX,IAAI,OAAO,SAAS,WAClB,OAAO;IACL,GAAG;IACH,QAAQ;IACR,SAAS;IACT,iBAAiB,CAAC;IAClB,UAAU,OAAO;GACnB;QACG;IACH,IAAI,IAAI,IAAI,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,OAAO;IACxD,OAAO;KAAE,GAAG;KAAS,iBAAiB,OAAO;IAAgB;GAC/D;EACF;CACF;CACA,OAAO;EAAE,GAAG;EAAM,SAAS,OAAO;CAAS;CAE3C,MAAM,UAAU,QAAQ,SACtB,SAAS,QAAQ,QACjB,OAAO,QAAQ;CAEjB,MAAM,aAAa,GAAG,QAAQ,KAAK,SAAS;CAE5C,IAAI,UAAU;EACZ,MAAM,WAAW,OAAO,UACtB,UAAU;IACP,QAAQ,mBAAmB;IAC3B,QAAQ,gBAAgB,QAAQ,cAAc,KAAK,WAAW,IAAI;EACrE;EAEF,OAAO,MAAM,OAAO,QAAQ,OAAO,YAAY,OAAO;EACtD,MAAM,QAAQ;IAAG,KAAK,KAAK,KAAK;IAAe,KAAK,YAAY;EAAS;EACzE,MAAM,WAAW,OAAO,MAAM,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC;EAErF,IAAI,SAAS,KAAK,WAAW,GAAG;GAC9B,MAAM,SAAS;IACb,GAAG,KAAK,aAAa;KACnB,cAAc,KAAK;KACnB,WAAW;KACX,UAAU,KAAK;KACf,QAAQ,KAAK,WAAW;IAC1B,CAAC;KACA,KAAK,KAAK,KAAK;KACf,KAAK,YAAY;KACjB,KAAK,WAAW,KAAK;KACrB,KAAK,SAAS,KAAK,aAAa,KAAK,WAAW,IAAI;GACvD;GAEA,SAAS,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO,QAAQ,GACtD,KAAK,KAAK,KAAK,aAClB,CAAC,EAAA,CAAG;EACN,OACE,OAAO,MAAM,OAAO,KAAK,OAAO,OAAO;IACpC,KAAK,WAAW,KAAK;IACrB,KAAK,SAAS,KAAK,aAAa,KAAK,WAAW,IAAI;EACvD,CAAC;CAGL;CAEA,MAAM,QAAQ,iBAAiB,IAAI,GACjC,SAAS;GAAG,OAAO,QAAQ;GAAQ,OAAO,UAAU,KAAK;CAAQ;CAEnE,IAAI,cAAc,KAAA,GAAW;EAC3B,MAAM,SAAS,OAAO,aAAa;GAAE;GAAO;GAAO,SAAS,KAAK;EAAQ,CAAC;EAE1E,UACE,OAAO,OAAO,WAAW,SACvB,OAAO,OAAO,WAAW,SACzB,OAAO,OAAO,aAAa,KAAK,OACpC;EACA,kBAAkB,QAAQ,OAAO,MAAM,OAAO,OAAO,OAAO,QAAQ,GACjE,OAAO,QAAQ,MAClB,CAAC,EAAA,CAAG;CACN,OAAO,OAAO,MAAM,OAAO,OAAO,OAAO,GAAG,OAAO,QAAQ,MAAM,GAAG,MAAM;CAC1E,IAAI,uBAAuB,KAAA,GAAW;EACpC,MAAM,SAAS,OAAO,aAAa;GACjC,OAAO;GACP,OAAO;GACP,SAAS,OAAO;EAClB,CAAC;EAED,UAAU,OAAO,OAAO,WAAW,gBAAgB,OAAO,OAAO,WAAW,iBAAiB;EAC7F,mBAAmB,QAAQ,OAAO,MAAM,OAAO,OAAO,OAAO,QAAQ,GAClE,OAAO,QAAQ,aAClB,CAAC,EAAA,CAAG;CACN;CAGA,OAAO,KACL,GAAG,wBAAwB,QAAQ,MAAM,SAAS,KAAK,MAAM,QAAQ,OAAO,UAAU,GAAG,QAAQ,eAAe,EAAE,EACpH;CACA,MAAM,eAAe,KACnB,GAAG,QACH,GAAG,YACH,GAAG,iBACA,QAAQ,UAAU,CAAC,YAAY,MAAM,iBAAiB,KAAK,YAAY,CAAC,CACxE,KAAK,UAAU,MAAM,SAAS,CACnC;CAEA,OAAO,WAAW;EAAE,MAAM;EAAqB,QAAQ;CAAK,IAAI;AAClE,CAAC"}

package/dist/drizzle/totp-target.d.mts

@@ -1,15 +0,0 @@
-import { PersistenceMappingError as PersistenceMappingError$1 } from "./model.mjs";
-import "./totp-model.mjs";
-import "./transaction-owner.mjs";
-import "./SuppliedService.mjs";
-import { TransactionCoordinatorError } from "./transaction-execution.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
-import { Table } from "drizzle-orm";
-import { Context, Crypto, Effect } from "effect";
-import { LifecycleHooks } from "@yielded/auth/Hooks";
-import { Statement } from "effect/sql/Statement";
-import { TotpConfigurationError, TotpPersistence, TotpUnavailable } from "@yielded/auth/Totp";
-//#region src/drizzle/totp-target.d.ts
-export type TotpCoordinatorError<E> = TransactionCoordinatorError<E, TotpUnavailable> | TotpConfigurationError | PersistenceMappingError$1;
-//#endregion
-//# sourceMappingURL=totp-target.d.mts.map

package/dist/drizzle/transaction-execution.d.mts

@@ -1,2 +0,0 @@
-import { TransactionCoordinatorError } from "@yielded/auth-persistence/Adapter";
-export type { TransactionCoordinatorError };

package/dist/drizzle/transaction-execution.mjs

@@ -1,11 +0,0 @@
-import { makeTransactionOwner, reportTransactionFailure } from "./transaction-owner.mjs";
-import { makeTransactionExecutionKernel } from "@yielded/auth-persistence/Adapter";
-//#region src/drizzle/transaction-execution.ts
-const { sqlClientTransactionStandaloneGuard, makeTransactionExecution, coordinateTransactionOwner } = makeTransactionExecutionKernel({
-	makeTransactionOwner,
-	reportTransactionFailure
-});
-//#endregion
-export { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard };
-
-//# sourceMappingURL=transaction-execution.mjs.map