@yielded/auth-persistence-drizzle 0.1.0-beta.25 → 0.1.0-beta.26

package/src/drizzle/oauth-connected-target.ts

@@ -1,21 +0,0 @@
-import type { OAuthKernel } from "@yielded/auth-persistence/Adapter";
-
-import { oauthKernel } from "./oauth-kernel";
-
-export const makeTargetOAuthConnectedServices: OAuthKernel["connectedTarget"]["makeTargetOAuthConnectedServices"] =
-  oauthKernel.connectedTarget.makeTargetOAuthConnectedServices;
-
-export const makeTargetOAuthConnectedRevocationServices: OAuthKernel["connectedTarget"]["makeTargetOAuthConnectedRevocationServices"] =
-  oauthKernel.connectedTarget.makeTargetOAuthConnectedRevocationServices;
-
-export const coordinateTargetOAuthConnected: OAuthKernel["connectedTarget"]["coordinateTargetOAuthConnected"] =
-  oauthKernel.connectedTarget.coordinateTargetOAuthConnected;
-
-export const coordinateTargetOAuthConnectedRevocations: OAuthKernel["connectedTarget"]["coordinateTargetOAuthConnectedRevocations"] =
-  oauthKernel.connectedTarget.coordinateTargetOAuthConnectedRevocations;
-
-export const oauthConnectedPersistenceLayer: OAuthKernel["connectedTarget"]["oauthConnectedPersistenceLayer"] =
-  oauthKernel.connectedTarget.oauthConnectedPersistenceLayer;
-
-export const oauthConnectedRevocationsLayer: OAuthKernel["connectedTarget"]["oauthConnectedRevocationsLayer"] =
-  oauthKernel.connectedTarget.oauthConnectedRevocationsLayer;

package/src/drizzle/oauth-kernel.ts

@@ -1,10 +0,0 @@
-import { makeOAuthKernel, type OAuthKernel } from "@yielded/auth-persistence/Adapter";
-import { is } from "drizzle-orm";
-import { MySqlTable } from "drizzle-orm/mysql-core";
-import { PgTable } from "drizzle-orm/pg-core";
-
-import { drizzleQueryOperations } from "./query-operations";
-
-export const oauthKernel: OAuthKernel = makeOAuthKernel(drizzleQueryOperations, (table) =>
-  is(table, MySqlTable) ? "mysql" : is(table, PgTable) ? "pg" : "sqlite",
-);

package/src/drizzle/oauth-mysql.ts

@@ -1,10 +0,0 @@
-import { OAuthUnavailable } from "@yielded/auth/OAuth";
-/* oxlint-disable no-explicit-any -- private native transaction adapter. */
-import type { Effect } from "effect";
-
-import { mysqlTransaction } from "./transaction-mysql";
-
-export const mysqlOAuthTransaction = <A, E, R>(
-  database: any,
-  body: (transaction: any) => Effect.Effect<A, E, R>,
-) => mysqlTransaction(() => OAuthUnavailable.make({}), database, body);

package/src/drizzle/passkey-kernel.ts

@@ -1,4 +0,0 @@
-import { type PasskeyKernel, makePasskeyKernel } from "@yielded/auth-persistence/Adapter";
-
-import { drizzleQueryOperations } from "./query-operations";
-export const passkeyKernel: PasskeyKernel = makePasskeyKernel(drizzleQueryOperations);

package/src/drizzle/passkey-state.ts

@@ -1,3 +0,0 @@
-import { passkeyKernel } from "./passkey-kernel";
-export type { PasskeyOwner } from "@yielded/auth-persistence/Adapter";
-export const { unavailable } = passkeyKernel.state;

package/src/drizzle/passkey-target.ts

@@ -1,23 +0,0 @@
-import { passkeyKernel } from "./passkey-kernel";
-
-export type {
-  PasskeyTargetConfiguration,
-  PasskeyCoordinatorError,
-  PasskeyExecution,
-} from "@yielded/auth-persistence/Adapter";
-
-export const {
-  sqlClientPasskeyStandaloneGuard,
-  makePasskeyExecution,
-  capturedService,
-  prepareValue,
-  observationalContext,
-  makePasskeyPersistence,
-  capturedMapping,
-  makeTargetPasskeyCredentials,
-  makeTargetPasskeyEnrollmentContext,
-  makeTargetPasskeyPersistence,
-  makeTargetPasskeyRegistration,
-  coordinateTargetPasskey,
-  coordinateTargetPasskeyRegistration,
-} = passkeyKernel.target;

package/src/drizzle/passkey-write-target.ts

@@ -1,9 +0,0 @@
-import { passkeyKernel } from "./passkey-kernel";
-
-export const {
-  passkeyManagementPersistenceLayer,
-  makeTargetPasskeyManagement,
-  makeTargetPasskeyRegistrationWriter,
-  coordinateTargetPasskeyManagement,
-  coordinateTargetPasskeyRegistrationWriter,
-} = passkeyKernel.writeTarget;

package/src/drizzle/password-prepared-model.ts

@@ -1,241 +0,0 @@
-import type {
-  PasswordPreparedReady,
-  PasswordPreparedReservation,
-  PasswordPreparedVersion,
-} from "@yielded/auth/Password";
-import type { InferInsertModel, InferSelectModel, SQL, Table } from "drizzle-orm";
-import type { Effect } from "effect";
-
-import type { PersistenceMappingError } from "./model";
-import type { D1PasswordPersistenceMapping, PasswordPersistenceMapping } from "./password-model";
-import type {
-  D1ProofPersistenceMapping,
-  ProofPersistenceMapping,
-  RequiredProofConstraints,
-} from "./proof-model";
-
-type ColumnKey<T extends Table> = Extract<keyof T["_"]["columns"], string>;
-export type PasswordPreparedState = "Preparing" | "Ready" | "Consumed" | "Cancelled" | "Expired";
-
-/** The retained intent is also its nonrefundable admission charge. Scalar identity,
- * scope and timing columns survive sensitive snapshot/digest erasure. */
-export interface PasswordPreparedIntentTable<Intent extends Table, NativeSubjectId> {
-  readonly table: Intent;
-  readonly moduleId: ColumnKey<Intent>;
-  readonly intentId: ColumnKey<Intent>;
-  readonly commandId: ColumnKey<Intent>;
-  readonly subjectId: ColumnKey<Intent>;
-  readonly action: ColumnKey<Intent>;
-  readonly generation: ColumnKey<Intent>;
-  readonly version: ColumnKey<Intent>;
-  readonly state: ColumnKey<Intent>;
-  readonly digest: ColumnKey<Intent>;
-  readonly snapshot: ColumnKey<Intent>;
-  readonly identifierScope: ColumnKey<Intent>;
-  readonly createdAt: ColumnKey<Intent>;
-  readonly admittedAt: ColumnKey<Intent>;
-  readonly admissionRetainUntil: ColumnKey<Intent>;
-  readonly preparationExpiresAt: ColumnKey<Intent>;
-  readonly expiresAt: ColumnKey<Intent>;
-  readonly retainUntil: ColumnKey<Intent>;
-  readonly states: Readonly<
-    Record<PasswordPreparedState, InferSelectModel<Intent>[ColumnKey<Intent>]>
-  >;
-  readonly encodeInsert: (input: {
-    readonly reservation: PasswordPreparedReservation;
-    readonly nativeSubjectId: NativeSubjectId;
-    readonly identifierScope: string;
-    readonly admittedAtMillis: number;
-    readonly admissionRetainUntilMillis: number;
-    /** Bounded private core codec output; contains a salted verifier for Change/Reset. */
-    readonly snapshot: string;
-  }) => InferInsertModel<Intent>;
-  readonly encodeReady: (input: {
-    readonly ready: PasswordPreparedReady;
-    readonly snapshot: string;
-  }) => Partial<InferInsertModel<Intent>>;
-  /** Erase snapshot and digest, preserving every identity/scope/time column. */
-  readonly encodeTerminal: (
-    state: Exclude<PasswordPreparedState, "Preparing" | "Ready">,
-  ) => Partial<InferInsertModel<Intent>>;
-}
-
-/** One permanent row per configured module; never one row per attacker input.
- * Native owners lock this before subject → identifier → sorted credentials → intent.
- * It serializes admission and maintenance without process-local locks. */
-export interface PasswordPreparedAdmissionTable<Admission extends Table> {
-  readonly table: Admission;
-  readonly moduleId: ColumnKey<Admission>;
-  readonly intentId: ColumnKey<Admission>;
-  readonly admittedAt: ColumnKey<Admission>;
-  readonly admissionRetainUntil: ColumnKey<Admission>;
-  readonly encodeInsert: (moduleId: string) => InferInsertModel<Admission>;
-}
-
-export const requiredPasswordPreparedConstraints = {
-  admission: "unique(admission.moduleId)",
-  intent: "unique(intent.moduleId,intent.intentId)",
-  command: "unique(intent.moduleId,intent.commandId)",
-  digest: "unique(intent.digest)",
-} as const;
-
-export type RequiredPasswordPreparedConstraints = typeof requiredPasswordPreparedConstraints;
-
-export interface PasswordPreparedPersistenceMapping<
-  Subject extends Table,
-  Identifier extends Table,
-  Credential extends Table,
-  AuthorityCredential extends Table,
-  Command extends Table,
-  Intent extends Table,
-  Admission extends Table,
-  NativeSubjectId,
-> {
-  readonly password: PasswordPersistenceMapping<
-    Subject,
-    Identifier,
-    Credential,
-    AuthorityCredential,
-    Command,
-    NativeSubjectId
-  >;
-  readonly intent: PasswordPreparedIntentTable<Intent, NativeSubjectId>;
-  readonly admission: PasswordPreparedAdmissionTable<Admission>;
-  readonly constraints: RequiredPasswordPreparedConstraints;
-  readonly allocateVersion?: Effect.Effect<PasswordPreparedVersion, PersistenceMappingError>;
-  /** Required by synchronous owners, invoked inside their actual transactionSync. */
-  readonly allocateVersionSync?: () => PasswordPreparedVersion;
-}
-
-export type D1PasswordPreparedPersistenceMapping<
-  Subject extends Table,
-  Identifier extends Table,
-  Credential extends Table,
-  AuthorityCredential extends Table,
-  Command extends Table,
-  Intent extends Table,
-  Admission extends Table,
-  NativeSubjectId,
-> = PasswordPreparedPersistenceMapping<
-  Subject,
-  Identifier,
-  Credential,
-  AuthorityCredential,
-  Command,
-  Intent,
-  Admission,
-  NativeSubjectId
-> & {
-  /** Convert a stored native instant to epoch milliseconds in the same SQL engine. */
-  readonly admissionClock: { readonly toMillis: (instant: SQL) => SQL };
-  readonly password: D1PasswordPersistenceMapping<
-    Subject,
-    Identifier,
-    Credential,
-    AuthorityCredential,
-    Command,
-    NativeSubjectId
-  >;
-};
-
-/** Optional real proof completion authority. Request/delivery/abuse capabilities
- * are not required to complete the original continuation. */
-export type PasswordPreparedProofMapping<
-  Series extends Table,
-  Continuation extends Table,
-  Command extends Table,
-  Subject extends Table,
-  Identifier extends Table,
-  Credential extends Table,
-  NativeSubjectId,
-> = Pick<
-  ProofPersistenceMapping<
-    Table,
-    Series,
-    Table,
-    Continuation,
-    Table,
-    Table,
-    Table,
-    Command,
-    Subject,
-    Identifier,
-    Credential,
-    NativeSubjectId
-  >,
-  | "series"
-  | "continuation"
-  | "command"
-  | "authority"
-  | "scopeKeys"
-  | "encodeInstant"
-  | "decodeInstant"
-  | "allocateVersion"
-  | "allocateVersionSync"
-  | "isSeriesConflict"
-  | "isCommandConflict"
-  | "d1"
-> & {
-  readonly constraints: Pick<
-    RequiredProofConstraints,
-    "series" | "continuationId" | "continuationDigest" | "command"
-  >;
-};
-
-export type D1PasswordPreparedProofMapping<
-  Series extends Table,
-  Continuation extends Table,
-  Command extends Table,
-  Subject extends Table,
-  Identifier extends Table,
-  Credential extends Table,
-  NativeSubjectId,
-> = Pick<
-  D1ProofPersistenceMapping<
-    Table,
-    Series,
-    Table,
-    Continuation,
-    Table,
-    Table,
-    Table,
-    Command,
-    Subject,
-    Identifier,
-    Credential,
-    NativeSubjectId
-  >,
-  Exclude<
-    keyof PasswordPreparedProofMapping<
-      Series,
-      Continuation,
-      Command,
-      Subject,
-      Identifier,
-      Credential,
-      NativeSubjectId
-    >,
-    "constraints"
-  >
-> & {
-  readonly constraints: PasswordPreparedProofMapping<
-    Series,
-    Continuation,
-    Command,
-    Subject,
-    Identifier,
-    Credential,
-    NativeSubjectId
-  >["constraints"];
-};
-
-export type AnyPasswordPreparedPersistenceMapping = PasswordPreparedPersistenceMapping<
-  Table,
-  Table,
-  Table,
-  Table,
-  Table,
-  Table,
-  Table,
-  unknown
->;