@yielded/auth-persistence 0.1.0-beta.10

package/dist/internal/storage-tables.d.mts

@@ -0,0 +1,913 @@
+import { Schema } from "effect";
+//#region src/internal/storage-tables.d.ts
+export declare const StorageColumn: Schema.Struct<{
+  readonly name: Schema.NonEmptyString;
+  readonly type: Schema.Literals<readonly ["text", "integer", "boolean"]>;
+  readonly nullable: Schema.optionalKey<Schema.Boolean>;
+}>;
+export declare const StorageTable: Schema.Struct<{
+  readonly name: Schema.NonEmptyString;
+  readonly schema: Schema.optionalKey<Schema.NonEmptyString>;
+  readonly columns: Schema.$Record<Schema.String, Schema.Struct<{
+    readonly name: Schema.NonEmptyString;
+    readonly type: Schema.Literals<readonly ["text", "integer", "boolean"]>;
+    readonly nullable: Schema.optionalKey<Schema.Boolean>;
+  }>>;
+  readonly unique: Schema.$Array<Schema.$Array<Schema.String>>;
+}>;
+export type StorageTable = typeof StorageTable.Type;
+/** Logical roles are independent of table names and migration ownership. */
+export declare const storageTables: {
+  readonly subjects: {
+    columns: {
+      id: {
+        type: "text";
+      };
+      active: {
+        type: "boolean";
+      };
+      securityRevision: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("active" | "id" | "securityRevision")[])[];
+  };
+  readonly identifiers: {
+    columns: {
+      namespace: {
+        type: "text";
+      };
+      value: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      revision: {
+        type: "text";
+      };
+      verifiedAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+      active: {
+        type: "boolean";
+      };
+    };
+    unique: readonly (readonly ("active" | "namespace" | "revision" | "subjectId" | "value" | "verifiedAt")[])[];
+  };
+  readonly credentials: {
+    columns: {
+      credentialId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      revision: {
+        type: "text";
+      };
+      active: {
+        type: "boolean";
+      };
+    };
+    unique: readonly (readonly ("active" | "credentialId" | "revision" | "subjectId")[])[];
+  };
+  readonly passwords: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      credentialId: {
+        type: "text";
+      };
+      credentialRevision: {
+        type: "text";
+      };
+      verifierVersion: {
+        type: "text";
+      };
+      verifier: {
+        type: "text";
+      };
+      normalization: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("credentialId" | "credentialRevision" | "moduleId" | "normalization" | "subjectId" | "verifier" | "verifierVersion")[])[];
+  };
+  readonly passwordAttempts: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      attemptId: {
+        type: "text";
+      };
+      identifierNamespace: {
+        type: "text";
+      };
+      identifierValue: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+        nullable: boolean;
+      };
+      credentialId: {
+        type: "text";
+        nullable: boolean;
+      };
+      securityRevision: {
+        type: "text";
+        nullable: boolean;
+      };
+      credentialRevision: {
+        type: "text";
+        nullable: boolean;
+      };
+      verifierVersion: {
+        type: "text";
+        nullable: boolean;
+      };
+      identifierBindingRevision: {
+        type: "text";
+        nullable: boolean;
+      };
+      admittedAt: {
+        type: "integer";
+      };
+      deadline: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+      state: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("action" | "admittedAt" | "attemptId" | "credentialId" | "credentialRevision" | "deadline" | "identifierBindingRevision" | "identifierNamespace" | "identifierValue" | "moduleId" | "retentionUntil" | "securityRevision" | "state" | "subjectId" | "verifierVersion")[])[];
+  };
+  readonly passwordScopes: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      scopeKind: {
+        type: "text";
+      };
+      scopeKey: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("action" | "moduleId" | "scopeKey" | "scopeKind")[])[];
+  };
+  readonly passwordCharges: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      scopeKind: {
+        type: "text";
+      };
+      scopeKey: {
+        type: "text";
+      };
+      attemptId: {
+        type: "text";
+      };
+      occurredAt: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("action" | "attemptId" | "moduleId" | "occurredAt" | "retentionUntil" | "scopeKey" | "scopeKind")[])[];
+  };
+  readonly passwordCommands: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      bindingDigest: {
+        type: "text";
+      };
+      decision: {
+        type: "text";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("action" | "bindingDigest" | "commandId" | "decision" | "moduleId" | "retentionUntil")[])[];
+  };
+  readonly passwordRegistrations: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      requestId: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("moduleId" | "requestId")[])[];
+  };
+  readonly emailCredentials: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      credentialId: {
+        type: "text";
+      };
+      identifierNamespace: {
+        type: "text";
+      };
+      identifierValue: {
+        type: "text";
+      };
+      credentialRevision: {
+        type: "text";
+      };
+      active: {
+        type: "boolean";
+      };
+    };
+    unique: readonly (readonly ("active" | "credentialId" | "credentialRevision" | "identifierNamespace" | "identifierValue" | "moduleId" | "subjectId")[])[];
+  };
+  readonly emailCommands: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      bindingDigest: {
+        type: "text";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("action" | "bindingDigest" | "commandId" | "moduleId" | "retentionUntil")[])[];
+  };
+  readonly phoneState: {
+    columns: {
+      scope: {
+        type: "text";
+      };
+      state: {
+        type: "text";
+      };
+      version: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("scope" | "state" | "version")[])[];
+  };
+  readonly passkeyCredentials: {
+    columns: {
+      credentialId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      rpId: {
+        type: "text";
+      };
+      protocolCredentialId: {
+        type: "text";
+      };
+      credentialKey: {
+        type: "text";
+      };
+      handleKey: {
+        type: "text";
+      };
+      userHandle: {
+        type: "text";
+      };
+      publicKey: {
+        type: "text";
+      };
+      algorithm: {
+        type: "integer";
+      };
+      profile: {
+        type: "text";
+      };
+      credentialRevision: {
+        type: "text";
+      };
+      active: {
+        type: "boolean";
+      };
+      primarySignIn: {
+        type: "boolean";
+      };
+      enrollmentUserVerified: {
+        type: "boolean";
+      };
+      backupEligible: {
+        type: "boolean";
+      };
+      backupState: {
+        type: "boolean";
+      };
+      counter: {
+        type: "integer";
+      };
+      maximumCounter: {
+        type: "integer";
+      };
+      name: {
+        type: "text";
+      };
+      createdAt: {
+        type: "integer";
+      };
+      lastUsedAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+    };
+    unique: readonly (readonly ("active" | "algorithm" | "backupEligible" | "backupState" | "counter" | "createdAt" | "credentialId" | "credentialKey" | "credentialRevision" | "enrollmentUserVerified" | "handleKey" | "lastUsedAt" | "maximumCounter" | "name" | "primarySignIn" | "profile" | "protocolCredentialId" | "publicKey" | "rpId" | "subjectId" | "userHandle")[])[];
+  };
+  readonly passkeyOwnership: {
+    columns: {
+      credentialKey: {
+        type: "text";
+      };
+      rpId: {
+        type: "text";
+      };
+      protocolCredentialId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+        nullable: boolean;
+      };
+      credentialId: {
+        type: "text";
+        nullable: boolean;
+      };
+      state: {
+        type: "text";
+      };
+      version: {
+        type: "text";
+      };
+      reservationId: {
+        type: "text";
+        nullable: boolean;
+      };
+    };
+    unique: readonly (readonly ("credentialId" | "credentialKey" | "protocolCredentialId" | "reservationId" | "rpId" | "state" | "subjectId" | "version")[])[];
+  };
+  readonly passkeyHandles: {
+    columns: {
+      handleKey: {
+        type: "text";
+      };
+      rpId: {
+        type: "text";
+      };
+      userHandle: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+        nullable: boolean;
+      };
+      state: {
+        type: "text";
+      };
+      version: {
+        type: "text";
+      };
+      reservationId: {
+        type: "text";
+        nullable: boolean;
+      };
+    };
+    unique: readonly (readonly ("handleKey" | "reservationId" | "rpId" | "state" | "subjectId" | "userHandle" | "version")[])[];
+  };
+  readonly passkeyModules: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      active: {
+        type: "boolean";
+      };
+      policyRevision: {
+        type: "text";
+      };
+      policy: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("active" | "moduleId" | "policy" | "policyRevision")[])[];
+  };
+  readonly passkeyFlows: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      flowId: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      state: {
+        type: "text";
+      };
+      version: {
+        type: "text";
+      };
+      generation: {
+        type: "integer";
+      };
+      snapshot: {
+        type: "text";
+      };
+      policySnapshot: {
+        type: "text";
+      };
+      requestBindingVerifier: {
+        type: "text";
+      };
+      requestBindingExpiresAt: {
+        type: "integer";
+      };
+      issuedAt: {
+        type: "integer";
+      };
+      expiresAt: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+      claimId: {
+        type: "text";
+        nullable: boolean;
+      };
+      claimedAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+      claimExpiresAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+      credentialSnapshot: {
+        type: "text";
+        nullable: boolean;
+      };
+      subjectScope: {
+        type: "text";
+        nullable: boolean;
+      };
+      targetScope: {
+        type: "text";
+        nullable: boolean;
+      };
+    };
+    unique: readonly (readonly ("claimExpiresAt" | "claimId" | "claimedAt" | "commandId" | "credentialSnapshot" | "expiresAt" | "flowId" | "generation" | "issuedAt" | "moduleId" | "policySnapshot" | "purpose" | "requestBindingExpiresAt" | "requestBindingVerifier" | "retentionUntil" | "snapshot" | "state" | "subjectScope" | "targetScope" | "version")[])[];
+  };
+  readonly passkeyAdmissions: {
+    columns: {
+      authorityScope: {
+        type: "text";
+      };
+      moduleId: {
+        type: "text";
+      };
+      version: {
+        type: "text";
+      };
+      ownerMarker: {
+        type: "text";
+      };
+      admittedAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+    };
+    unique: readonly (readonly ("admittedAt" | "authorityScope" | "moduleId" | "ownerMarker" | "version")[])[];
+  };
+  readonly passkeyCharges: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      flowId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      kind: {
+        type: "text";
+      };
+      scope: {
+        type: "text";
+      };
+      originalWindowMillis: {
+        type: "integer";
+      };
+      admittedAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+      retainUntil: {
+        type: "integer";
+        nullable: boolean;
+      };
+      version: {
+        type: "text";
+      };
+      ownerMarker: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("admittedAt" | "flowId" | "kind" | "moduleId" | "originalWindowMillis" | "ownerMarker" | "purpose" | "retainUntil" | "scope" | "version")[])[];
+  };
+  readonly passkeyCommands: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      credentialId: {
+        type: "text";
+      };
+      intent: {
+        type: "text";
+      };
+      decision: {
+        type: "text";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+      version: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("commandId" | "credentialId" | "decision" | "intent" | "moduleId" | "retentionUntil" | "subjectId" | "version")[])[];
+  };
+  readonly proofRequests: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      requestId: {
+        type: "text";
+      };
+      fingerprint: {
+        type: "text";
+      };
+      proofId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      keyId: {
+        type: "text";
+      };
+      createdAt: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+      receipt: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("createdAt" | "fingerprint" | "keyId" | "moduleId" | "proofId" | "purpose" | "receipt" | "requestId" | "retentionUntil")[])[];
+  };
+  readonly proofSeries: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      scopeKey: {
+        type: "text";
+      };
+      activeProofId: {
+        type: "text";
+        nullable: boolean;
+      };
+      lastIssueAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+      version: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("activeProofId" | "lastIssueAt" | "moduleId" | "purpose" | "scopeKey" | "version")[])[];
+  };
+  readonly proofGenerations: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      proofId: {
+        type: "text";
+      };
+      requestId: {
+        type: "text";
+      };
+      seriesKey: {
+        type: "text";
+      };
+      deliveryId: {
+        type: "text";
+      };
+      binding: {
+        type: "text";
+      };
+      verifierKeyId: {
+        type: "text";
+      };
+      verifierDigest: {
+        type: "text";
+      };
+      issuedAt: {
+        type: "integer";
+      };
+      expiresAt: {
+        type: "integer";
+      };
+      version: {
+        type: "text";
+      };
+      state: {
+        type: "text";
+      };
+      sendCount: {
+        type: "integer";
+      };
+      deliveryState: {
+        type: "text";
+      };
+      claimVersion: {
+        type: "text";
+        nullable: boolean;
+      };
+      claimDeadline: {
+        type: "integer";
+        nullable: boolean;
+      };
+      retryAt: {
+        type: "integer";
+        nullable: boolean;
+      };
+      deliveryRetryMillis: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+      fingerprint: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("binding" | "claimDeadline" | "claimVersion" | "deliveryId" | "deliveryRetryMillis" | "deliveryState" | "expiresAt" | "fingerprint" | "issuedAt" | "moduleId" | "proofId" | "purpose" | "requestId" | "retentionUntil" | "retryAt" | "sendCount" | "seriesKey" | "state" | "verifierDigest" | "verifierKeyId" | "version")[])[];
+  };
+  readonly proofContinuations: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      continuationId: {
+        type: "text";
+      };
+      digest: {
+        type: "text";
+      };
+      proofId: {
+        type: "text";
+      };
+      seriesKey: {
+        type: "text";
+      };
+      binding: {
+        type: "text";
+      };
+      expiresAt: {
+        type: "integer";
+      };
+      consumed: {
+        type: "boolean";
+      };
+      version: {
+        type: "text";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("binding" | "consumed" | "continuationId" | "digest" | "expiresAt" | "moduleId" | "proofId" | "purpose" | "retentionUntil" | "seriesKey" | "version")[])[];
+  };
+  readonly proofScopes: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      scopeKind: {
+        type: "text";
+      };
+      scopeKey: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("action" | "moduleId" | "purpose" | "scopeKey" | "scopeKind")[])[];
+  };
+  readonly proofAbuse: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      action: {
+        type: "text";
+      };
+      scopeKind: {
+        type: "text";
+      };
+      scopeKey: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      occurredAt: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("action" | "commandId" | "moduleId" | "occurredAt" | "purpose" | "retentionUntil" | "scopeKey" | "scopeKind")[])[];
+  };
+  readonly proofFailures: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      purpose: {
+        type: "text";
+      };
+      seriesKey: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      occurredAt: {
+        type: "integer";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("commandId" | "moduleId" | "occurredAt" | "purpose" | "retentionUntil" | "seriesKey")[])[];
+  };
+  readonly proofCommands: {
+    columns: {
+      moduleId: {
+        type: "text";
+      };
+      commandId: {
+        type: "text";
+      };
+      kind: {
+        type: "text";
+      };
+      decision: {
+        type: "text";
+      };
+      retentionUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("commandId" | "decision" | "kind" | "moduleId" | "retentionUntil")[])[];
+  };
+  readonly sessions: {
+    columns: {
+      sessionId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      digest: {
+        type: "text";
+      };
+      version: {
+        type: "text";
+      };
+      securityRevision: {
+        type: "text";
+      };
+      issuedAt: {
+        type: "integer";
+      };
+      expiresAt: {
+        type: "integer";
+      };
+      absoluteExpiresAt: {
+        type: "integer";
+      };
+      record: {
+        type: "text";
+      };
+    };
+    unique: readonly (readonly ("absoluteExpiresAt" | "digest" | "expiresAt" | "issuedAt" | "record" | "securityRevision" | "sessionId" | "subjectId" | "version")[])[];
+  };
+  readonly sessionFlows: {
+    columns: {
+      flowId: {
+        type: "text";
+      };
+      subjectId: {
+        type: "text";
+      };
+      state: {
+        type: "text";
+      };
+      pendingDigest: {
+        type: "text";
+        nullable: boolean;
+      };
+      dedupUntil: {
+        type: "integer";
+      };
+    };
+    unique: readonly (readonly ("dedupUntil" | "flowId" | "pendingDigest" | "state" | "subjectId")[])[];
+  };
+};
+export type StorageRole = keyof typeof storageTables;
+//#endregion
+//# sourceMappingURL=storage-tables.d.mts.map