@yielded/auth-persistence 0.1.0-beta.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (182) hide show
  1. package/README.md +27 -0
  2. package/dist/Adapter.d.mts +30 -0
  3. package/dist/Adapter.mjs +25 -0
  4. package/dist/index.d.mts +7 -0
  5. package/dist/index.mjs +7 -0
  6. package/dist/internal/PasswordPreparedPostconditions.d.mts +22 -0
  7. package/dist/internal/PasswordPreparedPostconditions.mjs +12 -0
  8. package/dist/internal/PasswordPreparedPostconditions.mjs.map +1 -0
  9. package/dist/internal/configuration.d.mts +174 -0
  10. package/dist/internal/configuration.mjs +7 -0
  11. package/dist/internal/configuration.mjs.map +1 -0
  12. package/dist/internal/email-kernel.d.mts +275 -0
  13. package/dist/internal/email-kernel.mjs +487 -0
  14. package/dist/internal/email-kernel.mjs.map +1 -0
  15. package/dist/internal/mapping-error.d.mts +10 -0
  16. package/dist/internal/mapping-error.mjs +30 -0
  17. package/dist/internal/mapping-error.mjs.map +1 -0
  18. package/dist/internal/models/common.d.mts +12 -0
  19. package/dist/internal/models/email-model.d.mts +353 -0
  20. package/dist/internal/models/email-model.mjs +21 -0
  21. package/dist/internal/models/email-model.mjs.map +1 -0
  22. package/dist/internal/models/passkey-model.d.mts +266 -0
  23. package/dist/internal/models/passkey-model.mjs +34 -0
  24. package/dist/internal/models/passkey-model.mjs.map +1 -0
  25. package/dist/internal/models/passkey-registration-ceremony-model.d.mts +49 -0
  26. package/dist/internal/models/passkey-registration-ceremony-model.mjs +18 -0
  27. package/dist/internal/models/passkey-registration-ceremony-model.mjs.map +1 -0
  28. package/dist/internal/models/passkey-write-model.d.mts +189 -0
  29. package/dist/internal/models/passkey-write-model.mjs +13 -0
  30. package/dist/internal/models/passkey-write-model.mjs.map +1 -0
  31. package/dist/internal/models/password-model.d.mts +328 -0
  32. package/dist/internal/models/password-model.mjs +23 -0
  33. package/dist/internal/models/password-model.mjs.map +1 -0
  34. package/dist/internal/models/proof-model.d.mts +285 -0
  35. package/dist/internal/models/proof-model.mjs +17 -0
  36. package/dist/internal/models/proof-model.mjs.map +1 -0
  37. package/dist/internal/models/session-model.d.mts +199 -0
  38. package/dist/internal/models/session-model.mjs +20 -0
  39. package/dist/internal/models/session-model.mjs.map +1 -0
  40. package/dist/internal/models/step-up-model.d.mts +66 -0
  41. package/dist/internal/models/step-up-model.mjs +9 -0
  42. package/dist/internal/models/step-up-model.mjs.map +1 -0
  43. package/dist/internal/oauth-app.d.mts +11 -0
  44. package/dist/internal/oauth-app.mjs +57 -0
  45. package/dist/internal/oauth-app.mjs.map +1 -0
  46. package/dist/internal/oauth-server.d.mts +10 -0
  47. package/dist/internal/oauth-server.mjs +66 -0
  48. package/dist/internal/oauth-server.mjs.map +1 -0
  49. package/dist/internal/passkey/admission.d.mts +6 -0
  50. package/dist/internal/passkey/admission.mjs +216 -0
  51. package/dist/internal/passkey/admission.mjs.map +1 -0
  52. package/dist/internal/passkey/credentials.d.mts +14 -0
  53. package/dist/internal/passkey/credentials.mjs +249 -0
  54. package/dist/internal/passkey/credentials.mjs.map +1 -0
  55. package/dist/internal/passkey/enrollment.mjs +138 -0
  56. package/dist/internal/passkey/enrollment.mjs.map +1 -0
  57. package/dist/internal/passkey/flow.d.mts +21 -0
  58. package/dist/internal/passkey/flow.mjs +452 -0
  59. package/dist/internal/passkey/flow.mjs.map +1 -0
  60. package/dist/internal/passkey/management.mjs +231 -0
  61. package/dist/internal/passkey/management.mjs.map +1 -0
  62. package/dist/internal/passkey/registration-ceremony.d.mts +9 -0
  63. package/dist/internal/passkey/registration-ceremony.mjs +129 -0
  64. package/dist/internal/passkey/registration-ceremony.mjs.map +1 -0
  65. package/dist/internal/passkey/registration-custody.d.mts +2 -0
  66. package/dist/internal/passkey/registration-custody.mjs +52 -0
  67. package/dist/internal/passkey/registration-custody.mjs.map +1 -0
  68. package/dist/internal/passkey/registration-write.mjs +211 -0
  69. package/dist/internal/passkey/registration-write.mjs.map +1 -0
  70. package/dist/internal/passkey/state.d.mts +10 -0
  71. package/dist/internal/passkey/state.mjs +234 -0
  72. package/dist/internal/passkey/state.mjs.map +1 -0
  73. package/dist/internal/passkey/target.d.mts +19 -0
  74. package/dist/internal/passkey/target.mjs +190 -0
  75. package/dist/internal/passkey/target.mjs.map +1 -0
  76. package/dist/internal/passkey/write-state.d.mts +17 -0
  77. package/dist/internal/passkey/write-state.mjs +345 -0
  78. package/dist/internal/passkey/write-state.mjs.map +1 -0
  79. package/dist/internal/passkey/write-target.mjs +192 -0
  80. package/dist/internal/passkey/write-target.mjs.map +1 -0
  81. package/dist/internal/passkey-kernel.d.mts +5592 -0
  82. package/dist/internal/passkey-kernel.mjs +49 -0
  83. package/dist/internal/passkey-kernel.mjs.map +1 -0
  84. package/dist/internal/passkeys.d.mts +7 -0
  85. package/dist/internal/passkeys.mjs +368 -0
  86. package/dist/internal/passkeys.mjs.map +1 -0
  87. package/dist/internal/password-kernel.d.mts +290 -0
  88. package/dist/internal/password-kernel.mjs +704 -0
  89. package/dist/internal/password-kernel.mjs.map +1 -0
  90. package/dist/internal/persistence.d.mts +25 -0
  91. package/dist/internal/persistence.mjs +291 -0
  92. package/dist/internal/persistence.mjs.map +1 -0
  93. package/dist/internal/phone-kernel.d.mts +162 -0
  94. package/dist/internal/phone-kernel.mjs +434 -0
  95. package/dist/internal/phone-kernel.mjs.map +1 -0
  96. package/dist/internal/proof-kernel.d.mts +93 -0
  97. package/dist/internal/proof-kernel.mjs +619 -0
  98. package/dist/internal/proof-kernel.mjs.map +1 -0
  99. package/dist/internal/query-operations.d.mts +61 -0
  100. package/dist/internal/registration-contract.d.mts +16 -0
  101. package/dist/internal/registration.mjs +66 -0
  102. package/dist/internal/registration.mjs.map +1 -0
  103. package/dist/internal/session-kernel.d.mts +48 -0
  104. package/dist/internal/session-kernel.mjs +737 -0
  105. package/dist/internal/session-kernel.mjs.map +1 -0
  106. package/dist/internal/sql-persistence.d.mts +10 -0
  107. package/dist/internal/sql-persistence.mjs +37 -0
  108. package/dist/internal/sql-persistence.mjs.map +1 -0
  109. package/dist/internal/sql-query.mjs +207 -0
  110. package/dist/internal/sql-query.mjs.map +1 -0
  111. package/dist/internal/sql-table.d.mts +36 -0
  112. package/dist/internal/sql-table.mjs +81 -0
  113. package/dist/internal/sql-table.mjs.map +1 -0
  114. package/dist/internal/standalone.d.mts +9 -0
  115. package/dist/internal/standalone.mjs +13 -0
  116. package/dist/internal/standalone.mjs.map +1 -0
  117. package/dist/internal/step-up-state.d.mts +49 -0
  118. package/dist/internal/step-up-state.mjs +32 -0
  119. package/dist/internal/step-up-state.mjs.map +1 -0
  120. package/dist/internal/storage-mapping.mjs +686 -0
  121. package/dist/internal/storage-mapping.mjs.map +1 -0
  122. package/dist/internal/storage-tables.d.mts +913 -0
  123. package/dist/internal/storage-tables.mjs +387 -0
  124. package/dist/internal/storage-tables.mjs.map +1 -0
  125. package/dist/internal/storage-validation.mjs +58 -0
  126. package/dist/internal/storage-validation.mjs.map +1 -0
  127. package/dist/internal/transaction-execution-kernel.d.mts +38 -0
  128. package/dist/internal/transaction-execution-kernel.mjs +116 -0
  129. package/dist/internal/transaction-execution-kernel.mjs.map +1 -0
  130. package/dist/internal/transaction-kernel.d.mts +77 -0
  131. package/dist/internal/transaction-kernel.mjs +260 -0
  132. package/dist/internal/transaction-kernel.mjs.map +1 -0
  133. package/package.json +1 -0
  134. package/src/Adapter.ts +291 -0
  135. package/src/index.ts +6 -0
  136. package/src/internal/PasswordPreparedPostconditions.ts +30 -0
  137. package/src/internal/configuration.ts +282 -0
  138. package/src/internal/email-kernel.ts +1535 -0
  139. package/src/internal/mapping-error.ts +36 -0
  140. package/src/internal/models/common.ts +11 -0
  141. package/src/internal/models/email-model.ts +559 -0
  142. package/src/internal/models/passkey-model.ts +390 -0
  143. package/src/internal/models/passkey-registration-ceremony-model.ts +72 -0
  144. package/src/internal/models/passkey-write-model.ts +297 -0
  145. package/src/internal/models/password-model.ts +513 -0
  146. package/src/internal/models/proof-model.ts +424 -0
  147. package/src/internal/models/session-model.ts +375 -0
  148. package/src/internal/models/step-up-model.ts +135 -0
  149. package/src/internal/oauth-app.ts +82 -0
  150. package/src/internal/oauth-server.ts +89 -0
  151. package/src/internal/passkey/admission.ts +361 -0
  152. package/src/internal/passkey/credentials.ts +511 -0
  153. package/src/internal/passkey/enrollment.ts +326 -0
  154. package/src/internal/passkey/flow.ts +1062 -0
  155. package/src/internal/passkey/management.ts +421 -0
  156. package/src/internal/passkey/registration-ceremony.ts +283 -0
  157. package/src/internal/passkey/registration-custody.ts +91 -0
  158. package/src/internal/passkey/registration-write.ts +426 -0
  159. package/src/internal/passkey/state.ts +353 -0
  160. package/src/internal/passkey/target.ts +586 -0
  161. package/src/internal/passkey/write-state.ts +681 -0
  162. package/src/internal/passkey/write-target.ts +452 -0
  163. package/src/internal/passkey-kernel.ts +104 -0
  164. package/src/internal/passkeys.ts +606 -0
  165. package/src/internal/password-kernel.ts +2124 -0
  166. package/src/internal/persistence.ts +588 -0
  167. package/src/internal/phone-kernel.ts +846 -0
  168. package/src/internal/proof-kernel.ts +1954 -0
  169. package/src/internal/query-operations.ts +81 -0
  170. package/src/internal/registration-contract.ts +22 -0
  171. package/src/internal/registration.ts +161 -0
  172. package/src/internal/session-kernel.ts +2217 -0
  173. package/src/internal/sql-persistence.ts +45 -0
  174. package/src/internal/sql-query.ts +298 -0
  175. package/src/internal/sql-table.ts +104 -0
  176. package/src/internal/standalone.ts +30 -0
  177. package/src/internal/step-up-state.ts +139 -0
  178. package/src/internal/storage-mapping.ts +708 -0
  179. package/src/internal/storage-tables.ts +408 -0
  180. package/src/internal/storage-validation.ts +117 -0
  181. package/src/internal/transaction-execution-kernel.ts +313 -0
  182. package/src/internal/transaction-kernel.ts +593 -0
@@ -0,0 +1,313 @@
1
+ import {
2
+ coordinateCommit,
3
+ hasCommitScope,
4
+ CurrentCommitJournal,
5
+ type LifecycleHooks,
6
+ type HookConfigurationError,
7
+ } from "@yielded/auth/Hooks";
8
+ /* oxlint-disable no-explicit-any -- existing storage kernels erase foreign table shapes; domain errors remain typed. */
9
+ /* oxlint-disable no-explicit-any -- private execution bridge retains exact public driver wrappers. */
10
+ import { Context, Effect } from "effect";
11
+ import type * as SqlClient from "effect/unstable/sql/SqlClient";
12
+ import type * as SqlError from "effect/unstable/sql/SqlError";
13
+ import type { Statement } from "effect/unstable/sql/Statement";
14
+
15
+ import { requireStandalone } from "./standalone";
16
+ import {
17
+ type TransactionNativeDatabase,
18
+ type TransactionOwner,
19
+ type makeTransactionKernel,
20
+ } from "./transaction-kernel";
21
+
22
+ export interface TransactionTargetConfiguration<Failure> {
23
+ readonly mode: "interactive" | "synchronous" | "batch";
24
+ readonly dialect: "pg" | "mysql" | "sqlite";
25
+ readonly locking: boolean;
26
+ readonly standaloneGuard: (database: any) => Effect.Effect<void, Failure>;
27
+ readonly transaction?: <A, E, R>(
28
+ database: any,
29
+ body: (transaction: any) => Effect.Effect<A, E, R>,
30
+ ) => Effect.Effect<A, E | SqlError.SqlError | Failure, R>;
31
+ }
32
+
33
+ export type TransactionCoordinatorError<E, Failure> =
34
+ | E
35
+ | Failure
36
+ | HookConfigurationError
37
+ | SqlError.SqlError;
38
+
39
+ export interface TransactionBound<Failure> {
40
+ readonly owner: TransactionOwner<Failure>;
41
+ used: boolean;
42
+ poisoned: boolean;
43
+ active: boolean;
44
+ inFlight: number;
45
+ }
46
+
47
+ export interface TransactionExecution<Failure, OwnerId, Requirements = LifecycleHooks> {
48
+ readonly bound: boolean;
49
+ readonly active: () => boolean;
50
+ readonly admit: Effect.Effect<void, Failure>;
51
+ readonly poison: () => void;
52
+ readonly run: <A, E, R>(
53
+ body: Effect.Effect<A, E, R>,
54
+ mutation?: boolean,
55
+ ) => Effect.Effect<A, Failure, Exclude<R, OwnerId | CurrentCommitJournal> | Requirements>;
56
+ }
57
+
58
+ export const makeTransactionExecutionKernel = (
59
+ transactions: Pick<
60
+ ReturnType<typeof makeTransactionKernel>,
61
+ "makeTransactionOwner" | "reportTransactionFailure"
62
+ >,
63
+ ) => {
64
+ const { makeTransactionOwner, reportTransactionFailure } = transactions;
65
+
66
+ const sqlClientTransactionStandaloneGuard = <Failure>(
67
+ unavailable: () => Failure,
68
+ database: {
69
+ readonly $client: Pick<SqlClient.SqlClient, "transactionService">;
70
+ },
71
+ ) => requireStandalone(unavailable, database.$client);
72
+
73
+ const makeTransactionExecution = <Failure, OwnerId>(
74
+ ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,
75
+ database: TransactionNativeDatabase,
76
+ configuration: TransactionTargetConfiguration<Failure>,
77
+ unavailable: () => Failure,
78
+ nonce: () => string,
79
+ bound?: TransactionBound<Failure>,
80
+ ): TransactionExecution<Failure, OwnerId> => {
81
+ const invariant: (value: unknown) => asserts value = (value) => {
82
+ if (!value) throw unavailable();
83
+ };
84
+
85
+ return {
86
+ bound: bound !== undefined,
87
+ active: () => bound === undefined || bound.active,
88
+ admit:
89
+ bound !== undefined
90
+ ? Effect.suspend(() => (bound.active ? Effect.void : Effect.fail(unavailable())))
91
+ : Effect.gen(function* () {
92
+ if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
93
+ yield* configuration.standaloneGuard(database);
94
+ }),
95
+ poison: () => {
96
+ if (bound !== undefined) bound.poisoned = true;
97
+ },
98
+ run: <A, E, R>(
99
+ body: Effect.Effect<A, E, R>,
100
+ mutation = true,
101
+ ): Effect.Effect<A, Failure, Exclude<R, OwnerId | CurrentCommitJournal> | LifecycleHooks> => {
102
+ return Effect.suspend(() => {
103
+ let entered = false;
104
+
105
+ const work =
106
+ bound !== undefined
107
+ ? Effect.gen(function* () {
108
+ if (!bound.active) return yield* Effect.fail(unavailable());
109
+ entered = true;
110
+ bound.inFlight++;
111
+ if (!mutation)
112
+ return yield* Effect.provideContext(
113
+ body,
114
+ Context.make(ownerTag, bound.owner).pipe(
115
+ Context.add(CurrentCommitJournal, bound.owner.journal),
116
+ ),
117
+ );
118
+ invariant(!bound.used && !bound.poisoned);
119
+ bound.used = true;
120
+
121
+ const result = yield* coordinateCommit(
122
+ (journal) =>
123
+ Effect.gen(function* () {
124
+ bound.owner.guards.push(journal.prepare(undefined));
125
+
126
+ return yield* Effect.provideContext(
127
+ body,
128
+ Context.make(ownerTag, { ...bound.owner, journal }).pipe(
129
+ Context.add(CurrentCommitJournal, journal),
130
+ ),
131
+ );
132
+ }),
133
+ { mode: configuration.mode },
134
+ );
135
+
136
+ return result.value;
137
+ }).pipe(
138
+ Effect.onExit((exit) =>
139
+ Effect.sync(() => {
140
+ if (entered) bound.inFlight--;
141
+ if (exit._tag === "Failure") bound.poisoned = true;
142
+ }),
143
+ ),
144
+ )
145
+ : Effect.gen(function* () {
146
+ if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
147
+ yield* configuration.standaloneGuard(database);
148
+ const marker = nonce();
149
+
150
+ const result = yield* coordinateCommit(
151
+ (journal) => {
152
+ const run = (tx: TransactionNativeDatabase) =>
153
+ Effect.gen(function* () {
154
+ const owner = makeTransactionOwner(tx, journal, marker, unavailable, {
155
+ client: database.$client,
156
+ batch: configuration.mode === "batch",
157
+ locking: configuration.locking,
158
+ mysql: configuration.dialect === "mysql",
159
+ dialect: configuration.dialect,
160
+ });
161
+
162
+ const value = yield* Effect.provideContext(
163
+ body,
164
+ Context.make(ownerTag, owner).pipe(
165
+ Context.add(CurrentCommitJournal, journal),
166
+ ),
167
+ );
168
+
169
+ yield* owner.finish();
170
+ if (configuration.mode === "batch")
171
+ yield* tx.$client.batch(owner.statements);
172
+
173
+ return value;
174
+ });
175
+
176
+ return configuration.mode === "batch"
177
+ ? run(database)
178
+ : configuration.transaction !== undefined
179
+ ? configuration.transaction(database, run)
180
+ : database.transaction(run);
181
+ },
182
+ { mode: configuration.mode },
183
+ );
184
+
185
+ return result.value;
186
+ });
187
+
188
+ return work.pipe(
189
+ (operation) => reportTransactionFailure(operation, unavailable),
190
+ Effect.mapError(unavailable),
191
+ Effect.catchDefect(() => Effect.fail(unavailable())),
192
+ );
193
+ });
194
+ },
195
+ };
196
+ };
197
+
198
+ const coordinateTransactionOwner = <
199
+ Failure,
200
+ OwnerId,
201
+ Resources,
202
+ AllocationError,
203
+ Services,
204
+ Transaction,
205
+ A,
206
+ E,
207
+ R,
208
+ >(
209
+ database: TransactionNativeDatabase,
210
+ ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,
211
+ configuration: TransactionTargetConfiguration<Failure>,
212
+ allocate: Effect.Effect<Resources, AllocationError>,
213
+ unavailable: () => Failure,
214
+ nonce: () => string,
215
+ services: (execution: TransactionExecution<Failure, OwnerId>, resources: Resources) => Services,
216
+ owner: (
217
+ transaction: Transaction,
218
+ services: Services,
219
+ append: (statement: Statement<any>) => void,
220
+ ) => Effect.Effect<A, E, R>,
221
+ ): Effect.Effect<
222
+ A,
223
+ TransactionCoordinatorError<E, Failure>,
224
+ Exclude<R, CurrentCommitJournal> | LifecycleHooks
225
+ > => {
226
+ return Effect.gen(function* () {
227
+ if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
228
+ yield* configuration.standaloneGuard(database);
229
+
230
+ // Allocation is independent of registration data and always precedes the physical owner.
231
+ const resources = yield* allocate.pipe(
232
+ (operation) => reportTransactionFailure(operation, unavailable),
233
+ Effect.mapError(unavailable),
234
+ Effect.catchDefect(() => Effect.fail(unavailable())),
235
+ );
236
+
237
+ const marker = nonce();
238
+
239
+ const result = yield* coordinateCommit(
240
+ (journal) => {
241
+ const run = (tx: TransactionNativeDatabase) =>
242
+ Effect.gen(function* () {
243
+ const state = makeTransactionOwner(tx, journal, marker, unavailable, {
244
+ client: database.$client,
245
+ batch: configuration.mode === "batch",
246
+ dialect: configuration.dialect,
247
+ mysql: configuration.dialect === "mysql",
248
+ locking: configuration.locking,
249
+ });
250
+
251
+ const bound: TransactionBound<Failure> = {
252
+ owner: state,
253
+ used: false,
254
+ poisoned: false,
255
+ active: true,
256
+ inFlight: 0,
257
+ };
258
+
259
+ return yield* Effect.gen(function* () {
260
+ const value = yield* owner(
261
+ tx as Transaction,
262
+ services(
263
+ makeTransactionExecution(
264
+ ownerTag,
265
+ tx,
266
+ configuration,
267
+ unavailable,
268
+ nonce,
269
+ bound,
270
+ ),
271
+ resources,
272
+ ),
273
+ (statement) => {
274
+ if (!bound.active) throw unavailable();
275
+ state.statements.push(statement);
276
+ },
277
+ );
278
+
279
+ bound.active = false;
280
+ if (bound.poisoned || bound.inFlight !== 0)
281
+ return yield* Effect.fail(unavailable());
282
+ yield* state.finish();
283
+ if (configuration.mode === "batch") yield* tx.$client.batch(state.statements);
284
+
285
+ return value;
286
+ }).pipe(
287
+ Effect.ensuring(
288
+ Effect.sync(() => {
289
+ bound.active = false;
290
+ }),
291
+ ),
292
+ );
293
+ });
294
+
295
+ return configuration.mode === "batch"
296
+ ? run(database)
297
+ : configuration.transaction !== undefined
298
+ ? configuration.transaction(database, run)
299
+ : database.transaction(run);
300
+ },
301
+ { mode: configuration.mode },
302
+ );
303
+
304
+ return result.value as A;
305
+ });
306
+ };
307
+
308
+ return {
309
+ sqlClientTransactionStandaloneGuard,
310
+ makeTransactionExecution,
311
+ coordinateTransactionOwner,
312
+ };
313
+ };