@yielded/auth-persistence 0.1.0-beta.23 → 0.1.0-beta.24

package/dist/internal/sql-oauth-connected-model.d.mts

@@ -0,0 +1,29 @@
+import { OAuthConnectedAction, OAuthConnectedAdmissionTable as OAuthConnectedAdmissionTable$1, OAuthConnectedAuthorityMapping as OAuthConnectedAuthorityMapping$1, OAuthConnectedClientRegistrationTable as OAuthConnectedClientRegistrationTable$1, OAuthConnectedCohortTable as OAuthConnectedCohortTable$1, OAuthConnectedCommandTable as OAuthConnectedCommandTable$1, OAuthConnectedFlowTable as OAuthConnectedFlowTable$1, OAuthConnectedGrantTable as OAuthConnectedGrantTable$1, OAuthConnectedMapping as OAuthConnectedMapping$1, OAuthConnectedOrderCodec, OAuthConnectedOwnershipRead as OAuthConnectedOwnershipRead$1, OAuthConnectedPolicyGuard as OAuthConnectedPolicyGuard$1, OAuthConnectedPolicyGuardTable as OAuthConnectedPolicyGuardTable$1, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable as OAuthConnectedRevocationJobTable$1, OAuthConnectedRevocationMapping as OAuthConnectedRevocationMapping$1, OAuthConnectedSqlPolicy as OAuthConnectedSqlPolicy$1, OAuthConnectedSubjectTable as OAuthConnectedSubjectTable$1, oauth_connected_model_d_exports, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./models/oauth-connected-model.mjs";
+import { Fragment, Table } from "./sql-table.mjs";
+import { SqlTableModel } from "./sql-oauth-model.mjs";
+//#region src/internal/sql-oauth-connected-model.d.ts
+export type OAuthConnectedSubjectTable<S extends Table> = OAuthConnectedSubjectTable$1<SqlTableModel<S>, Fragment>;
+export type OAuthConnectedFlowTable<F extends Table, N> = OAuthConnectedFlowTable$1<SqlTableModel<F>, N>;
+export type OAuthConnectedGrantTable<G extends Table, N> = OAuthConnectedGrantTable$1<SqlTableModel<G>, N>;
+/** Also stores a permanent provider/issuer scope anchor. clientKey must fit 52
+ * ASCII characters. Empty clientRegistrationId is reserved for that anchor;
+ * actual profile registrations are nonempty. Scope counter stays zero. */
+export type OAuthConnectedClientRegistrationTable<C extends Table> = OAuthConnectedClientRegistrationTable$1<SqlTableModel<C>>;
+/** Remote authority: no local-subject column or subject-scoped key. Retain this
+ * anchor/cutoff when a legitimately released tuple gains a different local owner. */
+export type OAuthConnectedCohortTable<C extends Table> = OAuthConnectedCohortTable$1<SqlTableModel<C>>;
+export type OAuthConnectedAdmissionTable<A extends Table, N> = OAuthConnectedAdmissionTable$1<SqlTableModel<A>, N>;
+export type OAuthConnectedCommandTable<C extends Table, N> = OAuthConnectedCommandTable$1<SqlTableModel<C>, N>;
+export type OAuthConnectedRevocationJobTable<J extends Table, N> = OAuthConnectedRevocationJobTable$1<SqlTableModel<J>, N>;
+export type OAuthConnectedPolicyGuardTable<T extends Table, N> = OAuthConnectedPolicyGuardTable$1<SqlTableModel<T>, N, Fragment>;
+export type OAuthConnectedPolicyGuard<N> = OAuthConnectedPolicyGuard$1<N, Fragment, Table>;
+export declare const oauthConnectedPolicyGuard: <T extends Table, N>(input: OAuthConnectedPolicyGuardTable<T, N>) => OAuthConnectedPolicyGuard<N>;
+export type OAuthConnectedSqlPolicy<N> = OAuthConnectedSqlPolicy$1<N, Fragment, Table>;
+/** Existing ownership only; workers never allocate or acquire a tuple. */
+export type OAuthConnectedOwnershipRead<T extends Table, O extends Table, N> = OAuthConnectedOwnershipRead$1<SqlTableModel<T>, SqlTableModel<O>, N, Fragment>;
+export type OAuthConnectedAuthorityMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, N> = OAuthConnectedAuthorityMapping$1<SqlTableModel<T>, SqlTableModel<O>, SqlTableModel<F>, SqlTableModel<G>, SqlTableModel<C>, SqlTableModel<H>, N, Fragment>;
+export type OAuthConnectedMapping<S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table = never> = OAuthConnectedMapping$1<SqlTableModel<S>, SqlTableModel<AC>, SqlTableModel<T>, SqlTableModel<O>, SqlTableModel<F>, SqlTableModel<G>, SqlTableModel<C>, SqlTableModel<H>, SqlTableModel<A>, SqlTableModel<D>, N, SqlTableModel<J>, Fragment, Table, SqlTableModel<Table>>;
+export type OAuthConnectedRevocationMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, J extends Table, N> = OAuthConnectedRevocationMapping$1<SqlTableModel<T>, SqlTableModel<O>, SqlTableModel<F>, SqlTableModel<G>, SqlTableModel<C>, SqlTableModel<H>, SqlTableModel<J>, N, Fragment>;
+//#endregion
+export { type OAuthConnectedAction, type OAuthConnectedOrderCodec, type OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };
+//# sourceMappingURL=sql-oauth-connected-model.d.mts.map

package/dist/internal/sql-oauth-connected-model.mjs

@@ -0,0 +1,7 @@
+import { oauthConnectedPolicyGuard as oauthConnectedPolicyGuard$1, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./models/oauth-connected-model.mjs";
+//#region src/internal/sql-oauth-connected-model.ts
+const oauthConnectedPolicyGuard = (input) => oauthConnectedPolicyGuard$1(input);
+//#endregion
+export { oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };
+
+//# sourceMappingURL=sql-oauth-connected-model.mjs.map

package/dist/internal/sql-oauth-connected-model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-oauth-connected-model.mjs","names":["Shared.oauthConnectedPolicyGuard"],"sources":["../../src/internal/sql-oauth-connected-model.ts"],"sourcesContent":["import * as Shared from \"./models/oauth-connected-model\";\nimport type { SqlTableModel } from \"./sql-oauth-model\";\nimport type { Fragment as SQL, Table } from \"./sql-table\";\n\nexport {\n  type OAuthConnectedAction,\n  type OAuthConnectedOrderCodec,\n  type OAuthConnectedPolicyInput,\n  requiredOAuthConnectedConstraints,\n  requiredOAuthConnectedRevocationConstraints,\n} from \"./models/oauth-connected-model\";\n\nexport type OAuthConnectedSubjectTable<S extends Table> = Shared.OAuthConnectedSubjectTable<\n  SqlTableModel<S>,\n  SQL\n>;\n\nexport type OAuthConnectedFlowTable<F extends Table, N> = Shared.OAuthConnectedFlowTable<\n  SqlTableModel<F>,\n  N\n>;\n\nexport type OAuthConnectedGrantTable<G extends Table, N> = Shared.OAuthConnectedGrantTable<\n  SqlTableModel<G>,\n  N\n>;\n\n/** Also stores a permanent provider/issuer scope anchor. clientKey must fit 52\n * ASCII characters. Empty clientRegistrationId is reserved for that anchor;\n * actual profile registrations are nonempty. Scope counter stays zero. */\nexport type OAuthConnectedClientRegistrationTable<C extends Table> =\n  Shared.OAuthConnectedClientRegistrationTable<SqlTableModel<C>>;\n\n/** Remote authority: no local-subject column or subject-scoped key. Retain this\n * anchor/cutoff when a legitimately released tuple gains a different local owner. */\nexport type OAuthConnectedCohortTable<C extends Table> = Shared.OAuthConnectedCohortTable<\n  SqlTableModel<C>\n>;\n\nexport type OAuthConnectedAdmissionTable<A extends Table, N> = Shared.OAuthConnectedAdmissionTable<\n  SqlTableModel<A>,\n  N\n>;\n\nexport type OAuthConnectedCommandTable<C extends Table, N> = Shared.OAuthConnectedCommandTable<\n  SqlTableModel<C>,\n  N\n>;\n\nexport type OAuthConnectedRevocationJobTable<\n  J extends Table,\n  N,\n> = Shared.OAuthConnectedRevocationJobTable<SqlTableModel<J>, N>;\n\nexport type OAuthConnectedPolicyGuardTable<\n  T extends Table,\n  N,\n> = Shared.OAuthConnectedPolicyGuardTable<SqlTableModel<T>, N, SQL>;\n\nexport type OAuthConnectedPolicyGuard<N> = Shared.OAuthConnectedPolicyGuard<N, SQL, Table>;\n\nexport const oauthConnectedPolicyGuard = <T extends Table, N>(\n  input: OAuthConnectedPolicyGuardTable<T, N>,\n): OAuthConnectedPolicyGuard<N> =>\n  Shared.oauthConnectedPolicyGuard<SqlTableModel<T>, N, SQL>(input);\n\nexport type OAuthConnectedSqlPolicy<N> = Shared.OAuthConnectedSqlPolicy<N, SQL, Table>;\n\n/** Existing ownership only; workers never allocate or acquire a tuple. */\nexport type OAuthConnectedOwnershipRead<\n  T extends Table,\n  O extends Table,\n  N,\n> = Shared.OAuthConnectedOwnershipRead<SqlTableModel<T>, SqlTableModel<O>, N, SQL>;\n\nexport type OAuthConnectedAuthorityMapping<\n  T extends Table,\n  O extends Table,\n  F extends Table,\n  G extends Table,\n  C extends Table,\n  H extends Table,\n  N,\n> = Shared.OAuthConnectedAuthorityMapping<\n  SqlTableModel<T>,\n  SqlTableModel<O>,\n  SqlTableModel<F>,\n  SqlTableModel<G>,\n  SqlTableModel<C>,\n  SqlTableModel<H>,\n  N,\n  SQL\n>;\n\nexport type OAuthConnectedMapping<\n  S extends Table,\n  AC extends Table,\n  T extends Table,\n  O extends Table,\n  F extends Table,\n  G extends Table,\n  C extends Table,\n  H extends Table,\n  A extends Table,\n  D extends Table,\n  N,\n  J extends Table = never,\n> = Shared.OAuthConnectedMapping<\n  SqlTableModel<S>,\n  SqlTableModel<AC>,\n  SqlTableModel<T>,\n  SqlTableModel<O>,\n  SqlTableModel<F>,\n  SqlTableModel<G>,\n  SqlTableModel<C>,\n  SqlTableModel<H>,\n  SqlTableModel<A>,\n  SqlTableModel<D>,\n  N,\n  SqlTableModel<J>,\n  SQL,\n  Table,\n  SqlTableModel<Table>\n>;\n\nexport type OAuthConnectedRevocationMapping<\n  T extends Table,\n  O extends Table,\n  F extends Table,\n  G extends Table,\n  C extends Table,\n  H extends Table,\n  J extends Table,\n  N,\n> = Shared.OAuthConnectedRevocationMapping<\n  SqlTableModel<T>,\n  SqlTableModel<O>,\n  SqlTableModel<F>,\n  SqlTableModel<G>,\n  SqlTableModel<C>,\n  SqlTableModel<H>,\n  SqlTableModel<J>,\n  N,\n  SQL\n>;\n"],"mappings":";;AA6DA,MAAa,6BACX,UAEAA,4BAA2D,KAAK"}

package/dist/internal/sql-oauth-model.d.mts

@@ -0,0 +1,60 @@
+import { TableModel } from "./query-operations.mjs";
+import { OAuthAccountsMapping as OAuthAccountsMapping$1, OAuthAction, OAuthAuthorityReadTable as OAuthAuthorityReadTable$1, OAuthAuthorityTable as OAuthAuthorityTable$1, OAuthCleanupDescriptor as OAuthCleanupDescriptor$1, OAuthCleanupTable as OAuthCleanupTable$1, OAuthClock as OAuthClock$1, OAuthCredentialReadTable as OAuthCredentialReadTable$1, OAuthCredentialTable as OAuthCredentialTable$1, OAuthD1Mapping, OAuthEligibilityDescriptor as OAuthEligibilityDescriptor$1, OAuthEligibilityFact, OAuthEligibilityTable as OAuthEligibilityTable$1, OAuthFlowState, OAuthFlowTable as OAuthFlowTable$1, OAuthMetadataPolicy as OAuthMetadataPolicy$1, OAuthOwnershipMutation as OAuthOwnershipMutation$1, OAuthOwnershipReadTable as OAuthOwnershipReadTable$1, OAuthOwnershipTable as OAuthOwnershipTable$1, OAuthReferenceGuardDescriptor as OAuthReferenceGuardDescriptor$1, OAuthReferenceGuardTable as OAuthReferenceGuardTable$1, OAuthRegistrationAuthority, OAuthRegistrationBase as OAuthRegistrationBase$1, OAuthRegistrationCommandTable as OAuthRegistrationCommandTable$1, OAuthRegistrationEligibility as OAuthRegistrationEligibility$1, OAuthRegistrationGuardDescriptor as OAuthRegistrationGuardDescriptor$1, OAuthRegistrationGuardTable as OAuthRegistrationGuardTable$1, OAuthRegistrationIntentMapping as OAuthRegistrationIntentMapping$1, OAuthRegistrationIntentTable as OAuthRegistrationIntentTable$1, OAuthRegistrationMapping as OAuthRegistrationMapping$1, OAuthRegistrationState, OAuthSignInMapping as OAuthSignInMapping$1, OAuthSubjectReadTable as OAuthSubjectReadTable$1, OAuthSubjectTable as OAuthSubjectTable$1, OAuthTupleAuthorityTable as OAuthTupleAuthorityTable$1, OAuthTupleState, OAuthUnlinkCommandTable as OAuthUnlinkCommandTable$1, oauth_model_d_exports, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./models/oauth-model.mjs";
+import { Fragment, Table } from "./sql-table.mjs";
+//#region src/internal/sql-oauth-model.d.ts
+export interface SqlTableModel<T extends Table = Table> extends TableModel {
+  readonly table: T;
+}
+/** The engine writes every critical column explicitly after applying the pure
+ * consumer encoder. Native instant values must roundtrip without precision loss. */
+export type OAuthClock = OAuthClock$1<Fragment>;
+export type OAuthSubjectReadTable<S extends Table> = OAuthSubjectReadTable$1<SqlTableModel<S>, Fragment>;
+export type OAuthSubjectTable<S extends Table> = OAuthSubjectTable$1<SqlTableModel<S>, Fragment>;
+export type OAuthOwnershipReadTable<O extends Table, N> = OAuthOwnershipReadTable$1<SqlTableModel<O>, N, Fragment>;
+export type OAuthOwnershipTable<O extends Table, N> = OAuthOwnershipTable$1<SqlTableModel<O>, N, Fragment>;
+export type OAuthCredentialReadTable<C extends Table> = OAuthCredentialReadTable$1<SqlTableModel<C>, Fragment>;
+export type OAuthCredentialTable<C extends Table, N> = OAuthCredentialTable$1<SqlTableModel<C>, N, Fragment>;
+export type OAuthAuthorityReadTable<C extends Table> = OAuthAuthorityReadTable$1<SqlTableModel<C>, Fragment>;
+export type OAuthAuthorityTable<C extends Table, N> = OAuthAuthorityTable$1<SqlTableModel<C>, N, Fragment>;
+/** Both purposes may use the same physical table. Shared tables share module/flow
+ * and module/command uniqueness. The snapshot has the exact purpose-specific core
+ * codec; terminal writes erase it, while identity, claim and retention columns remain. */
+export type OAuthFlowTable<F extends Table> = OAuthFlowTable$1<SqlTableModel<F>>;
+export type OAuthTupleAuthorityTable<T extends Table, N> = OAuthTupleAuthorityTable$1<SqlTableModel<T>, N>;
+export type OAuthRegistrationIntentTable<I extends Table> = OAuthRegistrationIntentTable$1<SqlTableModel<I>>;
+export type OAuthRegistrationCommandTable<R extends Table, Registration> = OAuthRegistrationCommandTable$1<SqlTableModel<R>, Registration>;
+export type OAuthUnlinkCommandTable<U extends Table> = OAuthUnlinkCommandTable$1<SqlTableModel<U>>;
+/** Each descriptor reads only its own subject-scoped method rows. The native row
+ * projector and SQL condition must express the same installed method eligibility.
+ * All source/identifier/policy mutations advance subject securityRevision. D1 also
+ * guards exact selected IDs/versions and absence/count assumptions, never just a
+ * stale boolean. An over-limit graph fails closed rather than truncating. */
+export type OAuthEligibilityTable<T extends Table, N> = OAuthEligibilityTable$1<SqlTableModel<T>, N, Fragment>;
+/** Authenticated command replay uses current subject status and this additional
+ * nonconsuming SQL policy. It never consumes a fresh action factor. */
+export type OAuthMetadataPolicy<N> = OAuthMetadataPolicy$1<N, Fragment>;
+export type OAuthCleanupTable<T extends Table, N> = OAuthCleanupTable$1<SqlTableModel<T>, N, Fragment>;
+export type OAuthRegistrationEligibility<N> = OAuthRegistrationEligibility$1<N, Fragment>;
+export type OAuthSignInMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, N> = OAuthSignInMapping$1<SqlTableModel<S>, SqlTableModel<O>, SqlTableModel<C>, SqlTableModel<AC>, SqlTableModel<F>, N, Fragment>;
+export type OAuthOwnershipMutation<T extends Table, O extends Table, N> = OAuthOwnershipMutation$1<SqlTableModel<T>, SqlTableModel<O>, N, Fragment>;
+export type OAuthRegistrationIntentMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, T extends Table, I extends Table, N> = OAuthRegistrationIntentMapping$1<SqlTableModel<S>, SqlTableModel<O>, SqlTableModel<C>, SqlTableModel<AC>, SqlTableModel<F>, SqlTableModel<T>, SqlTableModel<I>, N, Fragment>;
+export type OAuthRegistrationBase<Registration, T extends Table, O extends Table, I extends Table, R extends Table, N> = OAuthRegistrationBase$1<Registration, SqlTableModel<T>, SqlTableModel<O>, SqlTableModel<I>, SqlTableModel<R>, N, Fragment, Table>;
+export type OAuthRegistrationGuardTable<T extends Table, Registration, N> = OAuthRegistrationGuardTable$1<SqlTableModel<T>, Registration, N, Fragment>;
+export type OAuthRegistrationGuardDescriptor<Registration, N> = OAuthRegistrationGuardDescriptor$1<Registration, N, Fragment, Table>;
+export declare const oauthRegistrationGuardTable: <T extends Table, Registration, N>(input: OAuthRegistrationGuardTable<T, Registration, N>) => OAuthRegistrationGuardDescriptor<Registration, N>;
+export type OAuthRegistrationMapping<Registration, S extends Table, O extends Table, C extends Table, AC extends Table, T extends Table, I extends Table, R extends Table, N> = OAuthRegistrationMapping$1<Registration, SqlTableModel<S>, SqlTableModel<O>, SqlTableModel<C>, SqlTableModel<AC>, SqlTableModel<T>, SqlTableModel<I>, SqlTableModel<R>, N, Fragment, Table>;
+/** Heterogeneous descriptors are made by typed factories and projected privately. */
+export type OAuthEligibilityDescriptor<N> = OAuthEligibilityDescriptor$1<N, Fragment, Table>;
+export declare const oauthEligibilityTable: <T extends Table, N>(input: OAuthEligibilityTable<T, N>) => OAuthEligibilityDescriptor<N>;
+export type OAuthCleanupDescriptor<N> = OAuthCleanupDescriptor$1<N, Fragment, Table>;
+export declare const oauthCleanupTable: <T extends Table, N>(input: OAuthCleanupTable<T, N>) => OAuthCleanupDescriptor<N>;
+/** A stable application/reference lock acquired before an ownership target.
+ * Missing rows retain ownership. Conditions use detached native IDs; every
+ * writer of the guarded reference follows the same order. */
+export type OAuthReferenceGuardTable<T extends Table, N> = OAuthReferenceGuardTable$1<SqlTableModel<T>, N, Fragment>;
+export type OAuthReferenceGuardDescriptor<N> = OAuthReferenceGuardDescriptor$1<N, Fragment, Table>;
+export declare const oauthReferenceGuardTable: <T extends Table, N>(input: OAuthReferenceGuardTable<T, N>) => OAuthReferenceGuardDescriptor<N>;
+export type OAuthAccountsMapping<S extends Table, O extends Table, C extends Table, AC extends Table, F extends Table, T extends Table, U extends Table, N> = OAuthAccountsMapping$1<SqlTableModel<S>, SqlTableModel<O>, SqlTableModel<C>, SqlTableModel<AC>, SqlTableModel<F>, SqlTableModel<T>, SqlTableModel<U>, N, Fragment, Table>;
+//#endregion
+export { type OAuthAction, type OAuthD1Mapping, type OAuthEligibilityFact, type OAuthFlowState, type OAuthRegistrationAuthority, type OAuthRegistrationState, type OAuthTupleState, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints };
+//# sourceMappingURL=sql-oauth-model.d.mts.map

package/dist/internal/sql-oauth-model.mjs

@@ -0,0 +1,10 @@
+import { oauthCleanupTable as oauthCleanupTable$1, oauthEligibilityTable as oauthEligibilityTable$1, oauthReferenceGuardTable as oauthReferenceGuardTable$1, oauthRegistrationGuardTable as oauthRegistrationGuardTable$1, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./models/oauth-model.mjs";
+//#region src/internal/sql-oauth-model.ts
+const oauthRegistrationGuardTable = (input) => oauthRegistrationGuardTable$1(input);
+const oauthEligibilityTable = (input) => oauthEligibilityTable$1(input);
+const oauthCleanupTable = (input) => oauthCleanupTable$1(input);
+const oauthReferenceGuardTable = (input) => oauthReferenceGuardTable$1(input);
+//#endregion
+export { oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints };
+
+//# sourceMappingURL=sql-oauth-model.mjs.map

package/dist/internal/sql-oauth-model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-oauth-model.mjs","names":["Shared.oauthRegistrationGuardTable","Shared.oauthEligibilityTable","Shared.oauthCleanupTable","Shared.oauthReferenceGuardTable"],"sources":["../../src/internal/sql-oauth-model.ts"],"sourcesContent":["import * as Shared from \"./models/oauth-model\";\nimport type { TableModel } from \"./query-operations\";\nimport type { Fragment as SQL, Table } from \"./sql-table\";\n\nexport interface SqlTableModel<T extends Table = Table> extends TableModel {\n  readonly table: T;\n}\n\nexport {\n  type OAuthFlowState,\n  type OAuthTupleState,\n  type OAuthRegistrationState,\n  type OAuthAction,\n  type OAuthEligibilityFact,\n  type OAuthD1Mapping,\n  requiredOAuthSignInConstraints,\n  requiredOAuthTupleConstraints,\n  requiredOAuthRegistrationConstraints,\n  requiredOAuthAccountsConstraints,\n  type OAuthRegistrationAuthority,\n} from \"./models/oauth-model\";\n\n/** The engine writes every critical column explicitly after applying the pure\n * consumer encoder. Native instant values must roundtrip without precision loss. */\nexport type OAuthClock = Shared.OAuthClock<SQL>;\n\nexport type OAuthSubjectReadTable<S extends Table> = Shared.OAuthSubjectReadTable<\n  SqlTableModel<S>,\n  SQL\n>;\n\nexport type OAuthSubjectTable<S extends Table> = Shared.OAuthSubjectTable<SqlTableModel<S>, SQL>;\n\nexport type OAuthOwnershipReadTable<O extends Table, N> = Shared.OAuthOwnershipReadTable<\n  SqlTableModel<O>,\n  N,\n  SQL\n>;\n\nexport type OAuthOwnershipTable<O extends Table, N> = Shared.OAuthOwnershipTable<\n  SqlTableModel<O>,\n  N,\n  SQL\n>;\n\nexport type OAuthCredentialReadTable<C extends Table> = Shared.OAuthCredentialReadTable<\n  SqlTableModel<C>,\n  SQL\n>;\n\nexport type OAuthCredentialTable<C extends Table, N> = Shared.OAuthCredentialTable<\n  SqlTableModel<C>,\n  N,\n  SQL\n>;\n\nexport type OAuthAuthorityReadTable<C extends Table> = Shared.OAuthAuthorityReadTable<\n  SqlTableModel<C>,\n  SQL\n>;\n\nexport type OAuthAuthorityTable<C extends Table, N> = Shared.OAuthAuthorityTable<\n  SqlTableModel<C>,\n  N,\n  SQL\n>;\n\n/** Both purposes may use the same physical table. Shared tables share module/flow\n * and module/command uniqueness. The snapshot has the exact purpose-specific core\n * codec; terminal writes erase it, while identity, claim and retention columns remain. */\nexport type OAuthFlowTable<F extends Table> = Shared.OAuthFlowTable<SqlTableModel<F>>;\n\nexport type OAuthTupleAuthorityTable<T extends Table, N> = Shared.OAuthTupleAuthorityTable<\n  SqlTableModel<T>,\n  N\n>;\n\nexport type OAuthRegistrationIntentTable<I extends Table> = Shared.OAuthRegistrationIntentTable<\n  SqlTableModel<I>\n>;\n\nexport type OAuthRegistrationCommandTable<\n  R extends Table,\n  Registration,\n> = Shared.OAuthRegistrationCommandTable<SqlTableModel<R>, Registration>;\n\nexport type OAuthUnlinkCommandTable<U extends Table> = Shared.OAuthUnlinkCommandTable<\n  SqlTableModel<U>\n>;\n\n/** Each descriptor reads only its own subject-scoped method rows. The native row\n * projector and SQL condition must express the same installed method eligibility.\n * All source/identifier/policy mutations advance subject securityRevision. D1 also\n * guards exact selected IDs/versions and absence/count assumptions, never just a\n * stale boolean. An over-limit graph fails closed rather than truncating. */\nexport type OAuthEligibilityTable<T extends Table, N> = Shared.OAuthEligibilityTable<\n  SqlTableModel<T>,\n  N,\n  SQL\n>;\n\n/** Authenticated command replay uses current subject status and this additional\n * nonconsuming SQL policy. It never consumes a fresh action factor. */\nexport type OAuthMetadataPolicy<N> = Shared.OAuthMetadataPolicy<N, SQL>;\n\nexport type OAuthCleanupTable<T extends Table, N> = Shared.OAuthCleanupTable<\n  SqlTableModel<T>,\n  N,\n  SQL\n>;\n\nexport type OAuthRegistrationEligibility<N> = Shared.OAuthRegistrationEligibility<N, SQL>;\n\nexport type OAuthSignInMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  N,\n> = Shared.OAuthSignInMapping<\n  SqlTableModel<S>,\n  SqlTableModel<O>,\n  SqlTableModel<C>,\n  SqlTableModel<AC>,\n  SqlTableModel<F>,\n  N,\n  SQL\n>;\n\nexport type OAuthOwnershipMutation<\n  T extends Table,\n  O extends Table,\n  N,\n> = Shared.OAuthOwnershipMutation<SqlTableModel<T>, SqlTableModel<O>, N, SQL>;\n\nexport type OAuthRegistrationIntentMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  T extends Table,\n  I extends Table,\n  N,\n> = Shared.OAuthRegistrationIntentMapping<\n  SqlTableModel<S>,\n  SqlTableModel<O>,\n  SqlTableModel<C>,\n  SqlTableModel<AC>,\n  SqlTableModel<F>,\n  SqlTableModel<T>,\n  SqlTableModel<I>,\n  N,\n  SQL\n>;\n\nexport type OAuthRegistrationBase<\n  Registration,\n  T extends Table,\n  O extends Table,\n  I extends Table,\n  R extends Table,\n  N,\n> = Shared.OAuthRegistrationBase<\n  Registration,\n  SqlTableModel<T>,\n  SqlTableModel<O>,\n  SqlTableModel<I>,\n  SqlTableModel<R>,\n  N,\n  SQL,\n  Table\n>;\n\nexport type OAuthRegistrationGuardTable<\n  T extends Table,\n  Registration,\n  N,\n> = Shared.OAuthRegistrationGuardTable<SqlTableModel<T>, Registration, N, SQL>;\n\nexport type OAuthRegistrationGuardDescriptor<Registration, N> =\n  Shared.OAuthRegistrationGuardDescriptor<Registration, N, SQL, Table>;\n\nexport const oauthRegistrationGuardTable = <T extends Table, Registration, N>(\n  input: OAuthRegistrationGuardTable<T, Registration, N>,\n): OAuthRegistrationGuardDescriptor<Registration, N> =>\n  Shared.oauthRegistrationGuardTable<SqlTableModel<T>, Registration, N, SQL>(input);\n\nexport type OAuthRegistrationMapping<\n  Registration,\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  T extends Table,\n  I extends Table,\n  R extends Table,\n  N,\n> = Shared.OAuthRegistrationMapping<\n  Registration,\n  SqlTableModel<S>,\n  SqlTableModel<O>,\n  SqlTableModel<C>,\n  SqlTableModel<AC>,\n  SqlTableModel<T>,\n  SqlTableModel<I>,\n  SqlTableModel<R>,\n  N,\n  SQL,\n  Table\n>;\n\n/** Heterogeneous descriptors are made by typed factories and projected privately. */\nexport type OAuthEligibilityDescriptor<N> = Shared.OAuthEligibilityDescriptor<N, SQL, Table>;\n\nexport const oauthEligibilityTable = <T extends Table, N>(\n  input: OAuthEligibilityTable<T, N>,\n): OAuthEligibilityDescriptor<N> => Shared.oauthEligibilityTable<SqlTableModel<T>, N, SQL>(input);\n\nexport type OAuthCleanupDescriptor<N> = Shared.OAuthCleanupDescriptor<N, SQL, Table>;\n\nexport const oauthCleanupTable = <T extends Table, N>(\n  input: OAuthCleanupTable<T, N>,\n): OAuthCleanupDescriptor<N> => Shared.oauthCleanupTable<SqlTableModel<T>, N, SQL>(input);\n\n/** A stable application/reference lock acquired before an ownership target.\n * Missing rows retain ownership. Conditions use detached native IDs; every\n * writer of the guarded reference follows the same order. */\nexport type OAuthReferenceGuardTable<T extends Table, N> = Shared.OAuthReferenceGuardTable<\n  SqlTableModel<T>,\n  N,\n  SQL\n>;\n\nexport type OAuthReferenceGuardDescriptor<N> = Shared.OAuthReferenceGuardDescriptor<N, SQL, Table>;\n\nexport const oauthReferenceGuardTable = <T extends Table, N>(\n  input: OAuthReferenceGuardTable<T, N>,\n): OAuthReferenceGuardDescriptor<N> =>\n  Shared.oauthReferenceGuardTable<SqlTableModel<T>, N, SQL>(input);\n\nexport type OAuthAccountsMapping<\n  S extends Table,\n  O extends Table,\n  C extends Table,\n  AC extends Table,\n  F extends Table,\n  T extends Table,\n  U extends Table,\n  N,\n> = Shared.OAuthAccountsMapping<\n  SqlTableModel<S>,\n  SqlTableModel<O>,\n  SqlTableModel<C>,\n  SqlTableModel<AC>,\n  SqlTableModel<F>,\n  SqlTableModel<T>,\n  SqlTableModel<U>,\n  N,\n  SQL,\n  Table\n>;\n"],"mappings":";;AAwLA,MAAa,+BACX,UAEAA,8BAA2E,KAAK;AA6BlF,MAAa,yBACX,UACkCC,wBAAuD,KAAK;AAIhG,MAAa,qBACX,UAC8BC,oBAAmD,KAAK;AAaxF,MAAa,4BACX,UAEAC,2BAA0D,KAAK"}

package/dist/internal/sql-query.d.mts

@@ -0,0 +1,12 @@
+import "./query-operations.mjs";
+import { Fragment } from "./sql-table.mjs";
+import { Effect } from "effect";
+import { SqlClient } from "effect/sql/SqlClient";
+import { SqlError } from "effect/sql/SqlError";
+//#region src/internal/sql-query.d.ts
+declare const template: (parts: TemplateStringsArray, ...values: unknown[]) => Fragment;
+export declare const and: (...values: ReadonlyArray<Fragment | undefined>) => Fragment | undefined;
+export declare const sql: typeof template;
+export declare const eq: (left: unknown, right: unknown) => Fragment;
+//#endregion
+//# sourceMappingURL=sql-query.d.mts.map

package/dist/internal/sql-query.mjs

@@ -16,14 +16,16 @@ const combine = (separator, values) => {
 };
 const and = (...values) => combine(" AND ", values);
 const or = (...values) => combine(" OR ", values);
-const sqlQueryOperations = {
+const operations = {
 	and,
 	or,
 	asc: (value) => template`${value} ASC`,
 	eq: (left, right) => template`${left} = ${right}`,
+	ne: (left, right) => template`${left} <> ${right}`,
 	gt: (left, right) => template`${left} > ${right}`,
 	gte: (left, right) => template`${left} >= ${right}`,
 	lte: (left, right) => template`${left} <= ${right}`,
+	isNotNull: (value) => template`${value} IS NOT NULL`,
 	isNull: (value) => template`${value} IS NULL`,
 	notExists: (value) => template`NOT EXISTS (${value})`,
 	inArray: (column, values) => values.length === 0 ? template`false` : new Fragment((compiler) => `${render(column, compiler)} IN (${values.map((value) => render(value, compiler)).join(", ")})`),
@@ -44,27 +46,20 @@ const sqlQueryOperations = {
 	balancedD1And: and,
 	compactD1GeneratedStatement: (_client, statement) => statement
 };
+const sqlQueryOperations = operations;
 const selectionFor = (state) => state.selection ?? (state.table instanceof Table ? state.table.columns : {});
 const selectionFields = (selection) => {
-	const used = new Set(Object.keys(selection));
 	let index = 0;
-	return Object.entries(selection).flatMap(([key, value]) => value instanceof Table ? Object.entries(value.columns).map(([name, column]) => {
-		let alias;
-		do
-			alias = `auth_column_${index++}`;
-		while (used.has(alias));
-		used.add(alias);
-		return {
-			key,
-			name,
-			column,
-			alias
-		};
-	}) : [{
+	return Object.entries(selection).flatMap(([key, value]) => value instanceof Table ? Object.entries(value.columns).map(([name, column]) => ({
+		key,
+		name,
+		column,
+		alias: `auth_column_${index++}`
+	})) : [{
 		key,
 		name: void 0,
 		column: value,
-		alias: key
+		alias: `auth_column_${index++}`
 	}]);
 };
 const projection = (selection, compiler) => selectionFields(selection).map(({ column, alias }) => `${column.render(compiler)} AS ${identifier(alias)}`).join(", ");
@@ -113,7 +108,7 @@ const compile = (state, compiler) => {
 };
 /** Captures one Effect SQL client. Its transaction service remains the physical owner. */
 const makeSqlDatabase = Effect.fnUntraced(function* (dialect) {
-	const client = yield* SqlClient;
+	const client = (yield* SqlClient).withoutTransforms();
 	const query = (state) => {
 		const execute = Effect.suspend(() => {
 			const compiler = {
@@ -203,7 +198,9 @@ const makeSqlDatabase = Effect.fnUntraced(function* (dialect) {
 	};
 	return database;
 });
+const sql = template;
+const { eq } = operations;
 //#endregion
-export { makeSqlDatabase, sqlQueryOperations };
+export { and, eq, makeSqlDatabase, sql, sqlQueryOperations };
 
 //# sourceMappingURL=sql-query.mjs.map

package/dist/internal/sql-query.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sql-query.mjs","names":[],"sources":["../../src/internal/sql-query.ts"],"sourcesContent":["import { Effect, Predicate } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport type { QueryOperations } from \"./query-operations\";\nimport {\n  type Column,\n  Fragment,\n  Table,\n  identifier,\n  type Compiler,\n  type Dialect,\n  type Row,\n} from \"./sql-table\";\n\nconst render = (value: unknown, compiler: Compiler): string => {\n  if (value instanceof Fragment) return value.render(compiler);\n  if (Predicate.hasProperty(value, \"getSQL\") && typeof value.getSQL === \"function\") {\n    return render(value.getSQL(), compiler);\n  }\n\n  compiler.parameters.push(\n    compiler.dialect === \"sqlite\" && typeof value === \"boolean\" ? Number(value) : value,\n  );\n\n  return compiler.dialect === \"pg\" ? `$${compiler.parameters.length}` : \"?\";\n};\n\nconst template = (parts: TemplateStringsArray, ...values: unknown[]): Fragment =>\n  new Fragment((compiler) =>\n    parts.reduce(\n      (sql, part, i) => sql + (i === 0 ? \"\" : render(values[i - 1], compiler)) + part,\n      \"\",\n    ),\n  );\n\nconst combine = (separator: string, values: ReadonlyArray<Fragment | undefined>) => {\n  const fragments = values.filter((value) => value !== undefined);\n\n  return fragments.length === 0\n    ? undefined\n    : new Fragment(\n        (compiler) =>\n          \"(\" + fragments.map((fragment) => fragment.render(compiler)).join(separator) + \")\",\n      );\n};\n\nconst and = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" AND \", values);\nconst or = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" OR \", values);\n\nconst operations = {\n  and,\n  or,\n  asc: (value: unknown) => template`${value} ASC`,\n  eq: (left: unknown, right: unknown) => template`${left} = ${right}`,\n  gt: (left: unknown, right: unknown) => template`${left} > ${right}`,\n  gte: (left: unknown, right: unknown) => template`${left} >= ${right}`,\n  lte: (left: unknown, right: unknown) => template`${left} <= ${right}`,\n  isNull: (value: unknown) => template`${value} IS NULL`,\n  notExists: (value: unknown) => template`NOT EXISTS (${value})`,\n  inArray: (column: unknown, values: ReadonlyArray<unknown>) =>\n    values.length === 0\n      ? template`false`\n      : new Fragment(\n          (compiler) =>\n            `${render(column, compiler)} IN (${values.map((value) => render(value, compiler)).join(\", \")})`,\n        ),\n  sql: Object.assign(template, {\n    param: (value: unknown, column: Column) => column.mapToDriverValue(value),\n    join: (values: ReadonlyArray<unknown>, separator: Fragment = template``) =>\n      new Fragment((compiler) =>\n        values\n          .map(\n            (value, index) =>\n              (index === 0 ? \"\" : separator.render(compiler)) + render(value, compiler),\n          )\n          .join(\"\"),\n      ),\n  }),\n  getTableColumns: (table: Table) => table.columns,\n  column: (table: Table, key: string) => {\n    const column = table.columns[key];\n\n    if (column === undefined)\n      throw PersistenceMappingError.make({ operation: \"column\", cause: key });\n\n    return column;\n  },\n  updateValues: (entries: ReadonlyArray<readonly [string, unknown]>) => Object.fromEntries(entries),\n  balancedD1And: and,\n  // Raw clients use interactive transactions, so no D1 batch compaction is needed.\n  compactD1GeneratedStatement: <S>(_client: unknown, statement: S) => statement,\n};\n\n// The existing kernels erase query-builder shapes at this boundary. The raw compiler\n// implements precisely those operations; no row decoding or Effect requirements are cast.\nexport const sqlQueryOperations = operations as unknown as QueryOperations;\n\ntype Selection = Readonly<Record<string, Fragment>>;\n\ninterface QueryState {\n  readonly operation: \"select\" | \"insert\" | \"update\" | \"delete\";\n  readonly table?: Table | Fragment;\n  readonly joins?: ReadonlyArray<{\n    readonly table: Table | Fragment;\n    readonly on: Fragment;\n  }>;\n  readonly selection?: Selection;\n  readonly where?: Fragment | undefined;\n  readonly values?: Row;\n  readonly returning?: Selection | true;\n  readonly order?: ReadonlyArray<Fragment>;\n  readonly limit?: number;\n  readonly lock?: boolean;\n  readonly conflict?: boolean;\n}\n\nconst selectionFor = (state: QueryState): Selection =>\n  state.selection ?? (state.table instanceof Table ? state.table.columns : {});\n\nconst selectionFields = (selection: Selection) => {\n  const used = new Set(Object.keys(selection));\n  let index = 0;\n\n  return Object.entries(selection).flatMap<{\n    readonly key: string;\n    readonly name: string | undefined;\n    readonly column: Fragment;\n    readonly alias: string;\n  }>(([key, value]) =>\n    value instanceof Table\n      ? Object.entries(value.columns).map(([name, column]) => {\n          let alias: string;\n\n          do alias = `auth_column_${index++}`;\n          while (used.has(alias));\n          used.add(alias);\n\n          return { key, name, column, alias };\n        })\n      : [{ key, name: undefined, column: value, alias: key }],\n  );\n};\n\nconst projection = (selection: Selection, compiler: Compiler) =>\n  selectionFields(selection)\n    .map(({ column, alias }) => `${column.render(compiler)} AS ${identifier(alias)}`)\n    .join(\", \");\n\n// Joined table selections retain their own column codecs and nested row names.\nconst decodeRow = (selection: Selection, row: Row): Row => {\n  const entries: Array<readonly [string, unknown]> = [];\n  const groups = new Map<string, Array<readonly [string, unknown]>>();\n\n  for (const field of selectionFields(selection)) {\n    const value = field.column.decode(row[field.alias]);\n\n    if (field.name === undefined) entries.push([field.key, value]);\n    else {\n      const group = groups.get(field.key) ?? [];\n\n      group.push([field.name, value]);\n      groups.set(field.key, group);\n    }\n  }\n\n  return Object.fromEntries([\n    ...entries,\n    ...Array.from(groups, ([key, values]) => [key, Object.fromEntries(values)]),\n  ]);\n};\n\nconst compile = (state: QueryState, compiler: Compiler): string => {\n  const table = state.table;\n\n  if (table === undefined)\n    throw PersistenceMappingError.make({ operation: \"query\", cause: \"Missing table\" });\n  let query: string;\n\n  if (state.operation === \"select\") {\n    query = `SELECT ${projection(selectionFor(state), compiler)} FROM ${table.render(compiler)}`;\n    for (const join of state.joins ?? [])\n      query += ` INNER JOIN ${join.table.render(compiler)} ON ${join.on.render(compiler)}`;\n  } else {\n    if (!(table instanceof Table))\n      throw PersistenceMappingError.make({\n        operation: \"query\",\n        cause: \"Mutation requires a table\",\n      });\n    const target = table.render(compiler);\n\n    const fields = Object.entries(state.values ?? {}).filter(\n      ([key, value]) => table.columns[key] !== undefined && value !== undefined,\n    );\n\n    if (state.operation === \"insert\") {\n      query = `INSERT INTO ${target} (${fields.map(([key]) => identifier(table.columns[key].options.name)).join(\", \")}) VALUES (${fields.map(([, value]) => render(value, compiler)).join(\", \")})`;\n    } else if (state.operation === \"update\") {\n      query = `UPDATE ${target} SET ${fields.map(([key, value]) => `${identifier(table.columns[key].options.name)} = ${render(value, compiler)}`).join(\", \")}`;\n    } else query = `DELETE FROM ${target}`;\n  }\n  if (state.where !== undefined) query += ` WHERE ${state.where.render(compiler)}`;\n  if (state.order?.length)\n    query += ` ORDER BY ${state.order.map((field) => field.render(compiler)).join(\", \")}`;\n  if (state.limit !== undefined) query += ` LIMIT ${render(state.limit, compiler)}`;\n  if (state.conflict) query += \" ON CONFLICT DO NOTHING\";\n  if (state.returning)\n    query += ` RETURNING ${projection(state.returning === true && table instanceof Table ? table.columns : state.returning === true ? {} : state.returning, compiler)}`;\n  if (state.lock && compiler.dialect === \"pg\") query += \" FOR UPDATE\";\n\n  return query;\n};\n\n/** Captures one Effect SQL client. Its transaction service remains the physical owner. */\nexport const makeSqlDatabase = Effect.fnUntraced(function* (dialect: Dialect) {\n  const client = yield* SqlClient;\n\n  const query = (state: QueryState): Query => {\n    const execute = Effect.suspend(() => {\n      const compiler: Compiler = { dialect, parameters: [] };\n      const text = compile(state, compiler);\n\n      const selected: Selection =\n        state.operation === \"select\"\n          ? selectionFor(state)\n          : state.returning === true\n            ? state.table instanceof Table\n              ? state.table.columns\n              : {}\n            : state.returning || {};\n\n      return client\n        .unsafe<Row>(text, compiler.parameters)\n        .pipe(Effect.map((rows) => rows.map((row) => decodeRow(selected, row))));\n    });\n\n    return Object.assign(execute, {\n      toSQL: () => {\n        const compiler: Compiler = { dialect, parameters: [] };\n\n        return { sql: compile(state, compiler), params: compiler.parameters };\n      },\n      getSQL: () => new Fragment((compiler) => compile(state, compiler)),\n      from: (table: Table | Fragment) => query({ ...state, table }),\n      innerJoin: (table: Table | Fragment, on: Fragment) =>\n        query({ ...state, joins: [...(state.joins ?? []), { table, on }] }),\n      where: (where: Fragment | undefined) => query({ ...state, where }),\n      limit: (limit: number) => query({ ...state, limit }),\n      orderBy: (...order: Fragment[]) => query({ ...state, order }),\n      for: (_lock: \"update\") => query({ ...state, lock: true }),\n      values: (values: Row) => query({ ...state, values }),\n      set: (values: Row) => query({ ...state, values }),\n      returning: (returning: Selection | true = true) => query({ ...state, returning }),\n      onConflictDoNothing: () => query({ ...state, conflict: true }),\n    });\n  };\n\n  const database: SqlDatabase = {\n    $client: client,\n    select: (selection?: Selection) =>\n      query({ operation: \"select\", ...(selection === undefined ? {} : { selection }) }),\n    insert: (table: Table) => query({ operation: \"insert\", table }),\n    update: (table: Table) => query({ operation: \"update\", table }),\n    delete: (table: Table) => query({ operation: \"delete\", table }),\n    transaction: <A, E, R>(\n      body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n    ): Effect.Effect<A, E | SqlError, R> =>\n      client.withTransaction(Effect.suspend(() => body(database))),\n  };\n\n  return database;\n});\n\ninterface Query extends Effect.Effect<Row[], SqlError> {\n  toSQL(): { readonly sql: string; readonly params: ReadonlyArray<unknown> };\n  getSQL(): Fragment;\n  from(table: Table | Fragment): Query;\n  innerJoin(table: Table | Fragment, on: Fragment): Query;\n  where(where: Fragment | undefined): Query;\n  limit(limit: number): Query;\n  orderBy(...order: Fragment[]): Query;\n  for(lock: \"update\"): Query;\n  values(values: Row): Query;\n  set(values: Row): Query;\n  returning(returning?: Selection | true): Query;\n  onConflictDoNothing(): Query;\n}\n\nexport interface SqlDatabase {\n  readonly $client: SqlClient;\n  select(selection?: Selection): Query;\n  insert(table: Table): Query;\n  update(table: Table): Query;\n  delete(table: Table): Query;\n  transaction<A, E, R>(\n    body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | SqlError, R>;\n}\n\nexport const sql = template;\n"],"mappings":";;;;;AAgBA,MAAM,UAAU,OAAgB,aAA+B;CAC7D,IAAI,iBAAiB,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC3D,IAAI,UAAU,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM,WAAW,YACpE,OAAO,OAAO,MAAM,OAAO,GAAG,QAAQ;CAGxC,SAAS,WAAW,KAClB,SAAS,YAAY,YAAY,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI,KAChF;CAEA,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,WAAW,WAAW;AACxE;AAEA,MAAM,YAAY,OAA6B,GAAG,WAChD,IAAI,UAAU,aACZ,MAAM,QACH,KAAK,MAAM,MAAM,OAAO,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI,IAAI,QAAQ,KAAK,MAC3E,EACF,CACF;AAEF,MAAM,WAAW,WAAmB,WAAgD;CAClF,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,KAAA,CAAS;CAE9D,OAAO,UAAU,WAAW,IACxB,KAAA,IACA,IAAI,UACD,aACC,MAAM,UAAU,KAAK,aAAa,SAAS,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,GACnF;AACN;AAEA,MAAM,OAAO,GAAG,WAAgD,QAAQ,SAAS,MAAM;AACvF,MAAM,MAAM,GAAG,WAAgD,QAAQ,QAAQ,MAAM;AAgDrF,MAAa,qBAAqB;CA7ChC;CACA;CACA,MAAM,UAAmB,QAAQ,GAAG,MAAM;CAC1C,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,SAAS,UAAmB,QAAQ,GAAG,MAAM;CAC7C,YAAY,UAAmB,QAAQ,eAAe,MAAM;CAC5D,UAAU,QAAiB,WACzB,OAAO,WAAW,IACd,QAAQ,UACR,IAAI,UACD,aACC,GAAG,OAAO,QAAQ,QAAQ,EAAE,OAAO,OAAO,KAAK,UAAU,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACjG;CACN,KAAK,OAAO,OAAO,UAAU;EAC3B,QAAQ,OAAgB,WAAmB,OAAO,iBAAiB,KAAK;EACxE,OAAO,QAAgC,YAAsB,QAAQ,OACnE,IAAI,UAAU,aACZ,OACG,KACE,OAAO,WACL,UAAU,IAAI,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,OAAO,QAAQ,CAC5E,CAAC,CACA,KAAK,EAAE,CACZ;CACJ,CAAC;CACD,kBAAkB,UAAiB,MAAM;CACzC,SAAS,OAAc,QAAgB;EACrC,MAAM,SAAS,MAAM,QAAQ;EAE7B,IAAI,WAAW,KAAA,GACb,MAAM,wBAAwB,KAAK;GAAE,WAAW;GAAU,OAAO;EAAI,CAAC;EAExE,OAAO;CACT;CACA,eAAe,YAAuD,OAAO,YAAY,OAAO;CAChG,eAAe;CAEf,8BAAiC,SAAkB,cAAiB;AAKpC;AAqBlC,MAAM,gBAAgB,UACpB,MAAM,cAAc,MAAM,iBAAiB,QAAQ,MAAM,MAAM,UAAU,CAAC;AAE5E,MAAM,mBAAmB,cAAyB;CAChD,MAAM,OAAO,IAAI,IAAI,OAAO,KAAK,SAAS,CAAC;CAC3C,IAAI,QAAQ;CAEZ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,SAK7B,CAAC,KAAK,WACR,iBAAiB,QACb,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;EACpD,IAAI;EAEJ;GAAG,QAAQ,eAAe;SACnB,KAAK,IAAI,KAAK;EACrB,KAAK,IAAI,KAAK;EAEd,OAAO;GAAE;GAAK;GAAM;GAAQ;EAAM;CACpC,CAAC,IACD,CAAC;EAAE;EAAK,MAAM,KAAA;EAAW,QAAQ;EAAO,OAAO;CAAI,CAAC,CAC1D;AACF;AAEA,MAAM,cAAc,WAAsB,aACxC,gBAAgB,SAAS,CAAC,CACvB,KAAK,EAAE,QAAQ,YAAY,GAAG,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,KAAK,GAAG,CAAC,CAChF,KAAK,IAAI;AAGd,MAAM,aAAa,WAAsB,QAAkB;CACzD,MAAM,UAA6C,CAAC;CACpD,MAAM,yBAAS,IAAI,IAA+C;CAElE,KAAK,MAAM,SAAS,gBAAgB,SAAS,GAAG;EAC9C,MAAM,QAAQ,MAAM,OAAO,OAAO,IAAI,MAAM,MAAM;EAElD,IAAI,MAAM,SAAS,KAAA,GAAW,QAAQ,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;OACxD;GACH,MAAM,QAAQ,OAAO,IAAI,MAAM,GAAG,KAAK,CAAC;GAExC,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC;GAC9B,OAAO,IAAI,MAAM,KAAK,KAAK;EAC7B;CACF;CAEA,OAAO,OAAO,YAAY,CACxB,GAAG,SACH,GAAG,MAAM,KAAK,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO,YAAY,MAAM,CAAC,CAAC,CAC5E,CAAC;AACH;AAEA,MAAM,WAAW,OAAmB,aAA+B;CACjE,MAAM,QAAQ,MAAM;CAEpB,IAAI,UAAU,KAAA,GACZ,MAAM,wBAAwB,KAAK;EAAE,WAAW;EAAS,OAAO;CAAgB,CAAC;CACnF,IAAI;CAEJ,IAAI,MAAM,cAAc,UAAU;EAChC,QAAQ,UAAU,WAAW,aAAa,KAAK,GAAG,QAAQ,EAAE,QAAQ,MAAM,OAAO,QAAQ;EACzF,KAAK,MAAM,QAAQ,MAAM,SAAS,CAAC,GACjC,SAAS,eAAe,KAAK,MAAM,OAAO,QAAQ,EAAE,MAAM,KAAK,GAAG,OAAO,QAAQ;CACrF,OAAO;EACL,IAAI,EAAE,iBAAiB,QACrB,MAAM,wBAAwB,KAAK;GACjC,WAAW;GACX,OAAO;EACT,CAAC;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ;EAEpC,MAAM,SAAS,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,QAC/C,CAAC,KAAK,WAAW,MAAM,QAAQ,SAAS,KAAA,KAAa,UAAU,KAAA,CAClE;EAEA,IAAI,MAAM,cAAc,UACtB,QAAQ,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC,SAAS,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,YAAY,OAAO,KAAK,GAAG,WAAW,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;OACrL,IAAI,MAAM,cAAc,UAC7B,QAAQ,UAAU,OAAO,OAAO,OAAO,KAAK,CAAC,KAAK,WAAW,GAAG,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,OAAO,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI;OAChJ,QAAQ,eAAe;CAChC;CACA,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,MAAM,MAAM,OAAO,QAAQ;CAC7E,IAAI,MAAM,OAAO,QACf,SAAS,aAAa,MAAM,MAAM,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;CACpF,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC9E,IAAI,MAAM,UAAU,SAAS;CAC7B,IAAI,MAAM,WACR,SAAS,cAAc,WAAW,MAAM,cAAc,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,MAAM,cAAc,OAAO,CAAC,IAAI,MAAM,WAAW,QAAQ;CAClK,IAAI,MAAM,QAAQ,SAAS,YAAY,MAAM,SAAS;CAEtD,OAAO;AACT;;AAGA,MAAa,kBAAkB,OAAO,WAAW,WAAW,SAAkB;CAC5E,MAAM,SAAS,OAAO;CAEtB,MAAM,SAAS,UAA6B;EAC1C,MAAM,UAAU,OAAO,cAAc;GACnC,MAAM,WAAqB;IAAE;IAAS,YAAY,CAAC;GAAE;GACrD,MAAM,OAAO,QAAQ,OAAO,QAAQ;GAEpC,MAAM,WACJ,MAAM,cAAc,WAChB,aAAa,KAAK,IAClB,MAAM,cAAc,OAClB,MAAM,iBAAiB,QACrB,MAAM,MAAM,UACZ,CAAC,IACH,MAAM,aAAa,CAAC;GAE5B,OAAO,OACJ,OAAY,MAAM,SAAS,UAAU,CAAC,CACtC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC;EAC3E,CAAC;EAED,OAAO,OAAO,OAAO,SAAS;GAC5B,aAAa;IACX,MAAM,WAAqB;KAAE;KAAS,YAAY,CAAC;IAAE;IAErD,OAAO;KAAE,KAAK,QAAQ,OAAO,QAAQ;KAAG,QAAQ,SAAS;IAAW;GACtE;GACA,cAAc,IAAI,UAAU,aAAa,QAAQ,OAAO,QAAQ,CAAC;GACjE,OAAO,UAA4B,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,YAAY,OAAyB,OACnC,MAAM;IAAE,GAAG;IAAO,OAAO,CAAC,GAAI,MAAM,SAAS,CAAC,GAAI;KAAE;KAAO;IAAG,CAAC;GAAE,CAAC;GACpE,QAAQ,UAAgC,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACjE,QAAQ,UAAkB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACnD,UAAU,GAAG,UAAsB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,MAAM,UAAoB,MAAM;IAAE,GAAG;IAAO,MAAM;GAAK,CAAC;GACxD,SAAS,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GACnD,MAAM,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GAChD,YAAY,YAA8B,SAAS,MAAM;IAAE,GAAG;IAAO;GAAU,CAAC;GAChF,2BAA2B,MAAM;IAAE,GAAG;IAAO,UAAU;GAAK,CAAC;EAC/D,CAAC;CACH;CAEA,MAAM,WAAwB;EAC5B,SAAS;EACT,SAAS,cACP,MAAM;GAAE,WAAW;GAAU,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;EAAG,CAAC;EAClF,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,cACE,SAEA,OAAO,gBAAgB,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;CAC/D;CAEA,OAAO;AACT,CAAC"}
+{"version":3,"file":"sql-query.mjs","names":[],"sources":["../../src/internal/sql-query.ts"],"sourcesContent":["import { Effect, Predicate } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport type { QueryOperations } from \"./query-operations\";\nimport {\n  type Column,\n  Fragment,\n  Table,\n  identifier,\n  type Compiler,\n  type Dialect,\n  type Row,\n} from \"./sql-table\";\n\nconst render = (value: unknown, compiler: Compiler): string => {\n  if (value instanceof Fragment) return value.render(compiler);\n  if (Predicate.hasProperty(value, \"getSQL\") && typeof value.getSQL === \"function\") {\n    return render(value.getSQL(), compiler);\n  }\n\n  compiler.parameters.push(\n    compiler.dialect === \"sqlite\" && typeof value === \"boolean\" ? Number(value) : value,\n  );\n\n  return compiler.dialect === \"pg\" ? `$${compiler.parameters.length}` : \"?\";\n};\n\nconst template = (parts: TemplateStringsArray, ...values: unknown[]): Fragment =>\n  new Fragment((compiler) =>\n    parts.reduce(\n      (sql, part, i) => sql + (i === 0 ? \"\" : render(values[i - 1], compiler)) + part,\n      \"\",\n    ),\n  );\n\nconst combine = (separator: string, values: ReadonlyArray<Fragment | undefined>) => {\n  const fragments = values.filter((value) => value !== undefined);\n\n  return fragments.length === 0\n    ? undefined\n    : new Fragment(\n        (compiler) =>\n          \"(\" + fragments.map((fragment) => fragment.render(compiler)).join(separator) + \")\",\n      );\n};\n\nexport const and = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" AND \", values);\nconst or = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" OR \", values);\n\nconst operations = {\n  and,\n  or,\n  asc: (value: unknown) => template`${value} ASC`,\n  eq: (left: unknown, right: unknown) => template`${left} = ${right}`,\n  ne: (left: unknown, right: unknown) => template`${left} <> ${right}`,\n  gt: (left: unknown, right: unknown) => template`${left} > ${right}`,\n  gte: (left: unknown, right: unknown) => template`${left} >= ${right}`,\n  lte: (left: unknown, right: unknown) => template`${left} <= ${right}`,\n  isNotNull: (value: unknown) => template`${value} IS NOT NULL`,\n  isNull: (value: unknown) => template`${value} IS NULL`,\n  notExists: (value: unknown) => template`NOT EXISTS (${value})`,\n  inArray: (column: unknown, values: ReadonlyArray<unknown>) =>\n    values.length === 0\n      ? template`false`\n      : new Fragment(\n          (compiler) =>\n            `${render(column, compiler)} IN (${values.map((value) => render(value, compiler)).join(\", \")})`,\n        ),\n  sql: Object.assign(template, {\n    param: (value: unknown, column: Column) => column.mapToDriverValue(value),\n    join: (values: ReadonlyArray<unknown>, separator: Fragment = template``) =>\n      new Fragment((compiler) =>\n        values\n          .map(\n            (value, index) =>\n              (index === 0 ? \"\" : separator.render(compiler)) + render(value, compiler),\n          )\n          .join(\"\"),\n      ),\n  }),\n  getTableColumns: (table: Table) => table.columns,\n  column: (table: Table, key: string) => {\n    const column = table.columns[key];\n\n    if (column === undefined)\n      throw PersistenceMappingError.make({ operation: \"column\", cause: key });\n\n    return column;\n  },\n  updateValues: (entries: ReadonlyArray<readonly [string, unknown]>) => Object.fromEntries(entries),\n  balancedD1And: and,\n  // Raw clients use interactive transactions, so no D1 batch compaction is needed.\n  compactD1GeneratedStatement: <S>(_client: unknown, statement: S) => statement,\n};\n\n// The existing kernels erase query-builder shapes at this boundary. The raw compiler\n// implements precisely those operations; no row decoding or Effect requirements are cast.\nexport const sqlQueryOperations = operations as unknown as QueryOperations;\n\ntype Selection = Readonly<Record<string, Fragment>>;\n\ninterface QueryState {\n  readonly operation: \"select\" | \"insert\" | \"update\" | \"delete\";\n  readonly table?: Table | Fragment;\n  readonly joins?: ReadonlyArray<{\n    readonly table: Table | Fragment;\n    readonly on: Fragment;\n  }>;\n  readonly selection?: Selection;\n  readonly where?: Fragment | undefined;\n  readonly values?: Row;\n  readonly returning?: Selection | true;\n  readonly order?: ReadonlyArray<Fragment>;\n  readonly limit?: number;\n  readonly lock?: boolean;\n  readonly conflict?: boolean;\n}\n\nconst selectionFor = (state: QueryState): Selection =>\n  state.selection ?? (state.table instanceof Table ? state.table.columns : {});\n\n// Logical keys may exceed SQL identifier limits; only short internal aliases reach the driver.\nconst selectionFields = (selection: Selection) => {\n  let index = 0;\n\n  return Object.entries(selection).flatMap<{\n    readonly key: string;\n    readonly name: string | undefined;\n    readonly column: Fragment;\n    readonly alias: string;\n  }>(([key, value]) =>\n    value instanceof Table\n      ? Object.entries(value.columns).map(([name, column]) => ({\n          key,\n          name,\n          column,\n          alias: `auth_column_${index++}`,\n        }))\n      : [{ key, name: undefined, column: value, alias: `auth_column_${index++}` }],\n  );\n};\n\nconst projection = (selection: Selection, compiler: Compiler) =>\n  selectionFields(selection)\n    .map(({ column, alias }) => `${column.render(compiler)} AS ${identifier(alias)}`)\n    .join(\", \");\n\n// Joined table selections retain their own column codecs and nested row names.\nconst decodeRow = (selection: Selection, row: Row): Row => {\n  const entries: Array<readonly [string, unknown]> = [];\n  const groups = new Map<string, Array<readonly [string, unknown]>>();\n\n  for (const field of selectionFields(selection)) {\n    const value = field.column.decode(row[field.alias]);\n\n    if (field.name === undefined) entries.push([field.key, value]);\n    else {\n      const group = groups.get(field.key) ?? [];\n\n      group.push([field.name, value]);\n      groups.set(field.key, group);\n    }\n  }\n\n  return Object.fromEntries([\n    ...entries,\n    ...Array.from(groups, ([key, values]) => [key, Object.fromEntries(values)]),\n  ]);\n};\n\nconst compile = (state: QueryState, compiler: Compiler): string => {\n  const table = state.table;\n\n  if (table === undefined)\n    throw PersistenceMappingError.make({ operation: \"query\", cause: \"Missing table\" });\n  let query: string;\n\n  if (state.operation === \"select\") {\n    query = `SELECT ${projection(selectionFor(state), compiler)} FROM ${table.render(compiler)}`;\n    for (const join of state.joins ?? [])\n      query += ` INNER JOIN ${join.table.render(compiler)} ON ${join.on.render(compiler)}`;\n  } else {\n    if (!(table instanceof Table))\n      throw PersistenceMappingError.make({\n        operation: \"query\",\n        cause: \"Mutation requires a table\",\n      });\n    const target = table.render(compiler);\n\n    const fields = Object.entries(state.values ?? {}).filter(\n      ([key, value]) => table.columns[key] !== undefined && value !== undefined,\n    );\n\n    if (state.operation === \"insert\") {\n      query = `INSERT INTO ${target} (${fields.map(([key]) => identifier(table.columns[key].options.name)).join(\", \")}) VALUES (${fields.map(([, value]) => render(value, compiler)).join(\", \")})`;\n    } else if (state.operation === \"update\") {\n      query = `UPDATE ${target} SET ${fields.map(([key, value]) => `${identifier(table.columns[key].options.name)} = ${render(value, compiler)}`).join(\", \")}`;\n    } else query = `DELETE FROM ${target}`;\n  }\n  if (state.where !== undefined) query += ` WHERE ${state.where.render(compiler)}`;\n  if (state.order?.length)\n    query += ` ORDER BY ${state.order.map((field) => field.render(compiler)).join(\", \")}`;\n  if (state.limit !== undefined) query += ` LIMIT ${render(state.limit, compiler)}`;\n  if (state.conflict) query += \" ON CONFLICT DO NOTHING\";\n  if (state.returning)\n    query += ` RETURNING ${projection(state.returning === true && table instanceof Table ? table.columns : state.returning === true ? {} : state.returning, compiler)}`;\n  if (state.lock && compiler.dialect === \"pg\") query += \" FOR UPDATE\";\n\n  return query;\n};\n\n/** Captures one Effect SQL client. Its transaction service remains the physical owner. */\nexport const makeSqlDatabase = Effect.fnUntraced(function* (dialect: Dialect) {\n  // Mappings and projection aliases own their names. Retain the client's\n  // connection and transaction identity while bypassing naming transforms.\n  const client = (yield* SqlClient).withoutTransforms();\n\n  const query = (state: QueryState): Query => {\n    const execute = Effect.suspend(() => {\n      const compiler: Compiler = { dialect, parameters: [] };\n      const text = compile(state, compiler);\n\n      const selected: Selection =\n        state.operation === \"select\"\n          ? selectionFor(state)\n          : state.returning === true\n            ? state.table instanceof Table\n              ? state.table.columns\n              : {}\n            : state.returning || {};\n\n      return client\n        .unsafe<Row>(text, compiler.parameters)\n        .pipe(Effect.map((rows) => rows.map((row) => decodeRow(selected, row))));\n    });\n\n    return Object.assign(execute, {\n      toSQL: () => {\n        const compiler: Compiler = { dialect, parameters: [] };\n\n        return { sql: compile(state, compiler), params: compiler.parameters };\n      },\n      getSQL: () => new Fragment((compiler) => compile(state, compiler)),\n      from: (table: Table | Fragment) => query({ ...state, table }),\n      innerJoin: (table: Table | Fragment, on: Fragment) =>\n        query({ ...state, joins: [...(state.joins ?? []), { table, on }] }),\n      where: (where: Fragment | undefined) => query({ ...state, where }),\n      limit: (limit: number) => query({ ...state, limit }),\n      orderBy: (...order: Fragment[]) => query({ ...state, order }),\n      for: (_lock: \"update\") => query({ ...state, lock: true }),\n      values: (values: Row) => query({ ...state, values }),\n      set: (values: Row) => query({ ...state, values }),\n      returning: (returning: Selection | true = true) => query({ ...state, returning }),\n      onConflictDoNothing: () => query({ ...state, conflict: true }),\n    });\n  };\n\n  const database: SqlDatabase = {\n    $client: client,\n    select: (selection?: Selection) =>\n      query({ operation: \"select\", ...(selection === undefined ? {} : { selection }) }),\n    insert: (table: Table) => query({ operation: \"insert\", table }),\n    update: (table: Table) => query({ operation: \"update\", table }),\n    delete: (table: Table) => query({ operation: \"delete\", table }),\n    transaction: <A, E, R>(\n      body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n    ): Effect.Effect<A, E | SqlError, R> =>\n      client.withTransaction(Effect.suspend(() => body(database))),\n  };\n\n  return database;\n});\n\ninterface Query extends Effect.Effect<Row[], SqlError> {\n  toSQL(): { readonly sql: string; readonly params: ReadonlyArray<unknown> };\n  getSQL(): Fragment;\n  from(table: Table | Fragment): Query;\n  innerJoin(table: Table | Fragment, on: Fragment): Query;\n  where(where: Fragment | undefined): Query;\n  limit(limit: number): Query;\n  orderBy(...order: Fragment[]): Query;\n  for(lock: \"update\"): Query;\n  values(values: Row): Query;\n  set(values: Row): Query;\n  returning(returning?: Selection | true): Query;\n  onConflictDoNothing(): Query;\n}\n\nexport interface SqlDatabase {\n  readonly $client: SqlClient;\n  select(selection?: Selection): Query;\n  insert(table: Table): Query;\n  update(table: Table): Query;\n  delete(table: Table): Query;\n  transaction<A, E, R>(\n    body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | SqlError, R>;\n}\n\nexport const sql = template;\n\nexport const { eq } = operations;\n"],"mappings":";;;;;AAgBA,MAAM,UAAU,OAAgB,aAA+B;CAC7D,IAAI,iBAAiB,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC3D,IAAI,UAAU,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM,WAAW,YACpE,OAAO,OAAO,MAAM,OAAO,GAAG,QAAQ;CAGxC,SAAS,WAAW,KAClB,SAAS,YAAY,YAAY,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI,KAChF;CAEA,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,WAAW,WAAW;AACxE;AAEA,MAAM,YAAY,OAA6B,GAAG,WAChD,IAAI,UAAU,aACZ,MAAM,QACH,KAAK,MAAM,MAAM,OAAO,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI,IAAI,QAAQ,KAAK,MAC3E,EACF,CACF;AAEF,MAAM,WAAW,WAAmB,WAAgD;CAClF,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,KAAA,CAAS;CAE9D,OAAO,UAAU,WAAW,IACxB,KAAA,IACA,IAAI,UACD,aACC,MAAM,UAAU,KAAK,aAAa,SAAS,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,GACnF;AACN;AAEA,MAAa,OAAO,GAAG,WAAgD,QAAQ,SAAS,MAAM;AAC9F,MAAM,MAAM,GAAG,WAAgD,QAAQ,QAAQ,MAAM;AAErF,MAAM,aAAa;CACjB;CACA;CACA,MAAM,UAAmB,QAAQ,GAAG,MAAM;CAC1C,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC7D,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,YAAY,UAAmB,QAAQ,GAAG,MAAM;CAChD,SAAS,UAAmB,QAAQ,GAAG,MAAM;CAC7C,YAAY,UAAmB,QAAQ,eAAe,MAAM;CAC5D,UAAU,QAAiB,WACzB,OAAO,WAAW,IACd,QAAQ,UACR,IAAI,UACD,aACC,GAAG,OAAO,QAAQ,QAAQ,EAAE,OAAO,OAAO,KAAK,UAAU,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACjG;CACN,KAAK,OAAO,OAAO,UAAU;EAC3B,QAAQ,OAAgB,WAAmB,OAAO,iBAAiB,KAAK;EACxE,OAAO,QAAgC,YAAsB,QAAQ,OACnE,IAAI,UAAU,aACZ,OACG,KACE,OAAO,WACL,UAAU,IAAI,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,OAAO,QAAQ,CAC5E,CAAC,CACA,KAAK,EAAE,CACZ;CACJ,CAAC;CACD,kBAAkB,UAAiB,MAAM;CACzC,SAAS,OAAc,QAAgB;EACrC,MAAM,SAAS,MAAM,QAAQ;EAE7B,IAAI,WAAW,KAAA,GACb,MAAM,wBAAwB,KAAK;GAAE,WAAW;GAAU,OAAO;EAAI,CAAC;EAExE,OAAO;CACT;CACA,eAAe,YAAuD,OAAO,YAAY,OAAO;CAChG,eAAe;CAEf,8BAAiC,SAAkB,cAAiB;AACtE;AAIA,MAAa,qBAAqB;AAqBlC,MAAM,gBAAgB,UACpB,MAAM,cAAc,MAAM,iBAAiB,QAAQ,MAAM,MAAM,UAAU,CAAC;AAG5E,MAAM,mBAAmB,cAAyB;CAChD,IAAI,QAAQ;CAEZ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,SAK7B,CAAC,KAAK,WACR,iBAAiB,QACb,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa;EACrD;EACA;EACA;EACA,OAAO,eAAe;CACxB,EAAE,IACF,CAAC;EAAE;EAAK,MAAM,KAAA;EAAW,QAAQ;EAAO,OAAO,eAAe;CAAU,CAAC,CAC/E;AACF;AAEA,MAAM,cAAc,WAAsB,aACxC,gBAAgB,SAAS,CAAC,CACvB,KAAK,EAAE,QAAQ,YAAY,GAAG,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,KAAK,GAAG,CAAC,CAChF,KAAK,IAAI;AAGd,MAAM,aAAa,WAAsB,QAAkB;CACzD,MAAM,UAA6C,CAAC;CACpD,MAAM,yBAAS,IAAI,IAA+C;CAElE,KAAK,MAAM,SAAS,gBAAgB,SAAS,GAAG;EAC9C,MAAM,QAAQ,MAAM,OAAO,OAAO,IAAI,MAAM,MAAM;EAElD,IAAI,MAAM,SAAS,KAAA,GAAW,QAAQ,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;OACxD;GACH,MAAM,QAAQ,OAAO,IAAI,MAAM,GAAG,KAAK,CAAC;GAExC,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC;GAC9B,OAAO,IAAI,MAAM,KAAK,KAAK;EAC7B;CACF;CAEA,OAAO,OAAO,YAAY,CACxB,GAAG,SACH,GAAG,MAAM,KAAK,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO,YAAY,MAAM,CAAC,CAAC,CAC5E,CAAC;AACH;AAEA,MAAM,WAAW,OAAmB,aAA+B;CACjE,MAAM,QAAQ,MAAM;CAEpB,IAAI,UAAU,KAAA,GACZ,MAAM,wBAAwB,KAAK;EAAE,WAAW;EAAS,OAAO;CAAgB,CAAC;CACnF,IAAI;CAEJ,IAAI,MAAM,cAAc,UAAU;EAChC,QAAQ,UAAU,WAAW,aAAa,KAAK,GAAG,QAAQ,EAAE,QAAQ,MAAM,OAAO,QAAQ;EACzF,KAAK,MAAM,QAAQ,MAAM,SAAS,CAAC,GACjC,SAAS,eAAe,KAAK,MAAM,OAAO,QAAQ,EAAE,MAAM,KAAK,GAAG,OAAO,QAAQ;CACrF,OAAO;EACL,IAAI,EAAE,iBAAiB,QACrB,MAAM,wBAAwB,KAAK;GACjC,WAAW;GACX,OAAO;EACT,CAAC;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ;EAEpC,MAAM,SAAS,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,QAC/C,CAAC,KAAK,WAAW,MAAM,QAAQ,SAAS,KAAA,KAAa,UAAU,KAAA,CAClE;EAEA,IAAI,MAAM,cAAc,UACtB,QAAQ,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC,SAAS,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,YAAY,OAAO,KAAK,GAAG,WAAW,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;OACrL,IAAI,MAAM,cAAc,UAC7B,QAAQ,UAAU,OAAO,OAAO,OAAO,KAAK,CAAC,KAAK,WAAW,GAAG,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,OAAO,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI;OAChJ,QAAQ,eAAe;CAChC;CACA,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,MAAM,MAAM,OAAO,QAAQ;CAC7E,IAAI,MAAM,OAAO,QACf,SAAS,aAAa,MAAM,MAAM,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;CACpF,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC9E,IAAI,MAAM,UAAU,SAAS;CAC7B,IAAI,MAAM,WACR,SAAS,cAAc,WAAW,MAAM,cAAc,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,MAAM,cAAc,OAAO,CAAC,IAAI,MAAM,WAAW,QAAQ;CAClK,IAAI,MAAM,QAAQ,SAAS,YAAY,MAAM,SAAS;CAEtD,OAAO;AACT;;AAGA,MAAa,kBAAkB,OAAO,WAAW,WAAW,SAAkB;CAG5E,MAAM,UAAU,OAAO,UAAA,CAAW,kBAAkB;CAEpD,MAAM,SAAS,UAA6B;EAC1C,MAAM,UAAU,OAAO,cAAc;GACnC,MAAM,WAAqB;IAAE;IAAS,YAAY,CAAC;GAAE;GACrD,MAAM,OAAO,QAAQ,OAAO,QAAQ;GAEpC,MAAM,WACJ,MAAM,cAAc,WAChB,aAAa,KAAK,IAClB,MAAM,cAAc,OAClB,MAAM,iBAAiB,QACrB,MAAM,MAAM,UACZ,CAAC,IACH,MAAM,aAAa,CAAC;GAE5B,OAAO,OACJ,OAAY,MAAM,SAAS,UAAU,CAAC,CACtC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC;EAC3E,CAAC;EAED,OAAO,OAAO,OAAO,SAAS;GAC5B,aAAa;IACX,MAAM,WAAqB;KAAE;KAAS,YAAY,CAAC;IAAE;IAErD,OAAO;KAAE,KAAK,QAAQ,OAAO,QAAQ;KAAG,QAAQ,SAAS;IAAW;GACtE;GACA,cAAc,IAAI,UAAU,aAAa,QAAQ,OAAO,QAAQ,CAAC;GACjE,OAAO,UAA4B,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,YAAY,OAAyB,OACnC,MAAM;IAAE,GAAG;IAAO,OAAO,CAAC,GAAI,MAAM,SAAS,CAAC,GAAI;KAAE;KAAO;IAAG,CAAC;GAAE,CAAC;GACpE,QAAQ,UAAgC,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACjE,QAAQ,UAAkB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACnD,UAAU,GAAG,UAAsB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,MAAM,UAAoB,MAAM;IAAE,GAAG;IAAO,MAAM;GAAK,CAAC;GACxD,SAAS,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GACnD,MAAM,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GAChD,YAAY,YAA8B,SAAS,MAAM;IAAE,GAAG;IAAO;GAAU,CAAC;GAChF,2BAA2B,MAAM;IAAE,GAAG;IAAO,UAAU;GAAK,CAAC;EAC/D,CAAC;CACH;CAEA,MAAM,WAAwB;EAC5B,SAAS;EACT,SAAS,cACP,MAAM;GAAE,WAAW;GAAU,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;EAAG,CAAC;EAClF,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,cACE,SAEA,OAAO,gBAAgB,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;CAC/D;CAEA,OAAO;AACT,CAAC;AA4BD,MAAa,MAAM;AAEnB,MAAa,EAAE,OAAO"}

package/dist/internal/sql-storage-validation.mjs

@@ -0,0 +1,54 @@
+import { PersistenceMappingError } from "./mapping-error.mjs";
+import { Table } from "./sql-table.mjs";
+import { NativeDatabase } from "./transaction-kernel.mjs";
+import { validateStorageBatch } from "./storage-validation.mjs";
+import { storageKeyPlans } from "./storage-plans.mjs";
+import { Effect } from "effect";
+import { SqlClient } from "effect/sql";
+//#region src/internal/sql-storage-validation.ts
+/** Check declared mappings against physical keys before acquiring OAuth services. */
+const validateSqlStorage = Effect.fnUntraced(function* (mapping) {
+	const plans = yield* Effect.try({
+		try: () => storageKeyPlans(mapping, (table) => {
+			if (!(table instanceof Table)) throw new Error("Expected a SQL table");
+			return table.columns;
+		}),
+		catch: () => PersistenceMappingError.make({
+			operation: "mapping",
+			cause: "Invalid storage key mapping"
+		})
+	});
+	const { $client: client } = yield* NativeDatabase;
+	const dialect = client.onDialectOrElse({
+		pg: () => "pg",
+		sqlite: () => "sqlite",
+		orElse: () => void 0
+	});
+	if (dialect === void 0) return yield* PersistenceMappingError.make({
+		operation: "mapping",
+		cause: "OAuth persistence requires PostgreSQL or SQLite"
+	});
+	const validations = [];
+	for (const plan of plans) {
+		if (!(plan.table instanceof Table)) return yield* PersistenceMappingError.make({
+			operation: "mapping",
+			cause: "Expected a SQL table"
+		});
+		validations.push({
+			table: {
+				name: plan.table.name,
+				...plan.table.schema === void 0 ? {} : { schema: plan.table.schema },
+				columns: Object.fromEntries(Object.entries(plan.table.columns).map(([key, column]) => [key, column.options]))
+			},
+			required: [plan.keys]
+		});
+	}
+	yield* validateStorageBatch(dialect, validations).pipe(Effect.provideService(SqlClient.SqlClient, client), Effect.mapError(() => PersistenceMappingError.make({
+		operation: "mapping",
+		cause: "Required SQL storage key is unavailable"
+	})));
+});
+//#endregion
+export { validateSqlStorage };
+
+//# sourceMappingURL=sql-storage-validation.mjs.map

package/dist/internal/sql-storage-validation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-storage-validation.mjs","names":[],"sources":["../../src/internal/sql-storage-validation.ts"],"sourcesContent":["import { Effect } from \"effect\";\nimport { SqlClient } from \"effect/sql\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport { Table } from \"./sql-table\";\nimport { storageKeyPlans } from \"./storage-plans\";\nimport { validateStorageBatch, type StorageValidation } from \"./storage-validation\";\nimport { NativeDatabase } from \"./transaction-kernel\";\n\n/** Check declared mappings against physical keys before acquiring OAuth services. */\nexport const validateSqlStorage = Effect.fnUntraced(function* (mapping: unknown) {\n  const plans = yield* Effect.try({\n    try: () =>\n      storageKeyPlans(mapping, (table) => {\n        if (!(table instanceof Table)) throw new Error(\"Expected a SQL table\");\n\n        return table.columns;\n      }),\n    catch: () =>\n      PersistenceMappingError.make({ operation: \"mapping\", cause: \"Invalid storage key mapping\" }),\n  });\n\n  const { $client: client } = yield* NativeDatabase;\n\n  const dialect = client.onDialectOrElse({\n    pg: () => \"pg\" as const,\n    sqlite: () => \"sqlite\" as const,\n    orElse: () => undefined,\n  });\n\n  if (dialect === undefined)\n    return yield* PersistenceMappingError.make({\n      operation: \"mapping\",\n      cause: \"OAuth persistence requires PostgreSQL or SQLite\",\n    });\n  const validations: StorageValidation[] = [];\n\n  for (const plan of plans) {\n    if (!(plan.table instanceof Table))\n      return yield* PersistenceMappingError.make({\n        operation: \"mapping\",\n        cause: \"Expected a SQL table\",\n      });\n    validations.push({\n      table: {\n        name: plan.table.name,\n        ...(plan.table.schema === undefined ? {} : { schema: plan.table.schema }),\n        columns: Object.fromEntries(\n          Object.entries(plan.table.columns).map(([key, column]) => [key, column.options]),\n        ),\n      },\n      required: [plan.keys],\n    });\n  }\n  yield* validateStorageBatch(dialect, validations).pipe(\n    Effect.provideService(SqlClient.SqlClient, client),\n    Effect.mapError(() =>\n      PersistenceMappingError.make({\n        operation: \"mapping\",\n        cause: \"Required SQL storage key is unavailable\",\n      }),\n    ),\n  );\n});\n"],"mappings":";;;;;;;;;AAUA,MAAa,qBAAqB,OAAO,WAAW,WAAW,SAAkB;CAC/E,MAAM,QAAQ,OAAO,OAAO,IAAI;EAC9B,WACE,gBAAgB,UAAU,UAAU;GAClC,IAAI,EAAE,iBAAiB,QAAQ,MAAM,IAAI,MAAM,sBAAsB;GAErE,OAAO,MAAM;EACf,CAAC;EACH,aACE,wBAAwB,KAAK;GAAE,WAAW;GAAW,OAAO;EAA8B,CAAC;CAC/F,CAAC;CAED,MAAM,EAAE,SAAS,WAAW,OAAO;CAEnC,MAAM,UAAU,OAAO,gBAAgB;EACrC,UAAU;EACV,cAAc;EACd,cAAc,KAAA;CAChB,CAAC;CAED,IAAI,YAAY,KAAA,GACd,OAAO,OAAO,wBAAwB,KAAK;EACzC,WAAW;EACX,OAAO;CACT,CAAC;CACH,MAAM,cAAmC,CAAC;CAE1C,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,EAAE,KAAK,iBAAiB,QAC1B,OAAO,OAAO,wBAAwB,KAAK;GACzC,WAAW;GACX,OAAO;EACT,CAAC;EACH,YAAY,KAAK;GACf,OAAO;IACL,MAAM,KAAK,MAAM;IACjB,GAAI,KAAK,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,OAAO;IACvE,SAAS,OAAO,YACd,OAAO,QAAQ,KAAK,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO,OAAO,CAAC,CACjF;GACF;GACA,UAAU,CAAC,KAAK,IAAI;EACtB,CAAC;CACH;CACA,OAAO,qBAAqB,SAAS,WAAW,CAAC,CAAC,KAChD,OAAO,eAAe,UAAU,WAAW,MAAM,GACjD,OAAO,eACL,wBAAwB,KAAK;EAC3B,WAAW;EACX,OAAO;CACT,CAAC,CACH,CACF;AACF,CAAC"}

package/dist/internal/storage-mapping.mjs

@@ -9,7 +9,7 @@ import { TokenDigest } from "@yielded/auth/Schema";
 import { SecurityRevision, SessionAuthenticationProvenance, SessionCredentialVersion, SessionId, SessionMetadata } from "@yielded/auth/Sessions";
 import { ProofBinding, ProofContinuationId, ProofDeliveryId, ProofId, ProofPurpose, ProofRequestId, ProofRequestReceipt, ProofVersion } from "@yielded/auth/Proofs";
 import { EmailCredentialSnapshot } from "@yielded/auth/Email";
-import { EncodedPasswordHash, PasswordAttemptId, PasswordCredentialSnapshot } from "@yielded/auth/Password";
+import { EncodedPasswordHash, PasswordCredentialSnapshot } from "@yielded/auth/Password";
 import { LoginIdentifier } from "@yielded/auth/Identity";
 //#region src/internal/storage-mapping.ts
 const failure = (cause) => PersistenceMappingError.make({
@@ -329,7 +329,6 @@ const makeMappings = Effect.fnUntraced(function* (input) {
 			isCommandConflict: () => false,
 			encodeInstant: instant,
 			decodeInstant: readInstant,
-			allocateAttemptId: allocate.pipe(Effect.map(PasswordAttemptId.make)),
 			allocateCredentialId: allocate,
 			allocateRevision: allocate.pipe(Effect.map(SecurityRevision.make)),
 			commandRetentionMillis: 864e5,
@@ -398,41 +397,6 @@ const makeMappings = Effect.fnUntraced(function* (input) {
 					});
 				})
 			},
-			attempt: {
-				...mapped("passwordAttempts"),
-				moduleId: "moduleId",
-				action: "action",
-				attemptId: "attemptId",
-				identifierNamespace: "identifierNamespace",
-				identifierValue: "identifierValue",
-				subjectId: "subjectId",
-				credentialId: "credentialId",
-				securityRevision: "securityRevision",
-				credentialRevision: "credentialRevision",
-				verifierVersion: "verifierVersion",
-				identifierBindingRevision: "identifierBindingRevision",
-				admittedAt: "admittedAt",
-				deadline: "deadline",
-				retentionUntil: "retentionUntil",
-				state: "state",
-				encodeInsert: (row, { nativeSubjectId, state }) => ({
-					moduleId: row.moduleId,
-					action: row.action,
-					attemptId: row.attemptId,
-					identifierNamespace: row.identifier.namespace,
-					identifierValue: row.identifier.value,
-					subjectId: nativeSubjectId ?? null,
-					credentialId: row.credentialId ?? null,
-					securityRevision: row.securityRevision ?? null,
-					credentialRevision: row.credentialRevision ?? null,
-					verifierVersion: row.verifierVersion ?? null,
-					identifierBindingRevision: row.identifierBindingRevision ?? null,
-					admittedAt: instant(row.admittedAtMillis),
-					deadline: instant(row.deadlineMillis),
-					retentionUntil: instant(row.retentionUntilMillis),
-					state
-				})
-			},
 			command: {
 				...mapped("passwordCommands"),
 				moduleId: "moduleId",