@yielded/auth-persistence 0.1.0-beta.24 → 0.1.0-beta.26

package/README.md

@@ -29,13 +29,11 @@ connection and migration runner.
 
 The composed Layer covers password sign-in and management, email address verification
 and changes, phone sign-in, and passkey sign-in and management with stateful sessions
-on PostgreSQL and SQLite. The `/Adapter` module exposes the shared mapping contracts
-and transaction kernels used by companion adapters.
-Its constructors acquire their database through the matching `Current*Sql` or
-`NativeDatabase` service, alongside Effect `Crypto` where required. Supply these
-services during construction;
-transaction coordinators supply their exact transaction when constructing bound
-services. Keep root database provision outside later operations, where the
-current SQL service identifies an active transaction.
+on PostgreSQL and SQLite. The `/Adapter` module has two integration levels:
+typed table mappings, or `NativeSqlTables` with shared strategy factories. The same
+native statements and commit owner serve direct SQL and Drizzle; drivers translate
+physical columns and expressions and supply transaction or atomic-batch execution.
+Plain reads use no transaction. Protected mutations retain their named final checks
+when an application joins additional work to the owner.
 See [persistence examples](../../docs/src/content/docs/reference/adapters.md#runnable-examples) for all
 four ownership models and their current limits.

package/dist/Adapter.d.mts

@@ -1,40 +1,54 @@
+import { SqlExpression, TableModel } from "./internal/table-model.mjs";
 import { PersistenceMappingError, isMappedConstraintConflict } from "./internal/mapping-error.mjs";
-import { GuardedUpdate, NativeDatabase, Observation, Row, TransactionNativeDatabase, TransactionOwner, makeTransactionKernel } from "./internal/transaction-kernel.mjs";
-import { QueryFailure, QueryOperations, SqlColumn, SqlExpression, SqlFragment, TableModel } from "./internal/query-operations.mjs";
 import { SubjectIdCodec } from "./internal/models/common.mjs";
-import { AnyEmailAddressMapping, AnyEmailRegistrationMapping, AnyEmailSignInMapping, D1EmailAddressMapping, D1EmailRegistrationMapping, EmailAddressMapping, EmailAuthorityCredentialTable, EmailCommandTable, EmailCredentialReadTable, EmailCredentialTable, EmailD1Clock, EmailIdentifierReadTable, EmailIdentifierTable, EmailRegistrationAuthorityCredentialTable, EmailRegistrationCredentialTable, EmailRegistrationIdentifierTable, EmailRegistrationIntent, EmailRegistrationMapping, EmailRegistrationProvisioning, EmailRegistrationState, EmailRegistrationTable, EmailSignInMapping, EmailSubjectReadTable, EmailSubjectTable, RequiredEmailAddressConstraints, RequiredEmailRegistrationConstraints, RequiredEmailSignInConstraints, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints } from "./internal/models/email-model.mjs";
-import { D1PasskeyMapping, PasskeyAdmissionTable, PasskeyCeremonyMapping, PasskeyChargeInsert, PasskeyChargeKind, PasskeyChargeTable, PasskeyClock, PasskeyColumn, PasskeyCredentialMapping, PasskeyCredentialOwnershipTable, PasskeyCredentialReadTable, PasskeyCredentialServices, PasskeyEnrollmentContextMapping, PasskeyEnrollmentContextServices, PasskeyFactorReadTable, PasskeyFlowInsert, PasskeyFlowState, PasskeyFlowTable, PasskeyHandleOwnershipTable, PasskeyHandleReadTable, PasskeyHandleReservationTable, PasskeyMappingSource, PasskeyModuleTable, PasskeyPersistenceMapping, PasskeyPersistenceServices, PasskeyPolicyGuard, PasskeySubjectIdCodec, PasskeySubjectReadTable, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyPersistenceLayer, passkeyPolicyGuard, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints } from "./internal/models/passkey-model.mjs";
-import { PasskeyRegistrationCeremonyCapabilities, PasskeyRegistrationCeremonyMapping, PasskeyRegistrationCeremonyServices, PasskeyRegistrationIntentReadTable, requiredPasskeyRegistrationCeremonyConstraints } from "./internal/models/passkey-registration-ceremony-model.mjs";
-import { PasskeyCommandTable, PasskeyCredentialInsert, PasskeyInvalidationInput, PasskeyInvalidationMutation, PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter, PasskeyWriteTables, passkeyInvalidationMutation, requiredPasskeyManagementConstraints, requiredPasskeyRegistrationWriteConstraints } from "./internal/models/passkey-write-model.mjs";
-import { AnyPasswordPersistenceMapping, AnyPasswordRegistrationMapping, D1PasswordPersistenceMapping, PasswordAuthorityCredentialTable, PasswordCommandTable, PasswordConstraintClassifier, PasswordCredentialTable, PasswordD1Clock, PasswordIdentifierTable, PasswordPersistenceMapping, PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, PasswordRegistrationMapping, PasswordRegistrationProvisioning, PasswordRegistrationState, PasswordRegistrationTable, PasswordSubjectTable, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./internal/models/password-model.mjs";
-import { AnyProofPersistenceMapping, D1ProofPersistenceMapping, ProofAbuseEventTable, ProofAction, ProofAuthorityInput, ProofAuthorityTables, ProofCommandDecision, ProofCommandKind, ProofCommandTable, ProofConstraintClassifier, ProofContinuationRecord, ProofContinuationTable, ProofD1Clock, ProofDeliveryState, ProofFailureEventTable, ProofGenerationState, ProofGenerationTable, ProofPersistenceMapping, ProofRateScopeTable, ProofRequestTable, ProofScopeKeys, ProofScopeKind, ProofSeriesTable, RequiredProofConstraints, requiredProofConstraints } from "./internal/models/proof-model.mjs";
-import { AuthenticationAuthorityMapping, D1AuthenticationAuthorityMapping, D1PendingAuthenticationMapping, D1SessionClockMapping, D1SignedSessionValidityMapping, D1StatefulSessionMapping, PendingAuthenticationMapping, PendingAuthenticationTables, RequiredPendingAuthenticationConstraints, RequiredSessionConstraints, RequiredSignedValidityConstraints, RequiredStatefulPendingConstraints, SessionAuthorityTables, SessionConstraintClassifier, SessionFlowTables, SessionIdCodec, SessionSubjectTables, SignedSessionValidityMapping, SignedSessionValidityTables, StatefulSessionMapping, StatefulSessionTables, requiredPendingAuthenticationConstraints, requiredSessionConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints } from "./internal/models/session-model.mjs";
-import { D1SessionStepUpMapping, RequiredSessionStepUpConstraints, SessionStepUpIntentTables, SessionStepUpMapping, SessionStepUpSourceTables, requiredSessionStepUpConstraints } from "./internal/models/step-up-model.mjs";
+import { AnyProofPersistenceMapping, ProofClock, ProofPersistenceMapping, ProofTable, RequiredProofConstraints, requiredProofConstraints } from "./internal/models/proof-model.mjs";
+import { AnyEmailAddressMapping, AnyEmailRegistrationMapping, AnyEmailSignInMapping, EmailAddressMapping, EmailAuthorityCredentialTable, EmailCredentialReadTable, EmailCredentialTable, EmailIdentifierReadTable, EmailIdentifierTable, EmailRegistrationAuthorityCredentialTable, EmailRegistrationCredentialTable, EmailRegistrationIdentifierTable, EmailRegistrationIntent, EmailRegistrationMapping, EmailRegistrationProvisioning, EmailSignInMapping, EmailSubjectReadTable, EmailSubjectTable, RequiredEmailAddressConstraints, RequiredEmailRegistrationConstraints, RequiredEmailSignInConstraints, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints } from "./internal/models/email-model.mjs";
+import { D1PasskeyMapping, PasskeyCeremonyMapping, PasskeyClock, PasskeyColumn, PasskeyCredentialMapping, PasskeyCredentialReadTable, PasskeyCredentialServices, PasskeyFactorReadTable, PasskeyFlowInsert, PasskeyFlowTable, PasskeyMappingSource, PasskeyPersistenceMapping, PasskeyPersistenceServices, PasskeySubjectIdCodec, PasskeySubjectReadTable, passkeyCredentialsLayer, passkeyPersistenceLayer, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints } from "./internal/models/passkey-model.mjs";
+import { PasskeyRegistrationCeremonyCapabilities, PasskeyRegistrationCeremonyMapping, PasskeyRegistrationCeremonyServices } from "./internal/models/passkey-registration-ceremony-model.mjs";
+import { PasskeyCredentialInsert, PasskeyInvalidationInput, PasskeyInvalidationMutation, PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter, PasskeyWriteTables, passkeyInvalidationMutation } from "./internal/models/passkey-write-model.mjs";
+import { AnyPasswordPersistenceMapping, AnyPasswordRegistrationMapping, PasswordAuthorityCredentialTable, PasswordCredentialTable, PasswordIdentifierTable, PasswordPersistenceMapping, PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, PasswordRegistrationMapping, PasswordRegistrationProvisioning, PasswordSubjectTable, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./internal/models/password-model.mjs";
+import { AuthenticationAuthorityMapping, PendingAuthenticationMapping, PendingAuthenticationTables, RequiredPendingAuthenticationConstraints, RequiredSessionConstraints, RequiredSignedValidityConstraints, RequiredStatefulPendingConstraints, SessionAuthorityTables, SessionCleanupMapping, SessionExecution, SessionIdCodec, SessionPendingInsert, SessionPendingTables, SessionSubjectTables, SignedSessionValidityMapping, SignedSessionValidityTables, StatefulSessionMapping, StatefulSessionTables, requiredPendingAuthenticationConstraints, requiredSessionConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints } from "./internal/models/session-model.mjs";
+import { RequiredSessionStepUpConstraints, SessionStepUpMapping, SessionStepUpSourceTables, requiredSessionStepUpConstraints } from "./internal/models/step-up-model.mjs";
 import { requireStandalone } from "./internal/standalone.mjs";
-import { OAuthProxySqlTable, makeOAuthProxyPersistence, oauthProxyColumns } from "./internal/oauth-proxy.mjs";
-import { decodeStepUpIntent, encodeStepUpIntent, stepUpIntentLive, validateStepUpPlan } from "./internal/step-up-state.mjs";
-import { CurrentProofSql, ProofSqlConfiguration, ProofSqlDatabase, ProofSqlQuery, makeProofKernel } from "./internal/proof-kernel.mjs";
-import { CurrentAddress, CurrentEmailSql, EmailSqlConfiguration, EmailSqlDatabase, EmailSqlQuery, makeEmailKernel } from "./internal/email-kernel.mjs";
-import { CurrentPasskeyTransaction, PasskeyOwner } from "./internal/passkey/state.mjs";
-import { TransactionBound, TransactionCoordinatorError, TransactionExecution, TransactionTargetConfiguration, makeTransactionExecutionKernel } from "./internal/transaction-execution-kernel.mjs";
-import { PasskeyCoordinatorError, PasskeyExecution, PasskeyTargetConfiguration } from "./internal/passkey/target.mjs";
-import { PasskeyKernel, makePasskeyKernel } from "./internal/passkey-kernel.mjs";
-import { StorageTable } from "./internal/storage-tables.mjs";
-import { BoundPersistence, ClaimsCodec, Definition, PersistenceApi, PersistenceConfigurationError } from "./internal/configuration.mjs";
-import { PhysicalStorageTable, StorageValidation, validateStorage, validateStorageBatch, withStorageValidation } from "./internal/storage-validation.mjs";
+import { OAuthProxySqlTable, makeOAuthProxyPersistence } from "./internal/oauth-proxy.mjs";
+import { StorageRole, StorageTable, storageTables } from "./internal/storage-tables.mjs";
+import { BoundPersistence, ClaimsCodec, Definition, MappingInput, PersistenceApi, PersistenceConfigurationError } from "./internal/configuration.mjs";
 import { NativeSqlTables, SqlTable, makeNativeSqlTables, nativeSqlAlias } from "./internal/native-sql-table.mjs";
-import { samePasswordCredentialSnapshot } from "./internal/password-credentials.mjs";
-import { CurrentPasswordSql, PasswordSqlConfiguration, PasswordSqlDatabase, PasswordSqlQuery, makePasswordKernel } from "./internal/password-kernel.mjs";
-import { CurrentPasswordPreparedTransaction, PasswordPreparedJournalGuards, PasswordPreparedPostcondition, PasswordPreparedPostconditions } from "./internal/PasswordPreparedPostconditions.mjs";
-import { CurrentPhoneTransaction, makePhoneKernel } from "./internal/phone-kernel.mjs";
-import { CurrentSessionSql, SessionSqlDatabase, SessionSqlOptions, makeSessionKernel } from "./internal/session-kernel.mjs";
-import { createPersistence } from "./internal/persistence.mjs";
-import { makeComposedPasskeys } from "./internal/passkeys.mjs";
+import { Backend, createPersistence } from "./internal/persistence.mjs";
 import { makeMappings } from "./internal/storage-mapping.mjs";
 import { PasswordRegistrationAuthority } from "./internal/registration-contract.mjs";
-import { OAuthAccountsMapping, OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthCredentialReadTable, OAuthCredentialTable, OAuthD1Mapping, OAuthEligibilityDescriptor, OAuthEligibilityFact, OAuthEligibilityTable, OAuthFlowState, OAuthFlowTable, OAuthMetadataPolicy, OAuthOwnershipMutation, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthReferenceGuardDescriptor, OAuthReferenceGuardTable, OAuthRegistrationAuthority, OAuthRegistrationBase, OAuthRegistrationCommandTable, OAuthRegistrationEligibility, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthRegistrationState, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, OAuthTupleAuthorityTable, OAuthTupleState, OAuthUnlinkCommandTable, oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./internal/models/oauth-model.mjs";
-import { OAuthConnectedAction, OAuthConnectedAdmissionTable, OAuthConnectedAuthorityMapping, OAuthConnectedClientRegistrationTable, OAuthConnectedCohortTable, OAuthConnectedCommandTable, OAuthConnectedFlowTable, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedOrderCodec, OAuthConnectedOwnershipRead, OAuthConnectedPolicyGuard, OAuthConnectedPolicyGuardTable, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthConnectedSubjectTable, oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./internal/models/oauth-connected-model.mjs";
-import { OAuthCoordinatorError, OAuthExecution, OAuthTargetConfiguration } from "./internal/oauth/target.mjs";
-import { OAuthKernel, makeOAuthKernel } from "./internal/oauth-kernel.mjs";
+import { PhysicalStorageTable, StorageValidation, validateStorage, validateStorageBatch, withStorageValidation } from "./internal/storage-validation.mjs";
+import { SqlBatchCommit, SqlNativeCommit, captureSqlBatchStatements, makeSqlCommitExecutor } from "./internal/sql-commit.mjs";
+import { PasskeyNativeMapping, PasskeyNativeRead } from "./internal/passkey-native-state.mjs";
+import { makeBatchPasskeyServices, makeNativePasskeyCredentialServices, makeNativePasskeyServices } from "./internal/passkey-native.mjs";
+import { NativePasskeyCeremonyMapping, makeNativePasskeyCeremonyServices } from "./internal/passkey-native-ceremony.mjs";
+import { NativePasskeyManagementMapping, makePasskeyNativeManagement } from "./internal/passkey-native-write.mjs";
+import { NativePasskeyRegistrationMapping, makePasskeyNativeRegistration } from "./internal/passkey-native-registration.mjs";
 import { storageKeyPlans } from "./internal/storage-plans.mjs";
-export { type AnyEmailAddressMapping, type AnyEmailRegistrationMapping, type AnyEmailSignInMapping, type AnyPasswordPersistenceMapping, type AnyPasswordRegistrationMapping, type AnyProofPersistenceMapping, type AuthenticationAuthorityMapping, type BoundPersistence, type ClaimsCodec, type CurrentAddress, CurrentEmailSql, CurrentPasskeyTransaction, CurrentPasswordPreparedTransaction, CurrentPasswordSql, CurrentPhoneTransaction, CurrentProofSql, CurrentSessionSql, type D1AuthenticationAuthorityMapping, type D1EmailAddressMapping, type D1EmailRegistrationMapping, type D1PasskeyMapping, type D1PasswordPersistenceMapping, type D1PendingAuthenticationMapping, type D1ProofPersistenceMapping, type D1SessionClockMapping, type D1SessionStepUpMapping, type D1SignedSessionValidityMapping, type D1StatefulSessionMapping, type Definition, type EmailAddressMapping, type EmailAuthorityCredentialTable, type EmailCommandTable, type EmailCredentialReadTable, type EmailCredentialTable, type EmailD1Clock, type EmailIdentifierReadTable, type EmailIdentifierTable, type EmailRegistrationAuthorityCredentialTable, type EmailRegistrationCredentialTable, type EmailRegistrationIdentifierTable, type EmailRegistrationIntent, type EmailRegistrationMapping, type EmailRegistrationProvisioning, type EmailRegistrationState, type EmailRegistrationTable, type EmailSignInMapping, type EmailSqlConfiguration, type EmailSqlDatabase, type EmailSqlQuery, type EmailSubjectReadTable, type EmailSubjectTable, type GuardedUpdate, NativeDatabase, type NativeSqlTables, type OAuthAccountsMapping, type OAuthAction, type OAuthAuthorityReadTable, type OAuthAuthorityTable, type OAuthCleanupDescriptor, type OAuthCleanupTable, type OAuthClock, type OAuthConnectedAction, type OAuthConnectedAdmissionTable, type OAuthConnectedAuthorityMapping, type OAuthConnectedClientRegistrationTable, type OAuthConnectedCohortTable, type OAuthConnectedCommandTable, type OAuthConnectedFlowTable, type OAuthConnectedGrantTable, type OAuthConnectedMapping, type OAuthConnectedOrderCodec, type OAuthConnectedOwnershipRead, type OAuthConnectedPolicyGuard, type OAuthConnectedPolicyGuardTable, type OAuthConnectedPolicyInput, type OAuthConnectedRevocationJobTable, type OAuthConnectedRevocationMapping, type OAuthConnectedSqlPolicy, type OAuthConnectedSubjectTable, type OAuthCoordinatorError, type OAuthCredentialReadTable, type OAuthCredentialTable, type OAuthD1Mapping, type OAuthEligibilityDescriptor, type OAuthEligibilityFact, type OAuthEligibilityTable, type OAuthExecution, type OAuthFlowState, type OAuthFlowTable, type OAuthKernel, type OAuthMetadataPolicy, type OAuthOwnershipMutation, type OAuthOwnershipReadTable, type OAuthOwnershipTable, type OAuthProxySqlTable, type OAuthReferenceGuardDescriptor, type OAuthReferenceGuardTable, type OAuthRegistrationAuthority, type OAuthRegistrationBase, type OAuthRegistrationCommandTable, type OAuthRegistrationEligibility, type OAuthRegistrationGuardDescriptor, type OAuthRegistrationGuardTable, type OAuthRegistrationIntentMapping, type OAuthRegistrationIntentTable, type OAuthRegistrationMapping, type OAuthRegistrationState, type OAuthSignInMapping, type OAuthSubjectReadTable, type OAuthSubjectTable, type OAuthTargetConfiguration, type OAuthTupleAuthorityTable, type OAuthTupleState, type OAuthUnlinkCommandTable, type Observation, type PasskeyAdmissionTable, type PasskeyCeremonyMapping, type PasskeyChargeInsert, type PasskeyChargeKind, type PasskeyChargeTable, type PasskeyClock, type PasskeyColumn, type PasskeyCommandTable, type PasskeyCoordinatorError, type PasskeyCredentialInsert, type PasskeyCredentialMapping, type PasskeyCredentialOwnershipTable, type PasskeyCredentialReadTable, type PasskeyCredentialServices, type PasskeyEnrollmentContextMapping, type PasskeyEnrollmentContextServices, type PasskeyExecution, type PasskeyFactorReadTable, type PasskeyFlowInsert, type PasskeyFlowState, type PasskeyFlowTable, type PasskeyHandleOwnershipTable, type PasskeyHandleReadTable, type PasskeyHandleReservationTable, type PasskeyInvalidationInput, type PasskeyInvalidationMutation, type PasskeyKernel, type PasskeyManagementMapping, type PasskeyManagementServices, type PasskeyMappingSource, type PasskeyModuleTable, type PasskeyOwner, type PasskeyPersistenceMapping, type PasskeyPersistenceServices, type PasskeyPolicyGuard, type PasskeyRegistrationCeremonyCapabilities, type PasskeyRegistrationCeremonyMapping, type PasskeyRegistrationCeremonyServices, type PasskeyRegistrationIntentReadTable, type PasskeyRegistrationMapping, type PasskeyRegistrationServices, type PasskeyRegistrationWriter, type PasskeySubjectIdCodec, type PasskeySubjectReadTable, type PasskeyTargetConfiguration, type PasskeyWriteTables, type PasswordAuthorityCredentialTable, type PasswordCommandTable, type PasswordConstraintClassifier, type PasswordCredentialTable, type PasswordD1Clock, type PasswordIdentifierTable, type PasswordPersistenceMapping, PasswordPreparedJournalGuards, type PasswordPreparedPostcondition, PasswordPreparedPostconditions, type PasswordRegistrationAuthority, type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type PasswordRegistrationMapping, type PasswordRegistrationProvisioning, type PasswordRegistrationState, type PasswordRegistrationTable, type PasswordSqlConfiguration, type PasswordSqlDatabase, type PasswordSqlQuery, type PasswordSubjectTable, type PendingAuthenticationMapping, type PendingAuthenticationTables, type PersistenceApi, PersistenceConfigurationError, PersistenceMappingError, type PhysicalStorageTable, type ProofAbuseEventTable, type ProofAction, type ProofAuthorityInput, type ProofAuthorityTables, type ProofCommandDecision, type ProofCommandKind, type ProofCommandTable, type ProofConstraintClassifier, type ProofContinuationRecord, type ProofContinuationTable, type ProofD1Clock, type ProofDeliveryState, type ProofFailureEventTable, type ProofGenerationState, type ProofGenerationTable, type ProofPersistenceMapping, type ProofRateScopeTable, type ProofRequestTable, type ProofScopeKeys, type ProofScopeKind, type ProofSeriesTable, type ProofSqlConfiguration, type ProofSqlDatabase, type ProofSqlQuery, type QueryFailure, type QueryOperations, type RequiredEmailAddressConstraints, type RequiredEmailRegistrationConstraints, type RequiredEmailSignInConstraints, type RequiredPasswordConstraints, type RequiredPasswordRegistrationConstraints, type RequiredPendingAuthenticationConstraints, type RequiredProofConstraints, type RequiredSessionConstraints, type RequiredSessionStepUpConstraints, type RequiredSignedValidityConstraints, type RequiredStatefulPendingConstraints, type Row, type SessionAuthorityTables, type SessionConstraintClassifier, type SessionFlowTables, type SessionIdCodec, type SessionSqlDatabase, type SessionSqlOptions, type SessionStepUpIntentTables, type SessionStepUpMapping, type SessionStepUpSourceTables, type SessionSubjectTables, type SignedSessionValidityMapping, type SignedSessionValidityTables, type SqlColumn, type SqlExpression, type SqlFragment, type SqlTable, type StatefulSessionMapping, type StatefulSessionTables, type StorageTable, type StorageValidation, type SubjectIdCodec, type TableModel, type TransactionBound, type TransactionCoordinatorError, type TransactionExecution, type TransactionNativeDatabase, type TransactionOwner, type TransactionTargetConfiguration, createPersistence, decodeStepUpIntent, encodeStepUpIntent, isMappedConstraintConflict, makeComposedPasskeys, makeEmailKernel, makeNativeSqlTables, makeOAuthKernel, makeOAuthProxyPersistence, makePasskeyKernel, makePasswordKernel, makePhoneKernel, makeProofKernel, makeSessionKernel, makeMappings as makeStorageMappings, makeTransactionExecutionKernel, makeTransactionKernel, nativeSqlAlias, oauthCleanupTable, oauthConnectedPolicyGuard, oauthEligibilityTable, oauthProxyColumns, oauthReferenceGuardTable, oauthRegistrationGuardTable, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyInvalidationMutation, passkeyPersistenceLayer, passkeyPolicyGuard, requireStandalone, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyManagementConstraints, requiredPasskeyPersistenceConstraints, requiredPasskeyRegistrationCeremonyConstraints, requiredPasskeyRegistrationWriteConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, samePasswordCredentialSnapshot, stepUpIntentLive, storageKeyPlans, validateStepUpPlan, validateStorage, validateStorageBatch, withStorageValidation };
+import { OAuthAccountsMapping, OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthCredentialReadTable, OAuthCredentialTable, OAuthD1Mapping, OAuthEligibilityDescriptor, OAuthEligibilityFact, OAuthEligibilityTable, OAuthFlowTable, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthRegistrationAuthority, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, oauthCleanupTable, oauthEligibilityTable, oauthRegistrationGuardTable, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints } from "./internal/models/oauth-model.mjs";
+import { OAuthConnectedAction, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./internal/models/oauth-connected-model.mjs";
+import { OAuthNativeReadMapping } from "./internal/oauth/native-state.mjs";
+import { makeNativeOAuthSignInServices } from "./internal/oauth/native-sign-in.mjs";
+import { OAuthNativeAccountsMapping, makeNativeOAuthAccountsServices } from "./internal/oauth/native-accounts.mjs";
+import { OAuthNativeRegistrationIntentMapping, OAuthNativeRegistrationMapping, makeNativeOAuthRegistrationIntentServices, makeNativeOAuthRegistrationServices } from "./internal/oauth/native-registration.mjs";
+import { OAuthNativeConnectedMapping } from "./internal/oauth/native-connected-state.mjs";
+import { makeNativeOAuthConnectedServices } from "./internal/oauth/native-connected.mjs";
+import { OAuthNativeRevocationMapping, makeNativeOAuthRevocationServices } from "./internal/oauth/native-revocations.mjs";
+import { captureOAuthMapping } from "./internal/oauth/state.mjs";
+import { oauthAccountsPersistenceLayer, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer } from "./internal/oauth/native-layers.mjs";
+import { makeNativeProofServices } from "./internal/proof-native.mjs";
+import { makeNativePasswordServices } from "./internal/password-native.mjs";
+import { makeNativePasswordRegistrationServices } from "./internal/password-registration-native.mjs";
+import { AnyPhoneMapping, PhoneMapping, requiredPhoneConstraints } from "./internal/models/phone-model.mjs";
+import { makeNativePhoneServices } from "./internal/phone-native.mjs";
+import { makeNativeEmailAddressServices, makeNativeEmailSignInServices } from "./internal/email-native.mjs";
+import { EmailRegistrationAuthority, makeNativeEmailRegistrationServices } from "./internal/email-registration-native.mjs";
+import { NativeAuthenticationAuthorityMapping, makeNativeAuthenticationAuthorityServices } from "./internal/session-native-authority.mjs";
+import { NativePendingAuthenticationMapping, makeNativePendingAuthenticationServices } from "./internal/session-native-login.mjs";
+import { NativeStatefulSessionMapping, makeNativeStatefulSessionServices } from "./internal/session-native-stateful.mjs";
+import { NativeSignedSessionValidityMapping, makeNativeSignedSessionValidityServices } from "./internal/session-native-validity.mjs";
+import { NativeSessionStepUpMapping, makeNativeSessionStepUpServices } from "./internal/session-native-step-up.mjs";
+import { makeNativeSessionCleanupServices } from "./internal/session-native-cleanup.mjs";
+import { TotpMapping, TotpMappingSource, requiredTotpConstraints } from "./internal/models/totp-model.mjs";
+import { NativeTotpMapping, makeNativeTotpServices } from "./internal/totp-native.mjs";
+export { type AnyEmailAddressMapping, type AnyEmailRegistrationMapping, type AnyEmailSignInMapping, type AnyPasswordPersistenceMapping, type AnyPasswordRegistrationMapping, type AnyPhoneMapping, type AnyProofPersistenceMapping, type AuthenticationAuthorityMapping, type Backend, type BoundPersistence, type ClaimsCodec, type D1PasskeyMapping, type Definition, type EmailAddressMapping, type EmailAuthorityCredentialTable, type EmailCredentialReadTable, type EmailCredentialTable, type EmailIdentifierReadTable, type EmailIdentifierTable, type EmailRegistrationAuthority, type EmailRegistrationAuthorityCredentialTable, type EmailRegistrationCredentialTable, type EmailRegistrationIdentifierTable, type EmailRegistrationIntent, type EmailRegistrationMapping, type EmailRegistrationProvisioning, type EmailSignInMapping, type EmailSubjectReadTable, type EmailSubjectTable, type MappingInput, type NativeAuthenticationAuthorityMapping, type NativePasskeyCeremonyMapping, type NativePasskeyManagementMapping, type NativePasskeyRegistrationMapping, type NativePendingAuthenticationMapping, type NativeSessionStepUpMapping, type NativeSignedSessionValidityMapping, type NativeSqlTables, type NativeStatefulSessionMapping, type NativeTotpMapping, type OAuthAccountsMapping, type OAuthAction, type OAuthAuthorityReadTable, type OAuthAuthorityTable, type OAuthCleanupDescriptor, type OAuthCleanupTable, type OAuthClock, type OAuthConnectedAction, type OAuthConnectedGrantTable, type OAuthConnectedMapping, type OAuthConnectedPolicyInput, type OAuthConnectedRevocationJobTable, type OAuthConnectedRevocationMapping, type OAuthConnectedSqlPolicy, type OAuthCredentialReadTable, type OAuthCredentialTable, type OAuthD1Mapping, type OAuthEligibilityDescriptor, type OAuthEligibilityFact, type OAuthEligibilityTable, type OAuthFlowTable, type OAuthNativeAccountsMapping, type OAuthNativeConnectedMapping, type OAuthNativeReadMapping, type OAuthNativeRegistrationIntentMapping, type OAuthNativeRegistrationMapping, type OAuthNativeRevocationMapping, type OAuthOwnershipReadTable, type OAuthOwnershipTable, type OAuthProxySqlTable, type OAuthRegistrationAuthority, type OAuthRegistrationGuardDescriptor, type OAuthRegistrationGuardTable, type OAuthRegistrationIntentMapping, type OAuthRegistrationIntentTable, type OAuthRegistrationMapping, type OAuthSignInMapping, type OAuthSubjectReadTable, type OAuthSubjectTable, type PasskeyCeremonyMapping, type PasskeyClock, type PasskeyColumn, type PasskeyCredentialInsert, type PasskeyCredentialMapping, type PasskeyCredentialReadTable, type PasskeyCredentialServices, type PasskeyFactorReadTable, type PasskeyFlowInsert, type PasskeyFlowTable, type PasskeyInvalidationInput, type PasskeyInvalidationMutation, type PasskeyManagementMapping, type PasskeyManagementServices, type PasskeyMappingSource, type PasskeyNativeMapping, type PasskeyNativeRead, type PasskeyPersistenceMapping, type PasskeyPersistenceServices, type PasskeyRegistrationCeremonyCapabilities, type PasskeyRegistrationCeremonyMapping, type PasskeyRegistrationCeremonyServices, type PasskeyRegistrationMapping, type PasskeyRegistrationServices, type PasskeyRegistrationWriter, type PasskeySubjectIdCodec, type PasskeySubjectReadTable, type PasskeyWriteTables, type PasswordAuthorityCredentialTable, type PasswordCredentialTable, type PasswordIdentifierTable, type PasswordPersistenceMapping, type PasswordRegistrationAuthority, type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type PasswordRegistrationMapping, type PasswordRegistrationProvisioning, type PasswordSubjectTable, type PendingAuthenticationMapping, type PendingAuthenticationTables, type PersistenceApi, PersistenceConfigurationError, PersistenceMappingError, type PhoneMapping, type PhysicalStorageTable, type ProofClock, type ProofPersistenceMapping, type ProofTable, type RequiredEmailAddressConstraints, type RequiredEmailRegistrationConstraints, type RequiredEmailSignInConstraints, type RequiredPasswordConstraints, type RequiredPasswordRegistrationConstraints, type RequiredPendingAuthenticationConstraints, type RequiredProofConstraints, type RequiredSessionConstraints, type RequiredSessionStepUpConstraints, type RequiredSignedValidityConstraints, type RequiredStatefulPendingConstraints, type SessionAuthorityTables, type SessionCleanupMapping, type SessionExecution, type SessionIdCodec, type SessionPendingInsert, type SessionPendingTables, type SessionStepUpMapping, type SessionStepUpSourceTables, type SessionSubjectTables, type SignedSessionValidityMapping, type SignedSessionValidityTables, SqlBatchCommit, type SqlExpression, SqlNativeCommit, type SqlTable, type StatefulSessionMapping, type StatefulSessionTables, type StorageRole, type StorageTable, type StorageValidation, type SubjectIdCodec, type TableModel, type TotpMapping, type TotpMappingSource, captureOAuthMapping, captureSqlBatchStatements, createPersistence, isMappedConstraintConflict, makeBatchPasskeyServices, makeNativeAuthenticationAuthorityServices, makeNativeEmailAddressServices, makeNativeEmailRegistrationServices, makeNativeEmailSignInServices, makeNativeOAuthAccountsServices, makeNativeOAuthConnectedServices, makeNativeOAuthRegistrationIntentServices, makeNativeOAuthRegistrationServices, makeNativeOAuthRevocationServices, makeNativeOAuthSignInServices, makeNativePasskeyCeremonyServices, makeNativePasskeyCredentialServices, makeNativePasskeyServices, makeNativePasswordRegistrationServices, makeNativePasswordServices, makeNativePendingAuthenticationServices, makeNativePhoneServices, makeNativeProofServices, makeNativeSessionCleanupServices, makeNativeSessionStepUpServices, makeNativeSignedSessionValidityServices, makeNativeSqlTables, makeNativeStatefulSessionServices, makeNativeTotpServices, makeOAuthProxyPersistence, makePasskeyNativeManagement, makePasskeyNativeRegistration, makeSqlCommitExecutor, makeMappings as makeStorageMappings, nativeSqlAlias, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, passkeyCredentialsLayer, passkeyInvalidationMutation, passkeyPersistenceLayer, requireStandalone, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredPhoneConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, requiredTotpConstraints, storageKeyPlans, storageTables, validateStorage, validateStorageBatch, withStorageValidation };

package/dist/Adapter.mjs

@@ -1,34 +1,47 @@
 import { PersistenceConfigurationError } from "./internal/configuration.mjs";
 import { PersistenceMappingError, isMappedConstraintConflict } from "./internal/mapping-error.mjs";
 import { makeNativeSqlTables, nativeSqlAlias } from "./internal/native-sql-table.mjs";
-import { passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyPersistenceLayer, passkeyPolicyGuard, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints } from "./internal/models/passkey-model.mjs";
-import { passkeyInvalidationMutation, requiredPasskeyManagementConstraints, requiredPasskeyRegistrationWriteConstraints } from "./internal/models/passkey-write-model.mjs";
-import { requiredPasskeyRegistrationCeremonyConstraints } from "./internal/models/passkey-registration-ceremony-model.mjs";
-import { CurrentPasskeyTransaction } from "./internal/passkey/state.mjs";
 import { requireStandalone } from "./internal/standalone.mjs";
-import { NativeDatabase, makeTransactionKernel } from "./internal/transaction-kernel.mjs";
-import { makeTransactionExecutionKernel } from "./internal/transaction-execution-kernel.mjs";
-import { makePasskeyKernel } from "./internal/passkey-kernel.mjs";
-import { requiredProofConstraints } from "./internal/models/proof-model.mjs";
-import { CurrentPasswordPreparedTransaction, PasswordPreparedJournalGuards, PasswordPreparedPostconditions } from "./internal/PasswordPreparedPostconditions.mjs";
-import { CurrentProofSql, makeProofKernel } from "./internal/proof-kernel.mjs";
-import { makeComposedPasskeys } from "./internal/passkeys.mjs";
+import { SqlBatchCommit, SqlNativeCommit, captureSqlBatchStatements, makeSqlCommitExecutor } from "./internal/sql-commit.mjs";
+import { makeNativeProofServices } from "./internal/proof-native.mjs";
+import { makeNativeEmailAddressServices, makeNativeEmailSignInServices } from "./internal/email-native.mjs";
+import { passkeyCredentialsLayer, passkeyPersistenceLayer, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints } from "./internal/models/passkey-model.mjs";
+import { makeBatchPasskeyServices, makeNativePasskeyCredentialServices, makeNativePasskeyServices } from "./internal/passkey-native.mjs";
+import { makePasskeyNativeManagement } from "./internal/passkey-native-write.mjs";
+import { storageTables } from "./internal/storage-tables.mjs";
+import { makeNativePasswordServices } from "./internal/password-native.mjs";
+import { requiredPhoneConstraints } from "./internal/models/phone-model.mjs";
+import { makeNativePhoneServices } from "./internal/phone-native.mjs";
+import { makeNativePasswordRegistrationServices } from "./internal/password-registration-native.mjs";
+import { makeNativeAuthenticationAuthorityServices } from "./internal/session-native-authority.mjs";
+import { makeNativeSessionCleanupServices } from "./internal/session-native-cleanup.mjs";
+import { makeNativePendingAuthenticationServices } from "./internal/session-native-login.mjs";
+import { makeNativeStatefulSessionServices } from "./internal/session-native-stateful.mjs";
+import { makeNativeSessionStepUpServices } from "./internal/session-native-step-up.mjs";
 import { requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints } from "./internal/models/email-model.mjs";
-import { CurrentEmailSql, makeEmailKernel } from "./internal/email-kernel.mjs";
 import { requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./internal/models/password-model.mjs";
-import { samePasswordCredentialSnapshot } from "./internal/password-credentials.mjs";
-import { CurrentPasswordSql, makePasswordKernel } from "./internal/password-kernel.mjs";
-import { CurrentPhoneTransaction, makePhoneKernel } from "./internal/phone-kernel.mjs";
-import { decodeStepUpIntent, encodeStepUpIntent, stepUpIntentLive, validateStepUpPlan } from "./internal/step-up-state.mjs";
-import { validateStorage, validateStorageBatch, withStorageValidation } from "./internal/storage-validation.mjs";
-import { CurrentSessionSql, makeSessionKernel } from "./internal/session-kernel.mjs";
+import { requiredProofConstraints } from "./internal/models/proof-model.mjs";
 import { makeMappings } from "./internal/storage-mapping.mjs";
+import { validateStorage, validateStorageBatch, withStorageValidation } from "./internal/storage-validation.mjs";
 import { createPersistence } from "./internal/persistence.mjs";
-import { makeOAuthProxyPersistence, oauthProxyColumns } from "./internal/oauth-proxy.mjs";
-import { oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./internal/models/oauth-model.mjs";
-import { makeOAuthKernel } from "./internal/oauth-kernel.mjs";
+import { makeOAuthProxyPersistence } from "./internal/oauth-proxy.mjs";
+import { oauthCleanupTable, oauthEligibilityTable, oauthRegistrationGuardTable, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints } from "./internal/models/oauth-model.mjs";
+import { captureOAuthMapping } from "./internal/oauth/state.mjs";
+import { makeNativeOAuthSignInServices } from "./internal/oauth/native-sign-in.mjs";
+import { makeNativeOAuthAccountsServices } from "./internal/oauth/native-accounts.mjs";
+import { makeNativeOAuthConnectedServices } from "./internal/oauth/native-connected.mjs";
+import { makeNativeOAuthRegistrationIntentServices, makeNativeOAuthRegistrationServices } from "./internal/oauth/native-registration.mjs";
+import { makeNativeOAuthRevocationServices } from "./internal/oauth/native-revocations.mjs";
 import { storageKeyPlans } from "./internal/storage-plans.mjs";
-import { oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./internal/models/oauth-connected-model.mjs";
+import { requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./internal/models/oauth-connected-model.mjs";
+import { oauthAccountsPersistenceLayer, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer } from "./internal/oauth/native-layers.mjs";
+import { passkeyInvalidationMutation } from "./internal/models/passkey-write-model.mjs";
 import { requiredPendingAuthenticationConstraints, requiredSessionConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints } from "./internal/models/session-model.mjs";
 import { requiredSessionStepUpConstraints } from "./internal/models/step-up-model.mjs";
-export { CurrentEmailSql, CurrentPasskeyTransaction, CurrentPasswordPreparedTransaction, CurrentPasswordSql, CurrentPhoneTransaction, CurrentProofSql, CurrentSessionSql, NativeDatabase, PasswordPreparedJournalGuards, PasswordPreparedPostconditions, PersistenceConfigurationError, PersistenceMappingError, createPersistence, decodeStepUpIntent, encodeStepUpIntent, isMappedConstraintConflict, makeComposedPasskeys, makeEmailKernel, makeNativeSqlTables, makeOAuthKernel, makeOAuthProxyPersistence, makePasskeyKernel, makePasswordKernel, makePhoneKernel, makeProofKernel, makeSessionKernel, makeMappings as makeStorageMappings, makeTransactionExecutionKernel, makeTransactionKernel, nativeSqlAlias, oauthCleanupTable, oauthConnectedPolicyGuard, oauthEligibilityTable, oauthProxyColumns, oauthReferenceGuardTable, oauthRegistrationGuardTable, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyInvalidationMutation, passkeyPersistenceLayer, passkeyPolicyGuard, requireStandalone, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyManagementConstraints, requiredPasskeyPersistenceConstraints, requiredPasskeyRegistrationCeremonyConstraints, requiredPasskeyRegistrationWriteConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, samePasswordCredentialSnapshot, stepUpIntentLive, storageKeyPlans, validateStepUpPlan, validateStorage, validateStorageBatch, withStorageValidation };
+import { makeNativePasskeyCeremonyServices } from "./internal/passkey-native-ceremony.mjs";
+import { makePasskeyNativeRegistration } from "./internal/passkey-native-registration.mjs";
+import { makeNativeEmailRegistrationServices } from "./internal/email-registration-native.mjs";
+import { makeNativeSignedSessionValidityServices } from "./internal/session-native-validity.mjs";
+import { requiredTotpConstraints } from "./internal/models/totp-model.mjs";
+import { makeNativeTotpServices } from "./internal/totp-native.mjs";
+export { PersistenceConfigurationError, PersistenceMappingError, SqlBatchCommit, SqlNativeCommit, captureOAuthMapping, captureSqlBatchStatements, createPersistence, isMappedConstraintConflict, makeBatchPasskeyServices, makeNativeAuthenticationAuthorityServices, makeNativeEmailAddressServices, makeNativeEmailRegistrationServices, makeNativeEmailSignInServices, makeNativeOAuthAccountsServices, makeNativeOAuthConnectedServices, makeNativeOAuthRegistrationIntentServices, makeNativeOAuthRegistrationServices, makeNativeOAuthRevocationServices, makeNativeOAuthSignInServices, makeNativePasskeyCeremonyServices, makeNativePasskeyCredentialServices, makeNativePasskeyServices, makeNativePasswordRegistrationServices, makeNativePasswordServices, makeNativePendingAuthenticationServices, makeNativePhoneServices, makeNativeProofServices, makeNativeSessionCleanupServices, makeNativeSessionStepUpServices, makeNativeSignedSessionValidityServices, makeNativeSqlTables, makeNativeStatefulSessionServices, makeNativeTotpServices, makeOAuthProxyPersistence, makePasskeyNativeManagement, makePasskeyNativeRegistration, makeSqlCommitExecutor, makeMappings as makeStorageMappings, nativeSqlAlias, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, passkeyCredentialsLayer, passkeyInvalidationMutation, passkeyPersistenceLayer, requireStandalone, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredPhoneConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, requiredTotpConstraints, storageKeyPlans, storageTables, validateStorage, validateStorageBatch, withStorageValidation };

package/dist/OAuthPersistence.d.mts

@@ -1,87 +1,71 @@
-import { AuthenticationAuthorityMapping } from "./internal/models/session-model.mjs";
+import { SqlExpression, and, eq, sql } from "./internal/sql-expression.mjs";
 import { StorageTable } from "./internal/storage-tables.mjs";
 import { PersistenceConfigurationError } from "./internal/configuration.mjs";
-import { OAuthAction, OAuthD1Mapping, OAuthEligibilityFact, OAuthFlowState, OAuthRegistrationAuthority, OAuthRegistrationState, OAuthTupleState, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./internal/models/oauth-model.mjs";
-import { OAuthConnectedAction, OAuthConnectedOrderCodec, OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./internal/models/oauth-connected-model.mjs";
-import { OAuthCoordinatorError, oauthAccountsPersistenceLayer as oauthAccountsPersistenceLayer$1, oauthRegistrationAuthorityLayer as oauthRegistrationAuthorityLayer$1, oauthRegistrationIntentsLayer as oauthRegistrationIntentsLayer$1, oauthSignInPersistenceLayer as oauthSignInPersistenceLayer$1 } from "./internal/oauth/target.mjs";
-import { Fragment, Table } from "./internal/sql-table.mjs";
-import { OAuthAccountsMapping, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthCredentialReadTable, OAuthCredentialTable, OAuthEligibilityDescriptor, OAuthEligibilityTable, OAuthFlowTable, OAuthMetadataPolicy, OAuthOwnershipMutation, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthReferenceGuardDescriptor, OAuthReferenceGuardTable, OAuthRegistrationBase, OAuthRegistrationCommandTable, OAuthRegistrationEligibility, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, OAuthTupleAuthorityTable, OAuthUnlinkCommandTable, SqlTableModel, oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable } from "./internal/sql-oauth-model.mjs";
-import { oauthConnectedPersistenceLayer as oauthConnectedPersistenceLayer$1, oauthConnectedRevocationsLayer as oauthConnectedRevocationsLayer$1 } from "./internal/oauth/connected-target.mjs";
-import { OAuthConnectedAdmissionTable, OAuthConnectedAuthorityMapping, OAuthConnectedClientRegistrationTable, OAuthConnectedCohortTable, OAuthConnectedCommandTable, OAuthConnectedFlowTable, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedOwnershipRead, OAuthConnectedPolicyGuard, OAuthConnectedPolicyGuardTable, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthConnectedSubjectTable, oauthConnectedPolicyGuard } from "./internal/sql-oauth-connected-model.mjs";
-import { and, eq, sql } from "./internal/sql-query.mjs";
+import { OAuthAction, OAuthD1Mapping, OAuthEligibilityFact, OAuthRegistrationAuthority, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints } from "./internal/models/oauth-model.mjs";
+import { OAuthConnectedAction, OAuthConnectedPolicyInput, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./internal/models/oauth-connected-model.mjs";
+import { oauthAccountsPersistenceLayer, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer } from "./internal/oauth/native-layers.mjs";
+import { Table } from "./internal/sql-table.mjs";
+import { OAuthAccountsMapping, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthCredentialReadTable, OAuthCredentialTable, OAuthEligibilityDescriptor, OAuthEligibilityTable, OAuthFlowTable, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, SqlTableModel, oauthCleanupTable, oauthEligibilityTable, oauthRegistrationGuardTable } from "./internal/sql-oauth-model.mjs";
+import { OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy } from "./internal/sql-oauth-connected-model.mjs";
+import { makeAuthenticationAuthorityServices } from "./internal/sql-authority.mjs";
 import { Context, Crypto, Effect } from "effect";
 import { SqlClient } from "effect/sql";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
-import { AuthenticationAuthority, SessionUnavailable } from "@yielded/auth/Sessions";
 import { OAuthAccountsPersistence, OAuthConnectedPersistence, OAuthConnectedRevocations, OAuthRegistrationIntents, OAuthSignInPersistence, OAuthUnavailable } from "@yielded/auth/OAuth";
 declare namespace OAuthPersistence_d_exports {
-  export { OAuthAccountsMapping, OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthConnectedAction, OAuthConnectedAdmissionTable, OAuthConnectedAuthorityMapping, OAuthConnectedClientRegistrationTable, OAuthConnectedCohortTable, OAuthConnectedCommandTable, OAuthConnectedFlowTable, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedOrderCodec, OAuthConnectedOwnershipRead, OAuthConnectedPolicyGuard, OAuthConnectedPolicyGuardTable, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthConnectedSubjectTable, OAuthCredentialReadTable, OAuthCredentialTable, OAuthD1Mapping, OAuthEligibilityDescriptor, OAuthEligibilityFact, OAuthEligibilityTable, OAuthFlowState, OAuthFlowTable, OAuthMetadataPolicy, OAuthOwnershipMutation, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthReferenceGuardDescriptor, OAuthReferenceGuardTable, OAuthRegistrationAuthority, OAuthRegistrationBase, OAuthRegistrationCommandTable, OAuthRegistrationEligibility, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthRegistrationState, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, OAuthTupleAuthorityTable, OAuthTupleState, OAuthUnlinkCommandTable, SqlTableModel, and, clock, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, eq, makeAuthenticationAuthorityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedOwnershipReferences, oauthConnectedPersistenceLayer, oauthConnectedPolicyGuard, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints, sql, table };
+  export { OAuthAccountsMapping, OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthConnectedAction, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthCredentialReadTable, OAuthCredentialTable, OAuthD1Mapping, OAuthEligibilityDescriptor, OAuthEligibilityFact, OAuthEligibilityTable, OAuthFlowTable, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthRegistrationAuthority, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, SqlTableModel, and, clock, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, eq, makeAuthenticationAuthorityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedOwnershipReferences, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, sql, table };
 }
-/** Physical identifiers and representations only; applications own migrations. */
 export declare const table: (definition: StorageTable) => Table;
-/** Integer-millisecond engine clock, sampled after locks on either supported dialect. */
 export declare const clock: {
   encodeInstant: (input: number, options?: import("effect/SchemaAST").ParseOptions) => number;
   decodeInstant: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => number;
-  engineNowMillis: Fragment;
+  engineNowMillis: SqlExpression;
+  toMillis: (expression: SqlExpression) => SqlExpression;
+  fromMillis: (expression: SqlExpression) => SqlExpression;
 };
 export declare const makeOAuthSignInServices: <N>(mapping: OAuthSignInMapping<Table, Table, Table, Table, Table, N>) => Effect.Effect<{
   readonly oauthSignInPersistence: OAuthSignInPersistence["Service"];
 }, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-/** Run auth and application SQL in one adapter-owned transaction and commit journal. */
 export declare const coordinateOAuthSignIn: <N, A, E, R>(options: {
   readonly mapping: OAuthSignInMapping<Table, Table, Table, Table, Table, N>;
-}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, OAuthCoordinatorError<E> | PersistenceConfigurationError, Exclude<R, OAuthSignInPersistence> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-export declare const makeOAuthRegistrationIntentServices: <N>(mapping: OAuthRegistrationIntentMapping<Table, Table, Table, Table, Table, Table, Table, N>) => Effect.Effect<{
-  readonly oauthRegistrationIntents: OAuthRegistrationIntents["Service"];
-}, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-/** Run auth and application SQL in one adapter-owned transaction and commit journal. */
-export declare const coordinateOAuthRegistrationIntents: <N, A, E, R>(options: {
-  readonly mapping: OAuthRegistrationIntentMapping<Table, Table, Table, Table, Table, Table, Table, N>;
-}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, OAuthCoordinatorError<E> | PersistenceConfigurationError, Exclude<R, OAuthRegistrationIntents> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-export declare const makeOAuthAccountsServices: <N>(mapping: OAuthAccountsMapping<Table, Table, Table, Table, Table, Table, Table, N>) => Effect.Effect<{
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, E | OAuthUnavailable | PersistenceConfigurationError, Exclude<R, OAuthSignInPersistence> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const makeOAuthAccountsServices: <N>(mapping: OAuthAccountsMapping<Table, Table, Table, Table, Table, N>) => Effect.Effect<{
   readonly oauthAccountsPersistence: OAuthAccountsPersistence["Service"];
 }, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-/** Run auth and application SQL in one adapter-owned transaction and commit journal. */
 export declare const coordinateOAuthAccounts: <N, A, E, R>(options: {
-  readonly mapping: OAuthAccountsMapping<Table, Table, Table, Table, Table, Table, Table, N>;
-}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, OAuthCoordinatorError<E> | PersistenceConfigurationError, Exclude<R, OAuthAccountsPersistence> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-export declare const makeOAuthConnectedServices: <N>(mapping: OAuthConnectedMapping<Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, N, Table>) => Effect.Effect<{
+  readonly mapping: OAuthAccountsMapping<Table, Table, Table, Table, Table, N>;
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, E | OAuthUnavailable | PersistenceConfigurationError, Exclude<R, OAuthAccountsPersistence> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const makeOAuthRegistrationIntentServices: <N>(mapping: OAuthRegistrationIntentMapping<Table, Table, N>) => Effect.Effect<{
+  readonly oauthRegistrationIntents: OAuthRegistrationIntents["Service"];
+}, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const coordinateOAuthRegistrationIntents: <N, A, E, R>(options: {
+  readonly mapping: OAuthRegistrationIntentMapping<Table, Table, N>;
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, E | OAuthUnavailable | PersistenceConfigurationError, Exclude<R, OAuthRegistrationIntents> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const makeOAuthConnectedServices: <N>(mapping: OAuthConnectedMapping<Table, Table, Table, Table, Table, N, Table>) => Effect.Effect<{
   readonly oauthConnectedPersistence: OAuthConnectedPersistence["Service"];
 }, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-/** Run auth and application SQL in one adapter-owned transaction and commit journal. */
 export declare const coordinateOAuthConnected: <N, A, E, R>(options: {
-  readonly mapping: OAuthConnectedMapping<Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, N, Table>;
-}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, OAuthCoordinatorError<E> | PersistenceConfigurationError, Exclude<R, OAuthConnectedPersistence> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-export declare const makeOAuthConnectedRevocationServices: <N>(mapping: OAuthConnectedRevocationMapping<Table, Table, Table, Table, Table, Table, Table, N>) => Effect.Effect<{
+  readonly mapping: OAuthConnectedMapping<Table, Table, Table, Table, Table, N, Table>;
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, E | OAuthUnavailable | PersistenceConfigurationError, Exclude<R, OAuthConnectedPersistence> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const makeOAuthConnectedRevocationServices: <N>(mapping: OAuthConnectedRevocationMapping<Table, Table, Table, N>) => Effect.Effect<{
   readonly oauthConnectedRevocations: OAuthConnectedRevocations["Service"];
 }, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-/** Run auth and application SQL in one adapter-owned transaction and commit journal. */
 export declare const coordinateOAuthConnectedRevocations: <N, A, E, R>(options: {
-  readonly mapping: OAuthConnectedRevocationMapping<Table, Table, Table, Table, Table, Table, Table, N>;
-}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, OAuthCoordinatorError<E> | PersistenceConfigurationError, Exclude<R, OAuthConnectedRevocations> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-export declare const makeOAuthRegistrationServices: <Registration, N>(mapping: OAuthRegistrationMapping<Registration, Table, Table, Table, Table, Table, Table, Table, N>) => Effect.Effect<{
+  readonly mapping: OAuthConnectedRevocationMapping<Table, Table, Table, N>;
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, E | OAuthUnavailable | PersistenceConfigurationError, Exclude<R, OAuthConnectedRevocations> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const makeOAuthRegistrationServices: <Registration, N>(mapping: OAuthRegistrationMapping<Registration, Table, Table, Table, Table, Table, N>) => Effect.Effect<{
   readonly registrationAuthority: OAuthRegistrationAuthority<Registration>;
 }, OAuthUnavailable | PersistenceConfigurationError, Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
 export declare const coordinateOAuthRegistration: <Id, Registration, N, A, E, R>(options: {
-  readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, Table, Table, Table, Table, Table, Table, Table, N>;
+  readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, Table, Table, Table, Table, Table, N>;
   readonly target: Context.Key<Id, OAuthRegistrationAuthority<Registration>>;
-}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, OAuthCoordinatorError<E> | PersistenceConfigurationError, Exclude<R, Id> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
-/** Include these guards when login ownership may also hold retained grants. */
-export declare const oauthConnectedOwnershipReferences: <N>(mapping: OAuthConnectedMapping<Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, N, Table>, dialect: "pg" | "sqlite") => {
-  readonly connectedReferenceGuards: ReadonlyArray<OAuthReferenceGuardDescriptor<N>>;
-  readonly connectedReference: (input: {
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, E | OAuthUnavailable | PersistenceConfigurationError, Exclude<R, Id> | Crypto.Crypto | LifecycleHooks | SqlClient.SqlClient>;
+export declare const oauthConnectedOwnershipReferences: <N>(mapping: OAuthConnectedMapping<Table, Table, Table, Table, Table, N, Table>) => {
+  connectedReference: (input: {
     readonly identityKey: string;
     readonly subjectId: N;
-  }) => Fragment;
+  }) => SqlExpression;
 };
-export declare const oauthAccountsPersistenceLayer: typeof oauthAccountsPersistenceLayer$1, oauthSignInPersistenceLayer: typeof oauthSignInPersistenceLayer$1, oauthRegistrationIntentsLayer: typeof oauthRegistrationIntentsLayer$1, oauthRegistrationAuthorityLayer: typeof oauthRegistrationAuthorityLayer$1;
-export declare const oauthConnectedPersistenceLayer: typeof oauthConnectedPersistenceLayer$1, oauthConnectedRevocationsLayer: typeof oauthConnectedRevocationsLayer$1;
-/** Shared session issuance must validate the same subject and credential authority
- * as OAuth. Supply this service when it is not already provided by session storage. */
-export declare const makeAuthenticationAuthorityServices: <Claims, N>(mapping: AuthenticationAuthorityMapping<Claims, SqlTableModel, SqlTableModel, SqlTableModel, SqlTableModel, N>) => Effect.Effect<{
-  readonly authenticationAuthority: AuthenticationAuthority["Service"];
-}, SessionUnavailable | PersistenceConfigurationError, LifecycleHooks | SqlClient.SqlClient>;
 //#endregion
-export { OAuthAccountsMapping, type OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, type OAuthConnectedAction, OAuthConnectedAdmissionTable, OAuthConnectedAuthorityMapping, OAuthConnectedClientRegistrationTable, OAuthConnectedCohortTable, OAuthConnectedCommandTable, OAuthConnectedFlowTable, OAuthConnectedGrantTable, OAuthConnectedMapping, type OAuthConnectedOrderCodec, OAuthConnectedOwnershipRead, OAuthConnectedPolicyGuard, OAuthConnectedPolicyGuardTable, type OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthConnectedSubjectTable, OAuthCredentialReadTable, OAuthCredentialTable, type OAuthD1Mapping, OAuthEligibilityDescriptor, type OAuthEligibilityFact, OAuthEligibilityTable, type OAuthFlowState, OAuthFlowTable, OAuthMetadataPolicy, OAuthOwnershipMutation, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthPersistence_d_exports, OAuthReferenceGuardDescriptor, OAuthReferenceGuardTable, type OAuthRegistrationAuthority, OAuthRegistrationBase, OAuthRegistrationCommandTable, OAuthRegistrationEligibility, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, type OAuthRegistrationState, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, OAuthTupleAuthorityTable, type OAuthTupleState, OAuthUnlinkCommandTable, SqlTableModel, and, eq, oauthCleanupTable, oauthConnectedPolicyGuard, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints, sql };
+export { OAuthAccountsMapping, type OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, type OAuthConnectedAction, OAuthConnectedGrantTable, OAuthConnectedMapping, type OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthCredentialReadTable, OAuthCredentialTable, type OAuthD1Mapping, OAuthEligibilityDescriptor, type OAuthEligibilityFact, OAuthEligibilityTable, OAuthFlowTable, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthPersistence_d_exports, type OAuthRegistrationAuthority, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, SqlTableModel, and, eq, makeAuthenticationAuthorityServices, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, sql };
 //# sourceMappingURL=OAuthPersistence.d.mts.map