@yielded/auth-persistence 0.1.0-beta.7 → 0.1.0-beta.9

package/dist/drizzle/model.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"model.mjs","names":[],"sources":["../../src/drizzle/model.ts"],"sourcesContent":["import { AuthStore } from \"@yielded/auth/AuthStore\";\nimport { AuthStoreError } from \"@yielded/auth/Errors\";\nimport {\n  ExternalIdentityMutation,\n  SubjectProvisioner,\n  type SubjectProvisioningInput,\n  type ExternalIdentity,\n  type LoginIdentifier,\n} from \"@yielded/auth/Identity\";\nimport { OAuthStateStore, type OAuthState } from \"@yielded/auth/OAuth\";\nimport {\n  type ConsumeChallenge,\n  type NewChallenge,\n  type NewRegistration,\n  type PendingRegistration,\n  type SubjectId,\n} from \"@yielded/auth/Schema\";\nimport {\n  getTableColumns,\n  type AnyColumn,\n  type InferInsertModel,\n  type InferSelectModel,\n  type Table,\n} from \"drizzle-orm\";\nimport { Context, DateTime, Effect, Layer, Option } from \"effect\";\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\";\n\nexport type CommitMode = \"interactive\" | \"synchronous\" | \"batch\";\n\n/**\n * Ordinary error-channel consumes must own their commit. Coordinated callers\n * use the decision methods inside their outer transaction and translate only\n * after that owner commits.\n */\nexport interface SqlClientTransactionDatabase {\n  readonly $client: Pick<SqlClient.SqlClient, \"transactionService\">;\n}\n\nexport const requireStandaloneConsume = (\n  database: SqlClientTransactionDatabase,\n): Effect.Effect<void, AuthStoreError> =>\n  Effect.serviceOption(database.$client.transactionService).pipe(\n    Effect.flatMap(\n      Option.match({\n        onNone: () => Effect.void,\n        onSome: () =>\n          AuthStoreError.make({\n            message: \"Use the decision consume API inside an outer database transaction\",\n          }),\n      }),\n    ),\n  );\n\nexport type { ChallengeConsumeDecision } from \"@yielded/auth/Persistence\";\nexport type { ConsumeDecision } from \"@yielded/auth/AuthStore\";\n\nexport { PersistenceMappingError, isMappedConstraintConflict } from \"../internal/mapping-error\";\nimport type { PersistenceMappingError } from \"../internal/mapping-error\";\n\nexport interface InstantCodec<NativeInstant> {\n  readonly encode: (instant: DateTime.Utc) => NativeInstant;\n  readonly decode: (native: NativeInstant) => Effect.Effect<DateTime.Utc, PersistenceMappingError>;\n}\n\nexport interface RequiredAuthStoreConstraints {\n  readonly series: \"unique(namespace,value,purpose)\";\n  readonly challengeDigest: \"unique(tokenDigest)\";\n  readonly registrationDigest: \"unique(tokenDigest)\";\n}\n\nexport interface RequiredOAuthStateConstraints {\n  readonly oauthStateDigest: \"unique(stateDigest)\";\n}\n\nexport interface RequiredAuthConstraints\n  extends RequiredAuthStoreConstraints, RequiredOAuthStateConstraints {}\n\nexport const requiredAuthConstraints: RequiredAuthConstraints = {\n  series: \"unique(namespace,value,purpose)\",\n  challengeDigest: \"unique(tokenDigest)\",\n  registrationDigest: \"unique(tokenDigest)\",\n  oauthStateDigest: \"unique(stateDigest)\",\n};\n\nexport const requiredAuthStoreConstraints: RequiredAuthStoreConstraints = {\n  series: \"unique(namespace,value,purpose)\",\n  challengeDigest: \"unique(tokenDigest)\",\n  registrationDigest: \"unique(tokenDigest)\",\n};\n\nexport const requiredOAuthStateConstraints: RequiredOAuthStateConstraints = {\n  oauthStateDigest: \"unique(stateDigest)\",\n};\n\ntype ColumnKey<T extends Table> = Extract<keyof T[\"_\"][\"columns\"], string>;\n\nexport interface ChallengeRecord {\n  readonly challenge: NewChallenge;\n  readonly namespace: string;\n  readonly failedAttempts: number;\n  readonly consumed: boolean;\n}\n\nexport interface ChallengeColumns<T extends Table> {\n  readonly challengeId: ColumnKey<T>;\n  readonly tokenDigest: ColumnKey<T>;\n  readonly namespace: ColumnKey<T>;\n  readonly value: ColumnKey<T>;\n  readonly purpose: ColumnKey<T>;\n  readonly otpKeyId: ColumnKey<T>;\n  readonly otpDigest: ColumnKey<T>;\n  readonly issuedAt: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly attemptLimit: ColumnKey<T>;\n  readonly failedAttempts: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\n/**\n * Inputs are immutable server-created issuances. Replacements must advance\n * issuedAt; equal or older issuances fail even after consumption or expiry.\n * Instant encoding must preserve this ordering. Retain the series row as an\n * issuance watermark until every previously accepted issuance has expired;\n * current-row expiry alone is insufficient if historical lifetimes were longer.\n */\nexport interface ChallengeTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: ChallengeColumns<T>;\n  readonly identifierNamespace: string;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (\n    input: NewChallenge,\n    state: {\n      readonly namespace: string;\n      readonly failedAttempts: number;\n      readonly consumed: false;\n    },\n  ) => InferInsertModel<T>;\n  readonly encodeUpdate: (\n    input: NewChallenge,\n    state: {\n      readonly namespace: string;\n      readonly failedAttempts: unknown;\n      readonly consumed: false;\n    },\n  ) => Readonly<Record<string, unknown>>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<ChallengeRecord, PersistenceMappingError>;\n}\n\nexport interface RegistrationRecord {\n  readonly registration: PendingRegistration;\n  readonly consumed: boolean;\n}\n\nexport interface RegistrationColumns<T extends Table> {\n  readonly registrationId: ColumnKey<T>;\n  readonly tokenDigest: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\nexport interface RegistrationTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: RegistrationColumns<T>;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (input: NewRegistration, consumed: false) => InferInsertModel<T>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<RegistrationRecord, PersistenceMappingError>;\n}\n\nexport interface OAuthStateColumns<T extends Table> {\n  readonly stateDigest: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\nexport interface OAuthStateTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: OAuthStateColumns<T>;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (state: OAuthState, consumed: false) => InferInsertModel<T>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<\n    { readonly state: OAuthState; readonly consumed: boolean },\n    PersistenceMappingError\n  >;\n}\n\nexport interface AuthStoreTables<Challenge extends Table, Registration extends Table> {\n  readonly constraints: RequiredAuthStoreConstraints;\n  readonly challenge: ChallengeTableMapping<Challenge>;\n  readonly registration: RegistrationTableMapping<Registration>;\n}\n\nexport interface OAuthStateTables<State extends Table> {\n  readonly constraints: RequiredOAuthStateConstraints;\n  readonly oauthState: OAuthStateTableMapping<State>;\n}\n\nexport interface AuthTables<\n  Challenge extends Table,\n  Registration extends Table,\n  State extends Table,\n> {\n  readonly constraints: RequiredAuthConstraints;\n  readonly challenge: ChallengeTableMapping<Challenge>;\n  readonly registration: RegistrationTableMapping<Registration>;\n  readonly oauthState: OAuthStateTableMapping<State>;\n}\n\nexport interface RequiredIdentityConstraints {\n  readonly identifier: \"unique(namespace,value)\";\n  readonly externalIdentity: \"unique(provider,issuer,subject)\";\n  readonly provisioningRequest: \"unique(requestId)\";\n  readonly provisioningSubject: \"notNull(provisioningRequest.subjectId)\";\n}\n\nexport interface RequiredSubjectProvisioningConstraints {\n  readonly identifier: \"unique(namespace,value)\";\n  readonly provisioningRequest: \"unique(requestId)\";\n  readonly provisioningSubject: \"notNull(provisioningRequest.subjectId)\";\n}\n\nexport interface RequiredExternalIdentityConstraints {\n  readonly externalIdentity: \"unique(provider,issuer,subject)\";\n}\n\nexport const requiredIdentityConstraints: RequiredIdentityConstraints = {\n  identifier: \"unique(namespace,value)\",\n  externalIdentity: \"unique(provider,issuer,subject)\",\n  provisioningRequest: \"unique(requestId)\",\n  provisioningSubject: \"notNull(provisioningRequest.subjectId)\",\n};\n\nexport const requiredSubjectProvisioningConstraints: RequiredSubjectProvisioningConstraints = {\n  identifier: \"unique(namespace,value)\",\n  provisioningRequest: \"unique(requestId)\",\n  provisioningSubject: \"notNull(provisioningRequest.subjectId)\",\n};\n\nexport const requiredExternalIdentityConstraints: RequiredExternalIdentityConstraints = {\n  externalIdentity: \"unique(provider,issuer,subject)\",\n};\n\nexport interface SubjectIdCodec<NativeId> {\n  readonly toNative: (id: SubjectId) => Effect.Effect<NativeId, PersistenceMappingError>;\n  readonly toSubject: (id: NativeId) => Effect.Effect<SubjectId, PersistenceMappingError>;\n  readonly equals: (left: NativeId, right: NativeId) => boolean;\n}\n\nexport interface SubjectProvisioningTables<\n  Subject extends Table,\n  Identifier extends Table,\n  Request extends Table,\n  NativeId,\n> {\n  readonly constraints: RequiredSubjectProvisioningConstraints;\n  readonly subject: {\n    readonly table: Subject;\n    readonly id: ColumnKey<Subject>;\n    readonly status: ColumnKey<Subject>;\n    readonly isActiveStatus: (value: unknown) => boolean;\n    readonly encodeInsert: (\n      input: SubjectProvisioningInput,\n      allocatedId: NativeId | undefined,\n    ) => InferInsertModel<Subject>;\n    readonly allocateId?: Effect.Effect<NativeId, PersistenceMappingError>;\n    /** Required instead of allocateId when a synchronous-only DO transaction preallocates IDs. */\n    readonly allocateIdSync?: () => NativeId;\n    /** Decodes MySQL `$returningId()` for an autoincrement/runtime-default key. */\n    readonly decodeGeneratedId?: (\n      rows: ReadonlyArray<unknown>,\n    ) => Effect.Effect<NativeId, PersistenceMappingError>;\n  };\n  readonly identifier: {\n    readonly table: Identifier;\n    readonly namespace: ColumnKey<Identifier>;\n    readonly value: ColumnKey<Identifier>;\n    readonly subjectId: ColumnKey<Identifier>;\n    readonly encodeInsert: (\n      identifier: LoginIdentifier,\n      subjectId: NativeId,\n      verifiedAt: DateTime.Utc | undefined,\n    ) => InferInsertModel<Identifier>;\n  };\n  readonly provisioningRequest: {\n    readonly table: Request;\n    readonly requestId: ColumnKey<Request>;\n    readonly fingerprint: ColumnKey<Request>;\n    readonly subjectId: ColumnKey<Request>;\n    readonly encodeInsert: (\n      requestId: string,\n      fingerprint: string,\n      subjectId: NativeId,\n    ) => InferInsertModel<Request>;\n  };\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  /** Narrows only database constraint failures; every other cause is unavailable. */\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\nexport interface ExternalIdentityTables<Subject extends Table, External extends Table, NativeId> {\n  readonly constraints: RequiredExternalIdentityConstraints;\n  readonly subject: {\n    readonly table: Subject;\n    readonly id: ColumnKey<Subject>;\n    readonly status: ColumnKey<Subject>;\n    readonly isActiveStatus: (value: unknown) => boolean;\n  };\n  readonly externalIdentity: {\n    readonly table: External;\n    readonly provider: ColumnKey<External>;\n    readonly issuer: ColumnKey<External>;\n    readonly subject: ColumnKey<External>;\n    readonly subjectId: ColumnKey<External>;\n    readonly encodeInsert: (\n      identity: ExternalIdentity,\n      subjectId: NativeId,\n    ) => InferInsertModel<External>;\n  };\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\nexport interface IdentityTables<\n  Subject extends Table,\n  Identifier extends Table,\n  External extends Table,\n  Request extends Table,\n  NativeId,\n> {\n  readonly constraints: RequiredIdentityConstraints;\n  readonly subject: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>[\"subject\"];\n  readonly identifier: SubjectProvisioningTables<\n    Subject,\n    Identifier,\n    Request,\n    NativeId\n  >[\"identifier\"];\n  readonly externalIdentity: ExternalIdentityTables<\n    Subject,\n    External,\n    NativeId\n  >[\"externalIdentity\"];\n  readonly provisioningRequest: SubjectProvisioningTables<\n    Subject,\n    Identifier,\n    Request,\n    NativeId\n  >[\"provisioningRequest\"];\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\n/** Extra encoders used by D1's ordered batch when the subject id is database-generated. */\nexport interface D1SubjectProvisioningMapping<\n  Subject extends Table,\n  Identifier extends Table,\n  Request extends Table,\n  NativeId,\n> extends SubjectProvisioningTables<Subject, Identifier, Request, NativeId> {\n  readonly d1: {\n    readonly requestInsertWithoutSubject: (\n      requestId: string,\n      fingerprint: string,\n    ) => Partial<InferInsertModel<Request>>;\n    readonly identifierInsertWithoutSubject: (\n      identifier: LoginIdentifier,\n      verifiedAt: DateTime.Utc | undefined,\n    ) => Partial<InferInsertModel<Identifier>>;\n    /** Unshadowed hidden-rowid alias; omit for WITHOUT ROWID or preallocated IDs. */\n    readonly generatedRowIdAlias?: \"rowid\" | \"_rowid_\" | \"oid\";\n  };\n}\n\nexport interface D1ExternalIdentityMapping<\n  Subject extends Table,\n  External extends Table,\n  NativeId,\n> extends ExternalIdentityTables<Subject, External, NativeId> {\n  readonly d1: {\n    readonly activeStatusValue: unknown;\n  };\n}\n\nexport interface D1GeneratedIdentityMapping<\n  Subject extends Table,\n  Identifier extends Table,\n  External extends Table,\n  Request extends Table,\n  NativeId,\n> extends IdentityTables<Subject, Identifier, External, Request, NativeId> {\n  readonly d1: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>[\"d1\"] &\n    D1ExternalIdentityMapping<Subject, External, NativeId>[\"d1\"];\n}\n\nexport const provisioningFingerprint = (input: SubjectProvisioningInput): string =>\n  // oxlint-disable-next-line no-restricted-properties -- stable internal provisioning fingerprint, never external JSON.\n  JSON.stringify(\n    input.identifier === undefined\n      ? [\"v1\", null]\n      : [\n          \"v1\",\n          input.identifier.namespace,\n          input.identifier.value,\n          input.verifiedAt === undefined ? null : DateTime.toEpochMillis(input.verifiedAt),\n        ],\n  );\n\n/**\n * Drizzle wraps Effect SQL failures before adapters observe them. Give the\n * consumer classifier each semantic wrapper in the short `cause`/`reason`\n * chain without exposing query text or bound parameters through public errors.\n */\n\nexport const column = <T extends Table>(table: T, key: ColumnKey<T>): AnyColumn =>\n  getTableColumns(table)[key] as AnyColumn;\n\nexport const updateValues = <T extends Table>(\n  entries: ReadonlyArray<readonly [ColumnKey<T>, unknown]>,\n): Partial<InferInsertModel<T>> => Object.fromEntries(entries) as Partial<InferInsertModel<T>>;\n\nexport type ChallengeInput = ConsumeChallenge;\n\n/** Acquire an application database in Effect and expose the auth stores as one layer. */\nexport const authServicesLayer = <E, R>(\n  acquire: Effect.Effect<\n    {\n      readonly authStore: AuthStore[\"Service\"];\n      readonly oauthStateStore: OAuthStateStore[\"Service\"];\n    },\n    E,\n    R\n  >,\n) =>\n  Layer.effectContext(\n    Effect.map(acquire, ({ authStore, oauthStateStore }) =>\n      Context.make(AuthStore, authStore).pipe(Context.add(OAuthStateStore, oauthStateStore)),\n    ),\n  );\n\n/** Acquire an application database in Effect and expose the identity services as one layer. */\nexport const identityServicesLayer = <E, R>(\n  acquire: Effect.Effect<\n    {\n      readonly subjectProvisioner: SubjectProvisioner[\"Service\"];\n      readonly externalIdentityMutation: ExternalIdentityMutation[\"Service\"];\n    },\n    E,\n    R\n  >,\n) =>\n  Layer.effectContext(\n    Effect.map(acquire, ({ subjectProvisioner, externalIdentityMutation }) =>\n      Context.make(SubjectProvisioner, subjectProvisioner).pipe(\n        Context.add(ExternalIdentityMutation, externalIdentityMutation),\n      ),\n    ),\n  );\n"],"mappings":";;;;;;;;;AAsCA,MAAa,4BACX,aAEA,OAAO,cAAc,SAAS,QAAQ,kBAAkB,CAAC,CAAC,KACxD,OAAO,QACL,OAAO,MAAM;CACX,cAAc,OAAO;CACrB,cACE,eAAe,KAAK,EAClB,SAAS,oEACX,CAAC;AACL,CAAC,CACH,CACF;AA0BF,MAAa,0BAAmD;CAC9D,QAAQ;CACR,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,MAAa,+BAA6D;CACxE,QAAQ;CACR,iBAAiB;CACjB,oBAAoB;AACtB;AAEA,MAAa,gCAA+D,EAC1E,kBAAkB,sBACpB;AA2IA,MAAa,8BAA2D;CACtE,YAAY;CACZ,kBAAkB;CAClB,qBAAqB;CACrB,qBAAqB;AACvB;AAEA,MAAa,yCAAiF;CAC5F,YAAY;CACZ,qBAAqB;CACrB,qBAAqB;AACvB;AAEA,MAAa,sCAA2E,EACtF,kBAAkB,kCACpB;AA0JA,MAAa,2BAA2B,UAEtC,KAAK,UACH,MAAM,eAAe,KAAA,IACjB,CAAC,MAAM,IAAI,IACX;CACE;CACA,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,MAAM,eAAe,KAAA,IAAY,OAAO,SAAS,cAAc,MAAM,UAAU;AACjF,CACN;;;;;;AAQF,MAAa,UAA2B,OAAU,QAChD,gBAAgB,KAAK,CAAC,CAAC;AAEzB,MAAa,gBACX,YACiC,OAAO,YAAY,OAAO;;AAK7D,MAAa,qBACX,YASA,MAAM,cACJ,OAAO,IAAI,UAAU,EAAE,WAAW,sBAChC,QAAQ,KAAK,WAAW,SAAS,CAAC,CAAC,KAAK,QAAQ,IAAI,iBAAiB,eAAe,CAAC,CACvF,CACF;;AAGF,MAAa,yBACX,YASA,MAAM,cACJ,OAAO,IAAI,UAAU,EAAE,oBAAoB,+BACzC,QAAQ,KAAK,oBAAoB,kBAAkB,CAAC,CAAC,KACnD,QAAQ,IAAI,0BAA0B,wBAAwB,CAChE,CACF,CACF"}
+{"version":3,"file":"model.mjs","names":[],"sources":["../../src/drizzle/model.ts"],"sourcesContent":["import { AuthStore } from \"@yielded/auth/AuthStore\";\nimport { AuthStoreError } from \"@yielded/auth/Errors\";\nimport {\n  ExternalIdentityMutation,\n  SubjectProvisioner,\n  type SubjectProvisioningInput,\n  type ExternalIdentity,\n  type LoginIdentifier,\n} from \"@yielded/auth/Identity\";\nimport { OAuthStateStore, type OAuthState } from \"@yielded/auth/OAuth\";\nimport {\n  type ConsumeChallenge,\n  type NewChallenge,\n  type NewRegistration,\n  type PendingRegistration,\n  type SubjectId,\n} from \"@yielded/auth/Schema\";\nimport {\n  getTableColumns,\n  type AnyColumn,\n  type InferInsertModel,\n  type InferSelectModel,\n  type Table,\n} from \"drizzle-orm\";\nimport { Context, DateTime, Effect, Layer } from \"effect\";\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\";\n\nimport { requireStandalone } from \"../internal/standalone\";\n\nexport type CommitMode = \"interactive\" | \"synchronous\" | \"batch\";\n\n/**\n * Ordinary error-channel consumes must own their commit. Coordinated callers\n * use the decision methods inside their outer transaction and translate only\n * after that owner commits.\n */\nexport interface SqlClientTransactionDatabase {\n  readonly $client: Pick<SqlClient.SqlClient, \"transactionService\">;\n}\n\nexport const requireStandaloneConsume = (\n  database: SqlClientTransactionDatabase,\n): Effect.Effect<void, AuthStoreError> =>\n  requireStandalone(\n    () =>\n      AuthStoreError.make({\n        message: \"Use the decision consume API inside an outer database transaction\",\n      }),\n    database.$client,\n  );\n\nexport type { ChallengeConsumeDecision } from \"@yielded/auth/Persistence\";\nexport type { ConsumeDecision } from \"@yielded/auth/AuthStore\";\n\nexport { PersistenceMappingError, isMappedConstraintConflict } from \"../internal/mapping-error\";\nimport type { PersistenceMappingError } from \"../internal/mapping-error\";\n\nexport interface InstantCodec<NativeInstant> {\n  readonly encode: (instant: DateTime.Utc) => NativeInstant;\n  readonly decode: (native: NativeInstant) => Effect.Effect<DateTime.Utc, PersistenceMappingError>;\n}\n\nexport interface RequiredAuthStoreConstraints {\n  readonly series: \"unique(namespace,value,purpose)\";\n  readonly challengeDigest: \"unique(tokenDigest)\";\n  readonly registrationDigest: \"unique(tokenDigest)\";\n}\n\nexport interface RequiredOAuthStateConstraints {\n  readonly oauthStateDigest: \"unique(stateDigest)\";\n}\n\nexport interface RequiredAuthConstraints\n  extends RequiredAuthStoreConstraints, RequiredOAuthStateConstraints {}\n\nexport const requiredAuthConstraints: RequiredAuthConstraints = {\n  series: \"unique(namespace,value,purpose)\",\n  challengeDigest: \"unique(tokenDigest)\",\n  registrationDigest: \"unique(tokenDigest)\",\n  oauthStateDigest: \"unique(stateDigest)\",\n};\n\nexport const requiredAuthStoreConstraints: RequiredAuthStoreConstraints = {\n  series: \"unique(namespace,value,purpose)\",\n  challengeDigest: \"unique(tokenDigest)\",\n  registrationDigest: \"unique(tokenDigest)\",\n};\n\nexport const requiredOAuthStateConstraints: RequiredOAuthStateConstraints = {\n  oauthStateDigest: \"unique(stateDigest)\",\n};\n\ntype ColumnKey<T extends Table> = Extract<keyof T[\"_\"][\"columns\"], string>;\n\nexport interface ChallengeRecord {\n  readonly challenge: NewChallenge;\n  readonly namespace: string;\n  readonly failedAttempts: number;\n  readonly consumed: boolean;\n}\n\nexport interface ChallengeColumns<T extends Table> {\n  readonly challengeId: ColumnKey<T>;\n  readonly tokenDigest: ColumnKey<T>;\n  readonly namespace: ColumnKey<T>;\n  readonly value: ColumnKey<T>;\n  readonly purpose: ColumnKey<T>;\n  readonly otpKeyId: ColumnKey<T>;\n  readonly otpDigest: ColumnKey<T>;\n  readonly issuedAt: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly attemptLimit: ColumnKey<T>;\n  readonly failedAttempts: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\n/**\n * Inputs are immutable server-created issuances. Replacements must advance\n * issuedAt; equal or older issuances fail even after consumption or expiry.\n * Instant encoding must preserve this ordering. Retain the series row as an\n * issuance watermark until every previously accepted issuance has expired;\n * current-row expiry alone is insufficient if historical lifetimes were longer.\n */\nexport interface ChallengeTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: ChallengeColumns<T>;\n  readonly identifierNamespace: string;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (\n    input: NewChallenge,\n    state: {\n      readonly namespace: string;\n      readonly failedAttempts: number;\n      readonly consumed: false;\n    },\n  ) => InferInsertModel<T>;\n  readonly encodeUpdate: (\n    input: NewChallenge,\n    state: {\n      readonly namespace: string;\n      readonly failedAttempts: unknown;\n      readonly consumed: false;\n    },\n  ) => Readonly<Record<string, unknown>>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<ChallengeRecord, PersistenceMappingError>;\n}\n\nexport interface RegistrationRecord {\n  readonly registration: PendingRegistration;\n  readonly consumed: boolean;\n}\n\nexport interface RegistrationColumns<T extends Table> {\n  readonly registrationId: ColumnKey<T>;\n  readonly tokenDigest: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\nexport interface RegistrationTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: RegistrationColumns<T>;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (input: NewRegistration, consumed: false) => InferInsertModel<T>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<RegistrationRecord, PersistenceMappingError>;\n}\n\nexport interface OAuthStateColumns<T extends Table> {\n  readonly stateDigest: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\nexport interface OAuthStateTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: OAuthStateColumns<T>;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (state: OAuthState, consumed: false) => InferInsertModel<T>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<\n    { readonly state: OAuthState; readonly consumed: boolean },\n    PersistenceMappingError\n  >;\n}\n\nexport interface AuthStoreTables<Challenge extends Table, Registration extends Table> {\n  readonly constraints: RequiredAuthStoreConstraints;\n  readonly challenge: ChallengeTableMapping<Challenge>;\n  readonly registration: RegistrationTableMapping<Registration>;\n}\n\nexport interface OAuthStateTables<State extends Table> {\n  readonly constraints: RequiredOAuthStateConstraints;\n  readonly oauthState: OAuthStateTableMapping<State>;\n}\n\nexport interface AuthTables<\n  Challenge extends Table,\n  Registration extends Table,\n  State extends Table,\n> {\n  readonly constraints: RequiredAuthConstraints;\n  readonly challenge: ChallengeTableMapping<Challenge>;\n  readonly registration: RegistrationTableMapping<Registration>;\n  readonly oauthState: OAuthStateTableMapping<State>;\n}\n\nexport interface RequiredIdentityConstraints {\n  readonly identifier: \"unique(namespace,value)\";\n  readonly externalIdentity: \"unique(provider,issuer,subject)\";\n  readonly provisioningRequest: \"unique(requestId)\";\n  readonly provisioningSubject: \"notNull(provisioningRequest.subjectId)\";\n}\n\nexport interface RequiredSubjectProvisioningConstraints {\n  readonly identifier: \"unique(namespace,value)\";\n  readonly provisioningRequest: \"unique(requestId)\";\n  readonly provisioningSubject: \"notNull(provisioningRequest.subjectId)\";\n}\n\nexport interface RequiredExternalIdentityConstraints {\n  readonly externalIdentity: \"unique(provider,issuer,subject)\";\n}\n\nexport const requiredIdentityConstraints: RequiredIdentityConstraints = {\n  identifier: \"unique(namespace,value)\",\n  externalIdentity: \"unique(provider,issuer,subject)\",\n  provisioningRequest: \"unique(requestId)\",\n  provisioningSubject: \"notNull(provisioningRequest.subjectId)\",\n};\n\nexport const requiredSubjectProvisioningConstraints: RequiredSubjectProvisioningConstraints = {\n  identifier: \"unique(namespace,value)\",\n  provisioningRequest: \"unique(requestId)\",\n  provisioningSubject: \"notNull(provisioningRequest.subjectId)\",\n};\n\nexport const requiredExternalIdentityConstraints: RequiredExternalIdentityConstraints = {\n  externalIdentity: \"unique(provider,issuer,subject)\",\n};\n\nexport interface SubjectIdCodec<NativeId> {\n  readonly toNative: (id: SubjectId) => Effect.Effect<NativeId, PersistenceMappingError>;\n  readonly toSubject: (id: NativeId) => Effect.Effect<SubjectId, PersistenceMappingError>;\n  readonly equals: (left: NativeId, right: NativeId) => boolean;\n}\n\nexport interface SubjectProvisioningTables<\n  Subject extends Table,\n  Identifier extends Table,\n  Request extends Table,\n  NativeId,\n> {\n  readonly constraints: RequiredSubjectProvisioningConstraints;\n  readonly subject: {\n    readonly table: Subject;\n    readonly id: ColumnKey<Subject>;\n    readonly status: ColumnKey<Subject>;\n    readonly isActiveStatus: (value: unknown) => boolean;\n    readonly encodeInsert: (\n      input: SubjectProvisioningInput,\n      allocatedId: NativeId | undefined,\n    ) => InferInsertModel<Subject>;\n    readonly allocateId?: Effect.Effect<NativeId, PersistenceMappingError>;\n    /** Required instead of allocateId when a synchronous-only DO transaction preallocates IDs. */\n    readonly allocateIdSync?: () => NativeId;\n    /** Decodes MySQL `$returningId()` for an autoincrement/runtime-default key. */\n    readonly decodeGeneratedId?: (\n      rows: ReadonlyArray<unknown>,\n    ) => Effect.Effect<NativeId, PersistenceMappingError>;\n  };\n  readonly identifier: {\n    readonly table: Identifier;\n    readonly namespace: ColumnKey<Identifier>;\n    readonly value: ColumnKey<Identifier>;\n    readonly subjectId: ColumnKey<Identifier>;\n    readonly encodeInsert: (\n      identifier: LoginIdentifier,\n      subjectId: NativeId,\n      verifiedAt: DateTime.Utc | undefined,\n    ) => InferInsertModel<Identifier>;\n  };\n  readonly provisioningRequest: {\n    readonly table: Request;\n    readonly requestId: ColumnKey<Request>;\n    readonly fingerprint: ColumnKey<Request>;\n    readonly subjectId: ColumnKey<Request>;\n    readonly encodeInsert: (\n      requestId: string,\n      fingerprint: string,\n      subjectId: NativeId,\n    ) => InferInsertModel<Request>;\n  };\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  /** Narrows only database constraint failures; every other cause is unavailable. */\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\nexport interface ExternalIdentityTables<Subject extends Table, External extends Table, NativeId> {\n  readonly constraints: RequiredExternalIdentityConstraints;\n  readonly subject: {\n    readonly table: Subject;\n    readonly id: ColumnKey<Subject>;\n    readonly status: ColumnKey<Subject>;\n    readonly isActiveStatus: (value: unknown) => boolean;\n  };\n  readonly externalIdentity: {\n    readonly table: External;\n    readonly provider: ColumnKey<External>;\n    readonly issuer: ColumnKey<External>;\n    readonly subject: ColumnKey<External>;\n    readonly subjectId: ColumnKey<External>;\n    readonly encodeInsert: (\n      identity: ExternalIdentity,\n      subjectId: NativeId,\n    ) => InferInsertModel<External>;\n  };\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\nexport interface IdentityTables<\n  Subject extends Table,\n  Identifier extends Table,\n  External extends Table,\n  Request extends Table,\n  NativeId,\n> {\n  readonly constraints: RequiredIdentityConstraints;\n  readonly subject: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>[\"subject\"];\n  readonly identifier: SubjectProvisioningTables<\n    Subject,\n    Identifier,\n    Request,\n    NativeId\n  >[\"identifier\"];\n  readonly externalIdentity: ExternalIdentityTables<\n    Subject,\n    External,\n    NativeId\n  >[\"externalIdentity\"];\n  readonly provisioningRequest: SubjectProvisioningTables<\n    Subject,\n    Identifier,\n    Request,\n    NativeId\n  >[\"provisioningRequest\"];\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\n/** Extra encoders used by D1's ordered batch when the subject id is database-generated. */\nexport interface D1SubjectProvisioningMapping<\n  Subject extends Table,\n  Identifier extends Table,\n  Request extends Table,\n  NativeId,\n> extends SubjectProvisioningTables<Subject, Identifier, Request, NativeId> {\n  readonly d1: {\n    readonly requestInsertWithoutSubject: (\n      requestId: string,\n      fingerprint: string,\n    ) => Partial<InferInsertModel<Request>>;\n    readonly identifierInsertWithoutSubject: (\n      identifier: LoginIdentifier,\n      verifiedAt: DateTime.Utc | undefined,\n    ) => Partial<InferInsertModel<Identifier>>;\n    /** Unshadowed hidden-rowid alias; omit for WITHOUT ROWID or preallocated IDs. */\n    readonly generatedRowIdAlias?: \"rowid\" | \"_rowid_\" | \"oid\";\n  };\n}\n\nexport interface D1ExternalIdentityMapping<\n  Subject extends Table,\n  External extends Table,\n  NativeId,\n> extends ExternalIdentityTables<Subject, External, NativeId> {\n  readonly d1: {\n    readonly activeStatusValue: unknown;\n  };\n}\n\nexport interface D1GeneratedIdentityMapping<\n  Subject extends Table,\n  Identifier extends Table,\n  External extends Table,\n  Request extends Table,\n  NativeId,\n> extends IdentityTables<Subject, Identifier, External, Request, NativeId> {\n  readonly d1: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>[\"d1\"] &\n    D1ExternalIdentityMapping<Subject, External, NativeId>[\"d1\"];\n}\n\nexport const provisioningFingerprint = (input: SubjectProvisioningInput): string =>\n  // oxlint-disable-next-line no-restricted-properties -- stable internal provisioning fingerprint, never external JSON.\n  JSON.stringify(\n    input.identifier === undefined\n      ? [\"v1\", null]\n      : [\n          \"v1\",\n          input.identifier.namespace,\n          input.identifier.value,\n          input.verifiedAt === undefined ? null : DateTime.toEpochMillis(input.verifiedAt),\n        ],\n  );\n\n/**\n * Drizzle wraps Effect SQL failures before adapters observe them. Give the\n * consumer classifier each semantic wrapper in the short `cause`/`reason`\n * chain without exposing query text or bound parameters through public errors.\n */\n\nexport const column = <T extends Table>(table: T, key: ColumnKey<T>): AnyColumn =>\n  getTableColumns(table)[key] as AnyColumn;\n\nexport const updateValues = <T extends Table>(\n  entries: ReadonlyArray<readonly [ColumnKey<T>, unknown]>,\n): Partial<InferInsertModel<T>> => Object.fromEntries(entries) as Partial<InferInsertModel<T>>;\n\nexport type ChallengeInput = ConsumeChallenge;\n\n/** Acquire an application database in Effect and expose the auth stores as one layer. */\nexport const authServicesLayer = <E, R>(\n  acquire: Effect.Effect<\n    {\n      readonly authStore: AuthStore[\"Service\"];\n      readonly oauthStateStore: OAuthStateStore[\"Service\"];\n    },\n    E,\n    R\n  >,\n) =>\n  Layer.effectContext(\n    Effect.map(acquire, ({ authStore, oauthStateStore }) =>\n      Context.make(AuthStore, authStore).pipe(Context.add(OAuthStateStore, oauthStateStore)),\n    ),\n  );\n\n/** Acquire an application database in Effect and expose the identity services as one layer. */\nexport const identityServicesLayer = <E, R>(\n  acquire: Effect.Effect<\n    {\n      readonly subjectProvisioner: SubjectProvisioner[\"Service\"];\n      readonly externalIdentityMutation: ExternalIdentityMutation[\"Service\"];\n    },\n    E,\n    R\n  >,\n) =>\n  Layer.effectContext(\n    Effect.map(acquire, ({ subjectProvisioner, externalIdentityMutation }) =>\n      Context.make(SubjectProvisioner, subjectProvisioner).pipe(\n        Context.add(ExternalIdentityMutation, externalIdentityMutation),\n      ),\n    ),\n  );\n"],"mappings":";;;;;;;;;;AAwCA,MAAa,4BACX,aAEA,wBAEI,eAAe,KAAK,EAClB,SAAS,oEACX,CAAC,GACH,SAAS,OACX;AA0BF,MAAa,0BAAmD;CAC9D,QAAQ;CACR,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,MAAa,+BAA6D;CACxE,QAAQ;CACR,iBAAiB;CACjB,oBAAoB;AACtB;AAEA,MAAa,gCAA+D,EAC1E,kBAAkB,sBACpB;AA2IA,MAAa,8BAA2D;CACtE,YAAY;CACZ,kBAAkB;CAClB,qBAAqB;CACrB,qBAAqB;AACvB;AAEA,MAAa,yCAAiF;CAC5F,YAAY;CACZ,qBAAqB;CACrB,qBAAqB;AACvB;AAEA,MAAa,sCAA2E,EACtF,kBAAkB,kCACpB;AA0JA,MAAa,2BAA2B,UAEtC,KAAK,UACH,MAAM,eAAe,KAAA,IACjB,CAAC,MAAM,IAAI,IACX;CACE;CACA,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,MAAM,eAAe,KAAA,IAAY,OAAO,SAAS,cAAc,MAAM,UAAU;AACjF,CACN;;;;;;AAQF,MAAa,UAA2B,OAAU,QAChD,gBAAgB,KAAK,CAAC,CAAC;AAEzB,MAAa,gBACX,YACiC,OAAO,YAAY,OAAO;;AAK7D,MAAa,qBACX,YASA,MAAM,cACJ,OAAO,IAAI,UAAU,EAAE,WAAW,sBAChC,QAAQ,KAAK,WAAW,SAAS,CAAC,CAAC,KAAK,QAAQ,IAAI,iBAAiB,eAAe,CAAC,CACvF,CACF;;AAGF,MAAa,yBACX,YASA,MAAM,cACJ,OAAO,IAAI,UAAU,EAAE,oBAAoB,+BACzC,QAAQ,KAAK,oBAAoB,kBAAkB,CAAC,CAAC,KACnD,QAAQ,IAAI,0BAA0B,wBAAwB,CAChE,CACF,CACF"}

package/dist/drizzle/mysql-emails.d.mts

@@ -13,7 +13,7 @@ import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 type Database = EffectMysql2Database<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
 type ProofMapping = ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>;
-declare const makeMysqlEmailSignInServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailSignInMapping<S, I, C, NativeId>) => Effect.Effect<{
+export declare const makeMysqlEmailSignInServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailSignInMapping<S, I, C, NativeId>) => Effect.Effect<{
   emailSignInTargets: {
     readonly lookup: (input: {
       readonly moduleId: string;
@@ -21,7 +21,7 @@ declare const makeMysqlEmailSignInServices: <S extends AnyMySqlTable, I extends
     }) => Effect.Effect<import("effect/Option").Option<import("@yielded/auth/Email").EmailCredentialSnapshot>, EmailUnavailable>;
   };
 }, never, never>;
-declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
+export declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
   emailAddressPersistence: {
     readonly target: (input: {
       readonly moduleId: string;
@@ -41,31 +41,30 @@ declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I extends
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, EmailUnavailable>;
   };
 }, never, LifecycleHooks>;
-declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
   readonly proofMapping: ProofMapping;
   readonly transaction?: never;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
   readonly proofMapping: ProofMapping;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
-declare const makeMysqlEmailRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
+export declare const makeMysqlEmailRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
   registrationAuthority: EmailRegistrationAuthority<Registration>;
 }, never, LifecycleHooks>;
-declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
   readonly proofMapping: ProofMapping;
   readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
   readonly transaction?: never;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
   readonly proofMapping: ProofMapping;
   readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
 //#endregion
-export { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices };
 //# sourceMappingURL=mysql-emails.d.mts.map

package/dist/drizzle/mysql-identity.d.mts

@@ -7,16 +7,15 @@ import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
 import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 //#region src/drizzle/mysql-identity.d.ts
 type Database = EffectMysql2Database<AnyRelations>;
-declare const makeMysqlSubjectProvisioningServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(database: Database, mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => {
+export declare const makeMysqlSubjectProvisioningServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(database: Database, mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => {
   readonly subjectProvisioner: {
     readonly provision: (input: SubjectProvisioningInput) => Effect.Effect<import("@yielded/auth/Identity").ProvisioningResult, IdentityConflict | IdentityUnavailable>;
   };
 };
-declare const makeMysqlExternalIdentityServices: <Subject extends AnyMySqlTable, External extends AnyMySqlTable, NativeId>(database: Database, mapping: ExternalIdentityTables<Subject, External, NativeId>) => {
+export declare const makeMysqlExternalIdentityServices: <Subject extends AnyMySqlTable, External extends AnyMySqlTable, NativeId>(database: Database, mapping: ExternalIdentityTables<Subject, External, NativeId>) => {
   readonly externalIdentityMutation: {
     readonly bind: (subjectId: SubjectId, identity: ExternalIdentity) => Effect.Effect<void, IdentityConflict | IdentityUnavailable>;
   };
 };
 //#endregion
-export { makeMysqlExternalIdentityServices, makeMysqlSubjectProvisioningServices };
 //# sourceMappingURL=mysql-identity.d.mts.map

package/dist/drizzle/mysql-password-prepared.d.mts

@@ -10,21 +10,20 @@ import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 //#region src/drizzle/mysql-password-prepared.d.ts
 type Database = EffectMysql2Database<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
-declare const makeMySqlPasswordPreparedPersistenceServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable = AnyMySqlTable, PC extends AnyMySqlTable = AnyMySqlTable, PM extends AnyMySqlTable = AnyMySqlTable, PSub extends AnyMySqlTable = AnyMySqlTable, PI extends AnyMySqlTable = AnyMySqlTable, PCr extends AnyMySqlTable = AnyMySqlTable, PNativeId = unknown>(database: Database, mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>, proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>) => Effect.Effect<{
+export declare const makeMySqlPasswordPreparedPersistenceServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable = AnyMySqlTable, PC extends AnyMySqlTable = AnyMySqlTable, PM extends AnyMySqlTable = AnyMySqlTable, PSub extends AnyMySqlTable = AnyMySqlTable, PI extends AnyMySqlTable = AnyMySqlTable, PCr extends AnyMySqlTable = AnyMySqlTable, PNativeId = unknown>(database: Database, mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>, proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>) => Effect.Effect<{
   passwordPreparedPersistence: PasswordPreparedPersistence;
 }, never, LifecycleHooks>;
-declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;
   readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
   readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
   readonly transaction?: never;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;
   readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
   readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
 //#endregion
-export { coordinateMySqlPasswordPreparedPersistence, makeMySqlPasswordPreparedPersistenceServices };
 //# sourceMappingURL=mysql-password-prepared.d.mts.map

package/dist/drizzle/mysql-passwords.d.mts

@@ -15,7 +15,7 @@ import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 type Database = EffectMysql2Database<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
 type Mapping<S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId> = PasswordPersistenceMapping<S, I, C, AC, A, RS, CE, M, NativeId>;
-declare const makeMysqlPasswordPersistenceServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(database: Database, mapping: Mapping<S, I, C, AC, A, RS, CE, M, NativeId>, proofMapping?: ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>) => Effect.Effect<{
+export declare const makeMysqlPasswordPersistenceServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(database: Database, mapping: Mapping<S, I, C, AC, A, RS, CE, M, NativeId>, proofMapping?: ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>) => Effect.Effect<{
   passwordPersistence: {
     readonly admitAttempt: <A_1>(input: {
       readonly moduleId: string;
@@ -58,29 +58,28 @@ declare const makeMysqlPasswordPersistenceServices: <S extends AnyMySqlTable, I
     }, A_1>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A_1>, PasswordUnavailable>;
   };
 }, never, LifecycleHooks>;
-declare function coordinateMysqlPasswordPersistence<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, PM extends ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any> | undefined, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlPasswordPersistence<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, PM extends ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any> | undefined, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: Mapping<S, I, C, AC, A, RS, CE, M, NativeId>;
   readonly proofMapping?: PM;
   readonly transaction?: never;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, PasswordPersistence> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlPasswordPersistence<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, PM extends ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any> | undefined, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlPasswordPersistence<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, PM extends ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any> | undefined, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: Mapping<S, I, C, AC, A, RS, CE, M, NativeId>;
   readonly proofMapping?: PM;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, PasswordPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
-declare const makeMysqlPasswordRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(database: Database, mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>) => Effect.Effect<{
+export declare const makeMysqlPasswordRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(database: Database, mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>) => Effect.Effect<{
   registrationAuthority: PasswordRegistrationAuthority<Registration>;
 }, never, LifecycleHooks>;
-declare function coordinateMysqlPasswordRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlPasswordRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
   readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;
   readonly transaction?: never;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlPasswordRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlPasswordRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
   readonly target: SuppliedService<TargetId, PasswordRegistrationAuthority<Registration>>;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
 //#endregion
-export { coordinateMysqlPasswordPersistence, coordinateMysqlPasswordRegistration, makeMysqlPasswordPersistenceServices, makeMysqlPasswordRegistrationServices };
 //# sourceMappingURL=mysql-passwords.d.mts.map

package/dist/drizzle/mysql-proofs.d.mts

@@ -11,7 +11,7 @@ import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 type Database = EffectMysql2Database<AnyRelations>;
 type Transaction = Parameters<Parameters<Database["transaction"]>[0]>[0];
 type Mapping<Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, A extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId> = ProofPersistenceMapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, NativeId>;
-declare const makeMysqlProofPersistenceServices: <Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, A extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId>(database: Database, mapping: Mapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, NativeId>) => Effect.Effect<{
+export declare const makeMysqlProofPersistenceServices: <Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, A extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId>(database: Database, mapping: Mapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, NativeId>) => Effect.Effect<{
   proofPersistence: {
     readonly issue: <A_1>(input: {
       readonly record: import("@yielded/auth/Proofs").ProofRecord;
@@ -62,14 +62,13 @@ declare const makeMysqlProofPersistenceServices: <Rq extends AnyMySqlTable, S ex
     }, prepare: import("@yielded/auth/Proofs").PrepareProofCommit<import("@yielded/auth/Proofs").ProofCleanupResult, A_1>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A_1>, ProofUnavailable>;
   };
 }, never, LifecycleHooks>;
-declare function coordinateMysqlProofPersistence<D extends Database, Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, Aev extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlProofPersistence<D extends Database, Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, Aev extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: Mapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | ProofUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, ProofPersistence> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlProofPersistence<D extends Database, Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, Aev extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlProofPersistence<D extends Database, Rq extends AnyMySqlTable, S extends AnyMySqlTable, G extends AnyMySqlTable, Cn extends AnyMySqlTable, Rs extends AnyMySqlTable, Aev extends AnyMySqlTable, F extends AnyMySqlTable, C extends AnyMySqlTable, Sub extends AnyMySqlTable, I extends AnyMySqlTable, Cr extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: Mapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>;
   readonly transaction: SuppliedService<TxId, NoInfer<Transaction>, TxShape>;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | ProofUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, ProofPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
 //#endregion
-export { coordinateMysqlProofPersistence, makeMysqlProofPersistenceServices };
 //# sourceMappingURL=mysql-proofs.d.mts.map

package/dist/drizzle/mysql-sessions.d.mts

@@ -11,7 +11,7 @@ import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 //#region src/drizzle/mysql-sessions.d.ts
 type Database = EffectMysql2Database<AnyRelations>;
 type Transaction = Parameters<Parameters<Database["transaction"]>[0]>[0];
-declare const makeMysqlAuthenticationAuthorityServices: <Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId>(database: Database, mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>) => Effect.Effect<{
+export declare const makeMysqlAuthenticationAuthorityServices: <Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId>(database: Database, mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>) => Effect.Effect<{
   authenticationAuthority: {
     capture: (subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">, credentialIds: readonly string[]) => Effect.Effect<{
       subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
@@ -70,7 +70,7 @@ declare const makeMysqlAuthenticationAuthorityServices: <Claims, S extends AnyMy
     }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Sessions").PendingAuthenticationInvalid | SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
   };
 }, never, LifecycleHooks>;
-declare const makeMysqlPendingAuthenticationServices: <Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, P extends AnyMySqlTable, F extends AnyMySqlTable, NativeId>(database: Database, mapping: PendingAuthenticationMapping<Claims, S, C, P, F, NativeId>) => Effect.Effect<{
+export declare const makeMysqlPendingAuthenticationServices: <Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, P extends AnyMySqlTable, F extends AnyMySqlTable, NativeId>(database: Database, mapping: PendingAuthenticationMapping<Claims, S, C, P, F, NativeId>) => Effect.Effect<{
   pendingAuthentication: {
     create: <A>(input: Omit<import("@yielded/auth/Sessions").PendingAuthenticationRecord<Claims>, "version">, now: import("effect/DateTime").Utc, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<import("@yielded/auth/Sessions").PendingAuthenticationRecord<Claims>, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Sessions").SessionConflict | SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
     context: (input: {
@@ -103,7 +103,7 @@ declare const makeMysqlPendingAuthenticationServices: <Claims, S extends AnyMySq
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable, never>;
   };
 }, never, LifecycleHooks>;
-declare const makeMysqlStatefulSessionServices: <Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, Session extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, NativeSessionId>(database: Database, mapping: StatefulSessionMapping<Claims, S, C, Session, F, P, NativeId, NativeSessionId>) => Effect.Effect<{
+export declare const makeMysqlStatefulSessionServices: <Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, Session extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, NativeSessionId>(database: Database, mapping: StatefulSessionMapping<Claims, S, C, Session, F, P, NativeId, NativeSessionId>) => Effect.Effect<{
   statefulSessionPersistence: {
     establish: <A>(input: {
       readonly session: Omit<import("@yielded/auth/Sessions").StatefulSessionRecord<Claims>, "sessionId" | "version">;
@@ -156,7 +156,7 @@ declare const makeMysqlStatefulSessionServices: <Claims, S extends AnyMySqlTable
     }, SessionUnavailable, never>;
   };
 }, never, LifecycleHooks>;
-declare const makeMysqlSignedSessionValidityServices: <S extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId>(database: Database, mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>) => Effect.Effect<{
+export declare const makeMysqlSignedSessionValidityServices: <S extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId>(database: Database, mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>) => Effect.Effect<{
   signedSessionValidity: {
     verify: (session: {
       readonly sessionId: string & import("effect/Brand").Brand<"effect-auth/SessionId">;
@@ -179,59 +179,58 @@ declare const makeMysqlSignedSessionValidityServices: <S extends AnyMySqlTable,
     }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
   };
 }, never, LifecycleHooks>;
-declare function coordinateMysqlAuthenticationAuthority<D extends Database, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlAuthenticationAuthority<D extends Database, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, AuthenticationAuthority> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlAuthenticationAuthority<D extends Database, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlAuthenticationAuthority<D extends Database, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;
   readonly transaction: SuppliedService<TxId, NoInfer<Transaction>, TxShape>;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, AuthenticationAuthority | TxId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlPendingAuthentication<D extends Database, TargetId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, P extends AnyMySqlTable, F extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlPendingAuthentication<D extends Database, TargetId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, P extends AnyMySqlTable, F extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;
   readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlPendingAuthentication<D extends Database, TargetId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, P extends AnyMySqlTable, F extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlPendingAuthentication<D extends Database, TargetId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, P extends AnyMySqlTable, F extends AnyMySqlTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;
   readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;
   readonly transaction: SuppliedService<TxId, NoInfer<Transaction>, TxShape>;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlStatefulSessions<D extends Database, PersistenceId, RepositoryId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, Session extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlStatefulSessions<D extends Database, PersistenceId, RepositoryId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, Session extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, F, P, NativeId, NativeSessionId>;
   readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;
   readonly repository: SuppliedService<RepositoryId, SessionRepository>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, PersistenceId | RepositoryId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlStatefulSessions<D extends Database, PersistenceId, RepositoryId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, Session extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlStatefulSessions<D extends Database, PersistenceId, RepositoryId, Claims, S extends AnyMySqlTable, C extends AnyMySqlTable, Session extends AnyMySqlTable, F extends AnyMySqlTable, P extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, F, P, NativeId, NativeSessionId>;
   readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;
   readonly repository: SuppliedService<RepositoryId, SessionRepository>;
   readonly transaction: SuppliedService<TxId, NoInfer<Transaction>, TxShape>;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, PersistenceId | RepositoryId | TxId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlSignedSessionValidity<D extends Database, TargetId, S extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlSignedSessionValidity<D extends Database, TargetId, S extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;
   readonly target: SuppliedService<TargetId, SignedSessionValidity>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlSignedSessionValidity<D extends Database, TargetId, S extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlSignedSessionValidity<D extends Database, TargetId, S extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;
   readonly target: SuppliedService<TargetId, SignedSessionValidity>;
   readonly transaction: SuppliedService<TxId, NoInfer<Transaction>, TxShape>;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
-declare const makeMysqlSessionStepUpServices: <Claims, Id, S extends AnyMySqlTable, C extends AnyMySqlTable, I extends AnyMySqlTable, Session extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId>(database: Database, mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>, target: Context.Service<Id, SessionStepUpPersistence<Claims>>) => Effect.Effect<{
+export declare const makeMysqlSessionStepUpServices: <Claims, Id, S extends AnyMySqlTable, C extends AnyMySqlTable, I extends AnyMySqlTable, Session extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId>(database: Database, mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>, target: Context.Service<Id, SessionStepUpPersistence<Claims>>) => Effect.Effect<{
   sessionStepUpPersistence: SessionStepUpPersistence<Claims>;
 }, never, LifecycleHooks>;
-declare function coordinateMysqlSessionStepUp<Claims, Id, S extends AnyMySqlTable, C extends AnyMySqlTable, I extends AnyMySqlTable, Session extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, D extends Database, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlSessionStepUp<Claims, Id, S extends AnyMySqlTable, C extends AnyMySqlTable, I extends AnyMySqlTable, Session extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, D extends Database, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>;
   readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, Id> | LifecycleHooks | DatabaseRequirements>;
-declare function coordinateMysqlSessionStepUp<Claims, Id, S extends AnyMySqlTable, C extends AnyMySqlTable, I extends AnyMySqlTable, Session extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, D extends Database, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlSessionStepUp<Claims, Id, S extends AnyMySqlTable, C extends AnyMySqlTable, I extends AnyMySqlTable, Session extends AnyMySqlTable, T extends AnyMySqlTable, NativeId, NativeSessionId, D extends Database, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>;
   readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;
   readonly transaction: SuppliedService<TxId, NoInfer<Parameters<Parameters<D["transaction"]>[0]>[0]>, TxShape>;
 }, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, Id | TxId> | LifecycleHooks | DatabaseRequirements>;
 //#endregion
-export { coordinateMysqlAuthenticationAuthority, coordinateMysqlPendingAuthentication, coordinateMysqlSessionStepUp, coordinateMysqlSignedSessionValidity, coordinateMysqlStatefulSessions, makeMysqlAuthenticationAuthorityServices, makeMysqlPendingAuthenticationServices, makeMysqlSessionStepUpServices, makeMysqlSignedSessionValidityServices, makeMysqlStatefulSessionServices };
 //# sourceMappingURL=mysql-sessions.d.mts.map

package/dist/drizzle/mysql.d.mts

@@ -3,9 +3,9 @@ import { SuppliedService } from "./SuppliedService.mjs";
 import { Effect } from "effect";
 import { AuthStoreDecisions } from "@yielded/auth/Persistence";
 import { ConsumeChallenge, ConsumeRegistration, NewChallenge, NewRegistration, TokenDigest, VerifiedEmail } from "@yielded/auth/Schema";
+import { InvalidOAuthState, OAuthState, OAuthStateDecisions } from "@yielded/auth/OAuth";
 import { EmailOtpRejected } from "@yielded/auth/AuthStore";
 import { AuthStoreError, InvalidRegistration } from "@yielded/auth/Errors";
-import { InvalidOAuthState, OAuthState, OAuthStateDecisions } from "@yielded/auth/OAuth";
 import { AnyRelations } from "drizzle-orm";
 import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
 import { SqlError } from "effect/unstable/sql/SqlError";
@@ -14,7 +14,7 @@ import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 type Database = EffectMysql2Database<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
 /** MySQL/InnoDB implementation. Multi-step decisions stay values until commit. */
-declare const makeMysqlAuthStoreServices: <C extends AnyMySqlTable, R extends AnyMySqlTable>(database: Database, mapping: AuthStoreTables<C, R>) => {
+export declare const makeMysqlAuthStoreServices: <C extends AnyMySqlTable, R extends AnyMySqlTable>(database: Database, mapping: AuthStoreTables<C, R>) => {
   readonly authStore: {
     readonly issueChallenge: (input: NewChallenge) => Effect.Effect<void, import("@yielded/auth/AuthStore").IssueChallengeError>;
     readonly consumeChallenge: (input: ConsumeChallenge) => Effect.Effect<VerifiedEmail, EmailOtpRejected | AuthStoreError>;
@@ -27,7 +27,7 @@ declare const makeMysqlAuthStoreServices: <C extends AnyMySqlTable, R extends An
     readonly consumeRegistration: (input: ConsumeRegistration) => Effect.Effect<ConsumeDecision<void>, AuthStoreError, never>;
   };
 };
-declare const makeMysqlOAuthStateServices: <S extends AnyMySqlTable>(database: Database, mapping: OAuthStateTables<S>) => {
+export declare const makeMysqlOAuthStateServices: <S extends AnyMySqlTable>(database: Database, mapping: OAuthStateTables<S>) => {
   readonly oauthStateStore: {
     readonly issue: (state: OAuthState) => Effect.Effect<void, AuthStoreError>;
     readonly consume: (stateDigest: TokenDigest) => Effect.Effect<OAuthState, InvalidOAuthState | AuthStoreError>;
@@ -41,30 +41,29 @@ declare const makeMysqlOAuthStateServices: <S extends AnyMySqlTable>(database: D
  * owner; interruption before commit rolls back. This adapter never retries a
  * deadlock inside the caller's transaction.
  */
-declare function coordinateMysqlAuthStoreTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlAuthStoreTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: AuthStoreTables<C, R>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions> | DatabaseRequirements>;
-declare function coordinateMysqlAuthStoreTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlAuthStoreTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: AuthStoreTables<C, R>;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions | TxId> | DatabaseRequirements>;
-declare function coordinateMysqlOAuthStateTransaction<D extends Database, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlOAuthStateTransaction<D extends Database, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: OAuthStateTables<S>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, OAuthStateDecisions> | DatabaseRequirements>;
-declare function coordinateMysqlOAuthStateTransaction<D extends Database, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlOAuthStateTransaction<D extends Database, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: OAuthStateTables<S>;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, OAuthStateDecisions | TxId> | DatabaseRequirements>;
-declare function coordinateMysqlAuthTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlAuthTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: AuthTables<C, R, S>;
   readonly transaction?: never;
 }, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions | OAuthStateDecisions> | DatabaseRequirements>;
-declare function coordinateMysqlAuthTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+export declare function coordinateMysqlAuthTransaction<D extends Database, C extends AnyMySqlTable, R extends AnyMySqlTable, S extends AnyMySqlTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: AuthTables<C, R, S>;
   readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
 }, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions | OAuthStateDecisions | TxId> | DatabaseRequirements>;
 //#endregion
-export { coordinateMysqlAuthStoreTransaction, coordinateMysqlAuthTransaction, coordinateMysqlOAuthStateTransaction, makeMysqlAuthStoreServices, makeMysqlOAuthStateServices };
 //# sourceMappingURL=mysql.d.mts.map

package/dist/drizzle/mysql.mjs

@@ -2,9 +2,9 @@ import { column, requireStandaloneConsume, updateValues } from "./model.mjs";
 import { Cause, Context, DateTime, Duration, Effect, Schema } from "effect";
 import { AuthStoreDecisions, reportPersistenceFailure } from "@yielded/auth/Persistence";
 import { VerifiedEmail, timingSafeStringEqual } from "@yielded/auth/Schema";
+import { InvalidOAuthState, OAuthStateDecisions, OAuthStateStore } from "@yielded/auth/OAuth";
 import { AuthStore, EmailOtpRejected } from "@yielded/auth/AuthStore";
 import { AuthRateLimited, AuthStoreError, InvalidRegistration } from "@yielded/auth/Errors";
-import { InvalidOAuthState, OAuthStateDecisions, OAuthStateStore } from "@yielded/auth/OAuth";
 import { and, eq, gt, sql } from "drizzle-orm";
 //#region src/drizzle/mysql.ts
 const selected = (row) => row;