@yielded/auth-persistence 0.1.0-beta.7 → 0.1.0-beta.9

package/dist/drizzle/oauth-connected-model.d.mts

@@ -6,17 +6,17 @@ import { OAuthAccountRevision } from "@yielded/auth/OAuth";
 import { InferInsertModel, InferSelectModel, SQL, Table } from "drizzle-orm";
 //#region src/drizzle/oauth-connected-model.d.ts
 type Column<T extends Table> = Extract<keyof T["_"]["columns"], string>;
-type OAuthConnectedAction = M.OAuthConnectedActionChallenge["action"];
-interface OAuthConnectedSubjectTable<S extends Table> extends OAuthSubjectReadTable<S> {
+export type OAuthConnectedAction = M.OAuthConnectedActionChallenge["action"];
+export interface OAuthConnectedSubjectTable<S extends Table> extends OAuthSubjectReadTable<S> {
   readonly decodeActionRequirement: (row: InferSelectModel<S>, action: OAuthConnectedAction) => AuthenticationRequirement;
 }
 /** All mapped order columns use exact SQL integer comparison through 2^53-1.
  * These codecs bridge driver representations, not alternative ordering rules. */
-interface OAuthConnectedOrderCodec {
+export interface OAuthConnectedOrderCodec {
   readonly encode: (order: number) => unknown;
   readonly decode: (value: unknown) => number;
 }
-interface OAuthConnectedFlowTable<F extends Table, N> {
+export interface OAuthConnectedFlowTable<F extends Table, N> {
   readonly table: F;
   readonly moduleId: Column<F>;
   readonly flowId: Column<F>;
@@ -45,7 +45,7 @@ interface OAuthConnectedFlowTable<F extends Table, N> {
     readonly subjectId: N;
   }) => InferInsertModel<F>;
 }
-interface OAuthConnectedGrantTable<G extends Table, N> {
+export interface OAuthConnectedGrantTable<G extends Table, N> {
   readonly table: G;
   readonly moduleId: Column<G>;
   readonly grantId: Column<G>;
@@ -78,7 +78,7 @@ interface OAuthConnectedGrantTable<G extends Table, N> {
 /** Also stores a permanent provider/issuer scope anchor. clientKey must fit 52
  * ASCII characters. Empty clientRegistrationId is reserved for that anchor;
  * actual profile registrations are nonempty. Scope counter stays zero. */
-interface OAuthConnectedClientRegistrationTable<C extends Table> {
+export interface OAuthConnectedClientRegistrationTable<C extends Table> {
   readonly table: C;
   readonly clientKey: Column<C>;
   readonly provider: Column<C>;
@@ -90,7 +90,7 @@ interface OAuthConnectedClientRegistrationTable<C extends Table> {
 }
 /** Remote authority: no local-subject column or subject-scoped key. Retain this
  * anchor/cutoff when a legitimately released tuple gains a different local owner. */
-interface OAuthConnectedCohortTable<C extends Table> {
+export interface OAuthConnectedCohortTable<C extends Table> {
   readonly table: C;
   readonly cohortKey: Column<C>;
   readonly clientKey: Column<C>;
@@ -104,7 +104,7 @@ interface OAuthConnectedCohortTable<C extends Table> {
     readonly identityKey: string;
   }) => InferInsertModel<C>;
 }
-interface OAuthConnectedAdmissionTable<A extends Table, N> {
+export interface OAuthConnectedAdmissionTable<A extends Table, N> {
   readonly table: A;
   readonly admissionId: Column<A>;
   readonly moduleId: Column<A>;
@@ -124,7 +124,7 @@ interface OAuthConnectedAdmissionTable<A extends Table, N> {
     readonly subjectId: N;
   }) => InferInsertModel<A>;
 }
-interface OAuthConnectedCommandTable<C extends Table, N> {
+export interface OAuthConnectedCommandTable<C extends Table, N> {
   readonly table: C;
   readonly moduleId: Column<C>;
   readonly commandId: Column<C>;
@@ -140,7 +140,7 @@ interface OAuthConnectedCommandTable<C extends Table, N> {
     readonly subjectId: N;
   }) => InferInsertModel<C>;
 }
-interface OAuthConnectedRevocationJobTable<J extends Table, N> {
+export interface OAuthConnectedRevocationJobTable<J extends Table, N> {
   readonly table: J;
   readonly jobId: Column<J>;
   readonly moduleId: Column<J>;
@@ -161,7 +161,7 @@ interface OAuthConnectedRevocationJobTable<J extends Table, N> {
     readonly subjectId: N;
   }) => InferInsertModel<J>;
 }
-type OAuthConnectedPolicyInput<N> = {
+export type OAuthConnectedPolicyInput<N> = {
   readonly subjectId: N;
   readonly revision: OAuthAccountRevision;
 } & ({
@@ -175,18 +175,18 @@ type OAuthConnectedPolicyInput<N> = {
   readonly authorization: M.OAuthConnectedUseAuthorization;
   readonly grant?: M.OAuthConnectedTokenContext;
 });
-interface OAuthConnectedPolicyGuardTable<T extends Table, N> {
+export interface OAuthConnectedPolicyGuardTable<T extends Table, N> {
   readonly table: T;
   readonly orderBy: Column<T>;
   readonly condition: (input: OAuthConnectedPolicyInput<N>) => SQL;
 }
-interface OAuthConnectedPolicyGuard<N> {
+export interface OAuthConnectedPolicyGuard<N> {
   readonly table: Table;
   readonly orderBy: string;
   readonly condition: (input: OAuthConnectedPolicyInput<N>) => SQL;
 }
-declare const oauthConnectedPolicyGuard: <T extends Table, N>(input: OAuthConnectedPolicyGuardTable<T, N>) => OAuthConnectedPolicyGuard<N>;
-interface OAuthConnectedSqlPolicy<N> {
+export declare const oauthConnectedPolicyGuard: <T extends Table, N>(input: OAuthConnectedPolicyGuardTable<T, N>) => OAuthConnectedPolicyGuard<N>;
+export interface OAuthConnectedSqlPolicy<N> {
   /** Up to 32 scopes, each selecting 1..64 stable rows in global lock order.
    * Omit only when subject/shared authority locks already serialize every mutable
    * policy dependency or policy is immutable. All writers follow that order. */
@@ -196,7 +196,7 @@ interface OAuthConnectedSqlPolicy<N> {
    * The engine checks this before and after every owner/application write. */
   readonly condition: (input: OAuthConnectedPolicyInput<N>) => SQL;
 }
-declare const requiredOAuthConnectedConstraints: {
+export declare const requiredOAuthConnectedConstraints: {
   readonly flow: "unique(connectedFlow.moduleId,connectedFlow.flowId)";
   readonly flowCommand: "unique(connectedFlow.moduleId,connectedFlow.commandId)";
   readonly stateDigest: "unique(connectedFlow.stateDigest)";
@@ -207,11 +207,11 @@ declare const requiredOAuthConnectedConstraints: {
   readonly admission: "unique(connectedAdmission.admissionId)";
   readonly command: "unique(connectedCommand.moduleId,connectedCommand.commandId)";
 };
-declare const requiredOAuthConnectedRevocationConstraints: {
+export declare const requiredOAuthConnectedRevocationConstraints: {
   readonly job: "unique(connectedRevocation.jobId)";
 };
 /** Existing ownership only; workers never allocate or acquire a tuple. */
-type OAuthConnectedOwnershipRead<T extends Table, O extends Table, N> = {
+export type OAuthConnectedOwnershipRead<T extends Table, O extends Table, N> = {
   readonly mode: "integrated";
   readonly tuple: Omit<OAuthOwnershipMutation<T, O, N>["tuple"], "encodeInsert">;
 } | {
@@ -221,7 +221,7 @@ type OAuthConnectedOwnershipRead<T extends Table, O extends Table, N> = {
     readonly mode: "separate";
   }>["external"], "encodeInsert">;
 };
-interface OAuthConnectedAuthorityMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, N> {
+export interface OAuthConnectedAuthorityMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, N> {
   readonly ownership: OAuthConnectedOwnershipRead<T, O, N>;
   readonly subjectId: SubjectIdCodec<N>;
   readonly flow: Omit<OAuthConnectedFlowTable<F, N>, "encodeInsert">;
@@ -234,7 +234,7 @@ interface OAuthConnectedAuthorityMapping<T extends Table, O extends Table, F ext
   /** Safe metadata retention, never an expiry/quiescence proof for unresolved work. */
   readonly retentionMillis: number;
 }
-interface OAuthConnectedMapping<S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table = never> extends OAuthConnectedAuthorityMapping<T, O, F, G, C, H, N> {
+export interface OAuthConnectedMapping<S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table = never> extends OAuthConnectedAuthorityMapping<T, O, F, G, C, H, N> {
   readonly ownership: OAuthOwnershipMutation<T, O, N>;
   readonly flow: OAuthConnectedFlowTable<F, N>;
   readonly grant: OAuthConnectedGrantTable<G, N>;
@@ -269,10 +269,9 @@ interface OAuthConnectedMapping<S extends Table, AC extends Table, T extends Tab
     readonly subjectId: SQL;
   }) => SQL;
 }
-interface OAuthConnectedRevocationMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, J extends Table, N> extends OAuthConnectedAuthorityMapping<T, O, F, G, C, H, N> {
+export interface OAuthConnectedRevocationMapping<T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, J extends Table, N> extends OAuthConnectedAuthorityMapping<T, O, F, G, C, H, N> {
   readonly job: Omit<OAuthConnectedRevocationJobTable<J, N>, "encodeInsert">;
   readonly constraints: typeof requiredOAuthConnectedRevocationConstraints;
 }
 //#endregion
-export { OAuthConnectedAction, OAuthConnectedAdmissionTable, OAuthConnectedAuthorityMapping, OAuthConnectedClientRegistrationTable, OAuthConnectedCohortTable, OAuthConnectedCommandTable, OAuthConnectedFlowTable, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedOrderCodec, OAuthConnectedOwnershipRead, OAuthConnectedPolicyGuard, OAuthConnectedPolicyGuardTable, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthConnectedSubjectTable, oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints };
 //# sourceMappingURL=oauth-connected-model.d.mts.map

package/dist/drizzle/oauth-connected-reference.d.mts

@@ -5,7 +5,7 @@ import { SQL, Table } from "drizzle-orm";
 //#region src/drizzle/oauth-connected-reference.d.ts
 /** Compose Accounts.Unlink with this connected authority. The stable scope lock
  * serializes unknown claims across every client registration for an issuer. */
-declare const oauthConnectedOwnershipReferences: <S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table>(original: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, A, D, N, J>) => {
+export declare const oauthConnectedOwnershipReferences: <S extends Table, AC extends Table, T extends Table, O extends Table, F extends Table, G extends Table, C extends Table, H extends Table, A extends Table, D extends Table, N, J extends Table>(original: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, A, D, N, J>) => {
   readonly connectedReferenceGuards: ReadonlyArray<OAuthReferenceGuardDescriptor<N>>;
   readonly connectedReference: (input: {
     readonly identityKey: string;
@@ -13,5 +13,4 @@ declare const oauthConnectedOwnershipReferences: <S extends Table, AC extends Ta
   }) => SQL;
 };
 //#endregion
-export { oauthConnectedOwnershipReferences };
 //# sourceMappingURL=oauth-connected-reference.d.mts.map