@yielded/auth-persistence 0.1.0-beta.7

package/dist/drizzle/pg-proofs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-proofs.mjs","names":[],"sources":["../../src/drizzle/pg-proofs.ts"],"sourcesContent":["import type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport { type ProofUnavailable, ProofPersistence } from \"@yielded/auth/Proofs\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport {\n  coordinateTargetProofPersistence,\n  makeTargetProofPersistenceServices,\n  sqlClientProofStandaloneGuard,\n} from \"./proof-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\ntype Mapping<\n  Request extends AnyPgTable,\n  Series extends AnyPgTable,\n  Generation extends AnyPgTable,\n  Continuation extends AnyPgTable,\n  RateScope extends AnyPgTable,\n  AbuseEvent extends AnyPgTable,\n  FailureEvent extends AnyPgTable,\n  Command extends AnyPgTable,\n  Subject extends AnyPgTable,\n  Identifier extends AnyPgTable,\n  Credential extends AnyPgTable,\n  NativeSubjectId,\n> = ProofPersistenceMapping<\n  Request,\n  Series,\n  Generation,\n  Continuation,\n  RateScope,\n  AbuseEvent,\n  FailureEvent,\n  Command,\n  Subject,\n  Identifier,\n  Credential,\n  NativeSubjectId\n>;\n\nconst configuration = (database: Database) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientProofStandaloneGuard(database),\n  insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n});\n\nexport const makePgProofPersistenceServices = <\n  Rq extends AnyPgTable,\n  S extends AnyPgTable,\n  G extends AnyPgTable,\n  Cn extends AnyPgTable,\n  Rs extends AnyPgTable,\n  A extends AnyPgTable,\n  F extends AnyPgTable,\n  C extends AnyPgTable,\n  Sub extends AnyPgTable,\n  I extends AnyPgTable,\n  Cr extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: Mapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, NativeId>,\n) => makeTargetProofPersistenceServices(database, mapping, configuration(database));\n\nexport function coordinatePgProofPersistence<\n  D extends Database,\n  Rq extends AnyPgTable,\n  S extends AnyPgTable,\n  G extends AnyPgTable,\n  Cn extends AnyPgTable,\n  Rs extends AnyPgTable,\n  Aev extends AnyPgTable,\n  F extends AnyPgTable,\n  C extends AnyPgTable,\n  Sub extends AnyPgTable,\n  I extends AnyPgTable,\n  Cr extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: Mapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | ProofUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, ProofPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgProofPersistence<\n  D extends Database,\n  Rq extends AnyPgTable,\n  S extends AnyPgTable,\n  G extends AnyPgTable,\n  Cn extends AnyPgTable,\n  Rs extends AnyPgTable,\n  Aev extends AnyPgTable,\n  F extends AnyPgTable,\n  C extends AnyPgTable,\n  Sub extends AnyPgTable,\n  I extends AnyPgTable,\n  Cr extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: Mapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | ProofUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, ProofPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgProofPersistence<\n  D extends Database,\n  Rq extends AnyPgTable,\n  S extends AnyPgTable,\n  G extends AnyPgTable,\n  Cn extends AnyPgTable,\n  Rs extends AnyPgTable,\n  Aev extends AnyPgTable,\n  F extends AnyPgTable,\n  C extends AnyPgTable,\n  Sub extends AnyPgTable,\n  I extends AnyPgTable,\n  Cr extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: Mapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | ProofUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, ProofPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetProofPersistence<TransactionOf<D>, A, E, Exclude<R, ProofPersistence>>(\n      database,\n      options.mapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly proofPersistence: ProofPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(ProofPersistence, services.proofPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;AAgDA,MAAM,iBAAiB,cAAwB;CAC7C,MAAM;CACN,SAAS;CACT,iBAAiB,8BAA8B,QAAQ;CACvD,iBAAiB,UAAyB,MAAM,oBAAoB;AACtE;AAEA,MAAa,kCAcX,UACA,YACG,mCAAmC,UAAU,SAAS,cAAc,QAAQ,CAAC;AAoElF,SAAgB,6BAsBd,SACA,SAIA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,iCACE,UACA,QAAQ,SACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,kBAAkB,SAAS,gBAAgB;EACzE,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}

package/dist/drizzle/pg-sessions.d.mts

@@ -0,0 +1,238 @@
+import { AuthenticationAuthorityMapping, PendingAuthenticationMapping, SignedSessionValidityMapping, StatefulSessionMapping } from "./session-model.mjs";
+import { SessionStepUpMapping } from "./step-up-model.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Context, Effect } from "effect";
+import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
+import { AuthenticationAuthority, PendingAuthentication, SessionRepository, SessionStepUpPersistence, SessionUnavailable, SignedSessionValidity, StatefulSessionPersistence } from "@yielded/auth/Sessions";
+import { AnyRelations } from "drizzle-orm";
+import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
+import { AnyPgTable } from "drizzle-orm/pg-core";
+import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
+import { SqlError } from "effect/unstable/sql/SqlError";
+//#region src/drizzle/pg-sessions.d.ts
+type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
+type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
+declare const makePgAuthenticationAuthorityServices: <Claims, Subject extends AnyPgTable, Credential extends AnyPgTable, Flow extends AnyPgTable, Pending extends AnyPgTable, NativeSubjectId>(database: Database, mapping: AuthenticationAuthorityMapping<Claims, Subject, Credential, Flow, Pending, NativeSubjectId>) => Effect.Effect<{
+  authenticationAuthority: {
+    capture: (subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">, credentialIds: readonly string[]) => Effect.Effect<{
+      subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      securityRevision: import("@yielded/auth/Sessions").SecurityRevision;
+      credentials: {
+        credentialId: any;
+        revision: any;
+      }[];
+    }, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+    requirements: (evidence: {
+      readonly revision: {
+        readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+        readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly credentials: readonly {
+          readonly credentialId: string;
+          readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        }[];
+      };
+      readonly flowId: string & import("effect/Brand").Brand<"effect-auth/AuthenticationFlowId">;
+      readonly bindingDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+      readonly proofs: readonly [{
+        readonly method: string;
+        readonly credentialId: string;
+        readonly factors: readonly ("inherence" | "knowledge" | "possession")[];
+        readonly userVerified: boolean;
+        readonly phishingResistant: boolean;
+        readonly verifiedAt: import("effect/DateTime").Utc;
+      }, ...{
+        readonly method: string;
+        readonly credentialId: string;
+        readonly factors: readonly ("inherence" | "knowledge" | "possession")[];
+        readonly userVerified: boolean;
+        readonly phishingResistant: boolean;
+        readonly verifiedAt: import("effect/DateTime").Utc;
+      }[]];
+    }) => Effect.Effect<{
+      readonly alternatives: readonly [{
+        readonly factors: readonly ("inherence" | "knowledge" | "possession")[];
+        readonly userVerified: boolean;
+        readonly phishingResistant: boolean;
+        readonly minimumCredentials: number;
+      }, ...{
+        readonly factors: readonly ("inherence" | "knowledge" | "possession")[];
+        readonly userVerified: boolean;
+        readonly phishingResistant: boolean;
+        readonly minimumCredentials: number;
+      }[]];
+      readonly maximumAgeMillis: number;
+    }, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+    approve: <A>(input: {
+      readonly evidence: import("@yielded/auth/Sessions").AuthenticationEvidence;
+      readonly now: import("effect/DateTime").Utc;
+      readonly expiresAt: import("effect/DateTime").Utc;
+      readonly absoluteExpiresAt: import("effect/DateTime").Utc;
+      readonly pending?: import("@yielded/auth/Sessions").PendingConsumption;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Sessions").PendingAuthenticationInvalid | SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+  };
+}, never, LifecycleHooks>;
+declare const makePgPendingAuthenticationServices: <Claims, Subject extends AnyPgTable, Credential extends AnyPgTable, Pending extends AnyPgTable, Flow extends AnyPgTable, NativeSubjectId>(database: Database, mapping: PendingAuthenticationMapping<Claims, Subject, Credential, Pending, Flow, NativeSubjectId>) => Effect.Effect<{
+  pendingAuthentication: {
+    create: <A>(input: Omit<import("@yielded/auth/Sessions").PendingAuthenticationRecord<Claims>, "version">, now: import("effect/DateTime").Utc, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<import("@yielded/auth/Sessions").PendingAuthenticationRecord<Claims>, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Sessions").SessionConflict | SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+    context: (input: {
+      readonly digest: import("@yielded/auth/Schema").TokenDigest;
+      readonly now: import("effect/DateTime").Utc;
+    }) => Effect.Effect<Readonly<{
+      flowId: string & import("effect/Brand").Brand<"effect-auth/AuthenticationFlowId">;
+      bindingDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+      expiresAtMillis: number;
+      revision: Readonly<{
+        subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+        securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        credentials: readonly Readonly<{
+          credentialId: string;
+          revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        }>[];
+      }>;
+    }>, import("@yielded/auth/Sessions").PendingAuthenticationInvalid | SessionUnavailable, never>;
+    read: (input: {
+      readonly digest: import("@yielded/auth/Schema").TokenDigest;
+      readonly bindingDigest: import("@yielded/auth/Schema").TokenDigest;
+      readonly now: import("effect/DateTime").Utc;
+    }) => Effect.Effect<import("@yielded/auth/Sessions").PendingAuthenticationRecord<Claims>, import("@yielded/auth/Sessions").PendingAuthenticationInvalid | SessionUnavailable, never>;
+    reject: <A>(input: {
+      readonly digest: import("@yielded/auth/Schema").TokenDigest;
+      readonly bindingDigest: import("@yielded/auth/Schema").TokenDigest;
+      readonly now: import("effect/DateTime").Utc;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<{
+      readonly _tag: "Rejected";
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable, never>;
+  };
+}, never, LifecycleHooks>;
+declare const makePgStatefulSessionServices: <Claims, Subject extends AnyPgTable, Credential extends AnyPgTable, Session extends AnyPgTable, Flow extends AnyPgTable, Pending extends AnyPgTable, NativeSubjectId, NativeSessionId>(database: Database, mapping: StatefulSessionMapping<Claims, Subject, Credential, Session, Flow, Pending, NativeSubjectId, NativeSessionId>) => Effect.Effect<{
+  statefulSessionPersistence: {
+    establish: <A>(input: {
+      readonly session: Omit<import("@yielded/auth/Sessions").StatefulSessionRecord<Claims>, "sessionId" | "version">;
+      readonly evidence: import("@yielded/auth/Sessions").AuthenticationEvidence;
+      readonly pending?: import("@yielded/auth/Sessions").PendingConsumption;
+      readonly now: import("effect/DateTime").Utc;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<import("@yielded/auth/Sessions").StatefulSessionRecord<Claims>, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Sessions").PendingAuthenticationInvalid | import("@yielded/auth/Sessions").SessionConflict | SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+    verify: (input: {
+      readonly digest: import("@yielded/auth/Schema").TokenDigest;
+      readonly now: import("effect/DateTime").Utc;
+    }) => Effect.Effect<import("@yielded/auth/Sessions").StatefulSessionRecord<Claims>, import("@yielded/auth/Sessions").SessionInvalid | SessionUnavailable, never>;
+    rotate: <A>(input: {
+      readonly sessionId: import("@yielded/auth/Sessions").SessionId;
+      readonly expectedDigest: import("@yielded/auth/Schema").TokenDigest;
+      readonly expectedVersion: import("@yielded/auth/Sessions").SecurityRevision;
+      readonly expectedSecurityRevision: import("@yielded/auth/Sessions").SecurityRevision;
+      readonly nextDigest: import("@yielded/auth/Schema").TokenDigest;
+      readonly nextCredentialVersion: import("@yielded/auth/Sessions").SessionCredentialVersion;
+      readonly nextExpiresAt: import("effect/DateTime").Utc;
+      readonly now: import("effect/DateTime").Utc;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<import("@yielded/auth/Sessions").StatefulSessionRecord<Claims>, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Sessions").SessionConflict | SessionUnavailable, never>;
+    revokeDigest: <A>(digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<boolean, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable, never>;
+    revoke: <A>(input: {
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly sessionId: import("@yielded/auth/Sessions").SessionId;
+      readonly expectedSecurityRevision: import("@yielded/auth/Sessions").SecurityRevision;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+    revokeAll: <A>(input: {
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly expectedSecurityRevision: import("@yielded/auth/Sessions").SecurityRevision;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+  };
+  sessionRepository: {
+    list: (input: {
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly cursor?: string;
+      readonly limit: number;
+      readonly now: import("effect/DateTime").Utc;
+    }) => Effect.Effect<{
+      sessions: {
+        readonly sessionId: string & import("effect/Brand").Brand<"effect-auth/SessionId">;
+        readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+        readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly assurance: import("@yielded/auth/Operations").AuthenticationAssurance;
+        readonly issuedAt: import("effect/DateTime").Utc;
+        readonly expiresAt: import("effect/DateTime").Utc;
+        readonly absoluteExpiresAt: import("effect/DateTime").Utc;
+      }[];
+      nextCursor?: (string & import("effect/Brand").Brand<"effect-auth/SessionId">) | undefined;
+    }, SessionUnavailable, never>;
+  };
+}, never, LifecycleHooks>;
+declare const makePgSignedSessionValidityServices: <Subject extends AnyPgTable, Tombstone extends AnyPgTable, NativeSubjectId, NativeSessionId>(database: Database, mapping: SignedSessionValidityMapping<Subject, Tombstone, NativeSubjectId, NativeSessionId>) => Effect.Effect<{
+  signedSessionValidity: {
+    verify: (session: {
+      readonly sessionId: string & import("effect/Brand").Brand<"effect-auth/SessionId">;
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly assurance: import("@yielded/auth/Operations").AuthenticationAssurance;
+      readonly issuedAt: import("effect/DateTime").Utc;
+      readonly expiresAt: import("effect/DateTime").Utc;
+      readonly absoluteExpiresAt: import("effect/DateTime").Utc;
+    }, now: import("effect/DateTime").Utc) => Effect.Effect<undefined, import("@yielded/auth/Sessions").SessionInvalid | SessionUnavailable, never>;
+    revoke: <A>(input: {
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly sessionId: import("@yielded/auth/Sessions").SessionId;
+      readonly absoluteExpiresAt: import("effect/DateTime").Utc;
+      readonly expectedSecurityRevision: import("@yielded/auth/Sessions").SecurityRevision;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+    revokeAll: <A>(input: {
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly expectedSecurityRevision: import("@yielded/auth/Sessions").SecurityRevision;
+    }, prepare: import("@yielded/auth/Sessions").PrepareSessionCommit<void, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, SessionUnavailable | import("@yielded/auth/Sessions").StaleAuthentication, never>;
+  };
+}, never, LifecycleHooks>;
+declare function coordinatePgAuthenticationAuthority<Claims, D extends Database, S extends AnyPgTable, C extends AnyPgTable, F extends AnyPgTable, P extends AnyPgTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, AuthenticationAuthority> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgAuthenticationAuthority<Claims, D extends Database, S extends AnyPgTable, C extends AnyPgTable, F extends AnyPgTable, P extends AnyPgTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, AuthenticationAuthority | TxId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgPendingAuthentication<TargetId, Claims, D extends Database, S extends AnyPgTable, C extends AnyPgTable, P extends AnyPgTable, F extends AnyPgTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;
+  readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgPendingAuthentication<TargetId, Claims, D extends Database, S extends AnyPgTable, C extends AnyPgTable, P extends AnyPgTable, F extends AnyPgTable, NativeId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;
+  readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgStatefulSessions<PersistenceId, RepositoryId, Claims, D extends Database, S extends AnyPgTable, C extends AnyPgTable, Session extends AnyPgTable, F extends AnyPgTable, P extends AnyPgTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, F, P, NativeId, NativeSessionId>;
+  readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;
+  readonly repository: SuppliedService<RepositoryId, SessionRepository>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, PersistenceId | RepositoryId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgStatefulSessions<PersistenceId, RepositoryId, Claims, D extends Database, S extends AnyPgTable, C extends AnyPgTable, Session extends AnyPgTable, F extends AnyPgTable, P extends AnyPgTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, F, P, NativeId, NativeSessionId>;
+  readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;
+  readonly repository: SuppliedService<RepositoryId, SessionRepository>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, PersistenceId | RepositoryId | TxId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgSignedSessionValidity<TargetId, D extends Database, S extends AnyPgTable, T extends AnyPgTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;
+  readonly target: SuppliedService<TargetId, SignedSessionValidity>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgSignedSessionValidity<TargetId, D extends Database, S extends AnyPgTable, T extends AnyPgTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;
+  readonly target: SuppliedService<TargetId, SignedSessionValidity>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
+declare const makePgSessionStepUpServices: <Claims, Id, S extends AnyPgTable, C extends AnyPgTable, I extends AnyPgTable, Session extends AnyPgTable, T extends AnyPgTable, NativeId, NativeSessionId>(database: Database, mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>, target: Context.Service<Id, SessionStepUpPersistence<Claims>>) => Effect.Effect<{
+  sessionStepUpPersistence: SessionStepUpPersistence<Claims>;
+}, never, LifecycleHooks>;
+declare function coordinatePgSessionStepUp<Claims, Id, S extends AnyPgTable, C extends AnyPgTable, I extends AnyPgTable, Session extends AnyPgTable, T extends AnyPgTable, NativeId, NativeSessionId, D extends Database, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>;
+  readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, Id> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgSessionStepUp<Claims, Id, S extends AnyPgTable, C extends AnyPgTable, I extends AnyPgTable, Session extends AnyPgTable, T extends AnyPgTable, NativeId, NativeSessionId, D extends Database, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>;
+  readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, Id | TxId> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinatePgAuthenticationAuthority, coordinatePgPendingAuthentication, coordinatePgSessionStepUp, coordinatePgSignedSessionValidity, coordinatePgStatefulSessions, makePgAuthenticationAuthorityServices, makePgPendingAuthenticationServices, makePgSessionStepUpServices, makePgSignedSessionValidityServices, makePgStatefulSessionServices };
+//# sourceMappingURL=pg-sessions.d.mts.map

package/dist/drizzle/pg-sessions.mjs

@@ -0,0 +1,53 @@
+import { coordinateTargetAuthenticationAuthority, coordinateTargetPendingAuthentication, coordinateTargetSessionStepUp, coordinateTargetSignedSessionValidity, coordinateTargetStatefulSessions, makeTargetAuthenticationAuthorityServices, makeTargetPendingAuthenticationServices, makeTargetSessionStepUpServices, makeTargetSignedSessionValidityServices, makeTargetStatefulSessionServices, sqlClientSessionStandaloneGuard } from "./session-target.mjs";
+import { Context, Effect } from "effect";
+import { AuthenticationAuthority } from "@yielded/auth/Sessions";
+//#region src/drizzle/pg-sessions.ts
+const configuration = (database) => ({
+	mode: "interactive",
+	locking: true,
+	standaloneGuard: sqlClientSessionStandaloneGuard(database)
+});
+const makePgAuthenticationAuthorityServices = (database, mapping) => makeTargetAuthenticationAuthorityServices(database, mapping, configuration(database));
+const makePgPendingAuthenticationServices = (database, mapping) => makeTargetPendingAuthenticationServices(database, mapping, configuration(database));
+const makePgStatefulSessionServices = (database, mapping) => makeTargetStatefulSessionServices(database, mapping, configuration(database));
+const makePgSignedSessionValidityServices = (database, mapping) => makeTargetSignedSessionValidityServices(database, mapping, configuration(database));
+function coordinatePgAuthenticationAuthority(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetAuthenticationAuthority(database, options.mapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(AuthenticationAuthority, services.authenticationAuthority);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+function coordinatePgPendingAuthentication(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPendingAuthentication(database, options.mapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(options.target, services.pendingAuthentication);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+function coordinatePgStatefulSessions(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetStatefulSessions(database, options.mapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(options.persistence, services.statefulSessionPersistence).pipe(Context.add(options.repository, services.sessionRepository));
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+function coordinatePgSignedSessionValidity(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetSignedSessionValidity(database, options.mapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(options.target, services.signedSessionValidity);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+const makePgSessionStepUpServices = (database, mapping, target) => makeTargetSessionStepUpServices(database, mapping, target, configuration(database));
+function coordinatePgSessionStepUp(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetSessionStepUp(database, options.mapping, options.target, configuration(database), (transaction, services) => {
+		const provided = Context.make(options.target, services.sessionStepUpPersistence);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+//#endregion
+export { coordinatePgAuthenticationAuthority, coordinatePgPendingAuthentication, coordinatePgSessionStepUp, coordinatePgSignedSessionValidity, coordinatePgStatefulSessions, makePgAuthenticationAuthorityServices, makePgPendingAuthenticationServices, makePgSessionStepUpServices, makePgSignedSessionValidityServices, makePgStatefulSessionServices };
+
+//# sourceMappingURL=pg-sessions.mjs.map

package/dist/drizzle/pg-sessions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-sessions.mjs","names":[],"sources":["../../src/drizzle/pg-sessions.ts"],"sourcesContent":["import type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\nimport {\n  AuthenticationAuthority,\n  type SessionUnavailable,\n  type PendingAuthentication,\n  type SessionRepository,\n  type SignedSessionValidity,\n  type StatefulSessionPersistence,\n  type SessionStepUpPersistence,\n} from \"@yielded/auth/Sessions\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport type {\n  AuthenticationAuthorityMapping,\n  PendingAuthenticationMapping,\n  SignedSessionValidityMapping,\n  StatefulSessionMapping,\n} from \"./session-model\";\nimport {\n  coordinateTargetAuthenticationAuthority,\n  coordinateTargetPendingAuthentication,\n  coordinateTargetSignedSessionValidity,\n  coordinateTargetStatefulSessions,\n  makeTargetAuthenticationAuthorityServices,\n  makeTargetPendingAuthenticationServices,\n  makeTargetSignedSessionValidityServices,\n  makeTargetStatefulSessionServices,\n  sqlClientSessionStandaloneGuard,\n  makeTargetSessionStepUpServices,\n  coordinateTargetSessionStepUp,\n} from \"./session-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nconst configuration = (database: Database) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientSessionStandaloneGuard(database),\n});\n\nexport const makePgAuthenticationAuthorityServices = <\n  Claims,\n  Subject extends AnyPgTable,\n  Credential extends AnyPgTable,\n  Flow extends AnyPgTable,\n  Pending extends AnyPgTable,\n  NativeSubjectId,\n>(\n  database: Database,\n  mapping: AuthenticationAuthorityMapping<\n    Claims,\n    Subject,\n    Credential,\n    Flow,\n    Pending,\n    NativeSubjectId\n  >,\n) => makeTargetAuthenticationAuthorityServices<Claims>(database, mapping, configuration(database));\n\nexport const makePgPendingAuthenticationServices = <\n  Claims,\n  Subject extends AnyPgTable,\n  Credential extends AnyPgTable,\n  Pending extends AnyPgTable,\n  Flow extends AnyPgTable,\n  NativeSubjectId,\n>(\n  database: Database,\n  mapping: PendingAuthenticationMapping<\n    Claims,\n    Subject,\n    Credential,\n    Pending,\n    Flow,\n    NativeSubjectId\n  >,\n) => makeTargetPendingAuthenticationServices<Claims>(database, mapping, configuration(database));\n\nexport const makePgStatefulSessionServices = <\n  Claims,\n  Subject extends AnyPgTable,\n  Credential extends AnyPgTable,\n  Session extends AnyPgTable,\n  Flow extends AnyPgTable,\n  Pending extends AnyPgTable,\n  NativeSubjectId,\n  NativeSessionId,\n>(\n  database: Database,\n  mapping: StatefulSessionMapping<\n    Claims,\n    Subject,\n    Credential,\n    Session,\n    Flow,\n    Pending,\n    NativeSubjectId,\n    NativeSessionId\n  >,\n) => makeTargetStatefulSessionServices<Claims>(database, mapping, configuration(database));\n\nexport const makePgSignedSessionValidityServices = <\n  Subject extends AnyPgTable,\n  Tombstone extends AnyPgTable,\n  NativeSubjectId,\n  NativeSessionId,\n>(\n  database: Database,\n  mapping: SignedSessionValidityMapping<Subject, Tombstone, NativeSubjectId, NativeSessionId>,\n) => makeTargetSignedSessionValidityServices(database, mapping, configuration(database));\n\nexport function coordinatePgAuthenticationAuthority<\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  F extends AnyPgTable,\n  P extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, AuthenticationAuthority> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgAuthenticationAuthority<\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  F extends AnyPgTable,\n  P extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, AuthenticationAuthority | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgAuthenticationAuthority<\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  F extends AnyPgTable,\n  P extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, F, P, NativeId>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, AuthenticationAuthority> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetAuthenticationAuthority<\n      Claims,\n      TransactionOf<D>,\n      A,\n      E,\n      Exclude<R, AuthenticationAuthority>\n    >(\n      database,\n      options.mapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly authenticationAuthority: AuthenticationAuthority[\"Service\"] },\n      ) => {\n        const provided = Context.make(AuthenticationAuthority, services.authenticationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport function coordinatePgPendingAuthentication<\n  TargetId,\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  P extends AnyPgTable,\n  F extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;\n    readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPendingAuthentication<\n  TargetId,\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  P extends AnyPgTable,\n  F extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;\n    readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPendingAuthentication<\n  TargetId,\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  P extends AnyPgTable,\n  F extends AnyPgTable,\n  NativeId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, F, NativeId>;\n    readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPendingAuthentication<Claims, TransactionOf<D>, A, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly pendingAuthentication: PendingAuthentication<Claims> },\n      ) => {\n        const provided = Context.make(options.target, services.pendingAuthentication);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport function coordinatePgStatefulSessions<\n  PersistenceId,\n  RepositoryId,\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  Session extends AnyPgTable,\n  F extends AnyPgTable,\n  P extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: StatefulSessionMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      Session,\n      F,\n      P,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n    readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PersistenceId | RepositoryId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgStatefulSessions<\n  PersistenceId,\n  RepositoryId,\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  Session extends AnyPgTable,\n  F extends AnyPgTable,\n  P extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: StatefulSessionMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      Session,\n      F,\n      P,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n    readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PersistenceId | RepositoryId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgStatefulSessions<\n  PersistenceId,\n  RepositoryId,\n  Claims,\n  D extends Database,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  Session extends AnyPgTable,\n  F extends AnyPgTable,\n  P extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: StatefulSessionMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      Session,\n      F,\n      P,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n    readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, PersistenceId | RepositoryId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetStatefulSessions<\n      Claims,\n      TransactionOf<D>,\n      A,\n      E,\n      Exclude<R, PersistenceId | RepositoryId>\n    >(\n      database,\n      options.mapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: {\n          readonly statefulSessionPersistence: StatefulSessionPersistence<Claims>;\n          readonly sessionRepository: SessionRepository;\n        },\n      ) => {\n        const provided = Context.make(\n          options.persistence,\n          services.statefulSessionPersistence,\n        ).pipe(Context.add(options.repository, services.sessionRepository));\n\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport function coordinatePgSignedSessionValidity<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;\n    readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgSignedSessionValidity<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;\n    readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgSignedSessionValidity<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: SignedSessionValidityMapping<S, T, NativeId, NativeSessionId>;\n    readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetSignedSessionValidity<TransactionOf<D>, A, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly signedSessionValidity: SignedSessionValidity },\n      ) => {\n        const provided = Context.make(options.target, services.signedSessionValidity);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nimport type { SessionStepUpMapping } from \"./step-up-model\";\n\nexport const makePgSessionStepUpServices = <\n  Claims,\n  Id,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  I extends AnyPgTable,\n  Session extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n>(\n  database: Database,\n  mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>,\n  target: Context.Service<Id, SessionStepUpPersistence<Claims>>,\n) => makeTargetSessionStepUpServices(database, mapping, target, configuration(database));\n\nexport function coordinatePgSessionStepUp<\n  Claims,\n  Id,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  I extends AnyPgTable,\n  Session extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  D extends Database,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: SessionStepUpMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      I,\n      Session,\n      T,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, Id> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgSessionStepUp<\n  Claims,\n  Id,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  I extends AnyPgTable,\n  Session extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  D extends Database,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: SessionStepUpMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      I,\n      Session,\n      T,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, Id | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgSessionStepUp<\n  Claims,\n  Id,\n  S extends AnyPgTable,\n  C extends AnyPgTable,\n  I extends AnyPgTable,\n  Session extends AnyPgTable,\n  T extends AnyPgTable,\n  NativeId,\n  NativeSessionId,\n  D extends Database,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: SessionStepUpMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      I,\n      Session,\n      T,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  E | SessionUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, Id> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetSessionStepUp<Claims, Id, TransactionOf<D>, A, E, Exclude<R, Id>>(\n      database,\n      options.mapping,\n      options.target,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly sessionStepUpPersistence: SessionStepUpPersistence<Claims> },\n      ) => {\n        const provided = Context.make(options.target, services.sessionStepUpPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;AAyCA,MAAM,iBAAiB,cAAwB;CAC7C,MAAM;CACN,SAAS;CACT,iBAAiB,gCAAgC,QAAQ;AAC3D;AAEA,MAAa,yCAQX,UACA,YAQG,0CAAkD,UAAU,SAAS,cAAc,QAAQ,CAAC;AAEjG,MAAa,uCAQX,UACA,YAQG,wCAAgD,UAAU,SAAS,cAAc,QAAQ,CAAC;AAE/F,MAAa,iCAUX,UACA,YAUG,kCAA0C,UAAU,SAAS,cAAc,QAAQ,CAAC;AAEzF,MAAa,uCAMX,UACA,YACG,wCAAwC,UAAU,SAAS,cAAc,QAAQ,CAAC;AAwDvF,SAAgB,oCAgBd,SACA,SAIA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,wCAOE,UACA,QAAQ,SACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;EACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AA4DA,SAAgB,kCAiBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,sCACE,UACA,QAAQ,SACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAsFA,SAAgB,6BAoBd,SACA,SAeA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,iCAOE,UACA,QAAQ,SACR,cAAc,QAAQ,IAEpB,aACA,aAIG;EACH,MAAM,WAAW,QAAQ,KACvB,QAAQ,aACR,SAAS,0BACX,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,YAAY,SAAS,iBAAiB,CAAC;EAElE,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAwDA,SAAgB,kCAed,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,sCACE,UACA,QAAQ,SACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAIA,MAAa,+BAWX,UACA,SACA,WACG,gCAAgC,UAAU,SAAS,QAAQ,cAAc,QAAQ,CAAC;AAkFvF,SAAgB,0BAmBd,SACA,SAcA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,8BACE,UACA,QAAQ,SACR,QAAQ,QACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,wBAAwB;EAC/E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}

package/dist/drizzle/pg.d.mts

@@ -0,0 +1,81 @@
+import { AuthStoreTables, AuthTables, ChallengeConsumeDecision, ConsumeDecision, ExternalIdentityTables, OAuthStateTables, SubjectProvisioningTables } from "./model.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Context, Effect, Layer } from "effect";
+import { AuthStoreDecisions } from "@yielded/auth/Persistence";
+import { ConsumeChallenge, ConsumeRegistration, NewChallenge, NewRegistration, SubjectId, TokenDigest, VerifiedEmail } from "@yielded/auth/Schema";
+import { ExternalIdentity, ExternalIdentityMutation, IdentityConflict, IdentityUnavailable, SubjectProvisioner, SubjectProvisioningInput } from "@yielded/auth/Identity";
+import { AuthStore, EmailOtpRejected } from "@yielded/auth/AuthStore";
+import { AuthStoreError, InvalidRegistration } from "@yielded/auth/Errors";
+import { InvalidOAuthState, OAuthState, OAuthStateDecisions, OAuthStateStore } from "@yielded/auth/OAuth";
+import { AnyRelations } from "drizzle-orm";
+import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
+import { AnyPgTable } from "drizzle-orm/pg-core";
+import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
+import { SqlError } from "effect/unstable/sql/SqlError";
+//#region src/drizzle/pg.d.ts
+type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
+type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
+declare const makePgAuthStoreServices: <C extends AnyPgTable, R extends AnyPgTable>(database: Database, mapping: AuthStoreTables<C, R>) => {
+  readonly authStore: {
+    readonly issueChallenge: (input: NewChallenge) => Effect.Effect<void, import("@yielded/auth/AuthStore").IssueChallengeError>;
+    readonly consumeChallenge: (input: ConsumeChallenge) => Effect.Effect<VerifiedEmail, EmailOtpRejected | AuthStoreError>;
+    readonly issueRegistration: (input: NewRegistration) => Effect.Effect<void, AuthStoreError>;
+    readonly inspectRegistration: (tokenDigest: TokenDigest) => Effect.Effect<import("@yielded/auth/Schema").PendingRegistration, InvalidRegistration | AuthStoreError>;
+    readonly consumeRegistration: (input: ConsumeRegistration) => Effect.Effect<void, InvalidRegistration | AuthStoreError>;
+  };
+  readonly decisions: {
+    readonly consumeChallenge: (input: ConsumeChallenge) => Effect.Effect<ChallengeConsumeDecision, AuthStoreError, never>;
+    readonly consumeRegistration: (input: ConsumeRegistration) => Effect.Effect<ConsumeDecision<void>, AuthStoreError, never>;
+  };
+};
+declare const makePgOAuthStateServices: <S extends AnyPgTable>(database: Database, mapping: OAuthStateTables<S>) => {
+  readonly oauthStateStore: {
+    readonly issue: (state: OAuthState) => Effect.Effect<void, AuthStoreError>;
+    readonly consume: (stateDigest: TokenDigest) => Effect.Effect<OAuthState, InvalidOAuthState | AuthStoreError>;
+  };
+  readonly decisions: {
+    readonly consumeOAuthState: (digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) => Effect.Effect<ConsumeDecision<OAuthState>, AuthStoreError, never>;
+  };
+};
+/**
+ * Owns the native outer commit. Keep rejection as a decision value inside the
+ * owner; interruption before commit rolls back. Retry an unknown commit outcome
+ * only with the same stable request identity.
+ */
+declare function coordinatePgAuthStoreTransaction<D extends Database, C extends AnyPgTable, R extends AnyPgTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: AuthStoreTables<C, R>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions> | DatabaseRequirements>;
+declare function coordinatePgAuthStoreTransaction<D extends Database, C extends AnyPgTable, R extends AnyPgTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: AuthStoreTables<C, R>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions | TxId> | DatabaseRequirements>;
+declare function coordinatePgOAuthStateTransaction<D extends Database, S extends AnyPgTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthStateTables<S>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, OAuthStateDecisions> | DatabaseRequirements>;
+declare function coordinatePgOAuthStateTransaction<D extends Database, S extends AnyPgTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthStateTables<S>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, OAuthStateDecisions | TxId> | DatabaseRequirements>;
+declare function coordinatePgAuthTransaction<D extends Database, C extends AnyPgTable, R extends AnyPgTable, S extends AnyPgTable, A, E, Requirements, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: AuthTables<C, R, S>;
+  readonly transaction?: never;
+}, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions | OAuthStateDecisions> | DatabaseRequirements>;
+declare function coordinatePgAuthTransaction<D extends Database, C extends AnyPgTable, R extends AnyPgTable, S extends AnyPgTable, A, E, Requirements, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: AuthTables<C, R, S>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<A, E, Requirements>): Effect.Effect<A, E | DatabaseError | SqlError, Exclude<Requirements, AuthStoreDecisions | OAuthStateDecisions | TxId> | DatabaseRequirements>;
+declare const makePgSubjectProvisioningServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, Request extends AnyPgTable, NativeId>(database: Database, mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => {
+  readonly subjectProvisioner: {
+    readonly provision: (input: SubjectProvisioningInput) => Effect.Effect<import("@yielded/auth/Identity").ProvisioningResult, IdentityConflict | IdentityUnavailable>;
+  };
+};
+declare const makePgExternalIdentityServices: <Subject extends AnyPgTable, External extends AnyPgTable, NativeId>(database: Database, mapping: ExternalIdentityTables<Subject, External, NativeId>) => {
+  readonly externalIdentityMutation: {
+    readonly bind: (subjectId: SubjectId, identity: ExternalIdentity) => Effect.Effect<void, IdentityConflict | IdentityUnavailable>;
+  };
+};
+//#endregion
+export { coordinatePgAuthStoreTransaction, coordinatePgAuthTransaction, coordinatePgOAuthStateTransaction, makePgAuthStoreServices, makePgExternalIdentityServices, makePgOAuthStateServices, makePgSubjectProvisioningServices };
+//# sourceMappingURL=pg.d.mts.map