@yielded/auth-persistence 0.1.0-beta.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (526) hide show
  1. package/README.md +21 -0
  2. package/dist/Drizzle.d.mts +28 -0
  3. package/dist/Drizzle.mjs +28 -0
  4. package/dist/DrizzleD1.d.mts +963 -0
  5. package/dist/DrizzleD1.mjs +29 -0
  6. package/dist/DrizzleD1.mjs.map +1 -0
  7. package/dist/DrizzleLibsql.d.mts +2284 -0
  8. package/dist/DrizzleLibsql.mjs +92 -0
  9. package/dist/DrizzleLibsql.mjs.map +1 -0
  10. package/dist/DrizzleMysql2.d.mts +1820 -0
  11. package/dist/DrizzleMysql2.mjs +55 -0
  12. package/dist/DrizzleMysql2.mjs.map +1 -0
  13. package/dist/DrizzlePglite.d.mts +1826 -0
  14. package/dist/DrizzlePglite.mjs +53 -0
  15. package/dist/DrizzlePglite.mjs.map +1 -0
  16. package/dist/DrizzlePostgres.d.mts +1826 -0
  17. package/dist/DrizzlePostgres.mjs +53 -0
  18. package/dist/DrizzlePostgres.mjs.map +1 -0
  19. package/dist/DrizzleSqliteBun.d.mts +2279 -0
  20. package/dist/DrizzleSqliteBun.mjs +70 -0
  21. package/dist/DrizzleSqliteBun.mjs.map +1 -0
  22. package/dist/DrizzleSqliteDo.d.mts +2329 -0
  23. package/dist/DrizzleSqliteDo.mjs +105 -0
  24. package/dist/DrizzleSqliteDo.mjs.map +1 -0
  25. package/dist/DrizzleSqliteNode.d.mts +2279 -0
  26. package/dist/DrizzleSqliteNode.mjs +70 -0
  27. package/dist/DrizzleSqliteNode.mjs.map +1 -0
  28. package/dist/DrizzleSqliteWasm.d.mts +2282 -0
  29. package/dist/DrizzleSqliteWasm.mjs +70 -0
  30. package/dist/DrizzleSqliteWasm.mjs.map +1 -0
  31. package/dist/drizzle/D1BatchStatements.d.mts +11 -0
  32. package/dist/drizzle/D1BatchStatements.mjs +8 -0
  33. package/dist/drizzle/D1BatchStatements.mjs.map +1 -0
  34. package/dist/drizzle/PasswordPreparedPostconditions.mjs +12 -0
  35. package/dist/drizzle/PasswordPreparedPostconditions.mjs.map +1 -0
  36. package/dist/drizzle/SuppliedService.d.mts +10 -0
  37. package/dist/drizzle/d1-emails.d.mts +62 -0
  38. package/dist/drizzle/d1-emails.mjs +580 -0
  39. package/dist/drizzle/d1-emails.mjs.map +1 -0
  40. package/dist/drizzle/d1-generated-statement.d.mts +2 -0
  41. package/dist/drizzle/d1-generated-statement.mjs +79 -0
  42. package/dist/drizzle/d1-generated-statement.mjs.map +1 -0
  43. package/dist/drizzle/d1-identity.d.mts +31 -0
  44. package/dist/drizzle/d1-identity.mjs +119 -0
  45. package/dist/drizzle/d1-identity.mjs.map +1 -0
  46. package/dist/drizzle/d1-oauth.d.mts +301 -0
  47. package/dist/drizzle/d1-oauth.mjs +76 -0
  48. package/dist/drizzle/d1-oauth.mjs.map +1 -0
  49. package/dist/drizzle/d1-passkey.d.mts +51 -0
  50. package/dist/drizzle/d1-passkey.mjs +95 -0
  51. package/dist/drizzle/d1-passkey.mjs.map +1 -0
  52. package/dist/drizzle/d1-password-prepared.d.mts +25 -0
  53. package/dist/drizzle/d1-password-prepared.mjs +461 -0
  54. package/dist/drizzle/d1-password-prepared.mjs.map +1 -0
  55. package/dist/drizzle/d1-passwords.d.mts +87 -0
  56. package/dist/drizzle/d1-passwords.mjs +1004 -0
  57. package/dist/drizzle/d1-passwords.mjs.map +1 -0
  58. package/dist/drizzle/d1-phone.d.mts +26 -0
  59. package/dist/drizzle/d1-phone.mjs +30 -0
  60. package/dist/drizzle/d1-phone.mjs.map +1 -0
  61. package/dist/drizzle/d1-planning.d.mts +12 -0
  62. package/dist/drizzle/d1-planning.mjs +43 -0
  63. package/dist/drizzle/d1-planning.mjs.map +1 -0
  64. package/dist/drizzle/d1-proofs.d.mts +80 -0
  65. package/dist/drizzle/d1-proofs.mjs +830 -0
  66. package/dist/drizzle/d1-proofs.mjs.map +1 -0
  67. package/dist/drizzle/d1-sessions.d.mts +67 -0
  68. package/dist/drizzle/d1-sessions.mjs +966 -0
  69. package/dist/drizzle/d1-sessions.mjs.map +1 -0
  70. package/dist/drizzle/d1-totp.d.mts +26 -0
  71. package/dist/drizzle/d1-totp.mjs +27 -0
  72. package/dist/drizzle/d1-totp.mjs.map +1 -0
  73. package/dist/drizzle/email-model.d.mts +354 -0
  74. package/dist/drizzle/email-model.mjs +21 -0
  75. package/dist/drizzle/email-model.mjs.map +1 -0
  76. package/dist/drizzle/email-registration.d.mts +30 -0
  77. package/dist/drizzle/email-registration.mjs +238 -0
  78. package/dist/drizzle/email-registration.mjs.map +1 -0
  79. package/dist/drizzle/email-sql.d.mts +4 -0
  80. package/dist/drizzle/email-sql.mjs +9 -0
  81. package/dist/drizzle/email-sql.mjs.map +1 -0
  82. package/dist/drizzle/email-target.d.mts +20 -0
  83. package/dist/drizzle/email-target.mjs +72 -0
  84. package/dist/drizzle/email-target.mjs.map +1 -0
  85. package/dist/drizzle/model.d.mts +250 -0
  86. package/dist/drizzle/model.mjs +58 -0
  87. package/dist/drizzle/model.mjs.map +1 -0
  88. package/dist/drizzle/mysql-emails.d.mts +71 -0
  89. package/dist/drizzle/mysql-emails.mjs +38 -0
  90. package/dist/drizzle/mysql-emails.mjs.map +1 -0
  91. package/dist/drizzle/mysql-identity.d.mts +22 -0
  92. package/dist/drizzle/mysql-identity.mjs +94 -0
  93. package/dist/drizzle/mysql-identity.mjs.map +1 -0
  94. package/dist/drizzle/mysql-password-prepared.d.mts +30 -0
  95. package/dist/drizzle/mysql-password-prepared.mjs +16 -0
  96. package/dist/drizzle/mysql-password-prepared.mjs.map +1 -0
  97. package/dist/drizzle/mysql-passwords.d.mts +86 -0
  98. package/dist/drizzle/mysql-passwords.mjs +38 -0
  99. package/dist/drizzle/mysql-passwords.mjs.map +1 -0
  100. package/dist/drizzle/mysql-proofs.d.mts +75 -0
  101. package/dist/drizzle/mysql-proofs.mjs +23 -0
  102. package/dist/drizzle/mysql-proofs.mjs.map +1 -0
  103. package/dist/drizzle/mysql-sessions.d.mts +237 -0
  104. package/dist/drizzle/mysql-sessions.mjs +53 -0
  105. package/dist/drizzle/mysql-sessions.mjs.map +1 -0
  106. package/dist/drizzle/mysql.d.mts +70 -0
  107. package/dist/drizzle/mysql.mjs +218 -0
  108. package/dist/drizzle/mysql.mjs.map +1 -0
  109. package/dist/drizzle/oauth-accounts.mjs +358 -0
  110. package/dist/drizzle/oauth-accounts.mjs.map +1 -0
  111. package/dist/drizzle/oauth-connected-access.mjs +210 -0
  112. package/dist/drizzle/oauth-connected-access.mjs.map +1 -0
  113. package/dist/drizzle/oauth-connected-collection.mjs +202 -0
  114. package/dist/drizzle/oauth-connected-collection.mjs.map +1 -0
  115. package/dist/drizzle/oauth-connected-custody.mjs +146 -0
  116. package/dist/drizzle/oauth-connected-custody.mjs.map +1 -0
  117. package/dist/drizzle/oauth-connected-drivers.mjs +76 -0
  118. package/dist/drizzle/oauth-connected-drivers.mjs.map +1 -0
  119. package/dist/drizzle/oauth-connected-flow.mjs +247 -0
  120. package/dist/drizzle/oauth-connected-flow.mjs.map +1 -0
  121. package/dist/drizzle/oauth-connected-input.mjs +103 -0
  122. package/dist/drizzle/oauth-connected-input.mjs.map +1 -0
  123. package/dist/drizzle/oauth-connected-maintenance.mjs +214 -0
  124. package/dist/drizzle/oauth-connected-maintenance.mjs.map +1 -0
  125. package/dist/drizzle/oauth-connected-management.mjs +228 -0
  126. package/dist/drizzle/oauth-connected-management.mjs.map +1 -0
  127. package/dist/drizzle/oauth-connected-model.d.mts +278 -0
  128. package/dist/drizzle/oauth-connected-model.mjs +22 -0
  129. package/dist/drizzle/oauth-connected-model.mjs.map +1 -0
  130. package/dist/drizzle/oauth-connected-reference.d.mts +17 -0
  131. package/dist/drizzle/oauth-connected-reference.mjs +53 -0
  132. package/dist/drizzle/oauth-connected-reference.mjs.map +1 -0
  133. package/dist/drizzle/oauth-connected-settlement.mjs +117 -0
  134. package/dist/drizzle/oauth-connected-settlement.mjs.map +1 -0
  135. package/dist/drizzle/oauth-connected-state.d.mts +14 -0
  136. package/dist/drizzle/oauth-connected-state.mjs +422 -0
  137. package/dist/drizzle/oauth-connected-state.mjs.map +1 -0
  138. package/dist/drizzle/oauth-connected-target.d.mts +753 -0
  139. package/dist/drizzle/oauth-connected-target.mjs +91 -0
  140. package/dist/drizzle/oauth-connected-target.mjs.map +1 -0
  141. package/dist/drizzle/oauth-drivers.mjs +51 -0
  142. package/dist/drizzle/oauth-drivers.mjs.map +1 -0
  143. package/dist/drizzle/oauth-flow.d.mts +5 -0
  144. package/dist/drizzle/oauth-flow.mjs +253 -0
  145. package/dist/drizzle/oauth-flow.mjs.map +1 -0
  146. package/dist/drizzle/oauth-input.mjs +127 -0
  147. package/dist/drizzle/oauth-input.mjs.map +1 -0
  148. package/dist/drizzle/oauth-model.d.mts +463 -0
  149. package/dist/drizzle/oauth-model.mjs +49 -0
  150. package/dist/drizzle/oauth-model.mjs.map +1 -0
  151. package/dist/drizzle/oauth-mysql.mjs +8 -0
  152. package/dist/drizzle/oauth-mysql.mjs.map +1 -0
  153. package/dist/drizzle/oauth-owner.d.mts +4 -0
  154. package/dist/drizzle/oauth-owner.mjs +10 -0
  155. package/dist/drizzle/oauth-owner.mjs.map +1 -0
  156. package/dist/drizzle/oauth-registration.d.mts +6 -0
  157. package/dist/drizzle/oauth-registration.mjs +374 -0
  158. package/dist/drizzle/oauth-registration.mjs.map +1 -0
  159. package/dist/drizzle/oauth-state.mjs +107 -0
  160. package/dist/drizzle/oauth-state.mjs.map +1 -0
  161. package/dist/drizzle/oauth-target.d.mts +111 -0
  162. package/dist/drizzle/oauth-target.mjs +246 -0
  163. package/dist/drizzle/oauth-target.mjs.map +1 -0
  164. package/dist/drizzle/passkey-drivers.mjs +34 -0
  165. package/dist/drizzle/passkey-drivers.mjs.map +1 -0
  166. package/dist/drizzle/passkey-kernel.mjs +8 -0
  167. package/dist/drizzle/passkey-kernel.mjs.map +1 -0
  168. package/dist/drizzle/passkey-model.d.mts +272 -0
  169. package/dist/drizzle/passkey-model.mjs +34 -0
  170. package/dist/drizzle/passkey-model.mjs.map +1 -0
  171. package/dist/drizzle/passkey-registration-ceremony-model.d.mts +50 -0
  172. package/dist/drizzle/passkey-registration-ceremony-model.mjs +18 -0
  173. package/dist/drizzle/passkey-registration-ceremony-model.mjs.map +1 -0
  174. package/dist/drizzle/passkey-state.mjs +7 -0
  175. package/dist/drizzle/passkey-state.mjs.map +1 -0
  176. package/dist/drizzle/passkey-target.d.mts +9 -0
  177. package/dist/drizzle/passkey-target.mjs +7 -0
  178. package/dist/drizzle/passkey-target.mjs.map +1 -0
  179. package/dist/drizzle/passkey-write-drivers.mjs +32 -0
  180. package/dist/drizzle/passkey-write-drivers.mjs.map +1 -0
  181. package/dist/drizzle/passkey-write-model.d.mts +190 -0
  182. package/dist/drizzle/passkey-write-model.mjs +13 -0
  183. package/dist/drizzle/passkey-write-model.mjs.map +1 -0
  184. package/dist/drizzle/passkey-write-target.d.mts +11 -0
  185. package/dist/drizzle/passkey-write-target.mjs +7 -0
  186. package/dist/drizzle/passkey-write-target.mjs.map +1 -0
  187. package/dist/drizzle/password-model.d.mts +329 -0
  188. package/dist/drizzle/password-model.mjs +23 -0
  189. package/dist/drizzle/password-model.mjs.map +1 -0
  190. package/dist/drizzle/password-prepared-model.d.mts +94 -0
  191. package/dist/drizzle/password-prepared-model.mjs +11 -0
  192. package/dist/drizzle/password-prepared-model.mjs.map +1 -0
  193. package/dist/drizzle/password-prepared-sql.mjs +390 -0
  194. package/dist/drizzle/password-prepared-sql.mjs.map +1 -0
  195. package/dist/drizzle/password-prepared-state.mjs +104 -0
  196. package/dist/drizzle/password-prepared-state.mjs.map +1 -0
  197. package/dist/drizzle/password-prepared-target.d.mts +12 -0
  198. package/dist/drizzle/password-prepared-target.mjs +56 -0
  199. package/dist/drizzle/password-prepared-target.mjs.map +1 -0
  200. package/dist/drizzle/password-registration.d.mts +19 -0
  201. package/dist/drizzle/password-registration.mjs +135 -0
  202. package/dist/drizzle/password-registration.mjs.map +1 -0
  203. package/dist/drizzle/password-sql.d.mts +5 -0
  204. package/dist/drizzle/password-sql.mjs +9 -0
  205. package/dist/drizzle/password-sql.mjs.map +1 -0
  206. package/dist/drizzle/password-target.d.mts +17 -0
  207. package/dist/drizzle/password-target.mjs +61 -0
  208. package/dist/drizzle/password-target.mjs.map +1 -0
  209. package/dist/drizzle/pg-emails.d.mts +72 -0
  210. package/dist/drizzle/pg-emails.mjs +38 -0
  211. package/dist/drizzle/pg-emails.mjs.map +1 -0
  212. package/dist/drizzle/pg-password-prepared.d.mts +31 -0
  213. package/dist/drizzle/pg-password-prepared.mjs +16 -0
  214. package/dist/drizzle/pg-password-prepared.mjs.map +1 -0
  215. package/dist/drizzle/pg-passwords.d.mts +87 -0
  216. package/dist/drizzle/pg-passwords.mjs +38 -0
  217. package/dist/drizzle/pg-passwords.mjs.map +1 -0
  218. package/dist/drizzle/pg-proofs.d.mts +76 -0
  219. package/dist/drizzle/pg-proofs.mjs +22 -0
  220. package/dist/drizzle/pg-proofs.mjs.map +1 -0
  221. package/dist/drizzle/pg-sessions.d.mts +238 -0
  222. package/dist/drizzle/pg-sessions.mjs +53 -0
  223. package/dist/drizzle/pg-sessions.mjs.map +1 -0
  224. package/dist/drizzle/pg.d.mts +81 -0
  225. package/dist/drizzle/pg.mjs +290 -0
  226. package/dist/drizzle/pg.mjs.map +1 -0
  227. package/dist/drizzle/phone-model.d.mts +115 -0
  228. package/dist/drizzle/phone-model.mjs +39 -0
  229. package/dist/drizzle/phone-model.mjs.map +1 -0
  230. package/dist/drizzle/phone-state.mjs +16 -0
  231. package/dist/drizzle/phone-state.mjs.map +1 -0
  232. package/dist/drizzle/phone-target.d.mts +17 -0
  233. package/dist/drizzle/phone-target.mjs +170 -0
  234. package/dist/drizzle/phone-target.mjs.map +1 -0
  235. package/dist/drizzle/proof-model.d.mts +286 -0
  236. package/dist/drizzle/proof-model.mjs +17 -0
  237. package/dist/drizzle/proof-model.mjs.map +1 -0
  238. package/dist/drizzle/proof-sql.d.mts +4 -0
  239. package/dist/drizzle/proof-sql.mjs +8 -0
  240. package/dist/drizzle/proof-sql.mjs.map +1 -0
  241. package/dist/drizzle/proof-target.d.mts +12 -0
  242. package/dist/drizzle/proof-target.mjs +36 -0
  243. package/dist/drizzle/proof-target.mjs.map +1 -0
  244. package/dist/drizzle/query-operations.mjs +26 -0
  245. package/dist/drizzle/query-operations.mjs.map +1 -0
  246. package/dist/drizzle/session-model.d.mts +200 -0
  247. package/dist/drizzle/session-model.mjs +20 -0
  248. package/dist/drizzle/session-model.mjs.map +1 -0
  249. package/dist/drizzle/session-sql.mjs +8 -0
  250. package/dist/drizzle/session-sql.mjs.map +1 -0
  251. package/dist/drizzle/session-target.d.mts +28 -0
  252. package/dist/drizzle/session-target.mjs +47 -0
  253. package/dist/drizzle/session-target.mjs.map +1 -0
  254. package/dist/drizzle/sqlite-emails.mjs +45 -0
  255. package/dist/drizzle/sqlite-emails.mjs.map +1 -0
  256. package/dist/drizzle/sqlite-identity.mjs +91 -0
  257. package/dist/drizzle/sqlite-identity.mjs.map +1 -0
  258. package/dist/drizzle/sqlite-password-prepared.mjs +21 -0
  259. package/dist/drizzle/sqlite-password-prepared.mjs.map +1 -0
  260. package/dist/drizzle/sqlite-passwords.mjs +49 -0
  261. package/dist/drizzle/sqlite-passwords.mjs.map +1 -0
  262. package/dist/drizzle/sqlite-proofs.mjs +29 -0
  263. package/dist/drizzle/sqlite-proofs.mjs.map +1 -0
  264. package/dist/drizzle/sqlite-sessions.mjs +74 -0
  265. package/dist/drizzle/sqlite-sessions.mjs.map +1 -0
  266. package/dist/drizzle/sqlite.d.mts +78 -0
  267. package/dist/drizzle/sqlite.mjs +217 -0
  268. package/dist/drizzle/sqlite.mjs.map +1 -0
  269. package/dist/drizzle/standalone-guard.mjs +19 -0
  270. package/dist/drizzle/standalone-guard.mjs.map +1 -0
  271. package/dist/drizzle/step-up-model.d.mts +65 -0
  272. package/dist/drizzle/step-up-model.mjs +9 -0
  273. package/dist/drizzle/step-up-model.mjs.map +1 -0
  274. package/dist/drizzle/step-up-state.mjs +32 -0
  275. package/dist/drizzle/step-up-state.mjs.map +1 -0
  276. package/dist/drizzle/totp-model.d.mts +84 -0
  277. package/dist/drizzle/totp-model.mjs +13 -0
  278. package/dist/drizzle/totp-model.mjs.map +1 -0
  279. package/dist/drizzle/totp-state.d.mts +38 -0
  280. package/dist/drizzle/totp-state.mjs +287 -0
  281. package/dist/drizzle/totp-state.mjs.map +1 -0
  282. package/dist/drizzle/totp-target.d.mts +17 -0
  283. package/dist/drizzle/totp-target.mjs +81 -0
  284. package/dist/drizzle/totp-target.mjs.map +1 -0
  285. package/dist/drizzle/transaction-execution.d.mts +4 -0
  286. package/dist/drizzle/transaction-execution.mjs +11 -0
  287. package/dist/drizzle/transaction-execution.mjs.map +1 -0
  288. package/dist/drizzle/transaction-mysql.mjs +46 -0
  289. package/dist/drizzle/transaction-mysql.mjs.map +1 -0
  290. package/dist/drizzle/transaction-owner.d.mts +2 -0
  291. package/dist/drizzle/transaction-owner.mjs +8 -0
  292. package/dist/drizzle/transaction-owner.mjs.map +1 -0
  293. package/dist/index.d.mts +5 -0
  294. package/dist/index.mjs +5 -0
  295. package/dist/internal/configuration.d.mts +174 -0
  296. package/dist/internal/configuration.mjs +7 -0
  297. package/dist/internal/configuration.mjs.map +1 -0
  298. package/dist/internal/drizzle-migrations.mjs +19 -0
  299. package/dist/internal/drizzle-migrations.mjs.map +1 -0
  300. package/dist/internal/drizzle-postgres.mjs +39 -0
  301. package/dist/internal/drizzle-postgres.mjs.map +1 -0
  302. package/dist/internal/drizzle-sqlite.mjs +37 -0
  303. package/dist/internal/drizzle-sqlite.mjs.map +1 -0
  304. package/dist/internal/email-kernel.d.mts +13 -0
  305. package/dist/internal/email-kernel.mjs +487 -0
  306. package/dist/internal/email-kernel.mjs.map +1 -0
  307. package/dist/internal/mapping-error.d.mts +11 -0
  308. package/dist/internal/mapping-error.mjs +30 -0
  309. package/dist/internal/mapping-error.mjs.map +1 -0
  310. package/dist/internal/passkey/admission.d.mts +7 -0
  311. package/dist/internal/passkey/admission.mjs +216 -0
  312. package/dist/internal/passkey/admission.mjs.map +1 -0
  313. package/dist/internal/passkey/credentials.d.mts +6 -0
  314. package/dist/internal/passkey/credentials.mjs +249 -0
  315. package/dist/internal/passkey/credentials.mjs.map +1 -0
  316. package/dist/internal/passkey/enrollment.mjs +138 -0
  317. package/dist/internal/passkey/enrollment.mjs.map +1 -0
  318. package/dist/internal/passkey/flow.d.mts +10 -0
  319. package/dist/internal/passkey/flow.mjs +452 -0
  320. package/dist/internal/passkey/flow.mjs.map +1 -0
  321. package/dist/internal/passkey/management.mjs +231 -0
  322. package/dist/internal/passkey/management.mjs.map +1 -0
  323. package/dist/internal/passkey/registration-ceremony.d.mts +9 -0
  324. package/dist/internal/passkey/registration-ceremony.mjs +129 -0
  325. package/dist/internal/passkey/registration-ceremony.mjs.map +1 -0
  326. package/dist/internal/passkey/registration-custody.d.mts +2 -0
  327. package/dist/internal/passkey/registration-custody.mjs +52 -0
  328. package/dist/internal/passkey/registration-custody.mjs.map +1 -0
  329. package/dist/internal/passkey/registration-write.mjs +211 -0
  330. package/dist/internal/passkey/registration-write.mjs.map +1 -0
  331. package/dist/internal/passkey/state.d.mts +5 -0
  332. package/dist/internal/passkey/state.mjs +234 -0
  333. package/dist/internal/passkey/state.mjs.map +1 -0
  334. package/dist/internal/passkey/target.d.mts +19 -0
  335. package/dist/internal/passkey/target.mjs +190 -0
  336. package/dist/internal/passkey/target.mjs.map +1 -0
  337. package/dist/internal/passkey/write-state.mjs +345 -0
  338. package/dist/internal/passkey/write-state.mjs.map +1 -0
  339. package/dist/internal/passkey/write-target.mjs +192 -0
  340. package/dist/internal/passkey/write-target.mjs.map +1 -0
  341. package/dist/internal/passkey-kernel.mjs +49 -0
  342. package/dist/internal/passkey-kernel.mjs.map +1 -0
  343. package/dist/internal/passkeys.mjs +367 -0
  344. package/dist/internal/passkeys.mjs.map +1 -0
  345. package/dist/internal/password-kernel.d.mts +13 -0
  346. package/dist/internal/password-kernel.mjs +704 -0
  347. package/dist/internal/password-kernel.mjs.map +1 -0
  348. package/dist/internal/persistence.mjs +289 -0
  349. package/dist/internal/persistence.mjs.map +1 -0
  350. package/dist/internal/phone-kernel.mjs +434 -0
  351. package/dist/internal/phone-kernel.mjs.map +1 -0
  352. package/dist/internal/proof-kernel.d.mts +9 -0
  353. package/dist/internal/proof-kernel.mjs +619 -0
  354. package/dist/internal/proof-kernel.mjs.map +1 -0
  355. package/dist/internal/query-operations.d.mts +3 -0
  356. package/dist/internal/registration.mjs +65 -0
  357. package/dist/internal/registration.mjs.map +1 -0
  358. package/dist/internal/session-kernel.mjs +737 -0
  359. package/dist/internal/session-kernel.mjs.map +1 -0
  360. package/dist/internal/sql-persistence.d.mts +11 -0
  361. package/dist/internal/sql-persistence.mjs +37 -0
  362. package/dist/internal/sql-persistence.mjs.map +1 -0
  363. package/dist/internal/sql-query.mjs +207 -0
  364. package/dist/internal/sql-query.mjs.map +1 -0
  365. package/dist/internal/sql-table.d.mts +37 -0
  366. package/dist/internal/sql-table.mjs +71 -0
  367. package/dist/internal/sql-table.mjs.map +1 -0
  368. package/dist/internal/storage-mapping.mjs +687 -0
  369. package/dist/internal/storage-mapping.mjs.map +1 -0
  370. package/dist/internal/storage-tables.d.mts +914 -0
  371. package/dist/internal/storage-tables.mjs +387 -0
  372. package/dist/internal/storage-tables.mjs.map +1 -0
  373. package/dist/internal/storage-validation.mjs +58 -0
  374. package/dist/internal/storage-validation.mjs.map +1 -0
  375. package/dist/internal/transaction-execution-kernel.d.mts +18 -0
  376. package/dist/internal/transaction-execution-kernel.mjs +118 -0
  377. package/dist/internal/transaction-execution-kernel.mjs.map +1 -0
  378. package/dist/internal/transaction-kernel.d.mts +7 -0
  379. package/dist/internal/transaction-kernel.mjs +260 -0
  380. package/dist/internal/transaction-kernel.mjs.map +1 -0
  381. package/package.json +1 -0
  382. package/src/Drizzle.ts +378 -0
  383. package/src/DrizzleD1.ts +136 -0
  384. package/src/DrizzleLibsql.ts +301 -0
  385. package/src/DrizzleMysql2.ts +184 -0
  386. package/src/DrizzlePglite.ts +174 -0
  387. package/src/DrizzlePostgres.ts +174 -0
  388. package/src/DrizzleSqliteBun.ts +258 -0
  389. package/src/DrizzleSqliteDo.ts +473 -0
  390. package/src/DrizzleSqliteNode.ts +259 -0
  391. package/src/DrizzleSqliteWasm.ts +263 -0
  392. package/src/drizzle/D1BatchStatements.ts +10 -0
  393. package/src/drizzle/PasswordPreparedPostconditions.ts +30 -0
  394. package/src/drizzle/SuppliedService.ts +10 -0
  395. package/src/drizzle/d1-emails.ts +1829 -0
  396. package/src/drizzle/d1-generated-statement.ts +129 -0
  397. package/src/drizzle/d1-identity.ts +375 -0
  398. package/src/drizzle/d1-oauth.ts +340 -0
  399. package/src/drizzle/d1-passkey.ts +373 -0
  400. package/src/drizzle/d1-password-prepared.ts +1270 -0
  401. package/src/drizzle/d1-passwords.ts +2656 -0
  402. package/src/drizzle/d1-phone.ts +96 -0
  403. package/src/drizzle/d1-planning.ts +104 -0
  404. package/src/drizzle/d1-proofs.ts +2305 -0
  405. package/src/drizzle/d1-sessions.ts +2857 -0
  406. package/src/drizzle/d1-totp.ts +78 -0
  407. package/src/drizzle/email-model.ts +516 -0
  408. package/src/drizzle/email-registration.ts +698 -0
  409. package/src/drizzle/email-sql.ts +24 -0
  410. package/src/drizzle/email-target.ts +243 -0
  411. package/src/drizzle/model.ts +463 -0
  412. package/src/drizzle/mysql-emails.ts +321 -0
  413. package/src/drizzle/mysql-identity.ts +324 -0
  414. package/src/drizzle/mysql-password-prepared.ts +204 -0
  415. package/src/drizzle/mysql-passwords.ts +339 -0
  416. package/src/drizzle/mysql-proofs.ts +181 -0
  417. package/src/drizzle/mysql-sessions.ts +741 -0
  418. package/src/drizzle/mysql.ts +687 -0
  419. package/src/drizzle/oauth-accounts.ts +804 -0
  420. package/src/drizzle/oauth-connected-access.ts +354 -0
  421. package/src/drizzle/oauth-connected-collection.ts +324 -0
  422. package/src/drizzle/oauth-connected-custody.ts +277 -0
  423. package/src/drizzle/oauth-connected-drivers.ts +465 -0
  424. package/src/drizzle/oauth-connected-flow.ts +441 -0
  425. package/src/drizzle/oauth-connected-input.ts +127 -0
  426. package/src/drizzle/oauth-connected-maintenance.ts +345 -0
  427. package/src/drizzle/oauth-connected-management.ts +365 -0
  428. package/src/drizzle/oauth-connected-model.ts +347 -0
  429. package/src/drizzle/oauth-connected-reference.ts +112 -0
  430. package/src/drizzle/oauth-connected-settlement.ts +226 -0
  431. package/src/drizzle/oauth-connected-state.ts +845 -0
  432. package/src/drizzle/oauth-connected-target.ts +264 -0
  433. package/src/drizzle/oauth-drivers.ts +569 -0
  434. package/src/drizzle/oauth-flow.ts +462 -0
  435. package/src/drizzle/oauth-input.ts +201 -0
  436. package/src/drizzle/oauth-model.ts +617 -0
  437. package/src/drizzle/oauth-mysql.ts +10 -0
  438. package/src/drizzle/oauth-owner.ts +29 -0
  439. package/src/drizzle/oauth-registration.ts +640 -0
  440. package/src/drizzle/oauth-state.ts +215 -0
  441. package/src/drizzle/oauth-target.ts +750 -0
  442. package/src/drizzle/passkey-drivers.ts +385 -0
  443. package/src/drizzle/passkey-kernel.ts +3 -0
  444. package/src/drizzle/passkey-model.ts +353 -0
  445. package/src/drizzle/passkey-registration-ceremony-model.ts +69 -0
  446. package/src/drizzle/passkey-state.ts +3 -0
  447. package/src/drizzle/passkey-target.ts +23 -0
  448. package/src/drizzle/passkey-write-drivers.ts +395 -0
  449. package/src/drizzle/passkey-write-model.ts +271 -0
  450. package/src/drizzle/passkey-write-target.ts +9 -0
  451. package/src/drizzle/password-model.ts +491 -0
  452. package/src/drizzle/password-prepared-model.ts +259 -0
  453. package/src/drizzle/password-prepared-sql.ts +1191 -0
  454. package/src/drizzle/password-prepared-state.ts +231 -0
  455. package/src/drizzle/password-prepared-target.ts +160 -0
  456. package/src/drizzle/password-registration.ts +374 -0
  457. package/src/drizzle/password-sql.ts +12 -0
  458. package/src/drizzle/password-target.ts +224 -0
  459. package/src/drizzle/pg-emails.ts +321 -0
  460. package/src/drizzle/pg-password-prepared.ts +205 -0
  461. package/src/drizzle/pg-passwords.ts +338 -0
  462. package/src/drizzle/pg-proofs.ts +191 -0
  463. package/src/drizzle/pg-sessions.ts +750 -0
  464. package/src/drizzle/pg.ts +984 -0
  465. package/src/drizzle/phone-model.ts +190 -0
  466. package/src/drizzle/phone-state.ts +21 -0
  467. package/src/drizzle/phone-target.ts +472 -0
  468. package/src/drizzle/proof-model.ts +398 -0
  469. package/src/drizzle/proof-sql.ts +9 -0
  470. package/src/drizzle/proof-target.ts +122 -0
  471. package/src/drizzle/query-operations.ts +37 -0
  472. package/src/drizzle/session-model.ts +370 -0
  473. package/src/drizzle/session-sql.ts +13 -0
  474. package/src/drizzle/session-target.ts +338 -0
  475. package/src/drizzle/sqlite-emails.ts +366 -0
  476. package/src/drizzle/sqlite-identity.ts +344 -0
  477. package/src/drizzle/sqlite-password-prepared.ts +260 -0
  478. package/src/drizzle/sqlite-passwords.ts +497 -0
  479. package/src/drizzle/sqlite-proofs.ts +202 -0
  480. package/src/drizzle/sqlite-sessions.ts +971 -0
  481. package/src/drizzle/sqlite.ts +705 -0
  482. package/src/drizzle/standalone-guard.ts +38 -0
  483. package/src/drizzle/step-up-model.ts +128 -0
  484. package/src/drizzle/step-up-state.ts +139 -0
  485. package/src/drizzle/totp-model.ts +92 -0
  486. package/src/drizzle/totp-state.ts +525 -0
  487. package/src/drizzle/totp-target.ts +308 -0
  488. package/src/drizzle/transaction-execution.ts +12 -0
  489. package/src/drizzle/transaction-mysql.ts +104 -0
  490. package/src/drizzle/transaction-owner.ts +10 -0
  491. package/src/index.ts +4 -0
  492. package/src/internal/configuration.ts +282 -0
  493. package/src/internal/drizzle-migrations.ts +30 -0
  494. package/src/internal/drizzle-postgres.ts +81 -0
  495. package/src/internal/drizzle-sqlite.ts +79 -0
  496. package/src/internal/email-kernel.ts +1532 -0
  497. package/src/internal/mapping-error.ts +36 -0
  498. package/src/internal/passkey/admission.ts +362 -0
  499. package/src/internal/passkey/credentials.ts +511 -0
  500. package/src/internal/passkey/enrollment.ts +326 -0
  501. package/src/internal/passkey/flow.ts +1062 -0
  502. package/src/internal/passkey/management.ts +422 -0
  503. package/src/internal/passkey/registration-ceremony.ts +283 -0
  504. package/src/internal/passkey/registration-custody.ts +91 -0
  505. package/src/internal/passkey/registration-write.ts +426 -0
  506. package/src/internal/passkey/state.ts +354 -0
  507. package/src/internal/passkey/target.ts +586 -0
  508. package/src/internal/passkey/write-state.ts +681 -0
  509. package/src/internal/passkey/write-target.ts +452 -0
  510. package/src/internal/passkey-kernel.ts +102 -0
  511. package/src/internal/passkeys.ts +597 -0
  512. package/src/internal/password-kernel.ts +2122 -0
  513. package/src/internal/persistence.ts +590 -0
  514. package/src/internal/phone-kernel.ts +843 -0
  515. package/src/internal/proof-kernel.ts +1949 -0
  516. package/src/internal/query-operations.ts +26 -0
  517. package/src/internal/registration.ts +160 -0
  518. package/src/internal/session-kernel.ts +2210 -0
  519. package/src/internal/sql-persistence.ts +45 -0
  520. package/src/internal/sql-query.ts +298 -0
  521. package/src/internal/sql-table.ts +89 -0
  522. package/src/internal/storage-mapping.ts +706 -0
  523. package/src/internal/storage-tables.ts +408 -0
  524. package/src/internal/storage-validation.ts +117 -0
  525. package/src/internal/transaction-execution-kernel.ts +317 -0
  526. package/src/internal/transaction-kernel.ts +582 -0
@@ -0,0 +1,687 @@
1
+ import { PersistenceMappingError } from "./mapping-error.mjs";
2
+ import { storageTables } from "./storage-tables.mjs";
3
+ import { requiredEmailAddressConstraints } from "../drizzle/email-model.mjs";
4
+ import { requiredProofConstraints } from "../drizzle/proof-model.mjs";
5
+ import { requiredPasswordConstraints } from "../drizzle/password-model.mjs";
6
+ import { DateTime, Effect, Redacted, Schema } from "effect";
7
+ import { randomId } from "@yielded/auth/Persistence";
8
+ import { TokenDigest } from "@yielded/auth/Schema";
9
+ import { SecurityRevision, SessionAuthenticationProvenance, SessionCredentialVersion, SessionId, SessionMetadata } from "@yielded/auth/Sessions";
10
+ import { EmailCredentialSnapshot } from "@yielded/auth/Email";
11
+ import { EncodedPasswordHash, PasswordAttemptId, PasswordCredentialSnapshot } from "@yielded/auth/Password";
12
+ import { ProofBinding, ProofContinuationId, ProofDeliveryId, ProofId, ProofPurpose, ProofRequestId, ProofRequestReceipt, ProofVersion } from "@yielded/auth/Proofs";
13
+ import { LoginIdentifier } from "@yielded/auth/Identity";
14
+ //#region src/internal/storage-mapping.ts
15
+ const failure = (cause) => PersistenceMappingError.make({
16
+ operation: "decode",
17
+ cause
18
+ });
19
+ const decode = (schema, value) => Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(failure));
20
+ const string = (value) => Schema.decodeUnknownSync(Schema.String)(value);
21
+ const tuple = Schema.encodeSync(Schema.fromJsonString(Schema.Array(Schema.String)));
22
+ const bindingJson = Schema.fromJsonString(ProofBinding);
23
+ const receiptJson = Schema.fromJsonString(ProofRequestReceipt);
24
+ const ProofRecord$1 = Schema.Struct({
25
+ moduleId: Schema.String,
26
+ purpose: ProofPurpose,
27
+ proofId: ProofId,
28
+ requestId: ProofRequestId,
29
+ fingerprint: TokenDigest,
30
+ deliveryId: ProofDeliveryId,
31
+ binding: ProofBinding,
32
+ verifier: Schema.Struct({
33
+ keyId: Schema.String,
34
+ digest: TokenDigest
35
+ }),
36
+ issuedAtMillis: Schema.Int,
37
+ expiresAtMillis: Schema.Int,
38
+ version: ProofVersion
39
+ });
40
+ const ProofContinuation = Schema.Struct({
41
+ moduleId: Schema.String,
42
+ purpose: ProofPurpose,
43
+ continuationId: ProofContinuationId,
44
+ digest: TokenDigest,
45
+ proofId: ProofId,
46
+ seriesKey: Schema.String,
47
+ binding: ProofBinding,
48
+ expiresAtMillis: Schema.Int,
49
+ version: ProofVersion
50
+ });
51
+ const foreignTable = (table) => table;
52
+ const makeMappings = (input) => {
53
+ const table = (role) => {
54
+ const found = input.tables[role];
55
+ if (found === void 0) throw failure(`Missing ${role} mapping`);
56
+ return foreignTable(found);
57
+ };
58
+ const mapped = (role) => ({
59
+ table: table(role),
60
+ ...Object.fromEntries(Object.keys(storageTables[role].columns).map((key) => [key, key]))
61
+ });
62
+ const { subjects: s, encodeInstant: instant, decodeInstant: readInstant } = input;
63
+ const subjectId = {
64
+ toNative: s.toNative,
65
+ toSubject: s.toSubject,
66
+ equals: Object.is
67
+ };
68
+ const subject = {
69
+ table: foreignTable(s.table),
70
+ id: s.id,
71
+ status: s.status,
72
+ securityRevision: s.securityRevision,
73
+ isActiveStatus: (value) => Object.is(value, s.activeValue),
74
+ d1ActiveStatusValue: s.activeValue,
75
+ decodeRequirement: s.requirements,
76
+ decodeActionRequirement: s.actionRequirements,
77
+ nextSecurityRevisionSync: () => SecurityRevision.make(randomId())
78
+ };
79
+ const authorityCredential = () => ({
80
+ ...mapped("credentials"),
81
+ subjectId: "subjectId",
82
+ credentialId: "credentialId",
83
+ revision: "revision",
84
+ status: "active",
85
+ isActiveStatus: (value) => value === true,
86
+ encodeInsert: (row) => ({
87
+ ...row,
88
+ active: true
89
+ }),
90
+ encodeRevision: (revision) => ({ revision })
91
+ });
92
+ const authority = () => ({
93
+ subjectId,
94
+ subject,
95
+ credential: authorityCredential()
96
+ });
97
+ const proofs = () => ({
98
+ constraints: requiredProofConstraints,
99
+ encodeInstant: instant,
100
+ decodeInstant: readInstant,
101
+ allocateVersionSync: () => ProofVersion.make(randomId()),
102
+ isRequestConflict: () => false,
103
+ isSeriesConflict: () => false,
104
+ isCommandConflict: () => false,
105
+ scopeKeys: ({ binding }) => ({
106
+ series: tuple([
107
+ binding.identifier.namespace,
108
+ binding.identifier.value,
109
+ binding._tag === "Identifier" ? "anonymous" : binding.revision.subjectId
110
+ ]),
111
+ identifier: tuple([binding.identifier.namespace, binding.identifier.value]),
112
+ subject: binding._tag === "Identifier" ? "anonymous" : binding.revision.subjectId
113
+ }),
114
+ authority: {
115
+ ...authority(),
116
+ identifier: {
117
+ table: table("identifiers"),
118
+ namespace: "namespace",
119
+ value: "value",
120
+ isCurrent: (request, rows) => request.binding._tag === "Identifier" ? rows.length === 0 : request.binding._tag === "IdentifierChange" ? rows.length === 0 || rows.length === 1 && rows.every((row) => Object.is(row.subjectId, request.nativeSubjectId) && row.active === true && row.verifiedAt === null) : rows.length === 1 && rows.every((row) => Object.is(row.subjectId, request.nativeSubjectId) && row.active === true)
121
+ }
122
+ },
123
+ request: {
124
+ ...mapped("proofRequests"),
125
+ moduleId: "moduleId",
126
+ requestId: "requestId",
127
+ fingerprint: "fingerprint",
128
+ proofId: "proofId",
129
+ purpose: "purpose",
130
+ keyId: "keyId",
131
+ createdAt: "createdAt",
132
+ retentionUntil: "retentionUntil",
133
+ encodeInsert: ({ record, retentionUntilMillis }) => ({
134
+ moduleId: record.moduleId,
135
+ requestId: record.requestId,
136
+ fingerprint: record.fingerprint,
137
+ proofId: record.proofId,
138
+ purpose: record.purpose,
139
+ keyId: record.verifier.keyId,
140
+ createdAt: instant(record.issuedAtMillis),
141
+ retentionUntil: instant(retentionUntilMillis),
142
+ receipt: Schema.encodeSync(receiptJson)({
143
+ requestId: record.requestId,
144
+ reference: {
145
+ proofId: record.proofId,
146
+ purpose: record.purpose,
147
+ keyId: record.verifier.keyId
148
+ }
149
+ })
150
+ }),
151
+ decodeReceipt: (row) => decode(receiptJson, row.receipt)
152
+ },
153
+ series: {
154
+ ...mapped("proofSeries"),
155
+ moduleId: "moduleId",
156
+ purpose: "purpose",
157
+ scopeKey: "scopeKey",
158
+ activeProofId: "activeProofId",
159
+ lastIssueAt: "lastIssueAt",
160
+ version: "version",
161
+ encodeInsert: (row) => ({
162
+ ...row,
163
+ activeProofId: null,
164
+ lastIssueAt: null
165
+ })
166
+ },
167
+ generation: {
168
+ ...mapped("proofGenerations"),
169
+ moduleId: "moduleId",
170
+ purpose: "purpose",
171
+ proofId: "proofId",
172
+ requestId: "requestId",
173
+ seriesKey: "seriesKey",
174
+ deliveryId: "deliveryId",
175
+ binding: "binding",
176
+ verifierKeyId: "verifierKeyId",
177
+ verifierDigest: "verifierDigest",
178
+ issuedAt: "issuedAt",
179
+ expiresAt: "expiresAt",
180
+ version: "version",
181
+ state: "state",
182
+ sendCount: "sendCount",
183
+ deliveryState: "deliveryState",
184
+ claimVersion: "claimVersion",
185
+ claimDeadline: "claimDeadline",
186
+ retryAt: "retryAt",
187
+ deliveryRetryMillis: "deliveryRetryMillis",
188
+ retentionUntil: "retentionUntil",
189
+ encodeInsert: ({ record, seriesKey, retentionUntilMillis, state, deliveryState, policy }) => ({
190
+ moduleId: record.moduleId,
191
+ purpose: record.purpose,
192
+ proofId: record.proofId,
193
+ requestId: record.requestId,
194
+ seriesKey,
195
+ deliveryId: record.deliveryId,
196
+ binding: Schema.encodeSync(bindingJson)(record.binding),
197
+ verifierKeyId: record.verifier.keyId,
198
+ verifierDigest: record.verifier.digest,
199
+ issuedAt: instant(record.issuedAtMillis),
200
+ expiresAt: instant(record.expiresAtMillis),
201
+ version: record.version,
202
+ state,
203
+ sendCount: 0,
204
+ deliveryState,
205
+ claimVersion: null,
206
+ claimDeadline: null,
207
+ retryAt: null,
208
+ deliveryRetryMillis: policy.deliveryRetryMillis,
209
+ retentionUntil: instant(retentionUntilMillis),
210
+ fingerprint: record.fingerprint
211
+ }),
212
+ decodeBinding: (row) => decode(bindingJson, row.binding),
213
+ decodeRecord: (row) => Effect.gen(function* () {
214
+ return yield* decode(ProofRecord$1, {
215
+ moduleId: row.moduleId,
216
+ purpose: row.purpose,
217
+ proofId: row.proofId,
218
+ requestId: row.requestId,
219
+ fingerprint: row.fingerprint,
220
+ deliveryId: row.deliveryId,
221
+ binding: yield* decode(bindingJson, row.binding),
222
+ verifier: {
223
+ keyId: row.verifierKeyId,
224
+ digest: row.verifierDigest
225
+ },
226
+ issuedAtMillis: yield* readInstant(row.issuedAt),
227
+ expiresAtMillis: yield* readInstant(row.expiresAt),
228
+ version: row.version
229
+ });
230
+ })
231
+ },
232
+ continuation: {
233
+ ...mapped("proofContinuations"),
234
+ moduleId: "moduleId",
235
+ purpose: "purpose",
236
+ continuationId: "continuationId",
237
+ digest: "digest",
238
+ proofId: "proofId",
239
+ seriesKey: "seriesKey",
240
+ binding: "binding",
241
+ expiresAt: "expiresAt",
242
+ consumed: "consumed",
243
+ version: "version",
244
+ retentionUntil: "retentionUntil",
245
+ encodeInsert: (record) => ({
246
+ ...record,
247
+ binding: Schema.encodeSync(bindingJson)(record.binding),
248
+ expiresAt: instant(record.expiresAtMillis),
249
+ consumed: false,
250
+ retentionUntil: instant(record.retentionUntilMillis)
251
+ }),
252
+ decode: (row) => Effect.gen(function* () {
253
+ return yield* decode(ProofContinuation, {
254
+ ...row,
255
+ binding: yield* decode(bindingJson, row.binding),
256
+ expiresAtMillis: yield* readInstant(row.expiresAt)
257
+ });
258
+ })
259
+ },
260
+ rateScope: {
261
+ ...mapped("proofScopes"),
262
+ moduleId: "moduleId",
263
+ purpose: "purpose",
264
+ action: "action",
265
+ scopeKind: "scopeKind",
266
+ scopeKey: "scopeKey",
267
+ encodeInsert: (row) => ({ ...row })
268
+ },
269
+ abuseEvent: {
270
+ ...mapped("proofAbuse"),
271
+ moduleId: "moduleId",
272
+ purpose: "purpose",
273
+ action: "action",
274
+ scopeKind: "scopeKind",
275
+ scopeKey: "scopeKey",
276
+ commandId: "commandId",
277
+ occurredAt: "occurredAt",
278
+ retentionUntil: "retentionUntil",
279
+ encodeInsert: (row) => ({
280
+ ...row,
281
+ occurredAt: instant(row.occurredAtMillis),
282
+ retentionUntil: instant(row.retentionUntilMillis)
283
+ })
284
+ },
285
+ failureEvent: {
286
+ ...mapped("proofFailures"),
287
+ moduleId: "moduleId",
288
+ purpose: "purpose",
289
+ seriesKey: "seriesKey",
290
+ commandId: "commandId",
291
+ occurredAt: "occurredAt",
292
+ retentionUntil: "retentionUntil",
293
+ encodeInsert: (row) => ({
294
+ ...row,
295
+ occurredAt: instant(row.occurredAtMillis),
296
+ retentionUntil: instant(row.retentionUntilMillis)
297
+ })
298
+ },
299
+ command: {
300
+ ...mapped("proofCommands"),
301
+ moduleId: "moduleId",
302
+ commandId: "commandId",
303
+ kind: "kind",
304
+ decision: "decision",
305
+ retentionUntil: "retentionUntil",
306
+ encodeInsert: (row) => ({
307
+ ...row,
308
+ retentionUntil: instant(row.retentionUntilMillis)
309
+ })
310
+ }
311
+ });
312
+ const passwords = () => {
313
+ const verifier = (replacement) => ({
314
+ verifier: Redacted.value(replacement.verifier),
315
+ normalization: replacement.normalization
316
+ });
317
+ return {
318
+ subjectId,
319
+ subject,
320
+ authorityCredential: authorityCredential(),
321
+ constraints: requiredPasswordConstraints,
322
+ isCommandConflict: () => false,
323
+ isRateScopeConflict: () => false,
324
+ scopeKeys: ({ moduleId, action, identifier, subjectId }) => ({
325
+ action: tuple([moduleId, action]),
326
+ identifier: tuple([identifier.namespace, identifier.value]),
327
+ ...subjectId === void 0 ? {} : { subject: subjectId }
328
+ }),
329
+ encodeInstant: instant,
330
+ decodeInstant: readInstant,
331
+ allocateAttemptIdSync: () => PasswordAttemptId.make(randomId()),
332
+ allocateCredentialIdSync: randomId,
333
+ allocateRevisionSync: () => SecurityRevision.make(randomId()),
334
+ commandRetentionMillis: 864e5,
335
+ sessionInvalidation: "same-authority-immediate",
336
+ identifier: {
337
+ table: table("identifiers"),
338
+ namespace: "namespace",
339
+ value: "value",
340
+ subjectId: "subjectId",
341
+ verifiedAt: "verifiedAt",
342
+ bindingRevision: "revision",
343
+ isCurrent: (row) => row.active === true,
344
+ encodeInitialInsert: (identifier, subjectId, revision) => ({
345
+ ...identifier,
346
+ subjectId,
347
+ revision,
348
+ verifiedAt: null,
349
+ active: true
350
+ })
351
+ },
352
+ credential: {
353
+ ...mapped("passwords"),
354
+ moduleId: "moduleId",
355
+ subjectId: "subjectId",
356
+ credentialId: "credentialId",
357
+ credentialRevision: "credentialRevision",
358
+ verifierVersion: "verifierVersion",
359
+ verifier: "verifier",
360
+ normalization: "normalization",
361
+ encodeInsert: ({ replacement, ...row }) => ({
362
+ ...row,
363
+ ...verifier(replacement)
364
+ }),
365
+ encodeVerifier: (hash, verifierVersion) => ({
366
+ verifier: Redacted.value(hash),
367
+ verifierVersion
368
+ }),
369
+ encodeReplacement: ({ replacement, ...row }) => ({
370
+ ...row,
371
+ ...verifier(replacement)
372
+ }),
373
+ decode: ({ moduleId, subject: row, identifier, credential }) => Effect.gen(function* () {
374
+ const id = yield* s.toSubject(row[s.id]);
375
+ const hash = yield* decode(EncodedPasswordHash, credential.verifier);
376
+ return yield* decode(PasswordCredentialSnapshot, {
377
+ moduleId,
378
+ revision: {
379
+ subjectId: id,
380
+ securityRevision: row[s.securityRevision],
381
+ credentials: [{
382
+ credentialId: credential.credentialId,
383
+ revision: credential.credentialRevision
384
+ }]
385
+ },
386
+ credentialId: credential.credentialId,
387
+ credentialRevision: credential.credentialRevision,
388
+ verifierVersion: credential.verifierVersion,
389
+ verifier: hash,
390
+ normalization: credential.normalization,
391
+ identifier: yield* decode(LoginIdentifier, {
392
+ namespace: identifier.namespace,
393
+ value: identifier.value
394
+ }),
395
+ identifierBindingRevision: identifier.revision,
396
+ ...identifier.verifiedAt === null ? {} : { identifierVerifiedAtMillis: yield* readInstant(identifier.verifiedAt) }
397
+ });
398
+ })
399
+ },
400
+ attempt: {
401
+ ...mapped("passwordAttempts"),
402
+ moduleId: "moduleId",
403
+ action: "action",
404
+ attemptId: "attemptId",
405
+ identifierNamespace: "identifierNamespace",
406
+ identifierValue: "identifierValue",
407
+ subjectId: "subjectId",
408
+ credentialId: "credentialId",
409
+ securityRevision: "securityRevision",
410
+ credentialRevision: "credentialRevision",
411
+ verifierVersion: "verifierVersion",
412
+ identifierBindingRevision: "identifierBindingRevision",
413
+ admittedAt: "admittedAt",
414
+ deadline: "deadline",
415
+ retentionUntil: "retentionUntil",
416
+ state: "state",
417
+ encodeInsert: (row, { nativeSubjectId, state }) => ({
418
+ moduleId: row.moduleId,
419
+ action: row.action,
420
+ attemptId: row.attemptId,
421
+ identifierNamespace: row.identifier.namespace,
422
+ identifierValue: row.identifier.value,
423
+ subjectId: nativeSubjectId ?? null,
424
+ credentialId: row.credentialId ?? null,
425
+ securityRevision: row.securityRevision ?? null,
426
+ credentialRevision: row.credentialRevision ?? null,
427
+ verifierVersion: row.verifierVersion ?? null,
428
+ identifierBindingRevision: row.identifierBindingRevision ?? null,
429
+ admittedAt: instant(row.admittedAtMillis),
430
+ deadline: instant(row.deadlineMillis),
431
+ retentionUntil: instant(row.retentionUntilMillis),
432
+ state
433
+ })
434
+ },
435
+ rateScope: {
436
+ ...mapped("passwordScopes"),
437
+ moduleId: "moduleId",
438
+ action: "action",
439
+ scopeKind: "scopeKind",
440
+ scopeKey: "scopeKey",
441
+ encodeInsert: (row) => ({ ...row })
442
+ },
443
+ charge: {
444
+ ...mapped("passwordCharges"),
445
+ moduleId: "moduleId",
446
+ action: "action",
447
+ scopeKind: "scopeKind",
448
+ scopeKey: "scopeKey",
449
+ attemptId: "attemptId",
450
+ occurredAt: "occurredAt",
451
+ retentionUntil: "retentionUntil",
452
+ encodeInsert: (row) => ({
453
+ ...row,
454
+ occurredAt: instant(row.occurredAtMillis),
455
+ retentionUntil: instant(row.retentionUntilMillis)
456
+ })
457
+ },
458
+ command: {
459
+ ...mapped("passwordCommands"),
460
+ moduleId: "moduleId",
461
+ commandId: "commandId",
462
+ action: "action",
463
+ bindingDigest: "bindingDigest",
464
+ decision: "decision",
465
+ retentionUntil: "retentionUntil",
466
+ encodeInsert: (row) => ({
467
+ ...row,
468
+ retentionUntil: instant(row.retentionUntilMillis)
469
+ })
470
+ }
471
+ };
472
+ };
473
+ const emails = () => ({
474
+ subjectId,
475
+ subject,
476
+ constraints: requiredEmailAddressConstraints,
477
+ addressCardinality: "single",
478
+ changeDisposition: "retire-source",
479
+ encodeInstant: instant,
480
+ decodeInstant: readInstant,
481
+ allocateCredentialIdSync: randomId,
482
+ allocateRevisionSync: () => SecurityRevision.make(randomId()),
483
+ commandRetentionMillis: 864e5,
484
+ sessionInvalidation: "same-authority-immediate",
485
+ isCommandConflict: () => false,
486
+ isIdentifierConflict: () => false,
487
+ isCredentialConflict: () => false,
488
+ authorityCredential: {
489
+ ...authorityCredential(),
490
+ encodeActivation: (revision) => ({
491
+ revision,
492
+ active: true
493
+ }),
494
+ encodeRetirement: (revision) => ({
495
+ revision,
496
+ active: false
497
+ })
498
+ },
499
+ identifier: {
500
+ table: table("identifiers"),
501
+ namespace: "namespace",
502
+ value: "value",
503
+ subjectId: "subjectId",
504
+ verifiedAt: "verifiedAt",
505
+ bindingRevision: "revision",
506
+ isCurrent: (row) => row.active === true && row.verifiedAt !== null,
507
+ isMutableTarget: (row) => row.active === true && row.verifiedAt === null,
508
+ encodeVerifiedInsert: ({ identifier, subjectId, verifiedAtMillis, bindingRevision }) => ({
509
+ ...identifier,
510
+ subjectId,
511
+ verifiedAt: instant(verifiedAtMillis),
512
+ revision: bindingRevision,
513
+ active: true
514
+ }),
515
+ encodeVerification: ({ verifiedAtMillis, bindingRevision }) => ({
516
+ verifiedAt: instant(verifiedAtMillis),
517
+ revision: bindingRevision,
518
+ active: true
519
+ }),
520
+ encodeRetirement: ({ bindingRevision }) => ({
521
+ revision: bindingRevision,
522
+ active: false
523
+ })
524
+ },
525
+ credential: {
526
+ table: table("emailCredentials"),
527
+ moduleId: "moduleId",
528
+ subjectId: "subjectId",
529
+ credentialId: "credentialId",
530
+ identifierNamespace: "identifierNamespace",
531
+ identifierValue: "identifierValue",
532
+ credentialRevision: "credentialRevision",
533
+ status: "active",
534
+ isActiveStatus: (value) => value === true,
535
+ encodeVerifiedInsert: ({ identifier, ...row }) => ({
536
+ ...row,
537
+ identifierNamespace: identifier.namespace,
538
+ identifierValue: identifier.value,
539
+ active: true
540
+ }),
541
+ encodeActivation: ({ identifier, credentialRevision }) => ({
542
+ identifierNamespace: identifier.namespace,
543
+ identifierValue: identifier.value,
544
+ credentialRevision,
545
+ active: true
546
+ }),
547
+ encodeRetirement: ({ credentialRevision }) => ({
548
+ credentialRevision,
549
+ active: false
550
+ }),
551
+ decode: ({ moduleId, subject: row, identifier, credential }) => Effect.gen(function* () {
552
+ return yield* decode(EmailCredentialSnapshot, {
553
+ moduleId,
554
+ identifier: {
555
+ namespace: identifier.namespace,
556
+ value: identifier.value
557
+ },
558
+ identifierRevision: identifier.revision,
559
+ verifiedAtMillis: yield* readInstant(identifier.verifiedAt),
560
+ credentialId: credential.credentialId,
561
+ credentialRevision: credential.credentialRevision,
562
+ revision: {
563
+ subjectId: yield* s.toSubject(row[s.id]),
564
+ securityRevision: row[s.securityRevision],
565
+ credentials: [{
566
+ credentialId: credential.credentialId,
567
+ revision: credential.credentialRevision
568
+ }]
569
+ }
570
+ });
571
+ })
572
+ },
573
+ command: {
574
+ table: table("emailCommands"),
575
+ moduleId: "moduleId",
576
+ commandId: "commandId",
577
+ action: "action",
578
+ bindingDigest: "bindingDigest",
579
+ retentionUntil: "retentionUntil",
580
+ encodeInsert: ({ retentionUntilMillis, ...row }) => ({
581
+ ...row,
582
+ retentionUntil: instant(retentionUntilMillis)
583
+ })
584
+ }
585
+ });
586
+ const sessions = (claims) => {
587
+ const record = Schema.fromJsonString(Schema.Struct({
588
+ ...SessionMetadata.fields,
589
+ claims: Schema.Unknown,
590
+ digest: TokenDigest,
591
+ version: SecurityRevision,
592
+ provenance: SessionAuthenticationProvenance,
593
+ credentialVersion: SessionCredentialVersion
594
+ }));
595
+ const encodeRow = (value) => ({
596
+ digest: value.digest,
597
+ version: value.version,
598
+ securityRevision: value.securityRevision,
599
+ issuedAt: instant(DateTime.toEpochMillis(value.issuedAt)),
600
+ expiresAt: instant(DateTime.toEpochMillis(value.expiresAt)),
601
+ absoluteExpiresAt: instant(DateTime.toEpochMillis(value.absoluteExpiresAt)),
602
+ record: Schema.encodeSync(record)({
603
+ ...value,
604
+ claims: Schema.encodeSync(claims)(value.claims)
605
+ })
606
+ });
607
+ return {
608
+ ...authority(),
609
+ isConstraintConflict: () => false,
610
+ constraints: {
611
+ sessionDigest: "unique(session.digest)",
612
+ flowId: "unique(flow.flowId)"
613
+ },
614
+ sessionId: {
615
+ toNative: (id) => Effect.succeed(id),
616
+ toSession: (id) => decode(SessionId, id),
617
+ equals: Object.is
618
+ },
619
+ flow: {
620
+ table: table("sessionFlows"),
621
+ flowId: "flowId",
622
+ subjectId: "subjectId",
623
+ state: "state",
624
+ pendingDigest: "pendingDigest",
625
+ dedupUntil: "dedupUntil",
626
+ pendingStateValue: "pending",
627
+ establishedStateValue: "established",
628
+ encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),
629
+ decodeInstant: (value) => readInstant(value).pipe(Effect.map(DateTime.makeUnsafe)),
630
+ encodePendingInsert: (row) => ({
631
+ flowId: row.evidence.flowId,
632
+ subjectId: row.subjectId,
633
+ state: "pending",
634
+ pendingDigest: row.pendingDigest,
635
+ dedupUntil: instant(DateTime.toEpochMillis(row.dedupUntil))
636
+ }),
637
+ encodeEstablishedInsert: (row) => ({
638
+ flowId: row.evidence.flowId,
639
+ subjectId: row.subjectId,
640
+ state: "established",
641
+ pendingDigest: null,
642
+ dedupUntil: instant(DateTime.toEpochMillis(row.dedupUntil))
643
+ })
644
+ },
645
+ session: {
646
+ table: table("sessions"),
647
+ sessionId: "sessionId",
648
+ subjectId: "subjectId",
649
+ digest: "digest",
650
+ version: "version",
651
+ securityRevision: "securityRevision",
652
+ issuedAt: "issuedAt",
653
+ expiresAt: "expiresAt",
654
+ absoluteExpiresAt: "absoluteExpiresAt",
655
+ encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),
656
+ allocateIdSync: randomId,
657
+ allocateVersionSync: () => SecurityRevision.make(randomId()),
658
+ encodeInsert: (value, ids) => ({
659
+ ...encodeRow(value),
660
+ ...ids
661
+ }),
662
+ encodeRotation: encodeRow,
663
+ decode: (row) => Effect.gen(function* () {
664
+ const saved = yield* decode(record, row.record);
665
+ const decodedClaims = yield* decode(claims, saved.claims);
666
+ return {
667
+ ...saved,
668
+ claims: decodedClaims
669
+ };
670
+ })
671
+ }
672
+ };
673
+ };
674
+ return {
675
+ table,
676
+ authority,
677
+ proofs,
678
+ passwords,
679
+ emails,
680
+ sessions,
681
+ string
682
+ };
683
+ };
684
+ //#endregion
685
+ export { makeMappings };
686
+
687
+ //# sourceMappingURL=storage-mapping.mjs.map