@yielded/auth 0.1.0-beta.2 → 0.1.0-beta.3

package/dist/DrizzleD1.d.mts

@@ -321,14 +321,14 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       };
     }) => Effect.Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
     }, OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: OAuthConnectedClaim;
@@ -338,11 +338,11 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
     } | {
-      readonly _tag: "Ambiguous";
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
-      readonly _tag: "Conflict";
+      readonly _tag: "Ambiguous";
     } | {
       readonly _tag: "Connected";
       readonly grant: {
@@ -527,14 +527,14 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly retentionUntilMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Disconnected";
       readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
       readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
       readonly affectedGrantCount: number;
       readonly replayed: boolean;
-    } | {
-      readonly _tag: "Conflict";
     }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable, never>;
     readonly inspectAccess: (input: {
       readonly authorization: OAuthConnectedUseAuthorization;
@@ -542,8 +542,6 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
     }) => Effect.Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
     } | {
@@ -607,6 +605,8 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
           readonly ciphertext: import("effect/Redacted").Redacted<string>;
         };
       };
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     }, OAuthUnavailable>;
     readonly claimRefresh: <A>(input: {
       readonly grant: OAuthConnectedStoredGrant;
@@ -616,10 +616,10 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly lifetimeMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Claimed";
       readonly claim: {
@@ -765,10 +765,10 @@ declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly lifetimeMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Admitted";
       readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;

package/dist/DrizzleMysql2.d.mts

@@ -802,14 +802,14 @@ declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       };
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
     }, OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: OAuthConnectedClaim;

package/dist/DrizzlePglite.d.mts

@@ -801,14 +801,14 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       };
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
     }, OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: OAuthConnectedClaim;

package/dist/DrizzlePostgres.d.mts

@@ -221,11 +221,11 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
     } | {
-      readonly _tag: "Ambiguous";
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
-      readonly _tag: "Conflict";
+      readonly _tag: "Ambiguous";
     } | {
       readonly _tag: "Linked";
       readonly credential: {
@@ -801,14 +801,14 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       };
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
     }, OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: OAuthConnectedClaim;
@@ -818,11 +818,11 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
     } | {
-      readonly _tag: "Ambiguous";
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
-      readonly _tag: "Conflict";
+      readonly _tag: "Ambiguous";
     } | {
       readonly _tag: "Connected";
       readonly grant: {
@@ -1007,14 +1007,14 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly retentionUntilMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Disconnected";
       readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
       readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
       readonly affectedGrantCount: number;
       readonly replayed: boolean;
-    } | {
-      readonly _tag: "Conflict";
     }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
     readonly inspectAccess: (input: {
       readonly authorization: OAuthConnectedUseAuthorization;
@@ -1022,8 +1022,6 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
     } | {
@@ -1087,6 +1085,8 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly ciphertext: import("effect/Redacted").Redacted<string>;
         };
       };
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     }, OAuthUnavailable>;
     readonly claimRefresh: <A>(input: {
       readonly grant: OAuthConnectedStoredGrant;
@@ -1096,10 +1096,10 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly lifetimeMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Claimed";
       readonly claim: {
@@ -1245,10 +1245,10 @@ declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly lifetimeMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Admitted";
       readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;

package/dist/DrizzleSqliteBun.d.mts

@@ -699,12 +699,12 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly nowMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
       readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Linked";
       readonly credential: {
@@ -781,8 +781,6 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly _tag: "Rejected";
     } | {
       readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "LastSignInMethod";
     } | {
       readonly _tag: "Unlinked";
       readonly result: {
@@ -796,6 +794,8 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
         };
       };
       readonly replayed: boolean;
+    } | {
+      readonly _tag: "LastSignInMethod";
     }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
     readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
       readonly terminalized: number;
@@ -1070,8 +1070,6 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly flow: OAuthConnectedPendingFlow;
       readonly authorization: OAuthConnectedActionAuthorization;
     }, prepare: PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
       readonly _tag: "Issued";
       readonly flow: {
         readonly context: {
@@ -1163,6 +1161,8 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
         };
         readonly retentionUntilMillis: number;
       };
+    } | {
+      readonly _tag: "Rejected";
     }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
     readonly preflight: (input: OAuthConnectedAccess) => import("effect/Effect").Effect<OAuthConnectedPendingFlow | undefined, OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -1296,12 +1296,12 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly nowMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
       readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Connected";
       readonly grant: {

package/dist/DrizzleSqliteNode.d.mts

@@ -1280,14 +1280,14 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       };
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
     }, OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: OAuthConnectedClaim;

package/dist/DrizzleSqliteWasm.d.mts

@@ -700,11 +700,11 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
     } | {
-      readonly _tag: "Ambiguous";
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
-      readonly _tag: "Conflict";
+      readonly _tag: "Ambiguous";
     } | {
       readonly _tag: "Linked";
       readonly credential: {
@@ -1280,14 +1280,14 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       };
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
     }, OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: OAuthConnectedClaim;
@@ -1297,11 +1297,11 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
     } | {
-      readonly _tag: "Ambiguous";
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
-      readonly _tag: "Conflict";
+      readonly _tag: "Ambiguous";
     } | {
       readonly _tag: "Connected";
       readonly grant: {
@@ -1486,14 +1486,14 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly retentionUntilMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Disconnected";
       readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
       readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
       readonly affectedGrantCount: number;
       readonly replayed: boolean;
-    } | {
-      readonly _tag: "Conflict";
     }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
     readonly inspectAccess: (input: {
       readonly authorization: OAuthConnectedUseAuthorization;
@@ -1501,8 +1501,6 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
     } | {
@@ -1566,6 +1564,8 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
           readonly ciphertext: import("effect/Redacted").Redacted<string>;
         };
       };
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     }, OAuthUnavailable>;
     readonly claimRefresh: <A>(input: {
       readonly grant: OAuthConnectedStoredGrant;
@@ -1575,10 +1575,10 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly lifetimeMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Claimed";
       readonly claim: {
@@ -1724,10 +1724,10 @@ declare const makeOAuthAccountsServices: <S extends AnySQLiteTable<{
       readonly lifetimeMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
     } | {
       readonly _tag: "Admitted";
       readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;

package/dist/GitHub.d.mts

@@ -1,5 +1,5 @@
 import { OpenIdClientConfigurationError } from "./oauth/openid-client/models.mjs";
 import { GitHubOAuthAppConnectedProtocolOptions, GitHubOAuthAppGeneration, GitHubOAuthAppProtocolOptions } from "./oauth/github/models.mjs";
-import { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol } from "./oauth/github/protocol.mjs";
+import { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProvider, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol } from "./oauth/github/protocol.mjs";
 import { gitHubOAuthAppProviderKey } from "./oauth/github/identity.mjs";
-export { type GitHubOAuthAppConnectedProtocolOptions, type GitHubOAuthAppGeneration, type GitHubOAuthAppProtocolOptions, OpenIdClientConfigurationError, gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProviderKey, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };
+export { type GitHubOAuthAppConnectedProtocolOptions, type GitHubOAuthAppGeneration, type GitHubOAuthAppProtocolOptions, OpenIdClientConfigurationError, gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProvider, gitHubOAuthAppProviderKey, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };

package/dist/GitHub.mjs

@@ -1,4 +1,4 @@
 import { OpenIdClientConfigurationError } from "./oauth/openid-client/models.mjs";
 import { gitHubOAuthAppProviderKey } from "./oauth/github/identity.mjs";
-import { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol } from "./oauth/github/protocol.mjs";
-export { OpenIdClientConfigurationError, gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProviderKey, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };
+import { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProvider, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol } from "./oauth/github/protocol.mjs";
+export { OpenIdClientConfigurationError, gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProvider, gitHubOAuthAppProviderKey, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };

package/dist/OpenIdClientConnected.d.mts

@@ -1,4 +1,4 @@
-import { OpenIdClientAuthentication, OpenIdClientConfigurationError, PlainOAuthIdentity } from "./oauth/openid-client/models.mjs";
 import { OpenIdClientConnectedOAuthProvider, OpenIdClientConnectedOidcProvider, OpenIdClientConnectedProtocolOptions, OpenIdClientConnectedRefreshExpiry, OpenIdClientConnectedRevocation } from "./oauth/openid-client/connected/models.mjs";
+import { OpenIdClientAuthentication, OpenIdClientConfigurationError, PlainOAuthIdentity } from "./oauth/openid-client/models.mjs";
 import { makeOpenIdClientConnectedProtocol, openIdClientConnectedProtocolLayer } from "./oauth/openid-client/connected/protocol.mjs";
 export { type OpenIdClientAuthentication, OpenIdClientConfigurationError, type OpenIdClientConnectedOAuthProvider, type OpenIdClientConnectedOidcProvider, type OpenIdClientConnectedProtocolOptions, type OpenIdClientConnectedRefreshExpiry, type OpenIdClientConnectedRevocation, type PlainOAuthIdentity, makeOpenIdClientConnectedProtocol, openIdClientConnectedProtocolLayer };

package/dist/drizzle/d1-oauth.d.mts

@@ -147,12 +147,12 @@ declare const makeD1OAuthAccountsServices: <S extends SQLiteTable, O extends SQL
       readonly nowMillis: number;
     }, prepare: PrepareOAuthCommit<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
       readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Linked";
       readonly credential: {
@@ -229,8 +229,6 @@ declare const makeD1OAuthAccountsServices: <S extends SQLiteTable, O extends SQL
       readonly _tag: "Rejected";
     } | {
       readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "LastSignInMethod";
     } | {
       readonly _tag: "Unlinked";
       readonly result: {
@@ -244,6 +242,8 @@ declare const makeD1OAuthAccountsServices: <S extends SQLiteTable, O extends SQL
         };
       };
       readonly replayed: boolean;
+    } | {
+      readonly _tag: "LastSignInMethod";
     }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
     readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
       readonly terminalized: number;

package/dist/oauth/github/protocol.d.mts

@@ -6,10 +6,14 @@ import { OAuthCallbackId, OAuthCodeResponse, OAuthProtocolConfiguration, OAuthPr
 import { OAuthConnectedConfiguration, OAuthConnectedGrantResponse, OAuthConnectedProfile, OAuthConnectedTokenContext, OAuthConnectedTokenMaterial } from "../connectedModels.mjs";
 import { OAuthConnectedProtocol } from "../OAuthConnectedProtocol.mjs";
 import { OAuthProtocol } from "../OAuthProtocol.mjs";
-import { OpenIdClientConfigurationError } from "../openid-client/models.mjs";
-import { GitHubOAuthAppConnectedProtocolOptions, GitHubOAuthAppProtocolOptions } from "./models.mjs";
+import { OpenIdClientConfigurationError, OpenIdClientOAuthProvider } from "../openid-client/models.mjs";
+import { GitHubOAuthAppConnectedProtocolOptions, GitHubOAuthAppGeneration, GitHubOAuthAppProtocolOptions } from "./models.mjs";
 import { Effect, Layer } from "effect";
 //#region src/oauth/github/protocol.d.ts
+/** A GitHub.com OAuth App generation for the same provider list as generic OIDC.
+ * Retains GitHub receipt/error rules and requests read:user, with no repository access.
+ * Construction performs no I/O; invalid configuration throws the typed configuration error. */
+declare const gitHubOAuthAppProvider: (registration: GitHubOAuthAppGeneration) => OpenIdClientOAuthProvider;
 declare const makeGitHubOAuthAppProtocol: (options: GitHubOAuthAppProtocolOptions) => Effect.Effect<{
   readonly prepareAuthorization: (input: {
     readonly provider: OAuthProviderKey;
@@ -50,5 +54,5 @@ declare const makeGitHubOAuthAppConnectedProtocol: (options: GitHubOAuthAppConne
 declare const gitHubOAuthAppProtocolLayer: (options: GitHubOAuthAppProtocolOptions) => Layer.Layer<OAuthProtocol, OAuthUnavailable | OpenIdClientConfigurationError, never>;
 declare const gitHubOAuthAppConnectedProtocolLayer: (options: GitHubOAuthAppConnectedProtocolOptions) => Layer.Layer<OAuthConnectedProtocol, OAuthUnavailable | OpenIdClientConfigurationError, never>;
 //#endregion
-export { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };
+export { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProvider, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };
 //# sourceMappingURL=protocol.d.mts.map

package/dist/oauth/github/protocol.mjs

@@ -5,9 +5,9 @@ import { OAuthConnectedProfile } from "../connectedModels.mjs";
 import { OAuthConnectedProtocol } from "../OAuthConnectedProtocol.mjs";
 import { OAuthProtocol } from "../OAuthProtocol.mjs";
 import { OpenIdClientConfigurationError } from "../openid-client/models.mjs";
-import { DefiniteTokenRejection } from "../openid-client/compatibility.mjs";
+import { DefiniteTokenRejection, tokenCompatibility } from "../openid-client/compatibility.mjs";
 import { boundedFetch } from "../openid-client/transport.mjs";
-import { makeOAuthProtocolWithCompatibility } from "../openid-client/protocol.mjs";
+import { makeOpenIdClientOAuthProtocol } from "../openid-client/protocol.mjs";
 import { ProviderRevocation } from "../openid-client/ProviderRevocation.mjs";
 import { makeConnectedProtocolWithCompatibility } from "../openid-client/connected/protocol.mjs";
 import { decodeGitHubIdentity, gitHubOAuthAppProviderKey } from "./identity.mjs";
@@ -166,16 +166,29 @@ const revocationLayer = (options) => {
 		});
 	}) }));
 };
+/** A GitHub.com OAuth App generation for the same provider list as generic OIDC.
+* Retains GitHub receipt/error rules and requests read:user, with no repository access.
+* Construction performs no I/O; invalid configuration throws the typed configuration error. */
+const gitHubOAuthAppProvider = (registration) => {
+	let saved;
+	try {
+		saved = snapshotOAuthSync(generation, registration);
+	} catch {
+		throw invalid();
+	}
+	return {
+		...provider(saved),
+		scopes: ["read:user"],
+		[tokenCompatibility]: compatibility
+	};
+};
 const makeGitHubOAuthAppProtocol = Effect.fn("makeGitHubOAuthAppProtocol")(function* (options) {
 	const saved = yield* capture(generations, options.registrations, options);
 	if (saved.registrations.filter((item) => item.issuance === "active").length !== 1) return yield* invalid();
-	return yield* makeOAuthProtocolWithCompatibility({
+	return yield* makeOpenIdClientOAuthProtocol({
 		...saved,
-		providers: saved.registrations.map((item) => ({
-			...provider(item),
-			scopes: ["read:user"]
-		}))
-	}, compatibility);
+		providers: saved.registrations.map(gitHubOAuthAppProvider)
+	});
 });
 const makeGitHubOAuthAppConnectedProtocol = Effect.fn("makeGitHubOAuthAppConnectedProtocol")(function* (options) {
 	const saved = yield* capture(connectedGenerations, options.registrations, options);
@@ -199,6 +212,6 @@ const makeGitHubOAuthAppConnectedProtocol = Effect.fn("makeGitHubOAuthAppConnect
 const gitHubOAuthAppProtocolLayer = (options) => Layer.effect(OAuthProtocol, makeGitHubOAuthAppProtocol(options));
 const gitHubOAuthAppConnectedProtocolLayer = (options) => Layer.effect(OAuthConnectedProtocol, makeGitHubOAuthAppConnectedProtocol(options));
 //#endregion
-export { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };
+export { gitHubOAuthAppConnectedProtocolLayer, gitHubOAuthAppProtocolLayer, gitHubOAuthAppProvider, makeGitHubOAuthAppConnectedProtocol, makeGitHubOAuthAppProtocol };
 
 //# sourceMappingURL=protocol.mjs.map