@yielded/auth-persistence-drizzle 0.1.0-beta.0 → 0.1.0-beta.1

package/README.md

@@ -8,10 +8,15 @@ Import mapping helpers from the root and a driver from its explicit module, such
 as `/Postgres` or `/SqliteBun`. Install `drizzle-orm` and the corresponding Effect
 SQL driver. Each driver exposes `AuthPersistence` and the lower-level factories.
 
+Drizzle RC4 does not yet support the current stable Effect APIs required by Yielded
+Auth. Bun consumers need the temporary
+[@yielded/drizzle-effect-v4-patch](../drizzle-effect-v4-patch/README.md) until they
+upgrade to a compatible upstream Drizzle release.
+
 Applications own subjects, policy, claims, delivery, and database connections.
 Drizzle Kit generates migrations from managed or application-declared tables.
 Provide `AuthPersistence.migrationsLayer({ migrationsFolder })` explicitly to
 apply those files before starting auth.
 
-See the [adapter guide](../../docs/reference/adapters.md) for transaction ownership,
+See the [adapter guide](../../docs/src/content/docs/reference/adapters.md) for transaction ownership,
 runtime constraints, and runnable examples.

package/dist/D1.d.mts

@@ -1,4 +1,4 @@
-import { AuthTables, D1GeneratedIdentityMapping } from "./drizzle/model.mjs";
+import { D1GeneratedIdentityMapping } from "./drizzle/model.mjs";
 import { OAuthD1Mapping } from "./drizzle/oauth-model.mjs";
 import { OAuthConnectedMapping, OAuthConnectedRevocationMapping } from "./drizzle/oauth-connected-model.mjs";
 import { OAuthCoordinatorError } from "./drizzle/oauth-target.mjs";
@@ -12,7 +12,6 @@ import { coordinateD1AuthenticationAuthority, coordinateD1PendingAuthentication,
 import { coordinateD1ProofPersistence, makeD1ProofPersistenceServices } from "./drizzle/d1-proofs.mjs";
 import { coordinateD1PasswordPersistence, coordinateD1PasswordRegistration, makeD1PasswordPersistenceServices, makeD1PasswordRegistrationServices } from "./drizzle/d1-passwords.mjs";
 import { coordinateD1EmailAddress, coordinateD1EmailRegistration, makeD1EmailAddressServices, makeD1EmailRegistrationServices, makeD1EmailSignInServices } from "./drizzle/d1-emails.mjs";
-import { makeSqliteAuthStoreServices, makeSqliteOAuthStateServices } from "./drizzle/sqlite.mjs";
 import { coordinateD1PasswordPreparedPersistence, makeD1PasswordPreparedPersistenceServices } from "./drizzle/d1-password-prepared.mjs";
 import { coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices } from "./drizzle/d1-passkey.mjs";
 import { coordinatePhonePersistence, makePhonePersistenceServices } from "./drizzle/d1-phone.mjs";
@@ -24,24 +23,6 @@ import { D1Client } from "@effect/sql-d1/D1Client";
 import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
 //#region src/D1.d.ts
 export declare const commitMode: "batch";
-export declare const makeAuthServices: <C extends AnySQLiteTable, R extends AnySQLiteTable, S extends AnySQLiteTable>(database: EffectSQLiteD1Database<AnyRelations>, mapping: AuthTables<C, R, S>) => {
-  readonly authStore: {
-    readonly issueChallenge: (input: import("@yielded/auth/Schema").NewChallenge) => Effect.Effect<void, import("@yielded/auth/AuthStore").IssueChallengeError>;
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => Effect.Effect<import("@yielded/auth/Schema").VerifiedEmail, import("@yielded/auth/AuthStore").EmailOtpRejected | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly issueRegistration: (input: import("@yielded/auth/Schema").NewRegistration) => Effect.Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly inspectRegistration: (tokenDigest: import("@yielded/auth/Schema").TokenDigest) => Effect.Effect<import("@yielded/auth/Schema").PendingRegistration, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => Effect.Effect<void, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-  };
-  readonly oauthStateStore: {
-    readonly issue: (state: import("@yielded/auth/OAuth").OAuthState) => Effect.Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consume: (stateDigest: import("@yielded/auth/Schema").TokenDigest) => Effect.Effect<import("@yielded/auth/OAuth").OAuthState, import("@yielded/auth/OAuth").InvalidOAuthState | import("@yielded/auth/Errors").AuthStoreError>;
-  };
-  readonly decisions: {
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => Effect.Effect<import("@yielded/auth/AuthStore").ChallengeConsumeDecision, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => Effect.Effect<import("@yielded/auth/AuthStore").ConsumeDecision<void>, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeOAuthState: (digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) => Effect.Effect<import("@yielded/auth/AuthStore").ConsumeDecision<import("@yielded/auth/OAuth").OAuthState>, import("@yielded/auth/Errors").AuthStoreError, never>;
-  };
-};
 export declare const makeIdentityServices: <Subject extends AnySQLiteTable, Identifier extends AnySQLiteTable, External extends AnySQLiteTable, Request extends AnySQLiteTable, NativeId>(database: EffectSQLiteD1Database<AnyRelations> & {
   readonly $client: D1Client;
 }, mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>) => {
@@ -78,6 +59,98 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
   readonly $client: D1Client;
 }, mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J> & OAuthD1Mapping) => Effect.Effect<{
   oauthConnectedPersistence: {
+    readonly claimSignIn: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
+      readonly configuration: import("@yielded/auth/OAuth").OAuthConnectedConfiguration;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSignInAccessClaim, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
+    readonly inspectSignIn: (input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+    }) => Effect.Effect<import("@yielded/auth/OAuth").OAuthSignInAccessInspection, import("@yielded/auth/OAuth").OAuthUnavailable>;
+    readonly settleSignIn: <A>(input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly outcome: import("@yielded/auth/OAuth").OAuthSignInAccessOutcome;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Connected";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+              readonly avatarUrl?: string | undefined;
+              readonly profileUrl?: string | undefined;
+              readonly email?: string | undefined;
+              readonly emailVerified?: boolean | undefined;
+              readonly providerData?: {
+                readonly [x: string]: import("effect/Schema").Json;
+              } | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Busy";
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
       readonly subjectId: import("@yielded/auth/Schema").SubjectId;
@@ -106,6 +179,21 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -208,6 +296,21 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -300,14 +403,14 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       };
     }) => Effect.Effect<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-    } | {
-      readonly _tag: "Conflict";
     }, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: import("@yielded/auth/OAuth").OAuthConnectedClaim;
@@ -316,8 +419,6 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
@@ -327,6 +428,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -390,6 +492,8 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
           readonly ciphertext: import("effect/Redacted").Redacted<string>;
         };
       };
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Busy";
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
@@ -437,6 +541,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -549,6 +654,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -633,6 +739,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
         readonly grant: {
           readonly context: {
             readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+            readonly exchangeOrder: string;
             readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
             readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
             readonly identity: {
@@ -696,6 +803,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
             readonly ciphertext: import("effect/Redacted").Redacted<string>;
           };
         };
+        readonly order: string;
         readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
         readonly claimedAtMillis: number;
         readonly claimExpiresAtMillis: number;
@@ -715,6 +823,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -835,6 +944,7 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
             readonly jobId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
             readonly token: {
               readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+              readonly exchangeOrder: string;
               readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
               readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
               readonly identity: {
@@ -959,5 +1069,5 @@ export declare const makeOAuthConnectedServices: <S extends AnySQLiteTable<{
   readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N> & OAuthD1Mapping;
 }, body: Effect.Effect<A, E, R>) => Effect.Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, D1BatchStatements | import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
 //#endregion
-export { D1BatchStatements, coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority, coordinateD1EmailAddress as coordinateEmailAddress, coordinateD1EmailRegistration as coordinateEmailRegistration, coordinateD1OAuthAccounts as coordinateOAuthAccounts, coordinateD1OAuthRegistration as coordinateOAuthRegistration, coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents, coordinateD1OAuthSignIn as coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinateD1PasswordPersistence as coordinatePasswordPersistence, coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateD1PasswordRegistration as coordinatePasswordRegistration, coordinateD1PendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinateD1ProofPersistence as coordinateProofPersistence, coordinateD1SessionStepUp as coordinateSessionStepUp, coordinateD1SignedSessionValidity as coordinateSignedSessionValidity, coordinateD1StatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makeSqliteAuthStoreServices as makeAuthStoreServices, makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeD1EmailAddressServices as makeEmailAddressServices, makeD1EmailRegistrationServices as makeEmailRegistrationServices, makeD1EmailSignInServices as makeEmailSignInServices, makeD1ExternalIdentityServices as makeExternalIdentityServices, makeD1OAuthAccountsServices as makeOAuthAccountsServices, makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices, makeD1OAuthRegistrationServices as makeOAuthRegistrationServices, makeD1OAuthSignInServices as makeOAuthSignInServices, makeSqliteOAuthStateServices as makeOAuthStateServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makeD1PasswordPersistenceServices as makePasswordPersistenceServices, makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeD1PasswordRegistrationServices as makePasswordRegistrationServices, makeD1PendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makeD1ProofPersistenceServices as makeProofPersistenceServices, makeD1SessionStepUpServices as makeSessionStepUpServices, makeD1SignedSessionValidityServices as makeSignedSessionValidityServices, makeD1StatefulSessionServices as makeStatefulSessionServices, makeD1SubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
+export { D1BatchStatements, coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority, coordinateD1EmailAddress as coordinateEmailAddress, coordinateD1EmailRegistration as coordinateEmailRegistration, coordinateD1OAuthAccounts as coordinateOAuthAccounts, coordinateD1OAuthRegistration as coordinateOAuthRegistration, coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents, coordinateD1OAuthSignIn as coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinateD1PasswordPersistence as coordinatePasswordPersistence, coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateD1PasswordRegistration as coordinatePasswordRegistration, coordinateD1PendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinateD1ProofPersistence as coordinateProofPersistence, coordinateD1SessionStepUp as coordinateSessionStepUp, coordinateD1SignedSessionValidity as coordinateSignedSessionValidity, coordinateD1StatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeD1EmailAddressServices as makeEmailAddressServices, makeD1EmailRegistrationServices as makeEmailRegistrationServices, makeD1EmailSignInServices as makeEmailSignInServices, makeD1ExternalIdentityServices as makeExternalIdentityServices, makeD1OAuthAccountsServices as makeOAuthAccountsServices, makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices, makeD1OAuthRegistrationServices as makeOAuthRegistrationServices, makeD1OAuthSignInServices as makeOAuthSignInServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makeD1PasswordPersistenceServices as makePasswordPersistenceServices, makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeD1PasswordRegistrationServices as makePasswordRegistrationServices, makeD1PendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makeD1ProofPersistenceServices as makeProofPersistenceServices, makeD1SessionStepUpServices as makeSessionStepUpServices, makeD1SignedSessionValidityServices as makeSignedSessionValidityServices, makeD1StatefulSessionServices as makeStatefulSessionServices, makeD1SubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
 //# sourceMappingURL=D1.d.mts.map

package/dist/D1.mjs

@@ -7,7 +7,6 @@ import { coordinateD1AuthenticationAuthority, coordinateD1PendingAuthentication,
 import { coordinateD1ProofPersistence, makeD1ProofPersistenceServices } from "./drizzle/d1-proofs.mjs";
 import { coordinateD1PasswordPersistence, coordinateD1PasswordRegistration, makeD1PasswordPersistenceServices, makeD1PasswordRegistrationServices } from "./drizzle/d1-passwords.mjs";
 import { coordinateD1EmailAddress, coordinateD1EmailRegistration, makeD1EmailAddressServices, makeD1EmailRegistrationServices, makeD1EmailSignInServices } from "./drizzle/d1-emails.mjs";
-import { makeSqliteAuthServices, makeSqliteAuthStoreServices, makeSqliteOAuthStateServices } from "./drizzle/sqlite.mjs";
 import { coordinateD1PasswordPreparedPersistence, makeD1PasswordPreparedPersistenceServices } from "./drizzle/d1-password-prepared.mjs";
 import { makeD1OAuthConnectedTarget } from "./drizzle/oauth-connected-drivers.mjs";
 import { coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices } from "./drizzle/d1-passkey.mjs";
@@ -15,7 +14,6 @@ import { coordinatePhonePersistence, makePhonePersistenceServices } from "./driz
 import { Effect } from "effect";
 //#region src/D1.ts
 const commitMode = "batch";
-const makeAuthServices = (database, mapping) => makeSqliteAuthServices(database, mapping);
 const makeIdentityServices = (database, mapping) => makeD1IdentityServices(database, mapping);
 const { makeOAuthConnectedServices, makeOAuthConnectedRevocationServices, coordinateOAuthConnected, coordinateOAuthConnectedRevocations } = makeD1OAuthConnectedTarget({
 	mode: "batch",
@@ -24,6 +22,6 @@ const { makeOAuthConnectedServices, makeOAuthConnectedRevocationServices, coordi
 	standaloneGuard: () => Effect.void
 });
 //#endregion
-export { D1BatchStatements, commitMode, coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority, coordinateD1EmailAddress as coordinateEmailAddress, coordinateD1EmailRegistration as coordinateEmailRegistration, coordinateD1OAuthAccounts as coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateD1OAuthRegistration as coordinateOAuthRegistration, coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents, coordinateD1OAuthSignIn as coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinateD1PasswordPersistence as coordinatePasswordPersistence, coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateD1PasswordRegistration as coordinatePasswordRegistration, coordinateD1PendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinateD1ProofPersistence as coordinateProofPersistence, coordinateD1SessionStepUp as coordinateSessionStepUp, coordinateD1SignedSessionValidity as coordinateSignedSessionValidity, coordinateD1StatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makeAuthServices, makeSqliteAuthStoreServices as makeAuthStoreServices, makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeD1EmailAddressServices as makeEmailAddressServices, makeD1EmailRegistrationServices as makeEmailRegistrationServices, makeD1EmailSignInServices as makeEmailSignInServices, makeD1ExternalIdentityServices as makeExternalIdentityServices, makeIdentityServices, makeD1OAuthAccountsServices as makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices, makeD1OAuthRegistrationServices as makeOAuthRegistrationServices, makeD1OAuthSignInServices as makeOAuthSignInServices, makeSqliteOAuthStateServices as makeOAuthStateServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makeD1PasswordPersistenceServices as makePasswordPersistenceServices, makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeD1PasswordRegistrationServices as makePasswordRegistrationServices, makeD1PendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makeD1ProofPersistenceServices as makeProofPersistenceServices, makeD1SessionStepUpServices as makeSessionStepUpServices, makeD1SignedSessionValidityServices as makeSignedSessionValidityServices, makeD1StatefulSessionServices as makeStatefulSessionServices, makeD1SubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
+export { D1BatchStatements, commitMode, coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority, coordinateD1EmailAddress as coordinateEmailAddress, coordinateD1EmailRegistration as coordinateEmailRegistration, coordinateD1OAuthAccounts as coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateD1OAuthRegistration as coordinateOAuthRegistration, coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents, coordinateD1OAuthSignIn as coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinateD1PasswordPersistence as coordinatePasswordPersistence, coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateD1PasswordRegistration as coordinatePasswordRegistration, coordinateD1PendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinateD1ProofPersistence as coordinateProofPersistence, coordinateD1SessionStepUp as coordinateSessionStepUp, coordinateD1SignedSessionValidity as coordinateSignedSessionValidity, coordinateD1StatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeD1EmailAddressServices as makeEmailAddressServices, makeD1EmailRegistrationServices as makeEmailRegistrationServices, makeD1EmailSignInServices as makeEmailSignInServices, makeD1ExternalIdentityServices as makeExternalIdentityServices, makeIdentityServices, makeD1OAuthAccountsServices as makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices, makeD1OAuthRegistrationServices as makeOAuthRegistrationServices, makeD1OAuthSignInServices as makeOAuthSignInServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makeD1PasswordPersistenceServices as makePasswordPersistenceServices, makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeD1PasswordRegistrationServices as makePasswordRegistrationServices, makeD1PendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makeD1ProofPersistenceServices as makeProofPersistenceServices, makeD1SessionStepUpServices as makeSessionStepUpServices, makeD1SignedSessionValidityServices as makeSignedSessionValidityServices, makeD1StatefulSessionServices as makeStatefulSessionServices, makeD1SubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
 
 //# sourceMappingURL=D1.mjs.map

package/dist/D1.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"D1.mjs","names":[],"sources":["../src/D1.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nexport { makeTotpPersistenceServices, coordinateTotpPersistence } from \"./drizzle/d1-totp\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\n\nexport {\n  makeD1OAuthAccountsServices as makeOAuthAccountsServices,\n  makeD1OAuthSignInServices as makeOAuthSignInServices,\n  makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices,\n  makeD1OAuthRegistrationServices as makeOAuthRegistrationServices,\n  coordinateD1OAuthRegistration as coordinateOAuthRegistration,\n  coordinateD1OAuthSignIn as coordinateOAuthSignIn,\n  coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents,\n  coordinateD1OAuthAccounts as coordinateOAuthAccounts,\n} from \"./drizzle/d1-oauth\";\n\nimport {\n  makeD1ExternalIdentityServices,\n  makeD1IdentityServices,\n  makeD1SubjectProvisioningServices,\n} from \"./drizzle/d1-identity\";\n\nexport {\n  coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority,\n  coordinateD1PendingAuthentication as coordinatePendingAuthentication,\n  coordinateD1SignedSessionValidity as coordinateSignedSessionValidity,\n  coordinateD1StatefulSessions as coordinateStatefulSessions,\n  makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices,\n  makeD1PendingAuthenticationServices as makePendingAuthenticationServices,\n  makeD1SignedSessionValidityServices as makeSignedSessionValidityServices,\n  makeD1StatefulSessionServices as makeStatefulSessionServices,\n} from \"./drizzle/d1-sessions\";\n\nexport {\n  coordinateD1ProofPersistence as coordinateProofPersistence,\n  makeD1ProofPersistenceServices as makeProofPersistenceServices,\n} from \"./drizzle/d1-proofs\";\n\nexport {\n  coordinateD1PasswordPersistence as coordinatePasswordPersistence,\n  coordinateD1PasswordRegistration as coordinatePasswordRegistration,\n  makeD1PasswordPersistenceServices as makePasswordPersistenceServices,\n  makeD1PasswordRegistrationServices as makePasswordRegistrationServices,\n} from \"./drizzle/d1-passwords\";\n\nexport {\n  coordinateD1EmailAddress as coordinateEmailAddress,\n  coordinateD1EmailRegistration as coordinateEmailRegistration,\n  makeD1EmailAddressServices as makeEmailAddressServices,\n  makeD1EmailRegistrationServices as makeEmailRegistrationServices,\n  makeD1EmailSignInServices as makeEmailSignInServices,\n} from \"./drizzle/d1-emails\";\n\nimport { type AuthTables, type D1GeneratedIdentityMapping } from \"./drizzle/model\";\nimport {\n  makeSqliteAuthServices,\n  makeSqliteAuthStoreServices,\n  makeSqliteOAuthStateServices,\n} from \"./drizzle/sqlite\";\n\nexport {\n  makeD1ExternalIdentityServices as makeExternalIdentityServices,\n  makeD1SubjectProvisioningServices as makeSubjectProvisioningServices,\n  makeSqliteAuthStoreServices as makeAuthStoreServices,\n  makeSqliteOAuthStateServices as makeOAuthStateServices,\n};\n\nexport const commitMode = \"batch\" as const;\n\nexport const makeAuthServices = <\n  C extends AnySQLiteTable,\n  R extends AnySQLiteTable,\n  S extends AnySQLiteTable,\n>(\n  database: EffectSQLiteD1Database<AnyRelations>,\n  mapping: AuthTables<C, R, S>,\n) => makeSqliteAuthServices(database, mapping);\n\nexport const makeIdentityServices = <\n  Subject extends AnySQLiteTable,\n  Identifier extends AnySQLiteTable,\n  External extends AnySQLiteTable,\n  Request extends AnySQLiteTable,\n  NativeId,\n>(\n  database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n  mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,\n) => makeD1IdentityServices(database, mapping);\n\nexport {\n  makeD1SessionStepUpServices as makeSessionStepUpServices,\n  coordinateD1SessionStepUp as coordinateSessionStepUp,\n} from \"./drizzle/d1-sessions\";\n\nexport {\n  makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices,\n  coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence,\n} from \"./drizzle/d1-password-prepared\";\n\nexport { passwordPreparedPersistenceLayer } from \"./drizzle/password-prepared-target\";\n\nimport { Effect } from \"effect\";\n\nimport { makeD1OAuthConnectedTarget } from \"./drizzle/oauth-connected-drivers\";\nimport type { OAuthD1Mapping } from \"./drizzle/oauth-model\";\n\nconst connectedTarget = makeD1OAuthConnectedTarget<\n  EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n  AnySQLiteTable<{ dialect: \"sqlite\" }>,\n  OAuthD1Mapping\n>({ mode: \"batch\", dialect: \"sqlite\", locking: false, standaloneGuard: () => Effect.void });\n\nexport const {\n  makeOAuthConnectedServices,\n  makeOAuthConnectedRevocationServices,\n  coordinateOAuthConnected,\n  coordinateOAuthConnectedRevocations,\n} = connectedTarget;\n\nexport {\n  makePasskeyCredentialServices,\n  makePasskeyPersistenceServices,\n  makePasskeyEnrollmentContextServices,\n  makePasskeyRegistrationCeremonyServices,\n  coordinatePasskeyPersistence,\n  coordinatePasskeyRegistrationCeremony,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n  coordinatePasskeyManagement,\n  coordinatePasskeyRegistration,\n} from \"./drizzle/d1-passkey\";\n\nexport { D1BatchStatements } from \"./drizzle/D1BatchStatements\";\n\nexport { makePhonePersistenceServices, coordinatePhonePersistence } from \"./drizzle/d1-phone\";\n"],"mappings":";;;;;;;;;;;;;;;;AAoEA,MAAa,aAAa;AAE1B,MAAa,oBAKX,UACA,YACG,uBAAuB,UAAU,OAAO;AAE7C,MAAa,wBAOX,UACA,YACG,uBAAuB,UAAU,OAAO;AAyB7C,MAAa,EACX,4BACA,sCACA,0BACA,wCAVsB,2BAItB;CAAE,MAAM;CAAS,SAAS;CAAU,SAAS;CAAO,uBAAuB,OAAO;AAAK,CAOrF"}
+{"version":3,"file":"D1.mjs","names":[],"sources":["../src/D1.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nexport { makeTotpPersistenceServices, coordinateTotpPersistence } from \"./drizzle/d1-totp\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\n\nexport {\n  makeD1OAuthAccountsServices as makeOAuthAccountsServices,\n  makeD1OAuthSignInServices as makeOAuthSignInServices,\n  makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices,\n  makeD1OAuthRegistrationServices as makeOAuthRegistrationServices,\n  coordinateD1OAuthRegistration as coordinateOAuthRegistration,\n  coordinateD1OAuthSignIn as coordinateOAuthSignIn,\n  coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents,\n  coordinateD1OAuthAccounts as coordinateOAuthAccounts,\n} from \"./drizzle/d1-oauth\";\n\nimport {\n  makeD1ExternalIdentityServices,\n  makeD1IdentityServices,\n  makeD1SubjectProvisioningServices,\n} from \"./drizzle/d1-identity\";\n\nexport {\n  coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority,\n  coordinateD1PendingAuthentication as coordinatePendingAuthentication,\n  coordinateD1SignedSessionValidity as coordinateSignedSessionValidity,\n  coordinateD1StatefulSessions as coordinateStatefulSessions,\n  makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices,\n  makeD1PendingAuthenticationServices as makePendingAuthenticationServices,\n  makeD1SignedSessionValidityServices as makeSignedSessionValidityServices,\n  makeD1StatefulSessionServices as makeStatefulSessionServices,\n} from \"./drizzle/d1-sessions\";\n\nexport {\n  coordinateD1ProofPersistence as coordinateProofPersistence,\n  makeD1ProofPersistenceServices as makeProofPersistenceServices,\n} from \"./drizzle/d1-proofs\";\n\nexport {\n  coordinateD1PasswordPersistence as coordinatePasswordPersistence,\n  coordinateD1PasswordRegistration as coordinatePasswordRegistration,\n  makeD1PasswordPersistenceServices as makePasswordPersistenceServices,\n  makeD1PasswordRegistrationServices as makePasswordRegistrationServices,\n} from \"./drizzle/d1-passwords\";\n\nexport {\n  coordinateD1EmailAddress as coordinateEmailAddress,\n  coordinateD1EmailRegistration as coordinateEmailRegistration,\n  makeD1EmailAddressServices as makeEmailAddressServices,\n  makeD1EmailRegistrationServices as makeEmailRegistrationServices,\n  makeD1EmailSignInServices as makeEmailSignInServices,\n} from \"./drizzle/d1-emails\";\n\nimport { type D1GeneratedIdentityMapping } from \"./drizzle/model\";\n\nexport {\n  makeD1ExternalIdentityServices as makeExternalIdentityServices,\n  makeD1SubjectProvisioningServices as makeSubjectProvisioningServices,\n};\n\nexport const commitMode = \"batch\" as const;\n\nexport const makeIdentityServices = <\n  Subject extends AnySQLiteTable,\n  Identifier extends AnySQLiteTable,\n  External extends AnySQLiteTable,\n  Request extends AnySQLiteTable,\n  NativeId,\n>(\n  database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n  mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,\n) => makeD1IdentityServices(database, mapping);\n\nexport {\n  makeD1SessionStepUpServices as makeSessionStepUpServices,\n  coordinateD1SessionStepUp as coordinateSessionStepUp,\n} from \"./drizzle/d1-sessions\";\n\nexport {\n  makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices,\n  coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence,\n} from \"./drizzle/d1-password-prepared\";\n\nexport { passwordPreparedPersistenceLayer } from \"./drizzle/password-prepared-target\";\n\nimport { Effect } from \"effect\";\n\nimport { makeD1OAuthConnectedTarget } from \"./drizzle/oauth-connected-drivers\";\nimport type { OAuthD1Mapping } from \"./drizzle/oauth-model\";\n\nconst connectedTarget = makeD1OAuthConnectedTarget<\n  EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n  AnySQLiteTable<{ dialect: \"sqlite\" }>,\n  OAuthD1Mapping\n>({ mode: \"batch\", dialect: \"sqlite\", locking: false, standaloneGuard: () => Effect.void });\n\nexport const {\n  makeOAuthConnectedServices,\n  makeOAuthConnectedRevocationServices,\n  coordinateOAuthConnected,\n  coordinateOAuthConnectedRevocations,\n} = connectedTarget;\n\nexport {\n  makePasskeyCredentialServices,\n  makePasskeyPersistenceServices,\n  makePasskeyEnrollmentContextServices,\n  makePasskeyRegistrationCeremonyServices,\n  coordinatePasskeyPersistence,\n  coordinatePasskeyRegistrationCeremony,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n  coordinatePasskeyManagement,\n  coordinatePasskeyRegistration,\n} from \"./drizzle/d1-passkey\";\n\nexport { D1BatchStatements } from \"./drizzle/D1BatchStatements\";\n\nexport { makePhonePersistenceServices, coordinatePhonePersistence } from \"./drizzle/d1-phone\";\n"],"mappings":";;;;;;;;;;;;;;;AA6DA,MAAa,aAAa;AAE1B,MAAa,wBAOX,UACA,YACG,uBAAuB,UAAU,OAAO;AAyB7C,MAAa,EACX,4BACA,sCACA,0BACA,wCAVsB,2BAItB;CAAE,MAAM;CAAS,SAAS;CAAU,SAAS;CAAO,uBAAuB,OAAO;AAAK,CAOrF"}