@yielded/auth-persistence-drizzle 0.1.0-beta.0

package/dist/drizzle/transaction-execution.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-execution.mjs","names":[],"sources":["../../src/drizzle/transaction-execution.ts"],"sourcesContent":["import { makeTransactionExecutionKernel } from \"@yielded/auth-persistence/Adapter\";\n\nimport { makeTransactionOwner, reportTransactionFailure } from \"./transaction-owner\";\nexport type { TransactionTargetConfiguration } from \"@yielded/auth-persistence/Adapter\";\nexport type { TransactionCoordinatorError } from \"@yielded/auth-persistence/Adapter\";\nexport type { TransactionBound } from \"@yielded/auth-persistence/Adapter\";\nexport type { TransactionExecution } from \"@yielded/auth-persistence/Adapter\";\n\nexport const {\n  sqlClientTransactionStandaloneGuard,\n  makeTransactionExecution,\n  coordinateTransactionOwner,\n} = makeTransactionExecutionKernel({ makeTransactionOwner, reportTransactionFailure });\n"],"mappings":";;;AAQA,MAAa,EACX,qCACA,0BACA,+BACE,+BAA+B;CAAE;CAAsB;AAAyB,CAAC"}

package/dist/drizzle/transaction-mysql.mjs

@@ -0,0 +1,47 @@
+import { Effect } from "effect";
+import { EffectMysql2Transaction } from "drizzle-orm/effect-mysql2";
+import { makeWithTransaction } from "effect/unstable/sql/SqlClient";
+//#region src/drizzle/transaction-mysql.ts
+/** Locking discovery and later SQL policy predicates must see the same current
+* authority. MySQL's default repeatable-read snapshot is unsuitable after a
+* contended authority lock. Own one connection and one-shot transaction mode;
+* the pooled connection's session default is never changed. */
+const mysqlTransaction = (unavailable, database, body) => Effect.scoped(Effect.gen(function* () {
+	const client = database.$client;
+	const connection = yield* client.reserve;
+	const nativeConnection = connection.conn;
+	if (typeof nativeConnection?.destroy !== "function" || typeof nativeConnection.release !== "function") return yield* Effect.fail(unavailable());
+	const destroy = nativeConnection.destroy.bind(nativeConnection);
+	const defaults = yield* connection.executeUnprepared("select @@session.transaction_isolation as isolation", [], void 0);
+	const isolation = String(defaults[0]?.isolation).replaceAll("-", " ").toUpperCase();
+	if (![
+		"READ UNCOMMITTED",
+		"READ COMMITTED",
+		"REPEATABLE READ",
+		"SERIALIZABLE"
+	].includes(isolation)) return yield* Effect.fail(unavailable());
+	const statement = (source) => Effect.asVoid(connection.executeUnprepared(source, [], void 0));
+	const transaction = makeWithTransaction({
+		transactionService: client.transactionService,
+		spanAttributes: [["db.system", "mysql"], ["effect_auth.owner", "oauth"]],
+		acquireConnection: Effect.succeed([void 0, connection]),
+		begin: () => statement("SET TRANSACTION ISOLATION LEVEL READ COMMITTED").pipe(Effect.andThen(statement("BEGIN"))),
+		commit: () => statement("COMMIT"),
+		rollback: () => statement("ROLLBACK"),
+		savepoint: (_connection, id) => statement(`SAVEPOINT effect_auth_oauth_${id}`),
+		releaseSavepoint: (_connection, id) => statement(`RELEASE SAVEPOINT effect_auth_oauth_${id}`),
+		rollbackSavepoint: (_connection, id) => statement(`ROLLBACK TO SAVEPOINT effect_auth_oauth_${id}`)
+	});
+	class NativeTransaction extends EffectMysql2Transaction {
+		transaction(nested) {
+			return transaction(Effect.suspend(() => nested(new NativeTransaction(database.dialect, database._.session, database._.relations))));
+		}
+	}
+	const native = new NativeTransaction(database.dialect, database._.session, database._.relations);
+	const cleanup = statement("ROLLBACK").pipe(Effect.andThen(statement(`SET TRANSACTION ISOLATION LEVEL ${isolation}`)), Effect.onExit((exit) => exit._tag === "Failure" ? Effect.sync(destroy) : Effect.void), Effect.orDie);
+	return yield* transaction(Effect.suspend(() => body(native))).pipe(Effect.ensuring(cleanup));
+}));
+//#endregion
+export { mysqlTransaction };
+
+//# sourceMappingURL=transaction-mysql.mjs.map

package/dist/drizzle/transaction-mysql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-mysql.mjs","names":[],"sources":["../../src/drizzle/transaction-mysql.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- this private acquisition preserves the installed native transaction; public wrappers retain its exact type. */\nimport { EffectMysql2Transaction } from \"drizzle-orm/effect-mysql2\";\nimport { Effect } from \"effect\";\nimport { makeWithTransaction, type SqlClient } from \"effect/unstable/sql/SqlClient\";\n\n/** Locking discovery and later SQL policy predicates must see the same current\n * authority. MySQL's default repeatable-read snapshot is unsuitable after a\n * contended authority lock. Own one connection and one-shot transaction mode;\n * the pooled connection's session default is never changed. */\nexport const mysqlTransaction = <A, E, R, Failure>(\n  unavailable: () => Failure,\n  database: any,\n  body: (transaction: any) => Effect.Effect<A, E, R>,\n) =>\n  Effect.scoped(\n    Effect.gen(function* () {\n      const client: SqlClient = database.$client;\n      const connection = yield* client.reserve;\n\n      // Installed @effect/sql-mysql2 ConnectionImpl exposes its reserved native\n      // PoolConnection as `conn`. Capture only its public disposal method; fail\n      // before transaction work if an installed driver no longer provides it.\n      const nativeConnection = (\n        connection as {\n          readonly conn?: { readonly destroy?: () => void; readonly release?: () => void };\n        }\n      ).conn;\n\n      if (\n        typeof nativeConnection?.destroy !== \"function\" ||\n        typeof nativeConnection.release !== \"function\"\n      )\n        return yield* Effect.fail(unavailable());\n      const destroy = nativeConnection.destroy.bind(nativeConnection);\n\n      const defaults = yield* connection.executeUnprepared(\n        \"select @@session.transaction_isolation as isolation\",\n        [],\n        undefined,\n      );\n\n      const isolation = String(defaults[0]?.isolation).replaceAll(\"-\", \" \").toUpperCase();\n\n      if (\n        ![\"READ UNCOMMITTED\", \"READ COMMITTED\", \"REPEATABLE READ\", \"SERIALIZABLE\"].includes(\n          isolation,\n        )\n      )\n        return yield* Effect.fail(unavailable());\n\n      const statement = (source: string) =>\n        Effect.asVoid(connection.executeUnprepared(source, [], undefined));\n\n      const transaction = makeWithTransaction({\n        transactionService: client.transactionService,\n        spanAttributes: [\n          [\"db.system\", \"mysql\"],\n          [\"effect_auth.owner\", \"oauth\"],\n        ],\n        acquireConnection: Effect.succeed([undefined, connection] as const),\n        begin: () =>\n          statement(\"SET TRANSACTION ISOLATION LEVEL READ COMMITTED\").pipe(\n            Effect.andThen(statement(\"BEGIN\")),\n          ),\n        commit: () => statement(\"COMMIT\"),\n        rollback: () => statement(\"ROLLBACK\"),\n        savepoint: (_connection, id) => statement(`SAVEPOINT effect_auth_oauth_${id}`),\n        releaseSavepoint: (_connection, id) =>\n          statement(`RELEASE SAVEPOINT effect_auth_oauth_${id}`),\n        rollbackSavepoint: (_connection, id) =>\n          statement(`ROLLBACK TO SAVEPOINT effect_auth_oauth_${id}`),\n      });\n\n      class NativeTransaction extends EffectMysql2Transaction<any, any> {\n        override transaction<A2, E2, R2>(nested: (tx: any) => Effect.Effect<A2, E2, R2>) {\n          return transaction(\n            Effect.suspend(() =>\n              nested(\n                new NativeTransaction(database.dialect, database._.session, database._.relations),\n              ),\n            ),\n          );\n        }\n      }\n\n      const native = new NativeTransaction(\n        database.dialect,\n        database._.session,\n        database._.relations,\n      );\n\n      const cleanup = statement(\"ROLLBACK\").pipe(\n        Effect.andThen(statement(`SET TRANSACTION ISOLATION LEVEL ${isolation}`)),\n        Effect.onExit((exit) => (exit._tag === \"Failure\" ? Effect.sync(destroy) : Effect.void)),\n        Effect.orDie,\n      );\n\n      return yield* transaction(Effect.suspend(() => body(native))).pipe(\n        // BEGIN/COMMIT acknowledgments can be lost after the server acted.\n        // Roll back any surviving transaction before resetting one-shot mode.\n        // Failed cleanup destroys the connection before its reserve is released;\n        // the unknown owner result cannot release a prepared receipt.\n        Effect.ensuring(cleanup),\n      );\n    }),\n  );\n"],"mappings":";;;;;;;;AASA,MAAa,oBACX,aACA,UACA,SAEA,OAAO,OACL,OAAO,IAAI,aAAa;CACtB,MAAM,SAAoB,SAAS;CACnC,MAAM,aAAa,OAAO,OAAO;CAKjC,MAAM,mBACJ,WAGA;CAEF,IACE,OAAO,kBAAkB,YAAY,cACrC,OAAO,iBAAiB,YAAY,YAEpC,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;CACzC,MAAM,UAAU,iBAAiB,QAAQ,KAAK,gBAAgB;CAE9D,MAAM,WAAW,OAAO,WAAW,kBACjC,uDACA,CAAC,GACD,KAAA,CACF;CAEA,MAAM,YAAY,OAAO,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,YAAY;CAElF,IACE,CAAC;EAAC;EAAoB;EAAkB;EAAmB;CAAc,CAAC,CAAC,SACzE,SACF,GAEA,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;CAEzC,MAAM,aAAa,WACjB,OAAO,OAAO,WAAW,kBAAkB,QAAQ,CAAC,GAAG,KAAA,CAAS,CAAC;CAEnE,MAAM,cAAc,oBAAoB;EACtC,oBAAoB,OAAO;EAC3B,gBAAgB,CACd,CAAC,aAAa,OAAO,GACrB,CAAC,qBAAqB,OAAO,CAC/B;EACA,mBAAmB,OAAO,QAAQ,CAAC,KAAA,GAAW,UAAU,CAAU;EAClE,aACE,UAAU,gDAAgD,CAAC,CAAC,KAC1D,OAAO,QAAQ,UAAU,OAAO,CAAC,CACnC;EACF,cAAc,UAAU,QAAQ;EAChC,gBAAgB,UAAU,UAAU;EACpC,YAAY,aAAa,OAAO,UAAU,+BAA+B,IAAI;EAC7E,mBAAmB,aAAa,OAC9B,UAAU,uCAAuC,IAAI;EACvD,oBAAoB,aAAa,OAC/B,UAAU,2CAA2C,IAAI;CAC7D,CAAC;CAED,MAAM,0BAA0B,wBAAkC;EAChE,YAAiC,QAAgD;GAC/E,OAAO,YACL,OAAO,cACL,OACE,IAAI,kBAAkB,SAAS,SAAS,SAAS,EAAE,SAAS,SAAS,EAAE,SAAS,CAClF,CACF,CACF;EACF;CACF;CAEA,MAAM,SAAS,IAAI,kBACjB,SAAS,SACT,SAAS,EAAE,SACX,SAAS,EAAE,SACb;CAEA,MAAM,UAAU,UAAU,UAAU,CAAC,CAAC,KACpC,OAAO,QAAQ,UAAU,mCAAmC,WAAW,CAAC,GACxE,OAAO,QAAQ,SAAU,KAAK,SAAS,YAAY,OAAO,KAAK,OAAO,IAAI,OAAO,IAAK,GACtF,OAAO,KACT;CAEA,OAAO,OAAO,YAAY,OAAO,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAK5D,OAAO,SAAS,OAAO,CACzB;AACF,CAAC,CACH"}

package/dist/drizzle/transaction-owner.d.mts

@@ -0,0 +1,2 @@
+import { Row, TransactionOwner } from "@yielded/auth-persistence/Adapter";
+export type { Row, TransactionOwner };

package/dist/drizzle/transaction-owner.mjs

@@ -0,0 +1,8 @@
+import { drizzleQueryOperations } from "./query-operations.mjs";
+import { makeTransactionKernel } from "@yielded/auth-persistence/Adapter";
+//#region src/drizzle/transaction-owner.ts
+const { reportTransactionFailure, both, makeTransactionRows, makeTransactionOwner } = makeTransactionKernel(drizzleQueryOperations);
+//#endregion
+export { both, makeTransactionOwner, makeTransactionRows, reportTransactionFailure };
+
+//# sourceMappingURL=transaction-owner.mjs.map

package/dist/drizzle/transaction-owner.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-owner.mjs","names":[],"sources":["../../src/drizzle/transaction-owner.ts"],"sourcesContent":["import { makeTransactionKernel } from \"@yielded/auth-persistence/Adapter\";\n\nimport { drizzleQueryOperations } from \"./query-operations\";\nexport type { Row } from \"@yielded/auth-persistence/Adapter\";\nexport type { TransactionNativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nexport type { Observation } from \"@yielded/auth-persistence/Adapter\";\nexport type { GuardedUpdate } from \"@yielded/auth-persistence/Adapter\";\nexport type { TransactionOwner } from \"@yielded/auth-persistence/Adapter\";\n\nexport const { reportTransactionFailure, both, makeTransactionRows, makeTransactionOwner } =\n  makeTransactionKernel(drizzleQueryOperations);\n"],"mappings":";;;AASA,MAAa,EAAE,0BAA0B,MAAM,qBAAqB,yBAClE,sBAAsB,sBAAsB"}

package/dist/index.d.mts

@@ -0,0 +1,27 @@
+import { AnyEmailAddressMapping, AnyEmailRegistrationMapping, AnyEmailSignInMapping, D1EmailAddressMapping, D1EmailRegistrationMapping, EmailAddressMapping, EmailAuthorityCredentialTable, EmailCommandTable, EmailCredentialReadTable, EmailCredentialTable, EmailD1Clock, EmailIdentifierReadTable, EmailIdentifierTable, EmailRegistrationAuthorityCredentialTable, EmailRegistrationCredentialTable, EmailRegistrationIdentifierTable, EmailRegistrationIntent, EmailRegistrationMapping, EmailRegistrationProvisioning, EmailRegistrationState, EmailRegistrationTable, EmailSignInMapping, EmailSubjectReadTable, EmailSubjectTable, RequiredEmailAddressConstraints, RequiredEmailRegistrationConstraints, RequiredEmailSignInConstraints, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints } from "./drizzle/email-model.mjs";
+import { AnyPasswordPersistenceMapping, AnyPasswordRegistrationMapping, D1PasswordPersistenceMapping, PasswordAttemptAction, PasswordAttemptRecord, PasswordAttemptState, PasswordAttemptTable, PasswordAuthorityCredentialTable, PasswordChargeTable, PasswordCommandTable, PasswordConstraintClassifier, PasswordCredentialTable, PasswordD1Clock, PasswordIdentifierTable, PasswordPersistenceMapping, PasswordRateScopeKind, PasswordRateScopeTable, PasswordRegistrationConstraintClassifier, PasswordRegistrationIntent, PasswordRegistrationMapping, PasswordRegistrationProvisioning, PasswordRegistrationState, PasswordRegistrationTable, PasswordScopeKeys, PasswordSubjectTable, RequiredPasswordConstraints, RequiredPasswordRegistrationConstraints, requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./drizzle/password-model.mjs";
+import { AuthStoreTables, AuthTables, ChallengeColumns, ChallengeConsumeDecision, ChallengeInput, ChallengeRecord, ChallengeTableMapping, CommitMode, ConsumeDecision, D1ExternalIdentityMapping, D1GeneratedIdentityMapping, D1SubjectProvisioningMapping, ExternalIdentityTables, IdentityTables, InstantCodec, OAuthStateColumns, OAuthStateTableMapping, OAuthStateTables, PersistenceMappingError, RegistrationColumns, RegistrationRecord, RegistrationTableMapping, RequiredAuthConstraints, RequiredAuthStoreConstraints, RequiredExternalIdentityConstraints, RequiredIdentityConstraints, RequiredOAuthStateConstraints, RequiredSubjectProvisioningConstraints, SubjectIdCodec, SubjectProvisioningTables, authServicesLayer, column, identityServicesLayer, isMappedConstraintConflict, provisioningFingerprint, requireStandaloneConsume, requiredAuthConstraints, requiredAuthStoreConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthStateConstraints, requiredSubjectProvisioningConstraints, updateValues } from "./drizzle/model.mjs";
+import { AnyProofPersistenceMapping, D1ProofPersistenceMapping, ProofAbuseEventTable, ProofAction, ProofAuthorityInput, ProofAuthorityTables, ProofCommandDecision, ProofCommandKind, ProofCommandTable, ProofConstraintClassifier, ProofContinuationRecord, ProofContinuationTable, ProofD1Clock, ProofDeliveryState, ProofFailureEventTable, ProofGenerationState, ProofGenerationTable, ProofPersistenceMapping, ProofRateScopeTable, ProofRequestTable, ProofScopeKeys, ProofScopeKind, ProofSeriesTable, RequiredProofConstraints, requiredProofConstraints } from "./drizzle/proof-model.mjs";
+import { AnyPasswordPreparedPersistenceMapping, D1PasswordPreparedPersistenceMapping, D1PasswordPreparedProofMapping, PasswordPreparedAdmissionTable, PasswordPreparedIntentTable, PasswordPreparedPersistenceMapping, PasswordPreparedProofMapping, PasswordPreparedState, RequiredPasswordPreparedConstraints, requiredPasswordPreparedConstraints } from "./drizzle/password-prepared-model.mjs";
+import { AuthenticationAuthorityMapping, D1AuthenticationAuthorityMapping, D1PendingAuthenticationMapping, D1SessionClockMapping, D1SignedSessionValidityMapping, D1StatefulSessionMapping, PendingAuthenticationMapping, PendingAuthenticationTables, RequiredPendingAuthenticationConstraints, RequiredSessionConstraints, RequiredSignedValidityConstraints, RequiredStatefulPendingConstraints, SessionAuthorityTables, SessionConstraintClassifier, SessionFlowTables, SessionIdCodec, SessionSubjectTables, SignedSessionValidityMapping, SignedSessionValidityTables, StatefulSessionMapping, StatefulSessionTables, requiredPendingAuthenticationConstraints, requiredSessionConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints } from "./drizzle/session-model.mjs";
+import { D1PasskeyMapping, PasskeyAdmissionTable, PasskeyCeremonyMapping, PasskeyChargeInsert, PasskeyChargeKind, PasskeyChargeTable, PasskeyClock, PasskeyColumn, PasskeyCredentialMapping, PasskeyCredentialOwnershipTable, PasskeyCredentialReadTable, PasskeyCredentialServices, PasskeyEnrollmentContextMapping, PasskeyEnrollmentContextServices, PasskeyFactorReadTable, PasskeyFlowInsert, PasskeyFlowState, PasskeyFlowTable, PasskeyHandleOwnershipTable, PasskeyHandleReadTable, PasskeyHandleReservationTable, PasskeyMappingSource, PasskeyModuleTable, PasskeyPersistenceMapping, PasskeyPersistenceServices, PasskeyPolicyGuard, PasskeySubjectIdCodec, PasskeySubjectReadTable, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyPersistenceLayer, passkeyPolicyGuard, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints } from "./drizzle/passkey-model.mjs";
+import { D1SessionStepUpMapping, RequiredSessionStepUpConstraints, SessionStepUpIntentTables, SessionStepUpMapping, SessionStepUpSourceTables, requiredSessionStepUpConstraints } from "./drizzle/step-up-model.mjs";
+import { OAuthAccountsMapping, OAuthAction, OAuthAuthorityReadTable, OAuthAuthorityTable, OAuthCleanupDescriptor, OAuthCleanupTable, OAuthClock, OAuthCredentialReadTable, OAuthCredentialTable, OAuthD1Mapping, OAuthEligibilityDescriptor, OAuthEligibilityFact, OAuthEligibilityTable, OAuthFlowState, OAuthFlowTable, OAuthMetadataPolicy, OAuthOwnershipMutation, OAuthOwnershipReadTable, OAuthOwnershipTable, OAuthReferenceGuardDescriptor, OAuthReferenceGuardTable, OAuthRegistrationAuthority, OAuthRegistrationBase, OAuthRegistrationCommandTable, OAuthRegistrationEligibility, OAuthRegistrationGuardDescriptor, OAuthRegistrationGuardTable, OAuthRegistrationIntentMapping, OAuthRegistrationIntentTable, OAuthRegistrationMapping, OAuthRegistrationState, OAuthSignInMapping, OAuthSubjectReadTable, OAuthSubjectTable, OAuthTupleAuthorityTable, OAuthTupleState, OAuthUnlinkCommandTable, oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./drizzle/oauth-model.mjs";
+import { OAuthConnectedAction, OAuthConnectedAdmissionTable, OAuthConnectedAuthorityMapping, OAuthConnectedClientRegistrationTable, OAuthConnectedCohortTable, OAuthConnectedCommandTable, OAuthConnectedFlowTable, OAuthConnectedGrantTable, OAuthConnectedMapping, OAuthConnectedOrderCodec, OAuthConnectedOwnershipRead, OAuthConnectedPolicyGuard, OAuthConnectedPolicyGuardTable, OAuthConnectedPolicyInput, OAuthConnectedRevocationJobTable, OAuthConnectedRevocationMapping, OAuthConnectedSqlPolicy, OAuthConnectedSubjectTable, oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./drizzle/oauth-connected-model.mjs";
+import { PasskeyRegistrationCeremonyCapabilities, PasskeyRegistrationCeremonyMapping, PasskeyRegistrationCeremonyServices, PasskeyRegistrationIntentReadTable, requiredPasskeyRegistrationCeremonyConstraints } from "./drizzle/passkey-registration-ceremony-model.mjs";
+import { authenticationAuthorityLayer, pendingAuthenticationLayer, signedSessionValidityLayer, statefulSessionLayers } from "./drizzle/session-target.mjs";
+import { proofPersistenceLayer } from "./drizzle/proof-target.mjs";
+import { emailAddressPersistenceLayer, emailRegistrationLayer, emailSignInTargetsLayer } from "./drizzle/email-target.mjs";
+import { oauthAccountsPersistenceLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer } from "./drizzle/oauth-target.mjs";
+import { oauthConnectedOwnershipReferences } from "./drizzle/oauth-connected-reference.mjs";
+import { oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer } from "./drizzle/oauth-connected-target.mjs";
+import { passwordPersistenceLayer, passwordRegistrationLayer } from "./drizzle/password-target.mjs";
+import { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target.mjs";
+import { D1TotpMapping, TotpMapping, TotpMappingSource, TotpPersistenceServices, requiredTotpConstraints, totpPersistenceLayer } from "./drizzle/totp-model.mjs";
+import { decodeTotpRecord, encodeTotpRecord } from "./drizzle/totp-state.mjs";
+import { PasskeyCommandTable, PasskeyCredentialInsert, PasskeyInvalidationInput, PasskeyInvalidationMutation, PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter, PasskeyWriteTables, passkeyInvalidationMutation, requiredPasskeyManagementConstraints, requiredPasskeyRegistrationWriteConstraints } from "./drizzle/passkey-write-model.mjs";
+import { passkeyManagementPersistenceLayer } from "./drizzle/passkey-write-target.mjs";
+import { D1PhoneMapping, PhoneMapping, PhoneMappingSource, PhonePersistenceServices, PhoneProofCompletionMapping, phonePersistenceLayer, phoneProofCompletionMapping, requiredPhoneConstraints } from "./drizzle/phone-model.mjs";
+import { OAuthStateDecisions } from "@yielded/auth/OAuth";
+import { AuthStoreDecisions } from "@yielded/auth/Persistence";
+export { type AnyEmailAddressMapping, type AnyEmailRegistrationMapping, type AnyEmailSignInMapping, type AnyPasswordPersistenceMapping, type AnyPasswordPreparedPersistenceMapping, type AnyPasswordRegistrationMapping, type AnyProofPersistenceMapping, AuthStoreDecisions, type AuthStoreTables, type AuthTables, type AuthenticationAuthorityMapping, type ChallengeColumns, type ChallengeConsumeDecision, type ChallengeInput, type ChallengeRecord, type ChallengeTableMapping, type CommitMode, type ConsumeDecision, type D1AuthenticationAuthorityMapping, type D1EmailAddressMapping, type D1EmailRegistrationMapping, type D1ExternalIdentityMapping, type D1GeneratedIdentityMapping, type D1PasskeyMapping, type D1PasswordPersistenceMapping, type D1PasswordPreparedPersistenceMapping, type D1PasswordPreparedProofMapping, type D1PendingAuthenticationMapping, type D1PhoneMapping, type D1ProofPersistenceMapping, type D1SessionClockMapping, type D1SessionStepUpMapping, type D1SignedSessionValidityMapping, type D1StatefulSessionMapping, type D1SubjectProvisioningMapping, type D1TotpMapping, type EmailAddressMapping, type EmailAuthorityCredentialTable, type EmailCommandTable, type EmailCredentialReadTable, type EmailCredentialTable, type EmailD1Clock, type EmailIdentifierReadTable, type EmailIdentifierTable, type EmailRegistrationAuthorityCredentialTable, type EmailRegistrationCredentialTable, type EmailRegistrationIdentifierTable, type EmailRegistrationIntent, type EmailRegistrationMapping, type EmailRegistrationProvisioning, type EmailRegistrationState, type EmailRegistrationTable, type EmailSignInMapping, type EmailSubjectReadTable, type EmailSubjectTable, type ExternalIdentityTables, type IdentityTables, type InstantCodec, type OAuthAccountsMapping, type OAuthAction, type OAuthAuthorityReadTable, type OAuthAuthorityTable, type OAuthCleanupDescriptor, type OAuthCleanupTable, type OAuthClock, type OAuthConnectedAction, type OAuthConnectedAdmissionTable, type OAuthConnectedAuthorityMapping, type OAuthConnectedClientRegistrationTable, type OAuthConnectedCohortTable, type OAuthConnectedCommandTable, type OAuthConnectedFlowTable, type OAuthConnectedGrantTable, type OAuthConnectedMapping, type OAuthConnectedOrderCodec, type OAuthConnectedOwnershipRead, type OAuthConnectedPolicyGuard, type OAuthConnectedPolicyGuardTable, type OAuthConnectedPolicyInput, type OAuthConnectedRevocationJobTable, type OAuthConnectedRevocationMapping, type OAuthConnectedSqlPolicy, type OAuthConnectedSubjectTable, type OAuthCredentialReadTable, type OAuthCredentialTable, type OAuthD1Mapping, type OAuthEligibilityDescriptor, type OAuthEligibilityFact, type OAuthEligibilityTable, type OAuthFlowState, type OAuthFlowTable, type OAuthMetadataPolicy, type OAuthOwnershipMutation, type OAuthOwnershipReadTable, type OAuthOwnershipTable, type OAuthReferenceGuardDescriptor, type OAuthReferenceGuardTable, type OAuthRegistrationAuthority, type OAuthRegistrationBase, type OAuthRegistrationCommandTable, type OAuthRegistrationEligibility, type OAuthRegistrationGuardDescriptor, type OAuthRegistrationGuardTable, type OAuthRegistrationIntentMapping, type OAuthRegistrationIntentTable, type OAuthRegistrationMapping, type OAuthRegistrationState, type OAuthSignInMapping, type OAuthStateColumns, OAuthStateDecisions, type OAuthStateTableMapping, type OAuthStateTables, type OAuthSubjectReadTable, type OAuthSubjectTable, type OAuthTupleAuthorityTable, type OAuthTupleState, type OAuthUnlinkCommandTable, type PasskeyAdmissionTable, type PasskeyCeremonyMapping, type PasskeyChargeInsert, type PasskeyChargeKind, type PasskeyChargeTable, type PasskeyClock, type PasskeyColumn, type PasskeyCommandTable, type PasskeyCredentialInsert, type PasskeyCredentialMapping, type PasskeyCredentialOwnershipTable, type PasskeyCredentialReadTable, type PasskeyCredentialServices, type PasskeyEnrollmentContextMapping, type PasskeyEnrollmentContextServices, type PasskeyFactorReadTable, type PasskeyFlowInsert, type PasskeyFlowState, type PasskeyFlowTable, type PasskeyHandleOwnershipTable, type PasskeyHandleReadTable, type PasskeyHandleReservationTable, type PasskeyInvalidationInput, type PasskeyInvalidationMutation, type PasskeyManagementMapping, type PasskeyManagementServices, type PasskeyMappingSource, type PasskeyModuleTable, type PasskeyPersistenceMapping, type PasskeyPersistenceServices, type PasskeyPolicyGuard, type PasskeyRegistrationCeremonyCapabilities, type PasskeyRegistrationCeremonyMapping, type PasskeyRegistrationCeremonyServices, type PasskeyRegistrationIntentReadTable, type PasskeyRegistrationMapping, type PasskeyRegistrationServices, type PasskeyRegistrationWriter, type PasskeySubjectIdCodec, type PasskeySubjectReadTable, type PasskeyWriteTables, type PasswordAttemptAction, type PasswordAttemptRecord, type PasswordAttemptState, type PasswordAttemptTable, type PasswordAuthorityCredentialTable, type PasswordChargeTable, type PasswordCommandTable, type PasswordConstraintClassifier, type PasswordCredentialTable, type PasswordD1Clock, type PasswordIdentifierTable, type PasswordPersistenceMapping, type PasswordPreparedAdmissionTable, type PasswordPreparedIntentTable, type PasswordPreparedPersistenceMapping, type PasswordPreparedProofMapping, type PasswordPreparedState, type PasswordRateScopeKind, type PasswordRateScopeTable, type PasswordRegistrationConstraintClassifier, type PasswordRegistrationIntent, type PasswordRegistrationMapping, type PasswordRegistrationProvisioning, type PasswordRegistrationState, type PasswordRegistrationTable, type PasswordScopeKeys, type PasswordSubjectTable, type PendingAuthenticationMapping, type PendingAuthenticationTables, type PersistenceMappingError, type PhoneMapping, type PhoneMappingSource, type PhonePersistenceServices, type PhoneProofCompletionMapping, type ProofAbuseEventTable, type ProofAction, type ProofAuthorityInput, type ProofAuthorityTables, type ProofCommandDecision, type ProofCommandKind, type ProofCommandTable, type ProofConstraintClassifier, type ProofContinuationRecord, type ProofContinuationTable, type ProofD1Clock, type ProofDeliveryState, type ProofFailureEventTable, type ProofGenerationState, type ProofGenerationTable, type ProofPersistenceMapping, type ProofRateScopeTable, type ProofRequestTable, type ProofScopeKeys, type ProofScopeKind, type ProofSeriesTable, type RegistrationColumns, type RegistrationRecord, type RegistrationTableMapping, type RequiredAuthConstraints, type RequiredAuthStoreConstraints, type RequiredEmailAddressConstraints, type RequiredEmailRegistrationConstraints, type RequiredEmailSignInConstraints, type RequiredExternalIdentityConstraints, type RequiredIdentityConstraints, type RequiredOAuthStateConstraints, type RequiredPasswordConstraints, type RequiredPasswordPreparedConstraints, type RequiredPasswordRegistrationConstraints, type RequiredPendingAuthenticationConstraints, type RequiredProofConstraints, type RequiredSessionConstraints, type RequiredSessionStepUpConstraints, type RequiredSignedValidityConstraints, type RequiredStatefulPendingConstraints, type RequiredSubjectProvisioningConstraints, type SessionAuthorityTables, type SessionConstraintClassifier, type SessionFlowTables, type SessionIdCodec, type SessionStepUpIntentTables, type SessionStepUpMapping, type SessionStepUpSourceTables, type SessionSubjectTables, type SignedSessionValidityMapping, type SignedSessionValidityTables, type StatefulSessionMapping, type StatefulSessionTables, type SubjectIdCodec, type SubjectProvisioningTables, type TotpMapping, type TotpMappingSource, type TotpPersistenceServices, authServicesLayer, authenticationAuthorityLayer, column, decodeTotpRecord, emailAddressPersistenceLayer, emailRegistrationLayer, emailSignInTargetsLayer, encodeTotpRecord, identityServicesLayer, isMappedConstraintConflict, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedOwnershipReferences, oauthConnectedPersistenceLayer, oauthConnectedPolicyGuard, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyInvalidationMutation, passkeyManagementPersistenceLayer, passkeyPersistenceLayer, passkeyPolicyGuard, passwordPersistenceLayer, passwordPreparedPersistenceLayer, passwordRegistrationLayer, pendingAuthenticationLayer, phonePersistenceLayer, phoneProofCompletionMapping, proofPersistenceLayer, provisioningFingerprint, requireStandaloneConsume, requiredAuthConstraints, requiredAuthStoreConstraints, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthStateConstraints, requiredOAuthTupleConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyManagementConstraints, requiredPasskeyPersistenceConstraints, requiredPasskeyRegistrationCeremonyConstraints, requiredPasskeyRegistrationWriteConstraints, requiredPasswordConstraints, requiredPasswordPreparedConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredPhoneConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, requiredSubjectProvisioningConstraints, requiredTotpConstraints, signedSessionValidityLayer, statefulSessionLayers, totpPersistenceLayer, updateValues };

package/dist/index.mjs

@@ -0,0 +1,27 @@
+import { requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints } from "./drizzle/email-model.mjs";
+import { requiredPasswordConstraints, requiredPasswordRegistrationConstraints } from "./drizzle/password-model.mjs";
+import { requiredPasswordPreparedConstraints } from "./drizzle/password-prepared-model.mjs";
+import { requiredProofConstraints } from "./drizzle/proof-model.mjs";
+import { PersistenceMappingError, authServicesLayer, column, identityServicesLayer, isMappedConstraintConflict, provisioningFingerprint, requireStandaloneConsume, requiredAuthConstraints, requiredAuthStoreConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthStateConstraints, requiredSubjectProvisioningConstraints, updateValues } from "./drizzle/model.mjs";
+import { requiredPendingAuthenticationConstraints, requiredSessionConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints } from "./drizzle/session-model.mjs";
+import { passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyPersistenceLayer, passkeyPolicyGuard, requiredPasskeyCredentialConstraints, requiredPasskeyPersistenceConstraints } from "./drizzle/passkey-model.mjs";
+import { requiredSessionStepUpConstraints } from "./drizzle/step-up-model.mjs";
+import { oauthCleanupTable, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationGuardTable, requiredOAuthAccountsConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthTupleConstraints } from "./drizzle/oauth-model.mjs";
+import { oauthConnectedPolicyGuard, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints } from "./drizzle/oauth-connected-model.mjs";
+import { requiredPasskeyRegistrationCeremonyConstraints } from "./drizzle/passkey-registration-ceremony-model.mjs";
+import { authenticationAuthorityLayer, pendingAuthenticationLayer, signedSessionValidityLayer, statefulSessionLayers } from "./drizzle/session-target.mjs";
+import { emailAddressPersistenceLayer, emailRegistrationLayer, emailSignInTargetsLayer } from "./drizzle/email-target.mjs";
+import { oauthAccountsPersistenceLayer, oauthRegistrationAuthorityLayer, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer } from "./drizzle/oauth-target.mjs";
+import { oauthConnectedOwnershipReferences } from "./drizzle/oauth-connected-reference.mjs";
+import { oauthConnectedPersistenceLayer, oauthConnectedRevocationsLayer } from "./drizzle/oauth-connected-target.mjs";
+import { passwordPersistenceLayer, passwordRegistrationLayer } from "./drizzle/password-target.mjs";
+import { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target.mjs";
+import { proofPersistenceLayer } from "./drizzle/proof-target.mjs";
+import { requiredTotpConstraints, totpPersistenceLayer } from "./drizzle/totp-model.mjs";
+import { decodeTotpRecord, encodeTotpRecord } from "./drizzle/totp-state.mjs";
+import { passkeyInvalidationMutation, requiredPasskeyManagementConstraints, requiredPasskeyRegistrationWriteConstraints } from "./drizzle/passkey-write-model.mjs";
+import { passkeyManagementPersistenceLayer } from "./drizzle/passkey-write-target.mjs";
+import { phonePersistenceLayer, phoneProofCompletionMapping, requiredPhoneConstraints } from "./drizzle/phone-model.mjs";
+import { OAuthStateDecisions } from "@yielded/auth/OAuth";
+import { AuthStoreDecisions } from "@yielded/auth/Persistence";
+export { AuthStoreDecisions, OAuthStateDecisions, PersistenceMappingError, authServicesLayer, authenticationAuthorityLayer, column, decodeTotpRecord, emailAddressPersistenceLayer, emailRegistrationLayer, emailSignInTargetsLayer, encodeTotpRecord, identityServicesLayer, isMappedConstraintConflict, oauthAccountsPersistenceLayer, oauthCleanupTable, oauthConnectedOwnershipReferences, oauthConnectedPersistenceLayer, oauthConnectedPolicyGuard, oauthConnectedRevocationsLayer, oauthEligibilityTable, oauthReferenceGuardTable, oauthRegistrationAuthorityLayer, oauthRegistrationGuardTable, oauthRegistrationIntentsLayer, oauthSignInPersistenceLayer, passkeyCredentialsLayer, passkeyEnrollmentContextLayer, passkeyInvalidationMutation, passkeyManagementPersistenceLayer, passkeyPersistenceLayer, passkeyPolicyGuard, passwordPersistenceLayer, passwordPreparedPersistenceLayer, passwordRegistrationLayer, pendingAuthenticationLayer, phonePersistenceLayer, phoneProofCompletionMapping, proofPersistenceLayer, provisioningFingerprint, requireStandaloneConsume, requiredAuthConstraints, requiredAuthStoreConstraints, requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthAccountsConstraints, requiredOAuthConnectedConstraints, requiredOAuthConnectedRevocationConstraints, requiredOAuthRegistrationConstraints, requiredOAuthSignInConstraints, requiredOAuthStateConstraints, requiredOAuthTupleConstraints, requiredPasskeyCredentialConstraints, requiredPasskeyManagementConstraints, requiredPasskeyPersistenceConstraints, requiredPasskeyRegistrationCeremonyConstraints, requiredPasskeyRegistrationWriteConstraints, requiredPasswordConstraints, requiredPasswordPreparedConstraints, requiredPasswordRegistrationConstraints, requiredPendingAuthenticationConstraints, requiredPhoneConstraints, requiredProofConstraints, requiredSessionConstraints, requiredSessionStepUpConstraints, requiredSignedValidityConstraints, requiredStatefulPendingConstraints, requiredSubjectProvisioningConstraints, requiredTotpConstraints, signedSessionValidityLayer, statefulSessionLayers, totpPersistenceLayer, updateValues };

package/dist/internal/drizzle-migrations.mjs

@@ -0,0 +1,19 @@
+import { PersistenceConfigurationError } from "@yielded/auth-persistence/Adapter";
+import { Effect, Layer } from "effect";
+//#region src/internal/drizzle-migrations.ts
+/** Run Drizzle Kit output through the matching Drizzle driver. Loading files and
+* acquiring the database are deferred until the Layer is built. Drizzle owns the
+* migration journal and transaction; failed migrations prevent auth startup.
+*/
+const drizzleMigrationsLayer = (acquire, migrator) => (options) => Layer.effectDiscard(Effect.gen(function* () {
+	const database = yield* acquire;
+	const migrate = yield* migrator;
+	yield* yield* Effect.try({
+		try: () => migrate(database, options),
+		catch: () => PersistenceConfigurationError.make({ reason: "Could not read Drizzle migrations; check the migration source and format" })
+	});
+}));
+//#endregion
+export { drizzleMigrationsLayer };
+
+//# sourceMappingURL=drizzle-migrations.mjs.map

package/dist/internal/drizzle-migrations.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-migrations.mjs","names":[],"sources":["../../src/internal/drizzle-migrations.ts"],"sourcesContent":["import { PersistenceConfigurationError } from \"@yielded/auth-persistence/Adapter\";\nimport { Effect, Layer } from \"effect\";\n\n/** Run Drizzle Kit output through the matching Drizzle driver. Loading files and\n * acquiring the database are deferred until the Layer is built. Drizzle owns the\n * migration journal and transaction; failed migrations prevent auth startup.\n */\nexport const drizzleMigrationsLayer =\n  <Database, Options, E, R>(\n    acquire: Effect.Effect<Database, never, R>,\n    migrator: Effect.Effect<(database: Database, options: Options) => Effect.Effect<void, E>>,\n  ) =>\n  (options: Options) =>\n    Layer.effectDiscard(\n      Effect.gen(function* () {\n        const database = yield* acquire;\n        const migrate = yield* migrator;\n\n        const migration = yield* Effect.try({\n          try: () => migrate(database, options),\n          catch: () =>\n            PersistenceConfigurationError.make({\n              reason: \"Could not read Drizzle migrations; check the migration source and format\",\n            }),\n        });\n\n        yield* migration;\n      }),\n    );\n"],"mappings":";;;;;;;AAOA,MAAa,0BAET,SACA,cAED,YACC,MAAM,cACJ,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,OAAO;CACxB,MAAM,UAAU,OAAO;CAUvB,OAAO,OARkB,OAAO,IAAI;EAClC,WAAW,QAAQ,UAAU,OAAO;EACpC,aACE,8BAA8B,KAAK,EACjC,QAAQ,2EACV,CAAC;CACL,CAAC;AAGH,CAAC,CACH"}

package/dist/internal/drizzle-postgres.mjs

@@ -0,0 +1,37 @@
+import { drizzleQueryOperations } from "../drizzle/query-operations.mjs";
+import { PersistenceConfigurationError, createPersistence, makeComposedPasskeys } from "@yielded/auth-persistence/Adapter";
+import { getTableColumns } from "drizzle-orm";
+import { bigint, boolean, getTableConfig, pgTable, text, uniqueIndex } from "drizzle-orm/pg-core";
+//#region src/internal/drizzle-postgres.ts
+const makeTable = (definition) => pgTable(definition.name, Object.fromEntries(Object.entries(definition.columns).map(([key, column]) => {
+	const builder = column.type === "text" ? text(column.name) : column.type === "boolean" ? boolean(column.name) : bigint(column.name, { mode: "number" });
+	return [key, column.nullable ? builder : builder.notNull()];
+})), (columns) => definition.unique.map((keys, i) => {
+	const [first, ...rest] = keys;
+	if (first === void 0) throw PersistenceConfigurationError.make({ reason: "An empty unique key is invalid" });
+	return uniqueIndex(`${definition.name}_key_${i}`).on(columns[first], ...rest.map((key) => columns[key]));
+}));
+const describe = (table) => {
+	const config = getTableConfig(table);
+	return {
+		name: config.name,
+		...config.schema === void 0 ? {} : { schema: config.schema },
+		columns: Object.fromEntries(Object.entries(getTableColumns(table)).map(([key, column]) => [key, {
+			name: column.name,
+			type: column.dataType === "boolean" ? "boolean" : column.dataType === "number" ? "integer" : "text",
+			nullable: !column.notNull
+		}])),
+		unique: []
+	};
+};
+const postgresPersistence = (acquire) => createPersistence({
+	makeTable,
+	describe,
+	operations: drizzleQueryOperations,
+	acquire,
+	passkeys: makeComposedPasskeys(drizzleQueryOperations)
+});
+//#endregion
+export { postgresPersistence };
+
+//# sourceMappingURL=drizzle-postgres.mjs.map

package/dist/internal/drizzle-postgres.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-postgres.mjs","names":[],"sources":["../../src/internal/drizzle-postgres.ts"],"sourcesContent":["import {\n  PersistenceConfigurationError,\n  makeComposedPasskeys,\n  createPersistence,\n} from \"@yielded/auth-persistence/Adapter\";\nimport type { StorageTable } from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns } from \"drizzle-orm\";\nimport {\n  getTableConfig,\n  bigint,\n  boolean,\n  pgTable,\n  text,\n  uniqueIndex,\n  type PgTable,\n} from \"drizzle-orm/pg-core\";\nimport type { Effect } from \"effect\";\nimport type { SqlClient } from \"effect/unstable/sql/SqlClient\";\n\nimport { drizzleQueryOperations } from \"../drizzle/query-operations\";\n\nconst makeTable = (definition: StorageTable) =>\n  pgTable(\n    definition.name,\n    Object.fromEntries(\n      Object.entries(definition.columns).map(([key, column]) => {\n        const builder =\n          column.type === \"text\"\n            ? text(column.name)\n            : column.type === \"boolean\"\n              ? boolean(column.name)\n              : bigint(column.name, { mode: \"number\" });\n\n        return [key, column.nullable ? builder : builder.notNull()];\n      }),\n    ),\n    (columns) =>\n      definition.unique.map((keys, i) => {\n        const [first, ...rest] = keys;\n\n        if (first === undefined)\n          throw PersistenceConfigurationError.make({ reason: \"An empty unique key is invalid\" });\n\n        return uniqueIndex(`${definition.name}_key_${i}`).on(\n          columns[first],\n          ...rest.map((key) => columns[key]),\n        );\n      }),\n  );\n\nconst describe = (table: PgTable): StorageTable => {\n  const config = getTableConfig(table);\n\n  return {\n    name: config.name,\n    ...(config.schema === undefined ? {} : { schema: config.schema }),\n    columns: Object.fromEntries(\n      Object.entries(getTableColumns(table)).map(([key, column]) => [\n        key,\n        {\n          name: column.name,\n          type:\n            column.dataType === \"boolean\"\n              ? \"boolean\"\n              : column.dataType === \"number\"\n                ? \"integer\"\n                : \"text\",\n          nullable: !column.notNull,\n        },\n      ]),\n    ),\n    unique: [],\n  };\n};\n\nexport const postgresPersistence = <R>(acquire: Effect.Effect<object, never, R | SqlClient>) =>\n  createPersistence<PgTable, R>({\n    makeTable,\n    describe,\n    operations: drizzleQueryOperations,\n    acquire,\n    passkeys: makeComposedPasskeys(drizzleQueryOperations),\n  });\n"],"mappings":";;;;;AAqBA,MAAM,aAAa,eACjB,QACE,WAAW,MACX,OAAO,YACL,OAAO,QAAQ,WAAW,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY;CACxD,MAAM,UACJ,OAAO,SAAS,SACZ,KAAK,OAAO,IAAI,IAChB,OAAO,SAAS,YACd,QAAQ,OAAO,IAAI,IACnB,OAAO,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CAE9C,OAAO,CAAC,KAAK,OAAO,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAC5D,CAAC,CACH,IACC,YACC,WAAW,OAAO,KAAK,MAAM,MAAM;CACjC,MAAM,CAAC,OAAO,GAAG,QAAQ;CAEzB,IAAI,UAAU,KAAA,GACZ,MAAM,8BAA8B,KAAK,EAAE,QAAQ,iCAAiC,CAAC;CAEvF,OAAO,YAAY,GAAG,WAAW,KAAK,OAAO,GAAG,CAAC,CAAC,GAChD,QAAQ,QACR,GAAG,KAAK,KAAK,QAAQ,QAAQ,IAAI,CACnC;AACF,CAAC,CACL;AAEF,MAAM,YAAY,UAAiC;CACjD,MAAM,SAAS,eAAe,KAAK;CAEnC,OAAO;EACL,MAAM,OAAO;EACb,GAAI,OAAO,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,OAAO;EAC/D,SAAS,OAAO,YACd,OAAO,QAAQ,gBAAgB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CAC5D,KACA;GACE,MAAM,OAAO;GACb,MACE,OAAO,aAAa,YAChB,YACA,OAAO,aAAa,WAClB,YACA;GACR,UAAU,CAAC,OAAO;EACpB,CACF,CAAC,CACH;EACA,QAAQ,CAAC;CACX;AACF;AAEA,MAAa,uBAA0B,YACrC,kBAA8B;CAC5B;CACA;CACA,YAAY;CACZ;CACA,UAAU,qBAAqB,sBAAsB;AACvD,CAAC"}

package/dist/internal/drizzle-sqlite.mjs

@@ -0,0 +1,35 @@
+import { drizzleQueryOperations } from "../drizzle/query-operations.mjs";
+import { PersistenceConfigurationError, createPersistence, makeComposedPasskeys } from "@yielded/auth-persistence/Adapter";
+import { getTableColumns } from "drizzle-orm";
+import { getTableConfig, integer, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
+//#region src/internal/drizzle-sqlite.ts
+const makeTable = (definition) => sqliteTable(definition.name, Object.fromEntries(Object.entries(definition.columns).map(([key, column]) => {
+	const builder = column.type === "text" ? text(column.name) : column.type === "boolean" ? integer(column.name, { mode: "boolean" }) : integer(column.name);
+	return [key, column.nullable ? builder : builder.notNull()];
+})), (columns) => definition.unique.map((keys, i) => {
+	const [first, ...rest] = keys;
+	if (first === void 0) throw PersistenceConfigurationError.make({ reason: "An empty unique key is invalid" });
+	return uniqueIndex(`${definition.name}_key_${i}`).on(columns[first], ...rest.map((key) => columns[key]));
+}));
+const describe = (table) => {
+	return {
+		name: getTableConfig(table).name,
+		columns: Object.fromEntries(Object.entries(getTableColumns(table)).map(([key, column]) => [key, {
+			name: column.name,
+			type: column.dataType === "boolean" ? "boolean" : column.dataType === "number" ? "integer" : "text",
+			nullable: !column.notNull
+		}])),
+		unique: []
+	};
+};
+const sqlitePersistence = (acquire) => createPersistence({
+	makeTable,
+	describe,
+	operations: drizzleQueryOperations,
+	acquire,
+	passkeys: makeComposedPasskeys(drizzleQueryOperations)
+});
+//#endregion
+export { sqlitePersistence };
+
+//# sourceMappingURL=drizzle-sqlite.mjs.map

package/dist/internal/drizzle-sqlite.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-sqlite.mjs","names":[],"sources":["../../src/internal/drizzle-sqlite.ts"],"sourcesContent":["import {\n  PersistenceConfigurationError,\n  makeComposedPasskeys,\n  createPersistence,\n} from \"@yielded/auth-persistence/Adapter\";\nimport type { StorageTable } from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns } from \"drizzle-orm\";\nimport {\n  getTableConfig,\n  integer,\n  sqliteTable,\n  text,\n  uniqueIndex,\n  type SQLiteTable,\n} from \"drizzle-orm/sqlite-core\";\nimport type { Effect } from \"effect\";\nimport type { SqlClient } from \"effect/unstable/sql/SqlClient\";\n\nimport { drizzleQueryOperations } from \"../drizzle/query-operations\";\n\nconst makeTable = (definition: StorageTable) =>\n  sqliteTable(\n    definition.name,\n    Object.fromEntries(\n      Object.entries(definition.columns).map(([key, column]) => {\n        const builder =\n          column.type === \"text\"\n            ? text(column.name)\n            : column.type === \"boolean\"\n              ? integer(column.name, { mode: \"boolean\" })\n              : integer(column.name);\n\n        return [key, column.nullable ? builder : builder.notNull()];\n      }),\n    ),\n    (columns) =>\n      definition.unique.map((keys, i) => {\n        const [first, ...rest] = keys;\n\n        if (first === undefined)\n          throw PersistenceConfigurationError.make({ reason: \"An empty unique key is invalid\" });\n\n        return uniqueIndex(`${definition.name}_key_${i}`).on(\n          columns[first],\n          ...rest.map((key) => columns[key]),\n        );\n      }),\n  );\n\nconst describe = (table: SQLiteTable): StorageTable => {\n  const config = getTableConfig(table);\n\n  return {\n    name: config.name,\n    columns: Object.fromEntries(\n      Object.entries(getTableColumns(table)).map(([key, column]) => [\n        key,\n        {\n          name: column.name,\n          type:\n            column.dataType === \"boolean\"\n              ? \"boolean\"\n              : column.dataType === \"number\"\n                ? \"integer\"\n                : \"text\",\n          nullable: !column.notNull,\n        },\n      ]),\n    ),\n    unique: [],\n  };\n};\n\nexport const sqlitePersistence = <R>(acquire: Effect.Effect<object, never, R | SqlClient>) =>\n  createPersistence<SQLiteTable, R>({\n    makeTable,\n    describe,\n    operations: drizzleQueryOperations,\n    acquire,\n    passkeys: makeComposedPasskeys(drizzleQueryOperations),\n  });\n"],"mappings":";;;;;AAoBA,MAAM,aAAa,eACjB,YACE,WAAW,MACX,OAAO,YACL,OAAO,QAAQ,WAAW,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY;CACxD,MAAM,UACJ,OAAO,SAAS,SACZ,KAAK,OAAO,IAAI,IAChB,OAAO,SAAS,YACd,QAAQ,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,IACxC,QAAQ,OAAO,IAAI;CAE3B,OAAO,CAAC,KAAK,OAAO,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAC5D,CAAC,CACH,IACC,YACC,WAAW,OAAO,KAAK,MAAM,MAAM;CACjC,MAAM,CAAC,OAAO,GAAG,QAAQ;CAEzB,IAAI,UAAU,KAAA,GACZ,MAAM,8BAA8B,KAAK,EAAE,QAAQ,iCAAiC,CAAC;CAEvF,OAAO,YAAY,GAAG,WAAW,KAAK,OAAO,GAAG,CAAC,CAAC,GAChD,QAAQ,QACR,GAAG,KAAK,KAAK,QAAQ,QAAQ,IAAI,CACnC;AACF,CAAC,CACL;AAEF,MAAM,YAAY,UAAqC;CAGrD,OAAO;EACL,MAHa,eAAe,KAGjB,CAAC,CAAC;EACb,SAAS,OAAO,YACd,OAAO,QAAQ,gBAAgB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CAC5D,KACA;GACE,MAAM,OAAO;GACb,MACE,OAAO,aAAa,YAChB,YACA,OAAO,aAAa,WAClB,YACA;GACR,UAAU,CAAC,OAAO;EACpB,CACF,CAAC,CACH;EACA,QAAQ,CAAC;CACX;AACF;AAEA,MAAa,qBAAwB,YACnC,kBAAkC;CAChC;CACA;CACA,YAAY;CACZ;CACA,UAAU,qBAAqB,sBAAsB;AACvD,CAAC"}

package/package.json

@@ -0,0 +1 @@
+{"name":"@yielded/auth-persistence-drizzle","version":"0.1.0-beta.0","dependencies":{"@noble/hashes":"2.3.0","@yielded/auth":"0.1.0-beta.10","@yielded/auth-crypto":"0.1.0-beta.0","@yielded/auth-persistence":"0.1.0-beta.10"},"devDependencies":{"@effect/platform-bun":"4.0.0-rc.117","@effect/platform-node":"4.0.0-rc.117","@effect/sql-d1":"4.0.0-rc.117","@effect/sql-libsql":"4.0.0-rc.117","@effect/sql-mysql2":"4.0.0-rc.117","@effect/sql-pg":"4.0.0-rc.117","@effect/sql-pglite":"4.0.0-rc.117","@effect/sql-sqlite-bun":"4.0.0-rc.117","@effect/sql-sqlite-do":"4.0.0-rc.117","@effect/sql-sqlite-node":"4.0.0-rc.117","@effect/sql-sqlite-wasm":"4.0.0-rc.117","@effect/vitest":"4.0.0-rc.117","drizzle-orm":"1.0.0-rc.5-ab785fc","effect":"4.0.0-rc.117","typescript":"7.0.2","vite-plus":"1.0.0-rc.0"},"peerDependencies":{"@effect/sql-d1":">=4.0.0-rc.117","@effect/sql-libsql":">=4.0.0-rc.117","@effect/sql-mysql2":">=4.0.0-rc.117","@effect/sql-pg":">=4.0.0-rc.117","@effect/sql-pglite":">=4.0.0-rc.117","@effect/sql-sqlite-bun":">=4.0.0-rc.117","@effect/sql-sqlite-do":">=4.0.0-rc.117","@effect/sql-sqlite-node":">=4.0.0-rc.117","@effect/sql-sqlite-wasm":">=4.0.0-rc.117","drizzle-orm":">=1.0.0-rc.5-ab785fc","effect":"^4.0.0-rc.117"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./D1":{"types":"./dist/D1.d.mts","default":"./dist/D1.mjs"},"./Libsql":{"types":"./dist/Libsql.d.mts","default":"./dist/Libsql.mjs"},"./Mysql2":{"types":"./dist/Mysql2.d.mts","default":"./dist/Mysql2.mjs"},"./Pglite":{"types":"./dist/Pglite.d.mts","default":"./dist/Pglite.mjs"},"./Postgres":{"types":"./dist/Postgres.d.mts","default":"./dist/Postgres.mjs"},"./SqliteBun":{"types":"./dist/SqliteBun.d.mts","default":"./dist/SqliteBun.mjs"},"./SqliteDo":{"types":"./dist/SqliteDo.d.mts","default":"./dist/SqliteDo.mjs"},"./SqliteNode":{"types":"./dist/SqliteNode.d.mts","default":"./dist/SqliteNode.mjs"},"./SqliteWasm":{"types":"./dist/SqliteWasm.d.mts","default":"./dist/SqliteWasm.mjs"}},"description":"Drizzle persistence, table mappings, and migration adapters for Yielded Auth.","homepage":"https://yielded.dev/auth/","bugs":{"url":"https://github.com/yielded-dev/auth/issues"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/yielded-dev/auth.git","directory":"packages/auth-persistence-drizzle"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json","test":"vp test --passWithNoTests","example:totp":"bun test/fixtures/totp-sqlite-bun.ts"},"peerDependenciesMeta":{"@effect/sql-d1":{"optional":true},"@effect/sql-libsql":{"optional":true},"@effect/sql-mysql2":{"optional":true},"@effect/sql-pg":{"optional":true},"@effect/sql-pglite":{"optional":true},"@effect/sql-sqlite-bun":{"optional":true},"@effect/sql-sqlite-do":{"optional":true},"@effect/sql-sqlite-node":{"optional":true},"@effect/sql-sqlite-wasm":{"optional":true}}}

package/src/D1.ts

@@ -0,0 +1,136 @@
+import type { D1Client } from "@effect/sql-d1/D1Client";
+export { makeTotpPersistenceServices, coordinateTotpPersistence } from "./drizzle/d1-totp";
+import type { AnyRelations } from "drizzle-orm";
+import type { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+import type { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+
+export {
+  makeD1OAuthAccountsServices as makeOAuthAccountsServices,
+  makeD1OAuthSignInServices as makeOAuthSignInServices,
+  makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices,
+  makeD1OAuthRegistrationServices as makeOAuthRegistrationServices,
+  coordinateD1OAuthRegistration as coordinateOAuthRegistration,
+  coordinateD1OAuthSignIn as coordinateOAuthSignIn,
+  coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents,
+  coordinateD1OAuthAccounts as coordinateOAuthAccounts,
+} from "./drizzle/d1-oauth";
+
+import {
+  makeD1ExternalIdentityServices,
+  makeD1IdentityServices,
+  makeD1SubjectProvisioningServices,
+} from "./drizzle/d1-identity";
+
+export {
+  coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority,
+  coordinateD1PendingAuthentication as coordinatePendingAuthentication,
+  coordinateD1SignedSessionValidity as coordinateSignedSessionValidity,
+  coordinateD1StatefulSessions as coordinateStatefulSessions,
+  makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices,
+  makeD1PendingAuthenticationServices as makePendingAuthenticationServices,
+  makeD1SignedSessionValidityServices as makeSignedSessionValidityServices,
+  makeD1StatefulSessionServices as makeStatefulSessionServices,
+} from "./drizzle/d1-sessions";
+
+export {
+  coordinateD1ProofPersistence as coordinateProofPersistence,
+  makeD1ProofPersistenceServices as makeProofPersistenceServices,
+} from "./drizzle/d1-proofs";
+
+export {
+  coordinateD1PasswordPersistence as coordinatePasswordPersistence,
+  coordinateD1PasswordRegistration as coordinatePasswordRegistration,
+  makeD1PasswordPersistenceServices as makePasswordPersistenceServices,
+  makeD1PasswordRegistrationServices as makePasswordRegistrationServices,
+} from "./drizzle/d1-passwords";
+
+export {
+  coordinateD1EmailAddress as coordinateEmailAddress,
+  coordinateD1EmailRegistration as coordinateEmailRegistration,
+  makeD1EmailAddressServices as makeEmailAddressServices,
+  makeD1EmailRegistrationServices as makeEmailRegistrationServices,
+  makeD1EmailSignInServices as makeEmailSignInServices,
+} from "./drizzle/d1-emails";
+
+import { type AuthTables, type D1GeneratedIdentityMapping } from "./drizzle/model";
+import {
+  makeSqliteAuthServices,
+  makeSqliteAuthStoreServices,
+  makeSqliteOAuthStateServices,
+} from "./drizzle/sqlite";
+
+export {
+  makeD1ExternalIdentityServices as makeExternalIdentityServices,
+  makeD1SubjectProvisioningServices as makeSubjectProvisioningServices,
+  makeSqliteAuthStoreServices as makeAuthStoreServices,
+  makeSqliteOAuthStateServices as makeOAuthStateServices,
+};
+
+export const commitMode = "batch" as const;
+
+export const makeAuthServices = <
+  C extends AnySQLiteTable,
+  R extends AnySQLiteTable,
+  S extends AnySQLiteTable,
+>(
+  database: EffectSQLiteD1Database<AnyRelations>,
+  mapping: AuthTables<C, R, S>,
+) => makeSqliteAuthServices(database, mapping);
+
+export const makeIdentityServices = <
+  Subject extends AnySQLiteTable,
+  Identifier extends AnySQLiteTable,
+  External extends AnySQLiteTable,
+  Request extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },
+  mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,
+) => makeD1IdentityServices(database, mapping);
+
+export {
+  makeD1SessionStepUpServices as makeSessionStepUpServices,
+  coordinateD1SessionStepUp as coordinateSessionStepUp,
+} from "./drizzle/d1-sessions";
+
+export {
+  makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices,
+  coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence,
+} from "./drizzle/d1-password-prepared";
+
+export { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target";
+
+import { Effect } from "effect";
+
+import { makeD1OAuthConnectedTarget } from "./drizzle/oauth-connected-drivers";
+import type { OAuthD1Mapping } from "./drizzle/oauth-model";
+
+const connectedTarget = makeD1OAuthConnectedTarget<
+  EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },
+  AnySQLiteTable<{ dialect: "sqlite" }>,
+  OAuthD1Mapping
+>({ mode: "batch", dialect: "sqlite", locking: false, standaloneGuard: () => Effect.void });
+
+export const {
+  makeOAuthConnectedServices,
+  makeOAuthConnectedRevocationServices,
+  coordinateOAuthConnected,
+  coordinateOAuthConnectedRevocations,
+} = connectedTarget;
+
+export {
+  makePasskeyCredentialServices,
+  makePasskeyPersistenceServices,
+  makePasskeyEnrollmentContextServices,
+  makePasskeyRegistrationCeremonyServices,
+  coordinatePasskeyPersistence,
+  coordinatePasskeyRegistrationCeremony,
+  makePasskeyManagementServices,
+  makePasskeyRegistrationServices,
+  coordinatePasskeyManagement,
+  coordinatePasskeyRegistration,
+} from "./drizzle/d1-passkey";
+
+export { D1BatchStatements } from "./drizzle/D1BatchStatements";
+
+export { makePhonePersistenceServices, coordinatePhonePersistence } from "./drizzle/d1-phone";