@yielded/auth-persistence-drizzle 0.1.0-beta.30 → 0.1.0-beta.31

package/README.md

@@ -1,10 +1,8 @@
 # @yielded/auth-persistence-drizzle
 
 Drizzle bindings, table mappings, and migration helpers for Yielded Auth. This
-package translates Drizzle table declarations, column codecs and SQL expressions
-into the `NativeSqlTables` used by `@yielded/auth-persistence`. Both packages run the
-same strategy statements and commit owner; driver modules supply the physical
-transaction or atomic-batch capability.
+package connects Drizzle tables to `@yielded/auth-persistence`; driver modules
+supply transactions or atomic batches.
 
 Import mapping helpers from the root and a driver from its explicit module, such
 as `/Postgres` or `/SqliteBun`. Install `drizzle-orm` and the corresponding Effect
@@ -12,16 +10,22 @@ SQL driver. Supply Effect `Crypto` to persistence construction and transaction
 coordinators. Composed drivers expose `AuthPersistence`; explicit driver modules
 also expose lower-level factories.
 
-Drizzle RC4 does not yet support the current stable Effect APIs required by Yielded
-Auth. Bun consumers need the temporary
-[@yielded/drizzle-effect-v4-patch](../drizzle-effect-v4-patch/README.md) until they
-upgrade to a compatible upstream Drizzle release.
+Bun consumers need the
+[@yielded/drizzle-effect-v4-patch](../drizzle-effect-v4-patch/README.md).
+Use its supported Drizzle release and commit the generated patch and lockfile.
 
 Applications own subjects, policy, claims, delivery, and database connections.
 Drizzle Kit generates migrations from managed or application-declared tables.
 Provide `AuthPersistence.migrationsLayer({ migrationsFolder })` explicitly to
 apply those files before starting auth.
 
+D1 also supports managed tables through `AuthPersistence.make(auth).managed(...)`.
+Supply the primary D1 binding through `D1Client.layer` and apply generated SQL
+with `AuthPersistence.migrationsLayer({ migrations })` using bundled SQL,
+or with your existing D1 migration runner. Its composed services use atomic batches.
+Password provisioning returns subject values through `Persistence.Provisioning`;
+the library commits the account and credentials together.
+
 SQLite/D1 and PostgreSQL driver modules also expose `OAuthProxyPersistence` for
 [callback proxy storage](../../docs/src/content/docs/reference/oauth.md#callback-server).
 

package/dist/D1.d.mts

@@ -20,6 +20,7 @@ import { NativeDriverTransaction } from "./drizzle/driver-types.mjs";
 import { SuppliedService } from "./drizzle/SuppliedService.mjs";
 import { OAuthProxyPersistence } from "./internal/drizzle-sqlite-oauth-proxy.mjs";
 import { Database } from "./drizzle/d1-database.mjs";
+import { d1MigrationsLayer } from "./internal/drizzle-d1-migrations.mjs";
 import { AnyRelations } from "drizzle-orm";
 import { Layer } from "effect";
 import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
@@ -138,6 +139,14 @@ export declare const makeIdentityServices: <Subject extends AnySQLiteTable, Iden
     readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => import("effect/Effect").Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
 }, import("@yielded/auth/Identity").IdentityUnavailable, Database>;
+/** Managed or mapped auth tables committed through D1's atomic batches.
+ * Supply D1Client.layer({ db: env.DB }) with the primary database binding.
+ * Registration supplies subject values; the account and credentials commit together.
+ */
+export declare const AuthPersistence: {
+  make: <C extends import("@yielded/auth-persistence/Adapter").ClaimsCodec, const Id extends string, const A extends import("@yielded/auth-persistence/Adapter").Definition<C, Id>>(auth: A & import("@yielded/auth-persistence/Adapter").Definition<C, Id>) => import("@yielded/auth-persistence/Adapter").BoundPersistence<import("drizzle-orm/sqlite-core").SQLiteTable<import("drizzle-orm/sqlite-core").TableConfig>, D1Client, C, Id, A>;
+  migrationsLayer: typeof d1MigrationsLayer;
+};
 type D1Database = EffectSQLiteD1Database<AnyRelations> & {
   readonly $client: D1Client;
 };

package/dist/D1.mjs

@@ -5,6 +5,8 @@ import { makeD1ExternalIdentityServices, makeD1IdentityServices, makeD1SubjectPr
 import { makeProofTarget } from "./drizzle/proof-drivers.mjs";
 import { makePasswordTarget } from "./drizzle/password-drivers.mjs";
 import { makeEmailTarget } from "./drizzle/email-drivers.mjs";
+import { d1MigrationsLayer } from "./internal/drizzle-d1-migrations.mjs";
+import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers.mjs";
 import { makePasskeyTarget } from "./drizzle/passkey-drivers.mjs";
 import { makePhoneTarget } from "./drizzle/phone-drivers.mjs";
@@ -28,6 +30,14 @@ const { makeEmailSignInServices, makeEmailAddressServices, makeEmailRegistration
 const makeSubjectProvisioningServices = (mapping) => makeD1SubjectProvisioningServices(mapping);
 const makeExternalIdentityServices = (mapping) => makeD1ExternalIdentityServices(mapping);
 const makeIdentityServices = (mapping) => makeD1IdentityServices(mapping);
+/** Managed or mapped auth tables committed through D1's atomic batches.
+* Supply D1Client.layer({ db: env.DB }) with the primary database binding.
+* Registration supplies subject values; the account and credentials commit together.
+*/
+const AuthPersistence = {
+	...sqlitePersistence(makeWithDefaults({}), { batch: true }),
+	migrationsLayer: d1MigrationsLayer
+};
 const { makeOAuthAccountsServices, makeOAuthSignInServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, coordinateOAuthRegistration, coordinateOAuthSignIn, coordinateOAuthRegistrationIntents, coordinateOAuthAccounts, makeOAuthConnectedServices, makeOAuthConnectedRevocationServices, coordinateOAuthConnected, coordinateOAuthConnectedRevocations } = makeOAuthTarget(Database, {
 	mode: "batch",
 	dialect: "sqlite"
@@ -51,6 +61,6 @@ const { makeTotpPersistenceServices, coordinateTotpPersistence } = makeTotpTarge
 	dialect: "sqlite"
 });
 //#endregion
-export { D1BatchStatements, Database, OAuthProxyPersistence, coordinateAuthenticationAuthority, coordinateEmailAddress, coordinateEmailRegistration, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinatePasswordPersistence, coordinatePasswordRegistration, coordinatePendingAuthentication, coordinatePhonePersistence, coordinateProofPersistence, coordinateSessionStepUp, coordinateSignedSessionValidity, coordinateStatefulSessions, coordinateTotpPersistence, databaseLayer, makeAuthenticationAuthorityServices, makeEmailAddressServices, makeEmailRegistrationServices, makeEmailSignInServices, makeExternalIdentityServices, makeIdentityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, makePasskeyCredentialServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makePasswordPersistenceServices, makePasswordRegistrationServices, makePendingAuthenticationServices, makePhonePersistenceServices, makeProofPersistenceServices, makeSessionCleanupServices, makeSessionStepUpServices, makeSignedSessionValidityServices, makeStatefulSessionServices, makeSubjectProvisioningServices, makeTotpPersistenceServices };
+export { AuthPersistence, D1BatchStatements, Database, OAuthProxyPersistence, coordinateAuthenticationAuthority, coordinateEmailAddress, coordinateEmailRegistration, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinatePasswordPersistence, coordinatePasswordRegistration, coordinatePendingAuthentication, coordinatePhonePersistence, coordinateProofPersistence, coordinateSessionStepUp, coordinateSignedSessionValidity, coordinateStatefulSessions, coordinateTotpPersistence, databaseLayer, makeAuthenticationAuthorityServices, makeEmailAddressServices, makeEmailRegistrationServices, makeEmailSignInServices, makeExternalIdentityServices, makeIdentityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, makePasskeyCredentialServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makePasswordPersistenceServices, makePasswordRegistrationServices, makePendingAuthenticationServices, makePhonePersistenceServices, makeProofPersistenceServices, makeSessionCleanupServices, makeSessionStepUpServices, makeSignedSessionValidityServices, makeStatefulSessionServices, makeSubjectProvisioningServices, makeTotpPersistenceServices };
 
 //# sourceMappingURL=D1.mjs.map

package/dist/D1.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"D1.mjs","names":[],"sources":["../src/D1.ts"],"sourcesContent":["export { OAuthProxyPersistence } from \"./internal/drizzle-sqlite-oauth-proxy\";\n\nimport type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport { type EffectSQLiteD1Database, makeWithDefaults } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\n\nimport { Database } from \"./drizzle/d1-database\";\nexport { Database } from \"./drizzle/d1-database\";\n\nimport {\n  makeD1ExternalIdentityServices,\n  makeD1IdentityServices,\n  makeD1SubjectProvisioningServices,\n} from \"./drizzle/d1-identity\";\nimport { makeProofTarget } from \"./drizzle/proof-drivers\";\n\nexport const { coordinateProofPersistence, makeProofPersistenceServices } = makeProofTarget(\n  Database,\n  { mode: \"batch\", dialect: \"sqlite\" },\n);\n\nimport { makePasswordTarget } from \"./drizzle/password-drivers\";\n\nexport const {\n  coordinatePasswordPersistence,\n  coordinatePasswordRegistration,\n  makePasswordPersistenceServices,\n  makePasswordRegistrationServices,\n} = makePasswordTarget(Database, { mode: \"batch\", dialect: \"sqlite\" });\n\nimport { makeEmailTarget } from \"./drizzle/email-drivers\";\n\nexport const {\n  makeEmailSignInServices,\n  makeEmailAddressServices,\n  makeEmailRegistrationServices,\n  coordinateEmailAddress,\n  coordinateEmailRegistration,\n} = makeEmailTarget(Database, { mode: \"batch\", dialect: \"sqlite\" });\n\nimport type {\n  D1GeneratedIdentityMapping,\n  D1SubjectProvisioningMapping,\n  D1ExternalIdentityMapping,\n} from \"./drizzle/model\";\n\nexport const makeSubjectProvisioningServices = <\n  Subject extends AnySQLiteTable,\n  Identifier extends AnySQLiteTable,\n  Request extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>,\n) => makeD1SubjectProvisioningServices(mapping);\n\nexport const makeExternalIdentityServices = <\n  Subject extends AnySQLiteTable,\n  External extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: D1ExternalIdentityMapping<Subject, External, NativeId>,\n) => makeD1ExternalIdentityServices(mapping);\n\nexport const makeIdentityServices = <\n  Subject extends AnySQLiteTable,\n  Identifier extends AnySQLiteTable,\n  External extends AnySQLiteTable,\n  Request extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,\n) => makeD1IdentityServices(mapping);\n\nimport { Layer } from \"effect\";\n\nimport type { D1BatchStatements } from \"./drizzle/D1BatchStatements\";\nimport { makeOAuthTarget } from \"./drizzle/oauth-drivers\";\nimport type { OAuthD1Mapping } from \"./drizzle/oauth-model\";\nimport { makePasskeyTarget } from \"./drizzle/passkey-drivers\";\nimport type { D1PasskeyMapping } from \"./drizzle/passkey-model\";\n\ntype D1Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype D1Table = AnySQLiteTable<{ dialect: \"sqlite\" }>;\n\nexport const {\n  makeOAuthAccountsServices,\n  makeOAuthSignInServices,\n  makeOAuthRegistrationIntentServices,\n  makeOAuthRegistrationServices,\n  coordinateOAuthRegistration,\n  coordinateOAuthSignIn,\n  coordinateOAuthRegistrationIntents,\n  coordinateOAuthAccounts,\n  makeOAuthConnectedServices,\n  makeOAuthConnectedRevocationServices,\n  coordinateOAuthConnected,\n  coordinateOAuthConnectedRevocations,\n} = makeOAuthTarget<Database, D1Database, D1Table, OAuthD1Mapping, D1BatchStatements>(Database, {\n  mode: \"batch\",\n  dialect: \"sqlite\",\n});\n\nexport const {\n  makePasskeyCredentialServices,\n  makePasskeyPersistenceServices,\n  makePasskeyRegistrationCeremonyServices,\n  coordinatePasskeyPersistence,\n  coordinatePasskeyRegistrationCeremony,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n  coordinatePasskeyManagement,\n  coordinatePasskeyRegistration,\n} = makePasskeyTarget<Database, D1Database, D1Table, D1PasskeyMapping, D1BatchStatements>(\n  Database,\n  { mode: \"batch\", dialect: \"sqlite\" },\n);\n\nexport { D1BatchStatements } from \"./drizzle/D1BatchStatements\";\n\nimport { makePhoneTarget } from \"./drizzle/phone-drivers\";\n\nexport const { makePhonePersistenceServices, coordinatePhonePersistence } = makePhoneTarget(\n  Database,\n  { mode: \"batch\", dialect: \"sqlite\" },\n);\n\n/** Construct Drizzle from the driver's SQL-client Layer. */\nexport const databaseLayer = Layer.effect(Database, makeWithDefaults({}));\n\nimport { makeSessionTarget } from \"./drizzle/session-drivers\";\n\nexport const {\n  coordinateAuthenticationAuthority,\n  coordinatePendingAuthentication,\n  coordinateSignedSessionValidity,\n  coordinateStatefulSessions,\n  makeAuthenticationAuthorityServices,\n  makePendingAuthenticationServices,\n  makeSignedSessionValidityServices,\n  makeStatefulSessionServices,\n  makeSessionStepUpServices,\n  coordinateSessionStepUp,\n  makeSessionCleanupServices,\n} = makeSessionTarget(Database, { mode: \"batch\", dialect: \"sqlite\" });\n\nimport { makeTotpTarget } from \"./drizzle/totp-target\";\n\nexport const { makeTotpPersistenceServices, coordinateTotpPersistence } = makeTotpTarget(Database, {\n  mode: \"batch\",\n  dialect: \"sqlite\",\n});\n"],"mappings":";;;;;;;;;;;;;;;AAiBA,MAAa,EAAE,4BAA4B,iCAAiC,gBAC1E,UACA;CAAE,MAAM;CAAS,SAAS;AAAS,CACrC;AAIA,MAAa,EACX,+BACA,gCACA,iCACA,qCACE,mBAAmB,UAAU;CAAE,MAAM;CAAS,SAAS;AAAS,CAAC;AAIrE,MAAa,EACX,yBACA,0BACA,+BACA,wBACA,gCACE,gBAAgB,UAAU;CAAE,MAAM;CAAS,SAAS;AAAS,CAAC;AAQlE,MAAa,mCAMX,YACG,kCAAkC,OAAO;AAE9C,MAAa,gCAKX,YACG,+BAA+B,OAAO;AAE3C,MAAa,wBAOX,YACG,uBAAuB,OAAO;AAanC,MAAa,EACX,2BACA,yBACA,qCACA,+BACA,6BACA,uBACA,oCACA,yBACA,4BACA,sCACA,0BACA,wCACE,gBAAkF,UAAU;CAC9F,MAAM;CACN,SAAS;AACX,CAAC;AAED,MAAa,EACX,+BACA,gCACA,yCACA,8BACA,uCACA,+BACA,iCACA,6BACA,kCACE,kBACF,UACA;CAAE,MAAM;CAAS,SAAS;AAAS,CACrC;AAMA,MAAa,EAAE,8BAA8B,+BAA+B,gBAC1E,UACA;CAAE,MAAM;CAAS,SAAS;AAAS,CACrC;;AAGA,MAAa,gBAAgB,MAAM,OAAO,UAAU,iBAAiB,CAAC,CAAC,CAAC;AAIxE,MAAa,EACX,mCACA,iCACA,iCACA,4BACA,qCACA,mCACA,mCACA,6BACA,2BACA,yBACA,+BACE,kBAAkB,UAAU;CAAE,MAAM;CAAS,SAAS;AAAS,CAAC;AAIpE,MAAa,EAAE,6BAA6B,8BAA8B,eAAe,UAAU;CACjG,MAAM;CACN,SAAS;AACX,CAAC"}
+{"version":3,"file":"D1.mjs","names":[],"sources":["../src/D1.ts"],"sourcesContent":["export { OAuthProxyPersistence } from \"./internal/drizzle-sqlite-oauth-proxy\";\n\nimport type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport { type EffectSQLiteD1Database, makeWithDefaults } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\n\nimport { Database } from \"./drizzle/d1-database\";\nexport { Database } from \"./drizzle/d1-database\";\n\nimport {\n  makeD1ExternalIdentityServices,\n  makeD1IdentityServices,\n  makeD1SubjectProvisioningServices,\n} from \"./drizzle/d1-identity\";\nimport { makeProofTarget } from \"./drizzle/proof-drivers\";\n\nexport const { coordinateProofPersistence, makeProofPersistenceServices } = makeProofTarget(\n  Database,\n  { mode: \"batch\", dialect: \"sqlite\" },\n);\n\nimport { makePasswordTarget } from \"./drizzle/password-drivers\";\n\nexport const {\n  coordinatePasswordPersistence,\n  coordinatePasswordRegistration,\n  makePasswordPersistenceServices,\n  makePasswordRegistrationServices,\n} = makePasswordTarget(Database, { mode: \"batch\", dialect: \"sqlite\" });\n\nimport { makeEmailTarget } from \"./drizzle/email-drivers\";\n\nexport const {\n  makeEmailSignInServices,\n  makeEmailAddressServices,\n  makeEmailRegistrationServices,\n  coordinateEmailAddress,\n  coordinateEmailRegistration,\n} = makeEmailTarget(Database, { mode: \"batch\", dialect: \"sqlite\" });\n\nimport type {\n  D1GeneratedIdentityMapping,\n  D1SubjectProvisioningMapping,\n  D1ExternalIdentityMapping,\n} from \"./drizzle/model\";\n\nexport const makeSubjectProvisioningServices = <\n  Subject extends AnySQLiteTable,\n  Identifier extends AnySQLiteTable,\n  Request extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>,\n) => makeD1SubjectProvisioningServices(mapping);\n\nexport const makeExternalIdentityServices = <\n  Subject extends AnySQLiteTable,\n  External extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: D1ExternalIdentityMapping<Subject, External, NativeId>,\n) => makeD1ExternalIdentityServices(mapping);\n\nexport const makeIdentityServices = <\n  Subject extends AnySQLiteTable,\n  Identifier extends AnySQLiteTable,\n  External extends AnySQLiteTable,\n  Request extends AnySQLiteTable,\n  NativeId,\n>(\n  mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,\n) => makeD1IdentityServices(mapping);\n\nimport { Layer } from \"effect\";\n\nimport { d1MigrationsLayer } from \"./internal/drizzle-d1-migrations\";\nimport { sqlitePersistence } from \"./internal/drizzle-sqlite\";\n\n/** Managed or mapped auth tables committed through D1's atomic batches.\n * Supply D1Client.layer({ db: env.DB }) with the primary database binding.\n * Registration supplies subject values; the account and credentials commit together.\n */\nexport const AuthPersistence = {\n  ...sqlitePersistence(makeWithDefaults({}), { batch: true }),\n  migrationsLayer: d1MigrationsLayer,\n};\n\nimport type { D1BatchStatements } from \"./drizzle/D1BatchStatements\";\nimport { makeOAuthTarget } from \"./drizzle/oauth-drivers\";\nimport type { OAuthD1Mapping } from \"./drizzle/oauth-model\";\nimport { makePasskeyTarget } from \"./drizzle/passkey-drivers\";\nimport type { D1PasskeyMapping } from \"./drizzle/passkey-model\";\n\ntype D1Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype D1Table = AnySQLiteTable<{ dialect: \"sqlite\" }>;\n\nexport const {\n  makeOAuthAccountsServices,\n  makeOAuthSignInServices,\n  makeOAuthRegistrationIntentServices,\n  makeOAuthRegistrationServices,\n  coordinateOAuthRegistration,\n  coordinateOAuthSignIn,\n  coordinateOAuthRegistrationIntents,\n  coordinateOAuthAccounts,\n  makeOAuthConnectedServices,\n  makeOAuthConnectedRevocationServices,\n  coordinateOAuthConnected,\n  coordinateOAuthConnectedRevocations,\n} = makeOAuthTarget<Database, D1Database, D1Table, OAuthD1Mapping, D1BatchStatements>(Database, {\n  mode: \"batch\",\n  dialect: \"sqlite\",\n});\n\nexport const {\n  makePasskeyCredentialServices,\n  makePasskeyPersistenceServices,\n  makePasskeyRegistrationCeremonyServices,\n  coordinatePasskeyPersistence,\n  coordinatePasskeyRegistrationCeremony,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n  coordinatePasskeyManagement,\n  coordinatePasskeyRegistration,\n} = makePasskeyTarget<Database, D1Database, D1Table, D1PasskeyMapping, D1BatchStatements>(\n  Database,\n  { mode: \"batch\", dialect: \"sqlite\" },\n);\n\nexport { D1BatchStatements } from \"./drizzle/D1BatchStatements\";\n\nimport { makePhoneTarget } from \"./drizzle/phone-drivers\";\n\nexport const { makePhonePersistenceServices, coordinatePhonePersistence } = makePhoneTarget(\n  Database,\n  { mode: \"batch\", dialect: \"sqlite\" },\n);\n\n/** Construct Drizzle from the driver's SQL-client Layer. */\nexport const databaseLayer = Layer.effect(Database, makeWithDefaults({}));\n\nimport { makeSessionTarget } from \"./drizzle/session-drivers\";\n\nexport const {\n  coordinateAuthenticationAuthority,\n  coordinatePendingAuthentication,\n  coordinateSignedSessionValidity,\n  coordinateStatefulSessions,\n  makeAuthenticationAuthorityServices,\n  makePendingAuthenticationServices,\n  makeSignedSessionValidityServices,\n  makeStatefulSessionServices,\n  makeSessionStepUpServices,\n  coordinateSessionStepUp,\n  makeSessionCleanupServices,\n} = makeSessionTarget(Database, { mode: \"batch\", dialect: \"sqlite\" });\n\nimport { makeTotpTarget } from \"./drizzle/totp-target\";\n\nexport const { makeTotpPersistenceServices, coordinateTotpPersistence } = makeTotpTarget(Database, {\n  mode: \"batch\",\n  dialect: \"sqlite\",\n});\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAa,EAAE,4BAA4B,iCAAiC,gBAC1E,UACA;CAAE,MAAM;CAAS,SAAS;AAAS,CACrC;AAIA,MAAa,EACX,+BACA,gCACA,iCACA,qCACE,mBAAmB,UAAU;CAAE,MAAM;CAAS,SAAS;AAAS,CAAC;AAIrE,MAAa,EACX,yBACA,0BACA,+BACA,wBACA,gCACE,gBAAgB,UAAU;CAAE,MAAM;CAAS,SAAS;AAAS,CAAC;AAQlE,MAAa,mCAMX,YACG,kCAAkC,OAAO;AAE9C,MAAa,gCAKX,YACG,+BAA+B,OAAO;AAE3C,MAAa,wBAOX,YACG,uBAAuB,OAAO;;;;;AAWnC,MAAa,kBAAkB;CAC7B,GAAG,kBAAkB,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,CAAC;CAC1D,iBAAiB;AACnB;AAWA,MAAa,EACX,2BACA,yBACA,qCACA,+BACA,6BACA,uBACA,oCACA,yBACA,4BACA,sCACA,0BACA,wCACE,gBAAkF,UAAU;CAC9F,MAAM;CACN,SAAS;AACX,CAAC;AAED,MAAa,EACX,+BACA,gCACA,yCACA,8BACA,uCACA,+BACA,iCACA,6BACA,kCACE,kBACF,UACA;CAAE,MAAM;CAAS,SAAS;AAAS,CACrC;AAMA,MAAa,EAAE,8BAA8B,+BAA+B,gBAC1E,UACA;CAAE,MAAM;CAAS,SAAS;AAAS,CACrC;;AAGA,MAAa,gBAAgB,MAAM,OAAO,UAAU,iBAAiB,CAAC,CAAC,CAAC;AAIxE,MAAa,EACX,mCACA,iCACA,iCACA,4BACA,qCACA,mCACA,mCACA,6BACA,2BACA,yBACA,+BACE,kBAAkB,UAAU;CAAE,MAAM;CAAS,SAAS;AAAS,CAAC;AAIpE,MAAa,EAAE,6BAA6B,8BAA8B,eAAe,UAAU;CACjG,MAAM;CACN,SAAS;AACX,CAAC"}

package/dist/Libsql.mjs

@@ -3,6 +3,7 @@ import { OAuthProxyPersistence } from "./internal/drizzle-sqlite-oauth-proxy.mjs
 import { makeProofTarget } from "./drizzle/proof-drivers.mjs";
 import { makePasswordTarget } from "./drizzle/password-drivers.mjs";
 import { makeEmailTarget } from "./drizzle/email-drivers.mjs";
+import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers.mjs";
 import { makePasskeyTarget } from "./drizzle/passkey-drivers.mjs";
 import { makePhoneTarget } from "./drizzle/phone-drivers.mjs";
@@ -10,7 +11,6 @@ import { makeSessionTarget } from "./drizzle/session-drivers.mjs";
 import { makeTotpTarget } from "./drizzle/totp-target.mjs";
 import { makeSqliteExternalIdentityServices, makeSqliteIdentityServices, makeSqliteSubjectProvisioningServices } from "./drizzle/sqlite-identity.mjs";
 import { drizzleMigrationsLayer } from "./internal/drizzle-migrations.mjs";
-import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { Context, Effect, Layer } from "effect";
 import { EffectLibsqlTransaction, makeWithDefaults } from "drizzle-orm/effect-libsql";
 //#region src/Libsql.ts

package/dist/SqliteBun.mjs

@@ -3,6 +3,7 @@ import { OAuthProxyPersistence } from "./internal/drizzle-sqlite-oauth-proxy.mjs
 import { makeProofTarget } from "./drizzle/proof-drivers.mjs";
 import { makePasswordTarget } from "./drizzle/password-drivers.mjs";
 import { makeEmailTarget } from "./drizzle/email-drivers.mjs";
+import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers.mjs";
 import { makePasskeyTarget } from "./drizzle/passkey-drivers.mjs";
 import { makePhoneTarget } from "./drizzle/phone-drivers.mjs";
@@ -10,7 +11,6 @@ import { makeSessionTarget } from "./drizzle/session-drivers.mjs";
 import { makeTotpTarget } from "./drizzle/totp-target.mjs";
 import { makeSqliteExternalIdentityServices, makeSqliteIdentityServices, makeSqliteSubjectProvisioningServices } from "./drizzle/sqlite-identity.mjs";
 import { drizzleMigrationsLayer } from "./internal/drizzle-migrations.mjs";
-import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { Context, Effect, Layer } from "effect";
 import { EffectSQLiteBunTransaction, makeWithDefaults } from "drizzle-orm/effect-sqlite-bun";
 //#region src/SqliteBun.ts

package/dist/SqliteNode.mjs

@@ -3,6 +3,7 @@ import { OAuthProxyPersistence } from "./internal/drizzle-sqlite-oauth-proxy.mjs
 import { makeProofTarget } from "./drizzle/proof-drivers.mjs";
 import { makePasswordTarget } from "./drizzle/password-drivers.mjs";
 import { makeEmailTarget } from "./drizzle/email-drivers.mjs";
+import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers.mjs";
 import { makePasskeyTarget } from "./drizzle/passkey-drivers.mjs";
 import { makePhoneTarget } from "./drizzle/phone-drivers.mjs";
@@ -10,7 +11,6 @@ import { makeSessionTarget } from "./drizzle/session-drivers.mjs";
 import { makeTotpTarget } from "./drizzle/totp-target.mjs";
 import { makeSqliteExternalIdentityServices, makeSqliteIdentityServices, makeSqliteSubjectProvisioningServices } from "./drizzle/sqlite-identity.mjs";
 import { drizzleMigrationsLayer } from "./internal/drizzle-migrations.mjs";
-import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { Context, Effect, Layer } from "effect";
 import { EffectSQLiteNodeTransaction, makeWithDefaults } from "drizzle-orm/effect-sqlite-node";
 //#region src/SqliteNode.ts

package/dist/SqliteWasm.mjs

@@ -3,6 +3,7 @@ import { OAuthProxyPersistence } from "./internal/drizzle-sqlite-oauth-proxy.mjs
 import { makeProofTarget } from "./drizzle/proof-drivers.mjs";
 import { makePasswordTarget } from "./drizzle/password-drivers.mjs";
 import { makeEmailTarget } from "./drizzle/email-drivers.mjs";
+import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers.mjs";
 import { makePasskeyTarget } from "./drizzle/passkey-drivers.mjs";
 import { makePhoneTarget } from "./drizzle/phone-drivers.mjs";
@@ -10,7 +11,6 @@ import { makeSessionTarget } from "./drizzle/session-drivers.mjs";
 import { makeTotpTarget } from "./drizzle/totp-target.mjs";
 import { makeSqliteExternalIdentityServices, makeSqliteIdentityServices, makeSqliteSubjectProvisioningServices } from "./drizzle/sqlite-identity.mjs";
 import { drizzleMigrationsLayer } from "./internal/drizzle-migrations.mjs";
-import { sqlitePersistence } from "./internal/drizzle-sqlite.mjs";
 import { Context, Effect, Layer } from "effect";
 import { EffectSQLiteWasmTransaction, makeWithDefaults } from "drizzle-orm/effect-sqlite-wasm";
 //#region src/SqliteWasm.ts

package/dist/drizzle/passkey/target.d.mts

@@ -4,7 +4,7 @@ import "../native-database.mjs";
 import "../D1BatchStatements.mjs";
 import "../native-target.mjs";
 import { SqlBatchCommit, makeNativePasskeyServices } from "@yielded/auth-persistence/Adapter";
-import { Effect } from "effect";
+import { Crypto, Effect } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
 import { SqlClient } from "effect/sql";
 import { PasskeyConfigurationError, PasskeyUnavailable } from "@yielded/auth/Passkey";

package/dist/internal/drizzle-d1-migrations.d.mts

@@ -0,0 +1,14 @@
+import { PersistenceConfigurationError } from "@yielded/auth-persistence/Adapter";
+import { Crypto, Layer } from "effect";
+import { D1Client } from "@effect/sql-d1/D1Client";
+//#region src/internal/drizzle-d1-migrations.d.ts
+/** Drizzle's D1 migration journal and selection, with bundled SQL in place of
+ * filesystem loading. Pending statements and journal entries share one D1 batch.
+ * Applications own when migrations run; do not run competing migration owners.
+ */
+export declare const d1MigrationsLayer: (options: {
+  readonly migrations: Readonly<Record<string, string>>;
+  readonly migrationsTable?: string;
+}) => Layer.Layer<never, PersistenceConfigurationError, Crypto.Crypto | D1Client>;
+//#endregion
+//# sourceMappingURL=drizzle-d1-migrations.d.mts.map

package/dist/internal/drizzle-d1-migrations.mjs

@@ -0,0 +1,83 @@
+import { PersistenceConfigurationError } from "@yielded/auth-persistence/Adapter";
+import { sql } from "drizzle-orm";
+import { Crypto, DateTime, Effect, Layer, Schema } from "effect";
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { drizzle } from "drizzle-orm/d1";
+import { formatToMillis, getMigrationsToRun } from "drizzle-orm/migrator.utils";
+//#region src/internal/drizzle-d1-migrations.ts
+const MigrationFiles = Schema.Record(Schema.String, Schema.NonEmptyString);
+const MigrationName = Schema.String.check(Schema.isPattern(/^\d{14}_.+$/));
+const JournalColumns = Schema.Array(Schema.Struct({ name: Schema.String }));
+const configurationError = () => PersistenceConfigurationError.make({ reason: "Could not apply D1 migrations; check the bundled SQL and database binding" });
+const JournalRows = Schema.Array(Schema.Struct({
+	id: Schema.Int,
+	hash: Schema.String,
+	created_at: Schema.String,
+	name: Schema.NullOr(Schema.String)
+}));
+/** Drizzle's D1 migration journal and selection, with bundled SQL in place of
+* filesystem loading. Pending statements and journal entries share one D1 batch.
+* Applications own when migrations run; do not run competing migration owners.
+*/
+const d1MigrationsLayer = (options) => Layer.effectDiscard(Effect.gen(function* () {
+	const files = yield* Schema.decodeEffect(MigrationFiles)(options.migrations);
+	const client = yield* D1Client;
+	const crypto = yield* Crypto.Crypto;
+	const appliedAt = DateTime.formatIso(yield* DateTime.now);
+	const migrations = yield* Effect.forEach(Object.entries(files).sort(([left], [right]) => left.localeCompare(right)), Effect.fnUntraced(function* ([name, contents]) {
+		yield* Schema.decodeEffect(MigrationName)(name);
+		const folderMillis = yield* Schema.decodeEffect(Schema.Int)(formatToMillis(name.slice(0, 14)));
+		const digest = yield* crypto.digest("SHA-256", new TextEncoder().encode(contents));
+		return {
+			name,
+			folderMillis,
+			hash: Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join(""),
+			sql: contents.split("--> statement-breakpoint"),
+			bps: true
+		};
+	}));
+	yield* Effect.tryPromise({
+		try: async () => {
+			const db = drizzle(client.config.db);
+			const name = options.migrationsTable ?? "__drizzle_migrations";
+			const table = sql.identifier(name);
+			const columns = Schema.decodeUnknownSync(JournalColumns)(await db.all(sql`select name from pragma_table_info(${name})`)).map((column) => column.name);
+			const newDb = columns.length === 0;
+			const legacy = !newDb && !columns.includes("name");
+			if (!newDb && (![
+				"id",
+				"hash",
+				"created_at"
+			].every((column) => columns.includes(column)) || legacy === columns.includes("applied_at"))) throw configurationError();
+			const journal = newDb ? [] : Schema.decodeUnknownSync(JournalRows)(await db.all(sql`select rowid as id, hash, cast(created_at as text) as created_at,
+              ${legacy ? sql`null` : sql`name`} as name from ${table} order by rowid`)).map((entry) => ({ ...entry }));
+			const journalStatements = newDb ? [db.run(sql`create table ${table} (
+                id integer primary key, hash text not null, created_at numeric,
+                name text, applied_at text
+              )`)] : [];
+			if (legacy) {
+				journalStatements.push(db.run(sql`alter table ${table} add column name text`), db.run(sql`alter table ${table} add column applied_at text`));
+				for (const entry of journal) {
+					const millis = Math.floor(Number(entry.created_at) / 1e3) * 1e3;
+					const candidates = migrations.filter((migration) => migration.folderMillis === millis);
+					const matches = candidates.length === 1 ? candidates : (candidates.length === 0 ? migrations : candidates).filter((migration) => migration.hash === entry.hash);
+					const match = matches[0];
+					if (matches.length !== 1 || match === void 0) throw configurationError();
+					entry.name = match.name;
+					journalStatements.push(db.run(sql`update ${table} set name = ${match.name} where rowid = ${entry.id}`));
+				}
+			}
+			const [first, ...rest] = [...journalStatements, ...getMigrationsToRun({
+				localMigrations: migrations,
+				dbMigrations: [...journal]
+			}).flatMap((migration) => [...migration.sql.map((statement) => db.run(sql.raw(statement))), db.run(sql`insert into ${table} (hash, created_at, name, applied_at)
+                values (${migration.hash}, ${migration.folderMillis}, ${migration.name}, ${appliedAt})`)])];
+			if (first !== void 0) await db.batch([first, ...rest]);
+		},
+		catch: configurationError
+	});
+}).pipe(Effect.mapError(configurationError)));
+//#endregion
+export { d1MigrationsLayer };
+
+//# sourceMappingURL=drizzle-d1-migrations.mjs.map

package/dist/internal/drizzle-d1-migrations.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-d1-migrations.mjs","names":[],"sources":["../../src/internal/drizzle-d1-migrations.ts"],"sourcesContent":["import { D1Client } from \"@effect/sql-d1/D1Client\";\nimport { PersistenceConfigurationError } from \"@yielded/auth-persistence/Adapter\";\nimport { sql } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/d1\";\nimport { formatToMillis, getMigrationsToRun } from \"drizzle-orm/migrator.utils\";\nimport { Crypto, DateTime, Effect, Layer, Schema } from \"effect\";\n\nconst MigrationFiles = Schema.Record(Schema.String, Schema.NonEmptyString);\nconst MigrationName = Schema.String.check(Schema.isPattern(/^\\d{14}_.+$/));\nconst JournalColumns = Schema.Array(Schema.Struct({ name: Schema.String }));\n\nconst configurationError = () =>\n  PersistenceConfigurationError.make({\n    reason: \"Could not apply D1 migrations; check the bundled SQL and database binding\",\n  });\n\nconst JournalRows = Schema.Array(\n  Schema.Struct({\n    id: Schema.Int,\n    hash: Schema.String,\n    created_at: Schema.String,\n    name: Schema.NullOr(Schema.String),\n  }),\n);\n\n/** Drizzle's D1 migration journal and selection, with bundled SQL in place of\n * filesystem loading. Pending statements and journal entries share one D1 batch.\n * Applications own when migrations run; do not run competing migration owners.\n */\nexport const d1MigrationsLayer = (options: {\n  readonly migrations: Readonly<Record<string, string>>;\n  readonly migrationsTable?: string;\n}) =>\n  Layer.effectDiscard(\n    Effect.gen(function* () {\n      const files = yield* Schema.decodeEffect(MigrationFiles)(options.migrations);\n      const client = yield* D1Client;\n      const crypto = yield* Crypto.Crypto;\n      const appliedAt = DateTime.formatIso(yield* DateTime.now);\n\n      const migrations = yield* Effect.forEach(\n        Object.entries(files).sort(([left], [right]) => left.localeCompare(right)),\n        Effect.fnUntraced(function* ([name, contents]) {\n          yield* Schema.decodeEffect(MigrationName)(name);\n\n          const folderMillis = yield* Schema.decodeEffect(Schema.Int)(\n            formatToMillis(name.slice(0, 14)),\n          );\n\n          const digest = yield* crypto.digest(\"SHA-256\", new TextEncoder().encode(contents));\n\n          return {\n            name,\n            folderMillis,\n            hash: Array.from(digest, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\"),\n            sql: contents.split(\"--> statement-breakpoint\"),\n            bps: true,\n          };\n        }),\n      );\n\n      yield* Effect.tryPromise({\n        try: async () => {\n          const db = drizzle(client.config.db);\n          const name = options.migrationsTable ?? \"__drizzle_migrations\";\n          const table = sql.identifier(name);\n\n          const columns = Schema.decodeUnknownSync(JournalColumns)(\n            await db.all(sql`select name from pragma_table_info(${name})`),\n          ).map((column) => column.name);\n\n          const newDb = columns.length === 0;\n          const legacy = !newDb && !columns.includes(\"name\");\n\n          if (\n            !newDb &&\n            (![\"id\", \"hash\", \"created_at\"].every((column) => columns.includes(column)) ||\n              legacy === columns.includes(\"applied_at\"))\n          )\n            throw configurationError();\n\n          // Original Drizzle SQLite journals can have NULL serial IDs. Use the\n          // physical rowid to backfill each retained entry without changing it.\n          const journal = newDb\n            ? []\n            : Schema.decodeUnknownSync(JournalRows)(\n                await db.all(sql`select rowid as id, hash, cast(created_at as text) as created_at,\n              ${legacy ? sql`null` : sql`name`} as name from ${table} order by rowid`),\n              ).map((entry) => ({ ...entry }));\n\n          const journalStatements = newDb\n            ? [\n                db.run(sql`create table ${table} (\n                id integer primary key, hash text not null, created_at numeric,\n                name text, applied_at text\n              )`),\n              ]\n            : [];\n\n          if (legacy) {\n            // Match retained entries using Drizzle's timestamp/hash convention,\n            // but stage the upgrade with pending SQL: D1 cannot run BEGIN.\n            journalStatements.push(\n              db.run(sql`alter table ${table} add column name text`),\n              db.run(sql`alter table ${table} add column applied_at text`),\n            );\n            for (const entry of journal) {\n              const millis = Math.floor(Number(entry.created_at) / 1000) * 1000;\n\n              const candidates = migrations.filter(\n                (migration) => migration.folderMillis === millis,\n              );\n\n              const matches =\n                candidates.length === 1\n                  ? candidates\n                  : (candidates.length === 0 ? migrations : candidates).filter(\n                      (migration) => migration.hash === entry.hash,\n                    );\n\n              const match = matches[0];\n\n              if (matches.length !== 1 || match === undefined) throw configurationError();\n              entry.name = match.name;\n              journalStatements.push(\n                db.run(sql`update ${table} set name = ${match.name} where rowid = ${entry.id}`),\n              );\n            }\n          }\n\n          const statements = [\n            ...journalStatements,\n            ...getMigrationsToRun({\n              localMigrations: migrations,\n              dbMigrations: [...journal],\n            }).flatMap((migration) => [\n              ...migration.sql.map((statement) => db.run(sql.raw(statement))),\n              db.run(sql`insert into ${table} (hash, created_at, name, applied_at)\n                values (${migration.hash}, ${migration.folderMillis}, ${migration.name}, ${appliedAt})`),\n            ]),\n          ];\n\n          const [first, ...rest] = statements;\n\n          if (first !== undefined) await db.batch([first, ...rest]);\n        },\n        catch: configurationError,\n      });\n    }).pipe(Effect.mapError(configurationError)),\n  );\n"],"mappings":";;;;;;;AAOA,MAAM,iBAAiB,OAAO,OAAO,OAAO,QAAQ,OAAO,cAAc;AACzE,MAAM,gBAAgB,OAAO,OAAO,MAAM,OAAO,UAAU,aAAa,CAAC;AACzE,MAAM,iBAAiB,OAAO,MAAM,OAAO,OAAO,EAAE,MAAM,OAAO,OAAO,CAAC,CAAC;AAE1E,MAAM,2BACJ,8BAA8B,KAAK,EACjC,QAAQ,4EACV,CAAC;AAEH,MAAM,cAAc,OAAO,MACzB,OAAO,OAAO;CACZ,IAAI,OAAO;CACX,MAAM,OAAO;CACb,YAAY,OAAO;CACnB,MAAM,OAAO,OAAO,OAAO,MAAM;AACnC,CAAC,CACH;;;;;AAMA,MAAa,qBAAqB,YAIhC,MAAM,cACJ,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,OAAO,aAAa,cAAc,CAAC,CAAC,QAAQ,UAAU;CAC3E,MAAM,SAAS,OAAO;CACtB,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,YAAY,SAAS,UAAU,OAAO,SAAS,GAAG;CAExD,MAAM,aAAa,OAAO,OAAO,QAC/B,OAAO,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,cAAc,KAAK,CAAC,GACzE,OAAO,WAAW,WAAW,CAAC,MAAM,WAAW;EAC7C,OAAO,OAAO,aAAa,aAAa,CAAC,CAAC,IAAI;EAE9C,MAAM,eAAe,OAAO,OAAO,aAAa,OAAO,GAAG,CAAC,CACzD,eAAe,KAAK,MAAM,GAAG,EAAE,CAAC,CAClC;EAEA,MAAM,SAAS,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,QAAQ,CAAC;EAEjF,OAAO;GACL;GACA;GACA,MAAM,MAAM,KAAK,SAAS,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;GAC9E,KAAK,SAAS,MAAM,0BAA0B;GAC9C,KAAK;EACP;CACF,CAAC,CACH;CAEA,OAAO,OAAO,WAAW;EACvB,KAAK,YAAY;GACf,MAAM,KAAK,QAAQ,OAAO,OAAO,EAAE;GACnC,MAAM,OAAO,QAAQ,mBAAmB;GACxC,MAAM,QAAQ,IAAI,WAAW,IAAI;GAEjC,MAAM,UAAU,OAAO,kBAAkB,cAAc,CAAC,CACtD,MAAM,GAAG,IAAI,GAAG,sCAAsC,KAAK,EAAE,CAC/D,CAAC,CAAC,KAAK,WAAW,OAAO,IAAI;GAE7B,MAAM,QAAQ,QAAQ,WAAW;GACjC,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,SAAS,MAAM;GAEjD,IACE,CAAC,UACA,CAAC;IAAC;IAAM;IAAQ;GAAY,CAAC,CAAC,OAAO,WAAW,QAAQ,SAAS,MAAM,CAAC,KACvE,WAAW,QAAQ,SAAS,YAAY,IAE1C,MAAM,mBAAmB;GAI3B,MAAM,UAAU,QACZ,CAAC,IACD,OAAO,kBAAkB,WAAW,CAAC,CACnC,MAAM,GAAG,IAAI,GAAG;gBAChB,SAAS,GAAG,SAAS,GAAG,OAAO,gBAAgB,MAAM,gBAAgB,CACvE,CAAC,CAAC,KAAK,WAAW,EAAE,GAAG,MAAM,EAAE;GAEnC,MAAM,oBAAoB,QACtB,CACE,GAAG,IAAI,GAAG,gBAAgB,MAAM;;;gBAGhC,CACF,IACA,CAAC;GAEL,IAAI,QAAQ;IAGV,kBAAkB,KAChB,GAAG,IAAI,GAAG,eAAe,MAAM,sBAAsB,GACrD,GAAG,IAAI,GAAG,eAAe,MAAM,4BAA4B,CAC7D;IACA,KAAK,MAAM,SAAS,SAAS;KAC3B,MAAM,SAAS,KAAK,MAAM,OAAO,MAAM,UAAU,IAAI,GAAI,IAAI;KAE7D,MAAM,aAAa,WAAW,QAC3B,cAAc,UAAU,iBAAiB,MAC5C;KAEA,MAAM,UACJ,WAAW,WAAW,IAClB,cACC,WAAW,WAAW,IAAI,aAAa,WAAA,CAAY,QACjD,cAAc,UAAU,SAAS,MAAM,IAC1C;KAEN,MAAM,QAAQ,QAAQ;KAEtB,IAAI,QAAQ,WAAW,KAAK,UAAU,KAAA,GAAW,MAAM,mBAAmB;KAC1E,MAAM,OAAO,MAAM;KACnB,kBAAkB,KAChB,GAAG,IAAI,GAAG,UAAU,MAAM,cAAc,MAAM,KAAK,iBAAiB,MAAM,IAAI,CAChF;IACF;GACF;GAcA,MAAM,CAAC,OAAO,GAAG,QAAQ,CAXvB,GAAG,mBACH,GAAG,mBAAmB;IACpB,iBAAiB;IACjB,cAAc,CAAC,GAAG,OAAO;GAC3B,CAAC,CAAC,CAAC,SAAS,cAAc,CACxB,GAAG,UAAU,IAAI,KAAK,cAAc,GAAG,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC,GAC9D,GAAG,IAAI,GAAG,eAAe,MAAM;0BACnB,UAAU,KAAK,IAAI,UAAU,aAAa,IAAI,UAAU,KAAK,IAAI,UAAU,EAAE,CAC3F,CAAC,CAG+B;GAElC,IAAI,UAAU,KAAA,GAAW,MAAM,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;EAC1D;EACA,OAAO;CACT,CAAC;AACH,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,kBAAkB,CAAC,CAC7C"}

package/dist/internal/drizzle-sqlite.mjs

@@ -2,6 +2,7 @@ import { nativeDatabase } from "../drizzle/native-database.mjs";
 import { makeDrizzleSqlTables } from "../drizzle/native-sql-table.mjs";
 import { PersistenceConfigurationError, createPersistence } from "@yielded/auth-persistence/Adapter";
 import { getTableColumns } from "drizzle-orm";
+import { Effect } from "effect";
 import { getTableConfig, integer, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
 //#region src/internal/drizzle-sqlite.ts
 const makeTable = (definition) => sqliteTable(definition.name, Object.fromEntries(Object.entries(definition.columns).map(([key, column]) => {
@@ -23,11 +24,15 @@ const describe = (table) => {
 		unique: []
 	};
 };
-const sqlitePersistence = (acquire) => createPersistence({
+const sqlitePersistence = (acquire, options) => createPersistence({
 	nativeTables: (database) => makeDrizzleSqlTables(database.$client, database),
 	makeTable,
 	describe,
-	acquire: nativeDatabase(acquire)
+	acquire: nativeDatabase(acquire),
+	...options?.batch === true ? { batch: (database) => ({
+		client: database.$client,
+		execute: (statements) => database.$client.batch(statements).pipe(Effect.asVoid)
+	}) } : {}
 });
 //#endregion
 export { sqlitePersistence };

package/dist/internal/drizzle-sqlite.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"drizzle-sqlite.mjs","names":[],"sources":["../../src/internal/drizzle-sqlite.ts"],"sourcesContent":["import {\n  PersistenceConfigurationError,\n  createPersistence,\n} from \"@yielded/auth-persistence/Adapter\";\nimport type { StorageTable } from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns } from \"drizzle-orm\";\nimport {\n  getTableConfig,\n  integer,\n  sqliteTable,\n  text,\n  uniqueIndex,\n  type SQLiteTable,\n} from \"drizzle-orm/sqlite-core\";\nimport type { Effect } from \"effect\";\nimport type { SqlClient } from \"effect/sql/SqlClient\";\n\nimport { nativeDatabase, type NativeDatabaseHandle } from \"../drizzle/native-database\";\nimport { makeDrizzleSqlTables } from \"../drizzle/native-sql-table\";\n\nconst makeTable = (definition: StorageTable) =>\n  sqliteTable(\n    definition.name,\n    Object.fromEntries(\n      Object.entries(definition.columns).map(([key, column]) => {\n        const builder =\n          column.type === \"text\"\n            ? text(column.name)\n            : column.type === \"boolean\"\n              ? integer(column.name, { mode: \"boolean\" })\n              : integer(column.name);\n\n        return [key, column.nullable ? builder : builder.notNull()];\n      }),\n    ),\n    (columns) =>\n      definition.unique.map((keys, i) => {\n        const [first, ...rest] = keys;\n\n        if (first === undefined)\n          throw PersistenceConfigurationError.make({ reason: \"An empty unique key is invalid\" });\n\n        return uniqueIndex(`${definition.name}_key_${i}`).on(\n          columns[first],\n          ...rest.map((key) => columns[key]),\n        );\n      }),\n  );\n\nconst describe = (table: SQLiteTable): StorageTable => {\n  const config = getTableConfig(table);\n\n  return {\n    name: config.name,\n    columns: Object.fromEntries(\n      Object.entries(getTableColumns(table)).map(([key, column]) => [\n        key,\n        {\n          name: column.name,\n          type:\n            column.dataType === \"boolean\"\n              ? \"boolean\"\n              : column.dataType === \"number\"\n                ? \"integer\"\n                : \"text\",\n          nullable: !column.notNull,\n        },\n      ]),\n    ),\n    unique: [],\n  };\n};\n\nexport const sqlitePersistence = <R>(acquire: Effect.Effect<object, never, R | SqlClient>) =>\n  createPersistence<SQLiteTable, R, NativeDatabaseHandle>({\n    nativeTables: (database) => makeDrizzleSqlTables(database.$client, database),\n    makeTable,\n    describe,\n    acquire: nativeDatabase(acquire),\n  });\n"],"mappings":";;;;;;AAoBA,MAAM,aAAa,eACjB,YACE,WAAW,MACX,OAAO,YACL,OAAO,QAAQ,WAAW,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY;CACxD,MAAM,UACJ,OAAO,SAAS,SACZ,KAAK,OAAO,IAAI,IAChB,OAAO,SAAS,YACd,QAAQ,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,IACxC,QAAQ,OAAO,IAAI;CAE3B,OAAO,CAAC,KAAK,OAAO,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAC5D,CAAC,CACH,IACC,YACC,WAAW,OAAO,KAAK,MAAM,MAAM;CACjC,MAAM,CAAC,OAAO,GAAG,QAAQ;CAEzB,IAAI,UAAU,KAAA,GACZ,MAAM,8BAA8B,KAAK,EAAE,QAAQ,iCAAiC,CAAC;CAEvF,OAAO,YAAY,GAAG,WAAW,KAAK,OAAO,GAAG,CAAC,CAAC,GAChD,QAAQ,QACR,GAAG,KAAK,KAAK,QAAQ,QAAQ,IAAI,CACnC;AACF,CAAC,CACL;AAEF,MAAM,YAAY,UAAqC;CAGrD,OAAO;EACL,MAHa,eAAe,KAGjB,CAAC,CAAC;EACb,SAAS,OAAO,YACd,OAAO,QAAQ,gBAAgB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CAC5D,KACA;GACE,MAAM,OAAO;GACb,MACE,OAAO,aAAa,YAChB,YACA,OAAO,aAAa,WAClB,YACA;GACR,UAAU,CAAC,OAAO;EACpB,CACF,CAAC,CACH;EACA,QAAQ,CAAC;CACX;AACF;AAEA,MAAa,qBAAwB,YACnC,kBAAwD;CACtD,eAAe,aAAa,qBAAqB,SAAS,SAAS,QAAQ;CAC3E;CACA;CACA,SAAS,eAAe,OAAO;AACjC,CAAC"}
+{"version":3,"file":"drizzle-sqlite.mjs","names":[],"sources":["../../src/internal/drizzle-sqlite.ts"],"sourcesContent":["import {\n  PersistenceConfigurationError,\n  createPersistence,\n} from \"@yielded/auth-persistence/Adapter\";\nimport type { StorageTable } from \"@yielded/auth-persistence/Adapter\";\nimport { getTableColumns } from \"drizzle-orm\";\nimport {\n  getTableConfig,\n  integer,\n  sqliteTable,\n  text,\n  uniqueIndex,\n  type SQLiteTable,\n} from \"drizzle-orm/sqlite-core\";\nimport { Effect } from \"effect\";\nimport type { SqlClient } from \"effect/sql/SqlClient\";\n\nimport { nativeDatabase, type NativeDatabaseHandle } from \"../drizzle/native-database\";\nimport { makeDrizzleSqlTables } from \"../drizzle/native-sql-table\";\n\nconst makeTable = (definition: StorageTable) =>\n  sqliteTable(\n    definition.name,\n    Object.fromEntries(\n      Object.entries(definition.columns).map(([key, column]) => {\n        const builder =\n          column.type === \"text\"\n            ? text(column.name)\n            : column.type === \"boolean\"\n              ? integer(column.name, { mode: \"boolean\" })\n              : integer(column.name);\n\n        return [key, column.nullable ? builder : builder.notNull()];\n      }),\n    ),\n    (columns) =>\n      definition.unique.map((keys, i) => {\n        const [first, ...rest] = keys;\n\n        if (first === undefined)\n          throw PersistenceConfigurationError.make({ reason: \"An empty unique key is invalid\" });\n\n        return uniqueIndex(`${definition.name}_key_${i}`).on(\n          columns[first],\n          ...rest.map((key) => columns[key]),\n        );\n      }),\n  );\n\nconst describe = (table: SQLiteTable): StorageTable => {\n  const config = getTableConfig(table);\n\n  return {\n    name: config.name,\n    columns: Object.fromEntries(\n      Object.entries(getTableColumns(table)).map(([key, column]) => [\n        key,\n        {\n          name: column.name,\n          type:\n            column.dataType === \"boolean\"\n              ? \"boolean\"\n              : column.dataType === \"number\"\n                ? \"integer\"\n                : \"text\",\n          nullable: !column.notNull,\n        },\n      ]),\n    ),\n    unique: [],\n  };\n};\n\nexport const sqlitePersistence = <R>(\n  acquire: Effect.Effect<object, never, R | SqlClient>,\n  options?: { readonly batch: true },\n) =>\n  createPersistence<SQLiteTable, R, NativeDatabaseHandle>({\n    nativeTables: (database) => makeDrizzleSqlTables(database.$client, database),\n    makeTable,\n    describe,\n    acquire: nativeDatabase(acquire),\n    ...(options?.batch === true\n      ? {\n          batch: (database: NativeDatabaseHandle) => ({\n            client: database.$client,\n            execute: (statements: Parameters<typeof database.$client.batch>[0]) =>\n              database.$client.batch(statements).pipe(Effect.asVoid),\n          }),\n        }\n      : {}),\n  });\n"],"mappings":";;;;;;;AAoBA,MAAM,aAAa,eACjB,YACE,WAAW,MACX,OAAO,YACL,OAAO,QAAQ,WAAW,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY;CACxD,MAAM,UACJ,OAAO,SAAS,SACZ,KAAK,OAAO,IAAI,IAChB,OAAO,SAAS,YACd,QAAQ,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,IACxC,QAAQ,OAAO,IAAI;CAE3B,OAAO,CAAC,KAAK,OAAO,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAC5D,CAAC,CACH,IACC,YACC,WAAW,OAAO,KAAK,MAAM,MAAM;CACjC,MAAM,CAAC,OAAO,GAAG,QAAQ;CAEzB,IAAI,UAAU,KAAA,GACZ,MAAM,8BAA8B,KAAK,EAAE,QAAQ,iCAAiC,CAAC;CAEvF,OAAO,YAAY,GAAG,WAAW,KAAK,OAAO,GAAG,CAAC,CAAC,GAChD,QAAQ,QACR,GAAG,KAAK,KAAK,QAAQ,QAAQ,IAAI,CACnC;AACF,CAAC,CACL;AAEF,MAAM,YAAY,UAAqC;CAGrD,OAAO;EACL,MAHa,eAAe,KAGjB,CAAC,CAAC;EACb,SAAS,OAAO,YACd,OAAO,QAAQ,gBAAgB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CAC5D,KACA;GACE,MAAM,OAAO;GACb,MACE,OAAO,aAAa,YAChB,YACA,OAAO,aAAa,WAClB,YACA;GACR,UAAU,CAAC,OAAO;EACpB,CACF,CAAC,CACH;EACA,QAAQ,CAAC;CACX;AACF;AAEA,MAAa,qBACX,SACA,YAEA,kBAAwD;CACtD,eAAe,aAAa,qBAAqB,SAAS,SAAS,QAAQ;CAC3E;CACA;CACA,SAAS,eAAe,OAAO;CAC/B,GAAI,SAAS,UAAU,OACnB,EACE,QAAQ,cAAoC;EAC1C,QAAQ,SAAS;EACjB,UAAU,eACR,SAAS,QAAQ,MAAM,UAAU,CAAC,CAAC,KAAK,OAAO,MAAM;CACzD,GACF,IACA,CAAC;AACP,CAAC"}

package/package.json

@@ -1 +1 @@
-{"name":"@yielded/auth-persistence-drizzle","version":"0.1.0-beta.30","dependencies":{"@yielded/auth":"0.1.0-beta.30","@yielded/auth-persistence":"0.1.0-beta.30"},"devDependencies":{"@effect/platform-bun":"4.0.0","@effect/platform-node":"4.0.0","@effect/sql-d1":"4.0.0","@effect/sql-libsql":"4.0.0","@effect/sql-mysql2":"4.0.0","@effect/sql-pg":"4.0.0","@effect/sql-pglite":"4.0.0","@effect/sql-sqlite-bun":"4.0.0","@effect/sql-sqlite-do":"4.0.0","@effect/sql-sqlite-node":"4.0.0","@effect/sql-sqlite-wasm":"4.0.0","@effect/vitest":"4.0.0","@yielded/crypto":"0.1.0-beta.30","drizzle-orm":"1.0.0-rc.4","effect":"4.0.0","typescript":"7.0.2","vite-plus":"0.3.3"},"peerDependencies":{"@effect/sql-d1":">=4.0.0","@effect/sql-libsql":">=4.0.0","@effect/sql-mysql2":">=4.0.0","@effect/sql-pg":">=4.0.0","@effect/sql-pglite":">=4.0.0","@effect/sql-sqlite-bun":">=4.0.0","@effect/sql-sqlite-do":">=4.0.0","@effect/sql-sqlite-node":">=4.0.0","@effect/sql-sqlite-wasm":">=4.0.0","drizzle-orm":">=1.0.0-rc.4","effect":"^4.0.0"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./D1":{"types":"./dist/D1.d.mts","default":"./dist/D1.mjs"},"./Libsql":{"types":"./dist/Libsql.d.mts","default":"./dist/Libsql.mjs"},"./Mysql2":{"types":"./dist/Mysql2.d.mts","default":"./dist/Mysql2.mjs"},"./Pglite":{"types":"./dist/Pglite.d.mts","default":"./dist/Pglite.mjs"},"./Postgres":{"types":"./dist/Postgres.d.mts","default":"./dist/Postgres.mjs"},"./SqliteBun":{"types":"./dist/SqliteBun.d.mts","default":"./dist/SqliteBun.mjs"},"./SqliteDo":{"types":"./dist/SqliteDo.d.mts","default":"./dist/SqliteDo.mjs"},"./SqliteNode":{"types":"./dist/SqliteNode.d.mts","default":"./dist/SqliteNode.mjs"},"./SqliteWasm":{"types":"./dist/SqliteWasm.d.mts","default":"./dist/SqliteWasm.mjs"}},"description":"Drizzle persistence, table mappings, and migration adapters for Yielded Auth.","homepage":"https://yielded.dev/auth/","bugs":{"url":"https://github.com/yielded-dev/auth/issues"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/yielded-dev/auth.git","directory":"packages/auth-persistence-drizzle"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json","test":"vp test --passWithNoTests","example:totp":"bun test/fixtures/totp-sqlite-bun.ts"},"peerDependenciesMeta":{"@effect/sql-d1":{"optional":true},"@effect/sql-libsql":{"optional":true},"@effect/sql-mysql2":{"optional":true},"@effect/sql-pg":{"optional":true},"@effect/sql-pglite":{"optional":true},"@effect/sql-sqlite-bun":{"optional":true},"@effect/sql-sqlite-do":{"optional":true},"@effect/sql-sqlite-node":{"optional":true},"@effect/sql-sqlite-wasm":{"optional":true}}}
+{"name":"@yielded/auth-persistence-drizzle","version":"0.1.0-beta.31","dependencies":{"@yielded/auth":"0.1.0-beta.31","@yielded/auth-persistence":"0.1.0-beta.31"},"devDependencies":{"@effect/platform-bun":"4.0.0","@effect/platform-node":"4.0.0","@effect/sql-d1":"4.0.0","@effect/sql-libsql":"4.0.0","@effect/sql-mysql2":"4.0.0","@effect/sql-pg":"4.0.0","@effect/sql-pglite":"4.0.0","@effect/sql-sqlite-bun":"4.0.0","@effect/sql-sqlite-do":"4.0.0","@effect/sql-sqlite-node":"4.0.0","@effect/sql-sqlite-wasm":"4.0.0","@effect/vitest":"4.0.0","@yielded/crypto":"0.1.0-beta.31","drizzle-orm":"1.0.0-rc.4","effect":"4.0.0","typescript":"7.0.2","vite":"npm:@voidzero-dev/vite-plus-core@1.1.0","vite-plus":"1.1.0","vitest":"5.0.3"},"peerDependencies":{"@effect/sql-d1":">=4.0.0","@effect/sql-libsql":">=4.0.0","@effect/sql-mysql2":">=4.0.0","@effect/sql-pg":">=4.0.0","@effect/sql-pglite":">=4.0.0","@effect/sql-sqlite-bun":">=4.0.0","@effect/sql-sqlite-do":">=4.0.0","@effect/sql-sqlite-node":">=4.0.0","@effect/sql-sqlite-wasm":">=4.0.0","drizzle-orm":">=1.0.0-rc.4","effect":"^4.0.0"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./D1":{"types":"./dist/D1.d.mts","default":"./dist/D1.mjs"},"./Libsql":{"types":"./dist/Libsql.d.mts","default":"./dist/Libsql.mjs"},"./Mysql2":{"types":"./dist/Mysql2.d.mts","default":"./dist/Mysql2.mjs"},"./Pglite":{"types":"./dist/Pglite.d.mts","default":"./dist/Pglite.mjs"},"./Postgres":{"types":"./dist/Postgres.d.mts","default":"./dist/Postgres.mjs"},"./SqliteBun":{"types":"./dist/SqliteBun.d.mts","default":"./dist/SqliteBun.mjs"},"./SqliteDo":{"types":"./dist/SqliteDo.d.mts","default":"./dist/SqliteDo.mjs"},"./SqliteNode":{"types":"./dist/SqliteNode.d.mts","default":"./dist/SqliteNode.mjs"},"./SqliteWasm":{"types":"./dist/SqliteWasm.d.mts","default":"./dist/SqliteWasm.mjs"}},"description":"Drizzle persistence, table mappings, and migration adapters for Yielded Auth.","homepage":"https://yielded.dev/auth/","bugs":{"url":"https://github.com/yielded-dev/auth/issues"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/yielded-dev/auth.git","directory":"packages/auth-persistence-drizzle"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json","test":"vp test --passWithNoTests","example:totp":"bun test/fixtures/totp-sqlite-bun.ts"},"peerDependenciesMeta":{"@effect/sql-d1":{"optional":true},"@effect/sql-libsql":{"optional":true},"@effect/sql-mysql2":{"optional":true},"@effect/sql-pg":{"optional":true},"@effect/sql-pglite":{"optional":true},"@effect/sql-sqlite-bun":{"optional":true},"@effect/sql-sqlite-do":{"optional":true},"@effect/sql-sqlite-node":{"optional":true},"@effect/sql-sqlite-wasm":{"optional":true}}}

package/src/D1.ts

@@ -74,6 +74,18 @@ export const makeIdentityServices = <
 
 import { Layer } from "effect";
 
+import { d1MigrationsLayer } from "./internal/drizzle-d1-migrations";
+import { sqlitePersistence } from "./internal/drizzle-sqlite";
+
+/** Managed or mapped auth tables committed through D1's atomic batches.
+ * Supply D1Client.layer({ db: env.DB }) with the primary database binding.
+ * Registration supplies subject values; the account and credentials commit together.
+ */
+export const AuthPersistence = {
+  ...sqlitePersistence(makeWithDefaults({}), { batch: true }),
+  migrationsLayer: d1MigrationsLayer,
+};
+
 import type { D1BatchStatements } from "./drizzle/D1BatchStatements";
 import { makeOAuthTarget } from "./drizzle/oauth-drivers";
 import type { OAuthD1Mapping } from "./drizzle/oauth-model";

package/src/internal/drizzle-d1-migrations.ts

@@ -0,0 +1,150 @@
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { PersistenceConfigurationError } from "@yielded/auth-persistence/Adapter";
+import { sql } from "drizzle-orm";
+import { drizzle } from "drizzle-orm/d1";
+import { formatToMillis, getMigrationsToRun } from "drizzle-orm/migrator.utils";
+import { Crypto, DateTime, Effect, Layer, Schema } from "effect";
+
+const MigrationFiles = Schema.Record(Schema.String, Schema.NonEmptyString);
+const MigrationName = Schema.String.check(Schema.isPattern(/^\d{14}_.+$/));
+const JournalColumns = Schema.Array(Schema.Struct({ name: Schema.String }));
+
+const configurationError = () =>
+  PersistenceConfigurationError.make({
+    reason: "Could not apply D1 migrations; check the bundled SQL and database binding",
+  });
+
+const JournalRows = Schema.Array(
+  Schema.Struct({
+    id: Schema.Int,
+    hash: Schema.String,
+    created_at: Schema.String,
+    name: Schema.NullOr(Schema.String),
+  }),
+);
+
+/** Drizzle's D1 migration journal and selection, with bundled SQL in place of
+ * filesystem loading. Pending statements and journal entries share one D1 batch.
+ * Applications own when migrations run; do not run competing migration owners.
+ */
+export const d1MigrationsLayer = (options: {
+  readonly migrations: Readonly<Record<string, string>>;
+  readonly migrationsTable?: string;
+}) =>
+  Layer.effectDiscard(
+    Effect.gen(function* () {
+      const files = yield* Schema.decodeEffect(MigrationFiles)(options.migrations);
+      const client = yield* D1Client;
+      const crypto = yield* Crypto.Crypto;
+      const appliedAt = DateTime.formatIso(yield* DateTime.now);
+
+      const migrations = yield* Effect.forEach(
+        Object.entries(files).sort(([left], [right]) => left.localeCompare(right)),
+        Effect.fnUntraced(function* ([name, contents]) {
+          yield* Schema.decodeEffect(MigrationName)(name);
+
+          const folderMillis = yield* Schema.decodeEffect(Schema.Int)(
+            formatToMillis(name.slice(0, 14)),
+          );
+
+          const digest = yield* crypto.digest("SHA-256", new TextEncoder().encode(contents));
+
+          return {
+            name,
+            folderMillis,
+            hash: Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join(""),
+            sql: contents.split("--> statement-breakpoint"),
+            bps: true,
+          };
+        }),
+      );
+
+      yield* Effect.tryPromise({
+        try: async () => {
+          const db = drizzle(client.config.db);
+          const name = options.migrationsTable ?? "__drizzle_migrations";
+          const table = sql.identifier(name);
+
+          const columns = Schema.decodeUnknownSync(JournalColumns)(
+            await db.all(sql`select name from pragma_table_info(${name})`),
+          ).map((column) => column.name);
+
+          const newDb = columns.length === 0;
+          const legacy = !newDb && !columns.includes("name");
+
+          if (
+            !newDb &&
+            (!["id", "hash", "created_at"].every((column) => columns.includes(column)) ||
+              legacy === columns.includes("applied_at"))
+          )
+            throw configurationError();
+
+          // Original Drizzle SQLite journals can have NULL serial IDs. Use the
+          // physical rowid to backfill each retained entry without changing it.
+          const journal = newDb
+            ? []
+            : Schema.decodeUnknownSync(JournalRows)(
+                await db.all(sql`select rowid as id, hash, cast(created_at as text) as created_at,
+              ${legacy ? sql`null` : sql`name`} as name from ${table} order by rowid`),
+              ).map((entry) => ({ ...entry }));
+
+          const journalStatements = newDb
+            ? [
+                db.run(sql`create table ${table} (
+                id integer primary key, hash text not null, created_at numeric,
+                name text, applied_at text
+              )`),
+              ]
+            : [];
+
+          if (legacy) {
+            // Match retained entries using Drizzle's timestamp/hash convention,
+            // but stage the upgrade with pending SQL: D1 cannot run BEGIN.
+            journalStatements.push(
+              db.run(sql`alter table ${table} add column name text`),
+              db.run(sql`alter table ${table} add column applied_at text`),
+            );
+            for (const entry of journal) {
+              const millis = Math.floor(Number(entry.created_at) / 1000) * 1000;
+
+              const candidates = migrations.filter(
+                (migration) => migration.folderMillis === millis,
+              );
+
+              const matches =
+                candidates.length === 1
+                  ? candidates
+                  : (candidates.length === 0 ? migrations : candidates).filter(
+                      (migration) => migration.hash === entry.hash,
+                    );
+
+              const match = matches[0];
+
+              if (matches.length !== 1 || match === undefined) throw configurationError();
+              entry.name = match.name;
+              journalStatements.push(
+                db.run(sql`update ${table} set name = ${match.name} where rowid = ${entry.id}`),
+              );
+            }
+          }
+
+          const statements = [
+            ...journalStatements,
+            ...getMigrationsToRun({
+              localMigrations: migrations,
+              dbMigrations: [...journal],
+            }).flatMap((migration) => [
+              ...migration.sql.map((statement) => db.run(sql.raw(statement))),
+              db.run(sql`insert into ${table} (hash, created_at, name, applied_at)
+                values (${migration.hash}, ${migration.folderMillis}, ${migration.name}, ${appliedAt})`),
+            ]),
+          ];
+
+          const [first, ...rest] = statements;
+
+          if (first !== undefined) await db.batch([first, ...rest]);
+        },
+        catch: configurationError,
+      });
+    }).pipe(Effect.mapError(configurationError)),
+  );

package/src/internal/drizzle-sqlite.ts

@@ -12,7 +12,7 @@ import {
   uniqueIndex,
   type SQLiteTable,
 } from "drizzle-orm/sqlite-core";
-import type { Effect } from "effect";
+import { Effect } from "effect";
 import type { SqlClient } from "effect/sql/SqlClient";
 
 import { nativeDatabase, type NativeDatabaseHandle } from "../drizzle/native-database";
@@ -71,10 +71,22 @@ const describe = (table: SQLiteTable): StorageTable => {
   };
 };
 
-export const sqlitePersistence = <R>(acquire: Effect.Effect<object, never, R | SqlClient>) =>
+export const sqlitePersistence = <R>(
+  acquire: Effect.Effect<object, never, R | SqlClient>,
+  options?: { readonly batch: true },
+) =>
   createPersistence<SQLiteTable, R, NativeDatabaseHandle>({
     nativeTables: (database) => makeDrizzleSqlTables(database.$client, database),
     makeTable,
     describe,
     acquire: nativeDatabase(acquire),
+    ...(options?.batch === true
+      ? {
+          batch: (database: NativeDatabaseHandle) => ({
+            client: database.$client,
+            execute: (statements: Parameters<typeof database.$client.batch>[0]) =>
+              database.$client.batch(statements).pipe(Effect.asVoid),
+          }),
+        }
+      : {}),
   });