@yielded/auth-persistence 0.1.0-beta.7

package/dist/drizzle/d1-oauth.d.mts

@@ -0,0 +1,301 @@
+import { OAuthAccountsMapping, OAuthD1Mapping, OAuthRegistrationAuthority, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./oauth-model.mjs";
+import { OAuthCoordinatorError } from "./oauth-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { LifecycleHooks } from "@yielded/auth/Hooks";
+import { OAuthAccountsPersistence, OAuthRegistrationIntents, OAuthSignInPersistence, OAuthUnavailable } from "@yielded/auth/OAuth";
+import { AnyRelations } from "drizzle-orm";
+import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+//#region src/drizzle/d1-oauth.d.ts
+type SQLiteTable = AnySQLiteTable<{
+  dialect: "sqlite";
+}>;
+type Database = EffectSQLiteD1Database<AnyRelations> & {
+  readonly $client: D1Client;
+};
+declare const makeD1OAuthAccountsServices: <S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, U extends SQLiteTable, N>(database: Database, mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping) => Effect.Effect<{
+  oauthAccountsPersistence: {
+    readonly capture: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+    }) => Effect.Effect<import("@yielded/auth/OAuth").OAuthAccountRevision | undefined, OAuthUnavailable>;
+    readonly issue: <A>(input: {
+      readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
+      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Issued";
+      readonly flow: {
+        readonly context: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly protocol: "oauth" | "oidc";
+          readonly configurationGeneration: number;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly responseIssuerMode: "required" | "unsupported";
+          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly generation: number;
+          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingExpiresAtMillis: number;
+          readonly issuedAtMillis: number;
+          readonly expiresAtMillis: number;
+          readonly claimLifetimeMillis: number;
+          readonly namespace: "effect-auth/oauth-link-context/v1";
+          readonly revision: {
+            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly credentials: readonly {
+              readonly credentialId: string;
+              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            }[];
+          };
+          readonly maximumEvidenceAgeMillis: number;
+        };
+        readonly sealed: {
+          readonly format: "oauth-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+        readonly retentionUntilMillis: number;
+      };
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly preflight: (input: import("@yielded/auth/OAuth").OAuthLinkAccess) => Effect.Effect<import("@yielded/auth/OAuth").OAuthLinkPendingFlow | undefined, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly access: import("@yielded/auth/OAuth").OAuthLinkAccess;
+      readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
+      readonly claimId: import("@yielded/auth/OAuth").OAuthLinkClaim["claimId"];
+      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Claimed";
+      readonly claim: {
+        readonly flow: {
+          readonly context: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+            readonly generation: number;
+            readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+            readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+            readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingExpiresAtMillis: number;
+            readonly issuedAtMillis: number;
+            readonly expiresAtMillis: number;
+            readonly claimLifetimeMillis: number;
+            readonly namespace: "effect-auth/oauth-link-context/v1";
+            readonly revision: {
+              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+              readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly credentials: readonly {
+                readonly credentialId: string;
+                readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              }[];
+            };
+            readonly maximumEvidenceAgeMillis: number;
+          };
+          readonly sealed: {
+            readonly format: "oauth-xchacha20poly1305-v1";
+            readonly keyId: string;
+            readonly nonce: string;
+            readonly ciphertext: import("effect/Redacted").Redacted<string>;
+          };
+          readonly retentionUntilMillis: number;
+        };
+        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+        readonly claimedAtMillis: number;
+        readonly claimExpiresAtMillis: number;
+      };
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthLinkClaim;
+      readonly outcome: import("@yielded/auth/OAuth").OAuthLinkOutcome;
+      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
+      readonly invalidation: import("@yielded/auth/Sessions").SessionInvalidationWindow;
+      readonly nowMillis: number;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Linked";
+      readonly credential: {
+        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+        readonly identity: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly subject: string;
+        };
+        readonly credentialId: string;
+        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly revision: {
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly credentials: readonly {
+            readonly credentialId: string;
+            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          }[];
+        };
+      };
+      readonly changed: boolean;
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly inspectUnlink: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly credentialId: string;
+    }) => Effect.Effect<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Target";
+      readonly credential: {
+        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+        readonly identity: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly subject: string;
+        };
+        readonly credentialId: string;
+        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly revision: {
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly credentials: readonly {
+            readonly credentialId: string;
+            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          }[];
+        };
+      };
+    } | {
+      readonly _tag: "Replay";
+      readonly result: {
+        readonly _tag: "Unlinked";
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+    }, OAuthUnavailable>;
+    readonly unlink: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
+      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
+      readonly invalidation: import("@yielded/auth/Sessions").SessionInvalidationWindow;
+      readonly nowMillis: number;
+      readonly retentionUntilMillis: number;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Unlinked";
+      readonly result: {
+        readonly _tag: "Unlinked";
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+      readonly replayed: boolean;
+    } | {
+      readonly _tag: "LastSignInMethod";
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly cleanup: <A>(input: import("@yielded/auth/OAuth").OAuthCleanupInput, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare const makeD1OAuthSignInServices: <S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, N>(database: Database, mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping) => Effect.Effect<{
+  oauthSignInPersistence: {
+    readonly issue: <A>(input: import("@yielded/auth/OAuth").OAuthPendingFlow, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthIssueDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly generation: number;
+      readonly flowId: import("@yielded/auth/Operations").RequestBindingFlowId;
+      readonly provider: import("@yielded/auth/OAuth").OAuthProviderKey;
+      readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+      readonly stateDigest: import("@yielded/auth/Schema").TokenDigest;
+      readonly requestBindingVerifier: import("@yielded/auth/Schema").TokenDigest;
+      readonly requestBindingExpiresAtMillis: number;
+      readonly responseIssuer?: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly nowMillis: number;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthClaimDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
+      readonly outcome: {
+        readonly _tag: "Verified";
+        readonly identity: import("@yielded/auth/OAuth").OAuthVerifiedExternalIdentity;
+      } | {
+        readonly _tag: "Cancelled" | "Rejected" | "Ambiguous";
+      };
+      readonly nowMillis: number;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSettlementDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+    readonly cleanup: <A>(input: import("@yielded/auth/OAuth").OAuthCleanupInput, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare const makeD1OAuthRegistrationIntentServices: <S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, N>(database: Database, mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping) => Effect.Effect<{
+  oauthRegistrationIntents: {
+    readonly settle: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
+      readonly identity: import("@yielded/auth/OAuth").OAuthVerifiedExternalIdentity;
+      readonly intent?: import("@yielded/auth/OAuth").OAuthRegistrationIntent;
+      readonly nowMillis: number;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthRegistrationSettlement, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare const makeD1OAuthRegistrationServices: <Registration, S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, R extends SQLiteTable, N>(database: Database, mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, T, I, R, N> & OAuthD1Mapping) => Effect.Effect<{
+  registrationAuthority: OAuthRegistrationAuthority<Registration>;
+}, never, LifecycleHooks>;
+declare function coordinateD1OAuthSignIn<S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, OAuthSignInPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateD1OAuthRegistrationIntents<S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, OAuthRegistrationIntents | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateD1OAuthAccounts<S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, U extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, OAuthAccountsPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateD1OAuthRegistration<TargetId, Registration, S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, Rq extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, T, I, Rq, N> & OAuthD1Mapping;
+  readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinateD1OAuthAccounts, coordinateD1OAuthRegistration, coordinateD1OAuthRegistrationIntents, coordinateD1OAuthSignIn, makeD1OAuthAccountsServices, makeD1OAuthRegistrationIntentServices, makeD1OAuthRegistrationServices, makeD1OAuthSignInServices };
+//# sourceMappingURL=d1-oauth.d.mts.map

package/dist/drizzle/d1-oauth.mjs

@@ -0,0 +1,76 @@
+import { coordinateTargetOAuthAccounts, coordinateTargetOAuthRegistration, coordinateTargetOAuthRegistrationIntents, coordinateTargetOAuthSignIn, makeTargetOAuthAccountsServices, makeTargetOAuthRegistrationIntentServices, makeTargetOAuthRegistrationServices, makeTargetOAuthSignInServices } from "./oauth-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { makeD1Owner } from "./d1-planning.mjs";
+import { Context, Effect } from "effect";
+import { OAuthAccountsPersistence, OAuthRegistrationIntents, OAuthSignInPersistence, OAuthUnavailable } from "@yielded/auth/OAuth";
+//#region src/drizzle/d1-oauth.ts
+const unavailable = () => OAuthUnavailable.make({});
+const configuration = {
+	mode: "batch",
+	dialect: "sqlite",
+	locking: false,
+	standaloneGuard: () => Effect.void
+};
+const makeD1OAuthAccountsServices = (database, mapping) => makeTargetOAuthAccountsServices(database, mapping, configuration);
+const makeD1OAuthSignInServices = (database, mapping) => makeTargetOAuthSignInServices(database, mapping, configuration);
+const makeD1OAuthRegistrationIntentServices = (database, mapping) => makeTargetOAuthRegistrationIntentServices(database, mapping, configuration);
+const makeD1OAuthRegistrationServices = (database, mapping) => makeTargetOAuthRegistrationServices(database, mapping, configuration);
+function coordinateD1OAuthSignIn(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthSignIn(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.oauthSignInPersistence;
+		const provided = Context.make(OAuthSignInPersistence, {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinateD1OAuthRegistrationIntents(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthRegistrationIntents(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.oauthRegistrationIntents;
+		const provided = Context.make(OAuthRegistrationIntents, { settle: (input, prepare) => owner.run(original.settle(input, prepare)) }).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinateD1OAuthAccounts(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthAccounts(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.oauthAccountsPersistence;
+		const provided = Context.make(OAuthAccountsPersistence, {
+			capture: (input) => owner.run(original.capture(input)),
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			preflight: (input) => owner.run(original.preflight(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			inspectUnlink: (input) => owner.run(original.inspectUnlink(input)),
+			unlink: (input, prepare) => owner.run(original.unlink(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinateD1OAuthRegistration(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthRegistration(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.registrationAuthority;
+		const provided = Context.make(options.target, {
+			read: (input) => owner.run(original.read(input)),
+			inspect: (input) => owner.run(original.inspect(input)),
+			register: (input, prepare) => owner.run(original.register(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+//#endregion
+export { coordinateD1OAuthAccounts, coordinateD1OAuthRegistration, coordinateD1OAuthRegistrationIntents, coordinateD1OAuthSignIn, makeD1OAuthAccountsServices, makeD1OAuthRegistrationIntentServices, makeD1OAuthRegistrationServices, makeD1OAuthSignInServices };
+
+//# sourceMappingURL=d1-oauth.mjs.map

package/dist/drizzle/d1-oauth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-oauth.mjs","names":[],"sources":["../../src/drizzle/d1-oauth.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  OAuthAccountsPersistence,\n  OAuthRegistrationIntents,\n  OAuthSignInPersistence,\n  OAuthUnavailable,\n} from \"@yielded/auth/OAuth\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\n\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport type {\n  OAuthAccountsMapping,\n  OAuthD1Mapping,\n  OAuthRegistrationAuthority,\n  OAuthRegistrationIntentMapping,\n  OAuthRegistrationMapping,\n  OAuthSignInMapping,\n} from \"./oauth-model\";\nimport {\n  type OAuthCoordinatorError,\n  coordinateTargetOAuthAccounts,\n  coordinateTargetOAuthSignIn,\n  coordinateTargetOAuthRegistrationIntents,\n  coordinateTargetOAuthRegistration,\n  makeTargetOAuthRegistrationIntentServices,\n  makeTargetOAuthRegistrationServices,\n  makeTargetOAuthSignInServices,\n  makeTargetOAuthAccountsServices,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype SQLiteTable = AnySQLiteTable<{ dialect: \"sqlite\" }>;\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\nconst unavailable = () => OAuthUnavailable.make({});\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\nexport const makeD1OAuthAccountsServices = <\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  U extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping,\n) => makeTargetOAuthAccountsServices(database, mapping, configuration);\n\nexport const makeD1OAuthSignInServices = <\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping,\n) => makeTargetOAuthSignInServices(database, mapping, configuration);\n\nexport const makeD1OAuthRegistrationIntentServices = <\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping,\n) => makeTargetOAuthRegistrationIntentServices(database, mapping, configuration);\n\nexport const makeD1OAuthRegistrationServices = <\n  Registration,\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  R extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, T, I, R, N> & OAuthD1Mapping,\n) => makeTargetOAuthRegistrationServices<Registration>(database, mapping, configuration);\n\nexport function coordinateD1OAuthSignIn<\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, OAuthSignInPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthSignIn<\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, OAuthSignInPersistence | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.oauthSignInPersistence;\n\n        const service: OAuthSignInPersistence[\"Service\"] = {\n          issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n          claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(OAuthSignInPersistence, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinateD1OAuthRegistrationIntents<\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, OAuthRegistrationIntents | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthRegistrationIntents<\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, OAuthRegistrationIntents | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.oauthRegistrationIntents;\n\n        const service: OAuthRegistrationIntents[\"Service\"] = {\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n        };\n\n        const provided = Context.make(OAuthRegistrationIntents, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinateD1OAuthAccounts<\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  U extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, OAuthAccountsPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthAccounts<\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, OAuthAccountsPersistence | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.oauthAccountsPersistence;\n\n        const service: OAuthAccountsPersistence[\"Service\"] = {\n          capture: (input) => owner.run(original.capture(input)),\n          issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n          preflight: (input) => owner.run(original.preflight(input)),\n          claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n          inspectUnlink: (input) => owner.run(original.inspectUnlink(input)),\n          unlink: (input, prepare) => owner.run(original.unlink(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(OAuthAccountsPersistence, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinateD1OAuthRegistration<\n  TargetId,\n  Registration,\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  Rq extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, T, I, Rq, N> &\n      OAuthD1Mapping;\n    readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthRegistration<\n      Registration,\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, TargetId | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.registrationAuthority;\n\n        const service: OAuthRegistrationAuthority<Registration> = {\n          read: (input) => owner.run(original.read(input)),\n          inspect: (input) => owner.run(original.inspect(input)),\n          register: (input, prepare) => owner.run(original.register(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(options.target, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n"],"mappings":";;;;;;AAqCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAEA,MAAa,+BAUX,UACA,YACG,gCAAgC,UAAU,SAAS,aAAa;AAErE,MAAa,6BAQX,UACA,YACG,8BAA8B,UAAU,SAAS,aAAa;AAEnE,MAAa,yCAUX,UACA,YACG,0CAA0C,UAAU,SAAS,aAAa;AAE/E,MAAa,mCAWX,UACA,YACG,oCAAkD,UAAU,SAAS,aAAa;AAEvF,SAAgB,wBAad,SACA,SACA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4BAKE,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAS1B,MAAM,WAAW,QAAQ,KAAK,wBAAwB;GANpD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGb,CAAC,CAAC,CAAC,KAC7D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,qCAed,SACA,SAGA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yCAKE,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAM1B,MAAM,WAAW,QAAQ,KAAK,0BAA0B,EAHtD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC,EAGT,CAAC,CAAC,CAAC,KAC/D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,0BAed,SACA,SACA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,8BAKE,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAa1B,MAAM,WAAW,QAAQ,KAAK,0BAA0B;GAVtD,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,YAAY,UAAU,MAAM,IAAI,SAAS,UAAU,KAAK,CAAC;GACzD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,gBAAgB,UAAU,MAAM,IAAI,SAAS,cAAc,KAAK,CAAC;GACjE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGX,CAAC,CAAC,CAAC,KAC/D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,8BAiBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCAME,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAS1B,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ;GAN5C,OAAO,UAAU,MAAM,IAAI,SAAS,KAAK,KAAK,CAAC;GAC/C,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,WAAW,OAAO,YAAY,MAAM,IAAI,SAAS,SAAS,OAAO,OAAO,CAAC;GACzE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGrB,CAAC,CAAC,CAAC,KACrD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF"}

package/dist/drizzle/d1-passkey.d.mts

@@ -0,0 +1,51 @@
+import { PersistenceMappingError } from "../internal/mapping-error.mjs";
+import "./model.mjs";
+import { D1PasskeyMapping, PasskeyCredentialMapping, PasskeyCredentialServices, PasskeyEnrollmentContextMapping, PasskeyEnrollmentContextServices, PasskeyMappingSource, PasskeyPersistenceMapping, PasskeyPersistenceServices } from "./passkey-model.mjs";
+import { PasskeyRegistrationCeremonyMapping, PasskeyRegistrationCeremonyServices } from "./passkey-registration-ceremony-model.mjs";
+import { PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter } from "./passkey-write-model.mjs";
+import { PasskeyCoordinatorError } from "../internal/passkey/target.mjs";
+import "./passkey-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { Context, Effect } from "effect";
+import { PasskeyManagementPersistence, PasskeyPersistence } from "@yielded/auth/Passkey";
+import { LifecycleHooks } from "@yielded/auth/Hooks";
+import { AnyRelations } from "drizzle-orm";
+import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+//#region src/drizzle/d1-passkey.d.ts
+type Table$1 = AnySQLiteTable<{
+  dialect: "sqlite";
+}>;
+type Database = EffectSQLiteD1Database<AnyRelations> & {
+  readonly $client: D1Client;
+};
+declare const makePasskeyCredentialServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyCredentialServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup>, makePasskeyEnrollmentContextServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup>, makePasskeyPersistenceServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | LifecycleHooks>, makePasskeyRegistrationCeremonyServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, H extends Table$1, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | LifecycleHooks>, makePasskeyManagementServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Command extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | LifecycleHooks>, makePasskeyRegistrationServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, N, Value, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyRegistrationServices<Value>, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | LifecycleHooks>;
+declare function coordinatePasskeyPersistence<D extends Database, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N> & D1PasskeyMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+declare function coordinatePasskeyRegistrationCeremony<D extends Database, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, H extends Table$1, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & D1PasskeyMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+declare function coordinatePasskeyManagement<D extends Database, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Command extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N> & D1PasskeyMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | PasskeyManagementPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+declare function coordinatePasskeyRegistration<D extends Database, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, N, Value, AuthorityId, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value> & D1PasskeyMapping, RSetup>;
+  readonly authority: Context.Key<AuthorityId, PasskeyRegistrationWriter<Value>>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | AuthorityId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+//#endregion
+export { coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices };
+//# sourceMappingURL=d1-passkey.d.mts.map

package/dist/drizzle/d1-passkey.mjs

@@ -0,0 +1,95 @@
+import { coordinateTargetPasskeyManagement, coordinateTargetPasskeyRegistrationWriter } from "./passkey-write-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { makeD1Owner } from "./d1-planning.mjs";
+import { coordinateTargetPasskey, coordinateTargetPasskeyRegistration } from "./passkey-target.mjs";
+import { makePasskeyTarget } from "./passkey-drivers.mjs";
+import { Context, Effect } from "effect";
+import { PasskeyManagementPersistence, PasskeyPersistence, PasskeyUnavailable } from "@yielded/auth/Passkey";
+//#region src/drizzle/d1-passkey.ts
+const unavailable = () => PasskeyUnavailable.make({});
+const configuration = {
+	mode: "batch",
+	dialect: "sqlite",
+	locking: false,
+	standaloneGuard: () => Effect.void
+};
+const { makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyManagementServices, makePasskeyRegistrationServices } = makePasskeyTarget(configuration);
+function coordinatePasskeyPersistence(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskey(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const original = services.passkeyPersistence;
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const provided = Context.make(PasskeyPersistence, {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinatePasskeyRegistrationCeremony(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskeyRegistration(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const original = services.passkeyPersistence;
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const provided = Context.make(PasskeyPersistence, {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinatePasskeyManagement(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskeyManagement(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const collector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, collector));
+		const original = services.passkeyPersistence;
+		const persistence = {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		};
+		const authority = services.passkeyManagementPersistence;
+		const context = Context.make(PasskeyPersistence, persistence).pipe(Context.add(PasskeyManagementPersistence, {
+			list: (input) => owner.run(authority.list(input)),
+			inspectRemove: (input) => owner.run(authority.inspectRemove(input)),
+			issueEnrollment: (input, prepare) => owner.run(authority.issueEnrollment(input, prepare)),
+			completeEnrollment: (input, prepare) => owner.run(authority.completeEnrollment(input, prepare)),
+			rename: (input, prepare) => owner.run(authority.rename(input, prepare)),
+			remove: (input, prepare) => owner.run(authority.remove(input, prepare))
+		}), Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, context));
+	})));
+}
+function coordinatePasskeyRegistration(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskeyRegistrationWriter(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const collector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, collector));
+		const original = services.passkeyPersistence;
+		const persistence = {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		};
+		const authority = services.passkeyRegistrationAuthority;
+		const context = Context.make(PasskeyPersistence, persistence).pipe(Context.add(options.authority, {
+			inspect: (input) => owner.run(authority.inspect(input)),
+			issueRegistration: (input, prepare) => owner.run(authority.issueRegistration(input, prepare)),
+			completeRegistration: (input, prepare) => owner.run(authority.completeRegistration(input, prepare))
+		}), Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, context));
+	})));
+}
+//#endregion
+export { coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices };
+
+//# sourceMappingURL=d1-passkey.mjs.map

package/dist/drizzle/d1-passkey.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-passkey.mjs","names":[],"sources":["../../src/drizzle/d1-passkey.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  PasskeyUnavailable,\n  PasskeyPersistence,\n  PasskeyManagementPersistence,\n} from \"@yielded/auth/Passkey\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\n\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport { makePasskeyTarget } from \"./passkey-drivers\";\nimport type {\n  D1PasskeyMapping,\n  PasskeyCredentialMapping,\n  PasskeyMappingSource,\n  PasskeyPersistenceMapping,\n} from \"./passkey-model\";\nimport type { PasskeyRegistrationCeremonyMapping } from \"./passkey-registration-ceremony-model\";\nimport {\n  type PasskeyCoordinatorError,\n  coordinateTargetPasskey,\n  coordinateTargetPasskeyRegistration,\n} from \"./passkey-target\";\n\ntype Table = AnySQLiteTable<{ dialect: \"sqlite\" }>;\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\n\nconst unavailable = () => PasskeyUnavailable.make({});\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\nconst target = makePasskeyTarget<Database, Table, D1PasskeyMapping>(configuration);\n\nexport const {\n  makePasskeyCredentialServices,\n  makePasskeyEnrollmentContextServices,\n  makePasskeyPersistenceServices,\n  makePasskeyRegistrationCeremonyServices,\n  makePasskeyManagementServices,\n  makePasskeyRegistrationServices,\n} = target;\n\nexport function coordinatePasskeyPersistence<\n  D extends Database,\n  S extends Table,\n  C extends Table,\n  F extends Table,\n  O extends Table,\n  H extends Table,\n  M extends Table,\n  Flow extends Table,\n  Admission extends Table,\n  Charge extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasskeyMappingSource<\n      PasskeyPersistenceMapping<\n        PasskeyCredentialMapping<S, C, F, O, H, N>,\n        M,\n        Flow,\n        Admission,\n        Charge,\n        N\n      > &\n        D1PasskeyMapping,\n      RSetup\n    >;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  PasskeyCoordinatorError<E> | DatabaseError,\n  | Exclude<R, PasskeyPersistence | D1BatchStatements>\n  | LifecycleHooks\n  | DatabaseRequirements\n  | RSetup\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasskey(database, options.mapping, configuration, (_, services, append) =>\n      Effect.gen(function* () {\n        const original = services.passkeyPersistence;\n\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const service: PasskeyPersistence[\"Service\"] = {\n          issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n          context: (input) => owner.run(original.context(input)),\n          claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(PasskeyPersistence, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinatePasskeyRegistrationCeremony<\n  D extends Database,\n  M extends Table,\n  Flow extends Table,\n  Admission extends Table,\n  Charge extends Table,\n  Intent extends Table,\n  H extends Table,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasskeyMappingSource<\n      PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & D1PasskeyMapping,\n      RSetup\n    >;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  PasskeyCoordinatorError<E> | DatabaseError,\n  | Exclude<R, PasskeyPersistence | D1BatchStatements>\n  | LifecycleHooks\n  | DatabaseRequirements\n  | RSetup\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasskeyRegistration(\n      database,\n      options.mapping,\n      configuration,\n      (_, services, append) =>\n        Effect.gen(function* () {\n          const original = services.passkeyPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(unavailable()).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: PasskeyPersistence[\"Service\"] = {\n            issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n            context: (input) => owner.run(original.context(input)),\n            claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n            settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n            cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n          };\n\n          const provided = Context.make(PasskeyPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n    ),\n  );\n}\n\nimport type {\n  PasskeyManagementMapping,\n  PasskeyRegistrationMapping,\n  PasskeyRegistrationServices,\n  PasskeyRegistrationWriter,\n} from \"./passkey-write-model\";\nimport {\n  coordinateTargetPasskeyManagement,\n  coordinateTargetPasskeyRegistrationWriter,\n} from \"./passkey-write-target\";\n\nexport function coordinatePasskeyManagement<\n  D extends Database,\n  S extends Table,\n  C extends Table,\n  F extends Table,\n  O extends Table,\n  H extends Table,\n  M extends Table,\n  Flow extends Table,\n  Admission extends Table,\n  Charge extends Table,\n  Command extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasskeyMappingSource<\n      PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N> &\n        D1PasskeyMapping,\n      RSetup\n    >;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  PasskeyCoordinatorError<E> | DatabaseError,\n  | Exclude<R, PasskeyPersistence | PasskeyManagementPersistence | D1BatchStatements>\n  | LifecycleHooks\n  | DatabaseRequirements\n  | RSetup\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasskeyManagement(\n      database,\n      options.mapping,\n      configuration,\n      (_, services, append) =>\n        Effect.gen(function* () {\n          const collector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(unavailable()).pipe(\n            Effect.provideService(D1BatchStatements, collector),\n          );\n\n          const original = services.passkeyPersistence;\n\n          const persistence: PasskeyPersistence[\"Service\"] = {\n            issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n            context: (input) => owner.run(original.context(input)),\n            claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n            settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n            cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n          };\n\n          const authority = services.passkeyManagementPersistence;\n\n          const service: PasskeyManagementPersistence[\"Service\"] = {\n            list: (input) => owner.run(authority.list(input)),\n            inspectRemove: (input) => owner.run(authority.inspectRemove(input)),\n            issueEnrollment: (input, prepare) =>\n              owner.run(authority.issueEnrollment(input, prepare)),\n            completeEnrollment: (input, prepare) =>\n              owner.run(authority.completeEnrollment(input, prepare)),\n            rename: (input, prepare) => owner.run(authority.rename(input, prepare)),\n            remove: (input, prepare) => owner.run(authority.remove(input, prepare)),\n          };\n\n          const context = Context.make(PasskeyPersistence, persistence).pipe(\n            Context.add(PasskeyManagementPersistence, service),\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, context));\n        }),\n    ),\n  );\n}\n\nexport function coordinatePasskeyRegistration<\n  D extends Database,\n  S extends Table,\n  C extends Table,\n  F extends Table,\n  O extends Table,\n  H extends Table,\n  M extends Table,\n  Flow extends Table,\n  Admission extends Table,\n  Charge extends Table,\n  Intent extends Table,\n  N,\n  Value,\n  AuthorityId,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasskeyMappingSource<\n      PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value> &\n        D1PasskeyMapping,\n      RSetup\n    >;\n    readonly authority: Context.Key<AuthorityId, PasskeyRegistrationWriter<Value>>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  PasskeyCoordinatorError<E> | DatabaseError,\n  | Exclude<R, PasskeyPersistence | AuthorityId | D1BatchStatements>\n  | LifecycleHooks\n  | DatabaseRequirements\n  | RSetup\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasskeyRegistrationWriter(\n      database,\n      options.mapping,\n      configuration,\n      (_, services: PasskeyRegistrationServices<Value>, append) =>\n        Effect.gen(function* () {\n          const collector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(unavailable()).pipe(\n            Effect.provideService(D1BatchStatements, collector),\n          );\n\n          const original = services.passkeyPersistence;\n\n          const persistence: PasskeyPersistence[\"Service\"] = {\n            issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n            context: (input) => owner.run(original.context(input)),\n            claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n            settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n            cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n          };\n\n          const authority = services.passkeyRegistrationAuthority;\n\n          const service: PasskeyRegistrationWriter<Value> = {\n            inspect: (input) => owner.run(authority.inspect(input)),\n            issueRegistration: (input, prepare) =>\n              owner.run(authority.issueRegistration(input, prepare)),\n            completeRegistration: (input, prepare) =>\n              owner.run(authority.completeRegistration(input, prepare)),\n          };\n\n          const context = Context.make(PasskeyPersistence, persistence).pipe(\n            Context.add(options.authority, service),\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, context));\n        }),\n    ),\n  );\n}\n"],"mappings":";;;;;;;;AA+BA,MAAM,oBAAoB,mBAAmB,KAAK,CAAC,CAAC;AAEpD,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAIA,MAAa,EACX,+BACA,sCACA,gCACA,yCACA,+BACA,oCARa,kBAAqD,aAShE;AAEJ,SAAgB,6BAmBd,SACA,SAcA,MAQA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,wBAAwB,UAAU,QAAQ,SAAS,gBAAgB,GAAG,UAAU,WAC9E,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,SAAS;EAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAUA,MAAM,WAAW,QAAQ,KAAK,oBAAoB;GAPhD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGjB,CAAC,CAAC,CAAC,KACzD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,sCAed,SACA,SAMA,MAQA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,oCACE,UACA,QAAQ,SACR,gBACC,GAAG,UAAU,WACZ,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,SAAS;EAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAUA,MAAM,WAAW,QAAQ,KAAK,oBAAoB;GAPhD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGjB,CAAC,CAAC,CAAC,KACzD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACL,CACF;AACF;AAaA,SAAgB,4BAoBd,SACA,SAOA,MAQA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCACE,UACA,QAAQ,SACR,gBACC,GAAG,UAAU,WACZ,OAAO,IAAI,aAAa;EACtB,MAAM,YAAY,kBAAkB,GAAG,EACrC,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,SAAS,CACpD;EAEA,MAAM,WAAW,SAAS;EAE1B,MAAM,cAA6C;GACjD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EACzE;EAEA,MAAM,YAAY,SAAS;EAa3B,MAAM,UAAU,QAAQ,KAAK,oBAAoB,WAAW,CAAC,CAAC,KAC5D,QAAQ,IAAI,8BAA8B;GAX1C,OAAO,UAAU,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC;GAChD,gBAAgB,UAAU,MAAM,IAAI,UAAU,cAAc,KAAK,CAAC;GAClE,kBAAkB,OAAO,YACvB,MAAM,IAAI,UAAU,gBAAgB,OAAO,OAAO,CAAC;GACrD,qBAAqB,OAAO,YAC1B,MAAM,IAAI,UAAU,mBAAmB,OAAO,OAAO,CAAC;GACxD,SAAS,OAAO,YAAY,MAAM,IAAI,UAAU,OAAO,OAAO,OAAO,CAAC;GACtE,SAAS,OAAO,YAAY,MAAM,IAAI,UAAU,OAAO,OAAO,OAAO,CAAC;EAItB,CAAC,GACjD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,OAAO,CAAC;CAChE,CAAC,CACL,CACF;AACF;AAEA,SAAgB,8BAsBd,SACA,SAQA,MAQA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,0CACE,UACA,QAAQ,SACR,gBACC,GAAG,UAA8C,WAChD,OAAO,IAAI,aAAa;EACtB,MAAM,YAAY,kBAAkB,GAAG,EACrC,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,SAAS,CACpD;EAEA,MAAM,WAAW,SAAS;EAE1B,MAAM,cAA6C;GACjD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EACzE;EAEA,MAAM,YAAY,SAAS;EAU3B,MAAM,UAAU,QAAQ,KAAK,oBAAoB,WAAW,CAAC,CAAC,KAC5D,QAAQ,IAAI,QAAQ,WAAW;GAR/B,UAAU,UAAU,MAAM,IAAI,UAAU,QAAQ,KAAK,CAAC;GACtD,oBAAoB,OAAO,YACzB,MAAM,IAAI,UAAU,kBAAkB,OAAO,OAAO,CAAC;GACvD,uBAAuB,OAAO,YAC5B,MAAM,IAAI,UAAU,qBAAqB,OAAO,OAAO,CAAC;EAIrB,CAAC,GACtC,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,OAAO,CAAC;CAChE,CAAC,CACL,CACF;AACF"}