@yielded/auth-persistence 0.1.0-beta.7

package/src/DrizzleSqliteNode.ts

@@ -0,0 +1,259 @@
+import type { AnyRelations } from "drizzle-orm";
+import { type EffectSQLiteNodeDatabase, makeWithDefaults } from "drizzle-orm/effect-sqlite-node";
+import type { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+import { Effect } from "effect";
+
+import type {
+  AuthStoreTables,
+  AuthTables,
+  ExternalIdentityTables,
+  IdentityTables,
+  OAuthStateTables,
+  SubjectProvisioningTables,
+} from "./drizzle/model";
+import {
+  coordinateSqliteAuthStoreTransaction,
+  coordinateSqliteAuthTransaction,
+  coordinateSqliteOAuthStateTransaction,
+  makeSqliteAuthServices,
+  makeSqliteAuthStoreServices,
+  makeSqliteOAuthStateServices,
+} from "./drizzle/sqlite";
+
+export {
+  coordinateSqliteAuthStoreTransaction as coordinateAuthStoreTransaction,
+  coordinateSqliteAuthTransaction as coordinateAuthTransaction,
+  coordinateSqliteOAuthStateTransaction as coordinateOAuthStateTransaction,
+};
+
+import { sqlClientEmailStandaloneGuard } from "./drizzle/email-target";
+import { sqlClientPasswordStandaloneGuard } from "./drizzle/password-target";
+import { sqlClientProofStandaloneGuard } from "./drizzle/proof-target";
+import { sqlClientSessionStandaloneGuard } from "./drizzle/session-target";
+import { makeSqliteEmailTarget, sqliteEmailConfiguration } from "./drizzle/sqlite-emails";
+import {
+  makeSqliteExternalIdentityServices,
+  makeSqliteIdentityServices,
+  makeSqliteSubjectProvisioningServices,
+} from "./drizzle/sqlite-identity";
+import { makeSqlitePasswordTarget, sqlitePasswordConfiguration } from "./drizzle/sqlite-passwords";
+import { makeSqliteProofTarget, sqliteProofConfiguration } from "./drizzle/sqlite-proofs";
+import { makeSqliteSessionTarget, sqliteSessionConfiguration } from "./drizzle/sqlite-sessions";
+
+const sessionTarget = makeSqliteSessionTarget<EffectSQLiteNodeDatabase<AnyRelations>>((database) =>
+  sqliteSessionConfiguration("interactive", sqlClientSessionStandaloneGuard(database)),
+);
+
+const proofTarget = makeSqliteProofTarget<EffectSQLiteNodeDatabase<AnyRelations>>((database) =>
+  sqliteProofConfiguration("interactive", sqlClientProofStandaloneGuard(database)),
+);
+
+const passwordTarget = makeSqlitePasswordTarget<EffectSQLiteNodeDatabase<AnyRelations>>(
+  (database) =>
+    sqlitePasswordConfiguration(
+      "interactive",
+      sqlClientPasswordStandaloneGuard(database),
+      sqlClientProofStandaloneGuard(database),
+    ),
+);
+
+const emailTarget = makeSqliteEmailTarget<EffectSQLiteNodeDatabase<AnyRelations>>((database) =>
+  sqliteEmailConfiguration(
+    "interactive",
+    sqlClientEmailStandaloneGuard(database),
+    sqlClientProofStandaloneGuard(database),
+  ),
+);
+
+export const {
+  coordinateEmailAddress,
+  coordinateEmailRegistration,
+  makeEmailAddressServices,
+  makeEmailRegistrationServices,
+  makeEmailSignInServices,
+} = emailTarget;
+
+export const {
+  coordinatePasswordPersistence,
+  coordinatePasswordRegistration,
+  makePasswordPersistenceServices,
+  makePasswordRegistrationServices,
+} = passwordTarget;
+
+export const { coordinateProofPersistence, makeProofPersistenceServices } = proofTarget;
+
+export const {
+  coordinateAuthenticationAuthority,
+  coordinatePendingAuthentication,
+  coordinateSignedSessionValidity,
+  coordinateStatefulSessions,
+  makeAuthenticationAuthorityServices,
+  makePendingAuthenticationServices,
+  makeSessionStepUpServices,
+  coordinateSessionStepUp,
+  makeSignedSessionValidityServices,
+  makeStatefulSessionServices,
+} = sessionTarget;
+
+export const commitMode = "interactive" as const;
+
+export const makeAuthStoreServices = <C extends AnySQLiteTable, R extends AnySQLiteTable>(
+  database: EffectSQLiteNodeDatabase<AnyRelations>,
+  mapping: AuthStoreTables<C, R>,
+) => makeSqliteAuthStoreServices(database, mapping);
+
+export const makeOAuthStateServices = <S extends AnySQLiteTable>(
+  database: EffectSQLiteNodeDatabase<AnyRelations>,
+  mapping: OAuthStateTables<S>,
+) => makeSqliteOAuthStateServices(database, mapping);
+
+export const makeAuthServices = <
+  C extends AnySQLiteTable,
+  R extends AnySQLiteTable,
+  S extends AnySQLiteTable,
+>(
+  database: EffectSQLiteNodeDatabase<AnyRelations>,
+  mapping: AuthTables<C, R, S>,
+) => makeSqliteAuthServices(database, mapping);
+
+export const makeIdentityServices = <
+  Subject extends AnySQLiteTable,
+  Identifier extends AnySQLiteTable,
+  External extends AnySQLiteTable,
+  Request extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteNodeDatabase<AnyRelations>,
+  mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>,
+) => makeSqliteIdentityServices(database, mapping, "interactive");
+
+export const makeSubjectProvisioningServices = <
+  Subject extends AnySQLiteTable,
+  Identifier extends AnySQLiteTable,
+  Request extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteNodeDatabase<AnyRelations>,
+  mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>,
+) => makeSqliteSubjectProvisioningServices(database, mapping, "interactive");
+
+export const makeExternalIdentityServices = <
+  Subject extends AnySQLiteTable,
+  External extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteNodeDatabase<AnyRelations>,
+  mapping: ExternalIdentityTables<Subject, External, NativeId>,
+) => makeSqliteExternalIdentityServices(database, mapping);
+
+import { makeSqlitePasswordPreparedTarget } from "./drizzle/sqlite-password-prepared";
+
+const passwordPreparedTarget = makeSqlitePasswordPreparedTarget<
+  EffectSQLiteNodeDatabase<AnyRelations>
+>((database) =>
+  sqlitePasswordConfiguration(
+    "interactive",
+    sqlClientPasswordStandaloneGuard(database),
+    sqlClientProofStandaloneGuard(database),
+  ),
+);
+
+export const { makePasswordPreparedPersistenceServices, coordinatePasswordPreparedPersistence } =
+  passwordPreparedTarget;
+
+export { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target";
+
+import { makeOAuthTarget } from "./drizzle/oauth-drivers";
+import { sqlClientOAuthStandaloneGuard } from "./drizzle/oauth-target";
+
+const oauthTarget = makeOAuthTarget<
+  EffectSQLiteNodeDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientOAuthStandaloneGuard,
+});
+
+export const {
+  makeOAuthAccountsServices,
+  makeOAuthSignInServices,
+  makeOAuthRegistrationIntentServices,
+  makeOAuthRegistrationServices,
+  coordinateOAuthRegistration,
+  coordinateOAuthSignIn,
+  coordinateOAuthRegistrationIntents,
+  coordinateOAuthAccounts,
+  makeOAuthConnectedServices,
+  makeOAuthConnectedRevocationServices,
+  coordinateOAuthConnected,
+  coordinateOAuthConnectedRevocations,
+} = oauthTarget;
+
+import { makePasskeyTarget } from "./drizzle/passkey-drivers";
+import { sqlClientPasskeyStandaloneGuard } from "./drizzle/passkey-target";
+
+const passkeyTarget = makePasskeyTarget<
+  EffectSQLiteNodeDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientPasskeyStandaloneGuard,
+});
+
+export const {
+  makePasskeyCredentialServices,
+  makePasskeyPersistenceServices,
+  makePasskeyEnrollmentContextServices,
+  makePasskeyRegistrationCeremonyServices,
+  coordinatePasskeyPersistence,
+  coordinatePasskeyRegistrationCeremony,
+  makePasskeyManagementServices,
+  makePasskeyRegistrationServices,
+  coordinatePasskeyManagement,
+  coordinatePasskeyRegistration,
+} = passkeyTarget;
+
+import { makeTotpTarget, sqlClientTotpStandaloneGuard } from "./drizzle/totp-target";
+
+const totpTarget = makeTotpTarget<
+  EffectSQLiteNodeDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientTotpStandaloneGuard,
+});
+
+export const { makeTotpPersistenceServices, coordinateTotpPersistence } = totpTarget;
+
+import { makePhoneTarget, sqlClientPhoneStandaloneGuard } from "./drizzle/phone-target";
+
+const phoneTarget = makePhoneTarget<
+  EffectSQLiteNodeDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientPhoneStandaloneGuard,
+});
+
+export const { makePhonePersistenceServices, coordinatePhonePersistence } = phoneTarget;
+
+import { drizzleMigrationsLayer } from "./internal/drizzle-migrations";
+import { sqlitePersistence } from "./internal/drizzle-sqlite";
+
+export const AuthPersistence = {
+  ...sqlitePersistence(makeWithDefaults({})),
+  migrationsLayer: drizzleMigrationsLayer(
+    makeWithDefaults({}),
+    Effect.promise(() => import("drizzle-orm/effect-sqlite-node/migrator")).pipe(
+      Effect.map((module) => module.migrate),
+    ),
+  ),
+};

package/src/DrizzleSqliteWasm.ts

@@ -0,0 +1,263 @@
+import type { AnyRelations } from "drizzle-orm";
+import { type EffectSQLiteWasmDatabase, makeWithDefaults } from "drizzle-orm/effect-sqlite-wasm";
+import type { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+import { Effect } from "effect";
+
+import type {
+  AuthStoreTables,
+  AuthTables,
+  ExternalIdentityTables,
+  IdentityTables,
+  OAuthStateTables,
+  SubjectProvisioningTables,
+} from "./drizzle/model";
+import {
+  coordinateSqliteAuthStoreTransaction,
+  coordinateSqliteAuthTransaction,
+  coordinateSqliteOAuthStateTransaction,
+  makeSqliteAuthServices,
+  makeSqliteAuthStoreServices,
+  makeSqliteOAuthStateServices,
+} from "./drizzle/sqlite";
+
+export {
+  coordinateSqliteAuthStoreTransaction as coordinateAuthStoreTransaction,
+  coordinateSqliteAuthTransaction as coordinateAuthTransaction,
+  coordinateSqliteOAuthStateTransaction as coordinateOAuthStateTransaction,
+};
+
+import { sqlClientEmailStandaloneGuard } from "./drizzle/email-target";
+import { sqlClientPasswordStandaloneGuard } from "./drizzle/password-target";
+import { sqlClientProofStandaloneGuard } from "./drizzle/proof-target";
+import { sqlClientSessionStandaloneGuard } from "./drizzle/session-target";
+import { makeSqliteEmailTarget, sqliteEmailConfiguration } from "./drizzle/sqlite-emails";
+import {
+  makeSqliteExternalIdentityServices,
+  makeSqliteIdentityServices,
+  makeSqliteSubjectProvisioningServices,
+} from "./drizzle/sqlite-identity";
+import { makeSqlitePasswordTarget, sqlitePasswordConfiguration } from "./drizzle/sqlite-passwords";
+import { makeSqliteProofTarget, sqliteProofConfiguration } from "./drizzle/sqlite-proofs";
+import { makeSqliteSessionTarget, sqliteSessionConfiguration } from "./drizzle/sqlite-sessions";
+
+const sessionTarget = makeSqliteSessionTarget<EffectSQLiteWasmDatabase<AnyRelations>>((database) =>
+  sqliteSessionConfiguration("interactive", sqlClientSessionStandaloneGuard(database)),
+);
+
+const proofTarget = makeSqliteProofTarget<EffectSQLiteWasmDatabase<AnyRelations>>((database) =>
+  sqliteProofConfiguration("interactive", sqlClientProofStandaloneGuard(database)),
+);
+
+const passwordTarget = makeSqlitePasswordTarget<EffectSQLiteWasmDatabase<AnyRelations>>(
+  (database) =>
+    sqlitePasswordConfiguration(
+      "interactive",
+      sqlClientPasswordStandaloneGuard(database),
+      sqlClientProofStandaloneGuard(database),
+    ),
+);
+
+const emailTarget = makeSqliteEmailTarget<EffectSQLiteWasmDatabase<AnyRelations>>((database) =>
+  sqliteEmailConfiguration(
+    "interactive",
+    sqlClientEmailStandaloneGuard(database),
+    sqlClientProofStandaloneGuard(database),
+  ),
+);
+
+export const {
+  coordinateEmailAddress,
+  coordinateEmailRegistration,
+  makeEmailAddressServices,
+  makeEmailRegistrationServices,
+  makeEmailSignInServices,
+} = emailTarget;
+
+export const {
+  coordinatePasswordPersistence,
+  coordinatePasswordRegistration,
+  makePasswordPersistenceServices,
+  makePasswordRegistrationServices,
+} = passwordTarget;
+
+export const { coordinateProofPersistence, makeProofPersistenceServices } = proofTarget;
+
+export const {
+  coordinateAuthenticationAuthority,
+  coordinatePendingAuthentication,
+  coordinateSignedSessionValidity,
+  coordinateStatefulSessions,
+  makeAuthenticationAuthorityServices,
+  makePendingAuthenticationServices,
+  makeSessionStepUpServices,
+  coordinateSessionStepUp,
+  makeSignedSessionValidityServices,
+  makeStatefulSessionServices,
+} = sessionTarget;
+
+export const commitMode = "interactive" as const;
+
+export const makeAuthStoreServices = <C extends AnySQLiteTable, R extends AnySQLiteTable>(
+  database: EffectSQLiteWasmDatabase<AnyRelations>,
+  mapping: AuthStoreTables<C, R>,
+) => makeSqliteAuthStoreServices(database, mapping);
+
+export const makeOAuthStateServices = <S extends AnySQLiteTable>(
+  database: EffectSQLiteWasmDatabase<AnyRelations>,
+  mapping: OAuthStateTables<S>,
+) => makeSqliteOAuthStateServices(database, mapping);
+
+export const makeAuthServices = <
+  C extends AnySQLiteTable,
+  R extends AnySQLiteTable,
+  S extends AnySQLiteTable,
+>(
+  database: EffectSQLiteWasmDatabase<AnyRelations>,
+  mapping: AuthTables<C, R, S>,
+) => makeSqliteAuthServices(database, mapping);
+
+export const makeIdentityServices = <
+  Subject extends AnySQLiteTable,
+  Identifier extends AnySQLiteTable,
+  External extends AnySQLiteTable,
+  Request extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteWasmDatabase<AnyRelations>,
+  mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>,
+) => makeSqliteIdentityServices(database, mapping, "interactive");
+
+export const makeSubjectProvisioningServices = <
+  Subject extends AnySQLiteTable,
+  Identifier extends AnySQLiteTable,
+  Request extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteWasmDatabase<AnyRelations>,
+  mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>,
+) => makeSqliteSubjectProvisioningServices(database, mapping, "interactive");
+
+export const makeExternalIdentityServices = <
+  Subject extends AnySQLiteTable,
+  External extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteWasmDatabase<AnyRelations>,
+  mapping: ExternalIdentityTables<Subject, External, NativeId>,
+) => makeSqliteExternalIdentityServices(database, mapping);
+
+import { makeSqlitePasswordPreparedTarget } from "./drizzle/sqlite-password-prepared";
+
+const passwordPreparedTarget = makeSqlitePasswordPreparedTarget<
+  EffectSQLiteWasmDatabase<AnyRelations>
+>((database) =>
+  sqlitePasswordConfiguration(
+    "interactive",
+    sqlClientPasswordStandaloneGuard(database),
+    sqlClientProofStandaloneGuard(database),
+  ),
+);
+
+export const { makePasswordPreparedPersistenceServices, coordinatePasswordPreparedPersistence } =
+  passwordPreparedTarget;
+
+export { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target";
+
+import { makeOAuthTarget } from "./drizzle/oauth-drivers";
+import { sqlClientOAuthStandaloneGuard } from "./drizzle/oauth-target";
+
+const oauthTarget = makeOAuthTarget<
+  EffectSQLiteWasmDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientOAuthStandaloneGuard,
+});
+
+export const {
+  makeOAuthAccountsServices,
+  makeOAuthSignInServices,
+  makeOAuthRegistrationIntentServices,
+  makeOAuthRegistrationServices,
+  coordinateOAuthRegistration,
+  coordinateOAuthSignIn,
+  coordinateOAuthRegistrationIntents,
+  coordinateOAuthAccounts,
+  makeOAuthConnectedServices,
+  makeOAuthConnectedRevocationServices,
+  coordinateOAuthConnected,
+  coordinateOAuthConnectedRevocations,
+} = oauthTarget;
+
+import { makePasskeyTarget } from "./drizzle/passkey-drivers";
+import { sqlClientPasskeyStandaloneGuard } from "./drizzle/passkey-target";
+
+const passkeyTarget = makePasskeyTarget<
+  EffectSQLiteWasmDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientPasskeyStandaloneGuard,
+});
+
+export const {
+  makePasskeyCredentialServices,
+  makePasskeyPersistenceServices,
+  makePasskeyEnrollmentContextServices,
+  makePasskeyRegistrationCeremonyServices,
+  coordinatePasskeyPersistence,
+  coordinatePasskeyRegistrationCeremony,
+  makePasskeyManagementServices,
+  makePasskeyRegistrationServices,
+  coordinatePasskeyManagement,
+  coordinatePasskeyRegistration,
+} = passkeyTarget;
+
+import { makeTotpTarget, sqlClientTotpStandaloneGuard } from "./drizzle/totp-target";
+
+const totpTarget = makeTotpTarget<
+  EffectSQLiteWasmDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientTotpStandaloneGuard,
+});
+
+export const { makeTotpPersistenceServices, coordinateTotpPersistence } = totpTarget;
+
+import { makePhoneTarget, sqlClientPhoneStandaloneGuard } from "./drizzle/phone-target";
+
+const phoneTarget = makePhoneTarget<
+  EffectSQLiteWasmDatabase<AnyRelations>,
+  AnySQLiteTable<{ dialect: "sqlite" }>
+>({
+  mode: "interactive",
+  dialect: "sqlite",
+  locking: false,
+  standaloneGuard: sqlClientPhoneStandaloneGuard,
+});
+
+export const { makePhonePersistenceServices, coordinatePhonePersistence } = phoneTarget;
+
+import { drizzleMigrationsLayer } from "./internal/drizzle-migrations";
+import { sqlitePersistence } from "./internal/drizzle-sqlite";
+
+export const AuthPersistence = {
+  ...sqlitePersistence(makeWithDefaults({})),
+  migrationsLayer: (options: {
+    readonly migrations: Record<string, string>;
+    readonly migrationsTable?: string;
+  }) =>
+    drizzleMigrationsLayer(
+      makeWithDefaults({}),
+      Effect.promise(() => import("drizzle-orm/effect-sqlite-wasm/migrator")).pipe(
+        Effect.map((module) => module.migrate),
+      ),
+    )(options),
+};

package/src/drizzle/D1BatchStatements.ts

@@ -0,0 +1,10 @@
+import { Context, type Effect } from "effect";
+import type { Statement } from "effect/unstable/sql/Statement";
+
+/** Appends application statements to the current coordinator's single atomic batch. */
+export class D1BatchStatements extends Context.Service<
+  D1BatchStatements,
+  {
+    readonly append: (statement: Statement<unknown>) => Effect.Effect<void>;
+  }
+>()("effect-auth/D1BatchStatements") {}

package/src/drizzle/PasswordPreparedPostconditions.ts

@@ -0,0 +1,30 @@
+import type { PreparedCommit } from "@yielded/auth/Hooks";
+import type { PasswordUnavailable } from "@yielded/auth/Password";
+import type { ProofUnavailable } from "@yielded/auth/Proofs";
+import { Context, type Effect } from "effect";
+
+import type { PasswordSqlDatabase } from "./password-sql";
+
+/** Final reads resolve the current physical owner, never a released savepoint. */
+export class CurrentPasswordPreparedTransaction extends Context.Service<
+  CurrentPasswordPreparedTransaction,
+  PasswordSqlDatabase
+>()("effect-auth/drizzle/CurrentPasswordPreparedTransaction") {}
+
+export type PasswordPreparedPostcondition = Effect.Effect<
+  void,
+  PasswordUnavailable | ProofUnavailable,
+  CurrentPasswordPreparedTransaction
+>;
+
+/** Registration ends when the application owner returns, before final validation. */
+export class PasswordPreparedPostconditions extends Context.Service<
+  PasswordPreparedPostconditions,
+  { readonly register: (check: PasswordPreparedPostcondition) => boolean }
+>()("effect-auth/drizzle/PasswordPreparedPostconditions") {}
+
+/** Journal registration closes with the prepared-password owner callback. */
+export class PasswordPreparedJournalGuards extends Context.Service<
+  PasswordPreparedJournalGuards,
+  { readonly register: (guard: PreparedCommit<void>) => boolean }
+>()("effect-auth/drizzle/PasswordPreparedJournalGuards") {}

package/src/drizzle/SuppliedService.ts

@@ -0,0 +1,10 @@
+import type { Context } from "effect";
+
+/** The strict function property also checks class-style keys: the adapter's
+ * constructed value must satisfy the selected service, including native relations. */
+export type SuppliedService<Id, Constructed, Selected = Constructed> = Context.Service<
+  Id,
+  Selected
+> & {
+  readonly of: (value: Constructed) => Selected;
+};