@yielded/auth 0.1.0-beta.1

package/src/Drizzle.ts

@@ -0,0 +1,378 @@
+export {
+  type AnyEmailAddressMapping,
+  type AnyEmailRegistrationMapping,
+  type AnyEmailSignInMapping,
+  type D1EmailAddressMapping,
+  type D1EmailRegistrationMapping,
+  type EmailAddressMapping,
+  type EmailAuthorityCredentialTable,
+  type EmailCommandTable,
+  type EmailCredentialReadTable,
+  type EmailCredentialTable,
+  type EmailD1Clock,
+  type EmailIdentifierReadTable,
+  type EmailIdentifierTable,
+  type EmailRegistrationAuthorityCredentialTable,
+  type EmailRegistrationCredentialTable,
+  type EmailRegistrationIdentifierTable,
+  type EmailRegistrationIntent,
+  type EmailRegistrationMapping,
+  type EmailRegistrationProvisioning,
+  type EmailRegistrationState,
+  type EmailRegistrationTable,
+  type EmailSignInMapping,
+  type EmailSubjectReadTable,
+  type EmailSubjectTable,
+  type RequiredEmailAddressConstraints,
+  type RequiredEmailRegistrationConstraints,
+  type RequiredEmailSignInConstraints,
+  requiredEmailAddressConstraints,
+  requiredEmailRegistrationConstraints,
+  requiredEmailSignInConstraints,
+} from "./drizzle/email-model";
+
+export {
+  type AnyPasswordPersistenceMapping,
+  type AnyPasswordRegistrationMapping,
+  type D1PasswordPersistenceMapping,
+  type PasswordAttemptAction,
+  type PasswordAttemptRecord,
+  type PasswordAttemptState,
+  type PasswordAttemptTable,
+  type PasswordAuthorityCredentialTable,
+  type PasswordChargeTable,
+  type PasswordCommandTable,
+  type PasswordConstraintClassifier,
+  type PasswordCredentialTable,
+  type PasswordD1Clock,
+  type PasswordIdentifierTable,
+  type PasswordPersistenceMapping,
+  type PasswordRateScopeKind,
+  type PasswordRateScopeTable,
+  type PasswordRegistrationConstraintClassifier,
+  type PasswordRegistrationIntent,
+  type PasswordRegistrationMapping,
+  type PasswordRegistrationProvisioning,
+  type PasswordRegistrationState,
+  type PasswordRegistrationTable,
+  type PasswordScopeKeys,
+  type PasswordSubjectTable,
+  type RequiredPasswordConstraints,
+  type RequiredPasswordRegistrationConstraints,
+  requiredPasswordConstraints,
+  requiredPasswordRegistrationConstraints,
+} from "./drizzle/password-model";
+
+export {
+  type AnyPasswordPreparedPersistenceMapping,
+  type D1PasswordPreparedPersistenceMapping,
+  type D1PasswordPreparedProofMapping,
+  type PasswordPreparedAdmissionTable,
+  type PasswordPreparedIntentTable,
+  type PasswordPreparedPersistenceMapping,
+  type PasswordPreparedProofMapping,
+  type PasswordPreparedState,
+  type RequiredPasswordPreparedConstraints,
+  requiredPasswordPreparedConstraints,
+} from "./drizzle/password-prepared-model";
+
+export {
+  type AnyProofPersistenceMapping,
+  type D1ProofPersistenceMapping,
+  type ProofAbuseEventTable,
+  type ProofAction,
+  type ProofAuthorityInput,
+  type ProofAuthorityTables,
+  type ProofCommandDecision,
+  type ProofCommandKind,
+  type ProofCommandTable,
+  type ProofConstraintClassifier,
+  type ProofContinuationRecord,
+  type ProofContinuationTable,
+  type ProofD1Clock,
+  type ProofDeliveryState,
+  type ProofFailureEventTable,
+  type ProofGenerationState,
+  type ProofGenerationTable,
+  type ProofPersistenceMapping,
+  type ProofRateScopeTable,
+  type ProofRequestTable,
+  type ProofScopeKeys,
+  type ProofScopeKind,
+  type ProofSeriesTable,
+  type RequiredProofConstraints,
+  requiredProofConstraints,
+} from "./drizzle/proof-model";
+
+export {
+  type AuthStoreTables,
+  type AuthTables,
+  type ChallengeColumns,
+  type ChallengeConsumeDecision,
+  type ChallengeInput,
+  type ChallengeRecord,
+  type ChallengeTableMapping,
+  type CommitMode,
+  type ConsumeDecision,
+  type D1ExternalIdentityMapping,
+  type D1GeneratedIdentityMapping,
+  type D1SubjectProvisioningMapping,
+  DrizzleMappingError,
+  type ExternalIdentityTables,
+  type IdentityTables,
+  type InstantCodec,
+  type OAuthStateColumns,
+  type OAuthStateTableMapping,
+  type OAuthStateTables,
+  type RegistrationColumns,
+  type RegistrationRecord,
+  type RegistrationTableMapping,
+  type RequiredAuthConstraints,
+  type RequiredAuthStoreConstraints,
+  type RequiredExternalIdentityConstraints,
+  type RequiredIdentityConstraints,
+  type RequiredOAuthStateConstraints,
+  type RequiredSubjectProvisioningConstraints,
+  type SubjectIdCodec,
+  type SubjectProvisioningTables,
+  authServicesLayer,
+  column,
+  identityServicesLayer,
+  isMappedConstraintConflict,
+  provisioningFingerprint,
+  requireStandaloneConsume,
+  requiredAuthConstraints,
+  requiredAuthStoreConstraints,
+  requiredExternalIdentityConstraints,
+  requiredIdentityConstraints,
+  requiredOAuthStateConstraints,
+  requiredSubjectProvisioningConstraints,
+  updateValues,
+} from "./drizzle/model";
+
+export {
+  type AuthenticationAuthorityMapping,
+  type D1AuthenticationAuthorityMapping,
+  type D1PendingAuthenticationMapping,
+  type D1SessionClockMapping,
+  type D1SignedSessionValidityMapping,
+  type D1StatefulSessionMapping,
+  type PendingAuthenticationMapping,
+  type PendingAuthenticationTables,
+  type RequiredPendingAuthenticationConstraints,
+  type RequiredSessionConstraints,
+  type RequiredSignedValidityConstraints,
+  type RequiredStatefulPendingConstraints,
+  type SessionAuthorityTables,
+  type SessionConstraintClassifier,
+  type SessionFlowTables,
+  type SessionIdCodec,
+  type SessionSubjectTables,
+  type SignedSessionValidityMapping,
+  type SignedSessionValidityTables,
+  type StatefulSessionMapping,
+  type StatefulSessionTables,
+  requiredPendingAuthenticationConstraints,
+  requiredSessionConstraints,
+  requiredSignedValidityConstraints,
+  requiredStatefulPendingConstraints,
+} from "./drizzle/session-model";
+
+export {
+  type D1PasskeyMapping,
+  type PasskeyAdmissionTable,
+  type PasskeyCeremonyMapping,
+  type PasskeyChargeInsert,
+  type PasskeyChargeKind,
+  type PasskeyChargeTable,
+  type PasskeyClock,
+  type PasskeyColumn,
+  type PasskeyCredentialMapping,
+  type PasskeyCredentialOwnershipTable,
+  type PasskeyCredentialReadTable,
+  type PasskeyCredentialServices,
+  type PasskeyEnrollmentContextMapping,
+  type PasskeyEnrollmentContextServices,
+  type PasskeyFactorReadTable,
+  type PasskeyFlowInsert,
+  type PasskeyFlowState,
+  type PasskeyFlowTable,
+  type PasskeyHandleOwnershipTable,
+  type PasskeyHandleReadTable,
+  type PasskeyHandleReservationTable,
+  type PasskeyMappingSource,
+  type PasskeyModuleTable,
+  type PasskeyPersistenceMapping,
+  type PasskeyPersistenceServices,
+  type PasskeyPolicyGuard,
+  type PasskeySubjectIdCodec,
+  type PasskeySubjectReadTable,
+  passkeyCredentialsLayer,
+  passkeyEnrollmentContextLayer,
+  passkeyPersistenceLayer,
+  passkeyPolicyGuard,
+  requiredPasskeyCredentialConstraints,
+  requiredPasskeyPersistenceConstraints,
+} from "./drizzle/passkey-model";
+
+export {
+  type D1SessionStepUpMapping,
+  type RequiredSessionStepUpConstraints,
+  type SessionStepUpIntentTables,
+  type SessionStepUpMapping,
+  type SessionStepUpSourceTables,
+  requiredSessionStepUpConstraints,
+} from "./drizzle/step-up-model";
+
+export {
+  type OAuthAccountsMapping,
+  type OAuthAction,
+  type OAuthAuthorityReadTable,
+  type OAuthAuthorityTable,
+  type OAuthCleanupDescriptor,
+  type OAuthCleanupTable,
+  type OAuthClock,
+  type OAuthCredentialReadTable,
+  type OAuthCredentialTable,
+  type OAuthD1Mapping,
+  type OAuthEligibilityDescriptor,
+  type OAuthEligibilityFact,
+  type OAuthEligibilityTable,
+  type OAuthFlowState,
+  type OAuthFlowTable,
+  type OAuthMetadataPolicy,
+  type OAuthOwnershipMutation,
+  type OAuthOwnershipReadTable,
+  type OAuthOwnershipTable,
+  type OAuthReferenceGuardDescriptor,
+  type OAuthReferenceGuardTable,
+  type OAuthRegistrationAuthority,
+  type OAuthRegistrationBase,
+  type OAuthRegistrationCommandTable,
+  type OAuthRegistrationEligibility,
+  type OAuthRegistrationGuardDescriptor,
+  type OAuthRegistrationGuardTable,
+  type OAuthRegistrationIntentMapping,
+  type OAuthRegistrationIntentTable,
+  type OAuthRegistrationMapping,
+  type OAuthRegistrationState,
+  type OAuthSignInMapping,
+  type OAuthSubjectReadTable,
+  type OAuthSubjectTable,
+  type OAuthTupleAuthorityTable,
+  type OAuthTupleState,
+  type OAuthUnlinkCommandTable,
+  oauthCleanupTable,
+  oauthEligibilityTable,
+  oauthReferenceGuardTable,
+  oauthRegistrationGuardTable,
+  requiredOAuthAccountsConstraints,
+  requiredOAuthRegistrationConstraints,
+  requiredOAuthSignInConstraints,
+  requiredOAuthTupleConstraints,
+} from "./drizzle/oauth-model";
+
+export {
+  type OAuthConnectedAction,
+  type OAuthConnectedAdmissionTable,
+  type OAuthConnectedAuthorityMapping,
+  type OAuthConnectedClientRegistrationTable,
+  type OAuthConnectedCohortTable,
+  type OAuthConnectedCommandTable,
+  type OAuthConnectedFlowTable,
+  type OAuthConnectedGrantTable,
+  type OAuthConnectedMapping,
+  type OAuthConnectedOrderCodec,
+  type OAuthConnectedOwnershipRead,
+  type OAuthConnectedPolicyGuard,
+  type OAuthConnectedPolicyGuardTable,
+  type OAuthConnectedPolicyInput,
+  type OAuthConnectedRevocationJobTable,
+  type OAuthConnectedRevocationMapping,
+  type OAuthConnectedSqlPolicy,
+  type OAuthConnectedSubjectTable,
+  oauthConnectedPolicyGuard,
+  requiredOAuthConnectedConstraints,
+  requiredOAuthConnectedRevocationConstraints,
+} from "./drizzle/oauth-connected-model";
+
+export {
+  type PasskeyRegistrationCeremonyCapabilities,
+  type PasskeyRegistrationCeremonyMapping,
+  type PasskeyRegistrationCeremonyServices,
+  type PasskeyRegistrationIntentReadTable,
+  requiredPasskeyRegistrationCeremonyConstraints,
+} from "./drizzle/passkey-registration-ceremony-model";
+
+export {
+  authenticationAuthorityLayer,
+  pendingAuthenticationLayer,
+  signedSessionValidityLayer,
+  statefulSessionLayers,
+} from "./drizzle/session-target";
+
+export {
+  emailAddressPersistenceLayer,
+  emailRegistrationLayer,
+  emailSignInTargetsLayer,
+} from "./drizzle/email-target";
+
+export {
+  oauthAccountsPersistenceLayer,
+  oauthRegistrationAuthorityLayer,
+  oauthRegistrationIntentsLayer,
+  oauthSignInPersistenceLayer,
+} from "./drizzle/oauth-target";
+
+export { oauthConnectedOwnershipReferences } from "./drizzle/oauth-connected-reference";
+
+export {
+  oauthConnectedPersistenceLayer,
+  oauthConnectedRevocationsLayer,
+} from "./drizzle/oauth-connected-target";
+
+export { passwordPersistenceLayer, passwordRegistrationLayer } from "./drizzle/password-target";
+export { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target";
+export { proofPersistenceLayer } from "./drizzle/proof-target";
+export { AuthStoreDecisions } from "./internal/AuthStoreDecisions";
+
+export {
+  type TotpMapping,
+  type TotpMappingSource,
+  type D1TotpMapping,
+  type TotpPersistenceServices,
+  requiredTotpConstraints,
+  totpPersistenceLayer,
+} from "./drizzle/totp-model";
+
+export { encodeTotpRecord, decodeTotpRecord } from "./drizzle/totp-state";
+export { OAuthStateDecisions } from "./oauth/OAuthStateDecisions";
+
+export {
+  type PasskeyCredentialInsert,
+  type PasskeyWriteTables,
+  type PasskeyInvalidationInput,
+  type PasskeyInvalidationMutation,
+  passkeyInvalidationMutation,
+  type PasskeyCommandTable,
+  type PasskeyManagementMapping,
+  requiredPasskeyManagementConstraints,
+  type PasskeyManagementServices,
+  type PasskeyRegistrationWriter,
+  type PasskeyRegistrationServices,
+  type PasskeyRegistrationMapping,
+  requiredPasskeyRegistrationWriteConstraints,
+} from "./drizzle/passkey-write-model";
+
+export { passkeyManagementPersistenceLayer } from "./drizzle/passkey-write-target";
+
+export {
+  type PhoneMapping,
+  type PhoneMappingSource,
+  type D1PhoneMapping,
+  type PhonePersistenceServices,
+  type PhoneProofCompletionMapping,
+  phoneProofCompletionMapping,
+  requiredPhoneConstraints,
+  phonePersistenceLayer,
+} from "./drizzle/phone-model";

package/src/DrizzleD1.ts

@@ -0,0 +1,136 @@
+import type { D1Client } from "@effect/sql-d1/D1Client";
+export { makeTotpPersistenceServices, coordinateTotpPersistence } from "./drizzle/d1-totp";
+import type { AnyRelations } from "drizzle-orm";
+import type { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+import type { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+
+export {
+  makeD1OAuthAccountsServices as makeOAuthAccountsServices,
+  makeD1OAuthSignInServices as makeOAuthSignInServices,
+  makeD1OAuthRegistrationIntentServices as makeOAuthRegistrationIntentServices,
+  makeD1OAuthRegistrationServices as makeOAuthRegistrationServices,
+  coordinateD1OAuthRegistration as coordinateOAuthRegistration,
+  coordinateD1OAuthSignIn as coordinateOAuthSignIn,
+  coordinateD1OAuthRegistrationIntents as coordinateOAuthRegistrationIntents,
+  coordinateD1OAuthAccounts as coordinateOAuthAccounts,
+} from "./drizzle/d1-oauth";
+
+import {
+  makeD1ExternalIdentityServices,
+  makeD1IdentityServices,
+  makeD1SubjectProvisioningServices,
+} from "./drizzle/d1-identity";
+
+export {
+  coordinateD1AuthenticationAuthority as coordinateAuthenticationAuthority,
+  coordinateD1PendingAuthentication as coordinatePendingAuthentication,
+  coordinateD1SignedSessionValidity as coordinateSignedSessionValidity,
+  coordinateD1StatefulSessions as coordinateStatefulSessions,
+  makeD1AuthenticationAuthorityServices as makeAuthenticationAuthorityServices,
+  makeD1PendingAuthenticationServices as makePendingAuthenticationServices,
+  makeD1SignedSessionValidityServices as makeSignedSessionValidityServices,
+  makeD1StatefulSessionServices as makeStatefulSessionServices,
+} from "./drizzle/d1-sessions";
+
+export {
+  coordinateD1ProofPersistence as coordinateProofPersistence,
+  makeD1ProofPersistenceServices as makeProofPersistenceServices,
+} from "./drizzle/d1-proofs";
+
+export {
+  coordinateD1PasswordPersistence as coordinatePasswordPersistence,
+  coordinateD1PasswordRegistration as coordinatePasswordRegistration,
+  makeD1PasswordPersistenceServices as makePasswordPersistenceServices,
+  makeD1PasswordRegistrationServices as makePasswordRegistrationServices,
+} from "./drizzle/d1-passwords";
+
+export {
+  coordinateD1EmailAddress as coordinateEmailAddress,
+  coordinateD1EmailRegistration as coordinateEmailRegistration,
+  makeD1EmailAddressServices as makeEmailAddressServices,
+  makeD1EmailRegistrationServices as makeEmailRegistrationServices,
+  makeD1EmailSignInServices as makeEmailSignInServices,
+} from "./drizzle/d1-emails";
+
+import { type AuthTables, type D1GeneratedIdentityMapping } from "./drizzle/model";
+import {
+  makeSqliteAuthServices,
+  makeSqliteAuthStoreServices,
+  makeSqliteOAuthStateServices,
+} from "./drizzle/sqlite";
+
+export {
+  makeD1ExternalIdentityServices as makeExternalIdentityServices,
+  makeD1SubjectProvisioningServices as makeSubjectProvisioningServices,
+  makeSqliteAuthStoreServices as makeAuthStoreServices,
+  makeSqliteOAuthStateServices as makeOAuthStateServices,
+};
+
+export const commitMode = "batch" as const;
+
+export const makeAuthServices = <
+  C extends AnySQLiteTable,
+  R extends AnySQLiteTable,
+  S extends AnySQLiteTable,
+>(
+  database: EffectSQLiteD1Database<AnyRelations>,
+  mapping: AuthTables<C, R, S>,
+) => makeSqliteAuthServices(database, mapping);
+
+export const makeIdentityServices = <
+  Subject extends AnySQLiteTable,
+  Identifier extends AnySQLiteTable,
+  External extends AnySQLiteTable,
+  Request extends AnySQLiteTable,
+  NativeId,
+>(
+  database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },
+  mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,
+) => makeD1IdentityServices(database, mapping);
+
+export {
+  makeD1SessionStepUpServices as makeSessionStepUpServices,
+  coordinateD1SessionStepUp as coordinateSessionStepUp,
+} from "./drizzle/d1-sessions";
+
+export {
+  makeD1PasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices,
+  coordinateD1PasswordPreparedPersistence as coordinatePasswordPreparedPersistence,
+} from "./drizzle/d1-password-prepared";
+
+export { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target";
+
+import { Effect } from "effect";
+
+import { makeD1OAuthConnectedTarget } from "./drizzle/oauth-connected-drivers";
+import type { OAuthD1Mapping } from "./drizzle/oauth-model";
+
+const connectedTarget = makeD1OAuthConnectedTarget<
+  EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },
+  AnySQLiteTable<{ dialect: "sqlite" }>,
+  OAuthD1Mapping
+>({ mode: "batch", dialect: "sqlite", locking: false, standaloneGuard: () => Effect.void });
+
+export const {
+  makeOAuthConnectedServices,
+  makeOAuthConnectedRevocationServices,
+  coordinateOAuthConnected,
+  coordinateOAuthConnectedRevocations,
+} = connectedTarget;
+
+export {
+  makePasskeyCredentialServices,
+  makePasskeyPersistenceServices,
+  makePasskeyEnrollmentContextServices,
+  makePasskeyRegistrationCeremonyServices,
+  coordinatePasskeyPersistence,
+  coordinatePasskeyRegistrationCeremony,
+  makePasskeyManagementServices,
+  makePasskeyRegistrationServices,
+  coordinatePasskeyManagement,
+  coordinatePasskeyRegistration,
+} from "./drizzle/d1-passkey";
+
+export { D1BatchStatements } from "./drizzle/D1BatchStatements";
+
+export { makePhonePersistenceServices, coordinatePhonePersistence } from "./drizzle/d1-phone";