@yielded/auth 0.1.0-beta.1

package/dist/drizzle/d1-oauth.d.mts

@@ -0,0 +1,316 @@
+import { SubjectId, TokenDigest } from "../Schema.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { PreparedCommit } from "../hooks/commit.mjs";
+import { RequestBindingFlowId } from "../operations/requestBindingModels.mjs";
+import "../Operations.mjs";
+import { SessionInvalidationWindow } from "../sessions/invalidation.mjs";
+import "../Hooks.mjs";
+import "../Sessions.mjs";
+import { OAuthProviderKey } from "../oauth/schema.mjs";
+import { OAuthRegistrationIntent } from "../oauth/registrationModels.mjs";
+import { OAuthUnavailable } from "../oauth/signInErrors.mjs";
+import { OAuthClaim, OAuthClaimDecision, OAuthCleanupInput, OAuthCredentialSnapshot, OAuthIssueDecision, OAuthPendingFlow, OAuthSettlementDecision, OAuthVerifiedExternalIdentity } from "../oauth/signInModels.mjs";
+import { OAuthSignInPersistence, PrepareOAuthCommit } from "../oauth/OAuthSignInPersistence.mjs";
+import { OAuthAccountRevision, OAuthActionAuthorization, OAuthLinkAccess, OAuthLinkClaim, OAuthLinkOutcome, OAuthLinkPendingFlow } from "../oauth/accountsModels.mjs";
+import { OAuthAccountsMapping, OAuthD1Mapping, OAuthRegistrationAuthority, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./oauth-model.mjs";
+import { OAuthAccountsPersistence } from "../oauth/OAuthAccountsPersistence.mjs";
+import { OAuthRegistrationIntents, OAuthRegistrationSettlement } from "../oauth/OAuthRegistrationIntents.mjs";
+import "../OAuth.mjs";
+import { OAuthCoordinatorError } from "./oauth-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+//#region src/drizzle/d1-oauth.d.ts
+type SQLiteTable = AnySQLiteTable<{
+  dialect: "sqlite";
+}>;
+type Database = EffectSQLiteD1Database<AnyRelations> & {
+  readonly $client: D1Client;
+};
+declare const makeD1OAuthAccountsServices: <S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, U extends SQLiteTable, N>(database: Database, mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping) => Effect.Effect<{
+  oauthAccountsPersistence: {
+    readonly capture: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: SubjectId;
+    }) => Effect.Effect<OAuthAccountRevision | undefined, OAuthUnavailable>;
+    readonly issue: <A>(input: {
+      readonly flow: OAuthLinkPendingFlow;
+      readonly authorization: OAuthActionAuthorization;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Issued";
+      readonly flow: {
+        readonly context: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly protocol: "oauth" | "oidc";
+          readonly configurationGeneration: number;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly responseIssuerMode: "required" | "unsupported";
+          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly generation: number;
+          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingExpiresAtMillis: number;
+          readonly issuedAtMillis: number;
+          readonly expiresAtMillis: number;
+          readonly claimLifetimeMillis: number;
+          readonly namespace: "effect-auth/oauth-link-context/v1";
+          readonly revision: {
+            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly credentials: readonly {
+              readonly credentialId: string;
+              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            }[];
+          };
+          readonly maximumEvidenceAgeMillis: number;
+        };
+        readonly sealed: {
+          readonly format: "oauth-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+        readonly retentionUntilMillis: number;
+      };
+    }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly preflight: (input: OAuthLinkAccess) => Effect.Effect<OAuthLinkPendingFlow | undefined, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly access: OAuthLinkAccess;
+      readonly flow: OAuthLinkPendingFlow;
+      readonly claimId: OAuthLinkClaim["claimId"];
+      readonly authorization: OAuthActionAuthorization;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Claimed";
+      readonly claim: {
+        readonly flow: {
+          readonly context: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+            readonly generation: number;
+            readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+            readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+            readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingExpiresAtMillis: number;
+            readonly issuedAtMillis: number;
+            readonly expiresAtMillis: number;
+            readonly claimLifetimeMillis: number;
+            readonly namespace: "effect-auth/oauth-link-context/v1";
+            readonly revision: {
+              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+              readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly credentials: readonly {
+                readonly credentialId: string;
+                readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              }[];
+            };
+            readonly maximumEvidenceAgeMillis: number;
+          };
+          readonly sealed: {
+            readonly format: "oauth-xchacha20poly1305-v1";
+            readonly keyId: string;
+            readonly nonce: string;
+            readonly ciphertext: import("effect/Redacted").Redacted<string>;
+          };
+          readonly retentionUntilMillis: number;
+        };
+        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+        readonly claimedAtMillis: number;
+        readonly claimExpiresAtMillis: number;
+      };
+    }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: OAuthLinkClaim;
+      readonly outcome: OAuthLinkOutcome;
+      readonly authorization: OAuthActionAuthorization;
+      readonly invalidation: SessionInvalidationWindow;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Linked";
+      readonly credential: {
+        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+        readonly identity: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly subject: string;
+        };
+        readonly credentialId: string;
+        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly revision: {
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly credentials: readonly {
+            readonly credentialId: string;
+            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          }[];
+        };
+      };
+      readonly changed: boolean;
+    }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly inspectUnlink: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: SubjectId;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly credentialId: string;
+    }) => Effect.Effect<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Target";
+      readonly credential: {
+        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+        readonly identity: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly subject: string;
+        };
+        readonly credentialId: string;
+        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly revision: {
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly credentials: readonly {
+            readonly credentialId: string;
+            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          }[];
+        };
+      };
+    } | {
+      readonly _tag: "Replay";
+      readonly result: {
+        readonly _tag: "Unlinked";
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+    }, OAuthUnavailable>;
+    readonly unlink: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly credential: OAuthCredentialSnapshot;
+      readonly authorization: OAuthActionAuthorization;
+      readonly invalidation: SessionInvalidationWindow;
+      readonly nowMillis: number;
+      readonly retentionUntilMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Unlinked";
+      readonly result: {
+        readonly _tag: "Unlinked";
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+      readonly replayed: boolean;
+    } | {
+      readonly _tag: "LastSignInMethod";
+    }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare const makeD1OAuthSignInServices: <S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, N>(database: Database, mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping) => Effect.Effect<{
+  oauthSignInPersistence: {
+    readonly issue: <A>(input: OAuthPendingFlow, prepare: PrepareOAuthCommit<OAuthIssueDecision, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly generation: number;
+      readonly flowId: RequestBindingFlowId;
+      readonly provider: OAuthProviderKey;
+      readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+      readonly stateDigest: TokenDigest;
+      readonly requestBindingVerifier: TokenDigest;
+      readonly requestBindingExpiresAtMillis: number;
+      readonly responseIssuer?: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<OAuthClaimDecision, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: OAuthClaim;
+      readonly outcome: {
+        readonly _tag: "Verified";
+        readonly identity: OAuthVerifiedExternalIdentity;
+      } | {
+        readonly _tag: "Cancelled" | "Rejected" | "Ambiguous";
+      };
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<OAuthSettlementDecision, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare const makeD1OAuthRegistrationIntentServices: <S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, N>(database: Database, mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping) => Effect.Effect<{
+  oauthRegistrationIntents: {
+    readonly settle: <A>(input: {
+      readonly claim: OAuthClaim;
+      readonly identity: OAuthVerifiedExternalIdentity;
+      readonly intent?: OAuthRegistrationIntent;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<OAuthRegistrationSettlement, A>) => Effect.Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare const makeD1OAuthRegistrationServices: <Registration, S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, R extends SQLiteTable, N>(database: Database, mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, T, I, R, N> & OAuthD1Mapping) => Effect.Effect<{
+  registrationAuthority: OAuthRegistrationAuthority<Registration>;
+}, never, LifecycleHooks>;
+declare function coordinateD1OAuthSignIn<S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, OAuthSignInPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateD1OAuthRegistrationIntents<S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, OAuthRegistrationIntents | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateD1OAuthAccounts<S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, F extends SQLiteTable, T extends SQLiteTable, U extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, OAuthAccountsPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateD1OAuthRegistration<TargetId, Registration, S extends SQLiteTable, O extends SQLiteTable, C extends SQLiteTable, AC extends SQLiteTable, T extends SQLiteTable, I extends SQLiteTable, Rq extends SQLiteTable, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, T, I, Rq, N> & OAuthD1Mapping;
+  readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, OAuthCoordinatorError<E> | DatabaseError, Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinateD1OAuthAccounts, coordinateD1OAuthRegistration, coordinateD1OAuthRegistrationIntents, coordinateD1OAuthSignIn, makeD1OAuthAccountsServices, makeD1OAuthRegistrationIntentServices, makeD1OAuthRegistrationServices, makeD1OAuthSignInServices };
+//# sourceMappingURL=d1-oauth.d.mts.map

package/dist/drizzle/d1-oauth.mjs

@@ -0,0 +1,79 @@
+import { OAuthAccountsPersistence } from "../oauth/OAuthAccountsPersistence.mjs";
+import { OAuthRegistrationIntents } from "../oauth/OAuthRegistrationIntents.mjs";
+import { OAuthSignInPersistence } from "../oauth/OAuthSignInPersistence.mjs";
+import { OAuthUnavailable } from "../oauth/signInErrors.mjs";
+import { coordinateTargetOAuthAccounts, coordinateTargetOAuthRegistration, coordinateTargetOAuthRegistrationIntents, coordinateTargetOAuthSignIn, makeTargetOAuthAccountsServices, makeTargetOAuthRegistrationIntentServices, makeTargetOAuthRegistrationServices, makeTargetOAuthSignInServices } from "./oauth-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { makeD1Owner } from "./d1-planning.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/d1-oauth.ts
+const unavailable = () => OAuthUnavailable.make({});
+const configuration = {
+	mode: "batch",
+	dialect: "sqlite",
+	locking: false,
+	standaloneGuard: () => Effect.void
+};
+const makeD1OAuthAccountsServices = (database, mapping) => makeTargetOAuthAccountsServices(database, mapping, configuration);
+const makeD1OAuthSignInServices = (database, mapping) => makeTargetOAuthSignInServices(database, mapping, configuration);
+const makeD1OAuthRegistrationIntentServices = (database, mapping) => makeTargetOAuthRegistrationIntentServices(database, mapping, configuration);
+const makeD1OAuthRegistrationServices = (database, mapping) => makeTargetOAuthRegistrationServices(database, mapping, configuration);
+function coordinateD1OAuthSignIn(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthSignIn(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.oauthSignInPersistence;
+		const provided = Context.make(OAuthSignInPersistence, {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinateD1OAuthRegistrationIntents(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthRegistrationIntents(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.oauthRegistrationIntents;
+		const provided = Context.make(OAuthRegistrationIntents, { settle: (input, prepare) => owner.run(original.settle(input, prepare)) }).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinateD1OAuthAccounts(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthAccounts(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.oauthAccountsPersistence;
+		const provided = Context.make(OAuthAccountsPersistence, {
+			capture: (input) => owner.run(original.capture(input)),
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			preflight: (input) => owner.run(original.preflight(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			inspectUnlink: (input) => owner.run(original.inspectUnlink(input)),
+			unlink: (input, prepare) => owner.run(original.unlink(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinateD1OAuthRegistration(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetOAuthRegistration(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const original = services.registrationAuthority;
+		const provided = Context.make(options.target, {
+			read: (input) => owner.run(original.read(input)),
+			inspect: (input) => owner.run(original.inspect(input)),
+			register: (input, prepare) => owner.run(original.register(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+//#endregion
+export { coordinateD1OAuthAccounts, coordinateD1OAuthRegistration, coordinateD1OAuthRegistrationIntents, coordinateD1OAuthSignIn, makeD1OAuthAccountsServices, makeD1OAuthRegistrationIntentServices, makeD1OAuthRegistrationServices, makeD1OAuthSignInServices };
+
+//# sourceMappingURL=d1-oauth.mjs.map

package/dist/drizzle/d1-oauth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-oauth.mjs","names":[],"sources":["../../src/drizzle/d1-oauth.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Effect, Context } from \"effect\";\n\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport { OAuthAccountsPersistence } from \"../oauth/OAuthAccountsPersistence\";\nimport { OAuthRegistrationIntents } from \"../oauth/OAuthRegistrationIntents\";\nimport { OAuthSignInPersistence } from \"../oauth/OAuthSignInPersistence\";\nimport { OAuthUnavailable } from \"../oauth/signInErrors\";\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport type {\n  OAuthAccountsMapping,\n  OAuthD1Mapping,\n  OAuthRegistrationAuthority,\n  OAuthRegistrationIntentMapping,\n  OAuthRegistrationMapping,\n  OAuthSignInMapping,\n} from \"./oauth-model\";\nimport {\n  type OAuthCoordinatorError,\n  coordinateTargetOAuthAccounts,\n  coordinateTargetOAuthSignIn,\n  coordinateTargetOAuthRegistrationIntents,\n  coordinateTargetOAuthRegistration,\n  makeTargetOAuthRegistrationIntentServices,\n  makeTargetOAuthRegistrationServices,\n  makeTargetOAuthSignInServices,\n  makeTargetOAuthAccountsServices,\n} from \"./oauth-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype SQLiteTable = AnySQLiteTable<{ dialect: \"sqlite\" }>;\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\nconst unavailable = () => OAuthUnavailable.make({});\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\nexport const makeD1OAuthAccountsServices = <\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  U extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping,\n) => makeTargetOAuthAccountsServices(database, mapping, configuration);\n\nexport const makeD1OAuthSignInServices = <\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping,\n) => makeTargetOAuthSignInServices(database, mapping, configuration);\n\nexport const makeD1OAuthRegistrationIntentServices = <\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping,\n) => makeTargetOAuthRegistrationIntentServices(database, mapping, configuration);\n\nexport const makeD1OAuthRegistrationServices = <\n  Registration,\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  R extends SQLiteTable,\n  N,\n>(\n  database: Database,\n  mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, T, I, R, N> & OAuthD1Mapping,\n) => makeTargetOAuthRegistrationServices<Registration>(database, mapping, configuration);\n\nexport function coordinateD1OAuthSignIn<\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N> & OAuthD1Mapping },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, OAuthSignInPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthSignIn<\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, OAuthSignInPersistence | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.oauthSignInPersistence;\n\n        const service: OAuthSignInPersistence[\"Service\"] = {\n          issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n          claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(OAuthSignInPersistence, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinateD1OAuthRegistrationIntents<\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, T, I, N> & OAuthD1Mapping;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, OAuthRegistrationIntents | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthRegistrationIntents<\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, OAuthRegistrationIntents | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.oauthRegistrationIntents;\n\n        const service: OAuthRegistrationIntents[\"Service\"] = {\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n        };\n\n        const provided = Context.make(OAuthRegistrationIntents, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinateD1OAuthAccounts<\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  F extends SQLiteTable,\n  T extends SQLiteTable,\n  U extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, T, U, N> & OAuthD1Mapping },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, OAuthAccountsPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthAccounts<\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, OAuthAccountsPersistence | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.oauthAccountsPersistence;\n\n        const service: OAuthAccountsPersistence[\"Service\"] = {\n          capture: (input) => owner.run(original.capture(input)),\n          issue: (input, prepare) => owner.run(original.issue(input, prepare)),\n          preflight: (input) => owner.run(original.preflight(input)),\n          claim: (input, prepare) => owner.run(original.claim(input, prepare)),\n          settle: (input, prepare) => owner.run(original.settle(input, prepare)),\n          inspectUnlink: (input) => owner.run(original.inspectUnlink(input)),\n          unlink: (input, prepare) => owner.run(original.unlink(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(OAuthAccountsPersistence, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n\nexport function coordinateD1OAuthRegistration<\n  TargetId,\n  Registration,\n  S extends SQLiteTable,\n  O extends SQLiteTable,\n  C extends SQLiteTable,\n  AC extends SQLiteTable,\n  T extends SQLiteTable,\n  I extends SQLiteTable,\n  Rq extends SQLiteTable,\n  N,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, T, I, Rq, N> &\n      OAuthD1Mapping;\n    readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  OAuthCoordinatorError<E> | DatabaseError,\n  Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetOAuthRegistration<\n      Registration,\n      never,\n      A,\n      E | OAuthUnavailable,\n      Exclude<R, TargetId | D1BatchStatements>\n    >(database, options.mapping, configuration, (_transaction, services, append) =>\n      Effect.gen(function* () {\n        const nativeCollector = D1BatchStatements.of({\n          append: (statement) => Effect.sync(() => append(statement)),\n        });\n\n        const owner = yield* makeD1Owner(unavailable()).pipe(\n          Effect.provideService(D1BatchStatements, nativeCollector),\n        );\n\n        const original = services.registrationAuthority;\n\n        const service: OAuthRegistrationAuthority<Registration> = {\n          read: (input) => owner.run(original.read(input)),\n          inspect: (input) => owner.run(original.inspect(input)),\n          register: (input, prepare) => owner.run(original.register(input, prepare)),\n          cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare)),\n        };\n\n        const provided = Context.make(options.target, service).pipe(\n          Context.add(D1BatchStatements, owner.collector),\n        );\n\n        return yield* owner.close(Effect.provideContext(body, provided));\n      }),\n    ),\n  );\n}\n"],"mappings":";;;;;;;;;AAmCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAEA,MAAa,+BAUX,UACA,YACG,gCAAgC,UAAU,SAAS,aAAa;AAErE,MAAa,6BAQX,UACA,YACG,8BAA8B,UAAU,SAAS,aAAa;AAEnE,MAAa,yCAUX,UACA,YACG,0CAA0C,UAAU,SAAS,aAAa;AAE/E,MAAa,mCAWX,UACA,YACG,oCAAkD,UAAU,SAAS,aAAa;AAEvF,SAAgB,wBAad,SACA,SACA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4BAKE,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAS1B,MAAM,WAAW,QAAQ,KAAK,wBAAwB;GANpD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGb,CAAC,CAAC,CAAC,KAC7D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,qCAed,SACA,SAGA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yCAKE,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAM1B,MAAM,WAAW,QAAQ,KAAK,0BAA0B,EAHtD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC,EAGT,CAAC,CAAC,CAAC,KAC/D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,0BAed,SACA,SACA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,8BAKE,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAa1B,MAAM,WAAW,QAAQ,KAAK,0BAA0B;GAVtD,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,YAAY,UAAU,MAAM,IAAI,SAAS,UAAU,KAAK,CAAC;GACzD,QAAQ,OAAO,YAAY,MAAM,IAAI,SAAS,MAAM,OAAO,OAAO,CAAC;GACnE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,gBAAgB,UAAU,MAAM,IAAI,SAAS,cAAc,KAAK,CAAC;GACjE,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;GACrE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGX,CAAC,CAAC,CAAC,KAC/D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF;AAEA,SAAgB,8BAiBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCAME,UAAU,QAAQ,SAAS,gBAAgB,cAAc,UAAU,WACnE,OAAO,IAAI,aAAa;EACtB,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;EAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,MAAM,WAAW,SAAS;EAS1B,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ;GAN5C,OAAO,UAAU,MAAM,IAAI,SAAS,KAAK,KAAK,CAAC;GAC/C,UAAU,UAAU,MAAM,IAAI,SAAS,QAAQ,KAAK,CAAC;GACrD,WAAW,OAAO,YAAY,MAAM,IAAI,SAAS,SAAS,OAAO,OAAO,CAAC;GACzE,UAAU,OAAO,YAAY,MAAM,IAAI,SAAS,QAAQ,OAAO,OAAO,CAAC;EAGrB,CAAC,CAAC,CAAC,KACrD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;EAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;CACjE,CAAC,CACH,CACF;AACF"}

package/dist/drizzle/d1-passkey.d.mts

@@ -0,0 +1,52 @@
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { DrizzleMappingError } from "./model.mjs";
+import { PasskeyConfigurationError } from "../passkey/errors.mjs";
+import { PasskeyPersistence } from "../passkey/PasskeyPersistence.mjs";
+import { D1PasskeyMapping, PasskeyCredentialMapping, PasskeyCredentialServices, PasskeyEnrollmentContextMapping, PasskeyEnrollmentContextServices, PasskeyMappingSource, PasskeyPersistenceMapping, PasskeyPersistenceServices } from "./passkey-model.mjs";
+import { PasskeyRegistrationCeremonyMapping, PasskeyRegistrationCeremonyServices } from "./passkey-registration-ceremony-model.mjs";
+import { PasskeyManagementPersistence } from "../passkey/PasskeyManagementPersistence.mjs";
+import { PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter } from "./passkey-write-model.mjs";
+import { PasskeyCoordinatorError } from "./passkey-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import "../Passkey.mjs";
+import { Context, Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+//#region src/drizzle/d1-passkey.d.ts
+type Table$1 = AnySQLiteTable<{
+  dialect: "sqlite";
+}>;
+type Database = EffectSQLiteD1Database<AnyRelations> & {
+  readonly $client: D1Client;
+};
+declare const makePasskeyCredentialServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyCredentialServices, DrizzleMappingError | PasskeyConfigurationError, RSetup>, makePasskeyEnrollmentContextServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyEnrollmentContextServices, DrizzleMappingError | PasskeyConfigurationError, RSetup>, makePasskeyPersistenceServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyPersistenceServices, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, makePasskeyRegistrationCeremonyServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, H extends Table$1, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyRegistrationCeremonyServices, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, makePasskeyManagementServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Command extends Table$1, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyManagementServices, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, makePasskeyRegistrationServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, N, Value, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value> & D1PasskeyMapping, RSetup>) => Effect.Effect<PasskeyRegistrationServices<Value>, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>;
+declare function coordinatePasskeyPersistence<D extends Database, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N> & D1PasskeyMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+declare function coordinatePasskeyRegistrationCeremony<D extends Database, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, H extends Table$1, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H> & D1PasskeyMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+declare function coordinatePasskeyManagement<D extends Database, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Command extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N> & D1PasskeyMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | PasskeyManagementPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+declare function coordinatePasskeyRegistration<D extends Database, S extends Table$1, C extends Table$1, F extends Table$1, O extends Table$1, H extends Table$1, M extends Table$1, Flow extends Table$1, Admission extends Table$1, Charge extends Table$1, Intent extends Table$1, N, Value, AuthorityId, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value> & D1PasskeyMapping, RSetup>;
+  readonly authority: Context.Key<AuthorityId, PasskeyRegistrationWriter<Value>>;
+}, body: Effect.Effect<A, E, R>): Effect.Effect<A, PasskeyCoordinatorError<E> | DatabaseError, Exclude<R, PasskeyPersistence | AuthorityId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements | RSetup>;
+//#endregion
+export { coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices };
+//# sourceMappingURL=d1-passkey.d.mts.map

package/dist/drizzle/d1-passkey.mjs

@@ -0,0 +1,97 @@
+import { PasskeyPersistence } from "../passkey/PasskeyPersistence.mjs";
+import { PasskeyUnavailable } from "../passkey/errors.mjs";
+import { PasskeyManagementPersistence } from "../passkey/PasskeyManagementPersistence.mjs";
+import { coordinateTargetPasskey, coordinateTargetPasskeyRegistration } from "./passkey-target.mjs";
+import { coordinateTargetPasskeyManagement, coordinateTargetPasskeyRegistrationWriter } from "./passkey-write-target.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { makeD1Owner } from "./d1-planning.mjs";
+import { makePasskeyTarget } from "./passkey-drivers.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/d1-passkey.ts
+const unavailable = () => PasskeyUnavailable.make({});
+const configuration = {
+	mode: "batch",
+	dialect: "sqlite",
+	locking: false,
+	standaloneGuard: () => Effect.void
+};
+const { makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyManagementServices, makePasskeyRegistrationServices } = makePasskeyTarget(configuration);
+function coordinatePasskeyPersistence(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskey(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const original = services.passkeyPersistence;
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const provided = Context.make(PasskeyPersistence, {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinatePasskeyRegistrationCeremony(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskeyRegistration(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const original = services.passkeyPersistence;
+		const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+		const provided = Context.make(PasskeyPersistence, {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		}).pipe(Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, provided));
+	})));
+}
+function coordinatePasskeyManagement(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskeyManagement(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const collector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, collector));
+		const original = services.passkeyPersistence;
+		const persistence = {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		};
+		const authority = services.passkeyManagementPersistence;
+		const context = Context.make(PasskeyPersistence, persistence).pipe(Context.add(PasskeyManagementPersistence, {
+			list: (input) => owner.run(authority.list(input)),
+			inspectRemove: (input) => owner.run(authority.inspectRemove(input)),
+			issueEnrollment: (input, prepare) => owner.run(authority.issueEnrollment(input, prepare)),
+			completeEnrollment: (input, prepare) => owner.run(authority.completeEnrollment(input, prepare)),
+			rename: (input, prepare) => owner.run(authority.rename(input, prepare)),
+			remove: (input, prepare) => owner.run(authority.remove(input, prepare))
+		}), Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, context));
+	})));
+}
+function coordinatePasskeyRegistration(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasskeyRegistrationWriter(database, options.mapping, configuration, (_, services, append) => Effect.gen(function* () {
+		const collector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+		const owner = yield* makeD1Owner(unavailable()).pipe(Effect.provideService(D1BatchStatements, collector));
+		const original = services.passkeyPersistence;
+		const persistence = {
+			issue: (input, prepare) => owner.run(original.issue(input, prepare)),
+			context: (input) => owner.run(original.context(input)),
+			claim: (input, prepare) => owner.run(original.claim(input, prepare)),
+			settle: (input, prepare) => owner.run(original.settle(input, prepare)),
+			cleanup: (input, prepare) => owner.run(original.cleanup(input, prepare))
+		};
+		const authority = services.passkeyRegistrationAuthority;
+		const context = Context.make(PasskeyPersistence, persistence).pipe(Context.add(options.authority, {
+			inspect: (input) => owner.run(authority.inspect(input)),
+			issueRegistration: (input, prepare) => owner.run(authority.issueRegistration(input, prepare)),
+			completeRegistration: (input, prepare) => owner.run(authority.completeRegistration(input, prepare))
+		}), Context.add(D1BatchStatements, owner.collector));
+		return yield* owner.close(Effect.provideContext(body, context));
+	})));
+}
+//#endregion
+export { coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices };
+
+//# sourceMappingURL=d1-passkey.mjs.map