@yielded/auth-persistence-drizzle 0.1.0-beta.0 → 0.1.0-beta.12

package/dist/drizzle/d1-totp.d.mts

@@ -1,21 +1,20 @@
 import { D1TotpMapping, TotpMapping, TotpMappingSource, TotpPersistenceServices } from "./totp-model.mjs";
+import { Database as Database$1 } from "./d1-database.mjs";
 import { D1BatchStatements } from "./D1BatchStatements.mjs";
 import { TotpCoordinatorError } from "./totp-target.mjs";
 import { AnyRelations } from "drizzle-orm";
 import { Effect } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
 import { TotpPersistence } from "@yielded/auth/Totp";
+import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
 import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
 import { D1Client } from "@effect/sql-d1/D1Client";
-import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
 //#region src/drizzle/d1-totp.d.ts
 type Database = EffectSQLiteD1Database<AnyRelations> & {
   readonly $client: D1Client;
 };
 type Table$1 = AnySQLiteTable;
-export declare const makeTotpPersistenceServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
-  readonly $client: D1Client;
-}, S extends Table$1, F extends Table$1, C extends Table$1, N, RSetup = never>(database: Database, mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>) => Effect.Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, RSetup | LifecycleHooks>;
+export declare const makeTotpPersistenceServices: <S extends Table$1, F extends Table$1, C extends Table$1, N, RSetup = never>(mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>) => Effect.Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, Database$1 | LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>;
 export declare const coordinateTotpPersistence: <D extends Database, S extends Table$1, F extends Table$1, C extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>;
 }, body: Effect.Effect<A, E, R>) => Effect.Effect<A, TotpCoordinatorError<E> | DatabaseError, Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements>;

package/dist/drizzle/d1-totp.mjs

@@ -1,3 +1,4 @@
+import { Database } from "./d1-database.mjs";
 import { D1BatchStatements } from "./D1BatchStatements.mjs";
 import { makeD1Owner } from "./d1-planning.mjs";
 import { coordinateTargetTotp, makeTotpTarget } from "./totp-target.mjs";
@@ -10,7 +11,7 @@ const configuration = {
 	locking: false,
 	standaloneGuard: () => Effect.void
 };
-const { makeTotpPersistenceServices } = makeTotpTarget(configuration);
+const { makeTotpPersistenceServices } = makeTotpTarget(Database, configuration);
 const coordinateTotpPersistence = (acquire, options, body) => Effect.flatMap(acquire, (database) => coordinateTargetTotp(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
 	const original = services.totpPersistence;
 	const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });

package/dist/drizzle/d1-totp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"d1-totp.mjs","names":[],"sources":["../../src/drizzle/d1-totp.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { TotpUnavailable, TotpPersistence } from \"@yielded/auth/Totp\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Context, Effect } from \"effect\";\n\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport type { D1TotpMapping, TotpMapping, TotpMappingSource } from \"./totp-model\";\nimport { coordinateTargetTotp, makeTotpTarget, type TotpCoordinatorError } from \"./totp-target\";\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype Table = AnySQLiteTable;\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\n/** Reads use a primary D1 session; observations and expiry are asserted in the same batch. */\nconst target = makeTotpTarget<Database, Table, D1TotpMapping>(configuration);\n\nexport const { makeTotpPersistenceServices } = target;\n\nexport const coordinateTotpPersistence = <\n  D extends Database,\n  S extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup> },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  TotpCoordinatorError<E> | DatabaseError,\n  Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements\n> =>\n  Effect.flatMap(acquire, (database) =>\n    coordinateTargetTotp(\n      database,\n      options.mapping,\n      configuration,\n      (_transaction, services, append) =>\n        Effect.gen(function* () {\n          const original = services.totpPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: TotpPersistence[\"Service\"] = {\n            snapshot: (input) => owner.run(original.snapshot(input)),\n            mutate: (input, prepare) => owner.run(original.mutate(input, prepare)),\n          };\n\n          const provided = Context.make(TotpPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n    ),\n  );\n"],"mappings":";;;;;;AAeA,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAKA,MAAa,EAAE,gCAFA,eAA+C,aAEf;AAE/C,MAAa,6BAaX,SACA,SACA,SAMA,OAAO,QAAQ,UAAU,aACvB,qBACE,UACA,QAAQ,SACR,gBACC,cAAc,UAAU,WACvB,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,SAAS;CAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;CAED,MAAM,QAAQ,OAAO,YAAY,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KACzD,OAAO,eAAe,mBAAmB,eAAe,CAC1D;CAOA,MAAM,WAAW,QAAQ,KAAK,iBAAiB;EAJ7C,WAAW,UAAU,MAAM,IAAI,SAAS,SAAS,KAAK,CAAC;EACvD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;CAGlB,CAAC,CAAC,CAAC,KACtD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;CAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;AACjE,CAAC,CACL,CACF"}
+{"version":3,"file":"d1-totp.mjs","names":["DatabaseService"],"sources":["../../src/drizzle/d1-totp.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { TotpUnavailable, TotpPersistence } from \"@yielded/auth/Totp\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Context, Effect } from \"effect\";\n\nimport { Database as DatabaseService } from \"./d1-database\";\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport type { D1TotpMapping, TotpMapping, TotpMappingSource } from \"./totp-model\";\nimport { coordinateTargetTotp, makeTotpTarget, type TotpCoordinatorError } from \"./totp-target\";\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype Table = AnySQLiteTable;\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\n/** Reads use a primary D1 session; observations and expiry are asserted in the same batch. */\nconst target = makeTotpTarget<DatabaseService, Database, Table, D1TotpMapping>(\n  DatabaseService,\n  configuration,\n);\n\nexport const { makeTotpPersistenceServices } = target;\n\nexport const coordinateTotpPersistence = <\n  D extends Database,\n  S extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup> },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  TotpCoordinatorError<E> | DatabaseError,\n  Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements\n> =>\n  Effect.flatMap(acquire, (database) =>\n    coordinateTargetTotp(\n      database,\n      options.mapping,\n      configuration,\n      (_transaction, services, append) =>\n        Effect.gen(function* () {\n          const original = services.totpPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: TotpPersistence[\"Service\"] = {\n            snapshot: (input) => owner.run(original.snapshot(input)),\n            mutate: (input, prepare) => owner.run(original.mutate(input, prepare)),\n          };\n\n          const provided = Context.make(TotpPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n    ),\n  );\n"],"mappings":";;;;;;;AAgBA,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAQA,MAAa,EAAE,gCALA,eACbA,UACA,aAG6C;AAE/C,MAAa,6BAaX,SACA,SACA,SAMA,OAAO,QAAQ,UAAU,aACvB,qBACE,UACA,QAAQ,SACR,gBACC,cAAc,UAAU,WACvB,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,SAAS;CAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;CAED,MAAM,QAAQ,OAAO,YAAY,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KACzD,OAAO,eAAe,mBAAmB,eAAe,CAC1D;CAOA,MAAM,WAAW,QAAQ,KAAK,iBAAiB;EAJ7C,WAAW,UAAU,MAAM,IAAI,SAAS,SAAS,KAAK,CAAC;EACvD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;CAGlB,CAAC,CAAC,CAAC,KACtD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;CAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;AACjE,CAAC,CACL,CACF"}

package/dist/drizzle/email-registration.d.mts

@@ -2,11 +2,11 @@ import "./email-model.mjs";
 import "./email-sql.mjs";
 import "./proof-sql.mjs";
 import { LoginIdentifier } from "@yielded/auth/Identity";
-import { TokenDigest } from "@yielded/auth/Schema";
 import { Effect } from "effect";
 import { LifecycleHooks, PreparedCommit } from "@yielded/auth/Hooks";
 import { EmailCommandId, EmailRegistrationDecision, EmailUnavailable, PrepareEmailCommit } from "@yielded/auth/Email";
 import { ProofCompletionPlan } from "@yielded/auth/Proofs";
+import { TokenDigest } from "@yielded/auth/Schema";
 //#region src/drizzle/email-registration.d.ts
 export interface EmailRegistrationAuthority<Registration> {
   readonly inspect: (input: {

package/dist/drizzle/email-registration.mjs

@@ -175,7 +175,8 @@ const prepareConflict = Effect.fn("Drizzle.prepareConflict")(function* (mapping,
 		return row === void 0 ? prepare({ _tag: "Rejected" }, journal) : yield* prepareReplay(mapping, row, input.fingerprint, prepare);
 	}));
 });
-const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAuthority")(function* (database, mapping, configuration) {
+const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAuthority")(function* (mapping, configuration) {
+	const database = yield* CurrentEmailSql;
 	const hooks = yield* LifecycleHooks;
 	return {
 		inspect: (input) => mapping.inspect(input).pipe(Effect.provideService(CurrentEmailSql, database), Effect.provideService(LifecycleHooks, hooks), translateFailure),

package/dist/drizzle/email-registration.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"email-registration.mjs","names":[],"sources":["../../src/drizzle/email-registration.ts"],"sourcesContent":["import {\n  type PrepareEmailCommit,\n  type EmailCommandId,\n  type EmailRegistrationDecision,\n  EmailUnavailable,\n} from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n  HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport { type ProofCompletionPlan, ProofUnavailable } from \"@yielded/auth/Proofs\";\nimport type { TokenDigest } from \"@yielded/auth/Schema\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- registration plans bridge consumer-owned Drizzle rows. */\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { Cause, DateTime, Effect, Schema } from \"effect\";\n\nimport {\n  type AnyEmailRegistrationMapping,\n  requiredEmailRegistrationConstraints,\n} from \"./email-model\";\nimport { CurrentEmailSql, type EmailSqlDatabase, type EmailSqlQuery } from \"./email-sql\";\nimport { column, isMappedConstraintConflict, PersistenceMappingError } from \"./model\";\nimport {\n  CurrentProofSql,\n  completeProofPlanIn,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n} from \"./proof-sql\";\n\ntype Mapping<Registration> = AnyEmailRegistrationMapping<Registration>;\nconst unavailable = () => EmailUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(EmailUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly completion: ProofCompletionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\nexport interface EmailRegistrationConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinated?: boolean;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\nconst selectRows = (query: EmailSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst validConstraints = <Registration>(mapping: Mapping<Registration>) => {\n  if (\n    mapping.constraints.request !== requiredEmailRegistrationConstraints.request ||\n    mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference\n  )\n    return false;\n  if (mapping.mode === \"pending\") return true;\n\n  return Object.entries(requiredEmailRegistrationConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n  );\n};\n\nconst allocate = <A>(\n  mode: EmailRegistrationConfiguration[\"mode\"],\n  asynchronous: Effect.Effect<A, PersistenceMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n  mapping: Mapping<Registration>,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n\n  const module = column(mapping.registration.table, mapping.registration.moduleId);\n  const command = column(mapping.registration.table, mapping.registration.commandId);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.registration.table)\n      .where(and(eq(module, moduleId), eq(command, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst owned = <A, E, R>(\n  database: EmailSqlDatabase,\n  configuration: EmailRegistrationConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentEmailSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst completionMatches = <Registration>(\n  mapping: Mapping<Registration>,\n  input: {\n    readonly moduleId: string;\n    readonly identifier: LoginIdentifier;\n    readonly completion: ProofCompletionPlan;\n  },\n) => {\n  const completion = input.completion.input;\n\n  return (\n    completion.moduleId === `${input.moduleId}/registration` &&\n    completion.purpose === \"email-code-registration\" &&\n    completion.binding._tag === \"Identifier\" &&\n    sameIdentifier(completion.binding.identifier, input.identifier) &&\n    validConstraints(mapping)\n  );\n};\n\nconst prepareReplay = Effect.fn(\"DrizzleEmailRegistration.prepareReplay\")(function* <\n  Registration,\n  A,\n>(\n  mapping: Mapping<Registration>,\n  row: any,\n  fingerprint: TokenDigest,\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  if (row[mapping.registration.fingerprint] !== fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  return prepare(yield* mapping.registration.decodeReplay(row), journal);\n});\n\nconst registerIn = Effect.fn(\"DrizzleEmailRegistration.registerIn\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n    readonly fingerprint: TokenDigest;\n    readonly completion: ProofCompletionPlan;\n  },\n  inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n  allocated: {\n    readonly credentialId?: string;\n    readonly securityRevision?: SecurityRevision;\n    readonly identifierRevision?: SecurityRevision;\n    readonly credentialRevision?: SecurityRevision;\n    readonly nativeSubjectId?: unknown;\n    readonly pendingReference?: string;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const existing = (yield* registrationRows(\n    mapping,\n    input.moduleId,\n    input.commandId,\n    configuration.locking,\n  ))[0];\n\n  if (existing !== undefined)\n    return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);\n  if (!completionMatches(mapping, input)) return prepare({ _tag: \"Rejected\" }, journal);\n  if (!inspected.eligible || inspected.fingerprint !== input.fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n  const now = yield* nowMillis;\n\n  const intent = {\n    moduleId: input.moduleId,\n    commandId: input.commandId,\n    identifier: Object.freeze({ ...input.identifier }),\n    registration: input.registration,\n    fingerprint: input.fingerprint,\n    completion: Object.freeze({\n      moduleId: input.completion.input.moduleId,\n      purpose: input.completion.input.purpose,\n      continuationId: input.completion.input.continuationId,\n      binding: input.completion.input.binding,\n    }),\n  };\n\n  let decision: EmailRegistrationDecision | undefined;\n  let nativeSubjectId = allocated.nativeSubjectId;\n\n  const protectedMutation = Effect.gen(function* () {\n    const transaction = yield* CurrentEmailSql;\n\n    if (mapping.mode === \"pending\") {\n      if (allocated.pendingReference === undefined) return false;\n      decision = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"pending\",\n          pendingReference: allocated.pendingReference,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n    } else {\n      if (\n        allocated.credentialId === undefined ||\n        allocated.securityRevision === undefined ||\n        allocated.identifierRevision === undefined ||\n        allocated.credentialRevision === undefined\n      )\n        return false;\n\n      const subjectInsert = transaction.insert(mapping.subject.table).values(\n        mapping.provisioning.encodeSubjectInsert(intent, {\n          nativeSubjectId,\n          securityRevision: allocated.securityRevision,\n        }),\n      );\n\n      if (mapping.provisioning.idMode === \"generated\") {\n        const rows = yield* configuration.generatedSubjectRows(subjectInsert);\n\n        nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);\n      } else yield* subjectInsert;\n      if (nativeSubjectId === undefined) return false;\n      yield* transaction.insert(mapping.identifier.table).values(\n        mapping.identifier.encodeVerifiedInsert({\n          identifier: input.identifier,\n          subjectId: nativeSubjectId,\n          verifiedAtMillis: now,\n          bindingRevision: allocated.identifierRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.credential.table).values(\n        mapping.credential.encodeVerifiedInsert({\n          moduleId: input.moduleId,\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          identifier: input.identifier,\n          credentialRevision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.authorityCredential.table).values(\n        mapping.authorityCredential.encodeInsert({\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          revision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"registered\",\n          nativeSubjectId,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n      decision = { _tag: \"Registered\" };\n    }\n    const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];\n    const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n    const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n    const registrationFingerprint = column(\n      mapping.registration.table,\n      mapping.registration.fingerprint,\n    );\n\n    const registrationState = column(mapping.registration.table, mapping.registration.state);\n    const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);\n\n    const registrationReference = column(\n      mapping.registration.table,\n      mapping.registration.pendingReference,\n    );\n\n    const registrationRetention = column(\n      mapping.registration.table,\n      mapping.registration.retentionUntil,\n    );\n\n    const exactRegistration = yield* selectRows(\n      transaction\n        .select()\n        .from(mapping.registration.table)\n        .where(\n          and(\n            eq(registrationModule, input.moduleId),\n            eq(registrationCommand, input.commandId),\n            eq(registrationFingerprint, input.fingerprint),\n            eq(registrationState, mapping.mode === \"pending\" ? \"pending\" : \"registered\"),\n            eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)),\n            mapping.mode === \"pending\"\n              ? and(\n                  eq(registrationReference, allocated.pendingReference!),\n                  isNull(registrationSubject),\n                )\n              : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)),\n          ),\n        )\n        .limit(1),\n      false,\n    );\n\n    if (mapping.mode === \"atomic\" && nativeSubjectId !== undefined) {\n      const subjectId = column(mapping.subject.table, mapping.subject.id);\n      const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n      const identifierValue = column(mapping.identifier.table, mapping.identifier.value);\n      const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n      const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n      const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);\n      const credentialId = column(mapping.credential.table, mapping.credential.credentialId);\n      const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);\n\n      const credentialNamespace = column(\n        mapping.credential.table,\n        mapping.credential.identifierNamespace,\n      );\n\n      const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);\n\n      const authoritySubject = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.subjectId,\n      );\n\n      const authorityId = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.credentialId,\n      );\n\n      const subject = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.subject.table)\n          .where(eq(subjectId, nativeSubjectId))\n          .limit(1),\n        false,\n      ))[0];\n\n      const identifier = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.identifier.table)\n          .where(\n            and(\n              eq(identifierNamespace, input.identifier.namespace),\n              eq(identifierValue, input.identifier.value),\n              eq(identifierSubject, nativeSubjectId),\n              eq(identifierVerifiedAt, mapping.encodeInstant(now)),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const credential = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.credential.table)\n          .where(\n            and(\n              eq(credentialModule, input.moduleId),\n              eq(credentialId, allocated.credentialId!),\n              eq(credentialSubject, nativeSubjectId),\n              eq(credentialNamespace, input.identifier.namespace),\n              eq(credentialValue, input.identifier.value),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const authority = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.authorityCredential.table)\n          .where(\n            and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId!)),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      if (\n        subject === undefined ||\n        !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n        subject[mapping.subject.securityRevision] !== allocated.securityRevision ||\n        identifier === undefined ||\n        identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision ||\n        !mapping.identifier.isCurrent(identifier) ||\n        credential === undefined ||\n        credential[mapping.credential.credentialRevision] !== allocated.credentialRevision ||\n        !mapping.credential.isActiveStatus(credential[mapping.credential.status]) ||\n        authority === undefined ||\n        authority[mapping.authorityCredential.revision] !== allocated.credentialRevision ||\n        !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])\n      )\n        return false;\n    }\n\n    return (\n      stored !== undefined &&\n      exactRegistration.length === 1 &&\n      stored[mapping.registration.fingerprint] === input.fingerprint &&\n      (mapping.mode === \"pending\" ||\n        (nativeSubjectId !== undefined &&\n          stored[mapping.registration.subjectId] !== null &&\n          mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId)))\n    );\n  });\n\n  let receipt: PreparedCommit<A> | undefined;\n\n  yield* completeProofPlanIn(\n    configuration.proof.mapping,\n    configuration.proof.configuration,\n    input.completion,\n    protectedMutation,\n    (completionDecision) => {\n      receipt = prepare(\n        completionDecision === \"completed\" && decision !== undefined\n          ? decision\n          : { _tag: \"Rejected\" },\n        journal,\n      );\n\n      return completionDecision;\n    },\n  );\n\n  return receipt ?? prepare({ _tag: \"Rejected\" }, journal);\n});\n\nconst prepareConflict = Effect.fn(\"Drizzle.prepareConflict\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly fingerprint: TokenDigest;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const database = yield* CurrentEmailSql;\n\n  return yield* owned(\n    database,\n    configuration,\n    Effect.gen(function* () {\n      const journal = yield* CurrentCommitJournal;\n\n      const row = (yield* registrationRows(\n        mapping,\n        input.moduleId,\n        input.commandId,\n        configuration.locking,\n      ))[0];\n\n      return row === undefined\n        ? prepare({ _tag: \"Rejected\" }, journal)\n        : yield* prepareReplay(mapping, row, input.fingerprint, prepare);\n    }),\n  );\n});\n\nexport const makeSqlEmailRegistrationAuthority = Effect.fn(\"makeSqlEmailRegistrationAuthority\")(\n  function* <Registration>(\n    database: EmailSqlDatabase,\n    mapping: Mapping<Registration>,\n    configuration: EmailRegistrationConfiguration,\n  ): Effect.fn.Return<EmailRegistrationAuthority<Registration>, never, LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    return {\n      inspect: (input) =>\n        mapping\n          .inspect(input)\n          .pipe(\n            Effect.provideService(CurrentEmailSql, database),\n            Effect.provideService(LifecycleHooks, hooks),\n            translateFailure,\n          ),\n      registerWithProof: (input, prepare) =>\n        Effect.gen(function* () {\n          if (!validConstraints(mapping)) return yield* unavailable();\n\n          const snapshot = (registration: Registration) =>\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.snapshotRegistrationSync === undefined\n                ? Effect.fail(unavailable())\n                : Effect.try({\n                    try: () => mapping.snapshotRegistrationSync!(registration),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : mapping.snapshotRegistration(registration);\n\n          const storedRegistration = yield* snapshot(input.registration);\n          const inspectionRegistration = yield* snapshot(input.registration);\n\n          const capturedInput = Object.freeze({\n            ...input,\n            identifier: Object.freeze({ ...input.identifier }),\n            registration: storedRegistration,\n          });\n\n          // Registration decoding and fingerprinting may suspend (for example while\n          // hashing a detached Registration value). Finish that work before a\n          // synchronous Durable Object transaction owner is entered.\n          const inspectInput = {\n            identifier: capturedInput.identifier,\n            registration: inspectionRegistration,\n          };\n\n          const inspected =\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.inspectSync === undefined\n                ? yield* unavailable()\n                : yield* Effect.try({\n                    try: () => mapping.inspectSync!(inspectInput),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : yield* mapping.inspect(inspectInput);\n\n          const atomic = mapping.mode === \"atomic\";\n\n          const credentialId = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              )\n            : undefined;\n\n          const securityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const identifierRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const credentialRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const nativeSubjectId =\n            atomic && mapping.provisioning.idMode !== \"generated\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.provisioning.allocateSubjectId,\n                  mapping.provisioning.allocateSubjectIdSync,\n                )\n              : undefined;\n\n          const pendingReference =\n            mapping.mode === \"pending\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.allocatePendingReference,\n                  mapping.allocatePendingReferenceSync,\n                )\n              : undefined;\n\n          const run = owned(\n            database,\n            configuration,\n            Effect.gen(function* () {\n              return yield* registerIn(\n                mapping,\n                configuration,\n                capturedInput,\n                inspected,\n                {\n                  ...(credentialId === undefined ? {} : { credentialId }),\n                  ...(securityRevision === undefined ? {} : { securityRevision }),\n                  ...(identifierRevision === undefined ? {} : { identifierRevision }),\n                  ...(credentialRevision === undefined ? {} : { credentialRevision }),\n                  ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n                  ...(pendingReference === undefined ? {} : { pendingReference }),\n                },\n                prepare,\n              );\n            }),\n          );\n\n          return yield* run.pipe(\n            Effect.catchCause((cause) => {\n              const request =\n                cause.reasons.every(Cause.isFailReason) &&\n                isMappedConstraintConflict(mapping.isRequestConflict, cause);\n\n              const conflict =\n                mapping.mode === \"atomic\" &&\n                ((cause.reasons.every(Cause.isFailReason) &&\n                  isMappedConstraintConflict(mapping.isIdentifierConflict, cause)) ||\n                  (cause.reasons.every(Cause.isFailReason) &&\n                    isMappedConstraintConflict(mapping.isCredentialConflict, cause)));\n\n              return request || conflict\n                ? prepareConflict(mapping, configuration, capturedInput, prepare)\n                : Effect.failCause(cause);\n            }),\n          );\n        }).pipe(\n          Effect.provideService(CurrentEmailSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    };\n  },\n);\n"],"mappings":";;;;;;;;;;;AAqCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,SAAS,aAAa;AAmCjE,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,oBAAkC,YAAmC;CACzE,IACE,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,kBAE9E,OAAO;CACT,IAAI,QAAQ,SAAS,WAAW,OAAO;CAEvC,OAAO,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OACzD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AACF;AAEA,MAAM,YACJ,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;AACP;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC/E,MAAM,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAEjF,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,QAAQ,QAAQ,GAAG,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CACxD,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,SACJ,UACA,eACA,SACG;CACH,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,iBAAiB,WAAW,GAClD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,qBACJ,SACA,UAKG;CACH,MAAM,aAAa,MAAM,WAAW;CAEpC,OACE,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,WAAW,QAAQ,SAAS,gBAC5B,eAAe,WAAW,QAAQ,YAAY,MAAM,UAAU,KAC9D,iBAAiB,OAAO;AAE5B;AAEA,MAAM,gBAAgB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAIxE,SACA,KACA,aACA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,IAAI,IAAI,QAAQ,aAAa,iBAAiB,aAC5C,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,OAAO,QAAQ,OAAO,QAAQ,aAAa,aAAa,GAAG,GAAG,OAAO;AACvE,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAClE,SACA,eACA,OAQA,WACA,WAQA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBACvB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;CAEH,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,cAAc,SAAS,UAAU,MAAM,aAAa,OAAO;CAC3E,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CACpF,IAAI,CAAC,UAAU,YAAY,UAAU,gBAAgB,MAAM,aACzD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAC9C,MAAM,MAAM,OAAO;CAEnB,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;EACjD,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,OAAO,OAAO;GACxB,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,kBAAkB,UAAU;CAEhC,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,cAAc,OAAO;EAE3B,IAAI,QAAQ,SAAS,WAAW;GAC9B,IAAI,UAAU,qBAAqB,KAAA,GAAW,OAAO;GACrD,WAAW;IAAE,MAAM;IAAuB,WAAW,UAAU;GAAiB;GAChF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP,kBAAkB,UAAU;IAC5B,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;EACF,OAAO;GACL,IACE,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAET,MAAM,gBAAgB,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC9D,QAAQ,aAAa,oBAAoB,QAAQ;IAC/C;IACA,kBAAkB,UAAU;GAC9B,CAAC,CACH;GAEA,IAAI,QAAQ,aAAa,WAAW,aAAa;IAC/C,MAAM,OAAO,OAAO,cAAc,qBAAqB,aAAa;IAEpE,kBAAkB,OAAO,QAAQ,aAAa,kBAAkB,IAAI;GACtE,OAAO,OAAO;GACd,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAC1C,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,YAAY,MAAM;IAClB,WAAW;IACX,kBAAkB;IAClB,iBAAiB,UAAU;GAC7B,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,UAAU,MAAM;IAChB,WAAW;IACX,cAAc,UAAU;IACxB,YAAY,MAAM;IAClB,oBAAoB,UAAU;GAChC,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAC3D,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX,cAAc,UAAU;IACxB,UAAU,UAAU;GACtB,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP;IACA,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;GACA,WAAW,EAAE,MAAM,aAAa;EAClC;EACA,MAAM,UAAU,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK,EAAA,CAAG;EAC1F,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;EAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;EACvF,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,gBACvB;EAEA,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,cACvB;EAEA,MAAM,oBAAoB,OAAO,WAC/B,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,oBAAoB,MAAM,QAAQ,GACrC,GAAG,qBAAqB,MAAM,SAAS,GACvC,GAAG,yBAAyB,MAAM,WAAW,GAC7C,GAAG,mBAAmB,QAAQ,SAAS,YAAY,YAAY,YAAY,GAC3E,GAAG,uBAAuB,QAAQ,cAAc,MAAM,QAAQ,eAAe,CAAC,GAC9E,QAAQ,SAAS,YACb,IACE,GAAG,uBAAuB,UAAU,gBAAiB,GACrD,OAAO,mBAAmB,CAC5B,IACA,IAAI,GAAG,qBAAqB,eAAe,GAAG,OAAO,qBAAqB,CAAC,CACjF,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF;EAEA,IAAI,QAAQ,SAAS,YAAY,oBAAoB,KAAA,GAAW;GAC9D,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GAClE,MAAM,sBAAsB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACzF,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;GACjF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACvF,MAAM,uBAAuB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;GAC3F,MAAM,mBAAmB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;GACrF,MAAM,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;GACrF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEvF,MAAM,sBAAsB,OAC1B,QAAQ,WAAW,OACnB,QAAQ,WAAW,mBACrB;GAEA,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;GAE3F,MAAM,mBAAmB,OACvB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;GAEA,MAAM,cAAc,OAClB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,YAC9B;GAEA,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,WAAW,eAAe,CAAC,CAAC,CACrC,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,GAC1C,GAAG,mBAAmB,eAAe,GACrC,GAAG,sBAAsB,QAAQ,cAAc,GAAG,CAAC,CACrD,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,kBAAkB,MAAM,QAAQ,GACnC,GAAG,cAAc,UAAU,YAAa,GACxC,GAAG,mBAAmB,eAAe,GACrC,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,aAAa,OAAO,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IAAI,GAAG,kBAAkB,eAAe,GAAG,GAAG,aAAa,UAAU,YAAa,CAAC,CACrF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,IACE,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,QAAQ,QAAQ,QAAQ,sBAAsB,UAAU,oBACxD,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,qBAAqB,UAAU,sBAC7D,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,wBAAwB,UAAU,sBAChE,CAAC,QAAQ,WAAW,eAAe,WAAW,QAAQ,WAAW,OAAO,KACxE,cAAc,KAAA,KACd,UAAU,QAAQ,oBAAoB,cAAc,UAAU,sBAC9D,CAAC,QAAQ,oBAAoB,eAAe,UAAU,QAAQ,oBAAoB,OAAO,GAEzF,OAAO;EACX;EAEA,OACE,WAAW,KAAA,KACX,kBAAkB,WAAW,KAC7B,OAAO,QAAQ,aAAa,iBAAiB,MAAM,gBAClD,QAAQ,SAAS,aACf,oBAAoB,KAAA,KACnB,OAAO,QAAQ,aAAa,eAAe,QAC3C,QAAQ,UAAU,OAAO,OAAO,QAAQ,aAAa,YAAY,eAAe;CAExF,CAAC;CAED,IAAI;CAEJ,OAAO,oBACL,cAAc,MAAM,SACpB,cAAc,MAAM,eACpB,MAAM,YACN,oBACC,uBAAuB;EACtB,UAAU,QACR,uBAAuB,eAAe,aAAa,KAAA,IAC/C,WACA,EAAE,MAAM,WAAW,GACvB,OACF;EAEA,OAAO;CACT,CACF;CAEA,OAAO,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;AACzD,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,eACA,OAKA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,MACZ,UACA,eACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EAEvB,MAAM,OAAO,OAAO,iBAClB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;EAEH,OAAO,QAAQ,KAAA,IACX,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO,IACrC,OAAO,cAAc,SAAS,KAAK,MAAM,aAAa,OAAO;CACnE,CAAC,CACH;AACF,CAAC;AAED,MAAa,oCAAoC,OAAO,GAAG,mCAAmC,CAAC,CAC7F,WACE,UACA,SACA,eACmF;CACnF,MAAM,QAAQ,OAAO;CAErB,OAAO;EACL,UAAU,UACR,QACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,OAAO,IAAI,aAAa;GACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;GAE1D,MAAM,YAAY,iBAChB,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,6BAA6B,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;IACT,WAAW,QAAQ,yBAA0B,YAAY;IACzD,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,QAAQ,qBAAqB,YAAY;GAE/C,MAAM,qBAAqB,OAAO,SAAS,MAAM,YAAY;GAC7D,MAAM,yBAAyB,OAAO,SAAS,MAAM,YAAY;GAEjE,MAAM,gBAAgB,OAAO,OAAO;IAClC,GAAG;IACH,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;IACjD,cAAc;GAChB,CAAC;GAKD,MAAM,eAAe;IACnB,YAAY,cAAc;IAC1B,cAAc;GAChB;GAEA,MAAM,YACJ,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,gBAAgB,KAAA,IACtB,OAAO,YAAY,IACnB,OAAO,OAAO,IAAI;IAChB,WAAW,QAAQ,YAAa,YAAY;IAC5C,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,OAAO,QAAQ,QAAQ,YAAY;GAEzC,MAAM,SAAS,QAAQ,SAAS;GAEhC,MAAM,eAAe,SACjB,OAAO,SACL,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV,IACA,KAAA;GAEJ,MAAM,mBAAmB,SACrB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,cAAc,MACd,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;GAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SACL,cAAc,MACd,QAAQ,0BACR,QAAQ,4BACV,IACA,KAAA;GAwBN,OAAO,OAtBK,MACV,UACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,WACZ,SACA,eACA,eACA,WACA;KACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;KACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;KAC7D,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;KAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAC/D,GACA,OACF;GACF,CAAC,CAGa,CAAC,CAAC,KAChB,OAAO,YAAY,UAAU;IAC3B,MAAM,UACJ,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,mBAAmB,KAAK;IAE7D,MAAM,WACJ,QAAQ,SAAS,aACf,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,MAAM,QAAQ,MAAM,MAAM,YAAY,KACrC,2BAA2B,QAAQ,sBAAsB,KAAK;IAEpE,OAAO,WAAW,WACd,gBAAgB,SAAS,eAAe,eAAe,OAAO,IAC9D,OAAO,UAAU,KAAK;GAC5B,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ;AACF,CACF"}
+{"version":3,"file":"email-registration.mjs","names":[],"sources":["../../src/drizzle/email-registration.ts"],"sourcesContent":["import {\n  type PrepareEmailCommit,\n  type EmailCommandId,\n  type EmailRegistrationDecision,\n  EmailUnavailable,\n} from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n  HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport { type ProofCompletionPlan, ProofUnavailable } from \"@yielded/auth/Proofs\";\nimport type { TokenDigest } from \"@yielded/auth/Schema\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- registration plans bridge consumer-owned Drizzle rows. */\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { Cause, DateTime, Effect, Schema } from \"effect\";\n\nimport {\n  type AnyEmailRegistrationMapping,\n  requiredEmailRegistrationConstraints,\n} from \"./email-model\";\nimport { CurrentEmailSql, type EmailSqlDatabase, type EmailSqlQuery } from \"./email-sql\";\nimport { column, isMappedConstraintConflict, PersistenceMappingError } from \"./model\";\nimport {\n  CurrentProofSql,\n  completeProofPlanIn,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n} from \"./proof-sql\";\n\ntype Mapping<Registration> = AnyEmailRegistrationMapping<Registration>;\nconst unavailable = () => EmailUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(EmailUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly completion: ProofCompletionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\nexport interface EmailRegistrationConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinated?: boolean;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\nconst selectRows = (query: EmailSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst validConstraints = <Registration>(mapping: Mapping<Registration>) => {\n  if (\n    mapping.constraints.request !== requiredEmailRegistrationConstraints.request ||\n    mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference\n  )\n    return false;\n  if (mapping.mode === \"pending\") return true;\n\n  return Object.entries(requiredEmailRegistrationConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n  );\n};\n\nconst allocate = <A>(\n  mode: EmailRegistrationConfiguration[\"mode\"],\n  asynchronous: Effect.Effect<A, PersistenceMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n  mapping: Mapping<Registration>,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n\n  const module = column(mapping.registration.table, mapping.registration.moduleId);\n  const command = column(mapping.registration.table, mapping.registration.commandId);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.registration.table)\n      .where(and(eq(module, moduleId), eq(command, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst owned = <A, E, R>(\n  database: EmailSqlDatabase,\n  configuration: EmailRegistrationConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentEmailSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst completionMatches = <Registration>(\n  mapping: Mapping<Registration>,\n  input: {\n    readonly moduleId: string;\n    readonly identifier: LoginIdentifier;\n    readonly completion: ProofCompletionPlan;\n  },\n) => {\n  const completion = input.completion.input;\n\n  return (\n    completion.moduleId === `${input.moduleId}/registration` &&\n    completion.purpose === \"email-code-registration\" &&\n    completion.binding._tag === \"Identifier\" &&\n    sameIdentifier(completion.binding.identifier, input.identifier) &&\n    validConstraints(mapping)\n  );\n};\n\nconst prepareReplay = Effect.fn(\"DrizzleEmailRegistration.prepareReplay\")(function* <\n  Registration,\n  A,\n>(\n  mapping: Mapping<Registration>,\n  row: any,\n  fingerprint: TokenDigest,\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  if (row[mapping.registration.fingerprint] !== fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  return prepare(yield* mapping.registration.decodeReplay(row), journal);\n});\n\nconst registerIn = Effect.fn(\"DrizzleEmailRegistration.registerIn\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n    readonly fingerprint: TokenDigest;\n    readonly completion: ProofCompletionPlan;\n  },\n  inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n  allocated: {\n    readonly credentialId?: string;\n    readonly securityRevision?: SecurityRevision;\n    readonly identifierRevision?: SecurityRevision;\n    readonly credentialRevision?: SecurityRevision;\n    readonly nativeSubjectId?: unknown;\n    readonly pendingReference?: string;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const existing = (yield* registrationRows(\n    mapping,\n    input.moduleId,\n    input.commandId,\n    configuration.locking,\n  ))[0];\n\n  if (existing !== undefined)\n    return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);\n  if (!completionMatches(mapping, input)) return prepare({ _tag: \"Rejected\" }, journal);\n  if (!inspected.eligible || inspected.fingerprint !== input.fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n  const now = yield* nowMillis;\n\n  const intent = {\n    moduleId: input.moduleId,\n    commandId: input.commandId,\n    identifier: Object.freeze({ ...input.identifier }),\n    registration: input.registration,\n    fingerprint: input.fingerprint,\n    completion: Object.freeze({\n      moduleId: input.completion.input.moduleId,\n      purpose: input.completion.input.purpose,\n      continuationId: input.completion.input.continuationId,\n      binding: input.completion.input.binding,\n    }),\n  };\n\n  let decision: EmailRegistrationDecision | undefined;\n  let nativeSubjectId = allocated.nativeSubjectId;\n\n  const protectedMutation = Effect.gen(function* () {\n    const transaction = yield* CurrentEmailSql;\n\n    if (mapping.mode === \"pending\") {\n      if (allocated.pendingReference === undefined) return false;\n      decision = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"pending\",\n          pendingReference: allocated.pendingReference,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n    } else {\n      if (\n        allocated.credentialId === undefined ||\n        allocated.securityRevision === undefined ||\n        allocated.identifierRevision === undefined ||\n        allocated.credentialRevision === undefined\n      )\n        return false;\n\n      const subjectInsert = transaction.insert(mapping.subject.table).values(\n        mapping.provisioning.encodeSubjectInsert(intent, {\n          nativeSubjectId,\n          securityRevision: allocated.securityRevision,\n        }),\n      );\n\n      if (mapping.provisioning.idMode === \"generated\") {\n        const rows = yield* configuration.generatedSubjectRows(subjectInsert);\n\n        nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);\n      } else yield* subjectInsert;\n      if (nativeSubjectId === undefined) return false;\n      yield* transaction.insert(mapping.identifier.table).values(\n        mapping.identifier.encodeVerifiedInsert({\n          identifier: input.identifier,\n          subjectId: nativeSubjectId,\n          verifiedAtMillis: now,\n          bindingRevision: allocated.identifierRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.credential.table).values(\n        mapping.credential.encodeVerifiedInsert({\n          moduleId: input.moduleId,\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          identifier: input.identifier,\n          credentialRevision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.authorityCredential.table).values(\n        mapping.authorityCredential.encodeInsert({\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          revision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"registered\",\n          nativeSubjectId,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n      decision = { _tag: \"Registered\" };\n    }\n    const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];\n    const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n    const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n    const registrationFingerprint = column(\n      mapping.registration.table,\n      mapping.registration.fingerprint,\n    );\n\n    const registrationState = column(mapping.registration.table, mapping.registration.state);\n    const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);\n\n    const registrationReference = column(\n      mapping.registration.table,\n      mapping.registration.pendingReference,\n    );\n\n    const registrationRetention = column(\n      mapping.registration.table,\n      mapping.registration.retentionUntil,\n    );\n\n    const exactRegistration = yield* selectRows(\n      transaction\n        .select()\n        .from(mapping.registration.table)\n        .where(\n          and(\n            eq(registrationModule, input.moduleId),\n            eq(registrationCommand, input.commandId),\n            eq(registrationFingerprint, input.fingerprint),\n            eq(registrationState, mapping.mode === \"pending\" ? \"pending\" : \"registered\"),\n            eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)),\n            mapping.mode === \"pending\"\n              ? and(\n                  eq(registrationReference, allocated.pendingReference!),\n                  isNull(registrationSubject),\n                )\n              : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)),\n          ),\n        )\n        .limit(1),\n      false,\n    );\n\n    if (mapping.mode === \"atomic\" && nativeSubjectId !== undefined) {\n      const subjectId = column(mapping.subject.table, mapping.subject.id);\n      const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n      const identifierValue = column(mapping.identifier.table, mapping.identifier.value);\n      const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n      const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n      const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);\n      const credentialId = column(mapping.credential.table, mapping.credential.credentialId);\n      const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);\n\n      const credentialNamespace = column(\n        mapping.credential.table,\n        mapping.credential.identifierNamespace,\n      );\n\n      const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);\n\n      const authoritySubject = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.subjectId,\n      );\n\n      const authorityId = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.credentialId,\n      );\n\n      const subject = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.subject.table)\n          .where(eq(subjectId, nativeSubjectId))\n          .limit(1),\n        false,\n      ))[0];\n\n      const identifier = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.identifier.table)\n          .where(\n            and(\n              eq(identifierNamespace, input.identifier.namespace),\n              eq(identifierValue, input.identifier.value),\n              eq(identifierSubject, nativeSubjectId),\n              eq(identifierVerifiedAt, mapping.encodeInstant(now)),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const credential = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.credential.table)\n          .where(\n            and(\n              eq(credentialModule, input.moduleId),\n              eq(credentialId, allocated.credentialId!),\n              eq(credentialSubject, nativeSubjectId),\n              eq(credentialNamespace, input.identifier.namespace),\n              eq(credentialValue, input.identifier.value),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const authority = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.authorityCredential.table)\n          .where(\n            and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId!)),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      if (\n        subject === undefined ||\n        !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n        subject[mapping.subject.securityRevision] !== allocated.securityRevision ||\n        identifier === undefined ||\n        identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision ||\n        !mapping.identifier.isCurrent(identifier) ||\n        credential === undefined ||\n        credential[mapping.credential.credentialRevision] !== allocated.credentialRevision ||\n        !mapping.credential.isActiveStatus(credential[mapping.credential.status]) ||\n        authority === undefined ||\n        authority[mapping.authorityCredential.revision] !== allocated.credentialRevision ||\n        !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])\n      )\n        return false;\n    }\n\n    return (\n      stored !== undefined &&\n      exactRegistration.length === 1 &&\n      stored[mapping.registration.fingerprint] === input.fingerprint &&\n      (mapping.mode === \"pending\" ||\n        (nativeSubjectId !== undefined &&\n          stored[mapping.registration.subjectId] !== null &&\n          mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId)))\n    );\n  });\n\n  let receipt: PreparedCommit<A> | undefined;\n\n  yield* completeProofPlanIn(\n    configuration.proof.mapping,\n    configuration.proof.configuration,\n    input.completion,\n    protectedMutation,\n    (completionDecision) => {\n      receipt = prepare(\n        completionDecision === \"completed\" && decision !== undefined\n          ? decision\n          : { _tag: \"Rejected\" },\n        journal,\n      );\n\n      return completionDecision;\n    },\n  );\n\n  return receipt ?? prepare({ _tag: \"Rejected\" }, journal);\n});\n\nconst prepareConflict = Effect.fn(\"Drizzle.prepareConflict\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly fingerprint: TokenDigest;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const database = yield* CurrentEmailSql;\n\n  return yield* owned(\n    database,\n    configuration,\n    Effect.gen(function* () {\n      const journal = yield* CurrentCommitJournal;\n\n      const row = (yield* registrationRows(\n        mapping,\n        input.moduleId,\n        input.commandId,\n        configuration.locking,\n      ))[0];\n\n      return row === undefined\n        ? prepare({ _tag: \"Rejected\" }, journal)\n        : yield* prepareReplay(mapping, row, input.fingerprint, prepare);\n    }),\n  );\n});\n\nexport const makeSqlEmailRegistrationAuthority = Effect.fn(\"makeSqlEmailRegistrationAuthority\")(\n  function* <Registration>(\n    mapping: Mapping<Registration>,\n    configuration: EmailRegistrationConfiguration,\n  ): Effect.fn.Return<\n    EmailRegistrationAuthority<Registration>,\n    never,\n    LifecycleHooks | CurrentEmailSql\n  > {\n    const database = yield* CurrentEmailSql;\n    const hooks = yield* LifecycleHooks;\n\n    return {\n      inspect: (input) =>\n        mapping\n          .inspect(input)\n          .pipe(\n            Effect.provideService(CurrentEmailSql, database),\n            Effect.provideService(LifecycleHooks, hooks),\n            translateFailure,\n          ),\n      registerWithProof: (input, prepare) =>\n        Effect.gen(function* () {\n          if (!validConstraints(mapping)) return yield* unavailable();\n\n          const snapshot = (registration: Registration) =>\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.snapshotRegistrationSync === undefined\n                ? Effect.fail(unavailable())\n                : Effect.try({\n                    try: () => mapping.snapshotRegistrationSync!(registration),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : mapping.snapshotRegistration(registration);\n\n          const storedRegistration = yield* snapshot(input.registration);\n          const inspectionRegistration = yield* snapshot(input.registration);\n\n          const capturedInput = Object.freeze({\n            ...input,\n            identifier: Object.freeze({ ...input.identifier }),\n            registration: storedRegistration,\n          });\n\n          // Registration decoding and fingerprinting may suspend (for example while\n          // hashing a detached Registration value). Finish that work before a\n          // synchronous Durable Object transaction owner is entered.\n          const inspectInput = {\n            identifier: capturedInput.identifier,\n            registration: inspectionRegistration,\n          };\n\n          const inspected =\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.inspectSync === undefined\n                ? yield* unavailable()\n                : yield* Effect.try({\n                    try: () => mapping.inspectSync!(inspectInput),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : yield* mapping.inspect(inspectInput);\n\n          const atomic = mapping.mode === \"atomic\";\n\n          const credentialId = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              )\n            : undefined;\n\n          const securityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const identifierRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const credentialRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const nativeSubjectId =\n            atomic && mapping.provisioning.idMode !== \"generated\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.provisioning.allocateSubjectId,\n                  mapping.provisioning.allocateSubjectIdSync,\n                )\n              : undefined;\n\n          const pendingReference =\n            mapping.mode === \"pending\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.allocatePendingReference,\n                  mapping.allocatePendingReferenceSync,\n                )\n              : undefined;\n\n          const run = owned(\n            database,\n            configuration,\n            Effect.gen(function* () {\n              return yield* registerIn(\n                mapping,\n                configuration,\n                capturedInput,\n                inspected,\n                {\n                  ...(credentialId === undefined ? {} : { credentialId }),\n                  ...(securityRevision === undefined ? {} : { securityRevision }),\n                  ...(identifierRevision === undefined ? {} : { identifierRevision }),\n                  ...(credentialRevision === undefined ? {} : { credentialRevision }),\n                  ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n                  ...(pendingReference === undefined ? {} : { pendingReference }),\n                },\n                prepare,\n              );\n            }),\n          );\n\n          return yield* run.pipe(\n            Effect.catchCause((cause) => {\n              const request =\n                cause.reasons.every(Cause.isFailReason) &&\n                isMappedConstraintConflict(mapping.isRequestConflict, cause);\n\n              const conflict =\n                mapping.mode === \"atomic\" &&\n                ((cause.reasons.every(Cause.isFailReason) &&\n                  isMappedConstraintConflict(mapping.isIdentifierConflict, cause)) ||\n                  (cause.reasons.every(Cause.isFailReason) &&\n                    isMappedConstraintConflict(mapping.isCredentialConflict, cause)));\n\n              return request || conflict\n                ? prepareConflict(mapping, configuration, capturedInput, prepare)\n                : Effect.failCause(cause);\n            }),\n          );\n        }).pipe(\n          Effect.provideService(CurrentEmailSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    };\n  },\n);\n"],"mappings":";;;;;;;;;;;AAqCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,SAAS,aAAa;AAmCjE,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,oBAAkC,YAAmC;CACzE,IACE,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,kBAE9E,OAAO;CACT,IAAI,QAAQ,SAAS,WAAW,OAAO;CAEvC,OAAO,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OACzD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AACF;AAEA,MAAM,YACJ,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;AACP;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC/E,MAAM,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAEjF,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,QAAQ,QAAQ,GAAG,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CACxD,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,SACJ,UACA,eACA,SACG;CACH,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,iBAAiB,WAAW,GAClD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,qBACJ,SACA,UAKG;CACH,MAAM,aAAa,MAAM,WAAW;CAEpC,OACE,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,WAAW,QAAQ,SAAS,gBAC5B,eAAe,WAAW,QAAQ,YAAY,MAAM,UAAU,KAC9D,iBAAiB,OAAO;AAE5B;AAEA,MAAM,gBAAgB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAIxE,SACA,KACA,aACA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,IAAI,IAAI,QAAQ,aAAa,iBAAiB,aAC5C,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,OAAO,QAAQ,OAAO,QAAQ,aAAa,aAAa,GAAG,GAAG,OAAO;AACvE,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAClE,SACA,eACA,OAQA,WACA,WAQA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBACvB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;CAEH,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,cAAc,SAAS,UAAU,MAAM,aAAa,OAAO;CAC3E,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CACpF,IAAI,CAAC,UAAU,YAAY,UAAU,gBAAgB,MAAM,aACzD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAC9C,MAAM,MAAM,OAAO;CAEnB,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;EACjD,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,OAAO,OAAO;GACxB,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,kBAAkB,UAAU;CAEhC,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,cAAc,OAAO;EAE3B,IAAI,QAAQ,SAAS,WAAW;GAC9B,IAAI,UAAU,qBAAqB,KAAA,GAAW,OAAO;GACrD,WAAW;IAAE,MAAM;IAAuB,WAAW,UAAU;GAAiB;GAChF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP,kBAAkB,UAAU;IAC5B,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;EACF,OAAO;GACL,IACE,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAET,MAAM,gBAAgB,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC9D,QAAQ,aAAa,oBAAoB,QAAQ;IAC/C;IACA,kBAAkB,UAAU;GAC9B,CAAC,CACH;GAEA,IAAI,QAAQ,aAAa,WAAW,aAAa;IAC/C,MAAM,OAAO,OAAO,cAAc,qBAAqB,aAAa;IAEpE,kBAAkB,OAAO,QAAQ,aAAa,kBAAkB,IAAI;GACtE,OAAO,OAAO;GACd,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAC1C,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,YAAY,MAAM;IAClB,WAAW;IACX,kBAAkB;IAClB,iBAAiB,UAAU;GAC7B,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,UAAU,MAAM;IAChB,WAAW;IACX,cAAc,UAAU;IACxB,YAAY,MAAM;IAClB,oBAAoB,UAAU;GAChC,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAC3D,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX,cAAc,UAAU;IACxB,UAAU,UAAU;GACtB,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP;IACA,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;GACA,WAAW,EAAE,MAAM,aAAa;EAClC;EACA,MAAM,UAAU,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK,EAAA,CAAG;EAC1F,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;EAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;EACvF,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,gBACvB;EAEA,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,cACvB;EAEA,MAAM,oBAAoB,OAAO,WAC/B,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,oBAAoB,MAAM,QAAQ,GACrC,GAAG,qBAAqB,MAAM,SAAS,GACvC,GAAG,yBAAyB,MAAM,WAAW,GAC7C,GAAG,mBAAmB,QAAQ,SAAS,YAAY,YAAY,YAAY,GAC3E,GAAG,uBAAuB,QAAQ,cAAc,MAAM,QAAQ,eAAe,CAAC,GAC9E,QAAQ,SAAS,YACb,IACE,GAAG,uBAAuB,UAAU,gBAAiB,GACrD,OAAO,mBAAmB,CAC5B,IACA,IAAI,GAAG,qBAAqB,eAAe,GAAG,OAAO,qBAAqB,CAAC,CACjF,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF;EAEA,IAAI,QAAQ,SAAS,YAAY,oBAAoB,KAAA,GAAW;GAC9D,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GAClE,MAAM,sBAAsB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACzF,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;GACjF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACvF,MAAM,uBAAuB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;GAC3F,MAAM,mBAAmB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;GACrF,MAAM,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;GACrF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEvF,MAAM,sBAAsB,OAC1B,QAAQ,WAAW,OACnB,QAAQ,WAAW,mBACrB;GAEA,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;GAE3F,MAAM,mBAAmB,OACvB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;GAEA,MAAM,cAAc,OAClB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,YAC9B;GAEA,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,WAAW,eAAe,CAAC,CAAC,CACrC,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,GAC1C,GAAG,mBAAmB,eAAe,GACrC,GAAG,sBAAsB,QAAQ,cAAc,GAAG,CAAC,CACrD,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,kBAAkB,MAAM,QAAQ,GACnC,GAAG,cAAc,UAAU,YAAa,GACxC,GAAG,mBAAmB,eAAe,GACrC,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,aAAa,OAAO,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IAAI,GAAG,kBAAkB,eAAe,GAAG,GAAG,aAAa,UAAU,YAAa,CAAC,CACrF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,IACE,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,QAAQ,QAAQ,QAAQ,sBAAsB,UAAU,oBACxD,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,qBAAqB,UAAU,sBAC7D,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,wBAAwB,UAAU,sBAChE,CAAC,QAAQ,WAAW,eAAe,WAAW,QAAQ,WAAW,OAAO,KACxE,cAAc,KAAA,KACd,UAAU,QAAQ,oBAAoB,cAAc,UAAU,sBAC9D,CAAC,QAAQ,oBAAoB,eAAe,UAAU,QAAQ,oBAAoB,OAAO,GAEzF,OAAO;EACX;EAEA,OACE,WAAW,KAAA,KACX,kBAAkB,WAAW,KAC7B,OAAO,QAAQ,aAAa,iBAAiB,MAAM,gBAClD,QAAQ,SAAS,aACf,oBAAoB,KAAA,KACnB,OAAO,QAAQ,aAAa,eAAe,QAC3C,QAAQ,UAAU,OAAO,OAAO,QAAQ,aAAa,YAAY,eAAe;CAExF,CAAC;CAED,IAAI;CAEJ,OAAO,oBACL,cAAc,MAAM,SACpB,cAAc,MAAM,eACpB,MAAM,YACN,oBACC,uBAAuB;EACtB,UAAU,QACR,uBAAuB,eAAe,aAAa,KAAA,IAC/C,WACA,EAAE,MAAM,WAAW,GACvB,OACF;EAEA,OAAO;CACT,CACF;CAEA,OAAO,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;AACzD,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,eACA,OAKA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,MACZ,UACA,eACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EAEvB,MAAM,OAAO,OAAO,iBAClB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;EAEH,OAAO,QAAQ,KAAA,IACX,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO,IACrC,OAAO,cAAc,SAAS,KAAK,MAAM,aAAa,OAAO;CACnE,CAAC,CACH;AACF,CAAC;AAED,MAAa,oCAAoC,OAAO,GAAG,mCAAmC,CAAC,CAC7F,WACE,SACA,eAKA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,QAAQ,OAAO;CAErB,OAAO;EACL,UAAU,UACR,QACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,OAAO,IAAI,aAAa;GACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;GAE1D,MAAM,YAAY,iBAChB,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,6BAA6B,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;IACT,WAAW,QAAQ,yBAA0B,YAAY;IACzD,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,QAAQ,qBAAqB,YAAY;GAE/C,MAAM,qBAAqB,OAAO,SAAS,MAAM,YAAY;GAC7D,MAAM,yBAAyB,OAAO,SAAS,MAAM,YAAY;GAEjE,MAAM,gBAAgB,OAAO,OAAO;IAClC,GAAG;IACH,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;IACjD,cAAc;GAChB,CAAC;GAKD,MAAM,eAAe;IACnB,YAAY,cAAc;IAC1B,cAAc;GAChB;GAEA,MAAM,YACJ,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,gBAAgB,KAAA,IACtB,OAAO,YAAY,IACnB,OAAO,OAAO,IAAI;IAChB,WAAW,QAAQ,YAAa,YAAY;IAC5C,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,OAAO,QAAQ,QAAQ,YAAY;GAEzC,MAAM,SAAS,QAAQ,SAAS;GAEhC,MAAM,eAAe,SACjB,OAAO,SACL,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV,IACA,KAAA;GAEJ,MAAM,mBAAmB,SACrB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,cAAc,MACd,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;GAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SACL,cAAc,MACd,QAAQ,0BACR,QAAQ,4BACV,IACA,KAAA;GAwBN,OAAO,OAtBK,MACV,UACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,WACZ,SACA,eACA,eACA,WACA;KACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;KACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;KAC7D,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;KAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAC/D,GACA,OACF;GACF,CAAC,CAGa,CAAC,CAAC,KAChB,OAAO,YAAY,UAAU;IAC3B,MAAM,UACJ,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,mBAAmB,KAAK;IAE7D,MAAM,WACJ,QAAQ,SAAS,aACf,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,MAAM,QAAQ,MAAM,MAAM,YAAY,KACrC,2BAA2B,QAAQ,sBAAsB,KAAK;IAEpE,OAAO,WAAW,WACd,gBAAgB,SAAS,eAAe,eAAe,OAAO,IAC9D,OAAO,UAAU,KAAK;GAC5B,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ;AACF,CACF"}

package/dist/drizzle/email-target.d.mts

@@ -1,19 +1,20 @@
+import "./standalone-guard.mjs";
 import "./email-sql.mjs";
 import { EmailRegistrationAuthority } from "./email-registration.mjs";
 import "./proof-target.mjs";
 import { Context, Effect, Layer } from "effect";
 import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
 import { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from "@yielded/auth/Email";
-import "effect/unstable/sql/SqlError";
+import "effect/sql/SqlError";
 //#region src/drizzle/email-target.d.ts
-export declare const emailSignInTargetsLayer: (services: Effect.Effect<{
+export declare const emailSignInTargetsLayer: <E, R>(services: Effect.Effect<{
   readonly emailSignInTargets: EmailSignInTargets["Service"];
-}>) => Layer.Layer<EmailSignInTargets, never, never>;
-export declare const emailAddressPersistenceLayer: (services: Effect.Effect<{
+}, E, R>) => Layer.Layer<EmailSignInTargets, E, Exclude<R, import("effect/Scope").Scope>>;
+export declare const emailAddressPersistenceLayer: <E, R>(services: Effect.Effect<{
   readonly emailAddressPersistence: EmailAddressPersistence["Service"];
-}, never, LifecycleHooks>) => Layer.Layer<EmailAddressPersistence, never, LifecycleHooks>;
-export declare const emailRegistrationLayer: <Id, Registration>(tag: Context.Key<Id, EmailRegistrationAuthority<Registration>>, services: Effect.Effect<{
+}, E, R>) => Layer.Layer<EmailAddressPersistence, E, Exclude<R, import("effect/Scope").Scope>>;
+export declare const emailRegistrationLayer: <Id, Registration, E, R>(tag: Context.Key<Id, EmailRegistrationAuthority<Registration>>, services: Effect.Effect<{
   readonly registrationAuthority: EmailRegistrationAuthority<Registration>;
-}, never, LifecycleHooks>) => Layer.Layer<Id, never, LifecycleHooks>;
+}, E, R>) => Layer.Layer<Id, E, Exclude<R, import("effect/Scope").Scope>>;
 //#endregion
 //# sourceMappingURL=email-target.d.mts.map

package/dist/drizzle/email-target.mjs

@@ -1,11 +1,11 @@
 import { sqlClientStandaloneGuard } from "./standalone-guard.mjs";
-import { makeSqlEmailAddressPersistence, makeSqlEmailSignInTargets } from "./email-sql.mjs";
+import { CurrentEmailSql, makeSqlEmailAddressPersistence, makeSqlEmailSignInTargets } from "./email-sql.mjs";
 import { makeSqlEmailRegistrationAuthority } from "./email-registration.mjs";
 import { Effect, Layer } from "effect";
 import { LifecycleHooks, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
 import { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from "@yielded/auth/Email";
 //#region src/drizzle/email-target.ts
-const sqlClientEmailStandaloneGuard = (database) => sqlClientStandaloneGuard(database, () => EmailUnavailable.make({}));
+const sqlClientEmailStandaloneGuard = (service) => sqlClientStandaloneGuard(service, () => EmailUnavailable.make({}));
 const proofConfiguration = (configuration, coordinated = false) => ({
 	mode: configuration.proof.mode,
 	locking: configuration.proof.locking,
@@ -34,25 +34,25 @@ const registrationOptions = (configuration, proofMapping, coordinated = false) =
 		configuration: proofConfiguration(configuration, true)
 	}
 });
-const makeTargetEmailSignInServices = (database, mapping, configuration) => Effect.gen(function* () {
-	return { emailSignInTargets: yield* makeSqlEmailSignInTargets(database, mapping, {
+const makeTargetEmailSignInServices = (mapping, configuration) => Effect.gen(function* () {
+	return { emailSignInTargets: yield* makeSqlEmailSignInTargets(mapping, {
 		mode: configuration.mode,
 		locking: false,
 		standaloneGuard: configuration.standaloneGuard
 	}) };
 });
-const makeTargetEmailAddressServices = (database, mapping, proofMapping, configuration) => Effect.gen(function* () {
-	return { emailAddressPersistence: yield* makeSqlEmailAddressPersistence(database, mapping, addressOptions(configuration, proofMapping)) };
+const makeTargetEmailAddressServices = (mapping, proofMapping, configuration) => Effect.gen(function* () {
+	return { emailAddressPersistence: yield* makeSqlEmailAddressPersistence(mapping, addressOptions(configuration, proofMapping)) };
 });
-const makeTargetEmailRegistrationServices = (database, mapping, proofMapping, configuration) => Effect.gen(function* () {
-	return { registrationAuthority: yield* makeSqlEmailRegistrationAuthority(database, mapping, registrationOptions(configuration, proofMapping)) };
+const makeTargetEmailRegistrationServices = (mapping, proofMapping, configuration) => Effect.gen(function* () {
+	return { registrationAuthority: yield* makeSqlEmailRegistrationAuthority(mapping, registrationOptions(configuration, proofMapping)) };
 });
 const coordinateTargetEmailAddress = (database, mapping, proofMapping, configuration, owner) => Effect.gen(function* () {
 	const hooks = yield* LifecycleHooks;
 	if (yield* hasCommitScope) return yield* EmailUnavailable.make({});
 	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
 	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
-		return yield* owner(transaction, { emailAddressPersistence: yield* makeSqlEmailAddressPersistence(transaction, mapping, addressOptions(configuration, proofMapping, true)) });
+		return yield* owner(transaction, { emailAddressPersistence: yield* makeSqlEmailAddressPersistence(mapping, addressOptions(configuration, proofMapping, true)).pipe(Effect.provideService(CurrentEmailSql, transaction)) });
 	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
 });
 const coordinateTargetEmailRegistration = (database, mapping, proofMapping, configuration, owner) => Effect.gen(function* () {
@@ -60,7 +60,7 @@ const coordinateTargetEmailRegistration = (database, mapping, proofMapping, conf
 	if (yield* hasCommitScope) return yield* EmailUnavailable.make({});
 	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
 	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
-		return yield* owner(transaction, { registrationAuthority: yield* makeSqlEmailRegistrationAuthority(transaction, mapping, registrationOptions(configuration, proofMapping, true)) });
+		return yield* owner(transaction, { registrationAuthority: yield* makeSqlEmailRegistrationAuthority(mapping, registrationOptions(configuration, proofMapping, true)).pipe(Effect.provideService(CurrentEmailSql, transaction)) });
 	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
 });
 const emailSignInTargetsLayer = (services) => Layer.effect(EmailSignInTargets, Effect.map(services, (value) => value.emailSignInTargets));

package/dist/drizzle/email-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"email-target.mjs","names":[],"sources":["../../src/drizzle/email-target.ts"],"sourcesContent":["import { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\n\nimport {\n  makeSqlEmailRegistrationAuthority,\n  type EmailRegistrationAuthority,\n  type EmailRegistrationConfiguration,\n} from \"./email-registration\";\nimport {\n  makeSqlEmailAddressPersistence,\n  makeSqlEmailSignInTargets,\n  type EmailSqlConfiguration,\n  type EmailSqlDatabase,\n  type EmailSqlQuery,\n} from \"./email-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard } from \"./standalone-guard\";\n\nexport interface EmailTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, EmailUnavailable>;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type EmailCoordinatorError<E> =\n  | E\n  | EmailUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientEmailStandaloneGuard = (\n  database: unknown,\n): Effect.Effect<void, EmailUnavailable> =>\n  sqlClientStandaloneGuard(database, () => EmailUnavailable.make({}));\n\nconst proofConfiguration = (configuration: EmailTargetConfiguration, coordinated = false) => ({\n  mode: configuration.proof.mode,\n  locking: configuration.proof.locking,\n\n  standaloneGuard: Effect.void,\n  coordinated,\n  insertIfAbsent: configuration.proof.insertIfAbsent,\n});\n\nconst addressOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nconst registrationOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nexport const makeTargetEmailSignInServices = (\n  database: any,\n  mapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailSignInTargets: yield* makeSqlEmailSignInTargets(database, mapping, {\n        mode: configuration.mode,\n        locking: false,\n        standaloneGuard: configuration.standaloneGuard,\n      }),\n    };\n  });\n\nexport const makeTargetEmailAddressServices = (\n  database: any,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n        database,\n        mapping,\n        addressOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetEmailRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n        database,\n        mapping,\n        registrationOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const coordinateTargetEmailAddress = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, EmailCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n                transaction as unknown as EmailSqlDatabase,\n                mapping,\n                addressOptions(configuration, proofMapping, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetEmailRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, EmailCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n                transaction as unknown as EmailSqlDatabase,\n                mapping,\n                registrationOptions(configuration, proofMapping, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const emailSignInTargetsLayer = (\n  services: Effect.Effect<{ readonly emailSignInTargets: EmailSignInTargets[\"Service\"] }>,\n) =>\n  Layer.effect(\n    EmailSignInTargets,\n    Effect.map(services, (value) => value.emailSignInTargets),\n  );\n\nexport const emailAddressPersistenceLayer = (\n  services: Effect.Effect<\n    { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    EmailAddressPersistence,\n    Effect.map(services, (value) => value.emailAddressPersistence),\n  );\n\nexport const emailRegistrationLayer = <Id, Registration>(\n  tag: Context.Key<Id, EmailRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;AA+CA,MAAa,iCACX,aAEA,yBAAyB,gBAAgB,iBAAiB,KAAK,CAAC,CAAC,CAAC;AAEpE,MAAM,sBAAsB,eAAyC,cAAc,WAAW;CAC5F,MAAM,cAAc,MAAM;CAC1B,SAAS,cAAc,MAAM;CAE7B,iBAAiB,OAAO;CACxB;CACA,gBAAgB,cAAc,MAAM;AACtC;AAEA,MAAM,kBACJ,eACA,cACA,cAAc,WACa;CAC3B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAM,uBACJ,eACA,cACA,cAAc,WACsB;CACpC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAa,iCACX,UACA,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,oBAAoB,OAAO,0BAA0B,UAAU,SAAS;EACtE,MAAM,cAAc;EACpB,SAAS;EACT,iBAAiB,cAAc;CACjC,CAAC,EACH;AACF,CAAC;AAEH,MAAa,kCACX,UACA,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,yBAAyB,OAAO,+BAC9B,UACA,SACA,eAAe,eAAe,YAAY,CAC5C,EACF;AACF,CAAC;AAEH,MAAa,uCACX,UACA,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,kCAC5B,UACA,SACA,oBAAoB,eAAe,YAAY,CACjD,EACF;AACF,CAAC;AAEH,MAAa,gCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAAgF;CACzF,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,yBAAyB,OAAO,+BAC9B,aACA,SACA,eAAe,eAAe,cAAc,IAAI,CAClD,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,qCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAAgF;CACzF,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,kCAC5B,aACA,SACA,oBAAoB,eAAe,cAAc,IAAI,CACvD,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,2BACX,aAEA,MAAM,OACJ,oBACA,OAAO,IAAI,WAAW,UAAU,MAAM,kBAAkB,CAC1D;AAEF,MAAa,gCACX,aAMA,MAAM,OACJ,yBACA,OAAO,IAAI,WAAW,UAAU,MAAM,uBAAuB,CAC/D;AAEF,MAAa,0BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}
+{"version":3,"file":"email-target.mjs","names":[],"sources":["../../src/drizzle/email-target.ts"],"sourcesContent":["import { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport {\n  makeSqlEmailRegistrationAuthority,\n  type EmailRegistrationAuthority,\n  type EmailRegistrationConfiguration,\n} from \"./email-registration\";\nimport {\n  CurrentEmailSql,\n  makeSqlEmailAddressPersistence,\n  makeSqlEmailSignInTargets,\n  type EmailSqlConfiguration,\n  type EmailSqlDatabase,\n  type EmailSqlQuery,\n} from \"./email-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard, type TransactionService } from \"./standalone-guard\";\n\nexport interface EmailTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, EmailUnavailable>;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type EmailCoordinatorError<E> =\n  | E\n  | EmailUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientEmailStandaloneGuard = (\n  service: TransactionService | undefined,\n): Effect.Effect<void, EmailUnavailable> =>\n  sqlClientStandaloneGuard(service, () => EmailUnavailable.make({}));\n\nconst proofConfiguration = (configuration: EmailTargetConfiguration, coordinated = false) => ({\n  mode: configuration.proof.mode,\n  locking: configuration.proof.locking,\n\n  standaloneGuard: Effect.void,\n  coordinated,\n  insertIfAbsent: configuration.proof.insertIfAbsent,\n});\n\nconst addressOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nconst registrationOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nexport const makeTargetEmailSignInServices = (\n  mapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailSignInTargets: yield* makeSqlEmailSignInTargets(mapping, {\n        mode: configuration.mode,\n        locking: false,\n        standaloneGuard: configuration.standaloneGuard,\n      }),\n    };\n  });\n\nexport const makeTargetEmailAddressServices = (\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n        mapping,\n        addressOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetEmailRegistrationServices = <Registration>(\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n        mapping,\n        registrationOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const coordinateTargetEmailAddress = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, EmailCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n                mapping,\n                addressOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(CurrentEmailSql, transaction as unknown as EmailSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetEmailRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, EmailCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n                mapping,\n                registrationOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(CurrentEmailSql, transaction as unknown as EmailSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const emailSignInTargetsLayer = <E, R>(\n  services: Effect.Effect<{ readonly emailSignInTargets: EmailSignInTargets[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    EmailSignInTargets,\n    Effect.map(services, (value) => value.emailSignInTargets),\n  );\n\nexport const emailAddressPersistenceLayer = <E, R>(\n  services: Effect.Effect<\n    { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    EmailAddressPersistence,\n    Effect.map(services, (value) => value.emailAddressPersistence),\n  );\n\nexport const emailRegistrationLayer = <Id, Registration, E, R>(\n  tag: Context.Key<Id, EmailRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;AAgDA,MAAa,iCACX,YAEA,yBAAyB,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,sBAAsB,eAAyC,cAAc,WAAW;CAC5F,MAAM,cAAc,MAAM;CAC1B,SAAS,cAAc,MAAM;CAE7B,iBAAiB,OAAO;CACxB;CACA,gBAAgB,cAAc,MAAM;AACtC;AAEA,MAAM,kBACJ,eACA,cACA,cAAc,WACa;CAC3B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAM,uBACJ,eACA,cACA,cAAc,WACsB;CACpC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAa,iCACX,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,oBAAoB,OAAO,0BAA0B,SAAS;EAC5D,MAAM,cAAc;EACpB,SAAS;EACT,iBAAiB,cAAc;CACjC,CAAC,EACH;AACF,CAAC;AAEH,MAAa,kCACX,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,yBAAyB,OAAO,+BAC9B,SACA,eAAe,eAAe,YAAY,CAC5C,EACF;AACF,CAAC;AAEH,MAAa,uCACX,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,kCAC5B,SACA,oBAAoB,eAAe,YAAY,CACjD,EACF;AACF,CAAC;AAEH,MAAa,gCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAAgF;CACzF,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAmBvD,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,yBAAyB,OAAO,+BAC9B,SACA,eAAe,eAAe,cAAc,IAAI,CAClD,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,qCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAAgF;CACzF,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAmBvD,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,kCAC5B,SACA,oBAAoB,eAAe,cAAc,IAAI,CACvD,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,2BACX,aAEA,MAAM,OACJ,oBACA,OAAO,IAAI,WAAW,UAAU,MAAM,kBAAkB,CAC1D;AAEF,MAAa,gCACX,aAMA,MAAM,OACJ,yBACA,OAAO,IAAI,WAAW,UAAU,MAAM,uBAAuB,CAC/D;AAEF,MAAa,0BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/model.d.mts

@@ -1,132 +1,14 @@
 import { PersistenceMappingError, PersistenceMappingError as PersistenceMappingError$1, SubjectIdCodec, SubjectIdCodec as SubjectIdCodec$1, isMappedConstraintConflict } from "@yielded/auth-persistence/Adapter";
-import { AuthStore, ConsumeDecision } from "@yielded/auth/AuthStore";
-import { AuthStoreError } from "@yielded/auth/Errors";
 import { ExternalIdentity, ExternalIdentityMutation, LoginIdentifier, SubjectProvisioner, SubjectProvisioningInput } from "@yielded/auth/Identity";
-import { OAuthState, OAuthStateStore } from "@yielded/auth/OAuth";
-import { ConsumeChallenge, NewChallenge, NewRegistration, PendingRegistration } from "@yielded/auth/Schema";
-import { AnyColumn, InferInsertModel, InferSelectModel, Table } from "drizzle-orm";
+import { AnyColumn, InferInsertModel, Table } from "drizzle-orm";
 import { DateTime, Effect, Layer } from "effect";
-import { ChallengeConsumeDecision } from "@yielded/auth/Persistence";
-import * as SqlClient from "effect/unstable/sql/SqlClient";
 //#region src/drizzle/model.d.ts
 export type CommitMode = "interactive" | "synchronous" | "batch";
-/**
- * Ordinary error-channel consumes must own their commit. Coordinated callers
- * use the decision methods inside their outer transaction and translate only
- * after that owner commits.
- */
-export interface SqlClientTransactionDatabase {
-  readonly $client: Pick<SqlClient.SqlClient, "transactionService">;
-}
-export declare const requireStandaloneConsume: (database: SqlClientTransactionDatabase) => Effect.Effect<void, AuthStoreError>;
 export interface InstantCodec<NativeInstant> {
   readonly encode: (instant: DateTime.Utc) => NativeInstant;
   readonly decode: (native: NativeInstant) => Effect.Effect<DateTime.Utc, PersistenceMappingError>;
 }
-export interface RequiredAuthStoreConstraints {
-  readonly series: "unique(namespace,value,purpose)";
-  readonly challengeDigest: "unique(tokenDigest)";
-  readonly registrationDigest: "unique(tokenDigest)";
-}
-export interface RequiredOAuthStateConstraints {
-  readonly oauthStateDigest: "unique(stateDigest)";
-}
-export interface RequiredAuthConstraints extends RequiredAuthStoreConstraints, RequiredOAuthStateConstraints {}
-export declare const requiredAuthConstraints: RequiredAuthConstraints;
-export declare const requiredAuthStoreConstraints: RequiredAuthStoreConstraints;
-export declare const requiredOAuthStateConstraints: RequiredOAuthStateConstraints;
 type ColumnKey<T extends Table> = Extract<keyof T["_"]["columns"], string>;
-export interface ChallengeRecord {
-  readonly challenge: NewChallenge;
-  readonly namespace: string;
-  readonly failedAttempts: number;
-  readonly consumed: boolean;
-}
-export interface ChallengeColumns<T extends Table> {
-  readonly challengeId: ColumnKey<T>;
-  readonly tokenDigest: ColumnKey<T>;
-  readonly namespace: ColumnKey<T>;
-  readonly value: ColumnKey<T>;
-  readonly purpose: ColumnKey<T>;
-  readonly otpKeyId: ColumnKey<T>;
-  readonly otpDigest: ColumnKey<T>;
-  readonly issuedAt: ColumnKey<T>;
-  readonly expiresAt: ColumnKey<T>;
-  readonly attemptLimit: ColumnKey<T>;
-  readonly failedAttempts: ColumnKey<T>;
-  readonly consumed: ColumnKey<T>;
-}
-/**
- * Inputs are immutable server-created issuances. Replacements must advance
- * issuedAt; equal or older issuances fail even after consumption or expiry.
- * Instant encoding must preserve this ordering. Retain the series row as an
- * issuance watermark until every previously accepted issuance has expired;
- * current-row expiry alone is insufficient if historical lifetimes were longer.
- */
-export interface ChallengeTableMapping<T extends Table> {
-  readonly table: T;
-  readonly columns: ChallengeColumns<T>;
-  readonly identifierNamespace: string;
-  readonly encodeInstant: (instant: DateTime.Utc) => unknown;
-  readonly encodeInsert: (input: NewChallenge, state: {
-    readonly namespace: string;
-    readonly failedAttempts: number;
-    readonly consumed: false;
-  }) => InferInsertModel<T>;
-  readonly encodeUpdate: (input: NewChallenge, state: {
-    readonly namespace: string;
-    readonly failedAttempts: unknown;
-    readonly consumed: false;
-  }) => Readonly<Record<string, unknown>>;
-  readonly decode: (row: InferSelectModel<T>) => Effect.Effect<ChallengeRecord, PersistenceMappingError>;
-}
-export interface RegistrationRecord {
-  readonly registration: PendingRegistration;
-  readonly consumed: boolean;
-}
-export interface RegistrationColumns<T extends Table> {
-  readonly registrationId: ColumnKey<T>;
-  readonly tokenDigest: ColumnKey<T>;
-  readonly expiresAt: ColumnKey<T>;
-  readonly consumed: ColumnKey<T>;
-}
-export interface RegistrationTableMapping<T extends Table> {
-  readonly table: T;
-  readonly columns: RegistrationColumns<T>;
-  readonly encodeInstant: (instant: DateTime.Utc) => unknown;
-  readonly encodeInsert: (input: NewRegistration, consumed: false) => InferInsertModel<T>;
-  readonly decode: (row: InferSelectModel<T>) => Effect.Effect<RegistrationRecord, PersistenceMappingError>;
-}
-export interface OAuthStateColumns<T extends Table> {
-  readonly stateDigest: ColumnKey<T>;
-  readonly expiresAt: ColumnKey<T>;
-  readonly consumed: ColumnKey<T>;
-}
-export interface OAuthStateTableMapping<T extends Table> {
-  readonly table: T;
-  readonly columns: OAuthStateColumns<T>;
-  readonly encodeInstant: (instant: DateTime.Utc) => unknown;
-  readonly encodeInsert: (state: OAuthState, consumed: false) => InferInsertModel<T>;
-  readonly decode: (row: InferSelectModel<T>) => Effect.Effect<{
-    readonly state: OAuthState;
-    readonly consumed: boolean;
-  }, PersistenceMappingError>;
-}
-export interface AuthStoreTables<Challenge extends Table, Registration extends Table> {
-  readonly constraints: RequiredAuthStoreConstraints;
-  readonly challenge: ChallengeTableMapping<Challenge>;
-  readonly registration: RegistrationTableMapping<Registration>;
-}
-export interface OAuthStateTables<State extends Table> {
-  readonly constraints: RequiredOAuthStateConstraints;
-  readonly oauthState: OAuthStateTableMapping<State>;
-}
-export interface AuthTables<Challenge extends Table, Registration extends Table, State extends Table> {
-  readonly constraints: RequiredAuthConstraints;
-  readonly challenge: ChallengeTableMapping<Challenge>;
-  readonly registration: RegistrationTableMapping<Registration>;
-  readonly oauthState: OAuthStateTableMapping<State>;
-}
 export interface RequiredIdentityConstraints {
   readonly identifier: "unique(namespace,value)";
   readonly externalIdentity: "unique(provider,issuer,subject)";
@@ -229,17 +111,11 @@ export declare const provisioningFingerprint: (input: SubjectProvisioningInput)
  */
 export declare const column: <T extends Table>(table: T, key: ColumnKey<T>) => AnyColumn;
 export declare const updateValues: <T extends Table>(entries: ReadonlyArray<readonly [ColumnKey<T>, unknown]>) => Partial<InferInsertModel<T>>;
-export type ChallengeInput = ConsumeChallenge;
-/** Acquire an application database in Effect and expose the auth stores as one layer. */
-export declare const authServicesLayer: <E, R>(acquire: Effect.Effect<{
-  readonly authStore: AuthStore["Service"];
-  readonly oauthStateStore: OAuthStateStore["Service"];
-}, E, R>) => Layer.Layer<AuthStore | OAuthStateStore, E, Exclude<R, import("effect/Scope").Scope>>;
 /** Acquire an application database in Effect and expose the identity services as one layer. */
 export declare const identityServicesLayer: <E, R>(acquire: Effect.Effect<{
   readonly subjectProvisioner: SubjectProvisioner["Service"];
   readonly externalIdentityMutation: ExternalIdentityMutation["Service"];
 }, E, R>) => Layer.Layer<ExternalIdentityMutation | SubjectProvisioner, E, Exclude<R, import("effect/Scope").Scope>>;
 //#endregion
-export { type ChallengeConsumeDecision, type ConsumeDecision, type PersistenceMappingError$1 as PersistenceMappingError, type SubjectIdCodec$1 as SubjectIdCodec, isMappedConstraintConflict };
+export { type PersistenceMappingError$1 as PersistenceMappingError, type SubjectIdCodec$1 as SubjectIdCodec, isMappedConstraintConflict };
 //# sourceMappingURL=model.d.mts.map

package/dist/drizzle/model.mjs

@@ -1,25 +1,8 @@
-import { PersistenceMappingError as PersistenceMappingError$1, isMappedConstraintConflict, requireStandalone } from "@yielded/auth-persistence/Adapter";
-import { AuthStore } from "@yielded/auth/AuthStore";
-import { AuthStoreError } from "@yielded/auth/Errors";
+import { PersistenceMappingError as PersistenceMappingError$1, isMappedConstraintConflict } from "@yielded/auth-persistence/Adapter";
 import { ExternalIdentityMutation, SubjectProvisioner } from "@yielded/auth/Identity";
-import { OAuthStateStore } from "@yielded/auth/OAuth";
-import "@yielded/auth/Schema";
 import { getTableColumns } from "drizzle-orm";
 import { Context, DateTime, Effect, Layer } from "effect";
 //#region src/drizzle/model.ts
-const requireStandaloneConsume = (database) => requireStandalone(() => AuthStoreError.make({ message: "Use the decision consume API inside an outer database transaction" }), database.$client);
-const requiredAuthConstraints = {
-	series: "unique(namespace,value,purpose)",
-	challengeDigest: "unique(tokenDigest)",
-	registrationDigest: "unique(tokenDigest)",
-	oauthStateDigest: "unique(stateDigest)"
-};
-const requiredAuthStoreConstraints = {
-	series: "unique(namespace,value,purpose)",
-	challengeDigest: "unique(tokenDigest)",
-	registrationDigest: "unique(tokenDigest)"
-};
-const requiredOAuthStateConstraints = { oauthStateDigest: "unique(stateDigest)" };
 const requiredIdentityConstraints = {
 	identifier: "unique(namespace,value)",
 	externalIdentity: "unique(provider,issuer,subject)",
@@ -45,11 +28,9 @@ const provisioningFingerprint = (input) => JSON.stringify(input.identifier === v
 */
 const column = (table, key) => getTableColumns(table)[key];
 const updateValues = (entries) => Object.fromEntries(entries);
-/** Acquire an application database in Effect and expose the auth stores as one layer. */
-const authServicesLayer = (acquire) => Layer.effectContext(Effect.map(acquire, ({ authStore, oauthStateStore }) => Context.make(AuthStore, authStore).pipe(Context.add(OAuthStateStore, oauthStateStore))));
 /** Acquire an application database in Effect and expose the identity services as one layer. */
 const identityServicesLayer = (acquire) => Layer.effectContext(Effect.map(acquire, ({ subjectProvisioner, externalIdentityMutation }) => Context.make(SubjectProvisioner, subjectProvisioner).pipe(Context.add(ExternalIdentityMutation, externalIdentityMutation))));
 //#endregion
-export { PersistenceMappingError$1 as PersistenceMappingError, authServicesLayer, column, identityServicesLayer, isMappedConstraintConflict, provisioningFingerprint, requireStandaloneConsume, requiredAuthConstraints, requiredAuthStoreConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthStateConstraints, requiredSubjectProvisioningConstraints, updateValues };
+export { PersistenceMappingError$1 as PersistenceMappingError, column, identityServicesLayer, isMappedConstraintConflict, provisioningFingerprint, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredSubjectProvisioningConstraints, updateValues };
 
 //# sourceMappingURL=model.mjs.map