@yielded/auth-persistence-drizzle 0.1.0-beta.14 → 0.1.0-beta.15

package/dist/drizzle/d1-totp.d.mts

@@ -2,6 +2,7 @@ import { D1TotpMapping, TotpMapping, TotpMappingSource, TotpPersistenceServices
 import { Database as Database$1 } from "./d1-database.mjs";
 import { D1BatchStatements } from "./D1BatchStatements.mjs";
 import { TotpCoordinatorError } from "./totp-target.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { AnyRelations } from "drizzle-orm";
 import { Effect } from "effect";
 import { LifecycleHooks } from "@yielded/auth/Hooks";
@@ -14,7 +15,7 @@ type Database = EffectSQLiteD1Database<AnyRelations> & {
   readonly $client: D1Client;
 };
 type Table$1 = AnySQLiteTable;
-export declare const makeTotpPersistenceServices: <S extends Table$1, F extends Table$1, C extends Table$1, N, RSetup = never>(mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>) => Effect.Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, Database$1 | LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>;
+export declare const makeTotpPersistenceServices: <S extends Table$1, F extends Table$1, C extends Table$1, N, RSetup = never>(mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>) => Effect.Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, Database$1 | LifecycleHooks | Exclude<RSetup, NativeDatabase>>;
 export declare const coordinateTotpPersistence: <D extends Database, S extends Table$1, F extends Table$1, C extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>;
 }, body: Effect.Effect<A, E, R>) => Effect.Effect<A, TotpCoordinatorError<E> | DatabaseError, Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements>;

package/dist/drizzle/d1-totp.mjs

@@ -1,7 +1,9 @@
 import { Database } from "./d1-database.mjs";
 import { D1BatchStatements } from "./D1BatchStatements.mjs";
 import { makeD1Owner } from "./d1-planning.mjs";
+import { nativeDatabase } from "./native-database.mjs";
 import { coordinateTargetTotp, makeTotpTarget } from "./totp-target.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect } from "effect";
 import { TotpPersistence, TotpUnavailable } from "@yielded/auth/Totp";
 //#region src/drizzle/d1-totp.ts
@@ -12,7 +14,7 @@ const configuration = {
 	standaloneGuard: () => Effect.void
 };
 const { makeTotpPersistenceServices } = makeTotpTarget(Database, configuration);
-const coordinateTotpPersistence = (acquire, options, body) => Effect.flatMap(acquire, (database) => coordinateTargetTotp(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+const coordinateTotpPersistence = (acquire, options, body) => Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetTotp(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
 	const original = services.totpPersistence;
 	const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
 	const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
@@ -21,7 +23,7 @@ const coordinateTotpPersistence = (acquire, options, body) => Effect.flatMap(acq
 		mutate: (input, prepare) => owner.run(original.mutate(input, prepare))
 	}).pipe(Context.add(D1BatchStatements, owner.collector));
 	return yield* owner.close(Effect.provideContext(body, provided));
-})));
+})).pipe(Effect.provideService(NativeDatabase, database)));
 //#endregion
 export { coordinateTotpPersistence, makeTotpPersistenceServices };
 

package/dist/drizzle/d1-totp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"d1-totp.mjs","names":["DatabaseService"],"sources":["../../src/drizzle/d1-totp.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { TotpUnavailable, TotpPersistence } from \"@yielded/auth/Totp\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Context, Effect } from \"effect\";\n\nimport { Database as DatabaseService } from \"./d1-database\";\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport type { D1TotpMapping, TotpMapping, TotpMappingSource } from \"./totp-model\";\nimport { coordinateTargetTotp, makeTotpTarget, type TotpCoordinatorError } from \"./totp-target\";\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype Table = AnySQLiteTable;\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\n/** Reads use a primary D1 session; observations and expiry are asserted in the same batch. */\nconst target = makeTotpTarget<DatabaseService, Database, Table, D1TotpMapping>(\n  DatabaseService,\n  configuration,\n);\n\nexport const { makeTotpPersistenceServices } = target;\n\nexport const coordinateTotpPersistence = <\n  D extends Database,\n  S extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup> },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  TotpCoordinatorError<E> | DatabaseError,\n  Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements\n> =>\n  Effect.flatMap(acquire, (database) =>\n    coordinateTargetTotp(\n      database,\n      options.mapping,\n      configuration,\n      (_transaction, services, append) =>\n        Effect.gen(function* () {\n          const original = services.totpPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: TotpPersistence[\"Service\"] = {\n            snapshot: (input) => owner.run(original.snapshot(input)),\n            mutate: (input, prepare) => owner.run(original.mutate(input, prepare)),\n          };\n\n          const provided = Context.make(TotpPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n    ),\n  );\n"],"mappings":";;;;;;;AAgBA,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAQA,MAAa,EAAE,gCALA,eACbA,UACA,aAG6C;AAE/C,MAAa,6BAaX,SACA,SACA,SAMA,OAAO,QAAQ,UAAU,aACvB,qBACE,UACA,QAAQ,SACR,gBACC,cAAc,UAAU,WACvB,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,SAAS;CAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;CAED,MAAM,QAAQ,OAAO,YAAY,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KACzD,OAAO,eAAe,mBAAmB,eAAe,CAC1D;CAOA,MAAM,WAAW,QAAQ,KAAK,iBAAiB;EAJ7C,WAAW,UAAU,MAAM,IAAI,SAAS,SAAS,KAAK,CAAC;EACvD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;CAGlB,CAAC,CAAC,CAAC,KACtD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;CAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;AACjE,CAAC,CACL,CACF"}
+{"version":3,"file":"d1-totp.mjs","names":["DatabaseService"],"sources":["../../src/drizzle/d1-totp.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { TotpUnavailable, TotpPersistence } from \"@yielded/auth/Totp\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Context, Effect } from \"effect\";\n\nimport { Database as DatabaseService } from \"./d1-database\";\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport { nativeDatabase } from \"./native-database\";\nimport type { D1TotpMapping, TotpMapping, TotpMappingSource } from \"./totp-model\";\nimport { coordinateTargetTotp, makeTotpTarget, type TotpCoordinatorError } from \"./totp-target\";\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype Table = AnySQLiteTable;\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\n/** Reads use a primary D1 session; observations and expiry are asserted in the same batch. */\nconst target = makeTotpTarget<DatabaseService, Database, Table, D1TotpMapping>(\n  DatabaseService,\n  configuration,\n);\n\nexport const { makeTotpPersistenceServices } = target;\n\nexport const coordinateTotpPersistence = <\n  D extends Database,\n  S extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup> },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  TotpCoordinatorError<E> | DatabaseError,\n  Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements\n> =>\n  Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetTotp(\n      database,\n      options.mapping,\n      configuration,\n      (_transaction, services, append) =>\n        Effect.gen(function* () {\n          const original = services.totpPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: TotpPersistence[\"Service\"] = {\n            snapshot: (input) => owner.run(original.snapshot(input)),\n            mutate: (input, prepare) => owner.run(original.mutate(input, prepare)),\n          };\n\n          const provided = Context.make(TotpPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n"],"mappings":";;;;;;;;;AAkBA,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAQA,MAAa,EAAE,gCALA,eACbA,UACA,aAG6C;AAE/C,MAAa,6BAaX,SACA,SACA,SAMA,OAAO,QAAQ,eAAe,OAAO,IAAI,aACvC,qBACE,UACA,QAAQ,SACR,gBACC,cAAc,UAAU,WACvB,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,SAAS;CAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;CAED,MAAM,QAAQ,OAAO,YAAY,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KACzD,OAAO,eAAe,mBAAmB,eAAe,CAC1D;CAOA,MAAM,WAAW,QAAQ,KAAK,iBAAiB;EAJ7C,WAAW,UAAU,MAAM,IAAI,SAAS,SAAS,KAAK,CAAC;EACvD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;CAGlB,CAAC,CAAC,CAAC,KACtD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;CAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;AACjE,CAAC,CACL,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD"}

package/dist/drizzle/email-registration.d.mts

@@ -1,9 +1,13 @@
+import "./table-model.mjs";
 import "./email-model.mjs";
+import "./model.mjs";
 import "./email-sql.mjs";
 import "./proof-sql.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { LoginIdentifier } from "@yielded/auth/Identity";
-import { Effect } from "effect";
+import { Effect, Schema } from "effect";
 import { LifecycleHooks, PreparedCommit } from "@yielded/auth/Hooks";
+import { SecurityRevision } from "@yielded/auth/Sessions";
 import { EmailCommandId, EmailRegistrationDecision, EmailUnavailable, PrepareEmailCommit } from "@yielded/auth/Email";
 import { ProofCompletionPlan } from "@yielded/auth/Proofs";
 import { TokenDigest } from "@yielded/auth/Schema";

package/dist/drizzle/email-registration.mjs

@@ -1,10 +1,12 @@
 import { requiredEmailRegistrationConstraints } from "./email-model.mjs";
-import { PersistenceMappingError, column, isMappedConstraintConflict } from "./model.mjs";
+import { PersistenceMappingError, column, isMappedConstraintConflict, updateValues } from "./model.mjs";
+import { validateDrizzleStorage } from "./storage-validation.mjs";
 import { CurrentProofSql, completeProofPlanIn } from "./proof-sql.mjs";
 import { CurrentEmailSql } from "./email-sql.mjs";
 import { and, eq, isNull } from "drizzle-orm";
 import { Cause, DateTime, Effect, Schema } from "effect";
 import { CurrentCommitJournal, HookConfigurationError, LifecycleHooks, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
+import { SecurityRevision } from "@yielded/auth/Sessions";
 import { EmailUnavailable } from "@yielded/auth/Email";
 import { reportPersistenceFailure } from "@yielded/auth/Persistence";
 import { ProofUnavailable } from "@yielded/auth/Proofs";
@@ -42,6 +44,29 @@ const registrationRows = Effect.fn("Drizzle.registrationRows")(function* (mappin
 	const command = column(mapping.registration.table, mapping.registration.commandId);
 	return yield* selectRows(database.select().from(mapping.registration.table).where(and(eq(module, moduleId), eq(command, commandId))).limit(1), locking);
 });
+/** Discover before locking, then lock subject before identifier like the other
+* identity owners. A changed discovery is rejected rather than locking a second
+* subject in the opposite order. Proof authority separately enforces the host's
+* active/unverified eligibility policy in the same physical owner. */
+const readEmailRegistrationTarget = Effect.fnUntraced(function* (mapping, identifier, locking) {
+	const database = yield* CurrentEmailSql;
+	const i = mapping.identifier;
+	const s = mapping.subject;
+	const lookup = () => database.select().from(i.table).where(and(eq(column(i.table, i.namespace), identifier.namespace), eq(column(i.table, i.value), identifier.value))).limit(1);
+	const discovered = (yield* lookup())[0];
+	if (discovered === void 0) return { _tag: "Absent" };
+	if (discovered[i.verifiedAt] !== null) return { _tag: "Rejected" };
+	const nativeSubjectId = discovered[i.subjectId];
+	const subject = (yield* selectRows(database.select().from(s.table).where(eq(column(s.table, s.id), nativeSubjectId)).limit(1), locking))[0];
+	const current = (yield* selectRows(lookup(), locking))[0];
+	if (subject === void 0 || current === void 0 || current[i.verifiedAt] !== null || !mapping.subjectId.equals(current[i.subjectId], nativeSubjectId) || current[i.bindingRevision] !== discovered[i.bindingRevision]) return { _tag: "Rejected" };
+	return {
+		_tag: "Reserved",
+		nativeSubjectId,
+		bindingRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(current[i.bindingRevision]),
+		securityRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(subject[s.securityRevision])
+	};
+});
 const owned = (database, configuration, body) => {
 	const run = coordinateCommit(() => database.transaction((transaction) => body.pipe(Effect.provideService(CurrentEmailSql, transaction), Effect.provideService(CurrentProofSql, transaction))), { mode: configuration.mode }).pipe(Effect.map((result) => result.value));
 	return configuration.coordinated !== true ? Effect.gen(function* () {
@@ -65,6 +90,9 @@ const registerIn = Effect.fn("DrizzleEmailRegistration.registerIn")(function* (m
 	if (existing !== void 0) return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);
 	if (!completionMatches(mapping, input)) return prepare({ _tag: "Rejected" }, journal);
 	if (!inspected.eligible || inspected.fingerprint !== input.fingerprint) return prepare({ _tag: "Rejected" }, journal);
+	const target = mapping.mode === "atomic" ? yield* readEmailRegistrationTarget(mapping, input.identifier, configuration.locking) : void 0;
+	if (target?._tag === "Rejected") return prepare({ _tag: "Rejected" }, journal);
+	if (target?._tag === "Reserved" && (allocated.displacedSecurityRevision === void 0 || allocated.displacedSecurityRevision === target.securityRevision || allocated.identifierRevision === target.bindingRevision)) return yield* unavailable();
 	const now = yield* nowMillis;
 	const intent = {
 		moduleId: input.moduleId,
@@ -105,7 +133,16 @@ const registerIn = Effect.fn("DrizzleEmailRegistration.registerIn")(function* (m
 				nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);
 			} else yield* subjectInsert;
 			if (nativeSubjectId === void 0) return false;
-			yield* transaction.insert(mapping.identifier.table).values(mapping.identifier.encodeVerifiedInsert({
+			if (target?._tag === "Reserved") {
+				const i = mapping.identifier;
+				const s = mapping.subject;
+				yield* transaction.update(i.table).set(updateValues([
+					[i.subjectId, nativeSubjectId],
+					[i.verifiedAt, mapping.encodeInstant(now)],
+					[i.bindingRevision, allocated.identifierRevision]
+				])).where(and(eq(column(i.table, i.namespace), input.identifier.namespace), eq(column(i.table, i.value), input.identifier.value), eq(column(i.table, i.subjectId), target.nativeSubjectId), eq(column(i.table, i.bindingRevision), target.bindingRevision), isNull(column(i.table, i.verifiedAt))));
+				yield* transaction.update(s.table).set(updateValues([[s.securityRevision, allocated.displacedSecurityRevision]])).where(and(eq(column(s.table, s.id), target.nativeSubjectId), eq(column(s.table, s.securityRevision), target.securityRevision)));
+			} else yield* transaction.insert(mapping.identifier.table).values(mapping.identifier.encodeVerifiedInsert({
 				identifier: input.identifier,
 				subjectId: nativeSubjectId,
 				verifiedAtMillis: now,
@@ -156,7 +193,8 @@ const registerIn = Effect.fn("DrizzleEmailRegistration.registerIn")(function* (m
 			const identifier = (yield* selectRows(transaction.select().from(mapping.identifier.table).where(and(eq(identifierNamespace, input.identifier.namespace), eq(identifierValue, input.identifier.value), eq(identifierSubject, nativeSubjectId), eq(identifierVerifiedAt, mapping.encodeInstant(now)))).limit(1), false))[0];
 			const credential = (yield* selectRows(transaction.select().from(mapping.credential.table).where(and(eq(credentialModule, input.moduleId), eq(credentialId, allocated.credentialId), eq(credentialSubject, nativeSubjectId), eq(credentialNamespace, input.identifier.namespace), eq(credentialValue, input.identifier.value))).limit(1), false))[0];
 			const authority = (yield* selectRows(transaction.select().from(mapping.authorityCredential.table).where(and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId))).limit(1), false))[0];
-			if (subject === void 0 || !mapping.subject.isActiveStatus(subject[mapping.subject.status]) || subject[mapping.subject.securityRevision] !== allocated.securityRevision || identifier === void 0 || identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision || !mapping.identifier.isCurrent(identifier) || credential === void 0 || credential[mapping.credential.credentialRevision] !== allocated.credentialRevision || !mapping.credential.isActiveStatus(credential[mapping.credential.status]) || authority === void 0 || authority[mapping.authorityCredential.revision] !== allocated.credentialRevision || !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])) return false;
+			const displaced = target?._tag === "Reserved" ? (yield* transaction.select().from(mapping.subject.table).where(and(eq(subjectId, target.nativeSubjectId), eq(column(mapping.subject.table, mapping.subject.securityRevision), allocated.displacedSecurityRevision))).limit(1))[0] : void 0;
+			if (target?._tag === "Reserved" && displaced === void 0 || subject === void 0 || !mapping.subject.isActiveStatus(subject[mapping.subject.status]) || subject[mapping.subject.securityRevision] !== allocated.securityRevision || identifier === void 0 || identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision || !mapping.identifier.isCurrent(identifier) || credential === void 0 || credential[mapping.credential.credentialRevision] !== allocated.credentialRevision || !mapping.credential.isActiveStatus(credential[mapping.credential.status]) || authority === void 0 || authority[mapping.authorityCredential.revision] !== allocated.credentialRevision || !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])) return false;
 		}
 		return stored !== void 0 && exactRegistration.length === 1 && stored[mapping.registration.fingerprint] === input.fingerprint && (mapping.mode === "pending" || nativeSubjectId !== void 0 && stored[mapping.registration.subjectId] !== null && mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId));
 	});
@@ -177,6 +215,10 @@ const prepareConflict = Effect.fn("Drizzle.prepareConflict")(function* (mapping,
 });
 const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAuthority")(function* (mapping, configuration) {
 	const database = yield* CurrentEmailSql;
+	if (!configuration.coordinated) yield* validateDrizzleStorage({
+		...mapping,
+		proof: configuration.proof.mapping
+	}).pipe(Effect.mapError(unavailable));
 	const hooks = yield* LifecycleHooks;
 	return {
 		inspect: (input) => mapping.inspect(input).pipe(Effect.provideService(CurrentEmailSql, database), Effect.provideService(LifecycleHooks, hooks), translateFailure),
@@ -210,6 +252,7 @@ const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAut
 			const atomic = mapping.mode === "atomic";
 			const credentialId = atomic ? yield* allocate(configuration.mode, mapping.allocateCredentialId, mapping.allocateCredentialIdSync) : void 0;
 			const securityRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
+			const displacedSecurityRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
 			const identifierRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
 			const credentialRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
 			const nativeSubjectId = atomic && mapping.provisioning.idMode !== "generated" ? yield* allocate(configuration.mode, mapping.provisioning.allocateSubjectId, mapping.provisioning.allocateSubjectIdSync) : void 0;
@@ -218,6 +261,7 @@ const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAut
 				return yield* registerIn(mapping, configuration, capturedInput, inspected, {
 					...credentialId === void 0 ? {} : { credentialId },
 					...securityRevision === void 0 ? {} : { securityRevision },
+					...displacedSecurityRevision === void 0 ? {} : { displacedSecurityRevision },
 					...identifierRevision === void 0 ? {} : { identifierRevision },
 					...credentialRevision === void 0 ? {} : { credentialRevision },
 					...nativeSubjectId === void 0 ? {} : { nativeSubjectId },
@@ -232,6 +276,6 @@ const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAut
 	};
 });
 //#endregion
-export { makeSqlEmailRegistrationAuthority };
+export { makeSqlEmailRegistrationAuthority, readEmailRegistrationTarget };
 
 //# sourceMappingURL=email-registration.mjs.map

package/dist/drizzle/email-registration.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"email-registration.mjs","names":[],"sources":["../../src/drizzle/email-registration.ts"],"sourcesContent":["import {\n  type PrepareEmailCommit,\n  type EmailCommandId,\n  type EmailRegistrationDecision,\n  EmailUnavailable,\n} from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n  HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport { type ProofCompletionPlan, ProofUnavailable } from \"@yielded/auth/Proofs\";\nimport type { TokenDigest } from \"@yielded/auth/Schema\";\nimport type { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- registration plans bridge consumer-owned Drizzle rows. */\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { Cause, DateTime, Effect, Schema } from \"effect\";\n\nimport {\n  type AnyEmailRegistrationMapping,\n  requiredEmailRegistrationConstraints,\n} from \"./email-model\";\nimport { CurrentEmailSql, type EmailSqlDatabase, type EmailSqlQuery } from \"./email-sql\";\nimport { column, isMappedConstraintConflict, PersistenceMappingError } from \"./model\";\nimport {\n  CurrentProofSql,\n  completeProofPlanIn,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n} from \"./proof-sql\";\n\ntype Mapping<Registration> = AnyEmailRegistrationMapping<Registration>;\nconst unavailable = () => EmailUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(EmailUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly completion: ProofCompletionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\nexport interface EmailRegistrationConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinated?: boolean;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\nconst selectRows = (query: EmailSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst validConstraints = <Registration>(mapping: Mapping<Registration>) => {\n  if (\n    mapping.constraints.request !== requiredEmailRegistrationConstraints.request ||\n    mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference\n  )\n    return false;\n  if (mapping.mode === \"pending\") return true;\n\n  return Object.entries(requiredEmailRegistrationConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n  );\n};\n\nconst allocate = <A>(\n  mode: EmailRegistrationConfiguration[\"mode\"],\n  asynchronous: Effect.Effect<A, PersistenceMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n  mapping: Mapping<Registration>,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n\n  const module = column(mapping.registration.table, mapping.registration.moduleId);\n  const command = column(mapping.registration.table, mapping.registration.commandId);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.registration.table)\n      .where(and(eq(module, moduleId), eq(command, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst owned = <A, E, R>(\n  database: EmailSqlDatabase,\n  configuration: EmailRegistrationConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentEmailSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst completionMatches = <Registration>(\n  mapping: Mapping<Registration>,\n  input: {\n    readonly moduleId: string;\n    readonly identifier: LoginIdentifier;\n    readonly completion: ProofCompletionPlan;\n  },\n) => {\n  const completion = input.completion.input;\n\n  return (\n    completion.moduleId === `${input.moduleId}/registration` &&\n    completion.purpose === \"email-code-registration\" &&\n    completion.binding._tag === \"Identifier\" &&\n    sameIdentifier(completion.binding.identifier, input.identifier) &&\n    validConstraints(mapping)\n  );\n};\n\nconst prepareReplay = Effect.fn(\"DrizzleEmailRegistration.prepareReplay\")(function* <\n  Registration,\n  A,\n>(\n  mapping: Mapping<Registration>,\n  row: any,\n  fingerprint: TokenDigest,\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  if (row[mapping.registration.fingerprint] !== fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  return prepare(yield* mapping.registration.decodeReplay(row), journal);\n});\n\nconst registerIn = Effect.fn(\"DrizzleEmailRegistration.registerIn\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n    readonly fingerprint: TokenDigest;\n    readonly completion: ProofCompletionPlan;\n  },\n  inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n  allocated: {\n    readonly credentialId?: string;\n    readonly securityRevision?: SecurityRevision;\n    readonly identifierRevision?: SecurityRevision;\n    readonly credentialRevision?: SecurityRevision;\n    readonly nativeSubjectId?: unknown;\n    readonly pendingReference?: string;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const existing = (yield* registrationRows(\n    mapping,\n    input.moduleId,\n    input.commandId,\n    configuration.locking,\n  ))[0];\n\n  if (existing !== undefined)\n    return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);\n  if (!completionMatches(mapping, input)) return prepare({ _tag: \"Rejected\" }, journal);\n  if (!inspected.eligible || inspected.fingerprint !== input.fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n  const now = yield* nowMillis;\n\n  const intent = {\n    moduleId: input.moduleId,\n    commandId: input.commandId,\n    identifier: Object.freeze({ ...input.identifier }),\n    registration: input.registration,\n    fingerprint: input.fingerprint,\n    completion: Object.freeze({\n      moduleId: input.completion.input.moduleId,\n      purpose: input.completion.input.purpose,\n      continuationId: input.completion.input.continuationId,\n      binding: input.completion.input.binding,\n    }),\n  };\n\n  let decision: EmailRegistrationDecision | undefined;\n  let nativeSubjectId = allocated.nativeSubjectId;\n\n  const protectedMutation = Effect.gen(function* () {\n    const transaction = yield* CurrentEmailSql;\n\n    if (mapping.mode === \"pending\") {\n      if (allocated.pendingReference === undefined) return false;\n      decision = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"pending\",\n          pendingReference: allocated.pendingReference,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n    } else {\n      if (\n        allocated.credentialId === undefined ||\n        allocated.securityRevision === undefined ||\n        allocated.identifierRevision === undefined ||\n        allocated.credentialRevision === undefined\n      )\n        return false;\n\n      const subjectInsert = transaction.insert(mapping.subject.table).values(\n        mapping.provisioning.encodeSubjectInsert(intent, {\n          nativeSubjectId,\n          securityRevision: allocated.securityRevision,\n        }),\n      );\n\n      if (mapping.provisioning.idMode === \"generated\") {\n        const rows = yield* configuration.generatedSubjectRows(subjectInsert);\n\n        nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);\n      } else yield* subjectInsert;\n      if (nativeSubjectId === undefined) return false;\n      yield* transaction.insert(mapping.identifier.table).values(\n        mapping.identifier.encodeVerifiedInsert({\n          identifier: input.identifier,\n          subjectId: nativeSubjectId,\n          verifiedAtMillis: now,\n          bindingRevision: allocated.identifierRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.credential.table).values(\n        mapping.credential.encodeVerifiedInsert({\n          moduleId: input.moduleId,\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          identifier: input.identifier,\n          credentialRevision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.authorityCredential.table).values(\n        mapping.authorityCredential.encodeInsert({\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          revision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"registered\",\n          nativeSubjectId,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n      decision = { _tag: \"Registered\" };\n    }\n    const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];\n    const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n    const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n    const registrationFingerprint = column(\n      mapping.registration.table,\n      mapping.registration.fingerprint,\n    );\n\n    const registrationState = column(mapping.registration.table, mapping.registration.state);\n    const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);\n\n    const registrationReference = column(\n      mapping.registration.table,\n      mapping.registration.pendingReference,\n    );\n\n    const registrationRetention = column(\n      mapping.registration.table,\n      mapping.registration.retentionUntil,\n    );\n\n    const exactRegistration = yield* selectRows(\n      transaction\n        .select()\n        .from(mapping.registration.table)\n        .where(\n          and(\n            eq(registrationModule, input.moduleId),\n            eq(registrationCommand, input.commandId),\n            eq(registrationFingerprint, input.fingerprint),\n            eq(registrationState, mapping.mode === \"pending\" ? \"pending\" : \"registered\"),\n            eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)),\n            mapping.mode === \"pending\"\n              ? and(\n                  eq(registrationReference, allocated.pendingReference!),\n                  isNull(registrationSubject),\n                )\n              : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)),\n          ),\n        )\n        .limit(1),\n      false,\n    );\n\n    if (mapping.mode === \"atomic\" && nativeSubjectId !== undefined) {\n      const subjectId = column(mapping.subject.table, mapping.subject.id);\n      const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n      const identifierValue = column(mapping.identifier.table, mapping.identifier.value);\n      const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n      const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n      const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);\n      const credentialId = column(mapping.credential.table, mapping.credential.credentialId);\n      const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);\n\n      const credentialNamespace = column(\n        mapping.credential.table,\n        mapping.credential.identifierNamespace,\n      );\n\n      const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);\n\n      const authoritySubject = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.subjectId,\n      );\n\n      const authorityId = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.credentialId,\n      );\n\n      const subject = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.subject.table)\n          .where(eq(subjectId, nativeSubjectId))\n          .limit(1),\n        false,\n      ))[0];\n\n      const identifier = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.identifier.table)\n          .where(\n            and(\n              eq(identifierNamespace, input.identifier.namespace),\n              eq(identifierValue, input.identifier.value),\n              eq(identifierSubject, nativeSubjectId),\n              eq(identifierVerifiedAt, mapping.encodeInstant(now)),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const credential = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.credential.table)\n          .where(\n            and(\n              eq(credentialModule, input.moduleId),\n              eq(credentialId, allocated.credentialId!),\n              eq(credentialSubject, nativeSubjectId),\n              eq(credentialNamespace, input.identifier.namespace),\n              eq(credentialValue, input.identifier.value),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const authority = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.authorityCredential.table)\n          .where(\n            and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId!)),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      if (\n        subject === undefined ||\n        !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n        subject[mapping.subject.securityRevision] !== allocated.securityRevision ||\n        identifier === undefined ||\n        identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision ||\n        !mapping.identifier.isCurrent(identifier) ||\n        credential === undefined ||\n        credential[mapping.credential.credentialRevision] !== allocated.credentialRevision ||\n        !mapping.credential.isActiveStatus(credential[mapping.credential.status]) ||\n        authority === undefined ||\n        authority[mapping.authorityCredential.revision] !== allocated.credentialRevision ||\n        !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])\n      )\n        return false;\n    }\n\n    return (\n      stored !== undefined &&\n      exactRegistration.length === 1 &&\n      stored[mapping.registration.fingerprint] === input.fingerprint &&\n      (mapping.mode === \"pending\" ||\n        (nativeSubjectId !== undefined &&\n          stored[mapping.registration.subjectId] !== null &&\n          mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId)))\n    );\n  });\n\n  let receipt: PreparedCommit<A> | undefined;\n\n  yield* completeProofPlanIn(\n    configuration.proof.mapping,\n    configuration.proof.configuration,\n    input.completion,\n    protectedMutation,\n    (completionDecision) => {\n      receipt = prepare(\n        completionDecision === \"completed\" && decision !== undefined\n          ? decision\n          : { _tag: \"Rejected\" },\n        journal,\n      );\n\n      return completionDecision;\n    },\n  );\n\n  return receipt ?? prepare({ _tag: \"Rejected\" }, journal);\n});\n\nconst prepareConflict = Effect.fn(\"Drizzle.prepareConflict\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly fingerprint: TokenDigest;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const database = yield* CurrentEmailSql;\n\n  return yield* owned(\n    database,\n    configuration,\n    Effect.gen(function* () {\n      const journal = yield* CurrentCommitJournal;\n\n      const row = (yield* registrationRows(\n        mapping,\n        input.moduleId,\n        input.commandId,\n        configuration.locking,\n      ))[0];\n\n      return row === undefined\n        ? prepare({ _tag: \"Rejected\" }, journal)\n        : yield* prepareReplay(mapping, row, input.fingerprint, prepare);\n    }),\n  );\n});\n\nexport const makeSqlEmailRegistrationAuthority = Effect.fn(\"makeSqlEmailRegistrationAuthority\")(\n  function* <Registration>(\n    mapping: Mapping<Registration>,\n    configuration: EmailRegistrationConfiguration,\n  ): Effect.fn.Return<\n    EmailRegistrationAuthority<Registration>,\n    never,\n    LifecycleHooks | CurrentEmailSql\n  > {\n    const database = yield* CurrentEmailSql;\n    const hooks = yield* LifecycleHooks;\n\n    return {\n      inspect: (input) =>\n        mapping\n          .inspect(input)\n          .pipe(\n            Effect.provideService(CurrentEmailSql, database),\n            Effect.provideService(LifecycleHooks, hooks),\n            translateFailure,\n          ),\n      registerWithProof: (input, prepare) =>\n        Effect.gen(function* () {\n          if (!validConstraints(mapping)) return yield* unavailable();\n\n          const snapshot = (registration: Registration) =>\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.snapshotRegistrationSync === undefined\n                ? Effect.fail(unavailable())\n                : Effect.try({\n                    try: () => mapping.snapshotRegistrationSync!(registration),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : mapping.snapshotRegistration(registration);\n\n          const storedRegistration = yield* snapshot(input.registration);\n          const inspectionRegistration = yield* snapshot(input.registration);\n\n          const capturedInput = Object.freeze({\n            ...input,\n            identifier: Object.freeze({ ...input.identifier }),\n            registration: storedRegistration,\n          });\n\n          // Registration decoding and fingerprinting may suspend (for example while\n          // hashing a detached Registration value). Finish that work before a\n          // synchronous Durable Object transaction owner is entered.\n          const inspectInput = {\n            identifier: capturedInput.identifier,\n            registration: inspectionRegistration,\n          };\n\n          const inspected =\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.inspectSync === undefined\n                ? yield* unavailable()\n                : yield* Effect.try({\n                    try: () => mapping.inspectSync!(inspectInput),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : yield* mapping.inspect(inspectInput);\n\n          const atomic = mapping.mode === \"atomic\";\n\n          const credentialId = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              )\n            : undefined;\n\n          const securityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const identifierRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const credentialRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const nativeSubjectId =\n            atomic && mapping.provisioning.idMode !== \"generated\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.provisioning.allocateSubjectId,\n                  mapping.provisioning.allocateSubjectIdSync,\n                )\n              : undefined;\n\n          const pendingReference =\n            mapping.mode === \"pending\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.allocatePendingReference,\n                  mapping.allocatePendingReferenceSync,\n                )\n              : undefined;\n\n          const run = owned(\n            database,\n            configuration,\n            Effect.gen(function* () {\n              return yield* registerIn(\n                mapping,\n                configuration,\n                capturedInput,\n                inspected,\n                {\n                  ...(credentialId === undefined ? {} : { credentialId }),\n                  ...(securityRevision === undefined ? {} : { securityRevision }),\n                  ...(identifierRevision === undefined ? {} : { identifierRevision }),\n                  ...(credentialRevision === undefined ? {} : { credentialRevision }),\n                  ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n                  ...(pendingReference === undefined ? {} : { pendingReference }),\n                },\n                prepare,\n              );\n            }),\n          );\n\n          return yield* run.pipe(\n            Effect.catchCause((cause) => {\n              const request =\n                cause.reasons.every(Cause.isFailReason) &&\n                isMappedConstraintConflict(mapping.isRequestConflict, cause);\n\n              const conflict =\n                mapping.mode === \"atomic\" &&\n                ((cause.reasons.every(Cause.isFailReason) &&\n                  isMappedConstraintConflict(mapping.isIdentifierConflict, cause)) ||\n                  (cause.reasons.every(Cause.isFailReason) &&\n                    isMappedConstraintConflict(mapping.isCredentialConflict, cause)));\n\n              return request || conflict\n                ? prepareConflict(mapping, configuration, capturedInput, prepare)\n                : Effect.failCause(cause);\n            }),\n          );\n        }).pipe(\n          Effect.provideService(CurrentEmailSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    };\n  },\n);\n"],"mappings":";;;;;;;;;;;AAqCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,SAAS,aAAa;AAmCjE,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,oBAAkC,YAAmC;CACzE,IACE,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,kBAE9E,OAAO;CACT,IAAI,QAAQ,SAAS,WAAW,OAAO;CAEvC,OAAO,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OACzD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AACF;AAEA,MAAM,YACJ,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;AACP;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC/E,MAAM,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAEjF,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,QAAQ,QAAQ,GAAG,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CACxD,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,SACJ,UACA,eACA,SACG;CACH,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,iBAAiB,WAAW,GAClD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,qBACJ,SACA,UAKG;CACH,MAAM,aAAa,MAAM,WAAW;CAEpC,OACE,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,WAAW,QAAQ,SAAS,gBAC5B,eAAe,WAAW,QAAQ,YAAY,MAAM,UAAU,KAC9D,iBAAiB,OAAO;AAE5B;AAEA,MAAM,gBAAgB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAIxE,SACA,KACA,aACA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,IAAI,IAAI,QAAQ,aAAa,iBAAiB,aAC5C,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,OAAO,QAAQ,OAAO,QAAQ,aAAa,aAAa,GAAG,GAAG,OAAO;AACvE,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAClE,SACA,eACA,OAQA,WACA,WAQA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBACvB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;CAEH,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,cAAc,SAAS,UAAU,MAAM,aAAa,OAAO;CAC3E,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CACpF,IAAI,CAAC,UAAU,YAAY,UAAU,gBAAgB,MAAM,aACzD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAC9C,MAAM,MAAM,OAAO;CAEnB,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;EACjD,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,OAAO,OAAO;GACxB,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,kBAAkB,UAAU;CAEhC,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,cAAc,OAAO;EAE3B,IAAI,QAAQ,SAAS,WAAW;GAC9B,IAAI,UAAU,qBAAqB,KAAA,GAAW,OAAO;GACrD,WAAW;IAAE,MAAM;IAAuB,WAAW,UAAU;GAAiB;GAChF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP,kBAAkB,UAAU;IAC5B,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;EACF,OAAO;GACL,IACE,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAET,MAAM,gBAAgB,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC9D,QAAQ,aAAa,oBAAoB,QAAQ;IAC/C;IACA,kBAAkB,UAAU;GAC9B,CAAC,CACH;GAEA,IAAI,QAAQ,aAAa,WAAW,aAAa;IAC/C,MAAM,OAAO,OAAO,cAAc,qBAAqB,aAAa;IAEpE,kBAAkB,OAAO,QAAQ,aAAa,kBAAkB,IAAI;GACtE,OAAO,OAAO;GACd,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAC1C,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,YAAY,MAAM;IAClB,WAAW;IACX,kBAAkB;IAClB,iBAAiB,UAAU;GAC7B,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,UAAU,MAAM;IAChB,WAAW;IACX,cAAc,UAAU;IACxB,YAAY,MAAM;IAClB,oBAAoB,UAAU;GAChC,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAC3D,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX,cAAc,UAAU;IACxB,UAAU,UAAU;GACtB,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP;IACA,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;GACA,WAAW,EAAE,MAAM,aAAa;EAClC;EACA,MAAM,UAAU,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK,EAAA,CAAG;EAC1F,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;EAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;EACvF,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,gBACvB;EAEA,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,cACvB;EAEA,MAAM,oBAAoB,OAAO,WAC/B,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,oBAAoB,MAAM,QAAQ,GACrC,GAAG,qBAAqB,MAAM,SAAS,GACvC,GAAG,yBAAyB,MAAM,WAAW,GAC7C,GAAG,mBAAmB,QAAQ,SAAS,YAAY,YAAY,YAAY,GAC3E,GAAG,uBAAuB,QAAQ,cAAc,MAAM,QAAQ,eAAe,CAAC,GAC9E,QAAQ,SAAS,YACb,IACE,GAAG,uBAAuB,UAAU,gBAAiB,GACrD,OAAO,mBAAmB,CAC5B,IACA,IAAI,GAAG,qBAAqB,eAAe,GAAG,OAAO,qBAAqB,CAAC,CACjF,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF;EAEA,IAAI,QAAQ,SAAS,YAAY,oBAAoB,KAAA,GAAW;GAC9D,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GAClE,MAAM,sBAAsB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACzF,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;GACjF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACvF,MAAM,uBAAuB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;GAC3F,MAAM,mBAAmB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;GACrF,MAAM,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;GACrF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEvF,MAAM,sBAAsB,OAC1B,QAAQ,WAAW,OACnB,QAAQ,WAAW,mBACrB;GAEA,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;GAE3F,MAAM,mBAAmB,OACvB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;GAEA,MAAM,cAAc,OAClB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,YAC9B;GAEA,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,WAAW,eAAe,CAAC,CAAC,CACrC,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,GAC1C,GAAG,mBAAmB,eAAe,GACrC,GAAG,sBAAsB,QAAQ,cAAc,GAAG,CAAC,CACrD,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,kBAAkB,MAAM,QAAQ,GACnC,GAAG,cAAc,UAAU,YAAa,GACxC,GAAG,mBAAmB,eAAe,GACrC,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,aAAa,OAAO,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IAAI,GAAG,kBAAkB,eAAe,GAAG,GAAG,aAAa,UAAU,YAAa,CAAC,CACrF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,IACE,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,QAAQ,QAAQ,QAAQ,sBAAsB,UAAU,oBACxD,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,qBAAqB,UAAU,sBAC7D,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,wBAAwB,UAAU,sBAChE,CAAC,QAAQ,WAAW,eAAe,WAAW,QAAQ,WAAW,OAAO,KACxE,cAAc,KAAA,KACd,UAAU,QAAQ,oBAAoB,cAAc,UAAU,sBAC9D,CAAC,QAAQ,oBAAoB,eAAe,UAAU,QAAQ,oBAAoB,OAAO,GAEzF,OAAO;EACX;EAEA,OACE,WAAW,KAAA,KACX,kBAAkB,WAAW,KAC7B,OAAO,QAAQ,aAAa,iBAAiB,MAAM,gBAClD,QAAQ,SAAS,aACf,oBAAoB,KAAA,KACnB,OAAO,QAAQ,aAAa,eAAe,QAC3C,QAAQ,UAAU,OAAO,OAAO,QAAQ,aAAa,YAAY,eAAe;CAExF,CAAC;CAED,IAAI;CAEJ,OAAO,oBACL,cAAc,MAAM,SACpB,cAAc,MAAM,eACpB,MAAM,YACN,oBACC,uBAAuB;EACtB,UAAU,QACR,uBAAuB,eAAe,aAAa,KAAA,IAC/C,WACA,EAAE,MAAM,WAAW,GACvB,OACF;EAEA,OAAO;CACT,CACF;CAEA,OAAO,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;AACzD,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,eACA,OAKA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,MACZ,UACA,eACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EAEvB,MAAM,OAAO,OAAO,iBAClB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;EAEH,OAAO,QAAQ,KAAA,IACX,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO,IACrC,OAAO,cAAc,SAAS,KAAK,MAAM,aAAa,OAAO;CACnE,CAAC,CACH;AACF,CAAC;AAED,MAAa,oCAAoC,OAAO,GAAG,mCAAmC,CAAC,CAC7F,WACE,SACA,eAKA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,QAAQ,OAAO;CAErB,OAAO;EACL,UAAU,UACR,QACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,OAAO,IAAI,aAAa;GACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;GAE1D,MAAM,YAAY,iBAChB,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,6BAA6B,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;IACT,WAAW,QAAQ,yBAA0B,YAAY;IACzD,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,QAAQ,qBAAqB,YAAY;GAE/C,MAAM,qBAAqB,OAAO,SAAS,MAAM,YAAY;GAC7D,MAAM,yBAAyB,OAAO,SAAS,MAAM,YAAY;GAEjE,MAAM,gBAAgB,OAAO,OAAO;IAClC,GAAG;IACH,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;IACjD,cAAc;GAChB,CAAC;GAKD,MAAM,eAAe;IACnB,YAAY,cAAc;IAC1B,cAAc;GAChB;GAEA,MAAM,YACJ,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,gBAAgB,KAAA,IACtB,OAAO,YAAY,IACnB,OAAO,OAAO,IAAI;IAChB,WAAW,QAAQ,YAAa,YAAY;IAC5C,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,OAAO,QAAQ,QAAQ,YAAY;GAEzC,MAAM,SAAS,QAAQ,SAAS;GAEhC,MAAM,eAAe,SACjB,OAAO,SACL,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV,IACA,KAAA;GAEJ,MAAM,mBAAmB,SACrB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,cAAc,MACd,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;GAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SACL,cAAc,MACd,QAAQ,0BACR,QAAQ,4BACV,IACA,KAAA;GAwBN,OAAO,OAtBK,MACV,UACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,WACZ,SACA,eACA,eACA,WACA;KACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;KACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;KAC7D,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;KAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAC/D,GACA,OACF;GACF,CAAC,CAGa,CAAC,CAAC,KAChB,OAAO,YAAY,UAAU;IAC3B,MAAM,UACJ,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,mBAAmB,KAAK;IAE7D,MAAM,WACJ,QAAQ,SAAS,aACf,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,MAAM,QAAQ,MAAM,MAAM,YAAY,KACrC,2BAA2B,QAAQ,sBAAsB,KAAK;IAEpE,OAAO,WAAW,WACd,gBAAgB,SAAS,eAAe,eAAe,OAAO,IAC9D,OAAO,UAAU,KAAK;GAC5B,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ;AACF,CACF"}
+{"version":3,"file":"email-registration.mjs","names":[],"sources":["../../src/drizzle/email-registration.ts"],"sourcesContent":["import type { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  type PrepareEmailCommit,\n  type EmailCommandId,\n  type EmailRegistrationDecision,\n  EmailUnavailable,\n} from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n  HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport { type ProofCompletionPlan, ProofUnavailable } from \"@yielded/auth/Proofs\";\nimport type { TokenDigest } from \"@yielded/auth/Schema\";\nimport { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- registration plans bridge consumer-owned Drizzle rows. */\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { Cause, DateTime, Effect, Schema } from \"effect\";\n\nimport {\n  type AnyEmailRegistrationMapping,\n  requiredEmailRegistrationConstraints,\n} from \"./email-model\";\nimport { CurrentEmailSql, type EmailSqlDatabase, type EmailSqlQuery } from \"./email-sql\";\nimport { column, isMappedConstraintConflict, PersistenceMappingError, updateValues } from \"./model\";\nimport {\n  CurrentProofSql,\n  completeProofPlanIn,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n} from \"./proof-sql\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\ntype Mapping<Registration> = AnyEmailRegistrationMapping<Registration>;\nconst unavailable = () => EmailUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(EmailUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly completion: ProofCompletionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\nexport interface EmailRegistrationConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinated?: boolean;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\nconst selectRows = (query: EmailSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst validConstraints = <Registration>(mapping: Mapping<Registration>) => {\n  if (\n    mapping.constraints.request !== requiredEmailRegistrationConstraints.request ||\n    mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference\n  )\n    return false;\n  if (mapping.mode === \"pending\") return true;\n\n  return Object.entries(requiredEmailRegistrationConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n  );\n};\n\nconst allocate = <A>(\n  mode: EmailRegistrationConfiguration[\"mode\"],\n  asynchronous: Effect.Effect<A, PersistenceMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n  mapping: Mapping<Registration>,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n\n  const module = column(mapping.registration.table, mapping.registration.moduleId);\n  const command = column(mapping.registration.table, mapping.registration.commandId);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.registration.table)\n      .where(and(eq(module, moduleId), eq(command, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\n/** Discover before locking, then lock subject before identifier like the other\n * identity owners. A changed discovery is rejected rather than locking a second\n * subject in the opposite order. Proof authority separately enforces the host's\n * active/unverified eligibility policy in the same physical owner. */\nexport const readEmailRegistrationTarget = Effect.fnUntraced(function* <Registration>(\n  mapping: Extract<Mapping<Registration>, { readonly mode: \"atomic\" }>,\n  identifier: LoginIdentifier,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n  const i = mapping.identifier;\n  const s = mapping.subject;\n\n  const lookup = () =>\n    database\n      .select()\n      .from(i.table)\n      .where(\n        and(\n          eq(column(i.table, i.namespace), identifier.namespace),\n          eq(column(i.table, i.value), identifier.value),\n        ),\n      )\n      .limit(1);\n\n  const discovered = (yield* lookup())[0];\n\n  if (discovered === undefined) return { _tag: \"Absent\" } as const;\n  if (discovered[i.verifiedAt] !== null) return { _tag: \"Rejected\" } as const;\n  const nativeSubjectId = discovered[i.subjectId];\n\n  const subject = (yield* selectRows(\n    database\n      .select()\n      .from(s.table)\n      .where(eq(column(s.table, s.id), nativeSubjectId))\n      .limit(1),\n    locking,\n  ))[0];\n\n  const current = (yield* selectRows(lookup(), locking))[0];\n\n  if (\n    subject === undefined ||\n    current === undefined ||\n    current[i.verifiedAt] !== null ||\n    !mapping.subjectId.equals(current[i.subjectId], nativeSubjectId) ||\n    current[i.bindingRevision] !== discovered[i.bindingRevision]\n  )\n    return { _tag: \"Rejected\" } as const;\n\n  return {\n    _tag: \"Reserved\" as const,\n    nativeSubjectId,\n    bindingRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(\n      current[i.bindingRevision],\n    ),\n    securityRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(\n      subject[s.securityRevision],\n    ),\n  };\n});\n\nconst owned = <A, E, R>(\n  database: EmailSqlDatabase,\n  configuration: EmailRegistrationConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentEmailSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst completionMatches = <Registration>(\n  mapping: Mapping<Registration>,\n  input: {\n    readonly moduleId: string;\n    readonly identifier: LoginIdentifier;\n    readonly completion: ProofCompletionPlan;\n  },\n) => {\n  const completion = input.completion.input;\n\n  return (\n    completion.moduleId === `${input.moduleId}/registration` &&\n    completion.purpose === \"email-code-registration\" &&\n    completion.binding._tag === \"Identifier\" &&\n    sameIdentifier(completion.binding.identifier, input.identifier) &&\n    validConstraints(mapping)\n  );\n};\n\nconst prepareReplay = Effect.fn(\"DrizzleEmailRegistration.prepareReplay\")(function* <\n  Registration,\n  A,\n>(\n  mapping: Mapping<Registration>,\n  row: any,\n  fingerprint: TokenDigest,\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  if (row[mapping.registration.fingerprint] !== fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  return prepare(yield* mapping.registration.decodeReplay(row), journal);\n});\n\nconst registerIn = Effect.fn(\"DrizzleEmailRegistration.registerIn\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n    readonly fingerprint: TokenDigest;\n    readonly completion: ProofCompletionPlan;\n  },\n  inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n  allocated: {\n    readonly credentialId?: string;\n    readonly securityRevision?: SecurityRevision;\n    readonly displacedSecurityRevision?: SecurityRevision;\n    readonly identifierRevision?: SecurityRevision;\n    readonly credentialRevision?: SecurityRevision;\n    readonly nativeSubjectId?: unknown;\n    readonly pendingReference?: string;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const existing = (yield* registrationRows(\n    mapping,\n    input.moduleId,\n    input.commandId,\n    configuration.locking,\n  ))[0];\n\n  if (existing !== undefined)\n    return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);\n  if (!completionMatches(mapping, input)) return prepare({ _tag: \"Rejected\" }, journal);\n  if (!inspected.eligible || inspected.fingerprint !== input.fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  const target =\n    mapping.mode === \"atomic\"\n      ? yield* readEmailRegistrationTarget(mapping, input.identifier, configuration.locking)\n      : undefined;\n\n  if (target?._tag === \"Rejected\") return prepare({ _tag: \"Rejected\" }, journal);\n  if (\n    target?._tag === \"Reserved\" &&\n    (allocated.displacedSecurityRevision === undefined ||\n      allocated.displacedSecurityRevision === target.securityRevision ||\n      allocated.identifierRevision === target.bindingRevision)\n  )\n    return yield* unavailable();\n  const now = yield* nowMillis;\n\n  const intent = {\n    moduleId: input.moduleId,\n    commandId: input.commandId,\n    identifier: Object.freeze({ ...input.identifier }),\n    registration: input.registration,\n    fingerprint: input.fingerprint,\n    completion: Object.freeze({\n      moduleId: input.completion.input.moduleId,\n      purpose: input.completion.input.purpose,\n      continuationId: input.completion.input.continuationId,\n      binding: input.completion.input.binding,\n    }),\n  };\n\n  let decision: EmailRegistrationDecision | undefined;\n  let nativeSubjectId = allocated.nativeSubjectId;\n\n  const protectedMutation = Effect.gen(function* () {\n    const transaction = yield* CurrentEmailSql;\n\n    if (mapping.mode === \"pending\") {\n      if (allocated.pendingReference === undefined) return false;\n      decision = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"pending\",\n          pendingReference: allocated.pendingReference,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n    } else {\n      if (\n        allocated.credentialId === undefined ||\n        allocated.securityRevision === undefined ||\n        allocated.identifierRevision === undefined ||\n        allocated.credentialRevision === undefined\n      )\n        return false;\n\n      const subjectInsert = transaction.insert(mapping.subject.table).values(\n        mapping.provisioning.encodeSubjectInsert(intent, {\n          nativeSubjectId,\n          securityRevision: allocated.securityRevision,\n        }),\n      );\n\n      if (mapping.provisioning.idMode === \"generated\") {\n        const rows = yield* configuration.generatedSubjectRows(subjectInsert);\n\n        nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);\n      } else yield* subjectInsert;\n      if (nativeSubjectId === undefined) return false;\n      if (target?._tag === \"Reserved\") {\n        const i = mapping.identifier;\n        const s = mapping.subject;\n\n        // Change only mapped ownership columns. Never delete a consumer-owned\n        // identifier row or copy insertion defaults over unrelated columns.\n        yield* transaction\n          .update(i.table)\n          .set(\n            updateValues([\n              [i.subjectId, nativeSubjectId],\n              [i.verifiedAt, mapping.encodeInstant(now)],\n              [i.bindingRevision, allocated.identifierRevision],\n            ]),\n          )\n          .where(\n            and(\n              eq(column(i.table, i.namespace), input.identifier.namespace),\n              eq(column(i.table, i.value), input.identifier.value),\n              eq(column(i.table, i.subjectId), target.nativeSubjectId),\n              eq(column(i.table, i.bindingRevision), target.bindingRevision),\n              isNull(column(i.table, i.verifiedAt)),\n            ),\n          );\n        yield* transaction\n          .update(s.table)\n          .set(updateValues([[s.securityRevision, allocated.displacedSecurityRevision]]))\n          .where(\n            and(\n              eq(column(s.table, s.id), target.nativeSubjectId),\n              eq(column(s.table, s.securityRevision), target.securityRevision),\n            ),\n          );\n      } else {\n        yield* transaction.insert(mapping.identifier.table).values(\n          mapping.identifier.encodeVerifiedInsert({\n            identifier: input.identifier,\n            subjectId: nativeSubjectId,\n            verifiedAtMillis: now,\n            bindingRevision: allocated.identifierRevision,\n          }),\n        );\n      }\n      yield* transaction.insert(mapping.credential.table).values(\n        mapping.credential.encodeVerifiedInsert({\n          moduleId: input.moduleId,\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          identifier: input.identifier,\n          credentialRevision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.authorityCredential.table).values(\n        mapping.authorityCredential.encodeInsert({\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          revision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"registered\",\n          nativeSubjectId,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n      decision = { _tag: \"Registered\" };\n    }\n    const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];\n    const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n    const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n    const registrationFingerprint = column(\n      mapping.registration.table,\n      mapping.registration.fingerprint,\n    );\n\n    const registrationState = column(mapping.registration.table, mapping.registration.state);\n    const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);\n\n    const registrationReference = column(\n      mapping.registration.table,\n      mapping.registration.pendingReference,\n    );\n\n    const registrationRetention = column(\n      mapping.registration.table,\n      mapping.registration.retentionUntil,\n    );\n\n    const exactRegistration = yield* selectRows(\n      transaction\n        .select()\n        .from(mapping.registration.table)\n        .where(\n          and(\n            eq(registrationModule, input.moduleId),\n            eq(registrationCommand, input.commandId),\n            eq(registrationFingerprint, input.fingerprint),\n            eq(registrationState, mapping.mode === \"pending\" ? \"pending\" : \"registered\"),\n            eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)),\n            mapping.mode === \"pending\"\n              ? and(\n                  eq(registrationReference, allocated.pendingReference!),\n                  isNull(registrationSubject),\n                )\n              : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)),\n          ),\n        )\n        .limit(1),\n      false,\n    );\n\n    if (mapping.mode === \"atomic\" && nativeSubjectId !== undefined) {\n      const subjectId = column(mapping.subject.table, mapping.subject.id);\n      const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n      const identifierValue = column(mapping.identifier.table, mapping.identifier.value);\n      const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n      const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n      const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);\n      const credentialId = column(mapping.credential.table, mapping.credential.credentialId);\n      const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);\n\n      const credentialNamespace = column(\n        mapping.credential.table,\n        mapping.credential.identifierNamespace,\n      );\n\n      const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);\n\n      const authoritySubject = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.subjectId,\n      );\n\n      const authorityId = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.credentialId,\n      );\n\n      const subject = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.subject.table)\n          .where(eq(subjectId, nativeSubjectId))\n          .limit(1),\n        false,\n      ))[0];\n\n      const identifier = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.identifier.table)\n          .where(\n            and(\n              eq(identifierNamespace, input.identifier.namespace),\n              eq(identifierValue, input.identifier.value),\n              eq(identifierSubject, nativeSubjectId),\n              eq(identifierVerifiedAt, mapping.encodeInstant(now)),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const credential = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.credential.table)\n          .where(\n            and(\n              eq(credentialModule, input.moduleId),\n              eq(credentialId, allocated.credentialId!),\n              eq(credentialSubject, nativeSubjectId),\n              eq(credentialNamespace, input.identifier.namespace),\n              eq(credentialValue, input.identifier.value),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const authority = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.authorityCredential.table)\n          .where(\n            and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId!)),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const displaced =\n        target?._tag === \"Reserved\"\n          ? (yield* transaction\n              .select()\n              .from(mapping.subject.table)\n              .where(\n                and(\n                  eq(subjectId, target.nativeSubjectId),\n                  eq(\n                    column(mapping.subject.table, mapping.subject.securityRevision),\n                    allocated.displacedSecurityRevision,\n                  ),\n                ),\n              )\n              .limit(1))[0]\n          : undefined;\n\n      if (\n        (target?._tag === \"Reserved\" && displaced === undefined) ||\n        subject === undefined ||\n        !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n        subject[mapping.subject.securityRevision] !== allocated.securityRevision ||\n        identifier === undefined ||\n        identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision ||\n        !mapping.identifier.isCurrent(identifier) ||\n        credential === undefined ||\n        credential[mapping.credential.credentialRevision] !== allocated.credentialRevision ||\n        !mapping.credential.isActiveStatus(credential[mapping.credential.status]) ||\n        authority === undefined ||\n        authority[mapping.authorityCredential.revision] !== allocated.credentialRevision ||\n        !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])\n      )\n        return false;\n    }\n\n    return (\n      stored !== undefined &&\n      exactRegistration.length === 1 &&\n      stored[mapping.registration.fingerprint] === input.fingerprint &&\n      (mapping.mode === \"pending\" ||\n        (nativeSubjectId !== undefined &&\n          stored[mapping.registration.subjectId] !== null &&\n          mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId)))\n    );\n  });\n\n  let receipt: PreparedCommit<A> | undefined;\n\n  yield* completeProofPlanIn(\n    configuration.proof.mapping,\n    configuration.proof.configuration,\n    input.completion,\n    protectedMutation,\n    (completionDecision) => {\n      receipt = prepare(\n        completionDecision === \"completed\" && decision !== undefined\n          ? decision\n          : { _tag: \"Rejected\" },\n        journal,\n      );\n\n      return completionDecision;\n    },\n  );\n\n  return receipt ?? prepare({ _tag: \"Rejected\" }, journal);\n});\n\nconst prepareConflict = Effect.fn(\"Drizzle.prepareConflict\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly fingerprint: TokenDigest;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const database = yield* CurrentEmailSql;\n\n  return yield* owned(\n    database,\n    configuration,\n    Effect.gen(function* () {\n      const journal = yield* CurrentCommitJournal;\n\n      const row = (yield* registrationRows(\n        mapping,\n        input.moduleId,\n        input.commandId,\n        configuration.locking,\n      ))[0];\n\n      return row === undefined\n        ? prepare({ _tag: \"Rejected\" }, journal)\n        : yield* prepareReplay(mapping, row, input.fingerprint, prepare);\n    }),\n  );\n});\n\nexport const makeSqlEmailRegistrationAuthority = Effect.fn(\"makeSqlEmailRegistrationAuthority\")(\n  function* <Registration>(\n    mapping: Mapping<Registration>,\n    configuration: EmailRegistrationConfiguration,\n  ): Effect.fn.Return<\n    EmailRegistrationAuthority<Registration>,\n    EmailUnavailable,\n    LifecycleHooks | CurrentEmailSql | NativeDatabase\n  > {\n    const database = yield* CurrentEmailSql;\n\n    if (!configuration.coordinated)\n      yield* validateDrizzleStorage({\n        ...mapping,\n        proof: configuration.proof.mapping,\n      }).pipe(Effect.mapError(unavailable));\n    const hooks = yield* LifecycleHooks;\n\n    return {\n      inspect: (input) =>\n        mapping\n          .inspect(input)\n          .pipe(\n            Effect.provideService(CurrentEmailSql, database),\n            Effect.provideService(LifecycleHooks, hooks),\n            translateFailure,\n          ),\n      registerWithProof: (input, prepare) =>\n        Effect.gen(function* () {\n          if (!validConstraints(mapping)) return yield* unavailable();\n\n          const snapshot = (registration: Registration) =>\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.snapshotRegistrationSync === undefined\n                ? Effect.fail(unavailable())\n                : Effect.try({\n                    try: () => mapping.snapshotRegistrationSync!(registration),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : mapping.snapshotRegistration(registration);\n\n          const storedRegistration = yield* snapshot(input.registration);\n          const inspectionRegistration = yield* snapshot(input.registration);\n\n          const capturedInput = Object.freeze({\n            ...input,\n            identifier: Object.freeze({ ...input.identifier }),\n            registration: storedRegistration,\n          });\n\n          // Registration decoding and fingerprinting may suspend (for example while\n          // hashing a detached Registration value). Finish that work before a\n          // synchronous Durable Object transaction owner is entered.\n          const inspectInput = {\n            identifier: capturedInput.identifier,\n            registration: inspectionRegistration,\n          };\n\n          const inspected =\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.inspectSync === undefined\n                ? yield* unavailable()\n                : yield* Effect.try({\n                    try: () => mapping.inspectSync!(inspectInput),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : yield* mapping.inspect(inspectInput);\n\n          const atomic = mapping.mode === \"atomic\";\n\n          const credentialId = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              )\n            : undefined;\n\n          const securityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const displacedSecurityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const identifierRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const credentialRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const nativeSubjectId =\n            atomic && mapping.provisioning.idMode !== \"generated\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.provisioning.allocateSubjectId,\n                  mapping.provisioning.allocateSubjectIdSync,\n                )\n              : undefined;\n\n          const pendingReference =\n            mapping.mode === \"pending\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.allocatePendingReference,\n                  mapping.allocatePendingReferenceSync,\n                )\n              : undefined;\n\n          const run = owned(\n            database,\n            configuration,\n            Effect.gen(function* () {\n              return yield* registerIn(\n                mapping,\n                configuration,\n                capturedInput,\n                inspected,\n                {\n                  ...(credentialId === undefined ? {} : { credentialId }),\n                  ...(securityRevision === undefined ? {} : { securityRevision }),\n                  ...(displacedSecurityRevision === undefined ? {} : { displacedSecurityRevision }),\n                  ...(identifierRevision === undefined ? {} : { identifierRevision }),\n                  ...(credentialRevision === undefined ? {} : { credentialRevision }),\n                  ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n                  ...(pendingReference === undefined ? {} : { pendingReference }),\n                },\n                prepare,\n              );\n            }),\n          );\n\n          return yield* run.pipe(\n            Effect.catchCause((cause) => {\n              const request =\n                cause.reasons.every(Cause.isFailReason) &&\n                isMappedConstraintConflict(mapping.isRequestConflict, cause);\n\n              const conflict =\n                mapping.mode === \"atomic\" &&\n                ((cause.reasons.every(Cause.isFailReason) &&\n                  isMappedConstraintConflict(mapping.isIdentifierConflict, cause)) ||\n                  (cause.reasons.every(Cause.isFailReason) &&\n                    isMappedConstraintConflict(mapping.isCredentialConflict, cause)));\n\n              return request || conflict\n                ? prepareConflict(mapping, configuration, capturedInput, prepare)\n                : Effect.failCause(cause);\n            }),\n          );\n        }).pipe(\n          Effect.provideService(CurrentEmailSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    };\n  },\n);\n"],"mappings":";;;;;;;;;;;;;AAuCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,SAAS,aAAa;AAmCjE,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,oBAAkC,YAAmC;CACzE,IACE,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,kBAE9E,OAAO;CACT,IAAI,QAAQ,SAAS,WAAW,OAAO;CAEvC,OAAO,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OACzD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AACF;AAEA,MAAM,YACJ,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;AACP;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC/E,MAAM,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAEjF,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,QAAQ,QAAQ,GAAG,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CACxD,MAAM,CAAC,GACV,OACF;AACF,CAAC;;;;;AAMD,MAAa,8BAA8B,OAAO,WAAW,WAC3D,SACA,YACA,SACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,IAAI,QAAQ;CAClB,MAAM,IAAI,QAAQ;CAElB,MAAM,eACJ,SACG,OAAO,CAAC,CACR,KAAK,EAAE,KAAK,CAAC,CACb,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,WAAW,SAAS,GACrD,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,KAAK,CAC/C,CACF,CAAC,CACA,MAAM,CAAC;CAEZ,MAAM,cAAc,OAAO,OAAO,EAAA,CAAG;CAErC,IAAI,eAAe,KAAA,GAAW,OAAO,EAAE,MAAM,SAAS;CACtD,IAAI,WAAW,EAAE,gBAAgB,MAAM,OAAO,EAAE,MAAM,WAAW;CACjE,MAAM,kBAAkB,WAAW,EAAE;CAErC,MAAM,WAAW,OAAO,WACtB,SACG,OAAO,CAAC,CACR,KAAK,EAAE,KAAK,CAAC,CACb,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CACjD,MAAM,CAAC,GACV,OACF,EAAA,CAAG;CAEH,MAAM,WAAW,OAAO,WAAW,OAAO,GAAG,OAAO,EAAA,CAAG;CAEvD,IACE,YAAY,KAAA,KACZ,YAAY,KAAA,KACZ,QAAQ,EAAE,gBAAgB,QAC1B,CAAC,QAAQ,UAAU,OAAO,QAAQ,EAAE,YAAY,eAAe,KAC/D,QAAQ,EAAE,qBAAqB,WAAW,EAAE,kBAE5C,OAAO,EAAE,MAAM,WAAW;CAE5B,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CAClE,QAAQ,EAAE,gBACZ;EACA,kBAAkB,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CACnE,QAAQ,EAAE,iBACZ;CACF;AACF,CAAC;AAED,MAAM,SACJ,UACA,eACA,SACG;CACH,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,iBAAiB,WAAW,GAClD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,qBACJ,SACA,UAKG;CACH,MAAM,aAAa,MAAM,WAAW;CAEpC,OACE,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,WAAW,QAAQ,SAAS,gBAC5B,eAAe,WAAW,QAAQ,YAAY,MAAM,UAAU,KAC9D,iBAAiB,OAAO;AAE5B;AAEA,MAAM,gBAAgB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAIxE,SACA,KACA,aACA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,IAAI,IAAI,QAAQ,aAAa,iBAAiB,aAC5C,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,OAAO,QAAQ,OAAO,QAAQ,aAAa,aAAa,GAAG,GAAG,OAAO;AACvE,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAClE,SACA,eACA,OAQA,WACA,WASA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBACvB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;CAEH,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,cAAc,SAAS,UAAU,MAAM,aAAa,OAAO;CAC3E,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CACpF,IAAI,CAAC,UAAU,YAAY,UAAU,gBAAgB,MAAM,aACzD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,MAAM,SACJ,QAAQ,SAAS,WACb,OAAO,4BAA4B,SAAS,MAAM,YAAY,cAAc,OAAO,IACnF,KAAA;CAEN,IAAI,QAAQ,SAAS,YAAY,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAC7E,IACE,QAAQ,SAAS,eAChB,UAAU,8BAA8B,KAAA,KACvC,UAAU,8BAA8B,OAAO,oBAC/C,UAAU,uBAAuB,OAAO,kBAE1C,OAAO,OAAO,YAAY;CAC5B,MAAM,MAAM,OAAO;CAEnB,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;EACjD,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,OAAO,OAAO;GACxB,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,kBAAkB,UAAU;CAEhC,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,cAAc,OAAO;EAE3B,IAAI,QAAQ,SAAS,WAAW;GAC9B,IAAI,UAAU,qBAAqB,KAAA,GAAW,OAAO;GACrD,WAAW;IAAE,MAAM;IAAuB,WAAW,UAAU;GAAiB;GAChF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP,kBAAkB,UAAU;IAC5B,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;EACF,OAAO;GACL,IACE,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAET,MAAM,gBAAgB,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC9D,QAAQ,aAAa,oBAAoB,QAAQ;IAC/C;IACA,kBAAkB,UAAU;GAC9B,CAAC,CACH;GAEA,IAAI,QAAQ,aAAa,WAAW,aAAa;IAC/C,MAAM,OAAO,OAAO,cAAc,qBAAqB,aAAa;IAEpE,kBAAkB,OAAO,QAAQ,aAAa,kBAAkB,IAAI;GACtE,OAAO,OAAO;GACd,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAC1C,IAAI,QAAQ,SAAS,YAAY;IAC/B,MAAM,IAAI,QAAQ;IAClB,MAAM,IAAI,QAAQ;IAIlB,OAAO,YACJ,OAAO,EAAE,KAAK,CAAC,CACf,IACC,aAAa;KACX,CAAC,EAAE,WAAW,eAAe;KAC7B,CAAC,EAAE,YAAY,QAAQ,cAAc,GAAG,CAAC;KACzC,CAAC,EAAE,iBAAiB,UAAU,kBAAkB;IAClD,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,MAAM,WAAW,SAAS,GAC3D,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,MAAM,WAAW,KAAK,GACnD,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,OAAO,eAAe,GACvD,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,eAAe,GAC7D,OAAO,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CACtC,CACF;IACF,OAAO,YACJ,OAAO,EAAE,KAAK,CAAC,CACf,IAAI,aAAa,CAAC,CAAC,EAAE,kBAAkB,UAAU,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAC9E,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,eAAe,GAChD,GAAG,OAAO,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,gBAAgB,CACjE,CACF;GACJ,OACE,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,YAAY,MAAM;IAClB,WAAW;IACX,kBAAkB;IAClB,iBAAiB,UAAU;GAC7B,CAAC,CACH;GAEF,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,UAAU,MAAM;IAChB,WAAW;IACX,cAAc,UAAU;IACxB,YAAY,MAAM;IAClB,oBAAoB,UAAU;GAChC,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAC3D,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX,cAAc,UAAU;IACxB,UAAU,UAAU;GACtB,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP;IACA,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;GACA,WAAW,EAAE,MAAM,aAAa;EAClC;EACA,MAAM,UAAU,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK,EAAA,CAAG;EAC1F,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;EAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;EACvF,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,gBACvB;EAEA,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,cACvB;EAEA,MAAM,oBAAoB,OAAO,WAC/B,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,oBAAoB,MAAM,QAAQ,GACrC,GAAG,qBAAqB,MAAM,SAAS,GACvC,GAAG,yBAAyB,MAAM,WAAW,GAC7C,GAAG,mBAAmB,QAAQ,SAAS,YAAY,YAAY,YAAY,GAC3E,GAAG,uBAAuB,QAAQ,cAAc,MAAM,QAAQ,eAAe,CAAC,GAC9E,QAAQ,SAAS,YACb,IACE,GAAG,uBAAuB,UAAU,gBAAiB,GACrD,OAAO,mBAAmB,CAC5B,IACA,IAAI,GAAG,qBAAqB,eAAe,GAAG,OAAO,qBAAqB,CAAC,CACjF,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF;EAEA,IAAI,QAAQ,SAAS,YAAY,oBAAoB,KAAA,GAAW;GAC9D,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GAClE,MAAM,sBAAsB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACzF,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;GACjF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACvF,MAAM,uBAAuB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;GAC3F,MAAM,mBAAmB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;GACrF,MAAM,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;GACrF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEvF,MAAM,sBAAsB,OAC1B,QAAQ,WAAW,OACnB,QAAQ,WAAW,mBACrB;GAEA,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;GAE3F,MAAM,mBAAmB,OACvB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;GAEA,MAAM,cAAc,OAClB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,YAC9B;GAEA,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,WAAW,eAAe,CAAC,CAAC,CACrC,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,GAC1C,GAAG,mBAAmB,eAAe,GACrC,GAAG,sBAAsB,QAAQ,cAAc,GAAG,CAAC,CACrD,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,kBAAkB,MAAM,QAAQ,GACnC,GAAG,cAAc,UAAU,YAAa,GACxC,GAAG,mBAAmB,eAAe,GACrC,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,aAAa,OAAO,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IAAI,GAAG,kBAAkB,eAAe,GAAG,GAAG,aAAa,UAAU,YAAa,CAAC,CACrF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,YACJ,QAAQ,SAAS,cACZ,OAAO,YACL,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,WAAW,OAAO,eAAe,GACpC,GACE,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB,GAC9D,UAAU,yBACZ,CACF,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAAG,KACb,KAAA;GAEN,IACG,QAAQ,SAAS,cAAc,cAAc,KAAA,KAC9C,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,QAAQ,QAAQ,QAAQ,sBAAsB,UAAU,oBACxD,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,qBAAqB,UAAU,sBAC7D,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,wBAAwB,UAAU,sBAChE,CAAC,QAAQ,WAAW,eAAe,WAAW,QAAQ,WAAW,OAAO,KACxE,cAAc,KAAA,KACd,UAAU,QAAQ,oBAAoB,cAAc,UAAU,sBAC9D,CAAC,QAAQ,oBAAoB,eAAe,UAAU,QAAQ,oBAAoB,OAAO,GAEzF,OAAO;EACX;EAEA,OACE,WAAW,KAAA,KACX,kBAAkB,WAAW,KAC7B,OAAO,QAAQ,aAAa,iBAAiB,MAAM,gBAClD,QAAQ,SAAS,aACf,oBAAoB,KAAA,KACnB,OAAO,QAAQ,aAAa,eAAe,QAC3C,QAAQ,UAAU,OAAO,OAAO,QAAQ,aAAa,YAAY,eAAe;CAExF,CAAC;CAED,IAAI;CAEJ,OAAO,oBACL,cAAc,MAAM,SACpB,cAAc,MAAM,eACpB,MAAM,YACN,oBACC,uBAAuB;EACtB,UAAU,QACR,uBAAuB,eAAe,aAAa,KAAA,IAC/C,WACA,EAAE,MAAM,WAAW,GACvB,OACF;EAEA,OAAO;CACT,CACF;CAEA,OAAO,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;AACzD,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,eACA,OAKA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,MACZ,UACA,eACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EAEvB,MAAM,OAAO,OAAO,iBAClB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;EAEH,OAAO,QAAQ,KAAA,IACX,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO,IACrC,OAAO,cAAc,SAAS,KAAK,MAAM,aAAa,OAAO;CACnE,CAAC,CACH;AACF,CAAC;AAED,MAAa,oCAAoC,OAAO,GAAG,mCAAmC,CAAC,CAC7F,WACE,SACA,eAKA;CACA,MAAM,WAAW,OAAO;CAExB,IAAI,CAAC,cAAc,aACjB,OAAO,uBAAuB;EAC5B,GAAG;EACH,OAAO,cAAc,MAAM;CAC7B,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CACtC,MAAM,QAAQ,OAAO;CAErB,OAAO;EACL,UAAU,UACR,QACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,OAAO,IAAI,aAAa;GACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;GAE1D,MAAM,YAAY,iBAChB,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,6BAA6B,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;IACT,WAAW,QAAQ,yBAA0B,YAAY;IACzD,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,QAAQ,qBAAqB,YAAY;GAE/C,MAAM,qBAAqB,OAAO,SAAS,MAAM,YAAY;GAC7D,MAAM,yBAAyB,OAAO,SAAS,MAAM,YAAY;GAEjE,MAAM,gBAAgB,OAAO,OAAO;IAClC,GAAG;IACH,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;IACjD,cAAc;GAChB,CAAC;GAKD,MAAM,eAAe;IACnB,YAAY,cAAc;IAC1B,cAAc;GAChB;GAEA,MAAM,YACJ,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,gBAAgB,KAAA,IACtB,OAAO,YAAY,IACnB,OAAO,OAAO,IAAI;IAChB,WAAW,QAAQ,YAAa,YAAY;IAC5C,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,OAAO,QAAQ,QAAQ,YAAY;GAEzC,MAAM,SAAS,QAAQ,SAAS;GAEhC,MAAM,eAAe,SACjB,OAAO,SACL,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV,IACA,KAAA;GAEJ,MAAM,mBAAmB,SACrB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,4BAA4B,SAC9B,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,cAAc,MACd,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;GAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SACL,cAAc,MACd,QAAQ,0BACR,QAAQ,4BACV,IACA,KAAA;GAyBN,OAAO,OAvBK,MACV,UACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,WACZ,SACA,eACA,eACA,WACA;KACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;KACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;KAC7D,GAAI,8BAA8B,KAAA,IAAY,CAAC,IAAI,EAAE,0BAA0B;KAC/E,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;KAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAC/D,GACA,OACF;GACF,CAAC,CAGa,CAAC,CAAC,KAChB,OAAO,YAAY,UAAU;IAC3B,MAAM,UACJ,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,mBAAmB,KAAK;IAE7D,MAAM,WACJ,QAAQ,SAAS,aACf,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,MAAM,QAAQ,MAAM,MAAM,YAAY,KACrC,2BAA2B,QAAQ,sBAAsB,KAAK;IAEpE,OAAO,WAAW,WACd,gBAAgB,SAAS,eAAe,eAAe,OAAO,IAC9D,OAAO,UAAU,KAAK;GAC5B,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ;AACF,CACF"}

package/dist/drizzle/email-target.d.mts

@@ -2,6 +2,7 @@ import "./standalone-guard.mjs";
 import "./email-sql.mjs";
 import { EmailRegistrationAuthority } from "./email-registration.mjs";
 import "./proof-target.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect, Layer } from "effect";
 import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
 import { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from "@yielded/auth/Email";

package/dist/drizzle/email-target.mjs

@@ -1,3 +1,4 @@
+import { validateDrizzleStorage } from "./storage-validation.mjs";
 import { sqlClientStandaloneGuard } from "./standalone-guard.mjs";
 import { CurrentEmailSql, makeSqlEmailAddressPersistence, makeSqlEmailSignInTargets } from "./email-sql.mjs";
 import { makeSqlEmailRegistrationAuthority } from "./email-registration.mjs";
@@ -51,6 +52,10 @@ const coordinateTargetEmailAddress = (database, mapping, proofMapping, configura
 	const hooks = yield* LifecycleHooks;
 	if (yield* hasCommitScope) return yield* EmailUnavailable.make({});
 	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
+	yield* validateDrizzleStorage({
+		...mapping,
+		proof: proofMapping
+	}).pipe(Effect.mapError(() => EmailUnavailable.make({})));
 	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
 		return yield* owner(transaction, { emailAddressPersistence: yield* makeSqlEmailAddressPersistence(mapping, addressOptions(configuration, proofMapping, true)).pipe(Effect.provideService(CurrentEmailSql, transaction)) });
 	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
@@ -59,6 +64,10 @@ const coordinateTargetEmailRegistration = (database, mapping, proofMapping, conf
 	const hooks = yield* LifecycleHooks;
 	if (yield* hasCommitScope) return yield* EmailUnavailable.make({});
 	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
+	yield* validateDrizzleStorage({
+		...mapping,
+		proof: proofMapping
+	}).pipe(Effect.mapError(() => EmailUnavailable.make({})));
 	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
 		return yield* owner(transaction, { registrationAuthority: yield* makeSqlEmailRegistrationAuthority(mapping, registrationOptions(configuration, proofMapping, true)).pipe(Effect.provideService(CurrentEmailSql, transaction)) });
 	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;

package/dist/drizzle/email-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"email-target.mjs","names":[],"sources":["../../src/drizzle/email-target.ts"],"sourcesContent":["import { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport {\n  makeSqlEmailRegistrationAuthority,\n  type EmailRegistrationAuthority,\n  type EmailRegistrationConfiguration,\n} from \"./email-registration\";\nimport {\n  CurrentEmailSql,\n  makeSqlEmailAddressPersistence,\n  makeSqlEmailSignInTargets,\n  type EmailSqlConfiguration,\n  type EmailSqlDatabase,\n  type EmailSqlQuery,\n} from \"./email-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard, type TransactionService } from \"./standalone-guard\";\n\nexport interface EmailTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, EmailUnavailable>;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type EmailCoordinatorError<E> =\n  | E\n  | EmailUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientEmailStandaloneGuard = (\n  service: TransactionService | undefined,\n): Effect.Effect<void, EmailUnavailable> =>\n  sqlClientStandaloneGuard(service, () => EmailUnavailable.make({}));\n\nconst proofConfiguration = (configuration: EmailTargetConfiguration, coordinated = false) => ({\n  mode: configuration.proof.mode,\n  locking: configuration.proof.locking,\n\n  standaloneGuard: Effect.void,\n  coordinated,\n  insertIfAbsent: configuration.proof.insertIfAbsent,\n});\n\nconst addressOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nconst registrationOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nexport const makeTargetEmailSignInServices = (\n  mapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailSignInTargets: yield* makeSqlEmailSignInTargets(mapping, {\n        mode: configuration.mode,\n        locking: false,\n        standaloneGuard: configuration.standaloneGuard,\n      }),\n    };\n  });\n\nexport const makeTargetEmailAddressServices = (\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n        mapping,\n        addressOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetEmailRegistrationServices = <Registration>(\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n        mapping,\n        registrationOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const coordinateTargetEmailAddress = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, EmailCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n                mapping,\n                addressOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(CurrentEmailSql, transaction as unknown as EmailSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetEmailRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, EmailCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n                mapping,\n                registrationOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(CurrentEmailSql, transaction as unknown as EmailSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const emailSignInTargetsLayer = <E, R>(\n  services: Effect.Effect<{ readonly emailSignInTargets: EmailSignInTargets[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    EmailSignInTargets,\n    Effect.map(services, (value) => value.emailSignInTargets),\n  );\n\nexport const emailAddressPersistenceLayer = <E, R>(\n  services: Effect.Effect<\n    { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    EmailAddressPersistence,\n    Effect.map(services, (value) => value.emailAddressPersistence),\n  );\n\nexport const emailRegistrationLayer = <Id, Registration, E, R>(\n  tag: Context.Key<Id, EmailRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;AAgDA,MAAa,iCACX,YAEA,yBAAyB,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,sBAAsB,eAAyC,cAAc,WAAW;CAC5F,MAAM,cAAc,MAAM;CAC1B,SAAS,cAAc,MAAM;CAE7B,iBAAiB,OAAO;CACxB;CACA,gBAAgB,cAAc,MAAM;AACtC;AAEA,MAAM,kBACJ,eACA,cACA,cAAc,WACa;CAC3B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAM,uBACJ,eACA,cACA,cAAc,WACsB;CACpC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAa,iCACX,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,oBAAoB,OAAO,0BAA0B,SAAS;EAC5D,MAAM,cAAc;EACpB,SAAS;EACT,iBAAiB,cAAc;CACjC,CAAC,EACH;AACF,CAAC;AAEH,MAAa,kCACX,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,yBAAyB,OAAO,+BAC9B,SACA,eAAe,eAAe,YAAY,CAC5C,EACF;AACF,CAAC;AAEH,MAAa,uCACX,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,kCAC5B,SACA,oBAAoB,eAAe,YAAY,CACjD,EACF;AACF,CAAC;AAEH,MAAa,gCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAAgF;CACzF,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAmBvD,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,yBAAyB,OAAO,+BAC9B,SACA,eAAe,eAAe,cAAc,IAAI,CAClD,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,qCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAAgF;CACzF,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAmBvD,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,kCAC5B,SACA,oBAAoB,eAAe,cAAc,IAAI,CACvD,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,2BACX,aAEA,MAAM,OACJ,oBACA,OAAO,IAAI,WAAW,UAAU,MAAM,kBAAkB,CAC1D;AAEF,MAAa,gCACX,aAMA,MAAM,OACJ,yBACA,OAAO,IAAI,WAAW,UAAU,MAAM,uBAAuB,CAC/D;AAEF,MAAa,0BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}
+{"version":3,"file":"email-target.mjs","names":[],"sources":["../../src/drizzle/email-target.ts"],"sourcesContent":["import type { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport { EmailAddressPersistence, EmailSignInTargets, EmailUnavailable } from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport { type Context, Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport {\n  makeSqlEmailRegistrationAuthority,\n  type EmailRegistrationAuthority,\n  type EmailRegistrationConfiguration,\n} from \"./email-registration\";\nimport {\n  CurrentEmailSql,\n  makeSqlEmailAddressPersistence,\n  makeSqlEmailSignInTargets,\n  type EmailSqlConfiguration,\n  type EmailSqlDatabase,\n  type EmailSqlQuery,\n} from \"./email-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard, type TransactionService } from \"./standalone-guard\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nexport interface EmailTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, EmailUnavailable>;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type EmailCoordinatorError<E> =\n  | E\n  | EmailUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientEmailStandaloneGuard = (\n  service: TransactionService | undefined,\n): Effect.Effect<void, EmailUnavailable> =>\n  sqlClientStandaloneGuard(service, () => EmailUnavailable.make({}));\n\nconst proofConfiguration = (configuration: EmailTargetConfiguration, coordinated = false) => ({\n  mode: configuration.proof.mode,\n  locking: configuration.proof.locking,\n\n  standaloneGuard: Effect.void,\n  coordinated,\n  insertIfAbsent: configuration.proof.insertIfAbsent,\n});\n\nconst addressOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nconst registrationOptions = (\n  configuration: EmailTargetConfiguration,\n  proofMapping: any,\n  coordinated = false,\n): EmailRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n  proof: {\n    mapping: proofMapping,\n    configuration: proofConfiguration(configuration, true),\n  },\n});\n\nexport const makeTargetEmailSignInServices = (\n  mapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailSignInTargets: yield* makeSqlEmailSignInTargets(mapping, {\n        mode: configuration.mode,\n        locking: false,\n        standaloneGuard: configuration.standaloneGuard,\n      }),\n    };\n  });\n\nexport const makeTargetEmailAddressServices = (\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n        mapping,\n        addressOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetEmailRegistrationServices = <Registration>(\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n        mapping,\n        registrationOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const coordinateTargetEmailAddress = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks | NativeDatabase> =>\n  Effect.gen(function* (): Effect.fn.Return<\n    A,\n    EmailCoordinatorError<E>,\n    R | LifecycleHooks | NativeDatabase\n  > {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    yield* validateDrizzleStorage({ ...mapping, proof: proofMapping }).pipe(\n      Effect.mapError(() => EmailUnavailable.make({})),\n    );\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              emailAddressPersistence: yield* makeSqlEmailAddressPersistence(\n                mapping,\n                addressOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(CurrentEmailSql, transaction as unknown as EmailSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetEmailRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  proofMapping: any,\n  configuration: EmailTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailCoordinatorError<E>, R | LifecycleHooks | NativeDatabase> =>\n  Effect.gen(function* (): Effect.fn.Return<\n    A,\n    EmailCoordinatorError<E>,\n    R | LifecycleHooks | NativeDatabase\n  > {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* EmailUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    yield* validateDrizzleStorage({ ...mapping, proof: proofMapping }).pipe(\n      Effect.mapError(() => EmailUnavailable.make({})),\n    );\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlEmailRegistrationAuthority<Registration>(\n                mapping,\n                registrationOptions(configuration, proofMapping, true),\n              ).pipe(\n                Effect.provideService(CurrentEmailSql, transaction as unknown as EmailSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const emailSignInTargetsLayer = <E, R>(\n  services: Effect.Effect<{ readonly emailSignInTargets: EmailSignInTargets[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    EmailSignInTargets,\n    Effect.map(services, (value) => value.emailSignInTargets),\n  );\n\nexport const emailAddressPersistenceLayer = <E, R>(\n  services: Effect.Effect<\n    { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    EmailAddressPersistence,\n    Effect.map(services, (value) => value.emailAddressPersistence),\n  );\n\nexport const emailRegistrationLayer = <Id, Registration, E, R>(\n  tag: Context.Key<Id, EmailRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n    E,\n    R\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;AAkDA,MAAa,iCACX,YAEA,yBAAyB,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,sBAAsB,eAAyC,cAAc,WAAW;CAC5F,MAAM,cAAc,MAAM;CAC1B,SAAS,cAAc,MAAM;CAE7B,iBAAiB,OAAO;CACxB;CACA,gBAAgB,cAAc,MAAM;AACtC;AAEA,MAAM,kBACJ,eACA,cACA,cAAc,WACa;CAC3B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAM,uBACJ,eACA,cACA,cAAc,WACsB;CACpC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;CACA,OAAO;EACL,SAAS;EACT,eAAe,mBAAmB,eAAe,IAAI;CACvD;AACF;AAEA,MAAa,iCACX,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,oBAAoB,OAAO,0BAA0B,SAAS;EAC5D,MAAM,cAAc;EACpB,SAAS;EACT,iBAAiB,cAAc;CACjC,CAAC,EACH;AACF,CAAC;AAEH,MAAa,kCACX,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,yBAAyB,OAAO,+BAC9B,SACA,eAAe,eAAe,YAAY,CAC5C,EACF;AACF,CAAC;AAEH,MAAa,uCACX,SACA,cACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,kCAC5B,SACA,oBAAoB,eAAe,YAAY,CACjD,EACF;AACF,CAAC;AAEH,MAAa,gCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAIT;CACA,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAEvD,OAAO,uBAAuB;EAAE,GAAG;EAAS,OAAO;CAAa,CAAC,CAAC,CAAC,KACjE,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CACjD;CAmBA,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,yBAAyB,OAAO,+BAC9B,SACA,eAAe,eAAe,cAAc,IAAI,CAClD,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,qCACX,UACA,SACA,cACA,eACA,UAKA,OAAO,IAAI,aAIT;CACA,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAEvD,OAAO,uBAAuB;EAAE,GAAG;EAAS,OAAO;CAAa,CAAC,CAAC,CAAC,KACjE,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CACjD;CAmBA,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,kCAC5B,SACA,oBAAoB,eAAe,cAAc,IAAI,CACvD,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,2BACX,aAEA,MAAM,OACJ,oBACA,OAAO,IAAI,WAAW,UAAU,MAAM,kBAAkB,CAC1D;AAEF,MAAa,gCACX,aAMA,MAAM,OACJ,yBACA,OAAO,IAAI,WAAW,UAAU,MAAM,uBAAuB,CAC/D;AAEF,MAAa,0BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/mysql-emails.d.mts

@@ -6,10 +6,10 @@ import { Database as Database$1 } from "./mysql-database.mjs";
 import { AnyRelations } from "drizzle-orm";
 import { Effect } from "effect";
 import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
+import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 import { EmailAddressPersistence, EmailUnavailable } from "@yielded/auth/Email";
 import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
 import { SqlError } from "effect/sql/SqlError";
-import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 //#region src/drizzle/mysql-emails.d.ts
 type Database = EffectMysql2Database<AnyRelations>;
 type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
@@ -21,7 +21,7 @@ export declare const makeMysqlEmailSignInServices: <S extends AnyMySqlTable, I e
       readonly identifier: import("@yielded/auth/Identity").LoginIdentifier;
     }) => Effect.Effect<import("effect/Option").Option<import("@yielded/auth/Email").EmailCredentialSnapshot>, EmailUnavailable>;
   };
-}, never, Database$1>;
+}, EmailUnavailable, Database$1>;
 export declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
   emailAddressPersistence: {
     readonly target: (input: {
@@ -41,7 +41,7 @@ export declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I
       readonly hasMore: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, EmailUnavailable>;
   };
-}, never, Database$1 | LifecycleHooks>;
+}, EmailUnavailable, Database$1 | LifecycleHooks>;
 export declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
   readonly proofMapping: ProofMapping;
@@ -54,7 +54,7 @@ export declare function coordinateMysqlEmailAddress<D extends Database, S extend
 }, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
 export declare const makeMysqlEmailRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
   registrationAuthority: EmailRegistrationAuthority<Registration>;
-}, never, Database$1 | LifecycleHooks>;
+}, EmailUnavailable, Database$1 | LifecycleHooks>;
 export declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
   readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
   readonly proofMapping: ProofMapping;

package/dist/drizzle/mysql-emails.mjs

@@ -4,6 +4,7 @@ import { coordinateTargetEmailAddress, coordinateTargetEmailRegistration, makeTa
 import { sqlClientProofStandaloneGuard } from "./proof-target.mjs";
 import { nativeDatabase } from "./native-database.mjs";
 import { Database } from "./mysql-database.mjs";
+import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
 import { Context, Effect } from "effect";
 import { EmailAddressPersistence } from "@yielded/auth/Email";
 //#region src/drizzle/mysql-emails.ts
@@ -19,22 +20,22 @@ const configuration = (service) => ({
 		insertIfAbsent: (query, selfKey, selfValue) => query.onDuplicateKeyUpdate({ set: { [selfKey]: selfValue } })
 	}
 });
-const makeMysqlEmailSignInServices = (mapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailSignInServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)));
-const makeMysqlEmailAddressServices = (mapping, proofMapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailAddressServices(mapping, proofMapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)));
+const makeMysqlEmailSignInServices = (mapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailSignInServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(Database)));
+const makeMysqlEmailAddressServices = (mapping, proofMapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailAddressServices(mapping, proofMapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(Database)));
 function coordinateMysqlEmailAddress(acquire, options, body) {
-	return Effect.flatMap(acquire, (database) => coordinateTargetEmailAddress(database, options.mapping, options.proofMapping, configuration(transactionService(database)), (transaction, services) => {
+	return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetEmailAddress(database, options.mapping, options.proofMapping, configuration(transactionService(database)), (transaction, services) => {
 		const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);
 		const work = Effect.provideContext(body, provided);
 		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-	}));
+	}).pipe(Effect.provideService(NativeDatabase, database)));
 }
-const makeMysqlEmailRegistrationServices = (mapping, proofMapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailRegistrationServices(mapping, proofMapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)));
+const makeMysqlEmailRegistrationServices = (mapping, proofMapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailRegistrationServices(mapping, proofMapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(Database)));
 function coordinateMysqlEmailRegistration(acquire, options, body) {
-	return Effect.flatMap(acquire, (database) => coordinateTargetEmailRegistration(database, options.mapping, options.proofMapping, configuration(transactionService(database)), (transaction, services) => {
+	return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetEmailRegistration(database, options.mapping, options.proofMapping, configuration(transactionService(database)), (transaction, services) => {
 		const provided = Context.make(options.target, services.registrationAuthority);
 		const work = Effect.provideContext(body, provided);
 		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-	}));
+	}).pipe(Effect.provideService(NativeDatabase, database)));
 }
 //#endregion
 export { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices };