@yielded/auth-persistence-drizzle 0.1.0-beta.24 → 0.1.0-beta.26

package/dist/drizzle/email-registration.mjs

@@ -1,281 +0,0 @@
-import { requiredEmailRegistrationConstraints } from "./email-model.mjs";
-import { PersistenceMappingError, column, isMappedConstraintConflict, updateValues } from "./model.mjs";
-import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { CurrentProofSql, completeProofPlanIn } from "./proof-sql.mjs";
-import { CurrentEmailSql } from "./email-sql.mjs";
-import { and, eq, isNull } from "drizzle-orm";
-import { Cause, DateTime, Effect, Schema } from "effect";
-import { CurrentCommitJournal, HookConfigurationError, LifecycleHooks, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
-import { SecurityRevision } from "@yielded/auth/Sessions";
-import { EmailUnavailable } from "@yielded/auth/Email";
-import { reportPersistenceFailure } from "@yielded/auth/Persistence";
-import { ProofUnavailable } from "@yielded/auth/Proofs";
-//#region src/drizzle/email-registration.ts
-const unavailable = () => EmailUnavailable.make({});
-const translateFailure = (effect) => reportPersistenceFailure(effect, (error) => Schema.is(EmailUnavailable)(error) || Schema.is(ProofUnavailable)(error) || Schema.is(HookConfigurationError)(error)).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));
-const nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);
-const selectRows = (query, locking) => locking && typeof query.for === "function" ? query.for("update") : query;
-const sameIdentifier = (left, right) => left.namespace === right.namespace && left.value === right.value;
-const validConstraints = (mapping) => {
-	if (mapping.constraints.request !== requiredEmailRegistrationConstraints.request || mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference) return false;
-	if (mapping.mode === "pending") return true;
-	return Object.entries(requiredEmailRegistrationConstraints).every(([key, value]) => mapping.constraints[key] === value);
-};
-const allocate = (mode, asynchronous, synchronous) => {
-	if (mode === "synchronous") return synchronous === void 0 ? Effect.fail(unavailable()) : Effect.try({
-		try: synchronous,
-		catch: (cause) => new PersistenceMappingError({
-			operation: "mapping",
-			cause
-		})
-	});
-	if (asynchronous !== void 0) return asynchronous;
-	return synchronous === void 0 ? Effect.fail(unavailable()) : Effect.try({
-		try: synchronous,
-		catch: (cause) => new PersistenceMappingError({
-			operation: "mapping",
-			cause
-		})
-	});
-};
-const registrationRows = Effect.fn("Drizzle.registrationRows")(function* (mapping, moduleId, commandId, locking) {
-	const database = yield* CurrentEmailSql;
-	const module = column(mapping.registration.table, mapping.registration.moduleId);
-	const command = column(mapping.registration.table, mapping.registration.commandId);
-	return yield* selectRows(database.select().from(mapping.registration.table).where(and(eq(module, moduleId), eq(command, commandId))).limit(1), locking);
-});
-/** Discover before locking, then lock subject before identifier like the other
-* identity owners. A changed discovery is rejected rather than locking a second
-* subject in the opposite order. Proof authority separately enforces the host's
-* active/unverified eligibility policy in the same physical owner. */
-const readEmailRegistrationTarget = Effect.fnUntraced(function* (mapping, identifier, locking) {
-	const database = yield* CurrentEmailSql;
-	const i = mapping.identifier;
-	const s = mapping.subject;
-	const lookup = () => database.select().from(i.table).where(and(eq(column(i.table, i.namespace), identifier.namespace), eq(column(i.table, i.value), identifier.value))).limit(1);
-	const discovered = (yield* lookup())[0];
-	if (discovered === void 0) return { _tag: "Absent" };
-	if (discovered[i.verifiedAt] !== null) return { _tag: "Rejected" };
-	const nativeSubjectId = discovered[i.subjectId];
-	const subject = (yield* selectRows(database.select().from(s.table).where(eq(column(s.table, s.id), nativeSubjectId)).limit(1), locking))[0];
-	const current = (yield* selectRows(lookup(), locking))[0];
-	if (subject === void 0 || current === void 0 || current[i.verifiedAt] !== null || !mapping.subjectId.equals(current[i.subjectId], nativeSubjectId) || current[i.bindingRevision] !== discovered[i.bindingRevision]) return { _tag: "Rejected" };
-	return {
-		_tag: "Reserved",
-		nativeSubjectId,
-		bindingRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(current[i.bindingRevision]),
-		securityRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(subject[s.securityRevision])
-	};
-});
-const owned = (database, configuration, body) => {
-	const run = coordinateCommit(() => database.transaction((transaction) => body.pipe(Effect.provideService(CurrentEmailSql, transaction), Effect.provideService(CurrentProofSql, transaction))), { mode: configuration.mode }).pipe(Effect.map((result) => result.value));
-	return configuration.coordinated !== true ? Effect.gen(function* () {
-		if (yield* hasCommitScope) return yield* unavailable();
-		yield* configuration.standaloneGuard;
-		return yield* run;
-	}) : run;
-};
-const completionMatches = (mapping, input) => {
-	const completion = input.completion.input;
-	return completion.moduleId === `${input.moduleId}/registration` && completion.purpose === "email-code-registration" && completion.binding._tag === "Identifier" && sameIdentifier(completion.binding.identifier, input.identifier) && validConstraints(mapping);
-};
-const prepareReplay = Effect.fn("DrizzleEmailRegistration.prepareReplay")(function* (mapping, row, fingerprint, prepare) {
-	const journal = yield* CurrentCommitJournal;
-	if (row[mapping.registration.fingerprint] !== fingerprint) return prepare({ _tag: "Rejected" }, journal);
-	return prepare(yield* mapping.registration.decodeReplay(row), journal);
-});
-const registerIn = Effect.fn("DrizzleEmailRegistration.registerIn")(function* (mapping, configuration, input, inspected, allocated, prepare) {
-	const journal = yield* CurrentCommitJournal;
-	const existing = (yield* registrationRows(mapping, input.moduleId, input.commandId, configuration.locking))[0];
-	if (existing !== void 0) return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);
-	if (!completionMatches(mapping, input)) return prepare({ _tag: "Rejected" }, journal);
-	if (!inspected.eligible || inspected.fingerprint !== input.fingerprint) return prepare({ _tag: "Rejected" }, journal);
-	const target = mapping.mode === "atomic" ? yield* readEmailRegistrationTarget(mapping, input.identifier, configuration.locking) : void 0;
-	if (target?._tag === "Rejected") return prepare({ _tag: "Rejected" }, journal);
-	if (target?._tag === "Reserved" && (allocated.displacedSecurityRevision === void 0 || allocated.displacedSecurityRevision === target.securityRevision || allocated.identifierRevision === target.bindingRevision)) return yield* unavailable();
-	const now = yield* nowMillis;
-	const intent = {
-		moduleId: input.moduleId,
-		commandId: input.commandId,
-		identifier: Object.freeze({ ...input.identifier }),
-		registration: input.registration,
-		fingerprint: input.fingerprint,
-		completion: Object.freeze({
-			moduleId: input.completion.input.moduleId,
-			purpose: input.completion.input.purpose,
-			continuationId: input.completion.input.continuationId,
-			binding: input.completion.input.binding
-		})
-	};
-	let decision;
-	let nativeSubjectId = allocated.nativeSubjectId;
-	const protectedMutation = Effect.gen(function* () {
-		const transaction = yield* CurrentEmailSql;
-		if (mapping.mode === "pending") {
-			if (allocated.pendingReference === void 0) return false;
-			decision = {
-				_tag: "ProvisioningPending",
-				reference: allocated.pendingReference
-			};
-			yield* transaction.insert(mapping.registration.table).values(mapping.registration.encodeInsert(intent, {
-				state: "pending",
-				pendingReference: allocated.pendingReference,
-				retentionUntilMillis: now + mapping.retentionMillis
-			}));
-		} else {
-			if (allocated.credentialId === void 0 || allocated.securityRevision === void 0 || allocated.identifierRevision === void 0 || allocated.credentialRevision === void 0) return false;
-			const subjectInsert = transaction.insert(mapping.subject.table).values(mapping.provisioning.encodeSubjectInsert(intent, {
-				nativeSubjectId,
-				securityRevision: allocated.securityRevision
-			}));
-			if (mapping.provisioning.idMode === "generated") {
-				const rows = yield* configuration.generatedSubjectRows(subjectInsert);
-				nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);
-			} else yield* subjectInsert;
-			if (nativeSubjectId === void 0) return false;
-			if (target?._tag === "Reserved") {
-				const i = mapping.identifier;
-				const s = mapping.subject;
-				yield* transaction.update(i.table).set(updateValues([
-					[i.subjectId, nativeSubjectId],
-					[i.verifiedAt, mapping.encodeInstant(now)],
-					[i.bindingRevision, allocated.identifierRevision]
-				])).where(and(eq(column(i.table, i.namespace), input.identifier.namespace), eq(column(i.table, i.value), input.identifier.value), eq(column(i.table, i.subjectId), target.nativeSubjectId), eq(column(i.table, i.bindingRevision), target.bindingRevision), isNull(column(i.table, i.verifiedAt))));
-				yield* transaction.update(s.table).set(updateValues([[s.securityRevision, allocated.displacedSecurityRevision]])).where(and(eq(column(s.table, s.id), target.nativeSubjectId), eq(column(s.table, s.securityRevision), target.securityRevision)));
-			} else yield* transaction.insert(mapping.identifier.table).values(mapping.identifier.encodeVerifiedInsert({
-				identifier: input.identifier,
-				subjectId: nativeSubjectId,
-				verifiedAtMillis: now,
-				bindingRevision: allocated.identifierRevision
-			}));
-			yield* transaction.insert(mapping.credential.table).values(mapping.credential.encodeVerifiedInsert({
-				moduleId: input.moduleId,
-				subjectId: nativeSubjectId,
-				credentialId: allocated.credentialId,
-				identifier: input.identifier,
-				credentialRevision: allocated.credentialRevision
-			}));
-			yield* transaction.insert(mapping.authorityCredential.table).values(mapping.authorityCredential.encodeInsert({
-				subjectId: nativeSubjectId,
-				credentialId: allocated.credentialId,
-				revision: allocated.credentialRevision
-			}));
-			yield* transaction.insert(mapping.registration.table).values(mapping.registration.encodeInsert(intent, {
-				state: "registered",
-				nativeSubjectId,
-				retentionUntilMillis: now + mapping.retentionMillis
-			}));
-			decision = { _tag: "Registered" };
-		}
-		const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];
-		const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);
-		const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);
-		const registrationFingerprint = column(mapping.registration.table, mapping.registration.fingerprint);
-		const registrationState = column(mapping.registration.table, mapping.registration.state);
-		const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);
-		const registrationReference = column(mapping.registration.table, mapping.registration.pendingReference);
-		const registrationRetention = column(mapping.registration.table, mapping.registration.retentionUntil);
-		const exactRegistration = yield* selectRows(transaction.select().from(mapping.registration.table).where(and(eq(registrationModule, input.moduleId), eq(registrationCommand, input.commandId), eq(registrationFingerprint, input.fingerprint), eq(registrationState, mapping.mode === "pending" ? "pending" : "registered"), eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)), mapping.mode === "pending" ? and(eq(registrationReference, allocated.pendingReference), isNull(registrationSubject)) : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)))).limit(1), false);
-		if (mapping.mode === "atomic" && nativeSubjectId !== void 0) {
-			const subjectId = column(mapping.subject.table, mapping.subject.id);
-			const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);
-			const identifierValue = column(mapping.identifier.table, mapping.identifier.value);
-			const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);
-			const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);
-			const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);
-			const credentialId = column(mapping.credential.table, mapping.credential.credentialId);
-			const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);
-			const credentialNamespace = column(mapping.credential.table, mapping.credential.identifierNamespace);
-			const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);
-			const authoritySubject = column(mapping.authorityCredential.table, mapping.authorityCredential.subjectId);
-			const authorityId = column(mapping.authorityCredential.table, mapping.authorityCredential.credentialId);
-			const subject = (yield* selectRows(transaction.select().from(mapping.subject.table).where(eq(subjectId, nativeSubjectId)).limit(1), false))[0];
-			const identifier = (yield* selectRows(transaction.select().from(mapping.identifier.table).where(and(eq(identifierNamespace, input.identifier.namespace), eq(identifierValue, input.identifier.value), eq(identifierSubject, nativeSubjectId), eq(identifierVerifiedAt, mapping.encodeInstant(now)))).limit(1), false))[0];
-			const credential = (yield* selectRows(transaction.select().from(mapping.credential.table).where(and(eq(credentialModule, input.moduleId), eq(credentialId, allocated.credentialId), eq(credentialSubject, nativeSubjectId), eq(credentialNamespace, input.identifier.namespace), eq(credentialValue, input.identifier.value))).limit(1), false))[0];
-			const authority = (yield* selectRows(transaction.select().from(mapping.authorityCredential.table).where(and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId))).limit(1), false))[0];
-			const displaced = target?._tag === "Reserved" ? (yield* transaction.select().from(mapping.subject.table).where(and(eq(subjectId, target.nativeSubjectId), eq(column(mapping.subject.table, mapping.subject.securityRevision), allocated.displacedSecurityRevision))).limit(1))[0] : void 0;
-			if (target?._tag === "Reserved" && displaced === void 0 || subject === void 0 || !mapping.subject.isActiveStatus(subject[mapping.subject.status]) || subject[mapping.subject.securityRevision] !== allocated.securityRevision || identifier === void 0 || identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision || !mapping.identifier.isCurrent(identifier) || credential === void 0 || credential[mapping.credential.credentialRevision] !== allocated.credentialRevision || !mapping.credential.isActiveStatus(credential[mapping.credential.status]) || authority === void 0 || authority[mapping.authorityCredential.revision] !== allocated.credentialRevision || !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])) return false;
-		}
-		return stored !== void 0 && exactRegistration.length === 1 && stored[mapping.registration.fingerprint] === input.fingerprint && (mapping.mode === "pending" || nativeSubjectId !== void 0 && stored[mapping.registration.subjectId] !== null && mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId));
-	});
-	let receipt;
-	yield* completeProofPlanIn(configuration.proof.mapping, configuration.proof.configuration, input.completion, protectedMutation, (completionDecision) => {
-		receipt = prepare(completionDecision === "completed" && decision !== void 0 ? decision : { _tag: "Rejected" }, journal);
-		return completionDecision;
-	});
-	return receipt ?? prepare({ _tag: "Rejected" }, journal);
-});
-const prepareConflict = Effect.fn("Drizzle.prepareConflict")(function* (mapping, configuration, input, prepare) {
-	const database = yield* CurrentEmailSql;
-	return yield* owned(database, configuration, Effect.gen(function* () {
-		const journal = yield* CurrentCommitJournal;
-		const row = (yield* registrationRows(mapping, input.moduleId, input.commandId, configuration.locking))[0];
-		return row === void 0 ? prepare({ _tag: "Rejected" }, journal) : yield* prepareReplay(mapping, row, input.fingerprint, prepare);
-	}));
-});
-const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAuthority")(function* (mapping, configuration) {
-	const database = yield* CurrentEmailSql;
-	if (!configuration.coordinated) yield* validateDrizzleStorage({
-		...mapping,
-		proof: configuration.proof.mapping
-	}).pipe(Effect.mapError(unavailable));
-	const hooks = yield* LifecycleHooks;
-	return {
-		inspect: (input) => mapping.inspect(input).pipe(Effect.provideService(CurrentEmailSql, database), Effect.provideService(LifecycleHooks, hooks), translateFailure),
-		registerWithProof: (input, prepare) => Effect.gen(function* () {
-			if (!validConstraints(mapping)) return yield* unavailable();
-			const snapshot = (registration) => configuration.mode === "synchronous" && configuration.coordinated === true ? mapping.snapshotRegistrationSync === void 0 ? Effect.fail(unavailable()) : Effect.try({
-				try: () => mapping.snapshotRegistrationSync(registration),
-				catch: (cause) => new PersistenceMappingError({
-					operation: "mapping",
-					cause
-				})
-			}) : mapping.snapshotRegistration(registration);
-			const storedRegistration = yield* snapshot(input.registration);
-			const inspectionRegistration = yield* snapshot(input.registration);
-			const capturedInput = Object.freeze({
-				...input,
-				identifier: Object.freeze({ ...input.identifier }),
-				registration: storedRegistration
-			});
-			const inspectInput = {
-				identifier: capturedInput.identifier,
-				registration: inspectionRegistration
-			};
-			const inspected = configuration.mode === "synchronous" && configuration.coordinated === true ? mapping.inspectSync === void 0 ? yield* unavailable() : yield* Effect.try({
-				try: () => mapping.inspectSync(inspectInput),
-				catch: (cause) => new PersistenceMappingError({
-					operation: "mapping",
-					cause
-				})
-			}) : yield* mapping.inspect(inspectInput);
-			const atomic = mapping.mode === "atomic";
-			const credentialId = atomic ? yield* allocate(configuration.mode, mapping.allocateCredentialId, mapping.allocateCredentialIdSync) : void 0;
-			const securityRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
-			const displacedSecurityRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
-			const identifierRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
-			const credentialRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
-			const nativeSubjectId = atomic && mapping.provisioning.idMode !== "generated" ? yield* allocate(configuration.mode, mapping.provisioning.allocateSubjectId, mapping.provisioning.allocateSubjectIdSync) : void 0;
-			const pendingReference = mapping.mode === "pending" ? yield* allocate(configuration.mode, mapping.allocatePendingReference, mapping.allocatePendingReferenceSync) : void 0;
-			return yield* owned(database, configuration, Effect.gen(function* () {
-				return yield* registerIn(mapping, configuration, capturedInput, inspected, {
-					...credentialId === void 0 ? {} : { credentialId },
-					...securityRevision === void 0 ? {} : { securityRevision },
-					...displacedSecurityRevision === void 0 ? {} : { displacedSecurityRevision },
-					...identifierRevision === void 0 ? {} : { identifierRevision },
-					...credentialRevision === void 0 ? {} : { credentialRevision },
-					...nativeSubjectId === void 0 ? {} : { nativeSubjectId },
-					...pendingReference === void 0 ? {} : { pendingReference }
-				}, prepare);
-			})).pipe(Effect.catchCause((cause) => {
-				const request = cause.reasons.every(Cause.isFailReason) && isMappedConstraintConflict(mapping.isRequestConflict, cause);
-				const conflict = mapping.mode === "atomic" && (cause.reasons.every(Cause.isFailReason) && isMappedConstraintConflict(mapping.isIdentifierConflict, cause) || cause.reasons.every(Cause.isFailReason) && isMappedConstraintConflict(mapping.isCredentialConflict, cause));
-				return request || conflict ? prepareConflict(mapping, configuration, capturedInput, prepare) : Effect.failCause(cause);
-			}));
-		}).pipe(Effect.provideService(CurrentEmailSql, database), Effect.provideService(LifecycleHooks, hooks), translateFailure)
-	};
-});
-//#endregion
-export { makeSqlEmailRegistrationAuthority, readEmailRegistrationTarget };
-
-//# sourceMappingURL=email-registration.mjs.map

package/dist/drizzle/email-registration.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-registration.mjs","names":[],"sources":["../../src/drizzle/email-registration.ts"],"sourcesContent":["import type { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  type PrepareEmailCommit,\n  type EmailCommandId,\n  type EmailRegistrationDecision,\n  EmailUnavailable,\n} from \"@yielded/auth/Email\";\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n  LifecycleHooks,\n  HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport { type ProofCompletionPlan, ProofUnavailable } from \"@yielded/auth/Proofs\";\nimport type { TokenDigest } from \"@yielded/auth/Schema\";\nimport { SecurityRevision } from \"@yielded/auth/Sessions\";\n/* oxlint-disable no-explicit-any -- registration plans bridge consumer-owned Drizzle rows. */\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { Cause, DateTime, Effect, Schema } from \"effect\";\n\nimport {\n  type AnyEmailRegistrationMapping,\n  requiredEmailRegistrationConstraints,\n} from \"./email-model\";\nimport { CurrentEmailSql, type EmailSqlDatabase, type EmailSqlQuery } from \"./email-sql\";\nimport { column, isMappedConstraintConflict, PersistenceMappingError, updateValues } from \"./model\";\nimport {\n  CurrentProofSql,\n  completeProofPlanIn,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n} from \"./proof-sql\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\ntype Mapping<Registration> = AnyEmailRegistrationMapping<Registration>;\nconst unavailable = () => EmailUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(EmailUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly completion: ProofCompletionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\nexport interface EmailRegistrationConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinated?: boolean;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\nconst selectRows = (query: EmailSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst validConstraints = <Registration>(mapping: Mapping<Registration>) => {\n  if (\n    mapping.constraints.request !== requiredEmailRegistrationConstraints.request ||\n    mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference\n  )\n    return false;\n  if (mapping.mode === \"pending\") return true;\n\n  return Object.entries(requiredEmailRegistrationConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n  );\n};\n\nconst allocate = <A>(\n  mode: EmailRegistrationConfiguration[\"mode\"],\n  asynchronous: Effect.Effect<A, PersistenceMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n  mapping: Mapping<Registration>,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n\n  const module = column(mapping.registration.table, mapping.registration.moduleId);\n  const command = column(mapping.registration.table, mapping.registration.commandId);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.registration.table)\n      .where(and(eq(module, moduleId), eq(command, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\n/** Discover before locking, then lock subject before identifier like the other\n * identity owners. A changed discovery is rejected rather than locking a second\n * subject in the opposite order. Proof authority separately enforces the host's\n * active/unverified eligibility policy in the same physical owner. */\nexport const readEmailRegistrationTarget = Effect.fnUntraced(function* <Registration>(\n  mapping: Extract<Mapping<Registration>, { readonly mode: \"atomic\" }>,\n  identifier: LoginIdentifier,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n  const i = mapping.identifier;\n  const s = mapping.subject;\n\n  const lookup = () =>\n    database\n      .select()\n      .from(i.table)\n      .where(\n        and(\n          eq(column(i.table, i.namespace), identifier.namespace),\n          eq(column(i.table, i.value), identifier.value),\n        ),\n      )\n      .limit(1);\n\n  const discovered = (yield* lookup())[0];\n\n  if (discovered === undefined) return { _tag: \"Absent\" } as const;\n  if (discovered[i.verifiedAt] !== null) return { _tag: \"Rejected\" } as const;\n  const nativeSubjectId = discovered[i.subjectId];\n\n  const subject = (yield* selectRows(\n    database\n      .select()\n      .from(s.table)\n      .where(eq(column(s.table, s.id), nativeSubjectId))\n      .limit(1),\n    locking,\n  ))[0];\n\n  const current = (yield* selectRows(lookup(), locking))[0];\n\n  if (\n    subject === undefined ||\n    current === undefined ||\n    current[i.verifiedAt] !== null ||\n    !mapping.subjectId.equals(current[i.subjectId], nativeSubjectId) ||\n    current[i.bindingRevision] !== discovered[i.bindingRevision]\n  )\n    return { _tag: \"Rejected\" } as const;\n\n  return {\n    _tag: \"Reserved\" as const,\n    nativeSubjectId,\n    bindingRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(\n      current[i.bindingRevision],\n    ),\n    securityRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(\n      subject[s.securityRevision],\n    ),\n  };\n});\n\nconst owned = <A, E, R>(\n  database: EmailSqlDatabase,\n  configuration: EmailRegistrationConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentEmailSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst completionMatches = <Registration>(\n  mapping: Mapping<Registration>,\n  input: {\n    readonly moduleId: string;\n    readonly identifier: LoginIdentifier;\n    readonly completion: ProofCompletionPlan;\n  },\n) => {\n  const completion = input.completion.input;\n\n  return (\n    completion.moduleId === `${input.moduleId}/registration` &&\n    completion.purpose === \"email-code-registration\" &&\n    completion.binding._tag === \"Identifier\" &&\n    sameIdentifier(completion.binding.identifier, input.identifier) &&\n    validConstraints(mapping)\n  );\n};\n\nconst prepareReplay = Effect.fn(\"DrizzleEmailRegistration.prepareReplay\")(function* <\n  Registration,\n  A,\n>(\n  mapping: Mapping<Registration>,\n  row: any,\n  fingerprint: TokenDigest,\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  if (row[mapping.registration.fingerprint] !== fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  return prepare(yield* mapping.registration.decodeReplay(row), journal);\n});\n\nconst registerIn = Effect.fn(\"DrizzleEmailRegistration.registerIn\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n    readonly fingerprint: TokenDigest;\n    readonly completion: ProofCompletionPlan;\n  },\n  inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n  allocated: {\n    readonly credentialId?: string;\n    readonly securityRevision?: SecurityRevision;\n    readonly displacedSecurityRevision?: SecurityRevision;\n    readonly identifierRevision?: SecurityRevision;\n    readonly credentialRevision?: SecurityRevision;\n    readonly nativeSubjectId?: unknown;\n    readonly pendingReference?: string;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const existing = (yield* registrationRows(\n    mapping,\n    input.moduleId,\n    input.commandId,\n    configuration.locking,\n  ))[0];\n\n  if (existing !== undefined)\n    return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);\n  if (!completionMatches(mapping, input)) return prepare({ _tag: \"Rejected\" }, journal);\n  if (!inspected.eligible || inspected.fingerprint !== input.fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  const target =\n    mapping.mode === \"atomic\"\n      ? yield* readEmailRegistrationTarget(mapping, input.identifier, configuration.locking)\n      : undefined;\n\n  if (target?._tag === \"Rejected\") return prepare({ _tag: \"Rejected\" }, journal);\n  if (\n    target?._tag === \"Reserved\" &&\n    (allocated.displacedSecurityRevision === undefined ||\n      allocated.displacedSecurityRevision === target.securityRevision ||\n      allocated.identifierRevision === target.bindingRevision)\n  )\n    return yield* unavailable();\n  const now = yield* nowMillis;\n\n  const intent = {\n    moduleId: input.moduleId,\n    commandId: input.commandId,\n    identifier: Object.freeze({ ...input.identifier }),\n    registration: input.registration,\n    fingerprint: input.fingerprint,\n    completion: Object.freeze({\n      moduleId: input.completion.input.moduleId,\n      purpose: input.completion.input.purpose,\n      continuationId: input.completion.input.continuationId,\n      binding: input.completion.input.binding,\n    }),\n  };\n\n  let decision: EmailRegistrationDecision | undefined;\n  let nativeSubjectId = allocated.nativeSubjectId;\n\n  const protectedMutation = Effect.gen(function* () {\n    const transaction = yield* CurrentEmailSql;\n\n    if (mapping.mode === \"pending\") {\n      if (allocated.pendingReference === undefined) return false;\n      decision = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"pending\",\n          pendingReference: allocated.pendingReference,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n    } else {\n      if (\n        allocated.credentialId === undefined ||\n        allocated.securityRevision === undefined ||\n        allocated.identifierRevision === undefined ||\n        allocated.credentialRevision === undefined\n      )\n        return false;\n\n      const subjectInsert = transaction.insert(mapping.subject.table).values(\n        mapping.provisioning.encodeSubjectInsert(intent, {\n          nativeSubjectId,\n          securityRevision: allocated.securityRevision,\n        }),\n      );\n\n      if (mapping.provisioning.idMode === \"generated\") {\n        const rows = yield* configuration.generatedSubjectRows(subjectInsert);\n\n        nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);\n      } else yield* subjectInsert;\n      if (nativeSubjectId === undefined) return false;\n      if (target?._tag === \"Reserved\") {\n        const i = mapping.identifier;\n        const s = mapping.subject;\n\n        // Change only mapped ownership columns. Never delete a consumer-owned\n        // identifier row or copy insertion defaults over unrelated columns.\n        yield* transaction\n          .update(i.table)\n          .set(\n            updateValues([\n              [i.subjectId, nativeSubjectId],\n              [i.verifiedAt, mapping.encodeInstant(now)],\n              [i.bindingRevision, allocated.identifierRevision],\n            ]),\n          )\n          .where(\n            and(\n              eq(column(i.table, i.namespace), input.identifier.namespace),\n              eq(column(i.table, i.value), input.identifier.value),\n              eq(column(i.table, i.subjectId), target.nativeSubjectId),\n              eq(column(i.table, i.bindingRevision), target.bindingRevision),\n              isNull(column(i.table, i.verifiedAt)),\n            ),\n          );\n        yield* transaction\n          .update(s.table)\n          .set(updateValues([[s.securityRevision, allocated.displacedSecurityRevision]]))\n          .where(\n            and(\n              eq(column(s.table, s.id), target.nativeSubjectId),\n              eq(column(s.table, s.securityRevision), target.securityRevision),\n            ),\n          );\n      } else {\n        yield* transaction.insert(mapping.identifier.table).values(\n          mapping.identifier.encodeVerifiedInsert({\n            identifier: input.identifier,\n            subjectId: nativeSubjectId,\n            verifiedAtMillis: now,\n            bindingRevision: allocated.identifierRevision,\n          }),\n        );\n      }\n      yield* transaction.insert(mapping.credential.table).values(\n        mapping.credential.encodeVerifiedInsert({\n          moduleId: input.moduleId,\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          identifier: input.identifier,\n          credentialRevision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.authorityCredential.table).values(\n        mapping.authorityCredential.encodeInsert({\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          revision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"registered\",\n          nativeSubjectId,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n      decision = { _tag: \"Registered\" };\n    }\n    const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];\n    const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n    const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n    const registrationFingerprint = column(\n      mapping.registration.table,\n      mapping.registration.fingerprint,\n    );\n\n    const registrationState = column(mapping.registration.table, mapping.registration.state);\n    const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);\n\n    const registrationReference = column(\n      mapping.registration.table,\n      mapping.registration.pendingReference,\n    );\n\n    const registrationRetention = column(\n      mapping.registration.table,\n      mapping.registration.retentionUntil,\n    );\n\n    const exactRegistration = yield* selectRows(\n      transaction\n        .select()\n        .from(mapping.registration.table)\n        .where(\n          and(\n            eq(registrationModule, input.moduleId),\n            eq(registrationCommand, input.commandId),\n            eq(registrationFingerprint, input.fingerprint),\n            eq(registrationState, mapping.mode === \"pending\" ? \"pending\" : \"registered\"),\n            eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)),\n            mapping.mode === \"pending\"\n              ? and(\n                  eq(registrationReference, allocated.pendingReference!),\n                  isNull(registrationSubject),\n                )\n              : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)),\n          ),\n        )\n        .limit(1),\n      false,\n    );\n\n    if (mapping.mode === \"atomic\" && nativeSubjectId !== undefined) {\n      const subjectId = column(mapping.subject.table, mapping.subject.id);\n      const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n      const identifierValue = column(mapping.identifier.table, mapping.identifier.value);\n      const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n      const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n      const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);\n      const credentialId = column(mapping.credential.table, mapping.credential.credentialId);\n      const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);\n\n      const credentialNamespace = column(\n        mapping.credential.table,\n        mapping.credential.identifierNamespace,\n      );\n\n      const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);\n\n      const authoritySubject = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.subjectId,\n      );\n\n      const authorityId = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.credentialId,\n      );\n\n      const subject = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.subject.table)\n          .where(eq(subjectId, nativeSubjectId))\n          .limit(1),\n        false,\n      ))[0];\n\n      const identifier = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.identifier.table)\n          .where(\n            and(\n              eq(identifierNamespace, input.identifier.namespace),\n              eq(identifierValue, input.identifier.value),\n              eq(identifierSubject, nativeSubjectId),\n              eq(identifierVerifiedAt, mapping.encodeInstant(now)),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const credential = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.credential.table)\n          .where(\n            and(\n              eq(credentialModule, input.moduleId),\n              eq(credentialId, allocated.credentialId!),\n              eq(credentialSubject, nativeSubjectId),\n              eq(credentialNamespace, input.identifier.namespace),\n              eq(credentialValue, input.identifier.value),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const authority = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.authorityCredential.table)\n          .where(\n            and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId!)),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const displaced =\n        target?._tag === \"Reserved\"\n          ? (yield* transaction\n              .select()\n              .from(mapping.subject.table)\n              .where(\n                and(\n                  eq(subjectId, target.nativeSubjectId),\n                  eq(\n                    column(mapping.subject.table, mapping.subject.securityRevision),\n                    allocated.displacedSecurityRevision,\n                  ),\n                ),\n              )\n              .limit(1))[0]\n          : undefined;\n\n      if (\n        (target?._tag === \"Reserved\" && displaced === undefined) ||\n        subject === undefined ||\n        !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n        subject[mapping.subject.securityRevision] !== allocated.securityRevision ||\n        identifier === undefined ||\n        identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision ||\n        !mapping.identifier.isCurrent(identifier) ||\n        credential === undefined ||\n        credential[mapping.credential.credentialRevision] !== allocated.credentialRevision ||\n        !mapping.credential.isActiveStatus(credential[mapping.credential.status]) ||\n        authority === undefined ||\n        authority[mapping.authorityCredential.revision] !== allocated.credentialRevision ||\n        !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])\n      )\n        return false;\n    }\n\n    return (\n      stored !== undefined &&\n      exactRegistration.length === 1 &&\n      stored[mapping.registration.fingerprint] === input.fingerprint &&\n      (mapping.mode === \"pending\" ||\n        (nativeSubjectId !== undefined &&\n          stored[mapping.registration.subjectId] !== null &&\n          mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId)))\n    );\n  });\n\n  let receipt: PreparedCommit<A> | undefined;\n\n  yield* completeProofPlanIn(\n    configuration.proof.mapping,\n    configuration.proof.configuration,\n    input.completion,\n    protectedMutation,\n    (completionDecision) => {\n      receipt = prepare(\n        completionDecision === \"completed\" && decision !== undefined\n          ? decision\n          : { _tag: \"Rejected\" },\n        journal,\n      );\n\n      return completionDecision;\n    },\n  );\n\n  return receipt ?? prepare({ _tag: \"Rejected\" }, journal);\n});\n\nconst prepareConflict = Effect.fn(\"Drizzle.prepareConflict\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly fingerprint: TokenDigest;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const database = yield* CurrentEmailSql;\n\n  return yield* owned(\n    database,\n    configuration,\n    Effect.gen(function* () {\n      const journal = yield* CurrentCommitJournal;\n\n      const row = (yield* registrationRows(\n        mapping,\n        input.moduleId,\n        input.commandId,\n        configuration.locking,\n      ))[0];\n\n      return row === undefined\n        ? prepare({ _tag: \"Rejected\" }, journal)\n        : yield* prepareReplay(mapping, row, input.fingerprint, prepare);\n    }),\n  );\n});\n\nexport const makeSqlEmailRegistrationAuthority = Effect.fn(\"makeSqlEmailRegistrationAuthority\")(\n  function* <Registration>(\n    mapping: Mapping<Registration>,\n    configuration: EmailRegistrationConfiguration,\n  ): Effect.fn.Return<\n    EmailRegistrationAuthority<Registration>,\n    EmailUnavailable,\n    LifecycleHooks | CurrentEmailSql | NativeDatabase\n  > {\n    const database = yield* CurrentEmailSql;\n\n    if (!configuration.coordinated)\n      yield* validateDrizzleStorage({\n        ...mapping,\n        proof: configuration.proof.mapping,\n      }).pipe(Effect.mapError(unavailable));\n    const hooks = yield* LifecycleHooks;\n\n    return {\n      inspect: (input) =>\n        mapping\n          .inspect(input)\n          .pipe(\n            Effect.provideService(CurrentEmailSql, database),\n            Effect.provideService(LifecycleHooks, hooks),\n            translateFailure,\n          ),\n      registerWithProof: (input, prepare) =>\n        Effect.gen(function* () {\n          if (!validConstraints(mapping)) return yield* unavailable();\n\n          const snapshot = (registration: Registration) =>\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.snapshotRegistrationSync === undefined\n                ? Effect.fail(unavailable())\n                : Effect.try({\n                    try: () => mapping.snapshotRegistrationSync!(registration),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : mapping.snapshotRegistration(registration);\n\n          const storedRegistration = yield* snapshot(input.registration);\n          const inspectionRegistration = yield* snapshot(input.registration);\n\n          const capturedInput = Object.freeze({\n            ...input,\n            identifier: Object.freeze({ ...input.identifier }),\n            registration: storedRegistration,\n          });\n\n          // Registration decoding and fingerprinting may suspend (for example while\n          // hashing a detached Registration value). Finish that work before a\n          // synchronous Durable Object transaction owner is entered.\n          const inspectInput = {\n            identifier: capturedInput.identifier,\n            registration: inspectionRegistration,\n          };\n\n          const inspected =\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.inspectSync === undefined\n                ? yield* unavailable()\n                : yield* Effect.try({\n                    try: () => mapping.inspectSync!(inspectInput),\n                    catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n                  })\n              : yield* mapping.inspect(inspectInput);\n\n          const atomic = mapping.mode === \"atomic\";\n\n          const credentialId = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              )\n            : undefined;\n\n          const securityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const displacedSecurityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const identifierRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const credentialRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const nativeSubjectId =\n            atomic && mapping.provisioning.idMode !== \"generated\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.provisioning.allocateSubjectId,\n                  mapping.provisioning.allocateSubjectIdSync,\n                )\n              : undefined;\n\n          const pendingReference =\n            mapping.mode === \"pending\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.allocatePendingReference,\n                  mapping.allocatePendingReferenceSync,\n                )\n              : undefined;\n\n          const run = owned(\n            database,\n            configuration,\n            Effect.gen(function* () {\n              return yield* registerIn(\n                mapping,\n                configuration,\n                capturedInput,\n                inspected,\n                {\n                  ...(credentialId === undefined ? {} : { credentialId }),\n                  ...(securityRevision === undefined ? {} : { securityRevision }),\n                  ...(displacedSecurityRevision === undefined ? {} : { displacedSecurityRevision }),\n                  ...(identifierRevision === undefined ? {} : { identifierRevision }),\n                  ...(credentialRevision === undefined ? {} : { credentialRevision }),\n                  ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n                  ...(pendingReference === undefined ? {} : { pendingReference }),\n                },\n                prepare,\n              );\n            }),\n          );\n\n          return yield* run.pipe(\n            Effect.catchCause((cause) => {\n              const request =\n                cause.reasons.every(Cause.isFailReason) &&\n                isMappedConstraintConflict(mapping.isRequestConflict, cause);\n\n              const conflict =\n                mapping.mode === \"atomic\" &&\n                ((cause.reasons.every(Cause.isFailReason) &&\n                  isMappedConstraintConflict(mapping.isIdentifierConflict, cause)) ||\n                  (cause.reasons.every(Cause.isFailReason) &&\n                    isMappedConstraintConflict(mapping.isCredentialConflict, cause)));\n\n              return request || conflict\n                ? prepareConflict(mapping, configuration, capturedInput, prepare)\n                : Effect.failCause(cause);\n            }),\n          );\n        }).pipe(\n          Effect.provideService(CurrentEmailSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    };\n  },\n);\n"],"mappings":";;;;;;;;;;;;;AAuCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,SAAS,aAAa;AAmCjE,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,oBAAkC,YAAmC;CACzE,IACE,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,kBAE9E,OAAO;CACT,IAAI,QAAQ,SAAS,WAAW,OAAO;CAEvC,OAAO,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OACzD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AACF;AAEA,MAAM,YACJ,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,wBAAwB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC/E,CAAC;AACP;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC/E,MAAM,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAEjF,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,QAAQ,QAAQ,GAAG,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CACxD,MAAM,CAAC,GACV,OACF;AACF,CAAC;;;;;AAMD,MAAa,8BAA8B,OAAO,WAAW,WAC3D,SACA,YACA,SACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,IAAI,QAAQ;CAClB,MAAM,IAAI,QAAQ;CAElB,MAAM,eACJ,SACG,OAAO,CAAC,CACR,KAAK,EAAE,KAAK,CAAC,CACb,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,WAAW,SAAS,GACrD,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,KAAK,CAC/C,CACF,CAAC,CACA,MAAM,CAAC;CAEZ,MAAM,cAAc,OAAO,OAAO,EAAA,CAAG;CAErC,IAAI,eAAe,KAAA,GAAW,OAAO,EAAE,MAAM,SAAS;CACtD,IAAI,WAAW,EAAE,gBAAgB,MAAM,OAAO,EAAE,MAAM,WAAW;CACjE,MAAM,kBAAkB,WAAW,EAAE;CAErC,MAAM,WAAW,OAAO,WACtB,SACG,OAAO,CAAC,CACR,KAAK,EAAE,KAAK,CAAC,CACb,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CACjD,MAAM,CAAC,GACV,OACF,EAAA,CAAG;CAEH,MAAM,WAAW,OAAO,WAAW,OAAO,GAAG,OAAO,EAAA,CAAG;CAEvD,IACE,YAAY,KAAA,KACZ,YAAY,KAAA,KACZ,QAAQ,EAAE,gBAAgB,QAC1B,CAAC,QAAQ,UAAU,OAAO,QAAQ,EAAE,YAAY,eAAe,KAC/D,QAAQ,EAAE,qBAAqB,WAAW,EAAE,kBAE5C,OAAO,EAAE,MAAM,WAAW;CAE5B,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CAClE,QAAQ,EAAE,gBACZ;EACA,kBAAkB,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CACnE,QAAQ,EAAE,iBACZ;CACF;AACF,CAAC;AAED,MAAM,SACJ,UACA,eACA,SACG;CACH,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,iBAAiB,WAAW,GAClD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,qBACJ,SACA,UAKG;CACH,MAAM,aAAa,MAAM,WAAW;CAEpC,OACE,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,WAAW,QAAQ,SAAS,gBAC5B,eAAe,WAAW,QAAQ,YAAY,MAAM,UAAU,KAC9D,iBAAiB,OAAO;AAE5B;AAEA,MAAM,gBAAgB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAIxE,SACA,KACA,aACA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,IAAI,IAAI,QAAQ,aAAa,iBAAiB,aAC5C,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,OAAO,QAAQ,OAAO,QAAQ,aAAa,aAAa,GAAG,GAAG,OAAO;AACvE,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAClE,SACA,eACA,OAQA,WACA,WASA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBACvB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;CAEH,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,cAAc,SAAS,UAAU,MAAM,aAAa,OAAO;CAC3E,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CACpF,IAAI,CAAC,UAAU,YAAY,UAAU,gBAAgB,MAAM,aACzD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,MAAM,SACJ,QAAQ,SAAS,WACb,OAAO,4BAA4B,SAAS,MAAM,YAAY,cAAc,OAAO,IACnF,KAAA;CAEN,IAAI,QAAQ,SAAS,YAAY,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAC7E,IACE,QAAQ,SAAS,eAChB,UAAU,8BAA8B,KAAA,KACvC,UAAU,8BAA8B,OAAO,oBAC/C,UAAU,uBAAuB,OAAO,kBAE1C,OAAO,OAAO,YAAY;CAC5B,MAAM,MAAM,OAAO;CAEnB,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;EACjD,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,OAAO,OAAO;GACxB,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,kBAAkB,UAAU;CAEhC,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,cAAc,OAAO;EAE3B,IAAI,QAAQ,SAAS,WAAW;GAC9B,IAAI,UAAU,qBAAqB,KAAA,GAAW,OAAO;GACrD,WAAW;IAAE,MAAM;IAAuB,WAAW,UAAU;GAAiB;GAChF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP,kBAAkB,UAAU;IAC5B,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;EACF,OAAO;GACL,IACE,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAET,MAAM,gBAAgB,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC9D,QAAQ,aAAa,oBAAoB,QAAQ;IAC/C;IACA,kBAAkB,UAAU;GAC9B,CAAC,CACH;GAEA,IAAI,QAAQ,aAAa,WAAW,aAAa;IAC/C,MAAM,OAAO,OAAO,cAAc,qBAAqB,aAAa;IAEpE,kBAAkB,OAAO,QAAQ,aAAa,kBAAkB,IAAI;GACtE,OAAO,OAAO;GACd,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAC1C,IAAI,QAAQ,SAAS,YAAY;IAC/B,MAAM,IAAI,QAAQ;IAClB,MAAM,IAAI,QAAQ;IAIlB,OAAO,YACJ,OAAO,EAAE,KAAK,CAAC,CACf,IACC,aAAa;KACX,CAAC,EAAE,WAAW,eAAe;KAC7B,CAAC,EAAE,YAAY,QAAQ,cAAc,GAAG,CAAC;KACzC,CAAC,EAAE,iBAAiB,UAAU,kBAAkB;IAClD,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,MAAM,WAAW,SAAS,GAC3D,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,MAAM,WAAW,KAAK,GACnD,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,OAAO,eAAe,GACvD,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,eAAe,GAC7D,OAAO,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CACtC,CACF;IACF,OAAO,YACJ,OAAO,EAAE,KAAK,CAAC,CACf,IAAI,aAAa,CAAC,CAAC,EAAE,kBAAkB,UAAU,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAC9E,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,eAAe,GAChD,GAAG,OAAO,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,gBAAgB,CACjE,CACF;GACJ,OACE,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,YAAY,MAAM;IAClB,WAAW;IACX,kBAAkB;IAClB,iBAAiB,UAAU;GAC7B,CAAC,CACH;GAEF,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,UAAU,MAAM;IAChB,WAAW;IACX,cAAc,UAAU;IACxB,YAAY,MAAM;IAClB,oBAAoB,UAAU;GAChC,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAC3D,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX,cAAc,UAAU;IACxB,UAAU,UAAU;GACtB,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP;IACA,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;GACA,WAAW,EAAE,MAAM,aAAa;EAClC;EACA,MAAM,UAAU,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK,EAAA,CAAG;EAC1F,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;EAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;EACvF,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,gBACvB;EAEA,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,cACvB;EAEA,MAAM,oBAAoB,OAAO,WAC/B,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,oBAAoB,MAAM,QAAQ,GACrC,GAAG,qBAAqB,MAAM,SAAS,GACvC,GAAG,yBAAyB,MAAM,WAAW,GAC7C,GAAG,mBAAmB,QAAQ,SAAS,YAAY,YAAY,YAAY,GAC3E,GAAG,uBAAuB,QAAQ,cAAc,MAAM,QAAQ,eAAe,CAAC,GAC9E,QAAQ,SAAS,YACb,IACE,GAAG,uBAAuB,UAAU,gBAAiB,GACrD,OAAO,mBAAmB,CAC5B,IACA,IAAI,GAAG,qBAAqB,eAAe,GAAG,OAAO,qBAAqB,CAAC,CACjF,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF;EAEA,IAAI,QAAQ,SAAS,YAAY,oBAAoB,KAAA,GAAW;GAC9D,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GAClE,MAAM,sBAAsB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACzF,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;GACjF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACvF,MAAM,uBAAuB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;GAC3F,MAAM,mBAAmB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;GACrF,MAAM,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;GACrF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEvF,MAAM,sBAAsB,OAC1B,QAAQ,WAAW,OACnB,QAAQ,WAAW,mBACrB;GAEA,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;GAE3F,MAAM,mBAAmB,OACvB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;GAEA,MAAM,cAAc,OAClB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,YAC9B;GAEA,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,WAAW,eAAe,CAAC,CAAC,CACrC,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,GAC1C,GAAG,mBAAmB,eAAe,GACrC,GAAG,sBAAsB,QAAQ,cAAc,GAAG,CAAC,CACrD,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,kBAAkB,MAAM,QAAQ,GACnC,GAAG,cAAc,UAAU,YAAa,GACxC,GAAG,mBAAmB,eAAe,GACrC,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,aAAa,OAAO,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IAAI,GAAG,kBAAkB,eAAe,GAAG,GAAG,aAAa,UAAU,YAAa,CAAC,CACrF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,YACJ,QAAQ,SAAS,cACZ,OAAO,YACL,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,WAAW,OAAO,eAAe,GACpC,GACE,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB,GAC9D,UAAU,yBACZ,CACF,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAAG,KACb,KAAA;GAEN,IACG,QAAQ,SAAS,cAAc,cAAc,KAAA,KAC9C,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,QAAQ,QAAQ,QAAQ,sBAAsB,UAAU,oBACxD,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,qBAAqB,UAAU,sBAC7D,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,wBAAwB,UAAU,sBAChE,CAAC,QAAQ,WAAW,eAAe,WAAW,QAAQ,WAAW,OAAO,KACxE,cAAc,KAAA,KACd,UAAU,QAAQ,oBAAoB,cAAc,UAAU,sBAC9D,CAAC,QAAQ,oBAAoB,eAAe,UAAU,QAAQ,oBAAoB,OAAO,GAEzF,OAAO;EACX;EAEA,OACE,WAAW,KAAA,KACX,kBAAkB,WAAW,KAC7B,OAAO,QAAQ,aAAa,iBAAiB,MAAM,gBAClD,QAAQ,SAAS,aACf,oBAAoB,KAAA,KACnB,OAAO,QAAQ,aAAa,eAAe,QAC3C,QAAQ,UAAU,OAAO,OAAO,QAAQ,aAAa,YAAY,eAAe;CAExF,CAAC;CAED,IAAI;CAEJ,OAAO,oBACL,cAAc,MAAM,SACpB,cAAc,MAAM,eACpB,MAAM,YACN,oBACC,uBAAuB;EACtB,UAAU,QACR,uBAAuB,eAAe,aAAa,KAAA,IAC/C,WACA,EAAE,MAAM,WAAW,GACvB,OACF;EAEA,OAAO;CACT,CACF;CAEA,OAAO,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;AACzD,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,eACA,OAKA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,MACZ,UACA,eACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EAEvB,MAAM,OAAO,OAAO,iBAClB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;EAEH,OAAO,QAAQ,KAAA,IACX,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO,IACrC,OAAO,cAAc,SAAS,KAAK,MAAM,aAAa,OAAO;CACnE,CAAC,CACH;AACF,CAAC;AAED,MAAa,oCAAoC,OAAO,GAAG,mCAAmC,CAAC,CAC7F,WACE,SACA,eAKA;CACA,MAAM,WAAW,OAAO;CAExB,IAAI,CAAC,cAAc,aACjB,OAAO,uBAAuB;EAC5B,GAAG;EACH,OAAO,cAAc,MAAM;CAC7B,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CACtC,MAAM,QAAQ,OAAO;CAErB,OAAO;EACL,UAAU,UACR,QACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,OAAO,IAAI,aAAa;GACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;GAE1D,MAAM,YAAY,iBAChB,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,6BAA6B,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;IACT,WAAW,QAAQ,yBAA0B,YAAY;IACzD,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,QAAQ,qBAAqB,YAAY;GAE/C,MAAM,qBAAqB,OAAO,SAAS,MAAM,YAAY;GAC7D,MAAM,yBAAyB,OAAO,SAAS,MAAM,YAAY;GAEjE,MAAM,gBAAgB,OAAO,OAAO;IAClC,GAAG;IACH,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;IACjD,cAAc;GAChB,CAAC;GAKD,MAAM,eAAe;IACnB,YAAY,cAAc;IAC1B,cAAc;GAChB;GAEA,MAAM,YACJ,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,gBAAgB,KAAA,IACtB,OAAO,YAAY,IACnB,OAAO,OAAO,IAAI;IAChB,WAAW,QAAQ,YAAa,YAAY;IAC5C,QAAQ,UAAU,IAAI,wBAAwB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC/E,CAAC,IACH,OAAO,QAAQ,QAAQ,YAAY;GAEzC,MAAM,SAAS,QAAQ,SAAS;GAEhC,MAAM,eAAe,SACjB,OAAO,SACL,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV,IACA,KAAA;GAEJ,MAAM,mBAAmB,SACrB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,4BAA4B,SAC9B,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,cAAc,MACd,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;GAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SACL,cAAc,MACd,QAAQ,0BACR,QAAQ,4BACV,IACA,KAAA;GAyBN,OAAO,OAvBK,MACV,UACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,WACZ,SACA,eACA,eACA,WACA;KACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;KACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;KAC7D,GAAI,8BAA8B,KAAA,IAAY,CAAC,IAAI,EAAE,0BAA0B;KAC/E,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;KAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAC/D,GACA,OACF;GACF,CAAC,CAGa,CAAC,CAAC,KAChB,OAAO,YAAY,UAAU;IAC3B,MAAM,UACJ,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,mBAAmB,KAAK;IAE7D,MAAM,WACJ,QAAQ,SAAS,aACf,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,MAAM,QAAQ,MAAM,MAAM,YAAY,KACrC,2BAA2B,QAAQ,sBAAsB,KAAK;IAEpE,OAAO,WAAW,WACd,gBAAgB,SAAS,eAAe,eAAe,OAAO,IAC9D,OAAO,UAAU,KAAK;GAC5B,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ;AACF,CACF"}

package/dist/drizzle/email-sql.d.mts

@@ -1 +0,0 @@
-import "@yielded/auth-persistence/Adapter";

package/dist/drizzle/email-sql.mjs

@@ -1,9 +0,0 @@
-import { drizzleQueryOperations } from "./query-operations.mjs";
-import { completeProofPlanIn } from "./proof-sql.mjs";
-import { CurrentEmailSql, makeEmailKernel } from "@yielded/auth-persistence/Adapter";
-//#region src/drizzle/email-sql.ts
-const { validEmailSignInConstraints, emailLookupQuery, decodeEmailSnapshot, makeSqlEmailSignInTargets, currentAddress, sameEmailRevision, snapshotEmailMutation, validateEmailAuthority, makeSqlEmailAddressPersistence } = makeEmailKernel(drizzleQueryOperations, { completeProofPlanIn });
-//#endregion
-export { CurrentEmailSql, currentAddress, decodeEmailSnapshot, emailLookupQuery, makeSqlEmailAddressPersistence, makeSqlEmailSignInTargets, sameEmailRevision, snapshotEmailMutation, validEmailSignInConstraints, validateEmailAuthority };
-
-//# sourceMappingURL=email-sql.mjs.map

package/dist/drizzle/email-sql.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-sql.mjs","names":[],"sources":["../../src/drizzle/email-sql.ts"],"sourcesContent":["import { makeEmailKernel } from \"@yielded/auth-persistence/Adapter\";\n\nimport { completeProofPlanIn } from \"./proof-sql\";\nimport { drizzleQueryOperations } from \"./query-operations\";\n\nexport { CurrentEmailSql } from \"@yielded/auth-persistence/Adapter\";\n\nexport type {\n  EmailSqlQuery,\n  EmailSqlDatabase,\n  EmailSqlConfiguration,\n  CurrentAddress,\n} from \"@yielded/auth-persistence/Adapter\";\n\nexport const {\n  validEmailSignInConstraints,\n  emailLookupQuery,\n  decodeEmailSnapshot,\n  makeSqlEmailSignInTargets,\n  currentAddress,\n  sameEmailRevision,\n  snapshotEmailMutation,\n  validateEmailAuthority,\n  makeSqlEmailAddressPersistence,\n} = makeEmailKernel(drizzleQueryOperations, { completeProofPlanIn });\n"],"mappings":";;;;AAcA,MAAa,EACX,6BACA,kBACA,qBACA,2BACA,gBACA,mBACA,uBACA,wBACA,mCACE,gBAAgB,wBAAwB,EAAE,oBAAoB,CAAC"}

package/dist/drizzle/mysql-emails.d.mts

@@ -1,71 +0,0 @@
-import { EmailAddressMapping, EmailRegistrationMapping, EmailSignInMapping } from "./email-model.mjs";
-import { ProofPersistenceMapping } from "./proof-model.mjs";
-import { EmailRegistrationAuthority } from "./email-registration.mjs";
-import { SuppliedService } from "./SuppliedService.mjs";
-import { Database as Database$1 } from "./mysql-database.mjs";
-import { AnyRelations } from "drizzle-orm";
-import { Effect } from "effect";
-import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
-import { AnyMySqlTable } from "drizzle-orm/mysql-core";
-import { EmailAddressPersistence, EmailUnavailable } from "@yielded/auth/Email";
-import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
-import { SqlError } from "effect/sql/SqlError";
-//#region src/drizzle/mysql-emails.d.ts
-type Database = EffectMysql2Database<AnyRelations>;
-type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
-type ProofMapping = ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>;
-export declare const makeMysqlEmailSignInServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, NativeId>(mapping: EmailSignInMapping<S, I, C, NativeId>) => Effect.Effect<{
-  emailSignInTargets: {
-    readonly lookup: (input: {
-      readonly moduleId: string;
-      readonly identifier: import("@yielded/auth/Identity").LoginIdentifier;
-    }) => Effect.Effect<import("effect/Option").Option<import("@yielded/auth/Email").EmailCredentialSnapshot>, EmailUnavailable>;
-  };
-}, EmailUnavailable, Database$1>;
-export declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
-  emailAddressPersistence: {
-    readonly target: (input: {
-      readonly moduleId: string;
-      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
-      readonly target: import("@yielded/auth/Identity").LoginIdentifier;
-      readonly sourceCredentialId?: string;
-    }) => Effect.Effect<import("@yielded/auth/Email").EmailAddressTarget, EmailUnavailable>;
-    readonly checkCompletion: (input: import("@yielded/auth/Proofs").ProofCompletionInput) => Effect.Effect<boolean, EmailUnavailable>;
-    readonly verifyWithProof: <A>(input: import("@yielded/auth/Email").EmailAddressMutation, prepare: import("@yielded/auth/Email").PrepareEmailCommit<import("@yielded/auth/Email").EmailAddressDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, EmailUnavailable>;
-    readonly changeWithProof: <A>(input: import("@yielded/auth/Email").EmailAddressMutation, prepare: import("@yielded/auth/Email").PrepareEmailCommit<import("@yielded/auth/Email").EmailAddressDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, EmailUnavailable>;
-    readonly cleanup: <A>(input: {
-      readonly moduleId: string;
-      readonly limit: number;
-    }, prepare: import("@yielded/auth/Email").PrepareEmailCommit<{
-      readonly removed: number;
-      readonly hasMore: boolean;
-    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, EmailUnavailable>;
-  };
-}, EmailUnavailable, Database$1 | LifecycleHooks>;
-export declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
-  readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
-  readonly proofMapping: ProofMapping;
-  readonly transaction?: never;
-}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements>;
-export declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
-  readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
-  readonly proofMapping: ProofMapping;
-  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
-}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
-export declare const makeMysqlEmailRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
-  registrationAuthority: EmailRegistrationAuthority<Registration>;
-}, EmailUnavailable, Database$1 | LifecycleHooks>;
-export declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
-  readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
-  readonly proofMapping: ProofMapping;
-  readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
-  readonly transaction?: never;
-}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-export declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
-  readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
-  readonly proofMapping: ProofMapping;
-  readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
-  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
-}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
-//#endregion
-//# sourceMappingURL=mysql-emails.d.mts.map

package/dist/drizzle/mysql-emails.mjs

@@ -1,43 +0,0 @@
-import { acquireTransactionService, transactionService } from "./standalone-guard.mjs";
-import { CurrentEmailSql } from "./email-sql.mjs";
-import { coordinateTargetEmailAddress, coordinateTargetEmailRegistration, makeTargetEmailAddressServices, makeTargetEmailRegistrationServices, makeTargetEmailSignInServices, sqlClientEmailStandaloneGuard } from "./email-target.mjs";
-import { sqlClientProofStandaloneGuard } from "./proof-target.mjs";
-import { nativeDatabase } from "./native-database.mjs";
-import { Database } from "./mysql-database.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
-import { Context, Effect } from "effect";
-import { EmailAddressPersistence } from "@yielded/auth/Email";
-//#region src/drizzle/mysql-emails.ts
-const configuration = (service) => ({
-	mode: "interactive",
-	locking: true,
-	standaloneGuard: sqlClientEmailStandaloneGuard(service),
-	generatedSubjectRows: (query) => query.$returningId(),
-	proof: {
-		mode: "interactive",
-		locking: true,
-		standaloneGuard: sqlClientProofStandaloneGuard(service),
-		insertIfAbsent: (query, selfKey, selfValue) => query.onDuplicateKeyUpdate({ set: { [selfKey]: selfValue } })
-	}
-});
-const makeMysqlEmailSignInServices = (mapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailSignInServices(mapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(Database)));
-const makeMysqlEmailAddressServices = (mapping, proofMapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailAddressServices(mapping, proofMapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(Database)));
-function coordinateMysqlEmailAddress(acquire, options, body) {
-	return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetEmailAddress(database, options.mapping, options.proofMapping, configuration(transactionService(database)), (transaction, services) => {
-		const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);
-		const work = Effect.provideContext(body, provided);
-		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-	}).pipe(Effect.provideService(NativeDatabase, database)));
-}
-const makeMysqlEmailRegistrationServices = (mapping, proofMapping) => Effect.flatMap(Effect.map(acquireTransactionService(Database), configuration), (configuration) => makeTargetEmailRegistrationServices(mapping, proofMapping, configuration)).pipe(Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(Database)), Effect.provideServiceEffect(NativeDatabase, nativeDatabase(Database)));
-function coordinateMysqlEmailRegistration(acquire, options, body) {
-	return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetEmailRegistration(database, options.mapping, options.proofMapping, configuration(transactionService(database)), (transaction, services) => {
-		const provided = Context.make(options.target, services.registrationAuthority);
-		const work = Effect.provideContext(body, provided);
-		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-	}).pipe(Effect.provideService(NativeDatabase, database)));
-}
-//#endregion
-export { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices };
-
-//# sourceMappingURL=mysql-emails.mjs.map

package/dist/drizzle/mysql-emails.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mysql-emails.mjs","names":["DatabaseService"],"sources":["../../src/drizzle/mysql-emails.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport { EmailAddressPersistence, type EmailUnavailable } from \"@yielded/auth/Email\";\nimport type { LifecycleHooks, HookConfigurationError } from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectMysql2Database } from \"drizzle-orm/effect-mysql2\";\nimport type { AnyMySqlTable } from \"drizzle-orm/mysql-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport type {\n  EmailAddressMapping,\n  EmailRegistrationMapping,\n  EmailSignInMapping,\n} from \"./email-model\";\nimport type { EmailRegistrationAuthority } from \"./email-registration\";\nimport { CurrentEmailSql } from \"./email-sql\";\nimport type { EmailSqlQuery } from \"./email-sql\";\nimport {\n  coordinateTargetEmailAddress,\n  coordinateTargetEmailRegistration,\n  makeTargetEmailAddressServices,\n  makeTargetEmailRegistrationServices,\n  makeTargetEmailSignInServices,\n  sqlClientEmailStandaloneGuard,\n} from \"./email-target\";\nimport { Database as DatabaseService } from \"./mysql-database\";\nimport { nativeDatabase } from \"./native-database\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport {\n  type TransactionService,\n  acquireTransactionService,\n  transactionService,\n} from \"./standalone-guard\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = EffectMysql2Database<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\ntype ProofMapping = ProofPersistenceMapping<\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any\n>;\n\nconst configuration = (service: TransactionService | undefined) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientEmailStandaloneGuard(service),\n  generatedSubjectRows: (query: EmailSqlQuery) => query.$returningId(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(service),\n    insertIfAbsent: (query: ProofSqlQuery, selfKey: string, selfValue: unknown) =>\n      query.onDuplicateKeyUpdate({ set: { [selfKey]: selfValue } }),\n  },\n});\n\nexport const makeMysqlEmailSignInServices = <\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  NativeId,\n>(\n  mapping: EmailSignInMapping<S, I, C, NativeId>,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) => makeTargetEmailSignInServices(mapping, configuration),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport const makeMysqlEmailAddressServices = <\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n>(\n  mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>,\n  proofMapping: ProofMapping,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) => makeTargetEmailAddressServices(mapping, proofMapping, configuration),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport function coordinateMysqlEmailAddress<\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailAddress<\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailAddress<\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetEmailAddress<TransactionOf<D>, Out, E, Exclude<R, EmailAddressPersistence>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(transactionService(database)),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n}\n\nexport const makeMysqlEmailRegistrationServices = <\n  Registration,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n>(\n  mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  proofMapping: ProofMapping,\n) =>\n  Effect.flatMap(\n    Effect.map(acquireTransactionService(DatabaseService), configuration),\n    (configuration) =>\n      makeTargetEmailRegistrationServices<Registration>(mapping, proofMapping, configuration),\n  ).pipe(\n    Effect.provideServiceEffect(CurrentEmailSql, nativeDatabase(DatabaseService)),\n    Effect.provideServiceEffect(NativeDatabase, nativeDatabase(DatabaseService)),\n  );\n\nexport function coordinateMysqlEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(nativeDatabase(acquire), (database) =>\n    coordinateTargetEmailRegistration<Registration, TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(transactionService(database)),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ).pipe(Effect.provideService(NativeDatabase, database)),\n  );\n}\n"],"mappings":";;;;;;;;;;AAuDA,MAAM,iBAAiB,aAA6C;CAClE,MAAM;CACN,SAAS;CACT,iBAAiB,8BAA8B,OAAO;CACtD,uBAAuB,UAAyB,MAAM,aAAa;CACnE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,OAAO;EACtD,iBAAiB,OAAsB,SAAiB,cACtD,MAAM,qBAAqB,EAAE,KAAK,GAAG,UAAU,UAAU,EAAE,CAAC;CAChE;AACF;AAEA,MAAa,gCAMX,YAEA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBAAkB,8BAA8B,SAAS,aAAa,CACzE,CAAC,CAAC,KACA,OAAO,qBAAqB,iBAAiB,eAAeA,QAAe,CAAC,GAC5E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AAEF,MAAa,iCAQX,SACA,iBAEA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBAAkB,+BAA+B,SAAS,cAAc,aAAa,CACxF,CAAC,CAAC,KACA,OAAO,qBAAqB,iBAAiB,eAAeA,QAAe,CAAC,GAC5E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AA0DF,SAAgB,4BAgBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,6BACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,mBAAmB,QAAQ,CAAC,IAExC,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;EACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;AACF;AAEA,MAAa,sCASX,SACA,iBAEA,OAAO,QACL,OAAO,IAAI,0BAA0BA,QAAe,GAAG,aAAa,IACnE,kBACC,oCAAkD,SAAS,cAAc,aAAa,CAC1F,CAAC,CAAC,KACA,OAAO,qBAAqB,iBAAiB,eAAeA,QAAe,CAAC,GAC5E,OAAO,qBAAqB,gBAAgB,eAAeA,QAAe,CAAC,CAC7E;AAgEF,SAAgB,iCAkBd,SACA,SAMA,MAKA;CACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,kCACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,mBAAmB,QAAQ,CAAC,IAExC,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;AACF"}

package/dist/drizzle/mysql-password-prepared.d.mts

@@ -1,30 +0,0 @@
-import { PasswordPreparedPersistenceMapping, PasswordPreparedProofMapping } from "./password-prepared-model.mjs";
-import { SuppliedService } from "./SuppliedService.mjs";
-import { Database as Database$1 } from "./mysql-database.mjs";
-import { AnyRelations } from "drizzle-orm";
-import { Effect } from "effect";
-import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
-import { AnyMySqlTable } from "drizzle-orm/mysql-core";
-import { PasswordPreparedPersistence, PasswordUnavailable } from "@yielded/auth/Password";
-import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
-import { SqlError } from "effect/sql/SqlError";
-//#region src/drizzle/mysql-password-prepared.d.ts
-type Database = EffectMysql2Database<AnyRelations>;
-type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
-export declare const makeMySqlPasswordPreparedPersistenceServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable = AnyMySqlTable, PC extends AnyMySqlTable = AnyMySqlTable, PM extends AnyMySqlTable = AnyMySqlTable, PSub extends AnyMySqlTable = AnyMySqlTable, PI extends AnyMySqlTable = AnyMySqlTable, PCr extends AnyMySqlTable = AnyMySqlTable, PNativeId = unknown>(mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>, proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>) => Effect.Effect<{
-  passwordPreparedPersistence: PasswordPreparedPersistence;
-}, PasswordUnavailable, Database$1 | LifecycleHooks>;
-export declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
-  readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>;
-  readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
-  readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
-  readonly transaction?: never;
-}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
-export declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
-  readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, M, T, B, NativeId>;
-  readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
-  readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
-  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
-}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
-//#endregion
-//# sourceMappingURL=mysql-password-prepared.d.mts.map