@yielded/auth-persistence-drizzle 0.1.0-beta.25 → 0.1.0-beta.27

package/dist/drizzle/phone-target.mjs

@@ -1,178 +1,29 @@
-import { requiredProofConstraints } from "./proof-model.mjs";
+import { NativeDatabase } from "./native-database.mjs";
+import { coordinateNativeTarget, nativeTarget } from "./native-target.mjs";
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { CurrentProofSql, completeProofPlanIn } from "./proof-sql.mjs";
-import { randomId } from "./crypto.mjs";
-import { phoneProofs, requiredPhoneConstraints } from "./phone-model.mjs";
-import { CurrentD1PlanningDatabase } from "./d1-planning.mjs";
-import { nativeDatabase } from "./native-database.mjs";
-import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
-import { compileD1ProofCompletionPlan } from "./d1-proofs.mjs";
-import { CurrentPhoneTransaction, admitPhone, capturePhone, cleanupPhoneAdmission, equal, invariant, lookupPhone, preparePhoneMutation, unavailable } from "./phone-state.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
-import { sql } from "drizzle-orm";
-import { Context, Effect, Schema } from "effect";
-import { LifecycleHooks } from "@yielded/auth/Hooks";
-import { ProofBinding } from "@yielded/auth/Proofs";
-import { PhoneActionAuthorization, PhoneAdmission, PhoneAdmissionPolicy, PhoneConfigurationError, PhoneLifecyclePolicy, PhoneLifecycleTarget, PhonePersistence, PhoneSignInTargets } from "@yielded/auth/PhoneOtp";
+import { nativeProofMapping } from "./proof-target.mjs";
+import { makeNativePhoneServices } from "@yielded/auth-persistence/Adapter";
+import { Effect, Schema } from "effect";
+import { PhoneConfigurationError, PhoneLifecyclePolicy, PhoneOtpUnavailable } from "@yielded/auth/PhoneOtp";
 //#region src/drizzle/phone-target.ts
-const sqlClientPhoneStandaloneGuard = (service) => sqlClientTransactionStandaloneGuard(unavailable, service);
-const validateMapping = (original, configuration) => {
-	const mapping = original;
-	invariant(mapping.moduleId.length > 0);
-	Schema.decodeSync(PhoneLifecyclePolicy)(mapping.policy);
-	Schema.decodeSync(PhoneAdmissionPolicy)(mapping.admission);
-	invariant(mapping.admission.requestRetentionMillis >= mapping.admission.windowMillis);
-	const proofs = phoneProofs(mapping.proofs);
-	invariant(proofs !== void 0);
-	for (const [key, value] of Object.entries(requiredProofConstraints)) invariant(proofs.constraints?.[key] === value);
-	if (configuration.mode === "synchronous") invariant(proofs.allocateVersionSync !== void 0);
-	if (configuration.mode === "batch") invariant(proofs.d1 !== void 0 && proofs.authority.identifier.d1CurrentCondition !== void 0);
-	for (const [key, value] of Object.entries(requiredPhoneConstraints)) invariant(mapping.constraints?.[key] === value);
-	if (configuration.mode === "batch") invariant(mapping.d1?.primary === true);
-	return Object.freeze({
-		...mapping,
-		policy: Object.freeze({ ...mapping.policy }),
-		subject: Object.freeze({ ...mapping.subject }),
-		state: Object.freeze({ ...mapping.state }),
-		identifier: Object.freeze({ ...mapping.identifier }),
-		admission: Object.freeze({ ...mapping.admission }),
-		credential: Object.freeze({ ...mapping.credential }),
-		subjectIds: Object.freeze({ ...mapping.subjectIds })
-	});
-};
-const services = Effect.fnUntraced(function* (mapping, execution, configuration) {
-	const hooks = yield* LifecycleHooks;
-	const run = (effect, mutation = true) => execution.admit.pipe(Effect.andThen(execution.run(effect, mutation)), Effect.provideService(LifecycleHooks, hooks));
-	return {
-		phoneAdmission: PhoneAdmission.of({
-			admit: (input) => run(admitPhone(mapping, { ...input })),
-			cleanup: (input) => run(cleanupPhoneAdmission(mapping, { ...input }))
-		}),
-		phoneSignInTargets: PhoneSignInTargets.of({ lookup: (input) => run(lookupPhone(mapping, { ...input }), false) }),
-		phonePersistence: PhonePersistence.of({
-			target: (input) => run(Effect.gen(function* () {
-				invariant(input.moduleId === mapping.moduleId);
-				return (yield* capturePhone(mapping, { ...input })).target;
-			}), false),
-			mutate: (original, prepare) => Effect.suspend(() => {
-				const input = {
-					...original,
-					target: Schema.decodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(Schema.encodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(original.target)),
-					policy: { ...original.policy },
-					...original.authorization === void 0 ? {} : { authorization: Schema.decodeSync(Schema.toCodecIso(PhoneActionAuthorization))(Schema.encodeSync(Schema.toCodecIso(PhoneActionAuthorization))(original.authorization)) },
-					completion: {
-						input: {
-							...original.completion.input,
-							binding: Schema.decodeSync(Schema.toCodecIso(ProofBinding))(Schema.encodeSync(Schema.toCodecIso(ProofBinding))(original.completion.input.binding))
-						},
-						prepare: original.completion.prepare
-					}
-				};
-				return run(Effect.gen(function* () {
-					const owner = yield* CurrentPhoneTransaction, candidate = yield* preparePhoneMutation(mapping, input);
-					if (candidate.mutate === void 0) {
-						const receipt = prepare(candidate.decision, owner.journal);
-						owner.guards.push(receipt);
-						return receipt;
-					}
-					const cn = phoneProofs(mapping.proofs).continuation;
-					const observed = yield* owner.read(cn.table, equal(cn.table, {
-						[cn.moduleId]: input.completion.input.moduleId,
-						[cn.continuationId]: input.completion.input.continuationId
-					}), { limit: 1 });
-					let completed = false;
-					const plan = {
-						...input.completion,
-						prepare: (decision, journal) => {
-							completed = decision === "completed";
-							const proofReceipt = input.completion.prepare(decision, journal, () => void 0);
-							owner.guards.push(proofReceipt);
-							return prepare(decision === "completed" ? candidate.decision : { _tag: "Rejected" }, journal);
-						}
-					};
-					let receipt;
-					if (owner.batch) {
-						const offset = owner.statements.length;
-						yield* candidate.mutate;
-						const statements = owner.statements.splice(offset);
-						const compiled = yield* compileD1ProofCompletionPlan(phoneProofs(mapping.proofs), plan, {
-							statements,
-							appliedCondition: candidate.appliedCondition
-						}, (x) => x).pipe(Effect.provideService(CurrentD1PlanningDatabase, owner.database));
-						invariant(compiled.statements.length !== 0);
-						owner.statements.push(...compiled.statements, ...compiled.postconditions ?? []);
-						receipt = compiled.receipt;
-					} else receipt = yield* completeProofPlanIn(phoneProofs(mapping.proofs), {
-						mode: configuration.mode === "synchronous" ? "synchronous" : "interactive",
-						locking: configuration.locking,
-						standaloneGuard: Effect.void,
-						coordinated: true,
-						insertIfAbsent: (query, key, value) => configuration.dialect === "mysql" ? query.onDuplicateKeyUpdate({ set: { [key]: value } }) : query.onConflictDoNothing()
-					}, plan, candidate.mutate, (x) => x).pipe(Effect.provideService(CurrentProofSql, owner.database));
-					if (completed) {
-						invariant(observed.rows.length === 1);
-						const record = yield* cn.decode(observed.rows[0]);
-						observed.rows = observed.rows.map((row) => ({
-							...row,
-							[cn.consumed]: true
-						}));
-						const command = phoneProofs(mapping.proofs).command;
-						owner.postconditions.push(sql`${mapping.engineNowMillis} < ${record.expiresAtMillis}`, sql`exists(select 1 from ${command.table} where ${equal(command.table, {
-							[command.moduleId]: input.completion.input.moduleId,
-							[command.commandId]: input.completion.input.continuationDigest,
-							[command.kind]: "complete",
-							[command.decision]: "completed",
-							[command.retentionUntil]: phoneProofs(mapping.proofs).encodeInstant(record.expiresAtMillis)
-						})})`);
-					}
-					invariant(receipt?._tag === "PreparedCommit");
-					owner.guards.push(receipt);
-					return receipt;
-				}));
-			}).pipe(Effect.catchDefect(() => Effect.fail(unavailable())))
-		})
+const unavailable = () => PhoneOtpUnavailable.make({});
+const validate = Effect.fnUntraced(function* (source, configuration) {
+	yield* validateDrizzleStorage(source);
+	yield* validateDrizzleStorage(source.proofs);
+	yield* Schema.decodeEffect(PhoneLifecyclePolicy)(source.policy);
+	if (configuration.mode === "batch" && source.proofs.d1?.primary !== true) return yield* PhoneConfigurationError.make({});
+}, Effect.mapError(() => PhoneConfigurationError.make({})));
+const services = Effect.fnUntraced(function* (source, configuration) {
+	const target = yield* nativeTarget(configuration);
+	const mapping = {
+		...source,
+		proofs: nativeProofMapping(source.proofs)
 	};
+	return yield* target.provide(makeNativePhoneServices(target.tables, mapping));
 });
-const makeTargetPhonePersistence = (source, configuration) => Effect.gen(function* () {
-	const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);
-	const mapping = yield* Effect.try({
-		try: () => validateMapping(original, configuration),
-		catch: () => PhoneConfigurationError.make({})
-	});
-	yield* validateDrizzleStorage({
-		...mapping,
-		proofs: phoneProofs(mapping.proofs)
-	}).pipe(Effect.mapError(() => PhoneConfigurationError.make({})));
-	const execution = yield* makeTransactionExecution(CurrentPhoneTransaction, configuration, unavailable, randomId);
-	return yield* services(mapping, execution, configuration);
-});
-const coordinateTargetPhone = (database, source, configuration, body) => Effect.gen(function* () {
-	const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);
-	const mapping = yield* Effect.try({
-		try: () => validateMapping(original, configuration),
-		catch: () => PhoneConfigurationError.make({})
-	});
-	yield* validateDrizzleStorage({
-		...mapping,
-		proofs: phoneProofs(mapping.proofs)
-	}).pipe(Effect.mapError(() => PhoneConfigurationError.make({})));
-	return yield* coordinateTransactionOwner(database, CurrentPhoneTransaction, configuration, Effect.void, unavailable, randomId, (execution) => services(mapping, execution, configuration), (transaction, acquireServices, append) => Effect.flatMap(acquireServices, (boundServices) => body(transaction, boundServices, append)));
-});
-/** Concrete driver wrappers select transaction mode. */
-const makePhoneTarget = (databaseService, configuration) => {
-	function coordinatePhonePersistence(acquire, options, body) {
-		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetPhone(database, options.mapping, configuration, (transaction, services) => {
-			const provided = Context.make(PhonePersistence, services.phonePersistence).pipe(Context.add(PhoneAdmission, services.phoneAdmission), Context.add(PhoneSignInTargets, services.phoneSignInTargets));
-			const work = Effect.provideContext(body, provided);
-			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
-		}).pipe(Effect.provideService(NativeDatabase, database)));
-	}
-	return {
-		makePhonePersistenceServices: (mapping) => makeTargetPhonePersistence(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
-		coordinatePhonePersistence
-	};
-};
+const makeTargetPhonePersistenceServices = (source, configuration) => validate(source, configuration).pipe(Effect.andThen(services(source, configuration)));
+const coordinateTargetPhonePersistence = (database, source, configuration, body) => validate(source, configuration).pipe(Effect.provideService(NativeDatabase, database), Effect.andThen(coordinateNativeTarget(unavailable, database, configuration, services(source, configuration), body)));
 //#endregion
-export { coordinateTargetPhone, makePhoneTarget, makeTargetPhonePersistence, sqlClientPhoneStandaloneGuard };
+export { coordinateTargetPhonePersistence, makeTargetPhonePersistenceServices };
 
 //# sourceMappingURL=phone-target.mjs.map

package/dist/drizzle/phone-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"phone-target.mjs","names":[],"sources":["../../src/drizzle/phone-target.ts"],"sourcesContent":["import { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  PhoneConfigurationError,\n  PhoneLifecyclePolicy,\n  PhoneAdmissionPolicy,\n  PhoneLifecycleTarget,\n  PhoneActionAuthorization,\n  PhoneAdmission,\n  type PhoneMutation,\n  PhonePersistence,\n  PhoneSignInTargets,\n  type PhoneOtpUnavailable as PhoneUnavailable,\n} from \"@yielded/auth/PhoneOtp\";\nimport { ProofBinding } from \"@yielded/auth/Proofs\";\nimport { sql, type Table } from \"drizzle-orm\";\n/* oxlint-disable no-explicit-any -- shared native implementation; driver entrypoints retain exact database and table types. */\nimport { type Crypto, Context, Effect, Schema } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport { randomId } from \"./crypto\";\nimport { CurrentD1PlanningDatabase } from \"./d1-planning\";\nimport { compileD1ProofCompletionPlan } from \"./d1-proofs\";\nimport type { PersistenceMappingError } from \"./model\";\nimport { nativeDatabase } from \"./native-database\";\nimport {\n  phoneProofs,\n  type PhoneMapping,\n  type PhoneMappingSource,\n  type PhonePersistenceServices,\n  type PhoneProofCompletionMapping,\n  requiredPhoneConstraints,\n} from \"./phone-model\";\nimport {\n  capturePhone,\n  lookupPhone,\n  admitPhone,\n  cleanupPhoneAdmission,\n  CurrentPhoneTransaction,\n  invariant,\n  equal,\n  preparePhoneMutation,\n  unavailable,\n} from \"./phone-state\";\nimport { requiredProofConstraints } from \"./proof-model\";\nimport { completeProofPlanIn, CurrentProofSql } from \"./proof-sql\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\nimport type { SuppliedService } from \"./SuppliedService\";\nimport {\n  coordinateTransactionOwner,\n  makeTransactionExecution,\n  sqlClientTransactionStandaloneGuard,\n  type TransactionExecution,\n  type TransactionTargetConfiguration,\n  type TransactionCoordinatorError,\n} from \"./transaction-execution\";\nimport type { TransactionNativeDatabase } from \"./transaction-owner\";\nexport type PhoneTargetConfiguration = TransactionTargetConfiguration<PhoneUnavailable>;\n\nexport type PhoneCoordinatorError<E> =\n  | TransactionCoordinatorError<E, PhoneUnavailable>\n  | PhoneConfigurationError\n  | PersistenceMappingError;\n\nexport const sqlClientPhoneStandaloneGuard = (\n  service: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n) => sqlClientTransactionStandaloneGuard(unavailable, service);\n\nconst validateMapping = <M>(original: M, configuration: PhoneTargetConfiguration): M => {\n  const mapping = original as any;\n\n  invariant(mapping.moduleId.length > 0);\n  Schema.decodeSync(PhoneLifecyclePolicy)(mapping.policy);\n  Schema.decodeSync(PhoneAdmissionPolicy)(mapping.admission);\n  invariant(mapping.admission.requestRetentionMillis >= mapping.admission.windowMillis);\n  const proofs = phoneProofs(mapping.proofs);\n\n  invariant(proofs !== undefined);\n  for (const [key, value] of Object.entries(requiredProofConstraints))\n    invariant((proofs.constraints as any)?.[key] === value);\n  if (configuration.mode === \"synchronous\") invariant(proofs.allocateVersionSync !== undefined);\n  if (configuration.mode === \"batch\")\n    invariant(\n      proofs.d1 !== undefined && proofs.authority.identifier.d1CurrentCondition !== undefined,\n    );\n  for (const [key, value] of Object.entries(requiredPhoneConstraints))\n    invariant(mapping.constraints?.[key] === value);\n  if (configuration.mode === \"batch\") invariant(mapping.d1?.primary === true);\n\n  return Object.freeze({\n    ...mapping,\n    policy: Object.freeze({ ...mapping.policy }),\n    subject: Object.freeze({ ...mapping.subject }),\n    state: Object.freeze({ ...mapping.state }),\n    identifier: Object.freeze({ ...mapping.identifier }),\n    admission: Object.freeze({ ...mapping.admission }),\n    credential: Object.freeze({ ...mapping.credential }),\n    subjectIds: Object.freeze({ ...mapping.subjectIds }),\n  });\n};\n\nconst services = Effect.fnUntraced(function* (\n  mapping: any,\n  execution: TransactionExecution<PhoneUnavailable, CurrentPhoneTransaction>,\n  configuration: PhoneTargetConfiguration,\n): Effect.fn.Return<PhonePersistenceServices, never, LifecycleHooks> {\n  const hooks = yield* LifecycleHooks;\n\n  const run = <A, E, R>(effect: Effect.Effect<A, E, R>, mutation = true) =>\n    execution.admit.pipe(\n      Effect.andThen(execution.run(effect, mutation)),\n      Effect.provideService(LifecycleHooks, hooks),\n    );\n\n  return {\n    phoneAdmission: PhoneAdmission.of({\n      admit: (input) => run(admitPhone(mapping, { ...input })),\n      cleanup: (input) => run(cleanupPhoneAdmission(mapping, { ...input })),\n    }),\n    phoneSignInTargets: PhoneSignInTargets.of({\n      lookup: (input) => run(lookupPhone(mapping, { ...input }), false),\n    }),\n    phonePersistence: PhonePersistence.of({\n      target: (input) =>\n        run(\n          Effect.gen(function* () {\n            invariant(input.moduleId === mapping.moduleId);\n\n            return (yield* capturePhone(mapping, { ...input })).target;\n          }),\n          false,\n        ),\n      mutate: (original, prepare) =>\n        Effect.suspend(() => {\n          const input: PhoneMutation = {\n            ...original,\n            target: Schema.decodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(\n              Schema.encodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(original.target),\n            ),\n            policy: { ...original.policy },\n            ...(original.authorization === undefined\n              ? {}\n              : {\n                  authorization: Schema.decodeSync(Schema.toCodecIso(PhoneActionAuthorization))(\n                    Schema.encodeSync(Schema.toCodecIso(PhoneActionAuthorization))(\n                      original.authorization,\n                    ),\n                  ),\n                }),\n            completion: {\n              input: {\n                ...original.completion.input,\n                binding: Schema.decodeSync(Schema.toCodecIso(ProofBinding))(\n                  Schema.encodeSync(Schema.toCodecIso(ProofBinding))(\n                    original.completion.input.binding,\n                  ),\n                ),\n              },\n              prepare: original.completion.prepare,\n            },\n          };\n\n          return run(\n            Effect.gen(function* () {\n              const owner = yield* CurrentPhoneTransaction,\n                candidate = yield* preparePhoneMutation(mapping, input);\n\n              if (candidate.mutate === undefined) {\n                const receipt = prepare(candidate.decision, owner.journal);\n\n                owner.guards.push(receipt as any);\n\n                return receipt;\n              }\n              const cn = phoneProofs(mapping.proofs).continuation;\n\n              const observed = yield* owner.read(\n                cn.table,\n                equal(cn.table, {\n                  [cn.moduleId]: input.completion.input.moduleId,\n                  [cn.continuationId]: input.completion.input.continuationId,\n                }),\n                { limit: 1 },\n              );\n\n              let completed = false;\n\n              const plan = {\n                ...input.completion,\n                prepare: (decision: any, journal: any) => {\n                  completed = decision === \"completed\";\n                  const proofReceipt = input.completion.prepare(decision, journal, () => undefined);\n\n                  owner.guards.push(proofReceipt);\n\n                  return prepare(\n                    decision === \"completed\" ? candidate.decision : { _tag: \"Rejected\" },\n                    journal,\n                  );\n                },\n              };\n\n              let receipt;\n\n              if (owner.batch) {\n                const offset = owner.statements.length;\n\n                yield* candidate.mutate;\n                const statements = owner.statements.splice(offset);\n\n                const compiled = yield* compileD1ProofCompletionPlan(\n                  phoneProofs(mapping.proofs) as any,\n                  plan as any,\n                  { statements, appliedCondition: candidate.appliedCondition! },\n                  (x) => x,\n                ).pipe(Effect.provideService(CurrentD1PlanningDatabase, owner.database));\n\n                // Mutation observations describe an accepted plan. A stale proof aborts this owner.\n                invariant(compiled.statements.length !== 0);\n                owner.statements.push(...compiled.statements, ...(compiled.postconditions ?? []));\n                receipt = compiled.receipt;\n              } else {\n                receipt = yield* completeProofPlanIn(\n                  phoneProofs(mapping.proofs),\n                  {\n                    mode: configuration.mode === \"synchronous\" ? \"synchronous\" : \"interactive\",\n                    locking: configuration.locking,\n                    standaloneGuard: Effect.void,\n                    coordinated: true,\n                    insertIfAbsent: (query: any, key, value) =>\n                      configuration.dialect === \"mysql\"\n                        ? query.onDuplicateKeyUpdate({ set: { [key]: value } })\n                        : query.onConflictDoNothing(),\n                  },\n                  plan as any,\n                  candidate.mutate,\n                  (x) => x,\n                ).pipe(Effect.provideService(CurrentProofSql, owner.database));\n              }\n              if (completed) {\n                invariant(observed.rows.length === 1);\n                const record = yield* cn.decode(observed.rows[0]!);\n\n                observed.rows = observed.rows.map((row) => ({ ...row, [cn.consumed]: true }));\n                const command = phoneProofs(mapping.proofs).command;\n\n                owner.postconditions.push(\n                  sql`${mapping.engineNowMillis} < ${record.expiresAtMillis}`,\n                  sql`exists(select 1 from ${command.table} where ${equal(command.table, { [command.moduleId]: input.completion.input.moduleId, [command.commandId]: input.completion.input.continuationDigest, [command.kind]: \"complete\", [command.decision]: \"completed\", [command.retentionUntil]: phoneProofs(mapping.proofs).encodeInstant(record.expiresAtMillis) })})`,\n                );\n              }\n              invariant(receipt?._tag === \"PreparedCommit\");\n              owner.guards.push(receipt as any);\n\n              return receipt as ReturnType<typeof prepare>;\n            }),\n          );\n        }).pipe(Effect.catchDefect(() => Effect.fail(unavailable()))),\n    }),\n  };\n});\n\nexport const makeTargetPhonePersistence = <\n  S extends Table,\n  I extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  RSetup = never,\n>(\n  source: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>,\n  configuration: PhoneTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);\n\n    const mapping = yield* Effect.try({\n      try: () => validateMapping(original, configuration),\n      catch: () => PhoneConfigurationError.make({}),\n    });\n\n    yield* validateDrizzleStorage({\n      ...mapping,\n      proofs: phoneProofs(mapping.proofs),\n    }).pipe(Effect.mapError(() => PhoneConfigurationError.make({})));\n\n    const execution = yield* makeTransactionExecution(\n      CurrentPhoneTransaction,\n      configuration,\n      unavailable,\n      randomId,\n    );\n\n    return yield* services(mapping, execution, configuration);\n  });\n\nexport const coordinateTargetPhone = <\n  M extends { readonly proofs: PhoneProofCompletionMapping },\n  A,\n  E,\n  R,\n  RSetup = never,\n>(\n  database: TransactionNativeDatabase,\n  source: PhoneMappingSource<M, RSetup>,\n  configuration: PhoneTargetConfiguration,\n  body: (\n    transaction: any,\n    services: PhonePersistenceServices,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  PhoneCoordinatorError<E>,\n  R | RSetup | Crypto.Crypto | LifecycleHooks | NativeDatabase\n> =>\n  Effect.gen(function* () {\n    const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);\n\n    const mapping = yield* Effect.try({\n      try: () => validateMapping(original, configuration),\n      catch: () => PhoneConfigurationError.make({}),\n    });\n\n    yield* validateDrizzleStorage({\n      ...mapping,\n      proofs: phoneProofs(mapping.proofs),\n    }).pipe(Effect.mapError(() => PhoneConfigurationError.make({})));\n\n    return yield* coordinateTransactionOwner(\n      database,\n      CurrentPhoneTransaction,\n      configuration,\n      Effect.void,\n      unavailable,\n      randomId,\n      (execution) => services(mapping, execution, configuration),\n      (transaction, acquireServices, append) =>\n        Effect.flatMap(acquireServices, (boundServices) =>\n          body(transaction, boundServices, append),\n        ),\n    );\n  });\n\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\n/** Concrete driver wrappers select transaction mode. */\nexport const makePhoneTarget = <\n  DatabaseId,\n  D extends { readonly transaction: any },\n  T extends Table,\n  Extra = unknown,\n  Synchronous extends boolean = false,\n>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: PhoneTargetConfiguration,\n) => {\n  function coordinatePhonePersistence<\n    Database extends D,\n    S extends T,\n    I extends T,\n    F extends T,\n    C extends T,\n    N,\n    A,\n    E,\n    R,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<PhonePersistence | PhoneAdmission | PhoneSignInTargets> : R\n    >,\n  ): Effect.Effect<\n    A,\n    PhoneCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true\n        ? never\n        : Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | RSetup\n    | DatabaseRequirements\n  >;\n  function coordinatePhonePersistence<\n    Database extends D,\n    S extends T,\n    I extends T,\n    F extends T,\n    C extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true\n        ? NoInfer<PhonePersistence | PhoneAdmission | PhoneSignInTargets | TxId>\n        : R\n    >,\n  ): Effect.Effect<\n    A,\n    PhoneCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true\n        ? never\n        : Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets | TxId>)\n    | Crypto.Crypto\n    | LifecycleHooks\n    | RSetup\n    | DatabaseRequirements\n  >;\n  function coordinatePhonePersistence<\n    Database extends D,\n    S extends T,\n    I extends T,\n    F extends T,\n    C extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    PhoneCoordinatorError<E> | DatabaseError,\n    | Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets>\n    | Crypto.Crypto\n    | LifecycleHooks\n    | RSetup\n    | DatabaseRequirements\n  > {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetPhone(\n        database as any,\n        options.mapping,\n        configuration,\n        (\n          transaction: TransactionOf<Database>,\n          services,\n        ): Effect.Effect<\n          A,\n          E,\n          Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets>\n        > => {\n          const provided = Context.make(PhonePersistence, services.phonePersistence).pipe(\n            Context.add(PhoneAdmission, services.phoneAdmission),\n            Context.add(PhoneSignInTargets, services.phoneSignInTargets),\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ).pipe(Effect.provideService(NativeDatabase, database)),\n    );\n  }\n\n  return {\n    makePhonePersistenceServices: <\n      S extends T,\n      I extends T,\n      F extends T,\n      C extends T,\n      N,\n      RSetup = never,\n    >(\n      mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>,\n    ) =>\n      makeTargetPhonePersistence(mapping, configuration).pipe(\n        Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)),\n      ),\n    coordinatePhonePersistence,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAgEA,MAAa,iCACX,YACG,oCAAoC,aAAa,OAAO;AAE7D,MAAM,mBAAsB,UAAa,kBAA+C;CACtF,MAAM,UAAU;CAEhB,UAAU,QAAQ,SAAS,SAAS,CAAC;CACrC,OAAO,WAAW,oBAAoB,CAAC,CAAC,QAAQ,MAAM;CACtD,OAAO,WAAW,oBAAoB,CAAC,CAAC,QAAQ,SAAS;CACzD,UAAU,QAAQ,UAAU,0BAA0B,QAAQ,UAAU,YAAY;CACpF,MAAM,SAAS,YAAY,QAAQ,MAAM;CAEzC,UAAU,WAAW,KAAA,CAAS;CAC9B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,wBAAwB,GAChE,UAAW,OAAO,cAAsB,SAAS,KAAK;CACxD,IAAI,cAAc,SAAS,eAAe,UAAU,OAAO,wBAAwB,KAAA,CAAS;CAC5F,IAAI,cAAc,SAAS,SACzB,UACE,OAAO,OAAO,KAAA,KAAa,OAAO,UAAU,WAAW,uBAAuB,KAAA,CAChF;CACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,wBAAwB,GAChE,UAAU,QAAQ,cAAc,SAAS,KAAK;CAChD,IAAI,cAAc,SAAS,SAAS,UAAU,QAAQ,IAAI,YAAY,IAAI;CAE1E,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,QAAQ,OAAO,OAAO,EAAE,GAAG,QAAQ,OAAO,CAAC;EAC3C,SAAS,OAAO,OAAO,EAAE,GAAG,QAAQ,QAAQ,CAAC;EAC7C,OAAO,OAAO,OAAO,EAAE,GAAG,QAAQ,MAAM,CAAC;EACzC,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;EACnD,WAAW,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,CAAC;EACjD,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;EACnD,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;CACrD,CAAC;AACH;AAEA,MAAM,WAAW,OAAO,WAAW,WACjC,SACA,WACA,eACmE;CACnE,MAAM,QAAQ,OAAO;CAErB,MAAM,OAAgB,QAAgC,WAAW,SAC/D,UAAU,MAAM,KACd,OAAO,QAAQ,UAAU,IAAI,QAAQ,QAAQ,CAAC,GAC9C,OAAO,eAAe,gBAAgB,KAAK,CAC7C;CAEF,OAAO;EACL,gBAAgB,eAAe,GAAG;GAChC,QAAQ,UAAU,IAAI,WAAW,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;GACvD,UAAU,UAAU,IAAI,sBAAsB,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;EACtE,CAAC;EACD,oBAAoB,mBAAmB,GAAG,EACxC,SAAS,UAAU,IAAI,YAAY,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,EAClE,CAAC;EACD,kBAAkB,iBAAiB,GAAG;GACpC,SAAS,UACP,IACE,OAAO,IAAI,aAAa;IACtB,UAAU,MAAM,aAAa,QAAQ,QAAQ;IAE7C,QAAQ,OAAO,aAAa,SAAS,EAAE,GAAG,MAAM,CAAC,EAAA,CAAG;GACtD,CAAC,GACD,KACF;GACF,SAAS,UAAU,YACjB,OAAO,cAAc;IACnB,MAAM,QAAuB;KAC3B,GAAG;KACH,QAAQ,OAAO,WAAW,OAAO,WAAW,oBAAoB,CAAC,CAAC,CAChE,OAAO,WAAW,OAAO,WAAW,oBAAoB,CAAC,CAAC,CAAC,SAAS,MAAM,CAC5E;KACA,QAAQ,EAAE,GAAG,SAAS,OAAO;KAC7B,GAAI,SAAS,kBAAkB,KAAA,IAC3B,CAAC,IACD,EACE,eAAe,OAAO,WAAW,OAAO,WAAW,wBAAwB,CAAC,CAAC,CAC3E,OAAO,WAAW,OAAO,WAAW,wBAAwB,CAAC,CAAC,CAC5D,SAAS,aACX,CACF,EACF;KACJ,YAAY;MACV,OAAO;OACL,GAAG,SAAS,WAAW;OACvB,SAAS,OAAO,WAAW,OAAO,WAAW,YAAY,CAAC,CAAC,CACzD,OAAO,WAAW,OAAO,WAAW,YAAY,CAAC,CAAC,CAChD,SAAS,WAAW,MAAM,OAC5B,CACF;MACF;MACA,SAAS,SAAS,WAAW;KAC/B;IACF;IAEA,OAAO,IACL,OAAO,IAAI,aAAa;KACtB,MAAM,QAAQ,OAAO,yBACnB,YAAY,OAAO,qBAAqB,SAAS,KAAK;KAExD,IAAI,UAAU,WAAW,KAAA,GAAW;MAClC,MAAM,UAAU,QAAQ,UAAU,UAAU,MAAM,OAAO;MAEzD,MAAM,OAAO,KAAK,OAAc;MAEhC,OAAO;KACT;KACA,MAAM,KAAK,YAAY,QAAQ,MAAM,CAAC,CAAC;KAEvC,MAAM,WAAW,OAAO,MAAM,KAC5B,GAAG,OACH,MAAM,GAAG,OAAO;OACb,GAAG,WAAW,MAAM,WAAW,MAAM;OACrC,GAAG,iBAAiB,MAAM,WAAW,MAAM;KAC9C,CAAC,GACD,EAAE,OAAO,EAAE,CACb;KAEA,IAAI,YAAY;KAEhB,MAAM,OAAO;MACX,GAAG,MAAM;MACT,UAAU,UAAe,YAAiB;OACxC,YAAY,aAAa;OACzB,MAAM,eAAe,MAAM,WAAW,QAAQ,UAAU,eAAe,KAAA,CAAS;OAEhF,MAAM,OAAO,KAAK,YAAY;OAE9B,OAAO,QACL,aAAa,cAAc,UAAU,WAAW,EAAE,MAAM,WAAW,GACnE,OACF;MACF;KACF;KAEA,IAAI;KAEJ,IAAI,MAAM,OAAO;MACf,MAAM,SAAS,MAAM,WAAW;MAEhC,OAAO,UAAU;MACjB,MAAM,aAAa,MAAM,WAAW,OAAO,MAAM;MAEjD,MAAM,WAAW,OAAO,6BACtB,YAAY,QAAQ,MAAM,GAC1B,MACA;OAAE;OAAY,kBAAkB,UAAU;MAAkB,IAC3D,MAAM,CACT,CAAC,CAAC,KAAK,OAAO,eAAe,2BAA2B,MAAM,QAAQ,CAAC;MAGvE,UAAU,SAAS,WAAW,WAAW,CAAC;MAC1C,MAAM,WAAW,KAAK,GAAG,SAAS,YAAY,GAAI,SAAS,kBAAkB,CAAC,CAAE;MAChF,UAAU,SAAS;KACrB,OACE,UAAU,OAAO,oBACf,YAAY,QAAQ,MAAM,GAC1B;MACE,MAAM,cAAc,SAAS,gBAAgB,gBAAgB;MAC7D,SAAS,cAAc;MACvB,iBAAiB,OAAO;MACxB,aAAa;MACb,iBAAiB,OAAY,KAAK,UAChC,cAAc,YAAY,UACtB,MAAM,qBAAqB,EAAE,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,IACpD,MAAM,oBAAoB;KAClC,GACA,MACA,UAAU,SACT,MAAM,CACT,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,MAAM,QAAQ,CAAC;KAE/D,IAAI,WAAW;MACb,UAAU,SAAS,KAAK,WAAW,CAAC;MACpC,MAAM,SAAS,OAAO,GAAG,OAAO,SAAS,KAAK,EAAG;MAEjD,SAAS,OAAO,SAAS,KAAK,KAAK,SAAS;OAAE,GAAG;QAAM,GAAG,WAAW;MAAK,EAAE;MAC5E,MAAM,UAAU,YAAY,QAAQ,MAAM,CAAC,CAAC;MAE5C,MAAM,eAAe,KACnB,GAAG,GAAG,QAAQ,gBAAgB,KAAK,OAAO,mBAC1C,GAAG,wBAAwB,QAAQ,MAAM,SAAS,MAAM,QAAQ,OAAO;QAAG,QAAQ,WAAW,MAAM,WAAW,MAAM;QAAW,QAAQ,YAAY,MAAM,WAAW,MAAM;QAAqB,QAAQ,OAAO;QAAa,QAAQ,WAAW;QAAc,QAAQ,iBAAiB,YAAY,QAAQ,MAAM,CAAC,CAAC,cAAc,OAAO,eAAe;MAAE,CAAC,EAAE,EAC5V;KACF;KACA,UAAU,SAAS,SAAS,gBAAgB;KAC5C,MAAM,OAAO,KAAK,OAAc;KAEhC,OAAO;IACT,CAAC,CACH;GACF,CAAC,CAAC,CAAC,KAAK,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC;EAChE,CAAC;CACH;AACF,CAAC;AAED,MAAa,8BAQX,QACA,kBAEA,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,QAAQ,MAAM;CAEhF,MAAM,UAAU,OAAO,OAAO,IAAI;EAChC,WAAW,gBAAgB,UAAU,aAAa;EAClD,aAAa,wBAAwB,KAAK,CAAC,CAAC;CAC9C,CAAC;CAED,OAAO,uBAAuB;EAC5B,GAAG;EACH,QAAQ,YAAY,QAAQ,MAAM;CACpC,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,wBAAwB,KAAK,CAAC,CAAC,CAAC,CAAC;CAE/D,MAAM,YAAY,OAAO,yBACvB,yBACA,eACA,aACA,QACF;CAEA,OAAO,OAAO,SAAS,SAAS,WAAW,aAAa;AAC1D,CAAC;AAEH,MAAa,yBAOX,UACA,QACA,eACA,SAUA,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,QAAQ,MAAM;CAEhF,MAAM,UAAU,OAAO,OAAO,IAAI;EAChC,WAAW,gBAAgB,UAAU,aAAa;EAClD,aAAa,wBAAwB,KAAK,CAAC,CAAC;CAC9C,CAAC;CAED,OAAO,uBAAuB;EAC5B,GAAG;EACH,QAAQ,YAAY,QAAQ,MAAM;CACpC,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,wBAAwB,KAAK,CAAC,CAAC,CAAC,CAAC;CAE/D,OAAO,OAAO,2BACZ,UACA,yBACA,eACA,OAAO,MACP,aACA,WACC,cAAc,SAAS,SAAS,WAAW,aAAa,IACxD,aAAa,iBAAiB,WAC7B,OAAO,QAAQ,kBAAkB,kBAC/B,KAAK,aAAa,eAAe,MAAM,CACzC,CACJ;AACF,CAAC;;AAOH,MAAa,mBAOX,iBACA,kBACG;CA2EH,SAAS,2BAgBP,SACA,SAIA,MASA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,sBACE,UACA,QAAQ,SACR,gBAEE,aACA,aAKG;GACH,MAAM,WAAW,QAAQ,KAAK,kBAAkB,SAAS,gBAAgB,CAAC,CAAC,KACzE,QAAQ,IAAI,gBAAgB,SAAS,cAAc,GACnD,QAAQ,IAAI,oBAAoB,SAAS,kBAAkB,CAC7D;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,QAAQ,CAAC,CACxD;CACF;CAEA,OAAO;EACL,+BAQE,YAEA,2BAA2B,SAAS,aAAa,CAAC,CAAC,KACjD,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAC7E;EACF;CACF;AACF"}
+{"version":3,"file":"phone-target.mjs","names":[],"sources":["../../src/drizzle/phone-target.ts"],"sourcesContent":["import {\n  makeNativePhoneServices,\n  type AnyPhoneMapping as SharedMapping,\n} from \"@yielded/auth-persistence/Adapter\";\nimport {\n  PhoneOtpUnavailable,\n  PhoneLifecyclePolicy,\n  PhoneConfigurationError,\n} from \"@yielded/auth/PhoneOtp\";\nimport { Effect, Schema } from \"effect\";\n\nimport { NativeDatabase, type NativeDatabaseHandle } from \"./native-database\";\nimport {\n  coordinateNativeTarget,\n  nativeTarget,\n  type NativeTargetConfiguration,\n} from \"./native-target\";\nimport { type AnyPhoneMapping, type PhonePersistenceServices } from \"./phone-model\";\nimport { nativeProofMapping } from \"./proof-target\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nconst unavailable = () => PhoneOtpUnavailable.make({});\n\nconst validate = Effect.fnUntraced(\n  function* (source: AnyPhoneMapping, configuration: NativeTargetConfiguration) {\n    yield* validateDrizzleStorage(source);\n    yield* validateDrizzleStorage(source.proofs);\n    yield* Schema.decodeEffect(PhoneLifecyclePolicy)(source.policy);\n    if (configuration.mode === \"batch\" && source.proofs.d1?.primary !== true)\n      return yield* PhoneConfigurationError.make({});\n  },\n  Effect.mapError(() => PhoneConfigurationError.make({})),\n);\n\nconst services = Effect.fnUntraced(function* (\n  source: AnyPhoneMapping,\n  configuration: NativeTargetConfiguration,\n) {\n  const target = yield* nativeTarget(configuration);\n  const mapping: SharedMapping = { ...source, proofs: nativeProofMapping(source.proofs) };\n\n  return yield* target.provide(makeNativePhoneServices(target.tables, mapping));\n});\n\nexport const makeTargetPhonePersistenceServices = (\n  source: AnyPhoneMapping,\n  configuration: NativeTargetConfiguration,\n) => validate(source, configuration).pipe(Effect.andThen(services(source, configuration)));\n\nexport const coordinateTargetPhonePersistence = <Transaction, A, E, R>(\n  database: NativeDatabaseHandle,\n  source: AnyPhoneMapping,\n  configuration: NativeTargetConfiguration,\n  body: (transaction: Transaction, services: PhonePersistenceServices) => Effect.Effect<A, E, R>,\n) =>\n  validate(source, configuration).pipe(\n    Effect.provideService(NativeDatabase, database),\n    Effect.andThen(\n      coordinateNativeTarget(\n        unavailable,\n        database,\n        configuration,\n        services(source, configuration),\n        body,\n      ),\n    ),\n  );\n"],"mappings":";;;;;;;;AAqBA,MAAM,oBAAoB,oBAAoB,KAAK,CAAC,CAAC;AAErD,MAAM,WAAW,OAAO,WACtB,WAAW,QAAyB,eAA0C;CAC5E,OAAO,uBAAuB,MAAM;CACpC,OAAO,uBAAuB,OAAO,MAAM;CAC3C,OAAO,OAAO,aAAa,oBAAoB,CAAC,CAAC,OAAO,MAAM;CAC9D,IAAI,cAAc,SAAS,WAAW,OAAO,OAAO,IAAI,YAAY,MAClE,OAAO,OAAO,wBAAwB,KAAK,CAAC,CAAC;AACjD,GACA,OAAO,eAAe,wBAAwB,KAAK,CAAC,CAAC,CAAC,CACxD;AAEA,MAAM,WAAW,OAAO,WAAW,WACjC,QACA,eACA;CACA,MAAM,SAAS,OAAO,aAAa,aAAa;CAChD,MAAM,UAAyB;EAAE,GAAG;EAAQ,QAAQ,mBAAmB,OAAO,MAAM;CAAE;CAEtF,OAAO,OAAO,OAAO,QAAQ,wBAAwB,OAAO,QAAQ,OAAO,CAAC;AAC9E,CAAC;AAED,MAAa,sCACX,QACA,kBACG,SAAS,QAAQ,aAAa,CAAC,CAAC,KAAK,OAAO,QAAQ,SAAS,QAAQ,aAAa,CAAC,CAAC;AAEzF,MAAa,oCACX,UACA,QACA,eACA,SAEA,SAAS,QAAQ,aAAa,CAAC,CAAC,KAC9B,OAAO,eAAe,gBAAgB,QAAQ,GAC9C,OAAO,QACL,uBACE,aACA,UACA,eACA,SAAS,QAAQ,aAAa,GAC9B,IACF,CACF,CACF"}

package/dist/drizzle/proof-drivers.mjs

@@ -0,0 +1,24 @@
+import { NativeDatabase, nativeDatabase } from "./native-database.mjs";
+import { coordinateTargetProofPersistence, makeTargetProofPersistenceServices } from "./proof-target.mjs";
+import { Effect } from "effect";
+import { ProofPersistence } from "@yielded/auth/Proofs";
+//#region src/drizzle/proof-drivers.ts
+/** Physical driver selection; the proof workflow has one implementation.
+* Erase only foreign table/ID callback variance at the validated mapping boundary;
+* decoded proof and subject values still pass through their owning codecs. */
+const makeProofTarget = (databaseService, configuration) => {
+	function coordinateProofPersistence(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateTargetProofPersistence(database, options.mapping, configuration, (transaction, services) => {
+			const work = Effect.provideService(body, ProofPersistence, services.proofPersistence);
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	return {
+		makeProofPersistenceServices: (mapping) => makeTargetProofPersistenceServices(mapping, configuration).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		coordinateProofPersistence
+	};
+};
+//#endregion
+export { makeProofTarget };
+
+//# sourceMappingURL=proof-drivers.mjs.map

package/dist/drizzle/proof-drivers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-drivers.mjs","names":[],"sources":["../../src/drizzle/proof-drivers.ts"],"sourcesContent":["import type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport { ProofPersistence, type ProofUnavailable } from \"@yielded/auth/Proofs\";\nimport type { Table } from \"drizzle-orm\";\nimport { type Context, Effect, type Crypto } from \"effect\";\n\nimport type { NativeDriverDatabase, NativeDriverTransaction } from \"./driver-types\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport type { NativeTargetConfiguration } from \"./native-target\";\nimport type { AnyProofPersistenceMapping, ProofPersistenceMapping } from \"./proof-model\";\nimport {\n  coordinateTargetProofPersistence,\n  makeTargetProofPersistenceServices,\n} from \"./proof-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\n/** Physical driver selection; the proof workflow has one implementation.\n * Erase only foreign table/ID callback variance at the validated mapping boundary;\n * decoded proof and subject values still pass through their owning codecs. */\nexport const makeProofTarget = <DatabaseId, D extends NativeDriverDatabase>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: NativeTargetConfiguration,\n) => {\n  function coordinateProofPersistence<\n    Database extends D,\n    Proof extends Table,\n    Subject extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: ProofPersistenceMapping<Proof, Subject, NativeId>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | ProofUnavailable,\n    Exclude<R, ProofPersistence> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinateProofPersistence<\n    Database extends D,\n    Proof extends Table,\n    Subject extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: ProofPersistenceMapping<Proof, Subject, NativeId>;\n      readonly transaction: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | ProofUnavailable,\n    Exclude<R, ProofPersistence | TxId> | DR | LifecycleHooks | Crypto.Crypto\n  >;\n  function coordinateProofPersistence<\n    Database extends D,\n    Proof extends Table,\n    Subject extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<Database, DE, DR>,\n    options: {\n      readonly mapping: ProofPersistenceMapping<Proof, Subject, NativeId>;\n      readonly transaction?: SuppliedService<\n        TxId,\n        NoInfer<NativeDriverTransaction<Database>>,\n        TxShape\n      >;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateTargetProofPersistence(\n        database,\n        options.mapping as unknown as AnyProofPersistenceMapping,\n        configuration,\n        (transaction: NativeDriverTransaction<Database>, services) => {\n          const work = Effect.provideService(body, ProofPersistence, services.proofPersistence);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    makeProofPersistenceServices: <Proof extends Table, Subject extends Table, NativeId>(\n      mapping: ProofPersistenceMapping<Proof, Subject, NativeId>,\n    ) =>\n      makeTargetProofPersistenceServices(\n        mapping as unknown as AnyProofPersistenceMapping,\n        configuration,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    coordinateProofPersistence,\n  };\n};\n"],"mappings":";;;;;;;;AAkBA,MAAa,mBACX,iBACA,kBACG;CAmDH,SAAS,2BAaP,SACA,SAQA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,iCACE,UACA,QAAQ,SACR,gBACC,aAAgD,aAAa;GAC5D,MAAM,OAAO,OAAO,eAAe,MAAM,kBAAkB,SAAS,gBAAgB;GAEpF,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,+BACE,YAEA,mCACE,SACA,aACF,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF;CACF;AACF"}

package/dist/drizzle/proof-model.d.mts

@@ -1,21 +1,13 @@
+import { ClockMapping, MappedClock } from "./native-clock.mjs";
 import { DrizzleTableModel } from "./table-model.mjs";
 import * as Shared from "@yielded/auth-persistence/Adapter";
-import { ProofAction, ProofAuthorityInput, ProofCommandDecision, ProofCommandKind, ProofConstraintClassifier, ProofContinuationRecord, ProofDeliveryState, ProofGenerationState, ProofScopeKeys, ProofScopeKind, RequiredProofConstraints, requiredProofConstraints } from "@yielded/auth-persistence/Adapter";
+import { RequiredProofConstraints, requiredProofConstraints } from "@yielded/auth-persistence/Adapter";
 import { SQL, Table } from "drizzle-orm";
 //#region src/drizzle/proof-model.d.ts
-export type ProofAuthorityTables<Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> = Shared.ProofAuthorityTables<DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, NativeSubjectId, SQL>;
-export type ProofRequestTable<Request extends Table> = Shared.ProofRequestTable<DrizzleTableModel<Request>>;
-export type ProofSeriesTable<Series extends Table> = Shared.ProofSeriesTable<DrizzleTableModel<Series>>;
-export type ProofGenerationTable<Generation extends Table> = Shared.ProofGenerationTable<DrizzleTableModel<Generation>>;
-export type ProofContinuationTable<Continuation extends Table> = Shared.ProofContinuationTable<DrizzleTableModel<Continuation>>;
-export type ProofRateScopeTable<RateScope extends Table> = Shared.ProofRateScopeTable<DrizzleTableModel<RateScope>>;
-export type ProofAbuseEventTable<AbuseEvent extends Table> = Shared.ProofAbuseEventTable<DrizzleTableModel<AbuseEvent>>;
-export type ProofFailureEventTable<FailureEvent extends Table> = Shared.ProofFailureEventTable<DrizzleTableModel<FailureEvent>>;
-export type ProofCommandTable<Command extends Table> = Shared.ProofCommandTable<DrizzleTableModel<Command>>;
-export type ProofD1Clock = Shared.ProofD1Clock<SQL>;
-export type ProofPersistenceMapping<Request extends Table, Series extends Table, Generation extends Table, Continuation extends Table, RateScope extends Table, AbuseEvent extends Table, FailureEvent extends Table, Command extends Table, Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> = Shared.ProofPersistenceMapping<DrizzleTableModel<Request>, DrizzleTableModel<Series>, DrizzleTableModel<Generation>, DrizzleTableModel<Continuation>, DrizzleTableModel<RateScope>, DrizzleTableModel<AbuseEvent>, DrizzleTableModel<FailureEvent>, DrizzleTableModel<Command>, DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, NativeSubjectId, SQL>;
-export type D1ProofPersistenceMapping<Request extends Table, Series extends Table, Generation extends Table, Continuation extends Table, RateScope extends Table, AbuseEvent extends Table, FailureEvent extends Table, Command extends Table, Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> = Shared.D1ProofPersistenceMapping<DrizzleTableModel<Request>, DrizzleTableModel<Series>, DrizzleTableModel<Generation>, DrizzleTableModel<Continuation>, DrizzleTableModel<RateScope>, DrizzleTableModel<AbuseEvent>, DrizzleTableModel<FailureEvent>, DrizzleTableModel<Command>, DrizzleTableModel<Subject>, DrizzleTableModel<Identifier>, DrizzleTableModel<Credential>, NativeSubjectId, SQL>;
-export type AnyProofPersistenceMapping = ProofPersistenceMapping<Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, unknown>;
+export type ProofTable<Proof extends Table> = Shared.ProofTable<DrizzleTableModel<Proof>>;
+type ProofClock$1 = MappedClock;
+export type ProofPersistenceMapping<Proof extends Table, Subject extends Table, NativeSubjectId> = ClockMapping<Shared.ProofPersistenceMapping<DrizzleTableModel<Proof>, DrizzleTableModel<Subject>, NativeSubjectId, SQL>>;
+export type AnyProofPersistenceMapping = ProofPersistenceMapping<Table, Table, unknown>;
 //#endregion
-export { type ProofAction, type ProofAuthorityInput, type ProofCommandDecision, type ProofCommandKind, type ProofConstraintClassifier, type ProofContinuationRecord, type ProofDeliveryState, type ProofGenerationState, type ProofScopeKeys, type ProofScopeKind, type RequiredProofConstraints, requiredProofConstraints };
+export { ProofClock$1 as ProofClock, type RequiredProofConstraints, requiredProofConstraints };
 //# sourceMappingURL=proof-model.d.mts.map

package/dist/drizzle/proof-target.d.mts

@@ -1,10 +1,10 @@
-import "./standalone-guard.mjs";
-import "./proof-sql.mjs";
-import { NativeDatabase } from "@yielded/auth-persistence/Adapter";
+import "./proof-model.mjs";
+import "./native-database.mjs";
+import "./D1BatchStatements.mjs";
+import "./native-target.mjs";
+import { requireStandalone } from "@yielded/auth-persistence/Adapter";
 import { Effect, Layer } from "effect";
-import { HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
 import { ProofPersistence, ProofUnavailable } from "@yielded/auth/Proofs";
-import "effect/sql/SqlError";
 //#region src/drizzle/proof-target.d.ts
 export declare const proofPersistenceLayer: <E, R>(services: Effect.Effect<{
   readonly proofPersistence: ProofPersistence["Service"];

package/dist/drizzle/proof-target.mjs

@@ -1,38 +1,24 @@
+import { nativeClock } from "./native-clock.mjs";
+import { coordinateNativeTarget, nativeTarget } from "./native-target.mjs";
 import { validateDrizzleStorage } from "./storage-validation.mjs";
-import { sqlClientStandaloneGuard } from "./standalone-guard.mjs";
-import { CurrentProofSql, makeSqlProofPersistence } from "./proof-sql.mjs";
+import { makeNativeProofServices } from "@yielded/auth-persistence/Adapter";
 import { Effect, Layer } from "effect";
-import { LifecycleHooks, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
 import { ProofPersistence, ProofUnavailable } from "@yielded/auth/Proofs";
 //#region src/drizzle/proof-target.ts
-const sqlClientProofStandaloneGuard = (service) => sqlClientStandaloneGuard(service, () => ProofUnavailable.make({}));
-const options = (configuration, coordinated = false) => ({
-	mode: configuration.mode,
-	locking: configuration.locking,
-	standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,
-	insertIfAbsent: configuration.insertIfAbsent,
-	coordinated
+const unavailable = () => ProofUnavailable.make({});
+const nativeProofMapping = (value) => ({
+	...value,
+	clock: nativeClock(value.clock)
 });
-const makeTargetProofPersistenceServices = (mapping, configuration) => Effect.gen(function* () {
-	return { proofPersistence: yield* makeSqlProofPersistence(mapping, options(configuration)) };
-});
-/**
-* The native transaction is the root commit owner. Interruption or owner failure
-* rolls it back and discards the journal. No owner effect is retried. Native
-* transaction-acquisition `SqlError`s are exposed; caller errors, including
-* Drizzle query wrappers, propagate unchanged.
-*/
-const coordinateTargetProofPersistence = (database, mapping, configuration, owner) => Effect.gen(function* () {
-	const hooks = yield* LifecycleHooks;
-	if (yield* hasCommitScope) return yield* ProofUnavailable.make({});
-	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
-	yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(() => ProofUnavailable.make({})));
-	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
-		return yield* owner(transaction, { proofPersistence: yield* makeSqlProofPersistence(mapping, options(configuration, true)).pipe(Effect.provideService(CurrentProofSql, transaction)) });
-	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
+const makeTargetProofPersistenceServices = Effect.fnUntraced(function* (source, configuration) {
+	yield* validateDrizzleStorage(source).pipe(Effect.mapError(unavailable));
+	if (configuration.mode === "batch" && source.d1?.primary !== true) return yield* unavailable();
+	const target = yield* nativeTarget(configuration);
+	return yield* target.provide(makeNativeProofServices(target.tables, nativeProofMapping(source)));
 });
+const coordinateTargetProofPersistence = (database, source, configuration, body) => coordinateNativeTarget(unavailable, database, configuration, makeTargetProofPersistenceServices(source, configuration), body);
 const proofPersistenceLayer = (services) => Layer.effect(ProofPersistence, Effect.map(services, (value) => value.proofPersistence));
 //#endregion
-export { coordinateTargetProofPersistence, makeTargetProofPersistenceServices, proofPersistenceLayer, sqlClientProofStandaloneGuard };
+export { coordinateTargetProofPersistence, makeTargetProofPersistenceServices, nativeProofMapping, proofPersistenceLayer };
 
 //# sourceMappingURL=proof-target.mjs.map

package/dist/drizzle/proof-target.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"proof-target.mjs","names":[],"sources":["../../src/drizzle/proof-target.ts"],"sourcesContent":["import type { NativeDatabase } from \"@yielded/auth-persistence/Adapter\";\nimport {\n  coordinateCommit,\n  hasCommitScope,\n  LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport { ProofUnavailable, ProofPersistence } from \"@yielded/auth/Proofs\";\n/* oxlint-disable no-explicit-any -- public driver entrypoints restore concrete Drizzle types. */\nimport { Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/sql/SqlError\";\n\nimport {\n  CurrentProofSql,\n  makeSqlProofPersistence,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n  type ProofSqlQuery,\n} from \"./proof-sql\";\nimport { sqlClientStandaloneGuard, type TransactionService } from \"./standalone-guard\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nexport interface ProofTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, ProofUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, ProofUnavailable>;\n  readonly insertIfAbsent: (\n    query: ProofSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => ProofSqlQuery;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type ProofCoordinatorError<E> =\n  | E\n  | ProofUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientProofStandaloneGuard = (\n  service: TransactionService | undefined,\n): Effect.Effect<void, ProofUnavailable> =>\n  sqlClientStandaloneGuard(service, () => ProofUnavailable.make({}));\n\nconst options = (\n  configuration: ProofTargetConfiguration,\n  coordinated = false,\n): ProofSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  insertIfAbsent: configuration.insertIfAbsent,\n  coordinated,\n});\n\nexport const makeTargetProofPersistenceServices = (\n  mapping: any,\n  configuration: ProofTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      proofPersistence: yield* makeSqlProofPersistence(mapping, options(configuration)),\n    };\n  });\n\n/**\n * The native transaction is the root commit owner. Interruption or owner failure\n * rolls it back and discards the journal. No owner effect is retried. Native\n * transaction-acquisition `SqlError`s are exposed; caller errors, including\n * Drizzle query wrappers, propagate unchanged.\n */\nexport const coordinateTargetProofPersistence = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: ProofTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: { readonly proofPersistence: ProofPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, ProofCoordinatorError<E>, R | LifecycleHooks | NativeDatabase> =>\n  Effect.gen(function* (): Effect.fn.Return<\n    A,\n    ProofCoordinatorError<E>,\n    R | LifecycleHooks | NativeDatabase\n  > {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* ProofUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(() => ProofUnavailable.make({})));\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              proofPersistence: yield* makeSqlProofPersistence(\n                mapping,\n                options(configuration, true),\n              ).pipe(\n                Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const proofPersistenceLayer = <E, R>(\n  services: Effect.Effect<{ readonly proofPersistence: ProofPersistence[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    ProofPersistence,\n    Effect.map(services, (value) => value.proofPersistence),\n  );\n"],"mappings":";;;;;;;AA8CA,MAAa,iCACX,YAEA,yBAAyB,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,WACJ,eACA,cAAc,WACa;CAC3B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,gBAAgB,cAAc;CAC9B;AACF;AAEA,MAAa,sCACX,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,kBAAkB,OAAO,wBAAwB,SAAS,QAAQ,aAAa,CAAC,EAClF;AACF,CAAC;;;;;;;AAQH,MAAa,oCACX,UACA,SACA,eACA,UAKA,OAAO,IAAI,aAIT;CACA,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;CACjE,OAAO,cAAc,oBAAoB,cAAc;CAEvD,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;CAmB5F,QAAO,OAjBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,kBAAkB,OAAO,wBACvB,SACA,QAAQ,eAAe,IAAI,CAC7B,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,WAA0C,CACnF,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,yBACX,aAEA,MAAM,OACJ,kBACA,OAAO,IAAI,WAAW,UAAU,MAAM,gBAAgB,CACxD"}
+{"version":3,"file":"proof-target.mjs","names":[],"sources":["../../src/drizzle/proof-target.ts"],"sourcesContent":["import {\n  makeNativeProofServices,\n  requireStandalone,\n  type AnyProofPersistenceMapping as SharedMapping,\n} from \"@yielded/auth-persistence/Adapter\";\nimport { ProofUnavailable, ProofPersistence } from \"@yielded/auth/Proofs\";\nimport { Effect, Layer } from \"effect\";\n\nimport { nativeClock } from \"./native-clock\";\nimport type { NativeDatabaseHandle } from \"./native-database\";\nimport {\n  coordinateNativeTarget,\n  nativeTarget,\n  type NativeTargetConfiguration,\n} from \"./native-target\";\nimport type { AnyProofPersistenceMapping } from \"./proof-model\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\n\nconst unavailable = () => ProofUnavailable.make({});\n\nexport const sqlClientProofStandaloneGuard = (marker: Parameters<typeof requireStandalone>[1]) =>\n  requireStandalone(unavailable, marker);\n\nexport const nativeProofMapping = (value: AnyProofPersistenceMapping): SharedMapping => ({\n  ...value,\n  clock: nativeClock(value.clock),\n});\n\nexport const makeTargetProofPersistenceServices = Effect.fnUntraced(function* (\n  source: AnyProofPersistenceMapping,\n  configuration: NativeTargetConfiguration,\n) {\n  yield* validateDrizzleStorage(source).pipe(Effect.mapError(unavailable));\n  if (configuration.mode === \"batch\" && source.d1?.primary !== true) return yield* unavailable();\n  const target = yield* nativeTarget(configuration);\n\n  return yield* target.provide(makeNativeProofServices(target.tables, nativeProofMapping(source)));\n});\n\nexport const coordinateTargetProofPersistence = <Transaction, A, E, R>(\n  database: NativeDatabaseHandle,\n  source: AnyProofPersistenceMapping,\n  configuration: NativeTargetConfiguration,\n  body: (\n    transaction: Transaction,\n    services: { readonly proofPersistence: ProofPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n) =>\n  coordinateNativeTarget(\n    unavailable,\n    database,\n    configuration,\n    makeTargetProofPersistenceServices(source, configuration),\n    body,\n  );\n\nexport const proofPersistenceLayer = <E, R>(\n  services: Effect.Effect<{ readonly proofPersistence: ProofPersistence[\"Service\"] }, E, R>,\n) =>\n  Layer.effect(\n    ProofPersistence,\n    Effect.map(services, (value) => value.proofPersistence),\n  );\n"],"mappings":";;;;;;;AAkBA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAKlD,MAAa,sBAAsB,WAAsD;CACvF,GAAG;CACH,OAAO,YAAY,MAAM,KAAK;AAChC;AAEA,MAAa,qCAAqC,OAAO,WAAW,WAClE,QACA,eACA;CACA,OAAO,uBAAuB,MAAM,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CACvE,IAAI,cAAc,SAAS,WAAW,OAAO,IAAI,YAAY,MAAM,OAAO,OAAO,YAAY;CAC7F,MAAM,SAAS,OAAO,aAAa,aAAa;CAEhD,OAAO,OAAO,OAAO,QAAQ,wBAAwB,OAAO,QAAQ,mBAAmB,MAAM,CAAC,CAAC;AACjG,CAAC;AAED,MAAa,oCACX,UACA,QACA,eACA,SAKA,uBACE,aACA,UACA,eACA,mCAAmC,QAAQ,aAAa,GACxD,IACF;AAEF,MAAa,yBACX,aAEA,MAAM,OACJ,kBACA,OAAO,IAAI,WAAW,UAAU,MAAM,gBAAgB,CACxD"}

package/dist/drizzle/session-drivers.mjs

@@ -0,0 +1,97 @@
+import { nativeClock } from "./native-clock.mjs";
+import { NativeDatabase, nativeDatabase } from "./native-database.mjs";
+import { coordinateNativeTarget, nativeTarget } from "./native-target.mjs";
+import { validateDrizzleStorage } from "./storage-validation.mjs";
+import { makeNativeAuthenticationAuthorityServices, makeNativePendingAuthenticationServices, makeNativeSessionCleanupServices, makeNativeSessionStepUpServices, makeNativeSignedSessionValidityServices, makeNativeStatefulSessionServices } from "@yielded/auth-persistence/Adapter";
+import { Effect } from "effect";
+import { AuthenticationAuthority, SessionUnavailable } from "@yielded/auth/Sessions";
+//#region src/drizzle/session-drivers.ts
+const unavailable = () => SessionUnavailable.make({});
+const clockMapping = (mapping) => ({
+	...mapping,
+	clock: nativeClock(mapping.clock)
+});
+/** Foreign table/ID callback variance is erased only at this physical mapping
+* boundary. All subjects, sessions, pending payloads and policy use their codecs. */
+const makeSessionTarget = (databaseService, configuration) => {
+	const authenticationAuthority = (mapping) => Effect.gen(function* () {
+		yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+		if (configuration.mode === "batch" && (mapping.d1?.primary !== true || mapping.subject.requirementColumns === void 0)) return yield* unavailable();
+		const target = yield* nativeTarget(configuration);
+		return yield* target.provide(makeNativeAuthenticationAuthorityServices(target.tables, mapping));
+	});
+	function coordinateAuthenticationAuthority(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateNativeTarget(unavailable, database, configuration, authenticationAuthority(clockMapping(options.mapping)), (transaction, services) => {
+			const work = body.pipe(Effect.provideService(AuthenticationAuthority, services.authenticationAuthority));
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	const pendingAuthentication = (mapping) => Effect.gen(function* () {
+		yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+		if (configuration.mode === "batch" && (mapping.d1?.primary !== true || mapping.subject.requirementColumns === void 0)) return yield* unavailable();
+		const target = yield* nativeTarget(configuration);
+		return yield* target.provide(makeNativePendingAuthenticationServices(target.tables, mapping));
+	});
+	function coordinatePendingAuthentication(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateNativeTarget(unavailable, database, configuration, pendingAuthentication(clockMapping(options.mapping)), (transaction, services) => {
+			const work = body.pipe(Effect.provideService(options.target, services.pendingAuthentication));
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	const statefulSessionPersistence = (mapping) => Effect.gen(function* () {
+		yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+		if (configuration.mode === "batch" && (mapping.d1?.primary !== true || mapping.subject.requirementColumns === void 0)) return yield* unavailable();
+		const target = yield* nativeTarget(configuration);
+		return yield* target.provide(makeNativeStatefulSessionServices(target.tables, mapping));
+	});
+	function coordinateStatefulSessions(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateNativeTarget(unavailable, database, configuration, statefulSessionPersistence(clockMapping(options.mapping)), (transaction, services) => {
+			const work = body.pipe(Effect.provideService(options.persistence, services.statefulSessionPersistence), Effect.provideService(options.repository, services.sessionRepository));
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	const signedSessionValidity = (mapping) => Effect.gen(function* () {
+		yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+		if (configuration.mode === "batch" && mapping.d1?.primary !== true) return yield* unavailable();
+		const target = yield* nativeTarget(configuration);
+		return yield* target.provide(makeNativeSignedSessionValidityServices(target.tables, mapping));
+	});
+	function coordinateSignedSessionValidity(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateNativeTarget(unavailable, database, configuration, signedSessionValidity(clockMapping(options.mapping)), (transaction, services) => {
+			const work = body.pipe(Effect.provideService(options.target, services.signedSessionValidity));
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	const sessionStepUpPersistence = (mapping) => Effect.gen(function* () {
+		yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));
+		if (configuration.mode === "batch" && (mapping.d1?.primary !== true || mapping.subject.requirementColumns === void 0)) return yield* unavailable();
+		const target = yield* nativeTarget(configuration);
+		return yield* target.provide(makeNativeSessionStepUpServices(target.tables, mapping));
+	});
+	function coordinateSessionStepUp(acquire, options, body) {
+		return Effect.flatMap(nativeDatabase(acquire), (database) => coordinateNativeTarget(unavailable, database, configuration, sessionStepUpPersistence(clockMapping(options.mapping)), (transaction, services) => {
+			const work = body.pipe(Effect.provideService(options.target, services.sessionStepUpPersistence));
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	return {
+		coordinateAuthenticationAuthority,
+		makeAuthenticationAuthorityServices: (mapping) => authenticationAuthority(clockMapping(mapping)).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		coordinatePendingAuthentication,
+		makePendingAuthenticationServices: (mapping) => pendingAuthentication(clockMapping(mapping)).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		coordinateStatefulSessions,
+		makeStatefulSessionServices: (mapping) => statefulSessionPersistence(clockMapping(mapping)).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		coordinateSignedSessionValidity,
+		makeSignedSessionValidityServices: (mapping) => signedSessionValidity(clockMapping(mapping)).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),
+		coordinateSessionStepUp,
+		makeSessionStepUpServices: (mapping, target) => sessionStepUpPersistence(clockMapping(mapping)).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))).pipe(Effect.map((services) => ({ sessionStepUpPersistence: target.of(services.sessionStepUpPersistence) }))),
+		makeSessionCleanupServices: (mapping) => Effect.gen(function* () {
+			const target = yield* nativeTarget(configuration);
+			return yield* target.provide(makeNativeSessionCleanupServices(target.tables, clockMapping(mapping)));
+		}).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)))
+	};
+};
+//#endregion
+export { makeSessionTarget };
+
+//# sourceMappingURL=session-drivers.mjs.map

package/dist/drizzle/session-drivers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-drivers.mjs","names":[],"sources":["../../src/drizzle/session-drivers.ts"],"sourcesContent":["import {\n  makeNativeAuthenticationAuthorityServices,\n  type NativeAuthenticationAuthorityMapping,\n  makeNativePendingAuthenticationServices,\n  type NativePendingAuthenticationMapping,\n  makeNativeStatefulSessionServices,\n  type NativeStatefulSessionMapping,\n  makeNativeSignedSessionValidityServices,\n  type NativeSignedSessionValidityMapping,\n  makeNativeSessionStepUpServices,\n  type NativeSessionStepUpMapping,\n  makeNativeSessionCleanupServices,\n} from \"@yielded/auth-persistence/Adapter\";\nimport type { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n  AuthenticationAuthority,\n  SessionUnavailable,\n  type PendingAuthentication,\n  type StatefulSessionPersistence,\n  type SessionRepository,\n  type SignedSessionValidity,\n  type SessionStepUpPersistence,\n} from \"@yielded/auth/Sessions\";\nimport type { Table } from \"drizzle-orm\";\nimport { Effect, type Context } from \"effect\";\n\nimport type { NativeDriverDatabase, NativeDriverTransaction } from \"./driver-types\";\nimport { nativeClock, type MappedClock } from \"./native-clock\";\nimport { NativeDatabase, nativeDatabase } from \"./native-database\";\nimport {\n  nativeTarget,\n  coordinateNativeTarget,\n  type NativeTargetConfiguration,\n} from \"./native-target\";\nimport type {\n  AuthenticationAuthorityMapping,\n  PendingAuthenticationMapping,\n  StatefulSessionMapping,\n  SignedSessionValidityMapping,\n  SessionCleanupMapping,\n} from \"./session-model\";\nimport type { SessionStepUpMapping } from \"./step-up-model\";\nimport { validateDrizzleStorage } from \"./storage-validation\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\nconst unavailable = () => SessionUnavailable.make({});\n\nconst clockMapping = <T extends { readonly clock: MappedClock }>(mapping: T) => ({\n  ...mapping,\n  clock: nativeClock(mapping.clock),\n});\n\n/** Foreign table/ID callback variance is erased only at this physical mapping\n * boundary. All subjects, sessions, pending payloads and policy use their codecs. */\nexport const makeSessionTarget = <DatabaseId, D extends NativeDriverDatabase>(\n  databaseService: Context.Service<DatabaseId, D>,\n  configuration: NativeTargetConfiguration,\n) => {\n  const authenticationAuthority = <Claims>(mapping: NativeAuthenticationAuthorityMapping<Claims>) =>\n    Effect.gen(function* () {\n      yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n      if (\n        configuration.mode === \"batch\" &&\n        (mapping.d1?.primary !== true || mapping.subject.requirementColumns === undefined)\n      )\n        return yield* unavailable();\n      const target = yield* nativeTarget(configuration);\n\n      return yield* target.provide(\n        makeNativeAuthenticationAuthorityServices(target.tables, mapping),\n      );\n    });\n\n  function coordinateAuthenticationAuthority<\n    DB extends D,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | SessionUnavailable,\n    Exclude<R, AuthenticationAuthority> | DR | LifecycleHooks\n  >;\n  function coordinateAuthenticationAuthority<\n    DB extends D,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>;\n      readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | SessionUnavailable,\n    Exclude<R, AuthenticationAuthority | TxId> | DR | LifecycleHooks\n  >;\n  function coordinateAuthenticationAuthority<\n    DB extends D,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateNativeTarget(\n        unavailable,\n        database,\n        configuration,\n        authenticationAuthority(\n          clockMapping(options.mapping) as unknown as NativeAuthenticationAuthorityMapping<Claims>,\n        ),\n        (transaction: NativeDriverTransaction<DB>, services) => {\n          const work = body.pipe(\n            Effect.provideService(AuthenticationAuthority, services.authenticationAuthority),\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  const pendingAuthentication = <Claims>(mapping: NativePendingAuthenticationMapping<Claims>) =>\n    Effect.gen(function* () {\n      yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n      if (\n        configuration.mode === \"batch\" &&\n        (mapping.d1?.primary !== true || mapping.subject.requirementColumns === undefined)\n      )\n        return yield* unavailable();\n      const target = yield* nativeTarget(configuration);\n\n      return yield* target.provide(makeNativePendingAuthenticationServices(target.tables, mapping));\n    });\n\n  function coordinatePendingAuthentication<\n    DB extends D,\n    Id,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, N>;\n      readonly target: SuppliedService<Id, PendingAuthentication<Claims>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | DE | SessionUnavailable, Exclude<R, Id> | DR | LifecycleHooks>;\n  function coordinatePendingAuthentication<\n    DB extends D,\n    Id,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, N>;\n      readonly target: SuppliedService<Id, PendingAuthentication<Claims>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | DE | SessionUnavailable, Exclude<R, Id | TxId> | DR | LifecycleHooks>;\n  function coordinatePendingAuthentication<\n    DB extends D,\n    Id,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    N,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, N>;\n      readonly target: SuppliedService<Id, PendingAuthentication<Claims>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateNativeTarget(\n        unavailable,\n        database,\n        configuration,\n        pendingAuthentication(\n          clockMapping(options.mapping) as unknown as NativePendingAuthenticationMapping<Claims>,\n        ),\n        (transaction: NativeDriverTransaction<DB>, services) => {\n          const work = body.pipe(\n            Effect.provideService(options.target, services.pendingAuthentication),\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  const statefulSessionPersistence = <Claims>(mapping: NativeStatefulSessionMapping<Claims>) =>\n    Effect.gen(function* () {\n      yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n      if (\n        configuration.mode === \"batch\" &&\n        (mapping.d1?.primary !== true || mapping.subject.requirementColumns === undefined)\n      )\n        return yield* unavailable();\n      const target = yield* nativeTarget(configuration);\n\n      return yield* target.provide(makeNativeStatefulSessionServices(target.tables, mapping));\n    });\n\n  function coordinateStatefulSessions<\n    DB extends D,\n    Id,\n    RepositoryId,\n    Claims,\n    S extends Table,\n    C extends Table,\n    Session extends Table,\n    P extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, P, N, NS>;\n      readonly persistence: SuppliedService<Id, StatefulSessionPersistence<Claims>>;\n      readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | SessionUnavailable,\n    Exclude<R, Id | RepositoryId> | DR | LifecycleHooks\n  >;\n  function coordinateStatefulSessions<\n    DB extends D,\n    Id,\n    RepositoryId,\n    Claims,\n    S extends Table,\n    C extends Table,\n    Session extends Table,\n    P extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, P, N, NS>;\n      readonly persistence: SuppliedService<Id, StatefulSessionPersistence<Claims>>;\n      readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n      readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    E | DE | SessionUnavailable,\n    Exclude<R, Id | RepositoryId | TxId> | DR | LifecycleHooks\n  >;\n  function coordinateStatefulSessions<\n    DB extends D,\n    Id,\n    RepositoryId,\n    Claims,\n    S extends Table,\n    C extends Table,\n    Session extends Table,\n    P extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, P, N, NS>;\n      readonly persistence: SuppliedService<Id, StatefulSessionPersistence<Claims>>;\n      readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateNativeTarget(\n        unavailable,\n        database,\n        configuration,\n        statefulSessionPersistence(\n          clockMapping(options.mapping) as unknown as NativeStatefulSessionMapping<Claims>,\n        ),\n        (transaction: NativeDriverTransaction<DB>, services) => {\n          const work = body.pipe(\n            Effect.provideService(options.persistence, services.statefulSessionPersistence),\n            Effect.provideService(options.repository, services.sessionRepository),\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  const signedSessionValidity = (mapping: NativeSignedSessionValidityMapping) =>\n    Effect.gen(function* () {\n      yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n      if (configuration.mode === \"batch\" && mapping.d1?.primary !== true)\n        return yield* unavailable();\n      const target = yield* nativeTarget(configuration);\n\n      return yield* target.provide(makeNativeSignedSessionValidityServices(target.tables, mapping));\n    });\n\n  function coordinateSignedSessionValidity<\n    DB extends D,\n    Id,\n    S extends Table,\n    T extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: SignedSessionValidityMapping<S, T, N, NS>;\n      readonly target: SuppliedService<Id, SignedSessionValidity>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | DE | SessionUnavailable, Exclude<R, Id> | DR | LifecycleHooks>;\n  function coordinateSignedSessionValidity<\n    DB extends D,\n    Id,\n    S extends Table,\n    T extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: SignedSessionValidityMapping<S, T, N, NS>;\n      readonly target: SuppliedService<Id, SignedSessionValidity>;\n      readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | DE | SessionUnavailable, Exclude<R, Id | TxId> | DR | LifecycleHooks>;\n  function coordinateSignedSessionValidity<\n    DB extends D,\n    Id,\n    S extends Table,\n    T extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: SignedSessionValidityMapping<S, T, N, NS>;\n      readonly target: SuppliedService<Id, SignedSessionValidity>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateNativeTarget(\n        unavailable,\n        database,\n        configuration,\n        signedSessionValidity(\n          clockMapping(options.mapping) as unknown as NativeSignedSessionValidityMapping,\n        ),\n        (transaction: NativeDriverTransaction<DB>, services) => {\n          const work = body.pipe(\n            Effect.provideService(options.target, services.signedSessionValidity),\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  const sessionStepUpPersistence = <Claims>(mapping: NativeSessionStepUpMapping<Claims>) =>\n    Effect.gen(function* () {\n      yield* validateDrizzleStorage(mapping).pipe(Effect.mapError(unavailable));\n      if (\n        configuration.mode === \"batch\" &&\n        (mapping.d1?.primary !== true || mapping.subject.requirementColumns === undefined)\n      )\n        return yield* unavailable();\n      const target = yield* nativeTarget(configuration);\n\n      return yield* target.provide(makeNativeSessionStepUpServices(target.tables, mapping));\n    });\n\n  function coordinateSessionStepUp<\n    DB extends D,\n    Id,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    Session extends Table,\n    T extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>;\n      readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | DE | SessionUnavailable, Exclude<R, Id> | DR | LifecycleHooks>;\n  function coordinateSessionStepUp<\n    DB extends D,\n    Id,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    Session extends Table,\n    T extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>;\n      readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n      readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | DE | SessionUnavailable, Exclude<R, Id | TxId> | DR | LifecycleHooks>;\n  function coordinateSessionStepUp<\n    DB extends D,\n    Id,\n    Claims,\n    S extends Table,\n    C extends Table,\n    P extends Table,\n    Session extends Table,\n    T extends Table,\n    N,\n    NS,\n    A,\n    E,\n    R,\n    DE,\n    DR,\n    TxId,\n    TxShape,\n  >(\n    acquire: Effect.Effect<DB, DE, DR>,\n    options: {\n      readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>;\n      readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ) {\n    return Effect.flatMap(nativeDatabase(acquire), (database) =>\n      coordinateNativeTarget(\n        unavailable,\n        database,\n        configuration,\n        sessionStepUpPersistence(\n          clockMapping(options.mapping) as unknown as NativeSessionStepUpMapping<Claims>,\n        ),\n        (transaction: NativeDriverTransaction<DB>, services) => {\n          const work = body.pipe(\n            Effect.provideService(options.target, services.sessionStepUpPersistence),\n          );\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    coordinateAuthenticationAuthority,\n    makeAuthenticationAuthorityServices: <\n      Claims,\n      S extends Table,\n      C extends Table,\n      P extends Table,\n      N,\n    >(\n      mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>,\n    ) =>\n      authenticationAuthority(\n        clockMapping(mapping) as unknown as NativeAuthenticationAuthorityMapping<Claims>,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    coordinatePendingAuthentication,\n    makePendingAuthenticationServices: <\n      Claims,\n      S extends Table,\n      C extends Table,\n      P extends Table,\n      N,\n    >(\n      mapping: PendingAuthenticationMapping<Claims, S, C, P, N>,\n    ) =>\n      pendingAuthentication(\n        clockMapping(mapping) as unknown as NativePendingAuthenticationMapping<Claims>,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    coordinateStatefulSessions,\n    makeStatefulSessionServices: <\n      Claims,\n      S extends Table,\n      C extends Table,\n      Session extends Table,\n      P extends Table,\n      N,\n      NS,\n    >(\n      mapping: StatefulSessionMapping<Claims, S, C, Session, P, N, NS>,\n    ) =>\n      statefulSessionPersistence(\n        clockMapping(mapping) as unknown as NativeStatefulSessionMapping<Claims>,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    coordinateSignedSessionValidity,\n    makeSignedSessionValidityServices: <S extends Table, T extends Table, N, NS>(\n      mapping: SignedSessionValidityMapping<S, T, N, NS>,\n    ) =>\n      signedSessionValidity(\n        clockMapping(mapping) as unknown as NativeSignedSessionValidityMapping,\n      ).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n    coordinateSessionStepUp,\n    makeSessionStepUpServices: <\n      Claims,\n      S extends Table,\n      C extends Table,\n      P extends Table,\n      Session extends Table,\n      T extends Table,\n      N,\n      NS,\n      Id,\n    >(\n      mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>,\n      target: Context.Service<Id, SessionStepUpPersistence<Claims>>,\n    ) =>\n      sessionStepUpPersistence(\n        clockMapping(mapping) as unknown as NativeSessionStepUpMapping<Claims>,\n      )\n        .pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService)))\n        .pipe(\n          Effect.map((services) => ({\n            sessionStepUpPersistence: target.of(services.sessionStepUpPersistence),\n          })),\n        ),\n    makeSessionCleanupServices: <P extends Table, T extends Table, N, NS>(\n      mapping: SessionCleanupMapping<P, T, N, NS>,\n    ) =>\n      Effect.gen(function* () {\n        const target = yield* nativeTarget(configuration);\n\n        return yield* target.provide(\n          makeNativeSessionCleanupServices(\n            target.tables,\n            clockMapping(mapping) as unknown as Parameters<\n              typeof makeNativeSessionCleanupServices\n            >[1],\n          ),\n        );\n      }).pipe(Effect.provideServiceEffect(NativeDatabase, nativeDatabase(databaseService))),\n  };\n};\n"],"mappings":";;;;;;;;AA6CA,MAAM,oBAAoB,mBAAmB,KAAK,CAAC,CAAC;AAEpD,MAAM,gBAA2D,aAAgB;CAC/E,GAAG;CACH,OAAO,YAAY,QAAQ,KAAK;AAClC;;;AAIA,MAAa,qBACX,iBACA,kBACG;CACH,MAAM,2BAAmC,YACvC,OAAO,IAAI,aAAa;EACtB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;EACxE,IACE,cAAc,SAAS,YACtB,QAAQ,IAAI,YAAY,QAAQ,QAAQ,QAAQ,uBAAuB,KAAA,IAExE,OAAO,OAAO,YAAY;EAC5B,MAAM,SAAS,OAAO,aAAa,aAAa;EAEhD,OAAO,OAAO,OAAO,QACnB,0CAA0C,OAAO,QAAQ,OAAO,CAClE;CACF,CAAC;CAoDH,SAAS,kCAeP,SACA,SAIA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,uBACE,aACA,UACA,eACA,wBACE,aAAa,QAAQ,OAAO,CAC9B,IACC,aAA0C,aAAa;GACtD,MAAM,OAAO,KAAK,KAChB,OAAO,eAAe,yBAAyB,SAAS,uBAAuB,CACjF;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,MAAM,yBAAiC,YACrC,OAAO,IAAI,aAAa;EACtB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;EACxE,IACE,cAAc,SAAS,YACtB,QAAQ,IAAI,YAAY,QAAQ,QAAQ,QAAQ,uBAAuB,KAAA,IAExE,OAAO,OAAO,YAAY;EAC5B,MAAM,SAAS,OAAO,aAAa,aAAa;EAEhD,OAAO,OAAO,OAAO,QAAQ,wCAAwC,OAAO,QAAQ,OAAO,CAAC;CAC9F,CAAC;CAgDH,SAAS,gCAgBP,SACA,SAKA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,uBACE,aACA,UACA,eACA,sBACE,aAAa,QAAQ,OAAO,CAC9B,IACC,aAA0C,aAAa;GACtD,MAAM,OAAO,KAAK,KAChB,OAAO,eAAe,QAAQ,QAAQ,SAAS,qBAAqB,CACtE;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,MAAM,8BAAsC,YAC1C,OAAO,IAAI,aAAa;EACtB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;EACxE,IACE,cAAc,SAAS,YACtB,QAAQ,IAAI,YAAY,QAAQ,QAAQ,QAAQ,uBAAuB,KAAA,IAExE,OAAO,OAAO,YAAY;EAC5B,MAAM,SAAS,OAAO,aAAa,aAAa;EAEhD,OAAO,OAAO,OAAO,QAAQ,kCAAkC,OAAO,QAAQ,OAAO,CAAC;CACxF,CAAC;CAgEH,SAAS,2BAmBP,SACA,SAMA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,uBACE,aACA,UACA,eACA,2BACE,aAAa,QAAQ,OAAO,CAC9B,IACC,aAA0C,aAAa;GACtD,MAAM,OAAO,KAAK,KAChB,OAAO,eAAe,QAAQ,aAAa,SAAS,0BAA0B,GAC9E,OAAO,eAAe,QAAQ,YAAY,SAAS,iBAAiB,CACtE;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,MAAM,yBAAyB,YAC7B,OAAO,IAAI,aAAa;EACtB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;EACxE,IAAI,cAAc,SAAS,WAAW,QAAQ,IAAI,YAAY,MAC5D,OAAO,OAAO,YAAY;EAC5B,MAAM,SAAS,OAAO,aAAa,aAAa;EAEhD,OAAO,OAAO,OAAO,QAAQ,wCAAwC,OAAO,QAAQ,OAAO,CAAC;CAC9F,CAAC;CA8CH,SAAS,gCAeP,SACA,SAKA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,uBACE,aACA,UACA,eACA,sBACE,aAAa,QAAQ,OAAO,CAC9B,IACC,aAA0C,aAAa;GACtD,MAAM,OAAO,KAAK,KAChB,OAAO,eAAe,QAAQ,QAAQ,SAAS,qBAAqB,CACtE;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,MAAM,4BAAoC,YACxC,OAAO,IAAI,aAAa;EACtB,OAAO,uBAAuB,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;EACxE,IACE,cAAc,SAAS,YACtB,QAAQ,IAAI,YAAY,QAAQ,QAAQ,QAAQ,uBAAuB,KAAA,IAExE,OAAO,OAAO,YAAY;EAC5B,MAAM,SAAS,OAAO,aAAa,aAAa;EAEhD,OAAO,OAAO,OAAO,QAAQ,gCAAgC,OAAO,QAAQ,OAAO,CAAC;CACtF,CAAC;CAsDH,SAAS,wBAmBP,SACA,SAKA,MACA;EACA,OAAO,OAAO,QAAQ,eAAe,OAAO,IAAI,aAC9C,uBACE,aACA,UACA,eACA,yBACE,aAAa,QAAQ,OAAO,CAC9B,IACC,aAA0C,aAAa;GACtD,MAAM,OAAO,KAAK,KAChB,OAAO,eAAe,QAAQ,QAAQ,SAAS,wBAAwB,CACzE;GAEA,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL;EACA,sCAOE,YAEA,wBACE,aAAa,OAAO,CACtB,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF;EACA,oCAOE,YAEA,sBACE,aAAa,OAAO,CACtB,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF;EACA,8BASE,YAEA,2BACE,aAAa,OAAO,CACtB,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF;EACA,oCACE,YAEA,sBACE,aAAa,OAAO,CACtB,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;EACrF;EACA,4BAWE,SACA,WAEA,yBACE,aAAa,OAAO,CACtB,CAAC,CACE,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC,CAAC,CAClF,KACC,OAAO,KAAK,cAAc,EACxB,0BAA0B,OAAO,GAAG,SAAS,wBAAwB,EACvE,EAAE,CACJ;EACJ,6BACE,YAEA,OAAO,IAAI,aAAa;GACtB,MAAM,SAAS,OAAO,aAAa,aAAa;GAEhD,OAAO,OAAO,OAAO,QACnB,iCACE,OAAO,QACP,aAAa,OAAO,CAGtB,CACF;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,qBAAqB,gBAAgB,eAAe,eAAe,CAAC,CAAC;CACxF;AACF"}