@yielded/auth-persistence 0.1.0-beta.25 → 0.1.0-beta.26

package/dist/internal/email-policy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-policy.mjs","names":[],"sources":["../../src/internal/email-policy.ts"],"sourcesContent":["import {\n  type EmailAddressMutation,\n  type EmailAddressTarget,\n  type EmailAction,\n  EmailUnavailable,\n  snapshotEmailCredential,\n  snapshotEmailRequirement,\n  snapshotEmailRevision,\n} from \"@yielded/auth/Email\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport {\n  snapshotAuthenticationEvidence,\n  type AuthenticationRevision,\n  type AuthenticationRequirement,\n  type SecurityRevision,\n} from \"@yielded/auth/Sessions\";\nimport { Effect } from \"effect\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport type { AnyEmailAddressMapping } from \"./models/email-model\";\nimport { passwordEvidenceSatisfiedAt } from \"./password-policy\";\n\nconst unavailable = () => EmailUnavailable.make({});\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nexport type EmailWorkflowPolicy = Pick<\n  AnyEmailAddressMapping,\n  | \"allocateCredentialId\"\n  | \"allocateCredentialIdSync\"\n  | \"allocateRevision\"\n  | \"allocateRevisionSync\"\n  | \"sessionInvalidation\"\n  | \"isIdentifierConflict\"\n  | \"isCredentialConflict\"\n> & {\n  readonly subject: Pick<\n    AnyEmailAddressMapping[\"subject\"],\n    \"nextSecurityRevision\" | \"nextSecurityRevisionSync\"\n  >;\n};\n\nexport const sameEmailRevision = (left: AuthenticationRevision, right: AuthenticationRevision) => {\n  if (\n    left.subjectId !== right.subjectId ||\n    left.securityRevision !== right.securityRevision ||\n    left.credentials.length !== right.credentials.length\n  )\n    return false;\n\n  const expected = [...left.credentials].sort((a, b) =>\n    a.credentialId.localeCompare(b.credentialId),\n  );\n\n  const actual = [...right.credentials].sort((a, b) =>\n    a.credentialId.localeCompare(b.credentialId),\n  );\n\n  return expected.every(\n    (item, index) =>\n      item.credentialId === actual[index]!.credentialId &&\n      item.revision === actual[index]!.revision,\n  );\n};\n\nexport const emailActionModule = (moduleId: string, action: EmailAction) =>\n  `${moduleId}/${action === \"verify-address\" ? \"verify-address\" : \"change-address\"}`;\n\nexport const emailActionPurpose = (action: EmailAction) =>\n  action === \"verify-address\" ? \"email-address-verification\" : \"email-address-change\";\n\nexport const emailRedemptionMatches = (input: EmailAddressMutation, action: EmailAction) => {\n  const completion = input.redemption.input;\n  const binding = completion.binding;\n\n  return (\n    completion.moduleId === emailActionModule(input.moduleId, action) &&\n    completion.purpose === emailActionPurpose(action) &&\n    binding._tag === \"IdentifierChange\" &&\n    sameIdentifier(binding.identifier, input.target) &&\n    sameEmailRevision(binding.revision, input.captured.revision)\n  );\n};\n\nexport const snapshotEmailMutation = Effect.fn(\"EmailAddressPersistence.snapshotMutation\")(\n  function* (input: EmailAddressMutation) {\n    const evidence = yield* snapshotAuthenticationEvidence(input.authorization.evidence).pipe(\n      Effect.mapError(unavailable),\n    );\n\n    const requirement = yield* snapshotEmailRequirement(input.authorization.requirement);\n\n    const source =\n      input.captured.source === undefined\n        ? undefined\n        : yield* snapshotEmailCredential(input.captured.source);\n\n    return Object.freeze({\n      ...input,\n      target: Object.freeze({ ...input.target }),\n      ...(input.invalidation === undefined\n        ? {}\n        : { invalidation: Object.freeze({ ...input.invalidation }) }),\n      captured: Object.freeze({\n        eligible: input.captured.eligible,\n        revision: snapshotEmailRevision(input.captured.revision),\n        ...(input.captured.targetIdentifierRevision === undefined\n          ? {}\n          : { targetIdentifierRevision: input.captured.targetIdentifierRevision }),\n        ...(source === undefined ? {} : { source }),\n      }),\n      authorization: Object.freeze({\n        challenge: Object.freeze({\n          ...input.authorization.challenge,\n          target: Object.freeze({ ...input.authorization.challenge.target }),\n          revision: snapshotEmailRevision(input.authorization.challenge.revision),\n        }),\n        evidence,\n        requirement,\n      }),\n    });\n  },\n);\n\nexport const validateEmailMutation = Effect.fn(\"EmailAddressPersistence.validateAuthority\")(\n  function* (\n    policy: EmailWorkflowPolicy,\n    input: EmailAddressMutation,\n    action: EmailAction,\n    current: Pick<EmailMutationRead, \"target\" | \"requirement\"> | undefined,\n    now: number,\n  ) {\n    const confirmsExisting =\n      action === \"verify-address\" && input.captured.targetIdentifierRevision !== undefined;\n\n    if (\n      !input.captured.eligible ||\n      !emailRedemptionMatches(input, action) ||\n      input.authorization.challenge.moduleId !== input.moduleId ||\n      input.authorization.challenge.action !== action ||\n      input.authorization.challenge.commandId !== input.commandId ||\n      !sameIdentifier(input.authorization.challenge.target, input.target) ||\n      input.authorization.challenge.sourceCredentialId !== input.captured.source?.credentialId ||\n      !sameEmailRevision(input.authorization.challenge.revision, input.captured.revision) ||\n      input.authorization.challenge.targetIdentifierRevision !==\n        input.captured.targetIdentifierRevision ||\n      (input.authorization.evidence.flowId as string) !== (input.commandId as string) ||\n      input.authorization.evidence.bindingDigest !== input.authorization.challenge.bindingDigest ||\n      !sameEmailRevision(input.authorization.evidence.revision, input.captured.revision) ||\n      (action === \"verify-address\" && input.captured.source !== undefined) ||\n      (action === \"change-address\" && input.captured.source === undefined) ||\n      confirmsExisting !== (input.invalidation === undefined) ||\n      (input.invalidation?.existingSessions === \"immediate\" &&\n        policy.sessionInvalidation !== \"same-authority-immediate\")\n    )\n      return false;\n\n    if (\n      current === undefined ||\n      !current.target.eligible ||\n      !sameEmailRevision(current.target.revision, input.captured.revision) ||\n      current.target.targetIdentifierRevision !== input.captured.targetIdentifierRevision ||\n      (input.captured.source !== undefined &&\n        (current.target.source === undefined ||\n          current.target.source.identifierRevision !== input.captured.source.identifierRevision ||\n          current.target.source.credentialRevision !== input.captured.source.credentialRevision ||\n          !sameIdentifier(current.target.source.identifier, input.captured.source.identifier)))\n    )\n      return false;\n\n    const currentRequirement = yield* current.requirement;\n\n    return (\n      passwordEvidenceSatisfiedAt(\n        input.authorization.evidence,\n        input.authorization.requirement,\n        now,\n      ) && passwordEvidenceSatisfiedAt(input.authorization.evidence, currentRequirement, now)\n    );\n  },\n);\n\nexport const allocateEmailValue = <A>(\n  mode: \"interactive\" | \"synchronous\",\n  asynchronous: Effect.Effect<A, PersistenceMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => PersistenceMappingError.make({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => PersistenceMappingError.make({ operation: \"mapping\", cause }),\n      });\n};\n\nexport const allocateEmailSecurityRevision = (\n  mapping: EmailWorkflowPolicy,\n  mode: \"interactive\" | \"synchronous\",\n  current: SecurityRevision,\n) => {\n  if (mode === \"synchronous\")\n    return mapping.subject.nextSecurityRevisionSync === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: () => mapping.subject.nextSecurityRevisionSync!(current),\n          catch: (cause) => PersistenceMappingError.make({ operation: \"mapping\", cause }),\n        });\n  if (mapping.subject.nextSecurityRevision !== undefined)\n    return mapping.subject.nextSecurityRevision(current);\n  if (mapping.subject.nextSecurityRevisionSync !== undefined)\n    return Effect.try({\n      try: () => mapping.subject.nextSecurityRevisionSync!(current),\n      catch: (cause) => PersistenceMappingError.make({ operation: \"mapping\", cause }),\n    });\n\n  return Effect.fail(unavailable());\n};\n\nexport interface EmailMutationRead {\n  readonly target: EmailAddressTarget;\n  readonly requirement: Effect.Effect<\n    AuthenticationRequirement,\n    EmailUnavailable | PersistenceMappingError\n  >;\n}\n"],"mappings":";;;;;;AAsBA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAkB7D,MAAa,qBAAqB,MAA8B,UAAkC;CAChG,IACE,KAAK,cAAc,MAAM,aACzB,KAAK,qBAAqB,MAAM,oBAChC,KAAK,YAAY,WAAW,MAAM,YAAY,QAE9C,OAAO;CAET,MAAM,WAAW,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,MAAM,GAAG,MAC9C,EAAE,aAAa,cAAc,EAAE,YAAY,CAC7C;CAEA,MAAM,SAAS,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,MAAM,GAAG,MAC7C,EAAE,aAAa,cAAc,EAAE,YAAY,CAC7C;CAEA,OAAO,SAAS,OACb,MAAM,UACL,KAAK,iBAAiB,OAAO,MAAM,CAAE,gBACrC,KAAK,aAAa,OAAO,MAAM,CAAE,QACrC;AACF;AAEA,MAAa,qBAAqB,UAAkB,WAClD,GAAG,SAAS,GAAG,WAAW,mBAAmB,mBAAmB;AAElE,MAAa,sBAAsB,WACjC,WAAW,mBAAmB,+BAA+B;AAE/D,MAAa,0BAA0B,OAA6B,WAAwB;CAC1F,MAAM,aAAa,MAAM,WAAW;CACpC,MAAM,UAAU,WAAW;CAE3B,OACE,WAAW,aAAa,kBAAkB,MAAM,UAAU,MAAM,KAChE,WAAW,YAAY,mBAAmB,MAAM,KAChD,QAAQ,SAAS,sBACjB,eAAe,QAAQ,YAAY,MAAM,MAAM,KAC/C,kBAAkB,QAAQ,UAAU,MAAM,SAAS,QAAQ;AAE/D;AAEA,MAAa,wBAAwB,OAAO,GAAG,0CAA0C,CAAC,CACxF,WAAW,OAA6B;CACtC,MAAM,WAAW,OAAO,+BAA+B,MAAM,cAAc,QAAQ,CAAC,CAAC,KACnF,OAAO,SAAS,WAAW,CAC7B;CAEA,MAAM,cAAc,OAAO,yBAAyB,MAAM,cAAc,WAAW;CAEnF,MAAM,SACJ,MAAM,SAAS,WAAW,KAAA,IACtB,KAAA,IACA,OAAO,wBAAwB,MAAM,SAAS,MAAM;CAE1D,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,QAAQ,OAAO,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;EACzC,GAAI,MAAM,iBAAiB,KAAA,IACvB,CAAC,IACD,EAAE,cAAc,OAAO,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE;EAC7D,UAAU,OAAO,OAAO;GACtB,UAAU,MAAM,SAAS;GACzB,UAAU,sBAAsB,MAAM,SAAS,QAAQ;GACvD,GAAI,MAAM,SAAS,6BAA6B,KAAA,IAC5C,CAAC,IACD,EAAE,0BAA0B,MAAM,SAAS,yBAAyB;GACxE,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EAC3C,CAAC;EACD,eAAe,OAAO,OAAO;GAC3B,WAAW,OAAO,OAAO;IACvB,GAAG,MAAM,cAAc;IACvB,QAAQ,OAAO,OAAO,EAAE,GAAG,MAAM,cAAc,UAAU,OAAO,CAAC;IACjE,UAAU,sBAAsB,MAAM,cAAc,UAAU,QAAQ;GACxE,CAAC;GACD;GACA;EACF,CAAC;CACH,CAAC;AACH,CACF;AAEA,MAAa,wBAAwB,OAAO,GAAG,2CAA2C,CAAC,CACzF,WACE,QACA,OACA,QACA,SACA,KACA;CACA,MAAM,mBACJ,WAAW,oBAAoB,MAAM,SAAS,6BAA6B,KAAA;CAE7E,IACE,CAAC,MAAM,SAAS,YAChB,CAAC,uBAAuB,OAAO,MAAM,KACrC,MAAM,cAAc,UAAU,aAAa,MAAM,YACjD,MAAM,cAAc,UAAU,WAAW,UACzC,MAAM,cAAc,UAAU,cAAc,MAAM,aAClD,CAAC,eAAe,MAAM,cAAc,UAAU,QAAQ,MAAM,MAAM,KAClE,MAAM,cAAc,UAAU,uBAAuB,MAAM,SAAS,QAAQ,gBAC5E,CAAC,kBAAkB,MAAM,cAAc,UAAU,UAAU,MAAM,SAAS,QAAQ,KAClF,MAAM,cAAc,UAAU,6BAC5B,MAAM,SAAS,4BAChB,MAAM,cAAc,SAAS,WAAuB,MAAM,aAC3D,MAAM,cAAc,SAAS,kBAAkB,MAAM,cAAc,UAAU,iBAC7E,CAAC,kBAAkB,MAAM,cAAc,SAAS,UAAU,MAAM,SAAS,QAAQ,KAChF,WAAW,oBAAoB,MAAM,SAAS,WAAW,KAAA,KACzD,WAAW,oBAAoB,MAAM,SAAS,WAAW,KAAA,KAC1D,sBAAsB,MAAM,iBAAiB,KAAA,MAC5C,MAAM,cAAc,qBAAqB,eACxC,OAAO,wBAAwB,4BAEjC,OAAO;CAET,IACE,YAAY,KAAA,KACZ,CAAC,QAAQ,OAAO,YAChB,CAAC,kBAAkB,QAAQ,OAAO,UAAU,MAAM,SAAS,QAAQ,KACnE,QAAQ,OAAO,6BAA6B,MAAM,SAAS,4BAC1D,MAAM,SAAS,WAAW,KAAA,MACxB,QAAQ,OAAO,WAAW,KAAA,KACzB,QAAQ,OAAO,OAAO,uBAAuB,MAAM,SAAS,OAAO,sBACnE,QAAQ,OAAO,OAAO,uBAAuB,MAAM,SAAS,OAAO,sBACnE,CAAC,eAAe,QAAQ,OAAO,OAAO,YAAY,MAAM,SAAS,OAAO,UAAU,IAEtF,OAAO;CAET,MAAM,qBAAqB,OAAO,QAAQ;CAE1C,OACE,4BACE,MAAM,cAAc,UACpB,MAAM,cAAc,aACpB,GACF,KAAK,4BAA4B,MAAM,cAAc,UAAU,oBAAoB,GAAG;AAE1F,CACF;AAEA,MAAa,sBACX,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,wBAAwB,KAAK;GAAE,WAAW;GAAW;EAAM,CAAC;CAChF,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,wBAAwB,KAAK;GAAE,WAAW;GAAW;EAAM,CAAC;CAChF,CAAC;AACP;AAEA,MAAa,iCACX,SACA,MACA,YACG;CACH,IAAI,SAAS,eACX,OAAO,QAAQ,QAAQ,6BAA6B,KAAA,IAChD,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,WAAW,QAAQ,QAAQ,yBAA0B,OAAO;EAC5D,QAAQ,UAAU,wBAAwB,KAAK;GAAE,WAAW;GAAW;EAAM,CAAC;CAChF,CAAC;CACP,IAAI,QAAQ,QAAQ,yBAAyB,KAAA,GAC3C,OAAO,QAAQ,QAAQ,qBAAqB,OAAO;CACrD,IAAI,QAAQ,QAAQ,6BAA6B,KAAA,GAC/C,OAAO,OAAO,IAAI;EAChB,WAAW,QAAQ,QAAQ,yBAA0B,OAAO;EAC5D,QAAQ,UAAU,wBAAwB,KAAK;GAAE,WAAW;GAAW;EAAM,CAAC;CAChF,CAAC;CAEH,OAAO,OAAO,KAAK,YAAY,CAAC;AAClC"}

package/dist/internal/email-registration-native.d.mts

@@ -0,0 +1,38 @@
+import { AnyProofPersistenceMapping } from "./models/proof-model.mjs";
+import { AnyEmailRegistrationMapping } from "./models/email-model.mjs";
+import { NativeSqlTables } from "./native-sql-table.mjs";
+import { Crypto, Effect } from "effect";
+import { EmailCommandId, EmailRegistrationDecision, EmailUnavailable, PrepareEmailCommit } from "@yielded/auth/Email";
+import { LifecycleHooks, PreparedCommit } from "@yielded/auth/Hooks";
+import { ProofRedemptionPlan } from "@yielded/auth/Proofs";
+import { SqlClient } from "effect/sql/SqlClient";
+import { LoginIdentifier } from "@yielded/auth/Identity";
+import { TokenDigest } from "@yielded/auth/Schema";
+//#region src/internal/email-registration-native.d.ts
+export interface EmailRegistrationAuthority<Registration> {
+  readonly inspect: (input: {
+    readonly identifier: LoginIdentifier;
+    readonly registration: Registration;
+  }) => Effect.Effect<{
+    readonly fingerprint: TokenDigest;
+    readonly eligible: boolean;
+  }, EmailUnavailable>;
+  readonly registerWithProof: <A>(input: {
+    readonly moduleId: string;
+    readonly commandId: EmailCommandId;
+    readonly requestId: string;
+    readonly identifier: LoginIdentifier;
+    readonly registration: Registration;
+    readonly fingerprint: TokenDigest;
+    readonly redemption: ProofRedemptionPlan;
+  }, prepare: PrepareEmailCommit<EmailRegistrationDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+}
+/** Proof redemption, SQL provisioning, and verified ownership commit together. No registration receipt survives the proof. */
+export declare const makeNativeEmailRegistrationServices: <Registration>(tables: NativeSqlTables, mapping: AnyEmailRegistrationMapping<Registration>, proofs: AnyProofPersistenceMapping, batch?: {
+  readonly client: SqlClient;
+  readonly execute: (statements: ReadonlyArray<import("effect/sql/Statement").Statement<unknown>>) => Effect.Effect<void, import("effect/sql/SqlError").SqlError>;
+} | undefined) => Effect.Effect<{
+  readonly registrationAuthority: EmailRegistrationAuthority<Registration>;
+}, never, Crypto.Crypto | LifecycleHooks | SqlClient>;
+//#endregion
+//# sourceMappingURL=email-registration-native.d.mts.map

package/dist/internal/email-registration-native.mjs

@@ -0,0 +1,171 @@
+import { PersistenceMappingError } from "./mapping-error.mjs";
+import { sqlBatchAssertion } from "./d1-planning.mjs";
+import { exactSqlText, executeSqlChange } from "./sql-change.mjs";
+import { emailUnavailable, ensureEmail } from "./email-native-state.mjs";
+import { allocateEmailValue } from "./email-policy.mjs";
+import { SqlBatchCommit, appendSqlBatchStatement, makeSqlCommitExecutor, registerSqlBatchPostcondition, registerSqlCommitReceipt, registerSqlPostcondition } from "./sql-commit.mjs";
+import { makeNativeProofStore } from "./proof-native.mjs";
+import { Crypto, Effect, Schema } from "effect";
+import "@yielded/auth/Email";
+import { CurrentCommitJournal } from "@yielded/auth/Hooks";
+import { ProofRedemptionInput } from "@yielded/auth/Proofs";
+import { SecurityRevision } from "@yielded/auth/Sessions";
+import { SqlClient } from "effect/sql/SqlClient";
+//#region src/internal/email-registration-native.ts
+/** Proof redemption, SQL provisioning, and verified ownership commit together. No registration receipt survives the proof. */
+const makeNativeEmailRegistrationServices = Effect.fnUntraced(function* (tables, mapping, proofs, batch) {
+	const sql = (yield* SqlClient).withoutTransforms(), executor = yield* makeSqlCommitExecutor(emailUnavailable), crypto = yield* Crypto.Crypto;
+	const s = mapping.subject, i = mapping.identifier, c = mapping.credential, a = mapping.authorityCredential;
+	const subject = tables(s.table), identifier = tables(i.table), credential = tables(c.table), authority = tables(a.table);
+	const exact = (t, key, value) => exactSqlText(sql, t.column(key), t.value(key, value));
+	const id = (t, key, value) => sql`${t.column(key)} = ${t.value(key, value)}`;
+	const identifierKey = (value) => sql.and([exact(identifier, i.namespace, value.namespace), exact(identifier, i.value, value.value)]);
+	const lock = sql.onDialectOrElse({
+		sqlite: () => sql``,
+		orElse: () => sql`for update`
+	}), now = tables.expression(mapping.clock.engineNowMillis), mode = "interactive";
+	const run = (work) => batch === void 0 ? executor.run(work.pipe(Effect.provideService(Crypto.Crypto, crypto))) : executor.batch(work.pipe(Effect.provideService(Crypto.Crypto, crypto))).pipe(Effect.provideService(SqlBatchCommit, batch));
+	const stage = Effect.fnUntraced(function* (statement) {
+		if (batch === void 0) ensureEmail((yield* executeSqlChange(sql, statement)) === 1);
+		else {
+			yield* appendSqlBatchStatement(sql`${statement}`);
+			yield* appendSqlBatchStatement(sqlBatchAssertion(sql, sql`changes() = 1`));
+		}
+	});
+	const prepare = (decision, project) => Effect.gen(function* () {
+		const receipt = project(decision, yield* CurrentCommitJournal);
+		yield* registerSqlCommitReceipt(receipt);
+		return receipt;
+	});
+	return { registrationAuthority: {
+		inspect: (input) => executor.read(mapping.inspect(input)),
+		registerWithProof: (original, project) => Effect.gen(function* () {
+			const registration = yield* mapping.snapshotRegistration(original.registration);
+			const inspection = yield* mapping.inspect({
+				identifier: original.identifier,
+				registration: yield* mapping.snapshotRegistration(registration)
+			});
+			const redemption = yield* Schema.decodeEffect(Schema.toCodecIso(ProofRedemptionInput))(yield* Schema.encodeEffect(Schema.toCodecIso(ProofRedemptionInput))(original.redemption.input));
+			const input = {
+				...original,
+				identifier: { ...original.identifier },
+				registration,
+				redemption
+			};
+			return yield* run(Effect.gen(function* () {
+				const binding = redemption.binding;
+				if (!inspection.eligible || inspection.fingerprint !== input.fingerprint || redemption.moduleId !== `${input.moduleId}/registration` || redemption.purpose !== "email-code-registration" || binding._tag !== "Identifier" || binding.identifier.namespace !== input.identifier.namespace || binding.identifier.value !== input.identifier.value || input.requestId !== `email-registration:${input.moduleId}:${redemption.proofId}`) return yield* prepare({ _tag: "Rejected" }, project);
+				const priorRows = yield* sql`select ${identifier.fields("email_registration_identifier_")} from ${identifier.name} where ${identifierKey(input.identifier)} limit 2`;
+				ensureEmail(priorRows.length <= 1);
+				const prior = priorRows[0] === void 0 ? void 0 : identifier.decode(priorRows[0], "email_registration_identifier_");
+				let previous;
+				if (prior !== void 0) {
+					ensureEmail(prior[i.namespace] === input.identifier.namespace && prior[i.value] === input.identifier.value);
+					if (prior[i.verifiedAt] !== null || !i.isMutableTarget(prior)) return yield* prepare({ _tag: "Rejected" }, project);
+					const previousSubject = yield* mapping.subjectId.toSubject(prior[i.subjectId]), native = yield* mapping.subjectId.toNative(previousSubject);
+					const rows = yield* sql`select ${subject.fields("email_registration_old_subject_")} from ${subject.name} where ${id(subject, s.id, native)} limit 2 ${batch === void 0 ? lock : sql``}`;
+					if (rows.length !== 1) return yield* prepare({ _tag: "Rejected" }, project);
+					const row = subject.decode(rows[0], "email_registration_old_subject_");
+					ensureEmail((yield* mapping.subjectId.toSubject(row[s.id])) === previousSubject);
+					const currentRows = yield* sql`select ${identifier.fields("email_registration_current_identifier_")} from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${exact(identifier, i.bindingRevision, prior[i.bindingRevision])} and ${identifier.column(i.verifiedAt)} is null limit 2`;
+					if (currentRows.length !== 1 || !i.isMutableTarget(identifier.decode(currentRows[0], "email_registration_current_identifier_"))) return yield* prepare({ _tag: "Rejected" }, project);
+					if (batch !== void 0) {
+						ensureEmail(i.d1MutableTargetCondition !== void 0);
+						yield* appendSqlBatchStatement(sqlBatchAssertion(sql, sql`exists(select 1 from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${exact(identifier, i.bindingRevision, prior[i.bindingRevision])} and ${identifier.column(i.verifiedAt)} is null and ${tables.expression(i.d1MutableTargetCondition({
+							identifier: input.identifier,
+							nativeSubjectId: native
+						}))})`));
+					}
+					previous = {
+						native,
+						securityRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(row[s.securityRevision]),
+						bindingRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(prior[i.bindingRevision])
+					};
+				}
+				const redeemed = yield* (yield* makeNativeProofStore(tables, proofs, batch !== void 0)).redeemLocked(redemption);
+				yield* registerSqlCommitReceipt(original.redemption.prepare(redeemed.decision, yield* CurrentCommitJournal, (value) => value));
+				if (redeemed.decision !== "redeemed") return yield* prepare({ _tag: "Rejected" }, project);
+				const allocate = () => allocateEmailValue(mode, mapping.allocateRevision, mapping.allocateRevisionSync);
+				const securityRevision = yield* allocate(), identifierRevision = yield* allocate(), credentialRevision = yield* allocate(), displacedRevision = previous === void 0 ? void 0 : yield* allocate(), credentialId = yield* allocateEmailValue(mode, mapping.allocateCredentialId, mapping.allocateCredentialIdSync);
+				const provisioning = mapping.provisioning;
+				if (batch !== void 0 && provisioning.idMode === "generated") return yield* emailUnavailable();
+				let native = provisioning.idMode === "generated" ? void 0 : yield* allocateEmailValue(mode, provisioning.allocateSubjectId, provisioning.allocateSubjectIdSync);
+				const insertion = sql`${subject.insert(provisioning.encodeSubjectInsert(input, {
+					nativeSubjectId: native,
+					securityRevision
+				}))}`;
+				if (provisioning.idMode === "generated") {
+					const rows = yield* sql.onDialectOrElse({
+						mysql: () => insertion.raw.pipe(Effect.flatMap(Schema.decodeUnknownEffect(Schema.Struct({ insertId: Schema.Union([Schema.Int, Schema.String]) }))), Effect.map((header) => [{ [s.id]: header.insertId }])),
+						orElse: () => sql`${insertion} returning ${subject.fields("email_registration_generated_")}`.pipe(Effect.map((rows) => rows.map((row) => subject.decode(row, "email_registration_generated_"))))
+					});
+					native = yield* provisioning.decodeGeneratedId(rows);
+				} else yield* stage(insertion);
+				ensureEmail(native !== void 0);
+				const subjectId = yield* mapping.subjectId.toSubject(native);
+				const clock = yield* sql`select ${now} as engine_now`;
+				const verifiedAt = Number(clock[0]?.engine_now);
+				ensureEmail(Number.isSafeInteger(verifiedAt));
+				const values = i.encodeVerifiedInsert({
+					identifier: input.identifier,
+					subjectId: native,
+					verifiedAtMillis: verifiedAt,
+					bindingRevision: identifierRevision
+				});
+				if (previous === void 0) yield* stage(identifier.insert(values));
+				else {
+					ensureEmail(displacedRevision !== previous.securityRevision);
+					yield* stage(sql`${identifier.update(values)} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, previous.native)} and ${exact(identifier, i.bindingRevision, previous.bindingRevision)} and ${identifier.column(i.verifiedAt)} is null`);
+					yield* stage(sql`${subject.update({ [s.securityRevision]: displacedRevision })} where ${id(subject, s.id, previous.native)} and ${exact(subject, s.securityRevision, previous.securityRevision)}`);
+				}
+				yield* stage(credential.insert(c.encodeVerifiedInsert({
+					moduleId: input.moduleId,
+					subjectId: native,
+					credentialId,
+					identifier: input.identifier,
+					credentialRevision
+				})));
+				yield* stage(authority.insert(a.encodeInsert({
+					subjectId: native,
+					credentialId,
+					revision: credentialRevision
+				})));
+				const conditions = [
+					redeemed.validUntil,
+					sql`exists(select 1 from ${subject.name} where ${id(subject, s.id, native)} and ${exact(subject, s.securityRevision, securityRevision)} and ${id(subject, s.status, s.activeStatusValue)})`,
+					sql`exists(select 1 from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${exact(identifier, i.bindingRevision, identifierRevision)} and ${id(identifier, i.verifiedAt, mapping.clock.encodeInstant(verifiedAt))})`,
+					sql`exists(select 1 from ${credential.name} where ${exact(credential, c.moduleId, input.moduleId)} and ${exact(credential, c.credentialId, credentialId)} and ${id(credential, c.subjectId, native)} and ${exact(credential, c.credentialRevision, credentialRevision)} and ${exact(credential, c.identifierNamespace, input.identifier.namespace)} and ${exact(credential, c.identifierValue, input.identifier.value)} and ${id(credential, c.status, c.activeStatusValue)})`,
+					sql`exists(select 1 from ${authority.name} where ${id(authority, a.subjectId, native)} and ${exact(authority, a.credentialId, credentialId)} and ${exact(authority, a.revision, credentialRevision)} and ${id(authority, a.status, a.activeStatusValue)})`
+				];
+				if (previous !== void 0) conditions.push(sql`exists(select 1 from ${subject.name} where ${id(subject, s.id, previous.native)} and ${exact(subject, s.securityRevision, displacedRevision)})`);
+				if (batch !== void 0) {
+					ensureEmail(i.d1CurrentCondition !== void 0);
+					conditions.push(sql`exists(select 1 from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${tables.expression(i.d1CurrentCondition({
+						identifier: input.identifier,
+						nativeSubjectId: native,
+						bindingRevision: identifierRevision
+					}))})`);
+					yield* registerSqlBatchPostcondition({
+						name: "email-registration-authority",
+						statement: sqlBatchAssertion(sql, sql.and(conditions))
+					});
+				} else yield* registerSqlPostcondition({
+					name: "email-registration-authority",
+					check: Effect.gen(function* () {
+						const rows = yield* sql`select ${identifier.fields("email_registration_final_")} from ${identifier.name} where ${identifierKey(input.identifier)} and ${sql.and(conditions)} limit 2`;
+						ensureEmail(rows.length === 1 && i.isCurrent(identifier.decode(rows[0], "email_registration_final_")));
+					}).pipe(Effect.mapError((cause) => PersistenceMappingError.make({
+						operation: "decode",
+						cause
+					})))
+				});
+				ensureEmail((yield* mapping.subjectId.toSubject(native)) === subjectId);
+				return yield* prepare({ _tag: "Registered" }, project);
+			}));
+		}).pipe(Effect.mapError(emailUnavailable))
+	} };
+});
+//#endregion
+export { makeNativeEmailRegistrationServices };
+
+//# sourceMappingURL=email-registration-native.mjs.map

package/dist/internal/email-registration-native.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-registration-native.mjs","names":["unavailable"],"sources":["../../src/internal/email-registration-native.ts"],"sourcesContent":["import {\n  type EmailUnavailable,\n  type EmailCommandId,\n  type EmailRegistrationDecision,\n  type PrepareEmailCommit,\n} from \"@yielded/auth/Email\";\nimport {\n  CurrentCommitJournal,\n  type LifecycleHooks,\n  type PreparedCommit,\n} from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { ProofRedemptionInput, type ProofRedemptionPlan } from \"@yielded/auth/Proofs\";\nimport type { TokenDigest } from \"@yielded/auth/Schema\";\nimport { SecurityRevision } from \"@yielded/auth/Sessions\";\nimport { Crypto, Effect, Schema } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\nimport type { Fragment } from \"effect/sql/Statement\";\n\nimport { sqlBatchAssertion } from \"./d1-planning\";\nimport { ensureEmail as ensure, emailUnavailable as unavailable } from \"./email-native-state\";\nimport { allocateEmailValue } from \"./email-policy\";\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport type { AnyEmailRegistrationMapping } from \"./models/email-model\";\nimport type { AnyProofPersistenceMapping } from \"./models/proof-model\";\nimport type { NativeSqlTables, SqlTable } from \"./native-sql-table\";\nimport { makeNativeProofStore } from \"./proof-native\";\nimport { exactSqlText, executeSqlChange } from \"./sql-change\";\nimport {\n  appendSqlBatchStatement,\n  makeSqlCommitExecutor,\n  registerSqlBatchPostcondition,\n  registerSqlCommitReceipt,\n  registerSqlPostcondition,\n  SqlBatchCommit,\n} from \"./sql-commit\";\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly requestId: string;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly redemption: ProofRedemptionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\n/** Proof redemption, SQL provisioning, and verified ownership commit together. No registration receipt survives the proof. */\nexport const makeNativeEmailRegistrationServices = Effect.fnUntraced(function* <Registration>(\n  tables: NativeSqlTables,\n  mapping: AnyEmailRegistrationMapping<Registration>,\n  proofs: AnyProofPersistenceMapping,\n  batch?: SqlBatchCommit[\"Service\"],\n): Effect.fn.Return<\n  { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n  never,\n  SqlClient | LifecycleHooks | Crypto.Crypto\n> {\n  const sql = (yield* SqlClient).withoutTransforms(),\n    executor = yield* makeSqlCommitExecutor(unavailable),\n    crypto = yield* Crypto.Crypto;\n\n  const s = mapping.subject,\n    i = mapping.identifier,\n    c = mapping.credential,\n    a = mapping.authorityCredential;\n\n  const subject = tables(s.table),\n    identifier = tables(i.table),\n    credential = tables(c.table),\n    authority = tables(a.table);\n\n  const exact = (t: SqlTable, key: string, value: unknown) =>\n    exactSqlText(sql, t.column(key), t.value(key, value));\n\n  const id = (t: SqlTable, key: string, value: unknown) =>\n    sql`${t.column(key)} = ${t.value(key, value)}`;\n\n  const identifierKey = (value: LoginIdentifier) =>\n    sql.and([\n      exact(identifier, i.namespace, value.namespace),\n      exact(identifier, i.value, value.value),\n    ]);\n\n  const lock = sql.onDialectOrElse({ sqlite: () => sql``, orElse: () => sql`for update` }),\n    now = tables.expression(mapping.clock.engineNowMillis),\n    mode = \"interactive\";\n\n  const run = <A, E, R>(work: Effect.Effect<A, E, R>) =>\n    batch === undefined\n      ? executor.run(work.pipe(Effect.provideService(Crypto.Crypto, crypto)))\n      : executor\n          .batch(work.pipe(Effect.provideService(Crypto.Crypto, crypto)))\n          .pipe(Effect.provideService(SqlBatchCommit, batch));\n\n  const stage = Effect.fnUntraced(function* (statement: Fragment) {\n    if (batch === undefined) ensure((yield* executeSqlChange(sql, statement)) === 1);\n    else {\n      yield* appendSqlBatchStatement(sql`${statement}`);\n      yield* appendSqlBatchStatement(sqlBatchAssertion(sql, sql`changes() = 1`));\n    }\n  });\n\n  const prepare = <A>(\n    decision: EmailRegistrationDecision,\n    project: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) =>\n    Effect.gen(function* () {\n      const receipt = project(decision, yield* CurrentCommitJournal);\n\n      yield* registerSqlCommitReceipt(receipt);\n\n      return receipt;\n    });\n\n  const registrationAuthority: EmailRegistrationAuthority<Registration> = {\n    inspect: (input) => executor.read(mapping.inspect(input)),\n    registerWithProof: (original, project) =>\n      Effect.gen(function* () {\n        const registration = yield* mapping.snapshotRegistration(original.registration);\n\n        const inspection = yield* mapping.inspect({\n          identifier: original.identifier,\n          registration: yield* mapping.snapshotRegistration(registration),\n        });\n\n        const redemption = yield* Schema.decodeEffect(Schema.toCodecIso(ProofRedemptionInput))(\n          yield* Schema.encodeEffect(Schema.toCodecIso(ProofRedemptionInput))(\n            original.redemption.input,\n          ),\n        );\n\n        const input = {\n          ...original,\n          identifier: { ...original.identifier },\n          registration,\n          redemption,\n        };\n\n        return yield* run(\n          Effect.gen(function* () {\n            const binding = redemption.binding;\n\n            if (\n              !inspection.eligible ||\n              inspection.fingerprint !== input.fingerprint ||\n              redemption.moduleId !== `${input.moduleId}/registration` ||\n              redemption.purpose !== \"email-code-registration\" ||\n              binding._tag !== \"Identifier\" ||\n              binding.identifier.namespace !== input.identifier.namespace ||\n              binding.identifier.value !== input.identifier.value ||\n              input.requestId !== `email-registration:${input.moduleId}:${redemption.proofId}`\n            )\n              return yield* prepare({ _tag: \"Rejected\" }, project);\n\n            const priorRows =\n              yield* sql`select ${identifier.fields(\"email_registration_identifier_\")} from ${identifier.name} where ${identifierKey(input.identifier)} limit 2`;\n\n            ensure(priorRows.length <= 1);\n\n            const prior =\n              priorRows[0] === undefined\n                ? undefined\n                : identifier.decode(priorRows[0], \"email_registration_identifier_\");\n\n            let previous:\n              | {\n                  readonly native: unknown;\n                  readonly securityRevision: SecurityRevision;\n                  readonly bindingRevision: SecurityRevision;\n                }\n              | undefined;\n\n            if (prior !== undefined) {\n              ensure(\n                prior[i.namespace] === input.identifier.namespace &&\n                  prior[i.value] === input.identifier.value,\n              );\n              if (prior[i.verifiedAt] !== null || !i.isMutableTarget(prior))\n                return yield* prepare({ _tag: \"Rejected\" }, project);\n\n              const previousSubject = yield* mapping.subjectId.toSubject(prior[i.subjectId]),\n                native = yield* mapping.subjectId.toNative(previousSubject);\n\n              const rows =\n                yield* sql`select ${subject.fields(\"email_registration_old_subject_\")} from ${subject.name} where ${id(subject, s.id, native)} limit 2 ${batch === undefined ? lock : sql``}`;\n\n              if (rows.length !== 1) return yield* prepare({ _tag: \"Rejected\" }, project);\n              const row = subject.decode(rows[0]!, \"email_registration_old_subject_\");\n\n              ensure((yield* mapping.subjectId.toSubject(row[s.id])) === previousSubject);\n\n              const currentRows =\n                yield* sql`select ${identifier.fields(\"email_registration_current_identifier_\")} from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${exact(identifier, i.bindingRevision, prior[i.bindingRevision])} and ${identifier.column(i.verifiedAt)} is null limit 2`;\n\n              if (\n                currentRows.length !== 1 ||\n                !i.isMutableTarget(\n                  identifier.decode(currentRows[0]!, \"email_registration_current_identifier_\"),\n                )\n              )\n                return yield* prepare({ _tag: \"Rejected\" }, project);\n              if (batch !== undefined) {\n                ensure(i.d1MutableTargetCondition !== undefined);\n                yield* appendSqlBatchStatement(\n                  sqlBatchAssertion(\n                    sql,\n                    sql`exists(select 1 from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${exact(identifier, i.bindingRevision, prior[i.bindingRevision])} and ${identifier.column(i.verifiedAt)} is null and ${tables.expression(i.d1MutableTargetCondition({ identifier: input.identifier, nativeSubjectId: native }))})`,\n                  ),\n                );\n              }\n              previous = {\n                native,\n                securityRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(\n                  row[s.securityRevision],\n                ),\n                bindingRevision: yield* Schema.decodeUnknownEffect(SecurityRevision)(\n                  prior[i.bindingRevision],\n                ),\n              };\n            }\n\n            const proof = yield* makeNativeProofStore(tables, proofs, batch !== undefined),\n              redeemed = yield* proof.redeemLocked(redemption);\n\n            yield* registerSqlCommitReceipt(\n              original.redemption.prepare(\n                redeemed.decision,\n                yield* CurrentCommitJournal,\n                (value) => value,\n              ),\n            );\n            if (redeemed.decision !== \"redeemed\")\n              return yield* prepare({ _tag: \"Rejected\" }, project);\n\n            const allocate = () =>\n              allocateEmailValue(mode, mapping.allocateRevision, mapping.allocateRevisionSync);\n\n            const securityRevision = yield* allocate(),\n              identifierRevision = yield* allocate(),\n              credentialRevision = yield* allocate(),\n              displacedRevision = previous === undefined ? undefined : yield* allocate(),\n              credentialId = yield* allocateEmailValue(\n                mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              );\n\n            const provisioning = mapping.provisioning;\n\n            if (batch !== undefined && provisioning.idMode === \"generated\")\n              return yield* unavailable();\n\n            let native =\n              provisioning.idMode === \"generated\"\n                ? undefined\n                : yield* allocateEmailValue(\n                    mode,\n                    provisioning.allocateSubjectId,\n                    provisioning.allocateSubjectIdSync,\n                  );\n\n            const insertion = sql`${subject.insert(provisioning.encodeSubjectInsert(input, { nativeSubjectId: native, securityRevision }))}`;\n\n            if (provisioning.idMode === \"generated\") {\n              const rows = yield* sql.onDialectOrElse({\n                mysql: () =>\n                  insertion.raw.pipe(\n                    Effect.flatMap(\n                      Schema.decodeUnknownEffect(\n                        Schema.Struct({ insertId: Schema.Union([Schema.Int, Schema.String]) }),\n                      ),\n                    ),\n                    Effect.map((header) => [{ [s.id]: header.insertId }]),\n                  ),\n                orElse: () =>\n                  sql`${insertion} returning ${subject.fields(\"email_registration_generated_\")}`.pipe(\n                    Effect.map((rows) =>\n                      rows.map((row) => subject.decode(row, \"email_registration_generated_\")),\n                    ),\n                  ),\n              });\n\n              native = yield* provisioning.decodeGeneratedId(rows);\n            } else yield* stage(insertion);\n            ensure(native !== undefined);\n            const subjectId = yield* mapping.subjectId.toSubject(native);\n            const clock = yield* sql`select ${now} as engine_now`;\n            const verifiedAt = Number(clock[0]?.engine_now);\n\n            ensure(Number.isSafeInteger(verifiedAt));\n\n            const values = i.encodeVerifiedInsert({\n              identifier: input.identifier,\n              subjectId: native,\n              verifiedAtMillis: verifiedAt,\n              bindingRevision: identifierRevision,\n            });\n\n            if (previous === undefined) yield* stage(identifier.insert(values));\n            else {\n              ensure(displacedRevision !== previous.securityRevision);\n              yield* stage(\n                sql`${identifier.update(values)} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, previous.native)} and ${exact(identifier, i.bindingRevision, previous.bindingRevision)} and ${identifier.column(i.verifiedAt)} is null`,\n              );\n              yield* stage(\n                sql`${subject.update({ [s.securityRevision]: displacedRevision })} where ${id(subject, s.id, previous.native)} and ${exact(subject, s.securityRevision, previous.securityRevision)}`,\n              );\n            }\n            yield* stage(\n              credential.insert(\n                c.encodeVerifiedInsert({\n                  moduleId: input.moduleId,\n                  subjectId: native,\n                  credentialId,\n                  identifier: input.identifier,\n                  credentialRevision,\n                }),\n              ),\n            );\n            yield* stage(\n              authority.insert(\n                a.encodeInsert({ subjectId: native, credentialId, revision: credentialRevision }),\n              ),\n            );\n\n            const conditions: Fragment[] = [\n              redeemed.validUntil,\n              sql`exists(select 1 from ${subject.name} where ${id(subject, s.id, native)} and ${exact(subject, s.securityRevision, securityRevision)} and ${id(subject, s.status, s.activeStatusValue)})`,\n              sql`exists(select 1 from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${exact(identifier, i.bindingRevision, identifierRevision)} and ${id(identifier, i.verifiedAt, mapping.clock.encodeInstant(verifiedAt))})`,\n              sql`exists(select 1 from ${credential.name} where ${exact(credential, c.moduleId, input.moduleId)} and ${exact(credential, c.credentialId, credentialId)} and ${id(credential, c.subjectId, native)} and ${exact(credential, c.credentialRevision, credentialRevision)} and ${exact(credential, c.identifierNamespace, input.identifier.namespace)} and ${exact(credential, c.identifierValue, input.identifier.value)} and ${id(credential, c.status, c.activeStatusValue)})`,\n              sql`exists(select 1 from ${authority.name} where ${id(authority, a.subjectId, native)} and ${exact(authority, a.credentialId, credentialId)} and ${exact(authority, a.revision, credentialRevision)} and ${id(authority, a.status, a.activeStatusValue)})`,\n            ];\n\n            if (previous !== undefined)\n              conditions.push(\n                sql`exists(select 1 from ${subject.name} where ${id(subject, s.id, previous.native)} and ${exact(subject, s.securityRevision, displacedRevision)})`,\n              );\n            if (batch !== undefined) {\n              ensure(i.d1CurrentCondition !== undefined);\n              conditions.push(\n                sql`exists(select 1 from ${identifier.name} where ${identifierKey(input.identifier)} and ${id(identifier, i.subjectId, native)} and ${tables.expression(i.d1CurrentCondition({ identifier: input.identifier, nativeSubjectId: native, bindingRevision: identifierRevision }))})`,\n              );\n              yield* registerSqlBatchPostcondition({\n                name: \"email-registration-authority\",\n                statement: sqlBatchAssertion(sql, sql.and(conditions)),\n              });\n            } else\n              yield* registerSqlPostcondition({\n                name: \"email-registration-authority\",\n                check: Effect.gen(function* () {\n                  const rows =\n                    yield* sql`select ${identifier.fields(\"email_registration_final_\")} from ${identifier.name} where ${identifierKey(input.identifier)} and ${sql.and(conditions)} limit 2`;\n\n                  ensure(\n                    rows.length === 1 &&\n                      i.isCurrent(identifier.decode(rows[0]!, \"email_registration_final_\")),\n                  );\n                }).pipe(\n                  Effect.mapError((cause) =>\n                    PersistenceMappingError.make({ operation: \"decode\", cause }),\n                  ),\n                ),\n              });\n            ensure((yield* mapping.subjectId.toSubject(native)) === subjectId);\n\n            return yield* prepare({ _tag: \"Registered\" }, project);\n          }),\n        );\n      }).pipe(Effect.mapError(unavailable)),\n  };\n\n  return { registrationAuthority };\n});\n"],"mappings":";;;;;;;;;;;;;;;AA4DA,MAAa,sCAAsC,OAAO,WAAW,WACnE,QACA,SACA,QACA,OAKA;CACA,MAAM,OAAO,OAAO,UAAA,CAAW,kBAAkB,GAC/C,WAAW,OAAO,sBAAsBA,gBAAW,GACnD,SAAS,OAAO,OAAO;CAEzB,MAAM,IAAI,QAAQ,SAChB,IAAI,QAAQ,YACZ,IAAI,QAAQ,YACZ,IAAI,QAAQ;CAEd,MAAM,UAAU,OAAO,EAAE,KAAK,GAC5B,aAAa,OAAO,EAAE,KAAK,GAC3B,aAAa,OAAO,EAAE,KAAK,GAC3B,YAAY,OAAO,EAAE,KAAK;CAE5B,MAAM,SAAS,GAAa,KAAa,UACvC,aAAa,KAAK,EAAE,OAAO,GAAG,GAAG,EAAE,MAAM,KAAK,KAAK,CAAC;CAEtD,MAAM,MAAM,GAAa,KAAa,UACpC,GAAG,GAAG,EAAE,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,KAAK,KAAK;CAE7C,MAAM,iBAAiB,UACrB,IAAI,IAAI,CACN,MAAM,YAAY,EAAE,WAAW,MAAM,SAAS,GAC9C,MAAM,YAAY,EAAE,OAAO,MAAM,KAAK,CACxC,CAAC;CAEH,MAAM,OAAO,IAAI,gBAAgB;EAAE,cAAc,GAAG;EAAI,cAAc,GAAG;CAAa,CAAC,GACrF,MAAM,OAAO,WAAW,QAAQ,MAAM,eAAe,GACrD,OAAO;CAET,MAAM,OAAgB,SACpB,UAAU,KAAA,IACN,SAAS,IAAI,KAAK,KAAK,OAAO,eAAe,OAAO,QAAQ,MAAM,CAAC,CAAC,IACpE,SACG,MAAM,KAAK,KAAK,OAAO,eAAe,OAAO,QAAQ,MAAM,CAAC,CAAC,CAAC,CAC9D,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CAE1D,MAAM,QAAQ,OAAO,WAAW,WAAW,WAAqB;EAC9D,IAAI,UAAU,KAAA,GAAW,aAAQ,OAAO,iBAAiB,KAAK,SAAS,OAAO,CAAC;OAC1E;GACH,OAAO,wBAAwB,GAAG,GAAG,WAAW;GAChD,OAAO,wBAAwB,kBAAkB,KAAK,GAAG,eAAe,CAAC;EAC3E;CACF,CAAC;CAED,MAAM,WACJ,UACA,YAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,QAAQ,UAAU,OAAO,oBAAoB;EAE7D,OAAO,yBAAyB,OAAO;EAEvC,OAAO;CACT,CAAC;CAmQH,OAAO,EAAE,uBAAA;EAhQP,UAAU,UAAU,SAAS,KAAK,QAAQ,QAAQ,KAAK,CAAC;EACxD,oBAAoB,UAAU,YAC5B,OAAO,IAAI,aAAa;GACtB,MAAM,eAAe,OAAO,QAAQ,qBAAqB,SAAS,YAAY;GAE9E,MAAM,aAAa,OAAO,QAAQ,QAAQ;IACxC,YAAY,SAAS;IACrB,cAAc,OAAO,QAAQ,qBAAqB,YAAY;GAChE,CAAC;GAED,MAAM,aAAa,OAAO,OAAO,aAAa,OAAO,WAAW,oBAAoB,CAAC,CAAC,CACpF,OAAO,OAAO,aAAa,OAAO,WAAW,oBAAoB,CAAC,CAAC,CACjE,SAAS,WAAW,KACtB,CACF;GAEA,MAAM,QAAQ;IACZ,GAAG;IACH,YAAY,EAAE,GAAG,SAAS,WAAW;IACrC;IACA;GACF;GAEA,OAAO,OAAO,IACZ,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,WAAW;IAE3B,IACE,CAAC,WAAW,YACZ,WAAW,gBAAgB,MAAM,eACjC,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,QAAQ,SAAS,gBACjB,QAAQ,WAAW,cAAc,MAAM,WAAW,aAClD,QAAQ,WAAW,UAAU,MAAM,WAAW,SAC9C,MAAM,cAAc,sBAAsB,MAAM,SAAS,GAAG,WAAW,WAEvE,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;IAErD,MAAM,YACJ,OAAO,GAAG,UAAU,WAAW,OAAO,gCAAgC,EAAE,QAAQ,WAAW,KAAK,SAAS,cAAc,MAAM,UAAU,EAAE;IAE3I,YAAO,UAAU,UAAU,CAAC;IAE5B,MAAM,QACJ,UAAU,OAAO,KAAA,IACb,KAAA,IACA,WAAW,OAAO,UAAU,IAAI,gCAAgC;IAEtE,IAAI;IAQJ,IAAI,UAAU,KAAA,GAAW;KACvB,YACE,MAAM,EAAE,eAAe,MAAM,WAAW,aACtC,MAAM,EAAE,WAAW,MAAM,WAAW,KACxC;KACA,IAAI,MAAM,EAAE,gBAAgB,QAAQ,CAAC,EAAE,gBAAgB,KAAK,GAC1D,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;KAErD,MAAM,kBAAkB,OAAO,QAAQ,UAAU,UAAU,MAAM,EAAE,UAAU,GAC3E,SAAS,OAAO,QAAQ,UAAU,SAAS,eAAe;KAE5D,MAAM,OACJ,OAAO,GAAG,UAAU,QAAQ,OAAO,iCAAiC,EAAE,QAAQ,QAAQ,KAAK,SAAS,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE,WAAW,UAAU,KAAA,IAAY,OAAO,GAAG;KAE3K,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;KAC1E,MAAM,MAAM,QAAQ,OAAO,KAAK,IAAK,iCAAiC;KAEtE,aAAQ,OAAO,QAAQ,UAAU,UAAU,IAAI,EAAE,GAAG,OAAO,eAAe;KAE1E,MAAM,cACJ,OAAO,GAAG,UAAU,WAAW,OAAO,wCAAwC,EAAE,QAAQ,WAAW,KAAK,SAAS,cAAc,MAAM,UAAU,EAAE,OAAO,GAAG,YAAY,EAAE,WAAW,MAAM,EAAE,OAAO,MAAM,YAAY,EAAE,iBAAiB,MAAM,EAAE,gBAAgB,EAAE,OAAO,WAAW,OAAO,EAAE,UAAU,EAAE;KAE3S,IACE,YAAY,WAAW,KACvB,CAAC,EAAE,gBACD,WAAW,OAAO,YAAY,IAAK,wCAAwC,CAC7E,GAEA,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;KACrD,IAAI,UAAU,KAAA,GAAW;MACvB,YAAO,EAAE,6BAA6B,KAAA,CAAS;MAC/C,OAAO,wBACL,kBACE,KACA,GAAG,wBAAwB,WAAW,KAAK,SAAS,cAAc,MAAM,UAAU,EAAE,OAAO,GAAG,YAAY,EAAE,WAAW,MAAM,EAAE,OAAO,MAAM,YAAY,EAAE,iBAAiB,MAAM,EAAE,gBAAgB,EAAE,OAAO,WAAW,OAAO,EAAE,UAAU,EAAE,eAAe,OAAO,WAAW,EAAE,yBAAyB;OAAE,YAAY,MAAM;OAAY,iBAAiB;MAAO,CAAC,CAAC,EAAE,EACtW,CACF;KACF;KACA,WAAW;MACT;MACA,kBAAkB,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CACnE,IAAI,EAAE,iBACR;MACA,iBAAiB,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CAClE,MAAM,EAAE,gBACV;KACF;IACF;IAEA,MACE,WAAW,QAAO,OADC,qBAAqB,QAAQ,QAAQ,UAAU,KAAA,CAAS,EAAA,CACnD,aAAa,UAAU;IAEjD,OAAO,yBACL,SAAS,WAAW,QAClB,SAAS,UACT,OAAO,uBACN,UAAU,KACb,CACF;IACA,IAAI,SAAS,aAAa,YACxB,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;IAErD,MAAM,iBACJ,mBAAmB,MAAM,QAAQ,kBAAkB,QAAQ,oBAAoB;IAEjF,MAAM,mBAAmB,OAAO,SAAS,GACvC,qBAAqB,OAAO,SAAS,GACrC,qBAAqB,OAAO,SAAS,GACrC,oBAAoB,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,SAAS,GACzE,eAAe,OAAO,mBACpB,MACA,QAAQ,sBACR,QAAQ,wBACV;IAEF,MAAM,eAAe,QAAQ;IAE7B,IAAI,UAAU,KAAA,KAAa,aAAa,WAAW,aACjD,OAAO,OAAOA,iBAAY;IAE5B,IAAI,SACF,aAAa,WAAW,cACpB,KAAA,IACA,OAAO,mBACL,MACA,aAAa,mBACb,aAAa,qBACf;IAEN,MAAM,YAAY,GAAG,GAAG,QAAQ,OAAO,aAAa,oBAAoB,OAAO;KAAE,iBAAiB;KAAQ;IAAiB,CAAC,CAAC;IAE7H,IAAI,aAAa,WAAW,aAAa;KACvC,MAAM,OAAO,OAAO,IAAI,gBAAgB;MACtC,aACE,UAAU,IAAI,KACZ,OAAO,QACL,OAAO,oBACL,OAAO,OAAO,EAAE,UAAU,OAAO,MAAM,CAAC,OAAO,KAAK,OAAO,MAAM,CAAC,EAAE,CAAC,CACvE,CACF,GACA,OAAO,KAAK,WAAW,CAAC,GAAG,EAAE,KAAK,OAAO,SAAS,CAAC,CAAC,CACtD;MACF,cACE,GAAG,GAAG,UAAU,aAAa,QAAQ,OAAO,+BAA+B,IAAI,KAC7E,OAAO,KAAK,SACV,KAAK,KAAK,QAAQ,QAAQ,OAAO,KAAK,+BAA+B,CAAC,CACxE,CACF;KACJ,CAAC;KAED,SAAS,OAAO,aAAa,kBAAkB,IAAI;IACrD,OAAO,OAAO,MAAM,SAAS;IAC7B,YAAO,WAAW,KAAA,CAAS;IAC3B,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,MAAM;IAC3D,MAAM,QAAQ,OAAO,GAAG,UAAU,IAAI;IACtC,MAAM,aAAa,OAAO,MAAM,EAAE,EAAE,UAAU;IAE9C,YAAO,OAAO,cAAc,UAAU,CAAC;IAEvC,MAAM,SAAS,EAAE,qBAAqB;KACpC,YAAY,MAAM;KAClB,WAAW;KACX,kBAAkB;KAClB,iBAAiB;IACnB,CAAC;IAED,IAAI,aAAa,KAAA,GAAW,OAAO,MAAM,WAAW,OAAO,MAAM,CAAC;SAC7D;KACH,YAAO,sBAAsB,SAAS,gBAAgB;KACtD,OAAO,MACL,GAAG,GAAG,WAAW,OAAO,MAAM,EAAE,SAAS,cAAc,MAAM,UAAU,EAAE,OAAO,GAAG,YAAY,EAAE,WAAW,SAAS,MAAM,EAAE,OAAO,MAAM,YAAY,EAAE,iBAAiB,SAAS,eAAe,EAAE,OAAO,WAAW,OAAO,EAAE,UAAU,EAAE,SAC5O;KACA,OAAO,MACL,GAAG,GAAG,QAAQ,OAAO,GAAG,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,IAAI,SAAS,MAAM,EAAE,OAAO,MAAM,SAAS,EAAE,kBAAkB,SAAS,gBAAgB,GACnL;IACF;IACA,OAAO,MACL,WAAW,OACT,EAAE,qBAAqB;KACrB,UAAU,MAAM;KAChB,WAAW;KACX;KACA,YAAY,MAAM;KAClB;IACF,CAAC,CACH,CACF;IACA,OAAO,MACL,UAAU,OACR,EAAE,aAAa;KAAE,WAAW;KAAQ;KAAc,UAAU;IAAmB,CAAC,CAClF,CACF;IAEA,MAAM,aAAyB;KAC7B,SAAS;KACT,GAAG,wBAAwB,QAAQ,KAAK,SAAS,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE,OAAO,MAAM,SAAS,EAAE,kBAAkB,gBAAgB,EAAE,OAAO,GAAG,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE;KACzL,GAAG,wBAAwB,WAAW,KAAK,SAAS,cAAc,MAAM,UAAU,EAAE,OAAO,GAAG,YAAY,EAAE,WAAW,MAAM,EAAE,OAAO,MAAM,YAAY,EAAE,iBAAiB,kBAAkB,EAAE,OAAO,GAAG,YAAY,EAAE,YAAY,QAAQ,MAAM,cAAc,UAAU,CAAC,EAAE;KAC5Q,GAAG,wBAAwB,WAAW,KAAK,SAAS,MAAM,YAAY,EAAE,UAAU,MAAM,QAAQ,EAAE,OAAO,MAAM,YAAY,EAAE,cAAc,YAAY,EAAE,OAAO,GAAG,YAAY,EAAE,WAAW,MAAM,EAAE,OAAO,MAAM,YAAY,EAAE,oBAAoB,kBAAkB,EAAE,OAAO,MAAM,YAAY,EAAE,qBAAqB,MAAM,WAAW,SAAS,EAAE,OAAO,MAAM,YAAY,EAAE,iBAAiB,MAAM,WAAW,KAAK,EAAE,OAAO,GAAG,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE;KAC5c,GAAG,wBAAwB,UAAU,KAAK,SAAS,GAAG,WAAW,EAAE,WAAW,MAAM,EAAE,OAAO,MAAM,WAAW,EAAE,cAAc,YAAY,EAAE,OAAO,MAAM,WAAW,EAAE,UAAU,kBAAkB,EAAE,OAAO,GAAG,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE;IAC1P;IAEA,IAAI,aAAa,KAAA,GACf,WAAW,KACT,GAAG,wBAAwB,QAAQ,KAAK,SAAS,GAAG,SAAS,EAAE,IAAI,SAAS,MAAM,EAAE,OAAO,MAAM,SAAS,EAAE,kBAAkB,iBAAiB,EAAE,EACnJ;IACF,IAAI,UAAU,KAAA,GAAW;KACvB,YAAO,EAAE,uBAAuB,KAAA,CAAS;KACzC,WAAW,KACT,GAAG,wBAAwB,WAAW,KAAK,SAAS,cAAc,MAAM,UAAU,EAAE,OAAO,GAAG,YAAY,EAAE,WAAW,MAAM,EAAE,OAAO,OAAO,WAAW,EAAE,mBAAmB;MAAE,YAAY,MAAM;MAAY,iBAAiB;MAAQ,iBAAiB;KAAmB,CAAC,CAAC,EAAE,EAChR;KACA,OAAO,8BAA8B;MACnC,MAAM;MACN,WAAW,kBAAkB,KAAK,IAAI,IAAI,UAAU,CAAC;KACvD,CAAC;IACH,OACE,OAAO,yBAAyB;KAC9B,MAAM;KACN,OAAO,OAAO,IAAI,aAAa;MAC7B,MAAM,OACJ,OAAO,GAAG,UAAU,WAAW,OAAO,2BAA2B,EAAE,QAAQ,WAAW,KAAK,SAAS,cAAc,MAAM,UAAU,EAAE,OAAO,IAAI,IAAI,UAAU,EAAE;MAEjK,YACE,KAAK,WAAW,KACd,EAAE,UAAU,WAAW,OAAO,KAAK,IAAK,2BAA2B,CAAC,CACxE;KACF,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,UACf,wBAAwB,KAAK;MAAE,WAAW;MAAU;KAAM,CAAC,CAC7D,CACF;IACF,CAAC;IACH,aAAQ,OAAO,QAAQ,UAAU,UAAU,MAAM,OAAO,SAAS;IAEjE,OAAO,OAAO,QAAQ,EAAE,MAAM,aAAa,GAAG,OAAO;GACvD,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,SAASA,gBAAW,CAAC;CAGX,EAAE;AACjC,CAAC"}

package/dist/internal/models/email-model.d.mts

@@ -1,12 +1,13 @@
+import { AnyTableModel, SqlExpression, TableModel } from "../table-model.mjs";
 import { PersistenceMappingError } from "../mapping-error.mjs";
-import { AnyTableModel, SqlExpression, TableModel } from "../query-operations.mjs";
 import { SubjectIdCodec } from "./common.mjs";
+import { ProofClock } from "./proof-model.mjs";
 import { Effect } from "effect";
-import { TokenDigest } from "@yielded/auth/Schema";
+import { EmailAction } from "@yielded/auth/Email";
+import { ProofRedemptionInput } from "@yielded/auth/Proofs";
 import { AuthenticationRequirement, SecurityRevision } from "@yielded/auth/Sessions";
-import { ProofBinding, ProofContinuationId, ProofPurpose } from "@yielded/auth/Proofs";
-import { EmailAction, EmailRegistrationDecision } from "@yielded/auth/Email";
 import { LoginIdentifier } from "@yielded/auth/Identity";
+import { TokenDigest } from "@yielded/auth/Schema";
 //#region src/internal/models/email-model.d.ts
 type ColumnKey<T extends TableModel> = T["column"];
 export interface EmailSubjectReadTable<Subject extends TableModel> {
@@ -15,13 +16,14 @@ export interface EmailSubjectReadTable<Subject extends TableModel> {
   readonly status: ColumnKey<Subject>;
   readonly securityRevision: ColumnKey<Subject>;
   readonly isActiveStatus: (value: unknown) => boolean;
-  readonly d1ActiveStatusValue?: unknown;
+  readonly activeStatusValue: unknown;
+  readonly decodeRequirement: (row: Subject["select"]) => Effect.Effect<AuthenticationRequirement, PersistenceMappingError>;
 }
 export interface EmailSubjectTable<Subject extends TableModel> extends EmailSubjectReadTable<Subject> {
   readonly decodeActionRequirement: (row: Subject["select"], action: EmailAction) => Effect.Effect<AuthenticationRequirement, PersistenceMappingError>;
   readonly nextSecurityRevision?: (current: SecurityRevision) => Effect.Effect<SecurityRevision, PersistenceMappingError>;
   readonly nextSecurityRevisionSync?: (current: SecurityRevision) => SecurityRevision;
-  readonly d1ActiveStatusValue?: unknown;
+  readonly activeStatusValue: unknown;
 }
 export interface EmailIdentifierReadTable<Identifier extends TableModel> {
   readonly table: Identifier["table"];
@@ -70,12 +72,13 @@ export interface EmailCredentialReadTable<Subject extends TableModel, Identifier
   readonly credentialRevision: ColumnKey<Credential>;
   readonly status: ColumnKey<Credential>;
   readonly isActiveStatus: (value: unknown) => boolean;
+  readonly activeStatusValue: unknown;
   readonly decode: (input: {
     readonly moduleId: string;
     readonly subject: Subject["select"];
     readonly identifier: Identifier["select"];
     readonly credential: Credential["select"];
-  }) => Effect.Effect<import("@yielded/auth/Email").EmailCredentialSnapshot, PersistenceMappingError>;
+  }) => Effect.Effect<Omit<import("@yielded/auth/Email").EmailCredentialSnapshot, "requirement">, PersistenceMappingError>;
 }
 export interface EmailCredentialTable<Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, NativeSubjectId> extends EmailCredentialReadTable<Subject, Identifier, Credential, NativeSubjectId> {
   readonly encodeVerifiedInsert: (input: {
@@ -93,7 +96,7 @@ export interface EmailCredentialTable<Subject extends TableModel, Identifier ext
     readonly source: LoginIdentifier;
     readonly credentialRevision: SecurityRevision;
   }) => Partial<Credential["insert"]>;
-  readonly d1ActiveStatusValue?: unknown;
+  readonly activeStatusValue: unknown;
 }
 export interface EmailAuthorityCredentialTable<Credential extends TableModel, NativeSubjectId> {
   readonly table: Credential["table"];
@@ -109,53 +112,33 @@ export interface EmailAuthorityCredentialTable<Credential extends TableModel, Na
   }) => Credential["insert"];
   readonly encodeActivation: (revision: SecurityRevision) => Partial<Credential["insert"]>;
   readonly encodeRetirement: (revision: SecurityRevision) => Partial<Credential["insert"]>;
-  readonly d1ActiveStatusValue?: unknown;
-}
-export interface EmailCommandTable<Command extends TableModel> {
-  readonly table: Command["table"];
-  readonly moduleId: ColumnKey<Command>;
-  readonly commandId: ColumnKey<Command>;
-  readonly action: ColumnKey<Command>;
-  readonly bindingDigest: ColumnKey<Command>;
-  readonly retentionUntil: ColumnKey<Command>;
-  readonly encodeInsert: (input: {
-    readonly moduleId: string;
-    readonly commandId: string;
-    readonly action: EmailAction;
-    readonly bindingDigest: TokenDigest;
-    readonly retentionUntilMillis: number;
-  }) => Command["insert"];
+  readonly activeStatusValue: unknown;
 }
 export interface RequiredEmailSignInConstraints {
+  readonly authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)";
   readonly identifier: "unique(identifier.namespace,identifier.value)";
   readonly credentialId: "unique(emailCredential.moduleId,emailCredential.credentialId)";
   readonly credentialIdentifier: "unique(emailCredential.moduleId,emailCredential.identifierNamespace,emailCredential.identifierValue)";
 }
 export declare const requiredEmailSignInConstraints: RequiredEmailSignInConstraints;
-export interface EmailSignInMapping<Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, NativeSubjectId> {
+export interface EmailSignInMapping<Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, NativeSubjectId> {
   readonly subject: EmailSubjectReadTable<Subject>;
   readonly identifier: EmailIdentifierReadTable<Identifier>;
   readonly credential: EmailCredentialReadTable<Subject, Identifier, Credential, NativeSubjectId>;
+  readonly authorityCredential: EmailAuthorityCredentialTable<AuthorityCredential, NativeSubjectId>;
   readonly subjectId: SubjectIdCodec<NativeSubjectId>;
   readonly constraints: RequiredEmailSignInConstraints;
   readonly decodeInstant: (native: unknown) => Effect.Effect<number, PersistenceMappingError>;
 }
 export interface RequiredEmailAddressConstraints extends RequiredEmailSignInConstraints {
   readonly authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)";
-  readonly command: "unique(emailCommand.moduleId,emailCommand.commandId)";
 }
 export declare const requiredEmailAddressConstraints: RequiredEmailAddressConstraints;
-export interface EmailD1Clock<Expression extends SqlExpression = SqlExpression> {
-  readonly engineNow: Expression;
-  readonly engineNowMillis: Expression;
-  readonly engineInstantPlus: (millis: number) => Expression;
-}
-export interface EmailAddressMapping<Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, Command extends TableModel, NativeSubjectId, Expression extends SqlExpression = SqlExpression> extends EmailSignInMapping<Subject, Identifier, Credential, NativeSubjectId> {
+export interface EmailAddressMapping<Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, NativeSubjectId, Expression extends SqlExpression = SqlExpression> extends EmailSignInMapping<Subject, Identifier, Credential, AuthorityCredential, NativeSubjectId> {
   readonly subject: EmailSubjectTable<Subject>;
   readonly identifier: EmailIdentifierTable<Identifier, NativeSubjectId, Expression>;
   readonly credential: EmailCredentialTable<Subject, Identifier, Credential, NativeSubjectId>;
   readonly authorityCredential: EmailAuthorityCredentialTable<AuthorityCredential, NativeSubjectId>;
-  readonly command: EmailCommandTable<Command>;
   readonly constraints: RequiredEmailAddressConstraints;
   readonly addressCardinality: "single" | "multiple";
   readonly changeDisposition: "retire-source";
@@ -164,61 +147,22 @@ export interface EmailAddressMapping<Subject extends TableModel, Identifier exte
   readonly allocateRevision?: Effect.Effect<SecurityRevision, PersistenceMappingError>;
   readonly allocateRevisionSync?: () => SecurityRevision;
   readonly encodeInstant: (epochMillis: number) => unknown;
-  readonly commandRetentionMillis: number;
   readonly sessionInvalidation: "same-authority-immediate" | "original-absolute-expiry";
-  readonly isCommandConflict: (cause: unknown) => boolean;
   readonly isIdentifierConflict: (cause: unknown) => boolean;
   readonly isCredentialConflict: (cause: unknown) => boolean;
-  readonly d1?: EmailD1Clock<Expression>;
-}
-export type D1EmailAddressMapping<Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, Command extends TableModel, NativeSubjectId, Expression extends SqlExpression = SqlExpression> = EmailAddressMapping<Subject, Identifier, Credential, AuthorityCredential, Command, NativeSubjectId, Expression> & {
-  readonly d1: EmailD1Clock<Expression>;
-  readonly subject: EmailSubjectTable<Subject> & {
-    readonly d1ActiveStatusValue: unknown;
-  };
-  readonly identifier: EmailIdentifierTable<Identifier, NativeSubjectId, Expression> & {
-    readonly d1CurrentCondition: NonNullable<EmailIdentifierTable<Identifier, NativeSubjectId, Expression>["d1CurrentCondition"]>;
-    readonly d1MutableTargetCondition: NonNullable<EmailIdentifierTable<Identifier, NativeSubjectId, Expression>["d1MutableTargetCondition"]>;
-  };
-  readonly credential: EmailCredentialTable<Subject, Identifier, Credential, NativeSubjectId> & {
-    readonly d1ActiveStatusValue: unknown;
+  readonly clock: ProofClock<Expression>;
+  readonly d1?: {
+    readonly primary: true;
   };
-  readonly authorityCredential: EmailAuthorityCredentialTable<AuthorityCredential, NativeSubjectId> & {
-    readonly d1ActiveStatusValue: unknown;
-  };
-};
-export type EmailRegistrationState = "pending" | "registered";
+}
 export interface EmailRegistrationIntent<Registration> {
   readonly moduleId: string;
   readonly commandId: string;
   readonly identifier: LoginIdentifier;
   readonly registration: Registration;
+  readonly requestId: string;
   readonly fingerprint: TokenDigest;
-  readonly completion: {
-    readonly moduleId: string;
-    readonly purpose: ProofPurpose;
-    readonly continuationId: ProofContinuationId;
-    readonly binding: ProofBinding;
-  };
-}
-export interface EmailRegistrationTable<Registration, Request extends TableModel, NativeSubjectId> {
-  readonly table: Request["table"];
-  readonly moduleId: ColumnKey<Request>;
-  readonly commandId: ColumnKey<Request>;
-  readonly fingerprint: ColumnKey<Request>;
-  readonly state: ColumnKey<Request>;
-  readonly subjectId: ColumnKey<Request>;
-  readonly pendingReference: ColumnKey<Request>;
-  readonly retentionUntil: ColumnKey<Request>;
-  readonly encodeInsert: (input: EmailRegistrationIntent<Registration>, state: {
-    readonly state: EmailRegistrationState;
-    readonly nativeSubjectId?: NativeSubjectId;
-    readonly pendingReference?: string;
-    readonly retentionUntilMillis: number;
-  }) => Request["insert"];
-  readonly decodeReplay: (row: Request["select"]) => Effect.Effect<Exclude<EmailRegistrationDecision, {
-    readonly _tag: "Registered";
-  }>, PersistenceMappingError>;
+  readonly redemption: ProofRedemptionInput;
 }
 export interface EmailRegistrationProvisioning<Registration, Subject extends TableModel, NativeSubjectId> {
   readonly encodeSubjectInsert: (input: EmailRegistrationIntent<Registration>, values: {
@@ -241,6 +185,11 @@ export interface EmailRegistrationIdentifierTable<Identifier extends TableModel,
   readonly verifiedAt: ColumnKey<Identifier>;
   readonly bindingRevision: ColumnKey<Identifier>;
   readonly isCurrent: (row: Identifier["select"]) => boolean;
+  readonly isMutableTarget: (row: Identifier["select"]) => boolean;
+  readonly d1MutableTargetCondition?: (input: {
+    readonly identifier: LoginIdentifier;
+    readonly nativeSubjectId: NativeSubjectId;
+  }) => Expression;
   readonly d1CurrentCondition?: (input: {
     readonly identifier: LoginIdentifier;
     readonly nativeSubjectId: NativeSubjectId;
@@ -263,7 +212,7 @@ export interface EmailRegistrationCredentialTable<Credential extends TableModel,
   readonly credentialRevision: ColumnKey<Credential>;
   readonly status: ColumnKey<Credential>;
   readonly isActiveStatus: (value: unknown) => boolean;
-  readonly d1ActiveStatusValue?: unknown;
+  readonly activeStatusValue: unknown;
   readonly encodeVerifiedInsert: (input: {
     readonly moduleId: string;
     readonly subjectId: NativeSubjectId;
@@ -279,7 +228,7 @@ export interface EmailRegistrationAuthorityCredentialTable<Credential extends Ta
   readonly revision: ColumnKey<Credential>;
   readonly status: ColumnKey<Credential>;
   readonly isActiveStatus: (value: unknown) => boolean;
-  readonly d1ActiveStatusValue?: unknown;
+  readonly activeStatusValue: unknown;
   readonly encodeInsert: (input: {
     readonly subjectId: NativeSubjectId;
     readonly credentialId: string;
@@ -288,40 +237,32 @@ export interface EmailRegistrationAuthorityCredentialTable<Credential extends Ta
 }
 export interface RequiredEmailRegistrationConstraints extends RequiredEmailSignInConstraints {
   readonly authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)";
-  readonly request: "unique(emailRegistration.moduleId,emailRegistration.commandId)";
-  readonly pendingReference: "unique(emailRegistration.pendingReference)";
 }
 export declare const requiredEmailRegistrationConstraints: RequiredEmailRegistrationConstraints;
-type EmailRegistrationBase<Registration, Request extends TableModel, NativeSubjectId> = {
-  readonly registration: EmailRegistrationTable<Registration, Request, NativeSubjectId>;
-  readonly constraints: Pick<RequiredEmailRegistrationConstraints, "request" | "pendingReference">;
+type EmailRegistrationBase<Registration> = {
   readonly inspect: (input: {
     readonly identifier: LoginIdentifier;
     readonly registration: Registration;
   }) => Effect.Effect<{
-    readonly fingerprint: TokenDigest;
     readonly eligible: boolean;
+    readonly fingerprint: TokenDigest;
   }, PersistenceMappingError>;
-  /** Projects one detached value of the factory-specific Registration Type. */
   readonly snapshotRegistration: (registration: Registration) => Effect.Effect<Registration, PersistenceMappingError>;
-  /** Required by synchronous transaction-bound services. */
   readonly snapshotRegistrationSync?: (registration: Registration) => Registration;
-  /** Required by synchronous Durable Object transaction-bound services. */
   readonly inspectSync?: (input: {
     readonly identifier: LoginIdentifier;
     readonly registration: Registration;
   }) => {
-    readonly fingerprint: TokenDigest;
     readonly eligible: boolean;
+    readonly fingerprint: TokenDigest;
   };
-  readonly allocatePendingReference?: Effect.Effect<string, PersistenceMappingError>;
-  readonly allocatePendingReferenceSync?: () => string;
-  readonly encodeInstant: (epochMillis: number) => unknown;
-  readonly retentionMillis: number;
-  readonly isRequestConflict: (cause: unknown) => boolean;
 };
-export type EmailRegistrationMapping<Registration, Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, Request extends TableModel, NativeSubjectId, Expression extends SqlExpression = SqlExpression> = EmailRegistrationBase<Registration, Request, NativeSubjectId> & ({
+export type EmailRegistrationMapping<Registration, Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, NativeSubjectId, Expression extends SqlExpression = SqlExpression> = EmailRegistrationBase<Registration> & {
   readonly mode: "atomic";
+  readonly clock: ProofClock<Expression>;
+  readonly d1?: {
+    readonly primary: true;
+  };
   readonly subject: EmailSubjectReadTable<Subject>;
   readonly identifier: EmailRegistrationIdentifierTable<Identifier, NativeSubjectId, Expression>;
   readonly credential: EmailRegistrationCredentialTable<Credential, NativeSubjectId>;
@@ -344,14 +285,9 @@ export type EmailRegistrationMapping<Registration, Subject extends TableModel, I
     readonly idMode: "generated";
     readonly decodeGeneratedId: (rows: ReadonlyArray<unknown>) => Effect.Effect<NativeSubjectId, PersistenceMappingError>;
   });
-} | {
-  readonly mode: "pending";
-});
-export type AnyEmailSignInMapping = EmailSignInMapping<AnyTableModel, AnyTableModel, AnyTableModel, unknown>;
-export type AnyEmailAddressMapping<Expression extends SqlExpression = SqlExpression> = EmailAddressMapping<AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, unknown, Expression>;
-export type AnyEmailRegistrationMapping<Registration = unknown, Expression extends SqlExpression = SqlExpression> = EmailRegistrationMapping<Registration, AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, unknown, Expression>;
-export type D1EmailRegistrationMapping<Registration, Subject extends TableModel, Identifier extends TableModel, Credential extends TableModel, AuthorityCredential extends TableModel, Request extends TableModel, NativeSubjectId, Expression extends SqlExpression = SqlExpression> = EmailRegistrationMapping<Registration, Subject, Identifier, Credential, AuthorityCredential, Request, NativeSubjectId, Expression> & {
-  readonly d1: EmailD1Clock<Expression>;
 };
+export type AnyEmailSignInMapping = EmailSignInMapping<AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, unknown>;
+export type AnyEmailAddressMapping<Expression extends SqlExpression = SqlExpression> = EmailAddressMapping<AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, unknown, Expression>;
+export type AnyEmailRegistrationMapping<Registration = unknown, Expression extends SqlExpression = SqlExpression> = EmailRegistrationMapping<Registration, AnyTableModel, AnyTableModel, AnyTableModel, AnyTableModel, unknown, Expression>;
 //#endregion
 //# sourceMappingURL=email-model.d.mts.map

package/dist/internal/models/email-model.mjs

@@ -1,19 +1,17 @@
 //#region src/internal/models/email-model.ts
 const requiredEmailSignInConstraints = {
+	authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)",
 	identifier: "unique(identifier.namespace,identifier.value)",
 	credentialId: "unique(emailCredential.moduleId,emailCredential.credentialId)",
 	credentialIdentifier: "unique(emailCredential.moduleId,emailCredential.identifierNamespace,emailCredential.identifierValue)"
 };
 const requiredEmailAddressConstraints = {
 	...requiredEmailSignInConstraints,
-	authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)",
-	command: "unique(emailCommand.moduleId,emailCommand.commandId)"
+	authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)"
 };
 const requiredEmailRegistrationConstraints = {
 	...requiredEmailSignInConstraints,
-	authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)",
-	request: "unique(emailRegistration.moduleId,emailRegistration.commandId)",
-	pendingReference: "unique(emailRegistration.pendingReference)"
+	authorityCredential: "unique(authorityCredential.subjectId,authorityCredential.credentialId)"
 };
 //#endregion
 export { requiredEmailAddressConstraints, requiredEmailRegistrationConstraints, requiredEmailSignInConstraints };