@yielded/auth-persistence 0.1.0-beta.25 → 0.1.0-beta.27

package/dist/internal/step-up-state.d.mts

@@ -1,49 +0,0 @@
-import { DateTime, Effect, Schema } from "effect";
-import { AuthenticationRevision, SessionStepUpCompletionPlan, SessionStepUpIntent, SessionStepUpInvalid, SessionUnavailable, StatefulSessionRecord } from "@yielded/auth/Sessions";
-//#region src/internal/step-up-state.d.ts
-export declare const encodeStepUpIntent: (intent: SessionStepUpIntent) => Effect.Effect<string, SessionUnavailable, never>;
-export declare const decodeStepUpIntent: (snapshot: string) => Effect.Effect<{
-  readonly _tag: "SessionStepUpIntent";
-  readonly digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-  readonly version: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-  readonly flowId: string & import("effect/Brand").Brand<"effect-auth/AuthenticationFlowId">;
-  readonly bindingDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-  readonly revision: {
-    readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-    readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-    readonly credentials: readonly {
-      readonly credentialId: string;
-      readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-    }[];
-  };
-  readonly sourceKind: "StateAssistedSigned" | "Stateful" | "StatelessSigned";
-  readonly sourceSessionId: string & import("effect/Brand").Brand<"effect-auth/SessionId">;
-  readonly sourceCredentialVersion: string & import("effect/Brand").Brand<"effect-auth/SessionCredentialVersion">;
-  readonly sourceAuthenticatedAt: DateTime.Utc;
-  readonly sourceExpiresAt: DateTime.Utc;
-  readonly sourceAbsoluteExpiresAt: DateTime.Utc;
-  readonly profileId: string & import("effect/Brand").Brand<"effect-auth/SessionStepUpProfileId">;
-  readonly profileGeneration: number;
-  readonly profileDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-  readonly requirement: {
-    readonly maximumAgeMillis: number;
-    readonly alternatives: readonly [{
-      readonly userVerified: boolean;
-      readonly phishingResistant: boolean;
-      readonly factors: readonly ("inherence" | "knowledge" | "possession")[];
-      readonly minimumCredentials: number;
-    }, ...{
-      readonly userVerified: boolean;
-      readonly phishingResistant: boolean;
-      readonly factors: readonly ("inherence" | "knowledge" | "possession")[];
-      readonly minimumCredentials: number;
-    }[]];
-  };
-  readonly expiresAt: DateTime.Utc;
-  readonly attemptLimit: number;
-}, SessionUnavailable, never>;
-export declare const stepUpIntentLive: (intent: SessionStepUpIntent, kind: SessionStepUpIntent["sourceKind"], now: DateTime.Utc) => boolean;
-/** Validate core-owned plans before driver allocation/SQL expansion. No bearer or Claims decoding. */
-export declare const validateStepUpPlan: <Claims>(plan: SessionStepUpCompletionPlan<Claims>) => Effect.Effect<undefined, SessionStepUpInvalid, never>;
-//#endregion
-//# sourceMappingURL=step-up-state.d.mts.map

package/dist/internal/transaction-execution-kernel.d.mts

@@ -1,37 +0,0 @@
-import { NativeDatabase, TransactionNativeDatabase, TransactionOwner, makeTransactionKernel } from "./transaction-kernel.mjs";
-import { Context, Crypto, Effect, PlatformError } from "effect";
-import { Statement } from "effect/sql/Statement";
-import { CurrentCommitJournal, HookConfigurationError, LifecycleHooks } from "@yielded/auth/Hooks";
-import * as SqlClient$1 from "effect/sql/SqlClient";
-import * as SqlError$1 from "effect/sql/SqlError";
-//#region src/internal/transaction-execution-kernel.d.ts
-export interface TransactionTargetConfiguration<Failure> {
-  readonly mode: "interactive" | "synchronous" | "batch";
-  readonly dialect: "pg" | "mysql" | "sqlite";
-  readonly locking: boolean;
-  /** The captured database's transaction marker; batch drivers may omit it. */
-  readonly standaloneGuard: (transactionService: SqlClient$1.SqlClient["transactionService"] | undefined) => Effect.Effect<void, Failure>;
-  readonly transaction?: <A, E, R>(database: any, body: (transaction: any) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | SqlError$1.SqlError | Failure, R>;
-}
-export type TransactionCoordinatorError<E, Failure> = E | Failure | HookConfigurationError | SqlError$1.SqlError;
-export interface TransactionBound<Failure> {
-  readonly owner: TransactionOwner<Failure>;
-  used: boolean;
-  poisoned: boolean;
-  active: boolean;
-  inFlight: number;
-}
-export interface TransactionExecution<Failure, OwnerId, Requirements = LifecycleHooks> {
-  readonly bound: boolean;
-  readonly active: () => boolean;
-  readonly admit: Effect.Effect<void, Failure>;
-  readonly poison: () => void;
-  readonly run: <A, E, R>(body: Effect.Effect<A, E, R>, mutation?: boolean) => Effect.Effect<A, Failure, Exclude<Exclude<R, OwnerId | CurrentCommitJournal>, Crypto.Crypto> | Requirements>;
-}
-export declare const makeTransactionExecutionKernel: (transactions: Pick<ReturnType<typeof makeTransactionKernel>, "makeTransactionOwner" | "reportTransactionFailure">) => {
-  sqlClientTransactionStandaloneGuard: <Failure>(unavailable: () => Failure, transactionService: SqlClient$1.SqlClient["transactionService"] | undefined) => Effect.Effect<void, Failure, never>;
-  makeTransactionExecution: <Failure, OwnerId>(ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>, configuration: TransactionTargetConfiguration<Failure>, unavailable: () => Failure, nonce: Effect.Effect<string, PlatformError.PlatformError, Crypto.Crypto>, bound?: TransactionBound<Failure> | undefined) => Effect.Effect<TransactionExecution<Failure, OwnerId, LifecycleHooks>, never, Crypto.Crypto | NativeDatabase>;
-  coordinateTransactionOwner: <Failure, OwnerId, Resources, AllocationError, AllocationRequirements, Services, Transaction, A, E, R>(database: TransactionNativeDatabase, ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>, configuration: TransactionTargetConfiguration<Failure>, allocate: Effect.Effect<Resources, AllocationError, AllocationRequirements>, unavailable: () => Failure, nonce: Effect.Effect<string, PlatformError.PlatformError, Crypto.Crypto>, services: (execution: TransactionExecution<Failure, OwnerId>, resources: Resources) => Services, owner: (transaction: Transaction, services: Services, append: (statement: Statement<any>) => void) => Effect.Effect<A, E, R>) => Effect.Effect<A, TransactionCoordinatorError<E, Failure>, Exclude<R, CurrentCommitJournal> | LifecycleHooks | AllocationRequirements | Crypto.Crypto>;
-};
-//#endregion
-//# sourceMappingURL=transaction-execution-kernel.d.mts.map

package/dist/internal/transaction-execution-kernel.mjs

@@ -1,120 +0,0 @@
-import { requireStandalone } from "./standalone.mjs";
-import { NativeDatabase } from "./transaction-kernel.mjs";
-import { Context, Crypto, Effect } from "effect";
-import { CurrentCommitJournal, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
-//#region src/internal/transaction-execution-kernel.ts
-const makeTransactionExecutionKernel = (transactions) => {
-	const { makeTransactionOwner, reportTransactionFailure } = transactions;
-	const sqlClientTransactionStandaloneGuard = (unavailable, transactionService) => requireStandalone(unavailable, transactionService);
-	const makeTransactionExecution = Effect.fnUntraced(function* (ownerTag, configuration, unavailable, nonce, bound) {
-		const database = yield* NativeDatabase;
-		const crypto = yield* Crypto.Crypto;
-		const invariant = (value) => {
-			if (!value) throw unavailable();
-		};
-		return {
-			bound: bound !== void 0,
-			active: () => bound === void 0 || bound.active,
-			admit: bound !== void 0 ? Effect.suspend(() => bound.active ? Effect.void : Effect.fail(unavailable())) : Effect.gen(function* () {
-				if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
-				yield* configuration.standaloneGuard(database.$client.transactionService);
-			}),
-			poison: () => {
-				if (bound !== void 0) bound.poisoned = true;
-			},
-			run: (body, mutation = true) => {
-				return Effect.suspend(() => {
-					let entered = false;
-					return (bound !== void 0 ? Effect.gen(function* () {
-						if (!bound.active) return yield* Effect.fail(unavailable());
-						entered = true;
-						bound.inFlight++;
-						if (!mutation) return yield* Effect.provideContext(body, Context.make(ownerTag, bound.owner).pipe(Context.add(CurrentCommitJournal, bound.owner.journal)));
-						invariant(!bound.used && !bound.poisoned);
-						bound.used = true;
-						return (yield* coordinateCommit((journal) => Effect.gen(function* () {
-							bound.owner.guards.push(journal.prepare(void 0));
-							return yield* Effect.provideContext(body, Context.make(ownerTag, {
-								...bound.owner,
-								journal
-							}).pipe(Context.add(CurrentCommitJournal, journal)));
-						}), { mode: configuration.mode })).value;
-					}).pipe(Effect.onExit((exit) => Effect.sync(() => {
-						if (entered) bound.inFlight--;
-						if (exit._tag === "Failure") bound.poisoned = true;
-					}))) : Effect.gen(function* () {
-						if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
-						yield* configuration.standaloneGuard(database.$client.transactionService);
-						const marker = yield* nonce;
-						return (yield* coordinateCommit((journal) => {
-							const run = (tx) => Effect.gen(function* () {
-								const owner = makeTransactionOwner(tx, journal, marker, unavailable, {
-									client: database.$client,
-									batch: configuration.mode === "batch",
-									locking: configuration.locking,
-									mysql: configuration.dialect === "mysql",
-									dialect: configuration.dialect
-								});
-								const value = yield* Effect.provideContext(body, Context.make(ownerTag, owner).pipe(Context.add(CurrentCommitJournal, journal)));
-								yield* owner.finish();
-								if (configuration.mode === "batch") yield* tx.$client.batch(owner.statements);
-								return value;
-							});
-							return configuration.mode === "batch" ? run(database) : configuration.transaction !== void 0 ? configuration.transaction(database, run) : database.transaction(run);
-						}, { mode: configuration.mode })).value;
-					})).pipe(Effect.provideService(Crypto.Crypto, crypto), (operation) => reportTransactionFailure(operation, unavailable), Effect.mapError(unavailable), Effect.catchDefect(() => Effect.fail(unavailable())));
-				});
-			}
-		};
-	});
-	const coordinateTransactionOwner = (database, ownerTag, configuration, allocate, unavailable, nonce, services, owner) => {
-		return Effect.gen(function* () {
-			if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
-			yield* configuration.standaloneGuard(database.$client.transactionService);
-			const crypto = yield* Crypto.Crypto;
-			const resources = yield* allocate.pipe((operation) => reportTransactionFailure(operation, unavailable), Effect.mapError(unavailable), Effect.catchDefect(() => Effect.fail(unavailable())));
-			const marker = yield* nonce.pipe(Effect.mapError(unavailable));
-			return (yield* coordinateCommit((journal) => {
-				const run = (tx) => Effect.gen(function* () {
-					const state = makeTransactionOwner(tx, journal, marker, unavailable, {
-						client: database.$client,
-						batch: configuration.mode === "batch",
-						dialect: configuration.dialect,
-						mysql: configuration.dialect === "mysql",
-						locking: configuration.locking
-					});
-					const bound = {
-						owner: state,
-						used: false,
-						poisoned: false,
-						active: true,
-						inFlight: 0
-					};
-					return yield* Effect.gen(function* () {
-						const value = yield* owner(tx, services(yield* makeTransactionExecution(ownerTag, configuration, unavailable, nonce, bound).pipe(Effect.provideService(NativeDatabase, tx)), resources), (statement) => {
-							if (!bound.active) throw unavailable();
-							state.statements.push(statement);
-						});
-						bound.active = false;
-						if (bound.poisoned || bound.inFlight !== 0) return yield* Effect.fail(unavailable());
-						yield* state.finish();
-						if (configuration.mode === "batch") yield* tx.$client.batch(state.statements);
-						return value;
-					}).pipe(Effect.ensuring(Effect.sync(() => {
-						bound.active = false;
-					})));
-				}).pipe(Effect.provideService(Crypto.Crypto, crypto));
-				return configuration.mode === "batch" ? run(database) : configuration.transaction !== void 0 ? configuration.transaction(database, run) : database.transaction(run);
-			}, { mode: configuration.mode })).value;
-		});
-	};
-	return {
-		sqlClientTransactionStandaloneGuard,
-		makeTransactionExecution,
-		coordinateTransactionOwner
-	};
-};
-//#endregion
-export { makeTransactionExecutionKernel };
-
-//# sourceMappingURL=transaction-execution-kernel.mjs.map

package/dist/internal/transaction-execution-kernel.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"transaction-execution-kernel.mjs","names":[],"sources":["../../src/internal/transaction-execution-kernel.ts"],"sourcesContent":["import {\n  coordinateCommit,\n  hasCommitScope,\n  CurrentCommitJournal,\n  type LifecycleHooks,\n  type HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\n/* oxlint-disable no-explicit-any -- existing storage kernels erase foreign table shapes; domain errors remain typed. */\n/* oxlint-disable no-explicit-any -- private execution bridge retains exact public driver wrappers. */\nimport { Context, Crypto, Effect, type PlatformError } from \"effect\";\nimport type * as SqlClient from \"effect/sql/SqlClient\";\nimport type * as SqlError from \"effect/sql/SqlError\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport { requireStandalone } from \"./standalone\";\nimport {\n  NativeDatabase,\n  type TransactionNativeDatabase,\n  type TransactionOwner,\n  type makeTransactionKernel,\n} from \"./transaction-kernel\";\n\nexport interface TransactionTargetConfiguration<Failure> {\n  readonly mode: \"interactive\" | \"synchronous\" | \"batch\";\n  readonly dialect: \"pg\" | \"mysql\" | \"sqlite\";\n  readonly locking: boolean;\n  /** The captured database's transaction marker; batch drivers may omit it. */\n  readonly standaloneGuard: (\n    transactionService: SqlClient.SqlClient[\"transactionService\"] | undefined,\n  ) => Effect.Effect<void, Failure>;\n  readonly transaction?: <A, E, R>(\n    database: any,\n    body: (transaction: any) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError | Failure, R>;\n}\n\nexport type TransactionCoordinatorError<E, Failure> =\n  | E\n  | Failure\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport interface TransactionBound<Failure> {\n  readonly owner: TransactionOwner<Failure>;\n  used: boolean;\n  poisoned: boolean;\n  active: boolean;\n  inFlight: number;\n}\n\nexport interface TransactionExecution<Failure, OwnerId, Requirements = LifecycleHooks> {\n  readonly bound: boolean;\n  readonly active: () => boolean;\n  readonly admit: Effect.Effect<void, Failure>;\n  readonly poison: () => void;\n  readonly run: <A, E, R>(\n    body: Effect.Effect<A, E, R>,\n    mutation?: boolean,\n  ) => Effect.Effect<\n    A,\n    Failure,\n    Exclude<Exclude<R, OwnerId | CurrentCommitJournal>, Crypto.Crypto> | Requirements\n  >;\n}\n\nexport const makeTransactionExecutionKernel = (\n  transactions: Pick<\n    ReturnType<typeof makeTransactionKernel>,\n    \"makeTransactionOwner\" | \"reportTransactionFailure\"\n  >,\n) => {\n  const { makeTransactionOwner, reportTransactionFailure } = transactions;\n\n  const sqlClientTransactionStandaloneGuard = <Failure>(\n    unavailable: () => Failure,\n    transactionService: SqlClient.SqlClient[\"transactionService\"] | undefined,\n  ) => requireStandalone(unavailable, transactionService);\n\n  const makeTransactionExecution = Effect.fnUntraced(function* <Failure, OwnerId>(\n    ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,\n    configuration: TransactionTargetConfiguration<Failure>,\n    unavailable: () => Failure,\n    nonce: Effect.Effect<string, PlatformError.PlatformError, Crypto.Crypto>,\n    bound?: TransactionBound<Failure>,\n  ): Effect.fn.Return<\n    TransactionExecution<Failure, OwnerId>,\n    never,\n    NativeDatabase | Crypto.Crypto\n  > {\n    const database = yield* NativeDatabase;\n    const crypto = yield* Crypto.Crypto;\n\n    const invariant: (value: unknown) => asserts value = (value) => {\n      if (!value) throw unavailable();\n    };\n\n    return {\n      bound: bound !== undefined,\n      active: () => bound === undefined || bound.active,\n      admit:\n        bound !== undefined\n          ? Effect.suspend(() => (bound.active ? Effect.void : Effect.fail(unavailable())))\n          : Effect.gen(function* () {\n              if (yield* hasCommitScope) return yield* Effect.fail(unavailable());\n              yield* configuration.standaloneGuard(database.$client.transactionService);\n            }),\n      poison: () => {\n        if (bound !== undefined) bound.poisoned = true;\n      },\n      run: <A, E, R>(\n        body: Effect.Effect<A, E, R>,\n        mutation = true,\n      ): Effect.Effect<\n        A,\n        Failure,\n        Exclude<Exclude<R, OwnerId | CurrentCommitJournal>, Crypto.Crypto> | LifecycleHooks\n      > => {\n        return Effect.suspend(() => {\n          let entered = false;\n\n          const work: Effect.Effect<\n            A,\n            E | Failure | HookConfigurationError | SqlError.SqlError | PlatformError.PlatformError,\n            Exclude<R, OwnerId | CurrentCommitJournal> | LifecycleHooks | Crypto.Crypto\n          > =\n            bound !== undefined\n              ? Effect.gen(function* () {\n                  if (!bound.active) return yield* Effect.fail(unavailable());\n                  entered = true;\n                  bound.inFlight++;\n                  if (!mutation)\n                    return yield* Effect.provideContext(\n                      body,\n                      Context.make(ownerTag, bound.owner).pipe(\n                        Context.add(CurrentCommitJournal, bound.owner.journal),\n                      ),\n                    );\n                  invariant(!bound.used && !bound.poisoned);\n                  bound.used = true;\n\n                  const result = yield* coordinateCommit(\n                    (journal) =>\n                      Effect.gen(function* () {\n                        bound.owner.guards.push(journal.prepare(undefined));\n\n                        return yield* Effect.provideContext(\n                          body,\n                          Context.make(ownerTag, { ...bound.owner, journal }).pipe(\n                            Context.add(CurrentCommitJournal, journal),\n                          ),\n                        );\n                      }),\n                    { mode: configuration.mode },\n                  );\n\n                  return result.value;\n                }).pipe(\n                  Effect.onExit((exit) =>\n                    Effect.sync(() => {\n                      if (entered) bound.inFlight--;\n                      if (exit._tag === \"Failure\") bound.poisoned = true;\n                    }),\n                  ),\n                )\n              : Effect.gen(function* () {\n                  if (yield* hasCommitScope) return yield* Effect.fail(unavailable());\n                  yield* configuration.standaloneGuard(database.$client.transactionService);\n                  const marker = yield* nonce;\n\n                  const result = yield* coordinateCommit(\n                    (journal) => {\n                      const run = (tx: TransactionNativeDatabase) =>\n                        Effect.gen(function* () {\n                          const owner = makeTransactionOwner(tx, journal, marker, unavailable, {\n                            client: database.$client,\n                            batch: configuration.mode === \"batch\",\n                            locking: configuration.locking,\n                            mysql: configuration.dialect === \"mysql\",\n                            dialect: configuration.dialect,\n                          });\n\n                          const value = yield* Effect.provideContext(\n                            body,\n                            Context.make(ownerTag, owner).pipe(\n                              Context.add(CurrentCommitJournal, journal),\n                            ),\n                          );\n\n                          yield* owner.finish();\n                          if (configuration.mode === \"batch\")\n                            yield* tx.$client.batch(owner.statements);\n\n                          return value;\n                        });\n\n                      return configuration.mode === \"batch\"\n                        ? run(database)\n                        : configuration.transaction !== undefined\n                          ? configuration.transaction(database, run)\n                          : database.transaction(run);\n                    },\n                    { mode: configuration.mode },\n                  );\n\n                  return result.value;\n                });\n\n          return work.pipe(\n            Effect.provideService(Crypto.Crypto, crypto),\n            (operation) => reportTransactionFailure(operation, unavailable),\n            Effect.mapError(unavailable),\n            Effect.catchDefect(() => Effect.fail(unavailable())),\n          );\n        });\n      },\n    };\n  });\n\n  const coordinateTransactionOwner = <\n    Failure,\n    OwnerId,\n    Resources,\n    AllocationError,\n    AllocationRequirements,\n    Services,\n    Transaction,\n    A,\n    E,\n    R,\n  >(\n    database: TransactionNativeDatabase,\n    ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,\n    configuration: TransactionTargetConfiguration<Failure>,\n    allocate: Effect.Effect<Resources, AllocationError, AllocationRequirements>,\n    unavailable: () => Failure,\n    nonce: Effect.Effect<string, PlatformError.PlatformError, Crypto.Crypto>,\n    services: (execution: TransactionExecution<Failure, OwnerId>, resources: Resources) => Services,\n    owner: (\n      transaction: Transaction,\n      services: Services,\n      append: (statement: Statement<any>) => void,\n    ) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    TransactionCoordinatorError<E, Failure>,\n    Exclude<R, CurrentCommitJournal> | LifecycleHooks | AllocationRequirements | Crypto.Crypto\n  > => {\n    return Effect.gen(function* () {\n      if (yield* hasCommitScope) return yield* Effect.fail(unavailable());\n      yield* configuration.standaloneGuard(database.$client.transactionService);\n      const crypto = yield* Crypto.Crypto;\n\n      // Allocation is independent of registration data and always precedes the physical owner.\n      const resources = yield* allocate.pipe(\n        (operation) => reportTransactionFailure(operation, unavailable),\n        Effect.mapError(unavailable),\n        Effect.catchDefect(() => Effect.fail(unavailable())),\n      );\n\n      const marker = yield* nonce.pipe(Effect.mapError(unavailable));\n\n      const result = yield* coordinateCommit(\n        (journal) => {\n          const run = (tx: TransactionNativeDatabase) =>\n            Effect.gen(function* () {\n              const state = makeTransactionOwner(tx, journal, marker, unavailable, {\n                client: database.$client,\n                batch: configuration.mode === \"batch\",\n                dialect: configuration.dialect,\n                mysql: configuration.dialect === \"mysql\",\n                locking: configuration.locking,\n              });\n\n              const bound: TransactionBound<Failure> = {\n                owner: state,\n                used: false,\n                poisoned: false,\n                active: true,\n                inFlight: 0,\n              };\n\n              return yield* Effect.gen(function* () {\n                const value = yield* owner(\n                  tx as Transaction,\n                  services(\n                    yield* makeTransactionExecution(\n                      ownerTag,\n                      configuration,\n                      unavailable,\n                      nonce,\n                      bound,\n                    ).pipe(Effect.provideService(NativeDatabase, tx)),\n                    resources,\n                  ),\n                  (statement) => {\n                    if (!bound.active) throw unavailable();\n                    state.statements.push(statement);\n                  },\n                );\n\n                bound.active = false;\n                if (bound.poisoned || bound.inFlight !== 0)\n                  return yield* Effect.fail(unavailable());\n                yield* state.finish();\n                if (configuration.mode === \"batch\") yield* tx.$client.batch(state.statements);\n\n                return value;\n              }).pipe(\n                Effect.ensuring(\n                  Effect.sync(() => {\n                    bound.active = false;\n                  }),\n                ),\n              );\n            }).pipe(Effect.provideService(Crypto.Crypto, crypto));\n\n          return configuration.mode === \"batch\"\n            ? run(database)\n            : configuration.transaction !== undefined\n              ? configuration.transaction(database, run)\n              : database.transaction(run);\n        },\n        { mode: configuration.mode },\n      );\n\n      return result.value as A;\n    });\n  };\n\n  return {\n    sqlClientTransactionStandaloneGuard,\n    makeTransactionExecution,\n    coordinateTransactionOwner,\n  };\n};\n"],"mappings":";;;;;AAiEA,MAAa,kCACX,iBAIG;CACH,MAAM,EAAE,sBAAsB,6BAA6B;CAE3D,MAAM,uCACJ,aACA,uBACG,kBAAkB,aAAa,kBAAkB;CAEtD,MAAM,2BAA2B,OAAO,WAAW,WACjD,UACA,eACA,aACA,OACA,OAKA;EACA,MAAM,WAAW,OAAO;EACxB,MAAM,SAAS,OAAO,OAAO;EAE7B,MAAM,aAAgD,UAAU;GAC9D,IAAI,CAAC,OAAO,MAAM,YAAY;EAChC;EAEA,OAAO;GACL,OAAO,UAAU,KAAA;GACjB,cAAc,UAAU,KAAA,KAAa,MAAM;GAC3C,OACE,UAAU,KAAA,IACN,OAAO,cAAe,MAAM,SAAS,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC,CAAE,IAC9E,OAAO,IAAI,aAAa;IACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;IAClE,OAAO,cAAc,gBAAgB,SAAS,QAAQ,kBAAkB;GAC1E,CAAC;GACP,cAAc;IACZ,IAAI,UAAU,KAAA,GAAW,MAAM,WAAW;GAC5C;GACA,MACE,MACA,WAAW,SAKR;IACH,OAAO,OAAO,cAAc;KAC1B,IAAI,UAAU;KAyFd,QAlFE,UAAU,KAAA,IACN,OAAO,IAAI,aAAa;MACtB,IAAI,CAAC,MAAM,QAAQ,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;MAC1D,UAAU;MACV,MAAM;MACN,IAAI,CAAC,UACH,OAAO,OAAO,OAAO,eACnB,MACA,QAAQ,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,KAClC,QAAQ,IAAI,sBAAsB,MAAM,MAAM,OAAO,CACvD,CACF;MACF,UAAU,CAAC,MAAM,QAAQ,CAAC,MAAM,QAAQ;MACxC,MAAM,OAAO;MAiBb,QAAO,OAfe,kBACnB,YACC,OAAO,IAAI,aAAa;OACtB,MAAM,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAA,CAAS,CAAC;OAElD,OAAO,OAAO,OAAO,eACnB,MACA,QAAQ,KAAK,UAAU;QAAE,GAAG,MAAM;QAAO;OAAQ,CAAC,CAAC,CAAC,KAClD,QAAQ,IAAI,sBAAsB,OAAO,CAC3C,CACF;MACF,CAAC,GACH,EAAE,MAAM,cAAc,KAAK,CAC7B,EAAA,CAEc;KAChB,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;MAChB,IAAI,SAAS,MAAM;MACnB,IAAI,KAAK,SAAS,WAAW,MAAM,WAAW;KAChD,CAAC,CACH,CACF,IACA,OAAO,IAAI,aAAa;MACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;MAClE,OAAO,cAAc,gBAAgB,SAAS,QAAQ,kBAAkB;MACxE,MAAM,SAAS,OAAO;MAqCtB,QAAO,OAnCe,kBACnB,YAAY;OACX,MAAM,OAAO,OACX,OAAO,IAAI,aAAa;QACtB,MAAM,QAAQ,qBAAqB,IAAI,SAAS,QAAQ,aAAa;SACnE,QAAQ,SAAS;SACjB,OAAO,cAAc,SAAS;SAC9B,SAAS,cAAc;SACvB,OAAO,cAAc,YAAY;SACjC,SAAS,cAAc;QACzB,CAAC;QAED,MAAM,QAAQ,OAAO,OAAO,eAC1B,MACA,QAAQ,KAAK,UAAU,KAAK,CAAC,CAAC,KAC5B,QAAQ,IAAI,sBAAsB,OAAO,CAC3C,CACF;QAEA,OAAO,MAAM,OAAO;QACpB,IAAI,cAAc,SAAS,SACzB,OAAO,GAAG,QAAQ,MAAM,MAAM,UAAU;QAE1C,OAAO;OACT,CAAC;OAEH,OAAO,cAAc,SAAS,UAC1B,IAAI,QAAQ,IACZ,cAAc,gBAAgB,KAAA,IAC5B,cAAc,YAAY,UAAU,GAAG,IACvC,SAAS,YAAY,GAAG;MAChC,GACA,EAAE,MAAM,cAAc,KAAK,CAC7B,EAAA,CAEc;KAChB,CAAC,EAAA,CAEK,KACV,OAAO,eAAe,OAAO,QAAQ,MAAM,IAC1C,cAAc,yBAAyB,WAAW,WAAW,GAC9D,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;IACF,CAAC;GACH;EACF;CACF,CAAC;CAED,MAAM,8BAYJ,UACA,UACA,eACA,UACA,aACA,OACA,UACA,UASG;EACH,OAAO,OAAO,IAAI,aAAa;GAC7B,IAAI,OAAO,gBAAgB,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;GAClE,OAAO,cAAc,gBAAgB,SAAS,QAAQ,kBAAkB;GACxE,MAAM,SAAS,OAAO,OAAO;GAG7B,MAAM,YAAY,OAAO,SAAS,MAC/B,cAAc,yBAAyB,WAAW,WAAW,GAC9D,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;GAEA,MAAM,SAAS,OAAO,MAAM,KAAK,OAAO,SAAS,WAAW,CAAC;GAkE7D,QAAO,OAhEe,kBACnB,YAAY;IACX,MAAM,OAAO,OACX,OAAO,IAAI,aAAa;KACtB,MAAM,QAAQ,qBAAqB,IAAI,SAAS,QAAQ,aAAa;MACnE,QAAQ,SAAS;MACjB,OAAO,cAAc,SAAS;MAC9B,SAAS,cAAc;MACvB,OAAO,cAAc,YAAY;MACjC,SAAS,cAAc;KACzB,CAAC;KAED,MAAM,QAAmC;MACvC,OAAO;MACP,MAAM;MACN,UAAU;MACV,QAAQ;MACR,UAAU;KACZ;KAEA,OAAO,OAAO,OAAO,IAAI,aAAa;MACpC,MAAM,QAAQ,OAAO,MACnB,IACA,SACE,OAAO,yBACL,UACA,eACA,aACA,OACA,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,EAAE,CAAC,GAChD,SACF,IACC,cAAc;OACb,IAAI,CAAC,MAAM,QAAQ,MAAM,YAAY;OACrC,MAAM,WAAW,KAAK,SAAS;MACjC,CACF;MAEA,MAAM,SAAS;MACf,IAAI,MAAM,YAAY,MAAM,aAAa,GACvC,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;MACzC,OAAO,MAAM,OAAO;MACpB,IAAI,cAAc,SAAS,SAAS,OAAO,GAAG,QAAQ,MAAM,MAAM,UAAU;MAE5E,OAAO;KACT,CAAC,CAAC,CAAC,KACD,OAAO,SACL,OAAO,WAAW;MAChB,MAAM,SAAS;KACjB,CAAC,CACH,CACF;IACF,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,OAAO,QAAQ,MAAM,CAAC;IAEtD,OAAO,cAAc,SAAS,UAC1B,IAAI,QAAQ,IACZ,cAAc,gBAAgB,KAAA,IAC5B,cAAc,YAAY,UAAU,GAAG,IACvC,SAAS,YAAY,GAAG;GAChC,GACA,EAAE,MAAM,cAAc,KAAK,CAC7B,EAAA,CAEc;EAChB,CAAC;CACH;CAEA,OAAO;EACL;EACA;EACA;CACF;AACF"}

package/dist/internal/transaction-kernel.d.mts

@@ -1,81 +0,0 @@
-import { QueryOperations, SqlColumn, SqlExpression, SqlFragment } from "./query-operations.mjs";
-import { Context, Effect } from "effect";
-import { Statement } from "effect/sql/Statement";
-import { CommitJournal, PreparedCommit } from "@yielded/auth/Hooks";
-import * as SqlClient$1 from "effect/sql/SqlClient";
-import { SqlError } from "effect/sql/SqlError";
-//#region src/internal/transaction-kernel.d.ts
-type Table = object;
-export type Row = Record<string, any>;
-export interface TransactionNativeDatabase {
-  readonly $client: SqlClient$1.SqlClient & {
-    readonly batch: (statements: ReadonlyArray<Statement<any>>) => Effect.Effect<any, SqlError>;
-  };
-  readonly transaction: <A, E, R>(body: (transaction: any) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | SqlError, R>;
-}
-declare const NativeDatabase_base: Context.ServiceClass<NativeDatabase, "effect-auth/persistence/NativeDatabase", TransactionNativeDatabase>;
-/** Captured root database for service construction and pre-transaction catalog checks.
- * Active transactions remain owned by their coordinator and journal. */
-export declare class NativeDatabase extends NativeDatabase_base {}
-export interface Observation {
-  readonly table: Table;
-  readonly where: SqlExpression;
-  rows: ReadonlyArray<Row>;
-}
-/** Expressions deliberately do not replace observed values. Read only semantic
- * columns when telemetry changes atomically, and state the physical result. */
-export interface GuardedUpdate {
-  readonly rows: number;
-  readonly postcondition: SqlExpression;
-}
-export interface TransactionOwner<Failure> {
-  readonly database: any;
-  readonly journal: CommitJournal;
-  readonly marker: string;
-  readonly batch: boolean;
-  readonly observations: Observation[];
-  readonly postconditions: Array<SqlExpression | (() => SqlExpression)>;
-  readonly statements: Statement<any>[];
-  readonly guards: PreparedCommit<void>[];
-  exact(table: Table, row: Row): SqlExpression;
-  read(table: Table, where: SqlExpression, options?: {
-    readonly lock?: boolean;
-    readonly limit?: number;
-    readonly observe?: boolean;
-    readonly admissionOnly?: boolean;
-    readonly takeOnly?: boolean;
-    readonly orderBy?: any;
-    readonly columns?: ReadonlyArray<string>;
-  }): Effect.Effect<Observation, Failure>;
-  write(query: any): Effect.Effect<void, Failure>;
-  insert(table: Table, values: Row, key: Row, absent?: boolean): Effect.Effect<Observation, Failure>;
-  update(table: Table, key: Row, values: Row): Effect.Effect<void, Failure>;
-  updateGuarded(table: Table, where: SqlExpression, values: Row, guard: GuardedUpdate): Effect.Effect<void, Failure>;
-  /** Internal SQL only, run once after application work and before final guards. */
-  finalUpdate(table: Table, where: SqlExpression, values: Row, guard: GuardedUpdate): Effect.Effect<void, Failure>;
-  remove(table: Table, key: Row): Effect.Effect<void, Failure>;
-  check(condition: SqlExpression): Effect.Effect<boolean, Failure>;
-  now(clock: {
-    readonly engineNowMillis: SqlExpression;
-  }): Effect.Effect<number, Failure>;
-  finish(): Effect.Effect<void, Failure>;
-}
-export declare const makeTransactionKernel: <Fragment extends SqlFragment = SqlFragment, Column extends SqlColumn = SqlColumn>(operations: QueryOperations<Fragment, Column>) => {
-  reportTransactionFailure: <A, E, R, Failure>(effect: Effect.Effect<A, E, R>, unavailable: () => Failure) => Effect.Effect<A, E, R>;
-  both: (...parts: ReadonlyArray<SqlExpression | undefined>) => Fragment;
-  makeTransactionRows: <Failure>(unavailable: () => Failure) => {
-    col: (table: Table, key: string) => Column;
-    equal: (table: Table, values: Row) => Fragment;
-    copiedRow: (row: Row) => Row;
-    matchesNativeRow: (table: Table, row: Row, key: Row) => boolean;
-  };
-  makeTransactionOwner: <Failure>(database: any, journal: CommitJournal, marker: string, unavailable: () => Failure, configuration: {
-    readonly client?: any;
-    readonly batch: boolean;
-    readonly locking: boolean;
-    readonly mysql: boolean;
-    readonly dialect: "pg" | "mysql" | "sqlite";
-  }) => TransactionOwner<Failure>;
-};
-//#endregion
-//# sourceMappingURL=transaction-kernel.d.mts.map

package/dist/internal/transaction-kernel.mjs

@@ -1,264 +0,0 @@
-import { Cause, Context, Effect } from "effect";
-import "@yielded/auth/Hooks";
-import { reportAuthFailure } from "@yielded/auth/Persistence";
-//#region src/internal/transaction-kernel.ts
-/** Captured root database for service construction and pre-transaction catalog checks.
-* Active transactions remain owned by their coordinator and journal. */
-var NativeDatabase = class extends Context.Service()("effect-auth/persistence/NativeDatabase") {};
-const makeTransactionKernel = (operations) => {
-	const { eq, getTableColumns, isNull, sql, balancedD1And, compactD1GeneratedStatement } = operations;
-	const isUnavailableCause = (cause, unavailable) => {
-		const expected = unavailable();
-		const tag = typeof expected === "object" && expected !== null && "_tag" in expected ? expected._tag : void 0;
-		return tag !== void 0 && cause.reasons.length > 0 && cause.reasons.every((reason) => Cause.isFailReason(reason) && typeof reason.error === "object" && reason.error !== null && "_tag" in reason.error && reason.error._tag === tag);
-	};
-	/** Report once, before an adapter replaces the raw cause with its public
-	* unavailable error. Already translated failures stay quiet at outer owners. */
-	const reportTransactionFailure = (effect, unavailable) => Effect.catchCause(effect, (cause) => isUnavailableCause(cause, unavailable) ? Effect.failCause(cause) : reportAuthFailure("auth-persistence", cause).pipe(Effect.andThen(Effect.failCause(cause))));
-	const both = (...parts) => balancedD1And(...parts) ?? sql`1 = 1`;
-	const makeTransactionRows = (unavailable) => {
-		const invariant = (value) => {
-			if (!value) throw unavailable();
-		};
-		const col = (table, key) => {
-			const value = getTableColumns(table)[key];
-			invariant(value !== void 0);
-			return value;
-		};
-		const equal = (table, values) => both(...Object.entries(values).map(([key, value]) => value === null ? isNull(col(table, key)) : eq(col(table, key), value)));
-		/** Mapped driver values use plain data, Dates and binary views. Application
-		* identity classes are reconstructed by the mapped codecs, never cloned here. */
-		const copiedRow = (row) => {
-			const seen = /* @__PURE__ */ new WeakSet();
-			const supported = (value) => {
-				if (value === null || typeof value !== "object" || seen.has(value)) return;
-				seen.add(value);
-				if (value instanceof Date || value instanceof ArrayBuffer || ArrayBuffer.isView(value)) return;
-				invariant(Array.isArray(value) || Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
-				for (const item of Object.values(value)) supported(item);
-			};
-			supported(row);
-			return structuredClone(row);
-		};
-		const nativeKey = (value) => {
-			const packed = (tag, text) => tag + text.length + ":" + text;
-			if (value instanceof Date) return packed("date", value.toISOString());
-			if (typeof value === "bigint") return packed("bigint", value.toString());
-			const bytes = value instanceof ArrayBuffer ? new Uint8Array(value) : ArrayBuffer.isView(value) ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength) : void 0;
-			if (bytes !== void 0) return packed("bytes", Array.from(bytes).join(","));
-			if (value === null || typeof value !== "object") return packed(typeof value, String(value));
-			if (Array.isArray(value)) return packed("array", value.map(nativeKey).join(""));
-			invariant(Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
-			return packed("object", Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([name, item]) => nativeKey(name) + nativeKey(item)).join(""));
-		};
-		const matchesNativeRow = (table, row, key) => Object.entries(key).every(([name, value]) => {
-			if (value === null || row[name] === null) return value === row[name];
-			const column = col(table, name);
-			return nativeKey(column.mapToDriverValue(row[name])) === nativeKey(column.mapToDriverValue(value));
-		});
-		return {
-			col,
-			equal,
-			copiedRow,
-			matchesNativeRow
-		};
-	};
-	const makeTransactionOwner = (database, journal, marker, unavailable, configuration) => {
-		const invariant = (value) => {
-			if (!value) throw unavailable();
-		};
-		const { col, equal, matchesNativeRow } = makeTransactionRows(unavailable);
-		let phase = "open";
-		let poisoned = false;
-		const open = () => invariant(phase === "open" && !poisoned);
-		const result = (effect) => effect.pipe((operation) => reportTransactionFailure(operation, unavailable), Effect.mapError(unavailable), Effect.catchDefect(() => Effect.fail(unavailable())), Effect.onExit((exit) => Effect.sync(() => {
-			if (exit._tag === "Failure") poisoned = true;
-		})));
-		const observations = [];
-		const statements = [];
-		const postconditions = [];
-		const guards = [];
-		const finalUpdates = [];
-		const exactRow = (table, row) => both(...Object.entries(row).map(([key, value]) => {
-			if (typeof value !== "string") return equal(table, { [key]: value });
-			const column = col(table, key), bound = sql.param(value, column);
-			return configuration.dialect === "mysql" ? sql`binary ${column} = binary ${bound}` : configuration.dialect === "pg" ? sql`convert_to(cast(${column} as text), 'UTF8') = convert_to(cast(${bound} as text), 'UTF8')` : sql`cast(${column} as blob) = cast(${bound} as blob)`;
-		}));
-		const toStatement = (query) => {
-			const rendered = query.toSQL();
-			const client = configuration.client ?? database.$client;
-			return compactD1GeneratedStatement(client, client.unsafe(rendered.sql, rendered.params), unavailable);
-		};
-		const assertion = (condition) => database.select({ value: sql`case when ${condition} then 1 else json_extract('[]', ${"$[oauth-owner-" + marker + "]"}) end` }).from(sql`(select 1) as oauth_assertion`);
-		const observedConditions = (table, where, rows) => [sql`(select count(*) from ${table} where ${where}) = ${rows.length}`, ...rows.map((row) => sql`exists(select 1 from ${table} where ${both(where, exactRow(table, row))})`)];
-		const chunks = (conditions) => {
-			const output = [];
-			let pending = [];
-			for (const condition of conditions) {
-				const candidate = [...pending, condition];
-				const rendered = assertion(both(...candidate)).toSQL();
-				if (pending.length > 0 && (rendered.params.length > 96 || new TextEncoder().encode(rendered.sql).length > 48e3)) {
-					output.push(both(...pending));
-					pending = [condition];
-				} else pending = candidate;
-			}
-			if (pending.length > 0) output.push(both(...pending));
-			return output;
-		};
-		const appendAssertions = (conditions) => {
-			for (const condition of chunks(conditions)) statements.push(toStatement(assertion(condition)));
-		};
-		const observed = (table, where, rows) => {
-			const observation = {
-				table,
-				where,
-				rows
-			};
-			observations.push(observation);
-			return observation;
-		};
-		const queryCondition = (condition) => database.select({ value: sql`case when ${condition} then 1 else 0 end`.mapWith(Number).as("value") }).from(sql`(select 1) as oauth_guard`);
-		const conditionHolds = (condition) => Effect.gen(function* () {
-			const query = queryCondition(condition);
-			const rows = yield* configuration.dialect === "sqlite" ? toStatement(query) : query;
-			const row = rows[0];
-			invariant(rows.length === 1 && row !== void 0);
-			return Object.values(row)[0] === 1;
-		});
-		const guardedQuery = (table, where, values, guard) => {
-			invariant(Number.isSafeInteger(guard.rows) && guard.rows > 0 && guard.rows <= 128);
-			return {
-				query: database.update(table).set(values).where(where),
-				guard: { ...guard }
-			};
-		};
-		const applyGuarded = (entry) => Effect.gen(function* () {
-			if (configuration.batch) {
-				statements.push(toStatement(entry.query));
-				statements.push(toStatement(assertion(sql`changes() = ${entry.guard.rows}`)));
-				appendAssertions([entry.guard.postcondition]);
-			} else {
-				if (configuration.mysql) {
-					const changed = yield* entry.query;
-					invariant(changed.affectedRows === entry.guard.rows);
-				} else {
-					const changed = yield* entry.query.returning({ value: sql`1` });
-					invariant(changed.length === entry.guard.rows);
-				}
-				invariant(yield* conditionHolds(entry.guard.postcondition));
-			}
-		});
-		const owner = {
-			database,
-			journal,
-			marker,
-			batch: configuration.batch,
-			observations,
-			statements,
-			postconditions,
-			guards,
-			exact: exactRow,
-			read: (table, where, options = {}) => result(Effect.gen(function* () {
-				open();
-				const limit = options.limit ?? 64;
-				let query = database.select(options.columns === void 0 ? void 0 : Object.fromEntries(options.columns.map((key) => [key, col(table, key)]))).from(table).where(where).limit(options.takeOnly ? limit : limit + 1);
-				if (options.orderBy !== void 0) query = query.orderBy(options.orderBy);
-				if (options.lock !== false && configuration.locking) query = query.for("update");
-				const rows = yield* query;
-				invariant(rows.length <= limit);
-				if (configuration.batch && (options.observe !== false || options.admissionOnly)) appendAssertions(observedConditions(table, where, rows));
-				return options.observe === false || options.admissionOnly ? {
-					table,
-					where,
-					rows
-				} : observed(table, where, rows);
-			})),
-			write: (query) => result(Effect.gen(function* () {
-				open();
-				if (configuration.batch) statements.push(toStatement(query));
-				else yield* query;
-			})),
-			insert: (table, values, key, absent = false) => result(Effect.gen(function* () {
-				open();
-				let query = database.insert(table).values(values);
-				if (absent) query = configuration.mysql ? query.onDuplicateKeyUpdate({ set: { [Object.keys(key)[0]]: col(table, Object.keys(key)[0]) } }) : query.onConflictDoNothing();
-				yield* owner.write(query);
-				const where = equal(table, key);
-				if (configuration.batch) return observed(table, where, [values]);
-				const found = yield* owner.read(table, where, { limit: 1 });
-				const markerColumn = Object.keys(values).find((key) => values[key] === marker);
-				if (!absent || markerColumn !== void 0 && found.rows[0]?.[markerColumn] === marker) invariant(yield* owner.check(sql`exists(select 1 from ${table} where ${both(where, exactRow(table, values))})`));
-				return found;
-			})),
-			update: (table, key, values) => result(Effect.gen(function* () {
-				open();
-				yield* owner.write(database.update(table).set(values).where(equal(table, key)));
-				for (const observation of observations) if (observation.table === table) observation.rows = observation.rows.map((row) => matchesNativeRow(table, row, key) ? {
-					...row,
-					...values
-				} : row);
-			})),
-			updateGuarded: (table, where, values, guard) => result(Effect.gen(function* () {
-				open();
-				const entry = guardedQuery(table, where, values, guard);
-				yield* applyGuarded(entry);
-				postconditions.push(entry.guard.postcondition);
-			})),
-			finalUpdate: (table, where, values, guard) => result(Effect.sync(() => {
-				open();
-				invariant(finalUpdates.length < 128);
-				finalUpdates.push(guardedQuery(table, where, values, guard));
-			})),
-			remove: (table, key) => result(Effect.gen(function* () {
-				open();
-				yield* owner.write(database.delete(table).where(equal(table, key)));
-				for (const observation of observations) if (observation.table === table) observation.rows = observation.rows.filter((row) => !matchesNativeRow(table, row, key));
-			})),
-			check: (condition) => result(Effect.gen(function* () {
-				open();
-				const holds = yield* conditionHolds(condition);
-				if (configuration.batch) statements.push(toStatement(assertion(holds ? condition : sql`not (${condition})`)));
-				return holds;
-			})),
-			now: (clock) => result(Effect.gen(function* () {
-				open();
-				const value = (yield* database.select({ value: sql`${clock.engineNowMillis}`.mapWith(Number) }).from(sql`(select 1) as oauth_clock`))[0]?.value;
-				invariant(Number.isSafeInteger(value) && value >= 0);
-				return value;
-			})),
-			finish: () => result(Effect.gen(function* () {
-				open();
-				phase = "finishing";
-				Object.freeze(observations);
-				Object.freeze(postconditions);
-				Object.freeze(guards);
-				Object.freeze(finalUpdates);
-				const conditions = observations.flatMap((observation) => observedConditions(observation.table, observation.where, observation.rows));
-				conditions.push(...postconditions.map((condition) => typeof condition === "function" ? condition() : condition));
-				conditions.push(...finalUpdates.map((entry) => entry.guard.postcondition));
-				for (const guard of guards) {
-					const status = yield* Effect.result(guard.read);
-					invariant(status._tag === "Failure" && status.failure._tag === "CommitPending");
-				}
-				invariant(!poisoned);
-				for (const entry of finalUpdates) yield* applyGuarded(entry);
-				if (configuration.batch) appendAssertions(conditions);
-				else for (const condition of chunks(conditions)) invariant(yield* conditionHolds(condition));
-				invariant(!poisoned);
-			}).pipe(Effect.ensuring(Effect.sync(() => {
-				phase = "finished";
-			}))))
-		};
-		return owner;
-	};
-	return {
-		reportTransactionFailure,
-		both,
-		makeTransactionRows,
-		makeTransactionOwner
-	};
-};
-//#endregion
-export { NativeDatabase, makeTransactionKernel };
-
-//# sourceMappingURL=transaction-kernel.mjs.map