@yielded/auth 0.1.0-beta.1

package/dist/drizzle/model.mjs

@@ -0,0 +1,81 @@
+import { AuthStoreError } from "../Errors.mjs";
+import { AuthStore } from "../AuthStore.mjs";
+import { ExternalIdentityMutation } from "../identity/ExternalIdentityMutation.mjs";
+import { SubjectProvisioner } from "../identity/SubjectProvisioner.mjs";
+import { OAuthStateStore } from "../oauth/OAuthStateStore.mjs";
+import { Cause, Context, DateTime, Effect, Layer, Option, Schema } from "effect";
+import { getTableColumns } from "drizzle-orm";
+//#region src/drizzle/model.ts
+const requireStandaloneConsume = (database) => Effect.serviceOption(database.$client.transactionService).pipe(Effect.flatMap(Option.match({
+	onNone: () => Effect.void,
+	onSome: () => AuthStoreError.make({ message: "Use the decision consume API inside an outer database transaction" })
+})));
+var DrizzleMappingError = class extends Schema.TaggedError()("DrizzleMappingError", {
+	operation: Schema.NonEmptyString,
+	cause: Schema.Defect()
+}) {};
+const requiredAuthConstraints = {
+	series: "unique(namespace,value,purpose)",
+	challengeDigest: "unique(tokenDigest)",
+	registrationDigest: "unique(tokenDigest)",
+	oauthStateDigest: "unique(stateDigest)"
+};
+const requiredAuthStoreConstraints = {
+	series: "unique(namespace,value,purpose)",
+	challengeDigest: "unique(tokenDigest)",
+	registrationDigest: "unique(tokenDigest)"
+};
+const requiredOAuthStateConstraints = { oauthStateDigest: "unique(stateDigest)" };
+const requiredIdentityConstraints = {
+	identifier: "unique(namespace,value)",
+	externalIdentity: "unique(provider,issuer,subject)",
+	provisioningRequest: "unique(requestId)",
+	provisioningSubject: "notNull(provisioningRequest.subjectId)"
+};
+const requiredSubjectProvisioningConstraints = {
+	identifier: "unique(namespace,value)",
+	provisioningRequest: "unique(requestId)",
+	provisioningSubject: "notNull(provisioningRequest.subjectId)"
+};
+const requiredExternalIdentityConstraints = { externalIdentity: "unique(provider,issuer,subject)" };
+const provisioningFingerprint = (input) => JSON.stringify(input.identifier === void 0 ? ["v1", null] : [
+	"v1",
+	input.identifier.namespace,
+	input.identifier.value,
+	input.verifiedAt === void 0 ? null : DateTime.toEpochMillis(input.verifiedAt)
+]);
+/**
+* Drizzle wraps Effect SQL failures before adapters observe them. Give the
+* consumer classifier each semantic wrapper in the short `cause`/`reason`
+* chain without exposing query text or bound parameters through public errors.
+*/
+const isMappedConstraintConflict = (classify, failure) => {
+	const seen = /* @__PURE__ */ new Set();
+	const pending = [failure];
+	for (let inspected = 0; inspected < 24 && pending.length > 0; inspected++) {
+		const current = pending.shift();
+		if (current === void 0 || current === null || seen.has(current)) continue;
+		seen.add(current);
+		if (classify(current)) return true;
+		if (Cause.isCause(current)) {
+			for (const reason of current.reasons) if (Cause.isFailReason(reason)) pending.push(reason.error);
+			else if (Cause.isDieReason(reason)) pending.push(reason.defect);
+			continue;
+		}
+		if (typeof current !== "object") continue;
+		const wrapped = current;
+		if (wrapped.cause !== void 0) pending.push(wrapped.cause);
+		if (wrapped.reason !== void 0) pending.push(wrapped.reason);
+	}
+	return false;
+};
+const column = (table, key) => getTableColumns(table)[key];
+const updateValues = (entries) => Object.fromEntries(entries);
+/** Acquire an application database in Effect and expose the auth stores as one layer. */
+const authServicesLayer = (acquire) => Layer.effectContext(Effect.map(acquire, ({ authStore, oauthStateStore }) => Context.make(AuthStore, authStore).pipe(Context.add(OAuthStateStore, oauthStateStore))));
+/** Acquire an application database in Effect and expose the identity services as one layer. */
+const identityServicesLayer = (acquire) => Layer.effectContext(Effect.map(acquire, ({ subjectProvisioner, externalIdentityMutation }) => Context.make(SubjectProvisioner, subjectProvisioner).pipe(Context.add(ExternalIdentityMutation, externalIdentityMutation))));
+//#endregion
+export { DrizzleMappingError, authServicesLayer, column, identityServicesLayer, isMappedConstraintConflict, provisioningFingerprint, requireStandaloneConsume, requiredAuthConstraints, requiredAuthStoreConstraints, requiredExternalIdentityConstraints, requiredIdentityConstraints, requiredOAuthStateConstraints, requiredSubjectProvisioningConstraints, updateValues };
+
+//# sourceMappingURL=model.mjs.map

package/dist/drizzle/model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.mjs","names":[],"sources":["../../src/drizzle/model.ts"],"sourcesContent":["import {\n  getTableColumns,\n  type AnyColumn,\n  type InferInsertModel,\n  type InferSelectModel,\n  type Table,\n} from \"drizzle-orm\";\nimport { Cause, Context, DateTime, Effect, Layer, Option, Schema } from \"effect\";\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\";\n\nimport { AuthStore } from \"../AuthStore\";\nimport { AuthStoreError } from \"../Errors\";\nimport { ExternalIdentityMutation } from \"../identity/ExternalIdentityMutation\";\nimport type { ExternalIdentity, LoginIdentifier } from \"../identity/models\";\nimport { SubjectProvisioner, type SubjectProvisioningInput } from \"../identity/SubjectProvisioner\";\nimport { OAuthStateStore } from \"../oauth/OAuthStateStore\";\nimport type { OAuthState } from \"../oauth/schema\";\nimport {\n  type ConsumeChallenge,\n  type NewChallenge,\n  type NewRegistration,\n  type PendingRegistration,\n  type SubjectId,\n} from \"../Schema\";\n\nexport type CommitMode = \"interactive\" | \"synchronous\" | \"batch\";\n\n/**\n * Ordinary error-channel consumes must own their commit. Coordinated callers\n * use the decision methods inside their outer transaction and translate only\n * after that owner commits.\n */\nexport interface SqlClientTransactionDatabase {\n  readonly $client: Pick<SqlClient.SqlClient, \"transactionService\">;\n}\n\nexport const requireStandaloneConsume = (\n  database: SqlClientTransactionDatabase,\n): Effect.Effect<void, AuthStoreError> =>\n  Effect.serviceOption(database.$client.transactionService).pipe(\n    Effect.flatMap(\n      Option.match({\n        onNone: () => Effect.void,\n        onSome: () =>\n          AuthStoreError.make({\n            message: \"Use the decision consume API inside an outer database transaction\",\n          }),\n      }),\n    ),\n  );\n\nexport type { ChallengeConsumeDecision } from \"../internal/AuthStoreDecisions\";\nexport type { ConsumeDecision } from \"../auth/ConsumeDecision\";\n\nexport class DrizzleMappingError extends Schema.TaggedError<DrizzleMappingError>()(\n  \"DrizzleMappingError\",\n  { operation: Schema.NonEmptyString, cause: Schema.Defect() },\n) {}\n\nexport interface InstantCodec<NativeInstant> {\n  readonly encode: (instant: DateTime.Utc) => NativeInstant;\n  readonly decode: (native: NativeInstant) => Effect.Effect<DateTime.Utc, DrizzleMappingError>;\n}\n\nexport interface RequiredAuthStoreConstraints {\n  readonly series: \"unique(namespace,value,purpose)\";\n  readonly challengeDigest: \"unique(tokenDigest)\";\n  readonly registrationDigest: \"unique(tokenDigest)\";\n}\n\nexport interface RequiredOAuthStateConstraints {\n  readonly oauthStateDigest: \"unique(stateDigest)\";\n}\n\nexport interface RequiredAuthConstraints\n  extends RequiredAuthStoreConstraints, RequiredOAuthStateConstraints {}\n\nexport const requiredAuthConstraints: RequiredAuthConstraints = {\n  series: \"unique(namespace,value,purpose)\",\n  challengeDigest: \"unique(tokenDigest)\",\n  registrationDigest: \"unique(tokenDigest)\",\n  oauthStateDigest: \"unique(stateDigest)\",\n};\n\nexport const requiredAuthStoreConstraints: RequiredAuthStoreConstraints = {\n  series: \"unique(namespace,value,purpose)\",\n  challengeDigest: \"unique(tokenDigest)\",\n  registrationDigest: \"unique(tokenDigest)\",\n};\n\nexport const requiredOAuthStateConstraints: RequiredOAuthStateConstraints = {\n  oauthStateDigest: \"unique(stateDigest)\",\n};\n\ntype ColumnKey<T extends Table> = Extract<keyof T[\"_\"][\"columns\"], string>;\n\nexport interface ChallengeRecord {\n  readonly challenge: NewChallenge;\n  readonly namespace: string;\n  readonly failedAttempts: number;\n  readonly consumed: boolean;\n}\n\nexport interface ChallengeColumns<T extends Table> {\n  readonly challengeId: ColumnKey<T>;\n  readonly tokenDigest: ColumnKey<T>;\n  readonly namespace: ColumnKey<T>;\n  readonly value: ColumnKey<T>;\n  readonly purpose: ColumnKey<T>;\n  readonly otpKeyId: ColumnKey<T>;\n  readonly otpDigest: ColumnKey<T>;\n  readonly issuedAt: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly attemptLimit: ColumnKey<T>;\n  readonly failedAttempts: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\n/**\n * Inputs are immutable server-created issuances. Replacements must advance\n * issuedAt; equal or older issuances fail even after consumption or expiry.\n * Instant encoding must preserve this ordering. Retain the series row as an\n * issuance watermark until every previously accepted issuance has expired;\n * current-row expiry alone is insufficient if historical lifetimes were longer.\n */\nexport interface ChallengeTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: ChallengeColumns<T>;\n  readonly identifierNamespace: string;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (\n    input: NewChallenge,\n    state: {\n      readonly namespace: string;\n      readonly failedAttempts: number;\n      readonly consumed: false;\n    },\n  ) => InferInsertModel<T>;\n  readonly encodeUpdate: (\n    input: NewChallenge,\n    state: {\n      readonly namespace: string;\n      readonly failedAttempts: unknown;\n      readonly consumed: false;\n    },\n  ) => Readonly<Record<string, unknown>>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<ChallengeRecord, DrizzleMappingError>;\n}\n\nexport interface RegistrationRecord {\n  readonly registration: PendingRegistration;\n  readonly consumed: boolean;\n}\n\nexport interface RegistrationColumns<T extends Table> {\n  readonly registrationId: ColumnKey<T>;\n  readonly tokenDigest: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\nexport interface RegistrationTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: RegistrationColumns<T>;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (input: NewRegistration, consumed: false) => InferInsertModel<T>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<RegistrationRecord, DrizzleMappingError>;\n}\n\nexport interface OAuthStateColumns<T extends Table> {\n  readonly stateDigest: ColumnKey<T>;\n  readonly expiresAt: ColumnKey<T>;\n  readonly consumed: ColumnKey<T>;\n}\n\nexport interface OAuthStateTableMapping<T extends Table> {\n  readonly table: T;\n  readonly columns: OAuthStateColumns<T>;\n  readonly encodeInstant: (instant: DateTime.Utc) => unknown;\n  readonly encodeInsert: (state: OAuthState, consumed: false) => InferInsertModel<T>;\n  readonly decode: (\n    row: InferSelectModel<T>,\n  ) => Effect.Effect<\n    { readonly state: OAuthState; readonly consumed: boolean },\n    DrizzleMappingError\n  >;\n}\n\nexport interface AuthStoreTables<Challenge extends Table, Registration extends Table> {\n  readonly constraints: RequiredAuthStoreConstraints;\n  readonly challenge: ChallengeTableMapping<Challenge>;\n  readonly registration: RegistrationTableMapping<Registration>;\n}\n\nexport interface OAuthStateTables<State extends Table> {\n  readonly constraints: RequiredOAuthStateConstraints;\n  readonly oauthState: OAuthStateTableMapping<State>;\n}\n\nexport interface AuthTables<\n  Challenge extends Table,\n  Registration extends Table,\n  State extends Table,\n> {\n  readonly constraints: RequiredAuthConstraints;\n  readonly challenge: ChallengeTableMapping<Challenge>;\n  readonly registration: RegistrationTableMapping<Registration>;\n  readonly oauthState: OAuthStateTableMapping<State>;\n}\n\nexport interface RequiredIdentityConstraints {\n  readonly identifier: \"unique(namespace,value)\";\n  readonly externalIdentity: \"unique(provider,issuer,subject)\";\n  readonly provisioningRequest: \"unique(requestId)\";\n  readonly provisioningSubject: \"notNull(provisioningRequest.subjectId)\";\n}\n\nexport interface RequiredSubjectProvisioningConstraints {\n  readonly identifier: \"unique(namespace,value)\";\n  readonly provisioningRequest: \"unique(requestId)\";\n  readonly provisioningSubject: \"notNull(provisioningRequest.subjectId)\";\n}\n\nexport interface RequiredExternalIdentityConstraints {\n  readonly externalIdentity: \"unique(provider,issuer,subject)\";\n}\n\nexport const requiredIdentityConstraints: RequiredIdentityConstraints = {\n  identifier: \"unique(namespace,value)\",\n  externalIdentity: \"unique(provider,issuer,subject)\",\n  provisioningRequest: \"unique(requestId)\",\n  provisioningSubject: \"notNull(provisioningRequest.subjectId)\",\n};\n\nexport const requiredSubjectProvisioningConstraints: RequiredSubjectProvisioningConstraints = {\n  identifier: \"unique(namespace,value)\",\n  provisioningRequest: \"unique(requestId)\",\n  provisioningSubject: \"notNull(provisioningRequest.subjectId)\",\n};\n\nexport const requiredExternalIdentityConstraints: RequiredExternalIdentityConstraints = {\n  externalIdentity: \"unique(provider,issuer,subject)\",\n};\n\nexport interface SubjectIdCodec<NativeId> {\n  readonly toNative: (id: SubjectId) => Effect.Effect<NativeId, DrizzleMappingError>;\n  readonly toSubject: (id: NativeId) => Effect.Effect<SubjectId, DrizzleMappingError>;\n  readonly equals: (left: NativeId, right: NativeId) => boolean;\n}\n\nexport interface SubjectProvisioningTables<\n  Subject extends Table,\n  Identifier extends Table,\n  Request extends Table,\n  NativeId,\n> {\n  readonly constraints: RequiredSubjectProvisioningConstraints;\n  readonly subject: {\n    readonly table: Subject;\n    readonly id: ColumnKey<Subject>;\n    readonly status: ColumnKey<Subject>;\n    readonly isActiveStatus: (value: unknown) => boolean;\n    readonly encodeInsert: (\n      input: SubjectProvisioningInput,\n      allocatedId: NativeId | undefined,\n    ) => InferInsertModel<Subject>;\n    readonly allocateId?: Effect.Effect<NativeId, DrizzleMappingError>;\n    /** Required instead of allocateId when a synchronous-only DO transaction preallocates IDs. */\n    readonly allocateIdSync?: () => NativeId;\n    /** Decodes MySQL `$returningId()` for an autoincrement/runtime-default key. */\n    readonly decodeGeneratedId?: (\n      rows: ReadonlyArray<unknown>,\n    ) => Effect.Effect<NativeId, DrizzleMappingError>;\n  };\n  readonly identifier: {\n    readonly table: Identifier;\n    readonly namespace: ColumnKey<Identifier>;\n    readonly value: ColumnKey<Identifier>;\n    readonly subjectId: ColumnKey<Identifier>;\n    readonly encodeInsert: (\n      identifier: LoginIdentifier,\n      subjectId: NativeId,\n      verifiedAt: DateTime.Utc | undefined,\n    ) => InferInsertModel<Identifier>;\n  };\n  readonly provisioningRequest: {\n    readonly table: Request;\n    readonly requestId: ColumnKey<Request>;\n    readonly fingerprint: ColumnKey<Request>;\n    readonly subjectId: ColumnKey<Request>;\n    readonly encodeInsert: (\n      requestId: string,\n      fingerprint: string,\n      subjectId: NativeId,\n    ) => InferInsertModel<Request>;\n  };\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  /** Narrows only database constraint failures; every other cause is unavailable. */\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\nexport interface ExternalIdentityTables<Subject extends Table, External extends Table, NativeId> {\n  readonly constraints: RequiredExternalIdentityConstraints;\n  readonly subject: {\n    readonly table: Subject;\n    readonly id: ColumnKey<Subject>;\n    readonly status: ColumnKey<Subject>;\n    readonly isActiveStatus: (value: unknown) => boolean;\n  };\n  readonly externalIdentity: {\n    readonly table: External;\n    readonly provider: ColumnKey<External>;\n    readonly issuer: ColumnKey<External>;\n    readonly subject: ColumnKey<External>;\n    readonly subjectId: ColumnKey<External>;\n    readonly encodeInsert: (\n      identity: ExternalIdentity,\n      subjectId: NativeId,\n    ) => InferInsertModel<External>;\n  };\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\nexport interface IdentityTables<\n  Subject extends Table,\n  Identifier extends Table,\n  External extends Table,\n  Request extends Table,\n  NativeId,\n> {\n  readonly constraints: RequiredIdentityConstraints;\n  readonly subject: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>[\"subject\"];\n  readonly identifier: SubjectProvisioningTables<\n    Subject,\n    Identifier,\n    Request,\n    NativeId\n  >[\"identifier\"];\n  readonly externalIdentity: ExternalIdentityTables<\n    Subject,\n    External,\n    NativeId\n  >[\"externalIdentity\"];\n  readonly provisioningRequest: SubjectProvisioningTables<\n    Subject,\n    Identifier,\n    Request,\n    NativeId\n  >[\"provisioningRequest\"];\n  readonly subjectId: SubjectIdCodec<NativeId>;\n  readonly isConstraintConflict: (cause: unknown) => boolean;\n}\n\n/** Extra encoders used by D1's ordered batch when the subject id is database-generated. */\nexport interface D1SubjectProvisioningMapping<\n  Subject extends Table,\n  Identifier extends Table,\n  Request extends Table,\n  NativeId,\n> extends SubjectProvisioningTables<Subject, Identifier, Request, NativeId> {\n  readonly d1: {\n    readonly requestInsertWithoutSubject: (\n      requestId: string,\n      fingerprint: string,\n    ) => Partial<InferInsertModel<Request>>;\n    readonly identifierInsertWithoutSubject: (\n      identifier: LoginIdentifier,\n      verifiedAt: DateTime.Utc | undefined,\n    ) => Partial<InferInsertModel<Identifier>>;\n    /** Unshadowed hidden-rowid alias; omit for WITHOUT ROWID or preallocated IDs. */\n    readonly generatedRowIdAlias?: \"rowid\" | \"_rowid_\" | \"oid\";\n  };\n}\n\nexport interface D1ExternalIdentityMapping<\n  Subject extends Table,\n  External extends Table,\n  NativeId,\n> extends ExternalIdentityTables<Subject, External, NativeId> {\n  readonly d1: {\n    readonly activeStatusValue: unknown;\n  };\n}\n\nexport interface D1GeneratedIdentityMapping<\n  Subject extends Table,\n  Identifier extends Table,\n  External extends Table,\n  Request extends Table,\n  NativeId,\n> extends IdentityTables<Subject, Identifier, External, Request, NativeId> {\n  readonly d1: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>[\"d1\"] &\n    D1ExternalIdentityMapping<Subject, External, NativeId>[\"d1\"];\n}\n\nexport const provisioningFingerprint = (input: SubjectProvisioningInput): string =>\n  // oxlint-disable-next-line no-restricted-properties -- stable internal provisioning fingerprint, never external JSON.\n  JSON.stringify(\n    input.identifier === undefined\n      ? [\"v1\", null]\n      : [\n          \"v1\",\n          input.identifier.namespace,\n          input.identifier.value,\n          input.verifiedAt === undefined ? null : DateTime.toEpochMillis(input.verifiedAt),\n        ],\n  );\n\n/**\n * Drizzle wraps Effect SQL failures before adapters observe them. Give the\n * consumer classifier each semantic wrapper in the short `cause`/`reason`\n * chain without exposing query text or bound parameters through public errors.\n */\nexport const isMappedConstraintConflict = (\n  classify: (cause: unknown) => boolean,\n  failure: unknown,\n): boolean => {\n  const seen = new Set<unknown>();\n  const pending: Array<unknown> = [failure];\n\n  for (let inspected = 0; inspected < 24 && pending.length > 0; inspected++) {\n    const current = pending.shift();\n\n    if (current === undefined || current === null || seen.has(current)) continue;\n    seen.add(current);\n    if (classify(current)) return true;\n    if (Cause.isCause(current)) {\n      for (const reason of current.reasons) {\n        if (Cause.isFailReason(reason)) pending.push(reason.error);\n        else if (Cause.isDieReason(reason)) pending.push(reason.defect);\n      }\n      continue;\n    }\n    if (typeof current !== \"object\") continue;\n    const wrapped = current as { readonly cause?: unknown; readonly reason?: unknown };\n\n    if (wrapped.cause !== undefined) pending.push(wrapped.cause);\n    if (wrapped.reason !== undefined) pending.push(wrapped.reason);\n  }\n\n  return false;\n};\n\nexport const column = <T extends Table>(table: T, key: ColumnKey<T>): AnyColumn =>\n  getTableColumns(table)[key] as AnyColumn;\n\nexport const updateValues = <T extends Table>(\n  entries: ReadonlyArray<readonly [ColumnKey<T>, unknown]>,\n): Partial<InferInsertModel<T>> => Object.fromEntries(entries) as Partial<InferInsertModel<T>>;\n\nexport type ChallengeInput = ConsumeChallenge;\n\n/** Acquire an application database in Effect and expose the auth stores as one layer. */\nexport const authServicesLayer = <E, R>(\n  acquire: Effect.Effect<\n    {\n      readonly authStore: AuthStore[\"Service\"];\n      readonly oauthStateStore: OAuthStateStore[\"Service\"];\n    },\n    E,\n    R\n  >,\n) =>\n  Layer.effectContext(\n    Effect.map(acquire, ({ authStore, oauthStateStore }) =>\n      Context.make(AuthStore, authStore).pipe(Context.add(OAuthStateStore, oauthStateStore)),\n    ),\n  );\n\n/** Acquire an application database in Effect and expose the identity services as one layer. */\nexport const identityServicesLayer = <E, R>(\n  acquire: Effect.Effect<\n    {\n      readonly subjectProvisioner: SubjectProvisioner[\"Service\"];\n      readonly externalIdentityMutation: ExternalIdentityMutation[\"Service\"];\n    },\n    E,\n    R\n  >,\n) =>\n  Layer.effectContext(\n    Effect.map(acquire, ({ subjectProvisioner, externalIdentityMutation }) =>\n      Context.make(SubjectProvisioner, subjectProvisioner).pipe(\n        Context.add(ExternalIdentityMutation, externalIdentityMutation),\n      ),\n    ),\n  );\n"],"mappings":";;;;;;;;AAoCA,MAAa,4BACX,aAEA,OAAO,cAAc,SAAS,QAAQ,kBAAkB,CAAC,CAAC,KACxD,OAAO,QACL,OAAO,MAAM;CACX,cAAc,OAAO;CACrB,cACE,eAAe,KAAK,EAClB,SAAS,oEACX,CAAC;AACL,CAAC,CACH,CACF;AAKF,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CAAE,WAAW,OAAO;CAAgB,OAAO,OAAO,OAAO;AAAE,CAC7D,CAAC,CAAC,CAAC;AAoBH,MAAa,0BAAmD;CAC9D,QAAQ;CACR,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,MAAa,+BAA6D;CACxE,QAAQ;CACR,iBAAiB;CACjB,oBAAoB;AACtB;AAEA,MAAa,gCAA+D,EAC1E,kBAAkB,sBACpB;AA2IA,MAAa,8BAA2D;CACtE,YAAY;CACZ,kBAAkB;CAClB,qBAAqB;CACrB,qBAAqB;AACvB;AAEA,MAAa,yCAAiF;CAC5F,YAAY;CACZ,qBAAqB;CACrB,qBAAqB;AACvB;AAEA,MAAa,sCAA2E,EACtF,kBAAkB,kCACpB;AA0JA,MAAa,2BAA2B,UAEtC,KAAK,UACH,MAAM,eAAe,KAAA,IACjB,CAAC,MAAM,IAAI,IACX;CACE;CACA,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,MAAM,eAAe,KAAA,IAAY,OAAO,SAAS,cAAc,MAAM,UAAU;AACjF,CACN;;;;;;AAOF,MAAa,8BACX,UACA,YACY;CACZ,MAAM,uBAAO,IAAI,IAAa;CAC9B,MAAM,UAA0B,CAAC,OAAO;CAExC,KAAK,IAAI,YAAY,GAAG,YAAY,MAAM,QAAQ,SAAS,GAAG,aAAa;EACzE,MAAM,UAAU,QAAQ,MAAM;EAE9B,IAAI,YAAY,KAAA,KAAa,YAAY,QAAQ,KAAK,IAAI,OAAO,GAAG;EACpE,KAAK,IAAI,OAAO;EAChB,IAAI,SAAS,OAAO,GAAG,OAAO;EAC9B,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,KAAK,MAAM,UAAU,QAAQ,SAC3B,IAAI,MAAM,aAAa,MAAM,GAAG,QAAQ,KAAK,OAAO,KAAK;QACpD,IAAI,MAAM,YAAY,MAAM,GAAG,QAAQ,KAAK,OAAO,MAAM;GAEhE;EACF;EACA,IAAI,OAAO,YAAY,UAAU;EACjC,MAAM,UAAU;EAEhB,IAAI,QAAQ,UAAU,KAAA,GAAW,QAAQ,KAAK,QAAQ,KAAK;EAC3D,IAAI,QAAQ,WAAW,KAAA,GAAW,QAAQ,KAAK,QAAQ,MAAM;CAC/D;CAEA,OAAO;AACT;AAEA,MAAa,UAA2B,OAAU,QAChD,gBAAgB,KAAK,CAAC,CAAC;AAEzB,MAAa,gBACX,YACiC,OAAO,YAAY,OAAO;;AAK7D,MAAa,qBACX,YASA,MAAM,cACJ,OAAO,IAAI,UAAU,EAAE,WAAW,sBAChC,QAAQ,KAAK,WAAW,SAAS,CAAC,CAAC,KAAK,QAAQ,IAAI,iBAAiB,eAAe,CAAC,CACvF,CACF;;AAGF,MAAa,yBACX,YASA,MAAM,cACJ,OAAO,IAAI,UAAU,EAAE,oBAAoB,+BACzC,QAAQ,KAAK,oBAAoB,kBAAkB,CAAC,CAAC,KACnD,QAAQ,IAAI,0BAA0B,wBAAwB,CAChE,CACF,CACF"}

package/dist/drizzle/mysql-emails.d.mts

@@ -0,0 +1,82 @@
+import { SubjectId } from "../Schema.mjs";
+import { LoginIdentifier } from "../identity/models.mjs";
+import { HookConfigurationError } from "../hooks/models.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { PreparedCommit } from "../hooks/commit.mjs";
+import "../Hooks.mjs";
+import { EmailAddressDecision, EmailCredentialSnapshot } from "../email/models.mjs";
+import { EmailAddressMapping, EmailRegistrationMapping, EmailSignInMapping } from "./email-model.mjs";
+import { ProofCompletionInput } from "../proofs/ProofPersistence.mjs";
+import "../Identity.mjs";
+import "../Proofs.mjs";
+import { ProofPersistenceMapping } from "./proof-model.mjs";
+import { EmailUnavailable } from "../email/errors.mjs";
+import { EmailAddressMutation, EmailAddressPersistence, EmailAddressTarget, PrepareEmailCommit } from "../email/EmailAddressPersistence.mjs";
+import "../Email.mjs";
+import { EmailRegistrationAuthority } from "./email-registration.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
+import { SqlError } from "effect/unstable/sql/SqlError";
+import { AnyMySqlTable } from "drizzle-orm/mysql-core";
+//#region src/drizzle/mysql-emails.d.ts
+type Database = EffectMysql2Database<AnyRelations>;
+type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
+type ProofMapping = ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>;
+declare const makeMysqlEmailSignInServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailSignInMapping<S, I, C, NativeId>) => Effect.Effect<{
+  emailSignInTargets: {
+    readonly lookup: (input: {
+      readonly moduleId: string;
+      readonly identifier: LoginIdentifier;
+    }) => Effect.Effect<import("effect/Option").Option<EmailCredentialSnapshot>, EmailUnavailable>;
+  };
+}, never, never>;
+declare const makeMysqlEmailAddressServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
+  emailAddressPersistence: {
+    readonly target: (input: {
+      readonly moduleId: string;
+      readonly subjectId: SubjectId;
+      readonly target: LoginIdentifier;
+      readonly sourceCredentialId?: string;
+    }) => Effect.Effect<EmailAddressTarget, EmailUnavailable>;
+    readonly checkCompletion: (input: ProofCompletionInput) => Effect.Effect<boolean, EmailUnavailable>;
+    readonly verifyWithProof: <A>(input: EmailAddressMutation, prepare: PrepareEmailCommit<EmailAddressDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+    readonly changeWithProof: <A>(input: EmailAddressMutation, prepare: PrepareEmailCommit<EmailAddressDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+    readonly cleanup: <A>(input: {
+      readonly moduleId: string;
+      readonly limit: number;
+    }, prepare: PrepareEmailCommit<{
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly transaction?: never;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateMysqlEmailAddress<D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, M extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
+declare const makeMysqlEmailRegistrationServices: <Registration, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId>(database: Database, mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
+  registrationAuthority: EmailRegistrationAuthority<Registration>;
+}, never, LifecycleHooks>;
+declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
+  readonly transaction?: never;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateMysqlEmailRegistration<TargetId, Registration, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, Rq extends AnyMySqlTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices };
+//# sourceMappingURL=mysql-emails.d.mts.map

package/dist/drizzle/mysql-emails.mjs

@@ -0,0 +1,38 @@
+import { EmailAddressPersistence } from "../email/EmailAddressPersistence.mjs";
+import { coordinateTargetEmailAddress, coordinateTargetEmailRegistration, makeTargetEmailAddressServices, makeTargetEmailRegistrationServices, makeTargetEmailSignInServices, sqlClientEmailStandaloneGuard } from "./email-target.mjs";
+import { sqlClientProofStandaloneGuard } from "./proof-target.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/mysql-emails.ts
+const configuration = (database) => ({
+	mode: "interactive",
+	locking: true,
+	standaloneGuard: sqlClientEmailStandaloneGuard(database),
+	generatedSubjectRows: (query) => query.$returningId(),
+	proof: {
+		mode: "interactive",
+		locking: true,
+		standaloneGuard: sqlClientProofStandaloneGuard(database),
+		insertIfAbsent: (query, selfKey, selfValue) => query.onDuplicateKeyUpdate({ set: { [selfKey]: selfValue } })
+	}
+});
+const makeMysqlEmailSignInServices = (database, mapping) => makeTargetEmailSignInServices(database, mapping, configuration(database));
+const makeMysqlEmailAddressServices = (database, mapping, proofMapping) => makeTargetEmailAddressServices(database, mapping, proofMapping, configuration(database));
+function coordinateMysqlEmailAddress(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetEmailAddress(database, options.mapping, options.proofMapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+const makeMysqlEmailRegistrationServices = (database, mapping, proofMapping) => makeTargetEmailRegistrationServices(database, mapping, proofMapping, configuration(database));
+function coordinateMysqlEmailRegistration(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetEmailRegistration(database, options.mapping, options.proofMapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(options.target, services.registrationAuthority);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+//#endregion
+export { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices };
+
+//# sourceMappingURL=mysql-emails.mjs.map

package/dist/drizzle/mysql-emails.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-emails.mjs","names":[],"sources":["../../src/drizzle/mysql-emails.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectMysql2Database } from \"drizzle-orm/effect-mysql2\";\nimport type { AnyMySqlTable } from \"drizzle-orm/mysql-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport { EmailAddressPersistence } from \"../email/EmailAddressPersistence\";\nimport type { EmailUnavailable } from \"../email/errors\";\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport type {\n  EmailAddressMapping,\n  EmailRegistrationMapping,\n  EmailSignInMapping,\n} from \"./email-model\";\nimport type { EmailRegistrationAuthority } from \"./email-registration\";\nimport type { EmailSqlQuery } from \"./email-sql\";\nimport {\n  coordinateTargetEmailAddress,\n  coordinateTargetEmailRegistration,\n  makeTargetEmailAddressServices,\n  makeTargetEmailRegistrationServices,\n  makeTargetEmailSignInServices,\n  sqlClientEmailStandaloneGuard,\n} from \"./email-target\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = EffectMysql2Database<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\ntype ProofMapping = ProofPersistenceMapping<\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any\n>;\n\nconst configuration = (database: Database) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientEmailStandaloneGuard(database),\n  generatedSubjectRows: (query: EmailSqlQuery) => query.$returningId(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(database),\n    insertIfAbsent: (query: ProofSqlQuery, selfKey: string, selfValue: unknown) =>\n      query.onDuplicateKeyUpdate({ set: { [selfKey]: selfValue } }),\n  },\n});\n\nexport const makeMysqlEmailSignInServices = <\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailSignInMapping<S, I, C, NativeId>,\n) => makeTargetEmailSignInServices(database, mapping, configuration(database));\n\nexport const makeMysqlEmailAddressServices = <\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>,\n  proofMapping: ProofMapping,\n) => makeTargetEmailAddressServices(database, mapping, proofMapping, configuration(database));\n\nexport function coordinateMysqlEmailAddress<\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailAddress<\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailAddress<\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailAddress<TransactionOf<D>, Out, E, Exclude<R, EmailAddressPersistence>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport const makeMysqlEmailRegistrationServices = <\n  Registration,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  proofMapping: ProofMapping,\n) =>\n  makeTargetEmailRegistrationServices<Registration>(\n    database,\n    mapping,\n    proofMapping,\n    configuration(database),\n  );\n\nexport function coordinateMysqlEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMysqlEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  Rq extends AnyMySqlTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailRegistration<Registration, TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;;AAgDA,MAAM,iBAAiB,cAAwB;CAC7C,MAAM;CACN,SAAS;CACT,iBAAiB,8BAA8B,QAAQ;CACvD,uBAAuB,UAAyB,MAAM,aAAa;CACnE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,QAAQ;EACvD,iBAAiB,OAAsB,SAAiB,cACtD,MAAM,qBAAqB,EAAE,KAAK,GAAG,UAAU,UAAU,EAAE,CAAC;CAChE;AACF;AAEA,MAAa,gCAMX,UACA,YACG,8BAA8B,UAAU,SAAS,cAAc,QAAQ,CAAC;AAE7E,MAAa,iCAQX,UACA,SACA,iBACG,+BAA+B,UAAU,SAAS,cAAc,cAAc,QAAQ,CAAC;AA0D5F,SAAgB,4BAgBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,6BACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;EACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAEA,MAAa,sCASX,UACA,SACA,iBAEA,oCACE,UACA,SACA,cACA,cAAc,QAAQ,CACxB;AAgEF,SAAgB,iCAkBd,SACA,SAMA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}

package/dist/drizzle/mysql-identity.d.mts

@@ -0,0 +1,24 @@
+import { SubjectId } from "../Schema.mjs";
+import { ExternalIdentity, IdentityConflict, IdentityUnavailable, ProvisioningResult } from "../identity/models.mjs";
+import { SubjectProvisioningInput } from "../identity/SubjectProvisioner.mjs";
+import { ExternalIdentityTables, SubjectProvisioningTables } from "./model.mjs";
+import "../Identity.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
+import { AnyMySqlTable } from "drizzle-orm/mysql-core";
+//#region src/drizzle/mysql-identity.d.ts
+type Database = EffectMysql2Database<AnyRelations>;
+declare const makeMysqlSubjectProvisioningServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(database: Database, mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => {
+  readonly subjectProvisioner: {
+    readonly provision: (input: SubjectProvisioningInput) => Effect.Effect<ProvisioningResult, IdentityConflict | IdentityUnavailable>;
+  };
+};
+declare const makeMysqlExternalIdentityServices: <Subject extends AnyMySqlTable, External extends AnyMySqlTable, NativeId>(database: Database, mapping: ExternalIdentityTables<Subject, External, NativeId>) => {
+  readonly externalIdentityMutation: {
+    readonly bind: (subjectId: SubjectId, identity: ExternalIdentity) => Effect.Effect<void, IdentityConflict | IdentityUnavailable>;
+  };
+};
+//#endregion
+export { makeMysqlExternalIdentityServices, makeMysqlSubjectProvisioningServices };
+//# sourceMappingURL=mysql-identity.d.mts.map

package/dist/drizzle/mysql-identity.mjs

@@ -0,0 +1,95 @@
+import { IdentityConflict, IdentityUnavailable, SubjectProvisioned } from "../identity/models.mjs";
+import { reportPersistenceFailure } from "../internal/diagnostics.mjs";
+import { ExternalIdentityMutation } from "../identity/ExternalIdentityMutation.mjs";
+import { SubjectProvisioner } from "../identity/SubjectProvisioner.mjs";
+import { DrizzleMappingError, column, isMappedConstraintConflict, provisioningFingerprint } from "./model.mjs";
+import { Cause, Effect, Schema } from "effect";
+import { and, eq } from "drizzle-orm";
+//#region src/drizzle/mysql-identity.ts
+const unavailable = () => IdentityUnavailable.make();
+const isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));
+const mapUnavailable = (effect) => reportPersistenceFailure(effect, isIdentityFailure).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, (error) => isIdentityFailure(error) ? error : unavailable()))));
+const makeMysqlSubjectProvisioningServices = (database, mapping) => {
+	const db = database;
+	const requestTable = mapping.provisioningRequest.table;
+	const requestIdColumn = column(requestTable, mapping.provisioningRequest.requestId);
+	const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);
+	const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);
+	const identifierTable = mapping.identifier.table;
+	const identifierNamespaceColumn = column(identifierTable, mapping.identifier.namespace);
+	const identifierValueColumn = column(identifierTable, mapping.identifier.value);
+	const findReceipt = Effect.fn("DrizzleMysqlIdentity.findReceipt")(function* (requestId) {
+		return (yield* db.select({
+			fingerprint: requestFingerprintColumn,
+			subjectId: requestSubjectColumn
+		}).from(requestTable).where(eq(requestIdColumn, requestId)).limit(1))[0];
+	});
+	const provision = Effect.fn("DrizzleMysqlIdentity.provision")(function* (input) {
+		const fingerprint = provisioningFingerprint(input);
+		const existing = yield* findReceipt(input.requestId);
+		if (existing !== void 0) {
+			if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();
+			const subjectId = yield* mapping.subjectId.toSubject(existing.subjectId);
+			return SubjectProvisioned.make({ subjectId });
+		}
+		const nativeId = yield* db.transaction((tx) => Effect.gen(function* () {
+			const allocated = mapping.subject.allocateId === void 0 ? mapping.subject.allocateIdSync?.() : yield* mapping.subject.allocateId;
+			const insert = tx.insert(mapping.subject.table).values(mapping.subject.encodeInsert(input, allocated));
+			let nativeId = allocated;
+			if (nativeId === void 0) {
+				if (mapping.subject.decodeGeneratedId === void 0) return yield* DrizzleMappingError.make({
+					operation: "provisionSubject.generatedId",
+					cause: /* @__PURE__ */ new Error("MySQL generated IDs require decodeGeneratedId")
+				});
+				const ids = yield* insert.$returningId();
+				nativeId = yield* mapping.subject.decodeGeneratedId(ids);
+			} else yield* insert;
+			if (input.identifier !== void 0) yield* tx.insert(identifierTable).values(mapping.identifier.encodeInsert(input.identifier, nativeId, input.verifiedAt));
+			yield* tx.insert(requestTable).values(mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, nativeId));
+			return nativeId;
+		})).pipe(Effect.catchCause((cause) => {
+			if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
+			return findReceipt(input.requestId).pipe(Effect.flatMap((receipt) => {
+				if (receipt !== void 0 && receipt.fingerprint === fingerprint) return Effect.succeed(receipt.subjectId);
+				if (input.identifier === void 0) return IdentityConflict.make();
+				return db.select({ subjectId: column(identifierTable, mapping.identifier.subjectId) }).from(identifierTable).where(and(eq(identifierNamespaceColumn, input.identifier.namespace), eq(identifierValueColumn, input.identifier.value))).limit(1).pipe(Effect.flatMap(() => IdentityConflict.make()));
+			}));
+		}));
+		const subjectId = yield* mapping.subjectId.toSubject(nativeId);
+		return SubjectProvisioned.make({ subjectId });
+	}, mapUnavailable);
+	return { subjectProvisioner: SubjectProvisioner.of({ provision }) };
+};
+const makeMysqlExternalIdentityServices = (database, mapping) => {
+	const db = database;
+	const externalTable = mapping.externalIdentity.table;
+	const externalProviderColumn = column(externalTable, mapping.externalIdentity.provider);
+	const externalIssuerColumn = column(externalTable, mapping.externalIdentity.issuer);
+	const externalSubjectColumn = column(externalTable, mapping.externalIdentity.subject);
+	const externalSubjectIdColumn = column(externalTable, mapping.externalIdentity.subjectId);
+	const subjectIdColumn = column(mapping.subject.table, mapping.subject.id);
+	const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status);
+	const bind = Effect.fn("DrizzleMysqlIdentity.bindExternalIdentity")(function* (subjectId, identity) {
+		const nativeId = yield* mapping.subjectId.toNative(subjectId);
+		if ((yield* db.transaction((tx) => Effect.gen(function* () {
+			const subjects = yield* tx.select({ status: subjectStatusColumn }).from(mapping.subject.table).where(eq(subjectIdColumn, nativeId)).for("update").limit(1);
+			if (subjects[0] === void 0 || !mapping.subject.isActiveStatus(subjects[0].status)) return { _tag: "conflict" };
+			const links = yield* tx.select({ subjectId: externalSubjectIdColumn }).from(externalTable).where(and(eq(externalProviderColumn, identity.provider), eq(externalIssuerColumn, identity.issuer), eq(externalSubjectColumn, identity.subject))).for("update").limit(1);
+			if (links[0] !== void 0) return mapping.subjectId.equals(links[0].subjectId, nativeId) ? { _tag: "bound" } : { _tag: "conflict" };
+			yield* tx.insert(externalTable).values(mapping.externalIdentity.encodeInsert(identity, nativeId));
+			return { _tag: "bound" };
+		})).pipe(Effect.catchCause((cause) => {
+			if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
+			return db.select({ subjectId: externalSubjectIdColumn }).from(externalTable).where(and(eq(externalProviderColumn, identity.provider), eq(externalIssuerColumn, identity.issuer), eq(externalSubjectColumn, identity.subject))).limit(1).pipe(Effect.map((rows) => rows[0] !== void 0 && mapping.subjectId.equals(rows[0].subjectId, nativeId) ? { _tag: "bound" } : { _tag: "conflict" }));
+		})))._tag === "conflict") return yield* IdentityConflict.make();
+	}, mapUnavailable);
+	return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) };
+};
+const makeMysqlIdentityServices = (database, mapping) => ({
+	...makeMysqlSubjectProvisioningServices(database, mapping),
+	...makeMysqlExternalIdentityServices(database, mapping)
+});
+//#endregion
+export { makeMysqlExternalIdentityServices, makeMysqlIdentityServices, makeMysqlSubjectProvisioningServices };
+
+//# sourceMappingURL=mysql-identity.mjs.map

package/dist/drizzle/mysql-identity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-identity.mjs","names":[],"sources":["../../src/drizzle/mysql-identity.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- Drizzle generic query types are narrowed at this technology boundary. */\nimport { and, eq, type AnyRelations } from \"drizzle-orm\";\nimport type { EffectMysql2Database } from \"drizzle-orm/effect-mysql2\";\nimport type { AnyMySqlTable, MySqlColumn } from \"drizzle-orm/mysql-core\";\nimport { Cause, Effect, Schema } from \"effect\";\n\nimport { ExternalIdentityMutation } from \"../identity/ExternalIdentityMutation\";\nimport {\n  type ExternalIdentity,\n  IdentityConflict,\n  IdentityUnavailable,\n  SubjectProvisioned,\n} from \"../identity/models\";\nimport { SubjectProvisioner, type SubjectProvisioningInput } from \"../identity/SubjectProvisioner\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport type { SubjectId } from \"../Schema\";\nimport {\n  column,\n  isMappedConstraintConflict,\n  DrizzleMappingError,\n  provisioningFingerprint,\n  type ExternalIdentityTables,\n  type IdentityTables,\n  type SubjectProvisioningTables,\n} from \"./model\";\n\ntype Database = EffectMysql2Database<AnyRelations>;\ntype RuntimeDatabase = EffectMysql2Database<any>;\nconst unavailable = () => IdentityUnavailable.make();\nconst isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));\n\nconst mapUnavailable = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n  reportPersistenceFailure(effect, isIdentityFailure).pipe(\n    Effect.catchCause((cause) =>\n      Effect.failCause(\n        Cause.map(cause, (error) => (isIdentityFailure(error) ? error : unavailable())),\n      ),\n    ),\n  );\n\nexport const makeMysqlSubjectProvisioningServices = <\n  Subject extends AnyMySqlTable,\n  Identifier extends AnyMySqlTable,\n  Request extends AnyMySqlTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>,\n) => {\n  const db = database as RuntimeDatabase;\n  const requestTable = mapping.provisioningRequest.table;\n\n  const requestIdColumn = column(\n    requestTable,\n    mapping.provisioningRequest.requestId,\n  ) as MySqlColumn;\n\n  const requestFingerprintColumn = column(\n    requestTable,\n    mapping.provisioningRequest.fingerprint,\n  ) as MySqlColumn;\n\n  const requestSubjectColumn = column(\n    requestTable,\n    mapping.provisioningRequest.subjectId,\n  ) as MySqlColumn;\n\n  const identifierTable = mapping.identifier.table;\n\n  const identifierNamespaceColumn = column(\n    identifierTable,\n    mapping.identifier.namespace,\n  ) as MySqlColumn;\n\n  const identifierValueColumn = column(identifierTable, mapping.identifier.value) as MySqlColumn;\n\n  const findReceipt = Effect.fn(\"DrizzleMysqlIdentity.findReceipt\")(function* (requestId: string) {\n    const rows = yield* db\n      .select({ fingerprint: requestFingerprintColumn, subjectId: requestSubjectColumn })\n      .from(requestTable as any)\n      .where(eq(requestIdColumn, requestId))\n      .limit(1);\n\n    return rows[0];\n  });\n\n  const provision = Effect.fn(\"DrizzleMysqlIdentity.provision\")(function* (\n    input: SubjectProvisioningInput,\n  ) {\n    const fingerprint = provisioningFingerprint(input);\n    const existing = yield* findReceipt(input.requestId);\n\n    if (existing !== undefined) {\n      if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();\n      const subjectId = yield* mapping.subjectId.toSubject(existing.subjectId as NativeId);\n\n      return SubjectProvisioned.make({ subjectId });\n    }\n\n    const attempt = db.transaction((tx) =>\n      Effect.gen(function* () {\n        const allocated =\n          mapping.subject.allocateId === undefined\n            ? mapping.subject.allocateIdSync?.()\n            : yield* mapping.subject.allocateId;\n\n        const insert = tx\n          .insert(mapping.subject.table as any)\n          .values(mapping.subject.encodeInsert(input, allocated) as any);\n\n        let nativeId = allocated;\n\n        if (nativeId === undefined) {\n          if (mapping.subject.decodeGeneratedId === undefined)\n            return yield* DrizzleMappingError.make({\n              operation: \"provisionSubject.generatedId\",\n              cause: new Error(\"MySQL generated IDs require decodeGeneratedId\"),\n            });\n          const ids = yield* insert.$returningId();\n\n          nativeId = yield* mapping.subject.decodeGeneratedId(ids as ReadonlyArray<unknown>);\n        } else {\n          yield* insert;\n        }\n        if (input.identifier !== undefined)\n          yield* tx\n            .insert(identifierTable as any)\n            .values(\n              mapping.identifier.encodeInsert(input.identifier, nativeId, input.verifiedAt) as any,\n            );\n        yield* tx\n          .insert(requestTable as any)\n          .values(\n            mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, nativeId) as any,\n          );\n\n        return nativeId;\n      }),\n    );\n\n    const nativeId = yield* attempt.pipe(\n      Effect.catchCause(\n        (\n          cause,\n        ): Effect.Effect<\n          NativeId,\n          | Effect.Error<typeof attempt>\n          | Effect.Error<ReturnType<typeof findReceipt>>\n          | IdentityConflict\n        > => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return findReceipt(input.requestId).pipe(\n            Effect.flatMap((receipt) => {\n              if (receipt !== undefined && receipt.fingerprint === fingerprint)\n                return Effect.succeed(receipt.subjectId as NativeId);\n              if (input.identifier === undefined) return IdentityConflict.make();\n\n              return db\n                .select({\n                  subjectId: column(identifierTable, mapping.identifier.subjectId) as MySqlColumn,\n                })\n                .from(identifierTable as any)\n                .where(\n                  and(\n                    eq(identifierNamespaceColumn, input.identifier.namespace),\n                    eq(identifierValueColumn, input.identifier.value),\n                  ),\n                )\n                .limit(1)\n                .pipe(Effect.flatMap(() => IdentityConflict.make()));\n            }),\n          );\n        },\n      ),\n    );\n\n    const subjectId = yield* mapping.subjectId.toSubject(nativeId);\n\n    return SubjectProvisioned.make({ subjectId });\n  }, mapUnavailable);\n\n  return { subjectProvisioner: SubjectProvisioner.of({ provision }) } as const;\n};\n\nexport const makeMysqlExternalIdentityServices = <\n  Subject extends AnyMySqlTable,\n  External extends AnyMySqlTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: ExternalIdentityTables<Subject, External, NativeId>,\n) => {\n  const db = database as RuntimeDatabase;\n  const externalTable = mapping.externalIdentity.table;\n\n  const externalProviderColumn = column(\n    externalTable,\n    mapping.externalIdentity.provider,\n  ) as MySqlColumn;\n\n  const externalIssuerColumn = column(\n    externalTable,\n    mapping.externalIdentity.issuer,\n  ) as MySqlColumn;\n\n  const externalSubjectColumn = column(\n    externalTable,\n    mapping.externalIdentity.subject,\n  ) as MySqlColumn;\n\n  const externalSubjectIdColumn = column(\n    externalTable,\n    mapping.externalIdentity.subjectId,\n  ) as MySqlColumn;\n\n  const subjectIdColumn = column(mapping.subject.table, mapping.subject.id) as MySqlColumn;\n  const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status) as MySqlColumn;\n\n  const bind = Effect.fn(\"DrizzleMysqlIdentity.bindExternalIdentity\")(function* (\n    subjectId: SubjectId,\n    identity: ExternalIdentity,\n  ) {\n    const nativeId = yield* mapping.subjectId.toNative(subjectId);\n\n    const decision = yield* db\n      .transaction((tx) =>\n        Effect.gen(function* () {\n          const subjects = yield* tx\n            .select({ status: subjectStatusColumn })\n            .from(mapping.subject.table as any)\n            .where(eq(subjectIdColumn, nativeId))\n            .for(\"update\")\n            .limit(1);\n\n          if (subjects[0] === undefined || !mapping.subject.isActiveStatus(subjects[0].status))\n            return { _tag: \"conflict\" } as const;\n\n          const links = yield* tx\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .for(\"update\")\n            .limit(1);\n\n          if (links[0] !== undefined)\n            return mapping.subjectId.equals(links[0].subjectId as NativeId, nativeId)\n              ? ({ _tag: \"bound\" } as const)\n              : ({ _tag: \"conflict\" } as const);\n          yield* tx\n            .insert(externalTable as any)\n            .values(mapping.externalIdentity.encodeInsert(identity, nativeId) as any);\n\n          return { _tag: \"bound\" } as const;\n        }),\n      )\n      .pipe(\n        Effect.catchCause((cause) => {\n          if (\n            cause.reasons.length === 0 ||\n            !cause.reasons.every(\n              (reason) =>\n                Cause.isFailReason(reason) &&\n                isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n            )\n          )\n            return Effect.failCause(cause);\n\n          return db\n            .select({ subjectId: externalSubjectIdColumn })\n            .from(externalTable as any)\n            .where(\n              and(\n                eq(externalProviderColumn, identity.provider),\n                eq(externalIssuerColumn, identity.issuer),\n                eq(externalSubjectColumn, identity.subject),\n              ),\n            )\n            .limit(1)\n            .pipe(\n              Effect.map((rows) =>\n                rows[0] !== undefined &&\n                mapping.subjectId.equals(rows[0].subjectId as NativeId, nativeId)\n                  ? ({ _tag: \"bound\" } as const)\n                  : ({ _tag: \"conflict\" } as const),\n              ),\n            );\n        }),\n      );\n\n    if (decision._tag === \"conflict\") return yield* IdentityConflict.make();\n  }, mapUnavailable);\n\n  return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) } as const;\n};\n\nexport const makeMysqlIdentityServices = <\n  Subject extends AnyMySqlTable,\n  Identifier extends AnyMySqlTable,\n  External extends AnyMySqlTable,\n  Request extends AnyMySqlTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>,\n) => ({\n  ...makeMysqlSubjectProvisioningServices(database, mapping),\n  ...makeMysqlExternalIdentityServices(database, mapping),\n});\n"],"mappings":";;;;;;;;AA4BA,MAAM,oBAAoB,oBAAoB,KAAK;AACnD,MAAM,oBAAoB,OAAO,GAAG,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,CAAC,CAAC;AAEzF,MAAM,kBAA2B,WAC/B,yBAAyB,QAAQ,iBAAiB,CAAC,CAAC,KAClD,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAAW,kBAAkB,KAAK,IAAI,QAAQ,YAAY,CAAE,CAChF,CACF,CACF;AAEF,MAAa,wCAMX,UACA,YACG;CACH,MAAM,KAAK;CACX,MAAM,eAAe,QAAQ,oBAAoB;CAEjD,MAAM,kBAAkB,OACtB,cACA,QAAQ,oBAAoB,SAC9B;CAEA,MAAM,2BAA2B,OAC/B,cACA,QAAQ,oBAAoB,WAC9B;CAEA,MAAM,uBAAuB,OAC3B,cACA,QAAQ,oBAAoB,SAC9B;CAEA,MAAM,kBAAkB,QAAQ,WAAW;CAE3C,MAAM,4BAA4B,OAChC,iBACA,QAAQ,WAAW,SACrB;CAEA,MAAM,wBAAwB,OAAO,iBAAiB,QAAQ,WAAW,KAAK;CAE9E,MAAM,cAAc,OAAO,GAAG,kCAAkC,CAAC,CAAC,WAAW,WAAmB;EAO9F,QAAO,OANa,GACjB,OAAO;GAAE,aAAa;GAA0B,WAAW;EAAqB,CAAC,CAAC,CAClF,KAAK,YAAmB,CAAC,CACzB,MAAM,GAAG,iBAAiB,SAAS,CAAC,CAAC,CACrC,MAAM,CAAC,EAAA,CAEE;CACd,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,gCAAgC,CAAC,CAAC,WAC5D,OACA;EACA,MAAM,cAAc,wBAAwB,KAAK;EACjD,MAAM,WAAW,OAAO,YAAY,MAAM,SAAS;EAEnD,IAAI,aAAa,KAAA,GAAW;GAC1B,IAAI,SAAS,gBAAgB,aAAa,OAAO,OAAO,iBAAiB,KAAK;GAC9E,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,SAAS,SAAqB;GAEnF,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;EAC9C;EA2CA,MAAM,WAAW,OAzCD,GAAG,aAAa,OAC9B,OAAO,IAAI,aAAa;GACtB,MAAM,YACJ,QAAQ,QAAQ,eAAe,KAAA,IAC3B,QAAQ,QAAQ,iBAAiB,IACjC,OAAO,QAAQ,QAAQ;GAE7B,MAAM,SAAS,GACZ,OAAO,QAAQ,QAAQ,KAAY,CAAC,CACpC,OAAO,QAAQ,QAAQ,aAAa,OAAO,SAAS,CAAQ;GAE/D,IAAI,WAAW;GAEf,IAAI,aAAa,KAAA,GAAW;IAC1B,IAAI,QAAQ,QAAQ,sBAAsB,KAAA,GACxC,OAAO,OAAO,oBAAoB,KAAK;KACrC,WAAW;KACX,uBAAO,IAAI,MAAM,+CAA+C;IAClE,CAAC;IACH,MAAM,MAAM,OAAO,OAAO,aAAa;IAEvC,WAAW,OAAO,QAAQ,QAAQ,kBAAkB,GAA6B;GACnF,OACE,OAAO;GAET,IAAI,MAAM,eAAe,KAAA,GACvB,OAAO,GACJ,OAAO,eAAsB,CAAC,CAC9B,OACC,QAAQ,WAAW,aAAa,MAAM,YAAY,UAAU,MAAM,UAAU,CAC9E;GACJ,OAAO,GACJ,OAAO,YAAmB,CAAC,CAC3B,OACC,QAAQ,oBAAoB,aAAa,MAAM,WAAW,aAAa,QAAQ,CACjF;GAEF,OAAO;EACT,CAAC,CAG2B,CAAC,CAAC,KAC9B,OAAO,YAEH,UAMG;GACH,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,YAAY,MAAM,SAAS,CAAC,CAAC,KAClC,OAAO,SAAS,YAAY;IAC1B,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,aACnD,OAAO,OAAO,QAAQ,QAAQ,SAAqB;IACrD,IAAI,MAAM,eAAe,KAAA,GAAW,OAAO,iBAAiB,KAAK;IAEjE,OAAO,GACJ,OAAO,EACN,WAAW,OAAO,iBAAiB,QAAQ,WAAW,SAAS,EACjE,CAAC,CAAC,CACD,KAAK,eAAsB,CAAC,CAC5B,MACC,IACE,GAAG,2BAA2B,MAAM,WAAW,SAAS,GACxD,GAAG,uBAAuB,MAAM,WAAW,KAAK,CAClD,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KAAK,OAAO,cAAc,iBAAiB,KAAK,CAAC,CAAC;GACvD,CAAC,CACH;EACF,CACF,CACF;EAEA,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,QAAQ;EAE7D,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;CAC9C,GAAG,cAAc;CAEjB,OAAO,EAAE,oBAAoB,mBAAmB,GAAG,EAAE,UAAU,CAAC,EAAE;AACpE;AAEA,MAAa,qCAKX,UACA,YACG;CACH,MAAM,KAAK;CACX,MAAM,gBAAgB,QAAQ,iBAAiB;CAE/C,MAAM,yBAAyB,OAC7B,eACA,QAAQ,iBAAiB,QAC3B;CAEA,MAAM,uBAAuB,OAC3B,eACA,QAAQ,iBAAiB,MAC3B;CAEA,MAAM,wBAAwB,OAC5B,eACA,QAAQ,iBAAiB,OAC3B;CAEA,MAAM,0BAA0B,OAC9B,eACA,QAAQ,iBAAiB,SAC3B;CAEA,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CACxE,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAEhF,MAAM,OAAO,OAAO,GAAG,2CAA2C,CAAC,CAAC,WAClE,WACA,UACA;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,SAAS,SAAS;EAyE5D,KAAI,OAvEoB,GACrB,aAAa,OACZ,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,GACrB,OAAO,EAAE,QAAQ,oBAAoB,CAAC,CAAC,CACvC,KAAK,QAAQ,QAAQ,KAAY,CAAC,CAClC,MAAM,GAAG,iBAAiB,QAAQ,CAAC,CAAC,CACpC,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,SAAS,OAAO,KAAA,KAAa,CAAC,QAAQ,QAAQ,eAAe,SAAS,EAAE,CAAC,MAAM,GACjF,OAAO,EAAE,MAAM,WAAW;GAE5B,MAAM,QAAQ,OAAO,GAClB,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;GAEV,IAAI,MAAM,OAAO,KAAA,GACf,OAAO,QAAQ,UAAU,OAAO,MAAM,EAAE,CAAC,WAAuB,QAAQ,IACnE,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW;GAC1B,OAAO,GACJ,OAAO,aAAoB,CAAC,CAC5B,OAAO,QAAQ,iBAAiB,aAAa,UAAU,QAAQ,CAAQ;GAE1E,OAAO,EAAE,MAAM,QAAQ;EACzB,CAAC,CACH,CAAC,CACA,KACC,OAAO,YAAY,UAAU;GAC3B,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,GACJ,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,CAAC,CACR,KACC,OAAO,KAAK,SACV,KAAK,OAAO,KAAA,KACZ,QAAQ,UAAU,OAAO,KAAK,EAAE,CAAC,WAAuB,QAAQ,IAC3D,EAAE,MAAM,QAAQ,IAChB,EAAE,MAAM,WAAW,CAC1B,CACF;EACJ,CAAC,CACH,EAAA,CAEW,SAAS,YAAY,OAAO,OAAO,iBAAiB,KAAK;CACxE,GAAG,cAAc;CAEjB,OAAO,EAAE,0BAA0B,yBAAyB,GAAG,EAAE,KAAK,CAAC,EAAE;AAC3E;AAEA,MAAa,6BAOX,UACA,aACI;CACJ,GAAG,qCAAqC,UAAU,OAAO;CACzD,GAAG,kCAAkC,UAAU,OAAO;AACxD"}

package/dist/drizzle/mysql-password-prepared.d.mts

@@ -0,0 +1,32 @@
+import { HookConfigurationError } from "../hooks/models.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { PasswordUnavailable } from "../password/methods/errors.mjs";
+import { PasswordPreparedPersistence } from "../password/methods/PasswordPreparedPersistence.mjs";
+import { PasswordPreparedPersistenceMapping, PasswordPreparedProofMapping } from "./password-prepared-model.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
+import { SqlError } from "effect/unstable/sql/SqlError";
+import { AnyMySqlTable } from "drizzle-orm/mysql-core";
+//#region src/drizzle/mysql-password-prepared.d.ts
+type Database = EffectMysql2Database<AnyRelations>;
+type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
+declare const makeMySqlPasswordPreparedPersistenceServices: <S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable = AnyMySqlTable, PC extends AnyMySqlTable = AnyMySqlTable, PM extends AnyMySqlTable = AnyMySqlTable, PSub extends AnyMySqlTable = AnyMySqlTable, PI extends AnyMySqlTable = AnyMySqlTable, PCr extends AnyMySqlTable = AnyMySqlTable, PNativeId = unknown>(database: Database, mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>, proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>) => Effect.Effect<{
+  passwordPreparedPersistence: PasswordPreparedPersistence;
+}, never, LifecycleHooks>;
+declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;
+  readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
+  readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
+  readonly transaction?: never;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinateMySqlPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyMySqlTable, I extends AnyMySqlTable, C extends AnyMySqlTable, AC extends AnyMySqlTable, A extends AnyMySqlTable, RS extends AnyMySqlTable, CE extends AnyMySqlTable, M extends AnyMySqlTable, T extends AnyMySqlTable, B extends AnyMySqlTable, NativeId, PS extends AnyMySqlTable, PC extends AnyMySqlTable, PM extends AnyMySqlTable, PSub extends AnyMySqlTable, PI extends AnyMySqlTable, PCr extends AnyMySqlTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;
+  readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
+  readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinateMySqlPasswordPreparedPersistence, makeMySqlPasswordPreparedPersistenceServices };
+//# sourceMappingURL=mysql-password-prepared.d.mts.map

package/dist/drizzle/mysql-password-prepared.mjs

@@ -0,0 +1,16 @@
+import { coordinateTargetPasswordPreparedPersistence, makeTargetPasswordPreparedPersistenceServices } from "./password-prepared-target.mjs";
+import { mysqlPasswordConfiguration as configuration } from "./mysql-passwords.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/mysql-password-prepared.ts
+const makeMySqlPasswordPreparedPersistenceServices = (database, mapping, proofMapping) => makeTargetPasswordPreparedPersistenceServices(database, mapping, configuration(database), proofMapping);
+function coordinateMySqlPasswordPreparedPersistence(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasswordPreparedPersistence(database, options.mapping, configuration(database), options.proofMapping, (transaction, services) => {
+		const provided = Context.make(options.target, services.passwordPreparedPersistence);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+//#endregion
+export { coordinateMySqlPasswordPreparedPersistence, makeMySqlPasswordPreparedPersistenceServices };
+
+//# sourceMappingURL=mysql-password-prepared.mjs.map

package/dist/drizzle/mysql-password-prepared.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-password-prepared.mjs","names":[],"sources":["../../src/drizzle/mysql-password-prepared.ts"],"sourcesContent":["import type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectMysql2Database } from \"drizzle-orm/effect-mysql2\";\nimport type { AnyMySqlTable } from \"drizzle-orm/mysql-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport type { PasswordUnavailable } from \"../password/methods/errors\";\nimport type { PasswordPreparedPersistence } from \"../password/methods/PasswordPreparedPersistence\";\nimport { mysqlPasswordConfiguration as configuration } from \"./mysql-passwords\";\nimport type {\n  PasswordPreparedPersistenceMapping,\n  PasswordPreparedProofMapping,\n} from \"./password-prepared-model\";\nimport {\n  makeTargetPasswordPreparedPersistenceServices,\n  coordinateTargetPasswordPreparedPersistence,\n} from \"./password-prepared-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype Database = EffectMysql2Database<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nexport const makeMySqlPasswordPreparedPersistenceServices = <\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  A extends AnyMySqlTable,\n  RS extends AnyMySqlTable,\n  CE extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  T extends AnyMySqlTable,\n  B extends AnyMySqlTable,\n  NativeId,\n  PS extends AnyMySqlTable = AnyMySqlTable,\n  PC extends AnyMySqlTable = AnyMySqlTable,\n  PM extends AnyMySqlTable = AnyMySqlTable,\n  PSub extends AnyMySqlTable = AnyMySqlTable,\n  PI extends AnyMySqlTable = AnyMySqlTable,\n  PCr extends AnyMySqlTable = AnyMySqlTable,\n  PNativeId = unknown,\n>(\n  database: Database,\n  mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>,\n  proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>,\n) =>\n  makeTargetPasswordPreparedPersistenceServices(\n    database,\n    mapping,\n    configuration(database),\n    proofMapping,\n  );\n\nexport function coordinateMySqlPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  A extends AnyMySqlTable,\n  RS extends AnyMySqlTable,\n  CE extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  T extends AnyMySqlTable,\n  B extends AnyMySqlTable,\n  NativeId,\n  PS extends AnyMySqlTable,\n  PC extends AnyMySqlTable,\n  PM extends AnyMySqlTable,\n  PSub extends AnyMySqlTable,\n  PI extends AnyMySqlTable,\n  PCr extends AnyMySqlTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMySqlPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  A extends AnyMySqlTable,\n  RS extends AnyMySqlTable,\n  CE extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  T extends AnyMySqlTable,\n  B extends AnyMySqlTable,\n  NativeId,\n  PS extends AnyMySqlTable,\n  PC extends AnyMySqlTable,\n  PM extends AnyMySqlTable,\n  PSub extends AnyMySqlTable,\n  PI extends AnyMySqlTable,\n  PCr extends AnyMySqlTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinateMySqlPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyMySqlTable,\n  I extends AnyMySqlTable,\n  C extends AnyMySqlTable,\n  AC extends AnyMySqlTable,\n  A extends AnyMySqlTable,\n  RS extends AnyMySqlTable,\n  CE extends AnyMySqlTable,\n  M extends AnyMySqlTable,\n  T extends AnyMySqlTable,\n  B extends AnyMySqlTable,\n  NativeId,\n  PS extends AnyMySqlTable,\n  PC extends AnyMySqlTable,\n  PM extends AnyMySqlTable,\n  PSub extends AnyMySqlTable,\n  PI extends AnyMySqlTable,\n  PCr extends AnyMySqlTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasswordPreparedPersistence<TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      configuration(database),\n      options.proofMapping,\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n      ) => {\n        const provided = Context.make(options.target, services.passwordPreparedPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;AAuBA,MAAa,gDAoBX,UACA,SACA,iBAEA,8CACE,UACA,SACA,cAAc,QAAQ,GACtB,YACF;AA0FF,SAAgB,2CA6Bd,SACA,SAQA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4CACE,UACA,QAAQ,SACR,cAAc,QAAQ,GACtB,QAAQ,eAEN,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,2BAA2B;EAClF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}