@yielded/auth 0.1.0-beta.1

package/dist/drizzle/transaction-execution.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-execution.mjs","names":[],"sources":["../../src/drizzle/transaction-execution.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- private execution bridge retains exact public driver wrappers. */\nimport { Context, Effect, Option } from \"effect\";\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport { coordinateCommit, hasCommitScope, CurrentCommitJournal } from \"../hooks/commit\";\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport {\n  makeTransactionOwner,\n  reportTransactionFailure,\n  type TransactionNativeDatabase,\n  type TransactionOwner,\n} from \"./transaction-owner\";\n\nexport interface TransactionTargetConfiguration<Failure> {\n  readonly mode: \"interactive\" | \"synchronous\" | \"batch\";\n  readonly dialect: \"pg\" | \"mysql\" | \"sqlite\";\n  readonly locking: boolean;\n  readonly standaloneGuard: (database: any) => Effect.Effect<void, Failure>;\n  readonly transaction?: <A, E, R>(\n    database: any,\n    body: (transaction: any) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError | Failure, R>;\n}\n\nexport type TransactionCoordinatorError<E, Failure> =\n  | E\n  | Failure\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientTransactionStandaloneGuard = <Failure>(\n  unavailable: () => Failure,\n  database: {\n    readonly $client: Pick<SqlClient.SqlClient, \"transactionService\">;\n  },\n) =>\n  Effect.serviceOption(database.$client.transactionService).pipe(\n    Effect.flatMap(\n      Option.match({ onNone: () => Effect.void, onSome: () => Effect.fail(unavailable()) }),\n    ),\n  );\n\nexport interface TransactionBound<Failure> {\n  readonly owner: TransactionOwner<Failure>;\n  used: boolean;\n  poisoned: boolean;\n  active: boolean;\n  inFlight: number;\n}\n\nexport interface TransactionExecution<Failure, OwnerId, Requirements = LifecycleHooks> {\n  readonly bound: boolean;\n  readonly active: () => boolean;\n  readonly admit: Effect.Effect<void, Failure>;\n  readonly poison: () => void;\n  readonly run: <A, E, R>(\n    body: Effect.Effect<A, E, R>,\n    mutation?: boolean,\n  ) => Effect.Effect<A, Failure, Exclude<R, OwnerId | CurrentCommitJournal> | Requirements>;\n}\n\nexport const makeTransactionExecution = <Failure, OwnerId>(\n  ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,\n  database: TransactionNativeDatabase,\n  configuration: TransactionTargetConfiguration<Failure>,\n  unavailable: () => Failure,\n  nonce: () => string,\n  bound?: TransactionBound<Failure>,\n): TransactionExecution<Failure, OwnerId> => {\n  const invariant: (value: unknown) => asserts value = (value) => {\n    if (!value) throw unavailable();\n  };\n\n  return {\n    bound: bound !== undefined,\n    active: () => bound === undefined || bound.active,\n    admit:\n      bound !== undefined\n        ? Effect.suspend(() => (bound.active ? Effect.void : Effect.fail(unavailable())))\n        : Effect.gen(function* () {\n            if (yield* hasCommitScope) return yield* Effect.fail(unavailable());\n            yield* configuration.standaloneGuard(database);\n          }),\n    poison: () => {\n      if (bound !== undefined) bound.poisoned = true;\n    },\n    run: <A, E, R>(\n      body: Effect.Effect<A, E, R>,\n      mutation = true,\n    ): Effect.Effect<A, Failure, Exclude<R, OwnerId | CurrentCommitJournal> | LifecycleHooks> => {\n      return Effect.suspend(() => {\n        let entered = false;\n\n        const work =\n          bound !== undefined\n            ? Effect.gen(function* () {\n                if (!bound.active) return yield* Effect.fail(unavailable());\n                entered = true;\n                bound.inFlight++;\n                if (!mutation)\n                  return yield* Effect.provideContext(\n                    body,\n                    Context.make(ownerTag, bound.owner).pipe(\n                      Context.add(CurrentCommitJournal, bound.owner.journal),\n                    ),\n                  );\n                invariant(!bound.used && !bound.poisoned);\n                bound.used = true;\n\n                const result = yield* coordinateCommit(\n                  (journal) =>\n                    Effect.gen(function* () {\n                      bound.owner.guards.push(journal.prepare(undefined));\n\n                      return yield* Effect.provideContext(\n                        body,\n                        Context.make(ownerTag, { ...bound.owner, journal }).pipe(\n                          Context.add(CurrentCommitJournal, journal),\n                        ),\n                      );\n                    }),\n                  { mode: configuration.mode },\n                );\n\n                return result.value;\n              }).pipe(\n                Effect.onExit((exit) =>\n                  Effect.sync(() => {\n                    if (entered) bound.inFlight--;\n                    if (exit._tag === \"Failure\") bound.poisoned = true;\n                  }),\n                ),\n              )\n            : Effect.gen(function* () {\n                if (yield* hasCommitScope) return yield* Effect.fail(unavailable());\n                yield* configuration.standaloneGuard(database);\n                const marker = nonce();\n\n                const result = yield* coordinateCommit(\n                  (journal) => {\n                    const run = (tx: TransactionNativeDatabase) =>\n                      Effect.gen(function* () {\n                        const owner = makeTransactionOwner(tx, journal, marker, unavailable, {\n                          client: database.$client,\n                          batch: configuration.mode === \"batch\",\n                          locking: configuration.locking,\n                          mysql: configuration.dialect === \"mysql\",\n                          dialect: configuration.dialect,\n                        });\n\n                        const value = yield* Effect.provideContext(\n                          body,\n                          Context.make(ownerTag, owner).pipe(\n                            Context.add(CurrentCommitJournal, journal),\n                          ),\n                        );\n\n                        yield* owner.finish();\n                        if (configuration.mode === \"batch\")\n                          yield* tx.$client.batch(owner.statements);\n\n                        return value;\n                      });\n\n                    return configuration.mode === \"batch\"\n                      ? run(database)\n                      : configuration.transaction !== undefined\n                        ? configuration.transaction(database, run)\n                        : database.transaction(run);\n                  },\n                  { mode: configuration.mode },\n                );\n\n                return result.value;\n              });\n\n        return work.pipe(\n          (operation) => reportTransactionFailure(operation, unavailable),\n          Effect.mapError(unavailable),\n          Effect.catchDefect(() => Effect.fail(unavailable())),\n        );\n      });\n    },\n  };\n};\n\nexport const coordinateTransactionOwner = <\n  Failure,\n  OwnerId,\n  Resources,\n  AllocationError,\n  Services,\n  Transaction,\n  A,\n  E,\n  R,\n>(\n  database: TransactionNativeDatabase,\n  ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,\n  configuration: TransactionTargetConfiguration<Failure>,\n  allocate: Effect.Effect<Resources, AllocationError>,\n  unavailable: () => Failure,\n  nonce: () => string,\n  services: (execution: TransactionExecution<Failure, OwnerId>, resources: Resources) => Services,\n  owner: (\n    transaction: Transaction,\n    services: Services,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  TransactionCoordinatorError<E, Failure>,\n  Exclude<R, CurrentCommitJournal> | LifecycleHooks\n> => {\n  return Effect.gen(function* () {\n    if (yield* hasCommitScope) return yield* Effect.fail(unavailable());\n    yield* configuration.standaloneGuard(database);\n\n    // Allocation is independent of registration data and always precedes the physical owner.\n    const resources = yield* allocate.pipe(\n      (operation) => reportTransactionFailure(operation, unavailable),\n      Effect.mapError(unavailable),\n      Effect.catchDefect(() => Effect.fail(unavailable())),\n    );\n\n    const marker = nonce();\n\n    const result = yield* coordinateCommit(\n      (journal) => {\n        const run = (tx: TransactionNativeDatabase) =>\n          Effect.gen(function* () {\n            const state = makeTransactionOwner(tx, journal, marker, unavailable, {\n              client: database.$client,\n              batch: configuration.mode === \"batch\",\n              dialect: configuration.dialect,\n              mysql: configuration.dialect === \"mysql\",\n              locking: configuration.locking,\n            });\n\n            const bound: TransactionBound<Failure> = {\n              owner: state,\n              used: false,\n              poisoned: false,\n              active: true,\n              inFlight: 0,\n            };\n\n            return yield* Effect.gen(function* () {\n              const value = yield* owner(\n                tx as Transaction,\n                services(\n                  makeTransactionExecution(ownerTag, tx, configuration, unavailable, nonce, bound),\n                  resources,\n                ),\n                (statement) => {\n                  if (!bound.active) throw unavailable();\n                  state.statements.push(statement);\n                },\n              );\n\n              bound.active = false;\n              if (bound.poisoned || bound.inFlight !== 0) return yield* Effect.fail(unavailable());\n              yield* state.finish();\n              if (configuration.mode === \"batch\") yield* tx.$client.batch(state.statements);\n\n              return value;\n            }).pipe(\n              Effect.ensuring(\n                Effect.sync(() => {\n                  bound.active = false;\n                }),\n              ),\n            );\n          });\n\n        return configuration.mode === \"batch\"\n          ? run(database)\n          : configuration.transaction !== undefined\n            ? configuration.transaction(database, run)\n            : database.transaction(run);\n      },\n      { mode: configuration.mode },\n    );\n\n    return result.value as A;\n  });\n};\n"],"mappings":";;;;AAiCA,MAAa,uCACX,aACA,aAIA,OAAO,cAAc,SAAS,QAAQ,kBAAkB,CAAC,CAAC,KACxD,OAAO,QACL,OAAO,MAAM;CAAE,cAAc,OAAO;CAAM,cAAc,OAAO,KAAK,YAAY,CAAC;AAAE,CAAC,CACtF,CACF;AAqBF,MAAa,4BACX,UACA,UACA,eACA,aACA,OACA,UAC2C;CAC3C,MAAM,aAAgD,UAAU;EAC9D,IAAI,CAAC,OAAO,MAAM,YAAY;CAChC;CAEA,OAAO;EACL,OAAO,UAAU,KAAA;EACjB,cAAc,UAAU,KAAA,KAAa,MAAM;EAC3C,OACE,UAAU,KAAA,IACN,OAAO,cAAe,MAAM,SAAS,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC,CAAE,IAC9E,OAAO,IAAI,aAAa;GACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;GAClE,OAAO,cAAc,gBAAgB,QAAQ;EAC/C,CAAC;EACP,cAAc;GACZ,IAAI,UAAU,KAAA,GAAW,MAAM,WAAW;EAC5C;EACA,MACE,MACA,WAAW,SACgF;GAC3F,OAAO,OAAO,cAAc;IAC1B,IAAI,UAAU;IAqFd,QAlFE,UAAU,KAAA,IACN,OAAO,IAAI,aAAa;KACtB,IAAI,CAAC,MAAM,QAAQ,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;KAC1D,UAAU;KACV,MAAM;KACN,IAAI,CAAC,UACH,OAAO,OAAO,OAAO,eACnB,MACA,QAAQ,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,KAClC,QAAQ,IAAI,sBAAsB,MAAM,MAAM,OAAO,CACvD,CACF;KACF,UAAU,CAAC,MAAM,QAAQ,CAAC,MAAM,QAAQ;KACxC,MAAM,OAAO;KAiBb,QAAO,OAfe,kBACnB,YACC,OAAO,IAAI,aAAa;MACtB,MAAM,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAA,CAAS,CAAC;MAElD,OAAO,OAAO,OAAO,eACnB,MACA,QAAQ,KAAK,UAAU;OAAE,GAAG,MAAM;OAAO;MAAQ,CAAC,CAAC,CAAC,KAClD,QAAQ,IAAI,sBAAsB,OAAO,CAC3C,CACF;KACF,CAAC,GACH,EAAE,MAAM,cAAc,KAAK,CAC7B,EAAA,CAEc;IAChB,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;KAChB,IAAI,SAAS,MAAM;KACnB,IAAI,KAAK,SAAS,WAAW,MAAM,WAAW;IAChD,CAAC,CACH,CACF,IACA,OAAO,IAAI,aAAa;KACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;KAClE,OAAO,cAAc,gBAAgB,QAAQ;KAC7C,MAAM,SAAS,MAAM;KAqCrB,QAAO,OAnCe,kBACnB,YAAY;MACX,MAAM,OAAO,OACX,OAAO,IAAI,aAAa;OACtB,MAAM,QAAQ,qBAAqB,IAAI,SAAS,QAAQ,aAAa;QACnE,QAAQ,SAAS;QACjB,OAAO,cAAc,SAAS;QAC9B,SAAS,cAAc;QACvB,OAAO,cAAc,YAAY;QACjC,SAAS,cAAc;OACzB,CAAC;OAED,MAAM,QAAQ,OAAO,OAAO,eAC1B,MACA,QAAQ,KAAK,UAAU,KAAK,CAAC,CAAC,KAC5B,QAAQ,IAAI,sBAAsB,OAAO,CAC3C,CACF;OAEA,OAAO,MAAM,OAAO;OACpB,IAAI,cAAc,SAAS,SACzB,OAAO,GAAG,QAAQ,MAAM,MAAM,UAAU;OAE1C,OAAO;MACT,CAAC;MAEH,OAAO,cAAc,SAAS,UAC1B,IAAI,QAAQ,IACZ,cAAc,gBAAgB,KAAA,IAC5B,cAAc,YAAY,UAAU,GAAG,IACvC,SAAS,YAAY,GAAG;KAChC,GACA,EAAE,MAAM,cAAc,KAAK,CAC7B,EAAA,CAEc;IAChB,CAAC,EAAA,CAEK,MACT,cAAc,yBAAyB,WAAW,WAAW,GAC9D,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;GACF,CAAC;EACH;CACF;AACF;AAEA,MAAa,8BAWX,UACA,UACA,eACA,UACA,aACA,OACA,UACA,UASG;CACH,OAAO,OAAO,IAAI,aAAa;EAC7B,IAAI,OAAO,gBAAgB,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;EAClE,OAAO,cAAc,gBAAgB,QAAQ;EAG7C,MAAM,YAAY,OAAO,SAAS,MAC/B,cAAc,yBAAyB,WAAW,WAAW,GAC9D,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD;EAEA,MAAM,SAAS,MAAM;EA2DrB,QAAO,OAzDe,kBACnB,YAAY;GACX,MAAM,OAAO,OACX,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,qBAAqB,IAAI,SAAS,QAAQ,aAAa;KACnE,QAAQ,SAAS;KACjB,OAAO,cAAc,SAAS;KAC9B,SAAS,cAAc;KACvB,OAAO,cAAc,YAAY;KACjC,SAAS,cAAc;IACzB,CAAC;IAED,MAAM,QAAmC;KACvC,OAAO;KACP,MAAM;KACN,UAAU;KACV,QAAQ;KACR,UAAU;IACZ;IAEA,OAAO,OAAO,OAAO,IAAI,aAAa;KACpC,MAAM,QAAQ,OAAO,MACnB,IACA,SACE,yBAAyB,UAAU,IAAI,eAAe,aAAa,OAAO,KAAK,GAC/E,SACF,IACC,cAAc;MACb,IAAI,CAAC,MAAM,QAAQ,MAAM,YAAY;MACrC,MAAM,WAAW,KAAK,SAAS;KACjC,CACF;KAEA,MAAM,SAAS;KACf,IAAI,MAAM,YAAY,MAAM,aAAa,GAAG,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;KACnF,OAAO,MAAM,OAAO;KACpB,IAAI,cAAc,SAAS,SAAS,OAAO,GAAG,QAAQ,MAAM,MAAM,UAAU;KAE5E,OAAO;IACT,CAAC,CAAC,CAAC,KACD,OAAO,SACL,OAAO,WAAW;KAChB,MAAM,SAAS;IACjB,CAAC,CACH,CACF;GACF,CAAC;GAEH,OAAO,cAAc,SAAS,UAC1B,IAAI,QAAQ,IACZ,cAAc,gBAAgB,KAAA,IAC5B,cAAc,YAAY,UAAU,GAAG,IACvC,SAAS,YAAY,GAAG;EAChC,GACA,EAAE,MAAM,cAAc,KAAK,CAC7B,EAAA,CAEc;CAChB,CAAC;AACH"}

package/dist/drizzle/transaction-mysql.mjs

@@ -0,0 +1,46 @@
+import { Effect } from "effect";
+import { EffectMysql2Transaction } from "drizzle-orm/effect-mysql2";
+import { makeWithTransaction } from "effect/unstable/sql/SqlClient";
+//#region src/drizzle/transaction-mysql.ts
+/** Locking discovery and later SQL policy predicates must see the same current
+* authority. MySQL's default repeatable-read snapshot is unsuitable after a
+* contended authority lock. Own one connection and one-shot transaction mode;
+* the pooled connection's session default is never changed. */
+const mysqlTransaction = (unavailable, database, body) => Effect.scoped(Effect.gen(function* () {
+	const client = database.$client;
+	const connection = yield* client.reserve;
+	const nativeConnection = connection.conn;
+	if (typeof nativeConnection?.destroy !== "function" || typeof nativeConnection.release !== "function") return yield* Effect.fail(unavailable());
+	const destroy = nativeConnection.destroy.bind(nativeConnection);
+	const defaults = yield* connection.executeUnprepared("select @@session.transaction_isolation as isolation", [], void 0);
+	const isolation = String(defaults[0]?.isolation).replaceAll("-", " ").toUpperCase();
+	if (![
+		"READ UNCOMMITTED",
+		"READ COMMITTED",
+		"REPEATABLE READ",
+		"SERIALIZABLE"
+	].includes(isolation)) return yield* Effect.fail(unavailable());
+	const statement = (source) => Effect.asVoid(connection.executeUnprepared(source, [], void 0));
+	const transaction = makeWithTransaction({
+		transactionService: client.transactionService,
+		spanAttributes: [["db.system", "mysql"], ["effect_auth.owner", "oauth"]],
+		acquireConnection: Effect.succeed([void 0, connection]),
+		begin: () => statement("SET TRANSACTION ISOLATION LEVEL READ COMMITTED").pipe(Effect.andThen(statement("BEGIN"))),
+		commit: () => statement("COMMIT"),
+		rollback: () => statement("ROLLBACK"),
+		savepoint: (_connection, id) => statement(`SAVEPOINT effect_auth_oauth_${id}`),
+		rollbackSavepoint: (_connection, id) => statement(`ROLLBACK TO SAVEPOINT effect_auth_oauth_${id}`)
+	});
+	class NativeTransaction extends EffectMysql2Transaction {
+		transaction(nested) {
+			return transaction(Effect.suspend(() => nested(new NativeTransaction(database.dialect, database._.session, database._.relations))));
+		}
+	}
+	const native = new NativeTransaction(database.dialect, database._.session, database._.relations);
+	const cleanup = statement("ROLLBACK").pipe(Effect.andThen(statement(`SET TRANSACTION ISOLATION LEVEL ${isolation}`)), Effect.onExit((exit) => exit._tag === "Failure" ? Effect.sync(destroy) : Effect.void), Effect.orDie);
+	return yield* transaction(Effect.suspend(() => body(native))).pipe(Effect.ensuring(cleanup));
+}));
+//#endregion
+export { mysqlTransaction };
+
+//# sourceMappingURL=transaction-mysql.mjs.map

package/dist/drizzle/transaction-mysql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-mysql.mjs","names":[],"sources":["../../src/drizzle/transaction-mysql.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- this private acquisition preserves the installed native transaction; public wrappers retain its exact type. */\nimport { EffectMysql2Transaction } from \"drizzle-orm/effect-mysql2\";\nimport { Effect } from \"effect\";\nimport { makeWithTransaction, type SqlClient } from \"effect/unstable/sql/SqlClient\";\n\n/** Locking discovery and later SQL policy predicates must see the same current\n * authority. MySQL's default repeatable-read snapshot is unsuitable after a\n * contended authority lock. Own one connection and one-shot transaction mode;\n * the pooled connection's session default is never changed. */\nexport const mysqlTransaction = <A, E, R, Failure>(\n  unavailable: () => Failure,\n  database: any,\n  body: (transaction: any) => Effect.Effect<A, E, R>,\n) =>\n  Effect.scoped(\n    Effect.gen(function* () {\n      const client: SqlClient = database.$client;\n      const connection = yield* client.reserve;\n\n      // Installed @effect/sql-mysql2 ConnectionImpl exposes its reserved native\n      // PoolConnection as `conn`. Capture only its public disposal method; fail\n      // before transaction work if an installed driver no longer provides it.\n      const nativeConnection = (\n        connection as {\n          readonly conn?: { readonly destroy?: () => void; readonly release?: () => void };\n        }\n      ).conn;\n\n      if (\n        typeof nativeConnection?.destroy !== \"function\" ||\n        typeof nativeConnection.release !== \"function\"\n      )\n        return yield* Effect.fail(unavailable());\n      const destroy = nativeConnection.destroy.bind(nativeConnection);\n\n      const defaults = yield* connection.executeUnprepared(\n        \"select @@session.transaction_isolation as isolation\",\n        [],\n        undefined,\n      );\n\n      const isolation = String(defaults[0]?.isolation).replaceAll(\"-\", \" \").toUpperCase();\n\n      if (\n        ![\"READ UNCOMMITTED\", \"READ COMMITTED\", \"REPEATABLE READ\", \"SERIALIZABLE\"].includes(\n          isolation,\n        )\n      )\n        return yield* Effect.fail(unavailable());\n\n      const statement = (source: string) =>\n        Effect.asVoid(connection.executeUnprepared(source, [], undefined));\n\n      const transaction = makeWithTransaction({\n        transactionService: client.transactionService,\n        spanAttributes: [\n          [\"db.system\", \"mysql\"],\n          [\"effect_auth.owner\", \"oauth\"],\n        ],\n        acquireConnection: Effect.succeed([undefined, connection] as const),\n        begin: () =>\n          statement(\"SET TRANSACTION ISOLATION LEVEL READ COMMITTED\").pipe(\n            Effect.andThen(statement(\"BEGIN\")),\n          ),\n        commit: () => statement(\"COMMIT\"),\n        rollback: () => statement(\"ROLLBACK\"),\n        savepoint: (_connection, id) => statement(`SAVEPOINT effect_auth_oauth_${id}`),\n        rollbackSavepoint: (_connection, id) =>\n          statement(`ROLLBACK TO SAVEPOINT effect_auth_oauth_${id}`),\n      });\n\n      class NativeTransaction extends EffectMysql2Transaction<any, any> {\n        override transaction<A2, E2, R2>(nested: (tx: any) => Effect.Effect<A2, E2, R2>) {\n          return transaction(\n            Effect.suspend(() =>\n              nested(\n                new NativeTransaction(database.dialect, database._.session, database._.relations),\n              ),\n            ),\n          );\n        }\n      }\n\n      const native = new NativeTransaction(\n        database.dialect,\n        database._.session,\n        database._.relations,\n      );\n\n      const cleanup = statement(\"ROLLBACK\").pipe(\n        Effect.andThen(statement(`SET TRANSACTION ISOLATION LEVEL ${isolation}`)),\n        Effect.onExit((exit) => (exit._tag === \"Failure\" ? Effect.sync(destroy) : Effect.void)),\n        Effect.orDie,\n      );\n\n      return yield* transaction(Effect.suspend(() => body(native))).pipe(\n        // BEGIN/COMMIT acknowledgments can be lost after the server acted.\n        // Roll back any surviving transaction before resetting one-shot mode.\n        // Failed cleanup destroys the connection before its reserve is released;\n        // the unknown owner result cannot release a prepared receipt.\n        Effect.ensuring(cleanup),\n      );\n    }),\n  );\n"],"mappings":";;;;;;;;AASA,MAAa,oBACX,aACA,UACA,SAEA,OAAO,OACL,OAAO,IAAI,aAAa;CACtB,MAAM,SAAoB,SAAS;CACnC,MAAM,aAAa,OAAO,OAAO;CAKjC,MAAM,mBACJ,WAGA;CAEF,IACE,OAAO,kBAAkB,YAAY,cACrC,OAAO,iBAAiB,YAAY,YAEpC,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;CACzC,MAAM,UAAU,iBAAiB,QAAQ,KAAK,gBAAgB;CAE9D,MAAM,WAAW,OAAO,WAAW,kBACjC,uDACA,CAAC,GACD,KAAA,CACF;CAEA,MAAM,YAAY,OAAO,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,YAAY;CAElF,IACE,CAAC;EAAC;EAAoB;EAAkB;EAAmB;CAAc,CAAC,CAAC,SACzE,SACF,GAEA,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;CAEzC,MAAM,aAAa,WACjB,OAAO,OAAO,WAAW,kBAAkB,QAAQ,CAAC,GAAG,KAAA,CAAS,CAAC;CAEnE,MAAM,cAAc,oBAAoB;EACtC,oBAAoB,OAAO;EAC3B,gBAAgB,CACd,CAAC,aAAa,OAAO,GACrB,CAAC,qBAAqB,OAAO,CAC/B;EACA,mBAAmB,OAAO,QAAQ,CAAC,KAAA,GAAW,UAAU,CAAU;EAClE,aACE,UAAU,gDAAgD,CAAC,CAAC,KAC1D,OAAO,QAAQ,UAAU,OAAO,CAAC,CACnC;EACF,cAAc,UAAU,QAAQ;EAChC,gBAAgB,UAAU,UAAU;EACpC,YAAY,aAAa,OAAO,UAAU,+BAA+B,IAAI;EAC7E,oBAAoB,aAAa,OAC/B,UAAU,2CAA2C,IAAI;CAC7D,CAAC;CAED,MAAM,0BAA0B,wBAAkC;EAChE,YAAiC,QAAgD;GAC/E,OAAO,YACL,OAAO,cACL,OACE,IAAI,kBAAkB,SAAS,SAAS,SAAS,EAAE,SAAS,SAAS,EAAE,SAAS,CAClF,CACF,CACF;EACF;CACF;CAEA,MAAM,SAAS,IAAI,kBACjB,SAAS,SACT,SAAS,EAAE,SACX,SAAS,EAAE,SACb;CAEA,MAAM,UAAU,UAAU,UAAU,CAAC,CAAC,KACpC,OAAO,QAAQ,UAAU,mCAAmC,WAAW,CAAC,GACxE,OAAO,QAAQ,SAAU,KAAK,SAAS,YAAY,OAAO,KAAK,OAAO,IAAI,OAAO,IAAK,GACtF,OAAO,KACT;CAEA,OAAO,OAAO,YAAY,OAAO,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAK5D,OAAO,SAAS,OAAO,CACzB;AACF,CAAC,CACH"}

package/dist/drizzle/transaction-owner.d.mts

@@ -0,0 +1,6 @@
+import "../hooks/commit.mjs";
+import { Effect } from "effect";
+import { SQL, Table } from "drizzle-orm";
+import "effect/unstable/sql/SqlClient";
+import { SqlError } from "effect/unstable/sql/SqlError";
+import { Statement } from "effect/unstable/sql/Statement";

package/dist/drizzle/transaction-owner.mjs

@@ -0,0 +1,252 @@
+import { reportAuthFailure } from "../internal/diagnostics.mjs";
+import { balancedD1And, compactD1GeneratedStatement } from "./d1-generated-statement.mjs";
+import { Cause, Effect } from "effect";
+import { eq, getTableColumns, isNull, sql } from "drizzle-orm";
+//#region src/drizzle/transaction-owner.ts
+const isUnavailableCause = (cause, unavailable) => {
+	const expected = unavailable();
+	const tag = typeof expected === "object" && expected !== null && "_tag" in expected ? expected._tag : void 0;
+	return tag !== void 0 && cause.reasons.length > 0 && cause.reasons.every((reason) => Cause.isFailReason(reason) && typeof reason.error === "object" && reason.error !== null && "_tag" in reason.error && reason.error._tag === tag);
+};
+/** Report once, before an adapter replaces the raw cause with its public
+* unavailable error. Already translated failures stay quiet at outer owners. */
+const reportTransactionFailure = (effect, unavailable) => Effect.catchCause(effect, (cause) => isUnavailableCause(cause, unavailable) ? Effect.failCause(cause) : reportAuthFailure("auth-persistence", cause).pipe(Effect.andThen(Effect.failCause(cause))));
+const both = (...parts) => balancedD1And(...parts) ?? sql`1 = 1`;
+const makeTransactionRows = (unavailable) => {
+	const invariant = (value) => {
+		if (!value) throw unavailable();
+	};
+	const col = (table, key) => {
+		const value = getTableColumns(table)[key];
+		invariant(value !== void 0);
+		return value;
+	};
+	const equal = (table, values) => both(...Object.entries(values).map(([key, value]) => value === null ? isNull(col(table, key)) : eq(col(table, key), value)));
+	/** Mapped driver values use plain data, Dates and binary views. Application
+	* identity classes are reconstructed by the mapped codecs, never cloned here. */
+	const copiedRow = (row) => {
+		const seen = /* @__PURE__ */ new WeakSet();
+		const supported = (value) => {
+			if (value === null || typeof value !== "object" || seen.has(value)) return;
+			seen.add(value);
+			if (value instanceof Date || value instanceof ArrayBuffer || ArrayBuffer.isView(value)) return;
+			invariant(Array.isArray(value) || Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+			for (const item of Object.values(value)) supported(item);
+		};
+		supported(row);
+		return structuredClone(row);
+	};
+	const nativeKey = (value) => {
+		const packed = (tag, text) => tag + text.length + ":" + text;
+		if (value instanceof Date) return packed("date", value.toISOString());
+		if (typeof value === "bigint") return packed("bigint", value.toString());
+		const bytes = value instanceof ArrayBuffer ? new Uint8Array(value) : ArrayBuffer.isView(value) ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength) : void 0;
+		if (bytes !== void 0) return packed("bytes", Array.from(bytes).join(","));
+		if (value === null || typeof value !== "object") return packed(typeof value, String(value));
+		if (Array.isArray(value)) return packed("array", value.map(nativeKey).join(""));
+		invariant(Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+		return packed("object", Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([name, item]) => nativeKey(name) + nativeKey(item)).join(""));
+	};
+	const matchesNativeRow = (table, row, key) => Object.entries(key).every(([name, value]) => {
+		if (value === null || row[name] === null) return value === row[name];
+		const column = col(table, name);
+		return nativeKey(column.mapToDriverValue(row[name])) === nativeKey(column.mapToDriverValue(value));
+	});
+	return {
+		col,
+		equal,
+		copiedRow,
+		matchesNativeRow
+	};
+};
+const makeTransactionOwner = (database, journal, marker, unavailable, configuration) => {
+	const invariant = (value) => {
+		if (!value) throw unavailable();
+	};
+	const { col, equal, matchesNativeRow } = makeTransactionRows(unavailable);
+	let phase = "open";
+	let poisoned = false;
+	const open = () => invariant(phase === "open" && !poisoned);
+	const result = (effect) => effect.pipe((operation) => reportTransactionFailure(operation, unavailable), Effect.mapError(unavailable), Effect.catchDefect(() => Effect.fail(unavailable())), Effect.onExit((exit) => Effect.sync(() => {
+		if (exit._tag === "Failure") poisoned = true;
+	})));
+	const observations = [];
+	const statements = [];
+	const postconditions = [];
+	const guards = [];
+	const finalUpdates = [];
+	const exactRow = (table, row) => both(...Object.entries(row).map(([key, value]) => {
+		if (typeof value !== "string") return equal(table, { [key]: value });
+		const column = col(table, key), bound = sql.param(value, column);
+		return configuration.dialect === "mysql" ? sql`binary ${column} = binary ${bound}` : configuration.dialect === "pg" ? sql`convert_to(cast(${column} as text), 'UTF8') = convert_to(cast(${bound} as text), 'UTF8')` : sql`cast(${column} as blob) = cast(${bound} as blob)`;
+	}));
+	const toStatement = (query) => {
+		const rendered = query.toSQL();
+		const client = configuration.client ?? database.$client;
+		return compactD1GeneratedStatement(client, client.unsafe(rendered.sql, rendered.params), unavailable);
+	};
+	const assertion = (condition) => database.select({ value: sql`case when ${condition} then 1 else json_extract('[]', ${"$[oauth-owner-" + marker + "]"}) end` }).from(sql`(select 1) as oauth_assertion`);
+	const observedConditions = (table, where, rows) => [sql`(select count(*) from ${table} where ${where}) = ${rows.length}`, ...rows.map((row) => sql`exists(select 1 from ${table} where ${both(where, exactRow(table, row))})`)];
+	const chunks = (conditions) => {
+		const output = [];
+		let pending = [];
+		for (const condition of conditions) {
+			const candidate = [...pending, condition];
+			const rendered = assertion(both(...candidate)).toSQL();
+			if (pending.length > 0 && (rendered.params.length > 96 || new TextEncoder().encode(rendered.sql).length > 48e3)) {
+				output.push(both(...pending));
+				pending = [condition];
+			} else pending = candidate;
+		}
+		if (pending.length > 0) output.push(both(...pending));
+		return output;
+	};
+	const appendAssertions = (conditions) => {
+		for (const condition of chunks(conditions)) statements.push(toStatement(assertion(condition)));
+	};
+	const observed = (table, where, rows) => {
+		const observation = {
+			table,
+			where,
+			rows
+		};
+		observations.push(observation);
+		return observation;
+	};
+	const queryCondition = (condition) => database.select({ value: sql`case when ${condition} then 1 else 0 end`.mapWith(Number).as("value") }).from(sql`(select 1) as oauth_guard`);
+	const conditionHolds = (condition) => Effect.gen(function* () {
+		const query = queryCondition(condition);
+		const rows = yield* configuration.dialect === "sqlite" ? toStatement(query) : query;
+		invariant(rows.length === 1);
+		return rows[0].value === 1;
+	});
+	const guardedQuery = (table, where, values, guard) => {
+		invariant(Number.isSafeInteger(guard.rows) && guard.rows > 0 && guard.rows <= 128);
+		return {
+			query: database.update(table).set(values).where(where),
+			guard: { ...guard }
+		};
+	};
+	const applyGuarded = (entry) => Effect.gen(function* () {
+		if (configuration.batch) {
+			statements.push(toStatement(entry.query));
+			statements.push(toStatement(assertion(sql`changes() = ${entry.guard.rows}`)));
+			appendAssertions([entry.guard.postcondition]);
+		} else {
+			if (configuration.mysql) {
+				const changed = yield* entry.query;
+				invariant(changed.affectedRows === entry.guard.rows);
+			} else {
+				const changed = yield* entry.query.returning({ value: sql`1` });
+				invariant(changed.length === entry.guard.rows);
+			}
+			invariant(yield* conditionHolds(entry.guard.postcondition));
+		}
+	});
+	const owner = {
+		database,
+		journal,
+		marker,
+		batch: configuration.batch,
+		observations,
+		statements,
+		postconditions,
+		guards,
+		exact: exactRow,
+		read: (table, where, options = {}) => result(Effect.gen(function* () {
+			open();
+			const limit = options.limit ?? 64;
+			let query = database.select(options.columns === void 0 ? void 0 : Object.fromEntries(options.columns.map((key) => [key, col(table, key)]))).from(table).where(where).limit(options.takeOnly ? limit : limit + 1);
+			if (options.orderBy !== void 0) query = query.orderBy(options.orderBy);
+			if (options.lock !== false && configuration.locking) query = query.for("update");
+			const rows = yield* query;
+			invariant(rows.length <= limit);
+			if (configuration.batch && (options.observe !== false || options.admissionOnly)) appendAssertions(observedConditions(table, where, rows));
+			return options.observe === false || options.admissionOnly ? {
+				table,
+				where,
+				rows
+			} : observed(table, where, rows);
+		})),
+		write: (query) => result(Effect.gen(function* () {
+			open();
+			if (configuration.batch) statements.push(toStatement(query));
+			else yield* query;
+		})),
+		insert: (table, values, key, absent = false) => result(Effect.gen(function* () {
+			open();
+			let query = database.insert(table).values(values);
+			if (absent) query = configuration.mysql ? query.onDuplicateKeyUpdate({ set: { [Object.keys(key)[0]]: col(table, Object.keys(key)[0]) } }) : query.onConflictDoNothing();
+			yield* owner.write(query);
+			const where = equal(table, key);
+			if (configuration.batch) return observed(table, where, [values]);
+			const found = yield* owner.read(table, where, { limit: 1 });
+			const markerColumn = Object.keys(values).find((key) => values[key] === marker);
+			if (!absent || markerColumn !== void 0 && found.rows[0]?.[markerColumn] === marker) invariant(yield* owner.check(sql`exists(select 1 from ${table} where ${both(where, exactRow(table, values))})`));
+			return found;
+		})),
+		update: (table, key, values) => result(Effect.gen(function* () {
+			open();
+			yield* owner.write(database.update(table).set(values).where(equal(table, key)));
+			for (const observation of observations) if (observation.table === table) observation.rows = observation.rows.map((row) => matchesNativeRow(table, row, key) ? {
+				...row,
+				...values
+			} : row);
+		})),
+		updateGuarded: (table, where, values, guard) => result(Effect.gen(function* () {
+			open();
+			const entry = guardedQuery(table, where, values, guard);
+			yield* applyGuarded(entry);
+			postconditions.push(entry.guard.postcondition);
+		})),
+		finalUpdate: (table, where, values, guard) => result(Effect.sync(() => {
+			open();
+			invariant(finalUpdates.length < 128);
+			finalUpdates.push(guardedQuery(table, where, values, guard));
+		})),
+		remove: (table, key) => result(Effect.gen(function* () {
+			open();
+			yield* owner.write(database.delete(table).where(equal(table, key)));
+			for (const observation of observations) if (observation.table === table) observation.rows = observation.rows.filter((row) => !matchesNativeRow(table, row, key));
+		})),
+		check: (condition) => result(Effect.gen(function* () {
+			open();
+			const holds = yield* conditionHolds(condition);
+			if (configuration.batch) statements.push(toStatement(assertion(holds ? condition : sql`not (${condition})`)));
+			return holds;
+		})),
+		now: (clock) => result(Effect.gen(function* () {
+			open();
+			const value = (yield* database.select({ value: sql`${clock.engineNowMillis}`.mapWith(Number) }).from(sql`(select 1) as oauth_clock`))[0]?.value;
+			invariant(Number.isSafeInteger(value) && value >= 0);
+			return value;
+		})),
+		finish: () => result(Effect.gen(function* () {
+			open();
+			phase = "finishing";
+			Object.freeze(observations);
+			Object.freeze(postconditions);
+			Object.freeze(guards);
+			Object.freeze(finalUpdates);
+			const conditions = observations.flatMap((observation) => observedConditions(observation.table, observation.where, observation.rows));
+			conditions.push(...postconditions.map((condition) => typeof condition === "function" ? condition() : condition));
+			conditions.push(...finalUpdates.map((entry) => entry.guard.postcondition));
+			for (const guard of guards) {
+				const status = yield* Effect.result(guard.read);
+				invariant(status._tag === "Failure" && status.failure._tag === "CommitPending");
+			}
+			invariant(!poisoned);
+			for (const entry of finalUpdates) yield* applyGuarded(entry);
+			if (configuration.batch) appendAssertions(conditions);
+			else for (const condition of chunks(conditions)) invariant(yield* conditionHolds(condition));
+			invariant(!poisoned);
+		}).pipe(Effect.ensuring(Effect.sync(() => {
+			phase = "finished";
+		}))))
+	};
+	return owner;
+};
+//#endregion
+export { both, makeTransactionOwner, makeTransactionRows, reportTransactionFailure };
+
+//# sourceMappingURL=transaction-owner.mjs.map

package/dist/drizzle/transaction-owner.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-owner.mjs","names":[],"sources":["../../src/drizzle/transaction-owner.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- private SQL kernel; driver wrappers retain table and native ID types. */\nimport { eq, getTableColumns, isNull, sql, type SQL, type Table } from \"drizzle-orm\";\nimport type { EffectDrizzleQueryError } from \"drizzle-orm/effect-core\";\nimport { Cause, Effect } from \"effect\";\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport { type CommitJournal, type PreparedCommit } from \"../hooks/commit\";\nimport { reportAuthFailure } from \"../internal/diagnostics\";\nimport { balancedD1And, compactD1GeneratedStatement } from \"./d1-generated-statement\";\n\nexport type Row = Record<string, any>;\n/** Only query-builder/table shapes are erased here. Installed Effect Drizzle\n * queries have captured clients, and their error channel remains explicit. */\ntype NativeQuery<A> = Effect.Effect<A, EffectDrizzleQueryError | SqlError>;\n\nexport interface TransactionNativeDatabase {\n  readonly $client: SqlClient.SqlClient & {\n    readonly batch: (statements: ReadonlyArray<Statement<any>>) => Effect.Effect<any, SqlError>;\n  };\n  readonly transaction: <A, E, R>(\n    body: (transaction: any) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError, R>;\n}\n\nconst isUnavailableCause = <Failure>(cause: Cause.Cause<unknown>, unavailable: () => Failure) => {\n  const expected = unavailable();\n\n  const tag =\n    typeof expected === \"object\" && expected !== null && \"_tag\" in expected\n      ? expected._tag\n      : undefined;\n\n  return (\n    tag !== undefined &&\n    cause.reasons.length > 0 &&\n    cause.reasons.every(\n      (reason) =>\n        Cause.isFailReason(reason) &&\n        typeof reason.error === \"object\" &&\n        reason.error !== null &&\n        \"_tag\" in reason.error &&\n        reason.error._tag === tag,\n    )\n  );\n};\n\n/** Report once, before an adapter replaces the raw cause with its public\n * unavailable error. Already translated failures stay quiet at outer owners. */\nexport const reportTransactionFailure = <A, E, R, Failure>(\n  effect: Effect.Effect<A, E, R>,\n  unavailable: () => Failure,\n): Effect.Effect<A, E, R> =>\n  Effect.catchCause(effect, (cause) =>\n    isUnavailableCause(cause, unavailable)\n      ? Effect.failCause(cause)\n      : reportAuthFailure(\"auth-persistence\", cause).pipe(Effect.andThen(Effect.failCause(cause))),\n  );\n\nexport const both = (...parts: ReadonlyArray<SQL | undefined>) =>\n  balancedD1And(...parts) ?? sql`1 = 1`;\n\nexport const makeTransactionRows = <Failure>(unavailable: () => Failure) => {\n  const invariant: (value: unknown) => asserts value = (value) => {\n    if (!value) throw unavailable();\n  };\n\n  const col = (table: Table, key: string) => {\n    const value = getTableColumns(table)[key];\n\n    invariant(value !== undefined);\n\n    return value;\n  };\n\n  const equal = (table: Table, values: Row) =>\n    both(\n      ...Object.entries(values).map(([key, value]) =>\n        value === null ? isNull(col(table, key)) : eq(col(table, key), value),\n      ),\n    );\n\n  /** Mapped driver values use plain data, Dates and binary views. Application\n   * identity classes are reconstructed by the mapped codecs, never cloned here. */\n  const copiedRow = (row: Row) => {\n    const seen = new WeakSet<object>();\n\n    const supported = (value: unknown): void => {\n      if (value === null || typeof value !== \"object\" || seen.has(value)) return;\n      seen.add(value);\n      if (value instanceof Date || value instanceof ArrayBuffer || ArrayBuffer.isView(value))\n        return;\n      invariant(\n        Array.isArray(value) ||\n          Object.getPrototypeOf(value) === Object.prototype ||\n          Object.getPrototypeOf(value) === null,\n      );\n      for (const item of Object.values(value)) supported(item);\n    };\n\n    supported(row);\n\n    return structuredClone(row);\n  };\n\n  const nativeKey = (value: unknown): string => {\n    const packed = (tag: string, text: string) => tag + text.length + \":\" + text;\n\n    if (value instanceof Date) return packed(\"date\", value.toISOString());\n    if (typeof value === \"bigint\") return packed(\"bigint\", value.toString());\n\n    const bytes =\n      value instanceof ArrayBuffer\n        ? new Uint8Array(value)\n        : ArrayBuffer.isView(value)\n          ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength)\n          : undefined;\n\n    if (bytes !== undefined) return packed(\"bytes\", Array.from(bytes).join(\",\"));\n    if (value === null || typeof value !== \"object\") return packed(typeof value, String(value));\n    if (Array.isArray(value)) return packed(\"array\", value.map(nativeKey).join(\"\"));\n    invariant(\n      Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null,\n    );\n\n    return packed(\n      \"object\",\n      Object.entries(value)\n        .sort(([a], [b]) => a.localeCompare(b))\n        .map(([name, item]) => nativeKey(name) + nativeKey(item))\n        .join(\"\"),\n    );\n  };\n\n  const matchesNativeRow = (table: Table, row: Row, key: Row) =>\n    Object.entries(key).every(([name, value]) => {\n      if (value === null || row[name] === null) return value === row[name];\n      const column = col(table, name);\n\n      return (\n        nativeKey(column.mapToDriverValue(row[name])) === nativeKey(column.mapToDriverValue(value))\n      );\n    });\n\n  return { col, equal, copiedRow, matchesNativeRow };\n};\n\nexport interface Observation {\n  readonly table: Table;\n  readonly where: SQL;\n  rows: ReadonlyArray<Row>;\n}\n\n/** Expressions deliberately do not replace observed values. Read only semantic\n * columns when telemetry changes atomically, and state the physical result. */\nexport interface GuardedUpdate {\n  readonly rows: number;\n  readonly postcondition: SQL;\n}\n\nexport interface TransactionOwner<Failure> {\n  readonly database: any;\n  readonly journal: CommitJournal;\n  readonly marker: string;\n  readonly batch: boolean;\n  readonly observations: Observation[];\n  readonly postconditions: Array<SQL | (() => SQL)>;\n  readonly statements: Statement<any>[];\n  readonly guards: PreparedCommit<void>[];\n  exact(table: Table, row: Row): SQL;\n  read(\n    table: Table,\n    where: SQL,\n    options?: {\n      readonly lock?: boolean;\n      readonly limit?: number;\n      readonly observe?: boolean;\n      readonly admissionOnly?: boolean;\n      readonly takeOnly?: boolean;\n      readonly orderBy?: any;\n      readonly columns?: ReadonlyArray<string>;\n    },\n  ): Effect.Effect<Observation, Failure>;\n  write(query: any): Effect.Effect<void, Failure>;\n  insert(\n    table: Table,\n    values: Row,\n    key: Row,\n    absent?: boolean,\n  ): Effect.Effect<Observation, Failure>;\n  update(table: Table, key: Row, values: Row): Effect.Effect<void, Failure>;\n  updateGuarded(\n    table: Table,\n    where: SQL,\n    values: Row,\n    guard: GuardedUpdate,\n  ): Effect.Effect<void, Failure>;\n  /** Internal SQL only, run once after application work and before final guards. */\n  finalUpdate(\n    table: Table,\n    where: SQL,\n    values: Row,\n    guard: GuardedUpdate,\n  ): Effect.Effect<void, Failure>;\n  remove(table: Table, key: Row): Effect.Effect<void, Failure>;\n  check(condition: SQL): Effect.Effect<boolean, Failure>;\n  now(clock: { readonly engineNowMillis: SQL }): Effect.Effect<number, Failure>;\n  finish(): Effect.Effect<void, Failure>;\n}\n\nexport const makeTransactionOwner = <Failure>(\n  database: any,\n  journal: CommitJournal,\n  marker: string,\n  unavailable: () => Failure,\n  configuration: {\n    readonly client?: any;\n    readonly batch: boolean;\n    readonly locking: boolean;\n    readonly mysql: boolean;\n    readonly dialect: \"pg\" | \"mysql\" | \"sqlite\";\n  },\n): TransactionOwner<Failure> => {\n  const invariant: (value: unknown) => asserts value = (value) => {\n    if (!value) throw unavailable();\n  };\n\n  const { col, equal, matchesNativeRow } = makeTransactionRows(unavailable);\n  let phase: \"open\" | \"finishing\" | \"finished\" = \"open\";\n  let poisoned = false;\n  const open = () => invariant(phase === \"open\" && !poisoned);\n\n  const result = <A, E>(effect: Effect.Effect<A, E>) =>\n    effect.pipe(\n      (operation) => reportTransactionFailure(operation, unavailable),\n      Effect.mapError(unavailable),\n      Effect.catchDefect(() => Effect.fail(unavailable())),\n      Effect.onExit((exit) =>\n        Effect.sync(() => {\n          if (exit._tag === \"Failure\") poisoned = true;\n        }),\n      ),\n    );\n\n  const observations: Observation[] = [];\n  const statements: Statement<any>[] = [];\n  const postconditions: Array<SQL | (() => SQL)> = [];\n  const guards: PreparedCommit<void>[] = [];\n  const finalUpdates: Array<{ readonly query: any; readonly guard: GuardedUpdate }> = [];\n\n  const exactRow = (table: Table, row: Row) =>\n    both(\n      ...Object.entries(row).map(([key, value]) => {\n        if (typeof value !== \"string\") return equal(table, { [key]: value });\n\n        const column = col(table, key),\n          bound = sql.param(value, column);\n\n        return configuration.dialect === \"mysql\"\n          ? sql`binary ${column} = binary ${bound}`\n          : configuration.dialect === \"pg\"\n            ? sql`convert_to(cast(${column} as text), 'UTF8') = convert_to(cast(${bound} as text), 'UTF8')`\n            : sql`cast(${column} as blob) = cast(${bound} as blob)`;\n      }),\n    );\n\n  const toStatement = (query: any): Statement<any> => {\n    const rendered = query.toSQL();\n    const client = configuration.client ?? database.$client;\n\n    return compactD1GeneratedStatement(\n      client,\n      client.unsafe(rendered.sql, rendered.params),\n      unavailable,\n    );\n  };\n\n  const assertion = (condition: SQL) =>\n    database\n      .select({\n        value: sql`case when ${condition} then 1 else json_extract('[]', ${\"$[oauth-owner-\" + marker + \"]\"}) end`,\n      })\n      .from(sql`(select 1) as oauth_assertion`);\n\n  const observedConditions = (table: Table, where: SQL, rows: ReadonlyArray<Row>) => [\n    sql`(select count(*) from ${table} where ${where}) = ${rows.length}`,\n    ...rows.map(\n      (row) => sql`exists(select 1 from ${table} where ${both(where, exactRow(table, row))})`,\n    ),\n  ];\n\n  // All chunks remain inside the same native owner or atomic D1 batch. A single\n  // wide row is compacted; separate observations cannot accumulate unbounded\n  // bind parameters or expression depth in one final SELECT.\n  const chunks = (conditions: ReadonlyArray<SQL>) => {\n    const output: SQL[] = [];\n    let pending: SQL[] = [];\n\n    for (const condition of conditions) {\n      const candidate = [...pending, condition];\n      const rendered = assertion(both(...candidate)).toSQL();\n\n      if (\n        pending.length > 0 &&\n        (rendered.params.length > 96 || new TextEncoder().encode(rendered.sql).length > 48_000)\n      ) {\n        output.push(both(...pending));\n        pending = [condition];\n      } else pending = candidate;\n    }\n    if (pending.length > 0) output.push(both(...pending));\n\n    return output;\n  };\n\n  const appendAssertions = (conditions: ReadonlyArray<SQL>) => {\n    for (const condition of chunks(conditions)) statements.push(toStatement(assertion(condition)));\n  };\n\n  const observed = (table: Table, where: SQL, rows: ReadonlyArray<Row>) => {\n    const observation = { table, where, rows };\n\n    observations.push(observation);\n\n    return observation;\n  };\n\n  const queryCondition = (condition: SQL) =>\n    database\n      .select({\n        value: sql<number>`case when ${condition} then 1 else 0 end`.mapWith(Number).as(\"value\"),\n      })\n      .from(sql`(select 1) as oauth_guard`);\n\n  const conditionHolds = (condition: SQL) =>\n    Effect.gen(function* () {\n      const query = queryCondition(condition);\n\n      const rows: ReadonlyArray<Row> = yield* configuration.dialect === \"sqlite\"\n        ? toStatement(query)\n        : (query as NativeQuery<Row[]>);\n\n      invariant(rows.length === 1);\n\n      return rows[0]!.value === 1;\n    });\n\n  const guardedQuery = (table: Table, where: SQL, values: Row, guard: GuardedUpdate) => {\n    invariant(Number.isSafeInteger(guard.rows) && guard.rows > 0 && guard.rows <= 128);\n\n    return { query: database.update(table).set(values).where(where), guard: { ...guard } };\n  };\n\n  const applyGuarded = (entry: { readonly query: any; readonly guard: GuardedUpdate }) =>\n    Effect.gen(function* () {\n      if (configuration.batch) {\n        statements.push(toStatement(entry.query));\n        statements.push(toStatement(assertion(sql`changes() = ${entry.guard.rows}`)));\n        appendAssertions([entry.guard.postcondition]);\n      } else {\n        if (configuration.mysql) {\n          // mysql2 reports matched rows (FOUND_ROWS), including a telemetry no-op.\n          const changed = yield* entry.query as NativeQuery<{ readonly affectedRows: number }>;\n\n          invariant(changed.affectedRows === entry.guard.rows);\n        } else {\n          const changed = yield* entry.query.returning({ value: sql`1` }) as NativeQuery<\n            ReadonlyArray<Row>\n          >;\n\n          invariant(changed.length === entry.guard.rows);\n        }\n        invariant(yield* conditionHolds(entry.guard.postcondition));\n      }\n    });\n\n  const owner: TransactionOwner<Failure> = {\n    database,\n    journal,\n    marker,\n    batch: configuration.batch,\n    observations,\n    statements,\n    postconditions,\n    guards,\n    exact: exactRow,\n    read: (table, where, options = {}) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          const limit = options.limit ?? 64;\n\n          let query = database\n            .select(\n              options.columns === undefined\n                ? undefined\n                : Object.fromEntries(options.columns.map((key) => [key, col(table, key)])),\n            )\n            .from(table)\n            .where(where)\n            .limit(options.takeOnly ? limit : limit + 1);\n\n          if (options.orderBy !== undefined) query = query.orderBy(options.orderBy);\n          if (options.lock !== false && configuration.locking) query = query.for(\"update\");\n          const rows: Row[] = yield* query as NativeQuery<Row[]>;\n\n          invariant(rows.length <= limit);\n          if (configuration.batch && (options.observe !== false || options.admissionOnly))\n            appendAssertions(observedConditions(table, where, rows));\n\n          return options.observe === false || options.admissionOnly\n            ? { table, where, rows }\n            : observed(table, where, rows);\n        }),\n      ),\n    write: (query) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          if (configuration.batch) statements.push(toStatement(query));\n          else yield* query as NativeQuery<unknown>;\n        }),\n      ),\n    insert: (table, values, key, absent = false) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          let query = database.insert(table).values(values);\n\n          if (absent)\n            query = configuration.mysql\n              ? query.onDuplicateKeyUpdate({\n                  set: { [Object.keys(key)[0]!]: col(table, Object.keys(key)[0]!) },\n                })\n              : query.onConflictDoNothing();\n          yield* owner.write(query);\n          const where = equal(table, key);\n\n          if (configuration.batch) return observed(table, where, [values]);\n          const found = yield* owner.read(table, where, { limit: 1 });\n          const markerColumn = Object.keys(values).find((key) => values[key] === marker);\n\n          if (!absent || (markerColumn !== undefined && found.rows[0]?.[markerColumn] === marker))\n            invariant(\n              yield* owner.check(\n                sql`exists(select 1 from ${table} where ${both(where, exactRow(table, values))})`,\n              ),\n            );\n\n          return found;\n        }),\n      ),\n    update: (table, key, values) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          yield* owner.write(database.update(table).set(values).where(equal(table, key)));\n          for (const observation of observations)\n            if (observation.table === table)\n              observation.rows = observation.rows.map((row) =>\n                matchesNativeRow(table, row, key) ? { ...row, ...values } : row,\n              );\n        }),\n      ),\n    updateGuarded: (table, where, values, guard) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          const entry = guardedQuery(table, where, values, guard);\n\n          yield* applyGuarded(entry);\n          postconditions.push(entry.guard.postcondition);\n        }),\n      ),\n    finalUpdate: (table, where, values, guard) =>\n      result(\n        Effect.sync(() => {\n          open();\n          invariant(finalUpdates.length < 128);\n          finalUpdates.push(guardedQuery(table, where, values, guard));\n        }),\n      ),\n    remove: (table, key) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          yield* owner.write(database.delete(table).where(equal(table, key)));\n          for (const observation of observations)\n            if (observation.table === table)\n              observation.rows = observation.rows.filter(\n                (row) => !matchesNativeRow(table, row, key),\n              );\n        }),\n      ),\n    check: (condition) =>\n      result(\n        Effect.gen(function* () {\n          open();\n          const holds = yield* conditionHolds(condition);\n\n          if (configuration.batch)\n            statements.push(toStatement(assertion(holds ? condition : sql`not (${condition})`)));\n\n          return holds;\n        }),\n      ),\n    now: (clock) =>\n      result(\n        Effect.gen(function* () {\n          open();\n\n          const rows: Row[] = yield* database\n            .select({\n              value: sql<number>`${clock.engineNowMillis}`.mapWith(Number),\n            })\n            .from(sql`(select 1) as oauth_clock`) as NativeQuery<Row[]>;\n\n          const value = rows[0]?.value;\n\n          invariant(Number.isSafeInteger(value) && value >= 0);\n\n          return value as number;\n        }),\n      ),\n    finish: () =>\n      result(\n        Effect.gen(function* () {\n          open();\n          phase = \"finishing\";\n          Object.freeze(observations);\n          Object.freeze(postconditions);\n          Object.freeze(guards);\n          Object.freeze(finalUpdates);\n\n          // Close registration before any late-bound SQL predicate is materialized.\n          // No callback is invoked after the first final write.\n          const conditions = observations.flatMap((observation) =>\n            observedConditions(observation.table, observation.where, observation.rows),\n          );\n\n          conditions.push(\n            ...postconditions.map((condition) =>\n              typeof condition === \"function\" ? condition() : condition,\n            ),\n          );\n          conditions.push(...finalUpdates.map((entry) => entry.guard.postcondition));\n          for (const guard of guards) {\n            const status = yield* Effect.result(guard.read);\n\n            invariant(status._tag === \"Failure\" && status.failure._tag === \"CommitPending\");\n          }\n          invariant(!poisoned);\n          for (const entry of finalUpdates) yield* applyGuarded(entry);\n          if (configuration.batch) appendAssertions(conditions);\n          else\n            for (const condition of chunks(conditions)) invariant(yield* conditionHolds(condition));\n          invariant(!poisoned);\n        }).pipe(\n          Effect.ensuring(\n            Effect.sync(() => {\n              phase = \"finished\";\n            }),\n          ),\n        ),\n      ),\n  };\n\n  return owner;\n};\n"],"mappings":";;;;;AA0BA,MAAM,sBAA+B,OAA6B,gBAA+B;CAC/F,MAAM,WAAW,YAAY;CAE7B,MAAM,MACJ,OAAO,aAAa,YAAY,aAAa,QAAQ,UAAU,WAC3D,SAAS,OACT,KAAA;CAEN,OACE,QAAQ,KAAA,KACR,MAAM,QAAQ,SAAS,KACvB,MAAM,QAAQ,OACX,WACC,MAAM,aAAa,MAAM,KACzB,OAAO,OAAO,UAAU,YACxB,OAAO,UAAU,QACjB,UAAU,OAAO,SACjB,OAAO,MAAM,SAAS,GAC1B;AAEJ;;;AAIA,MAAa,4BACX,QACA,gBAEA,OAAO,WAAW,SAAS,UACzB,mBAAmB,OAAO,WAAW,IACjC,OAAO,UAAU,KAAK,IACtB,kBAAkB,oBAAoB,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,UAAU,KAAK,CAAC,CAAC,CAC/F;AAEF,MAAa,QAAQ,GAAG,UACtB,cAAc,GAAG,KAAK,KAAK,GAAG;AAEhC,MAAa,uBAAgC,gBAA+B;CAC1E,MAAM,aAAgD,UAAU;EAC9D,IAAI,CAAC,OAAO,MAAM,YAAY;CAChC;CAEA,MAAM,OAAO,OAAc,QAAgB;EACzC,MAAM,QAAQ,gBAAgB,KAAK,CAAC,CAAC;EAErC,UAAU,UAAU,KAAA,CAAS;EAE7B,OAAO;CACT;CAEA,MAAM,SAAS,OAAc,WAC3B,KACE,GAAG,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,WACnC,UAAU,OAAO,OAAO,IAAI,OAAO,GAAG,CAAC,IAAI,GAAG,IAAI,OAAO,GAAG,GAAG,KAAK,CACtE,CACF;;;CAIF,MAAM,aAAa,QAAa;EAC9B,MAAM,uBAAO,IAAI,QAAgB;EAEjC,MAAM,aAAa,UAAyB;GAC1C,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,KAAK,IAAI,KAAK,GAAG;GACpE,KAAK,IAAI,KAAK;GACd,IAAI,iBAAiB,QAAQ,iBAAiB,eAAe,YAAY,OAAO,KAAK,GACnF;GACF,UACE,MAAM,QAAQ,KAAK,KACjB,OAAO,eAAe,KAAK,MAAM,OAAO,aACxC,OAAO,eAAe,KAAK,MAAM,IACrC;GACA,KAAK,MAAM,QAAQ,OAAO,OAAO,KAAK,GAAG,UAAU,IAAI;EACzD;EAEA,UAAU,GAAG;EAEb,OAAO,gBAAgB,GAAG;CAC5B;CAEA,MAAM,aAAa,UAA2B;EAC5C,MAAM,UAAU,KAAa,SAAiB,MAAM,KAAK,SAAS,MAAM;EAExE,IAAI,iBAAiB,MAAM,OAAO,OAAO,QAAQ,MAAM,YAAY,CAAC;EACpE,IAAI,OAAO,UAAU,UAAU,OAAO,OAAO,UAAU,MAAM,SAAS,CAAC;EAEvE,MAAM,QACJ,iBAAiB,cACb,IAAI,WAAW,KAAK,IACpB,YAAY,OAAO,KAAK,IACtB,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,IAC/D,KAAA;EAER,IAAI,UAAU,KAAA,GAAW,OAAO,OAAO,SAAS,MAAM,KAAK,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;EAC3E,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK,CAAC;EAC1F,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;EAC9E,UACE,OAAO,eAAe,KAAK,MAAM,OAAO,aAAa,OAAO,eAAe,KAAK,MAAM,IACxF;EAEA,OAAO,OACL,UACA,OAAO,QAAQ,KAAK,CAAC,CAClB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CACtC,KAAK,CAAC,MAAM,UAAU,UAAU,IAAI,IAAI,UAAU,IAAI,CAAC,CAAC,CACxD,KAAK,EAAE,CACZ;CACF;CAEA,MAAM,oBAAoB,OAAc,KAAU,QAChD,OAAO,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,WAAW;EAC3C,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,OAAO,UAAU,IAAI;EAC/D,MAAM,SAAS,IAAI,OAAO,IAAI;EAE9B,OACE,UAAU,OAAO,iBAAiB,IAAI,KAAK,CAAC,MAAM,UAAU,OAAO,iBAAiB,KAAK,CAAC;CAE9F,CAAC;CAEH,OAAO;EAAE;EAAK;EAAO;EAAW;CAAiB;AACnD;AAiEA,MAAa,wBACX,UACA,SACA,QACA,aACA,kBAO8B;CAC9B,MAAM,aAAgD,UAAU;EAC9D,IAAI,CAAC,OAAO,MAAM,YAAY;CAChC;CAEA,MAAM,EAAE,KAAK,OAAO,qBAAqB,oBAAoB,WAAW;CACxE,IAAI,QAA2C;CAC/C,IAAI,WAAW;CACf,MAAM,aAAa,UAAU,UAAU,UAAU,CAAC,QAAQ;CAE1D,MAAM,UAAgB,WACpB,OAAO,MACJ,cAAc,yBAAyB,WAAW,WAAW,GAC9D,OAAO,SAAS,WAAW,GAC3B,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,GACnD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,WAAW;CAC1C,CAAC,CACH,CACF;CAEF,MAAM,eAA8B,CAAC;CACrC,MAAM,aAA+B,CAAC;CACtC,MAAM,iBAA2C,CAAC;CAClD,MAAM,SAAiC,CAAC;CACxC,MAAM,eAA8E,CAAC;CAErF,MAAM,YAAY,OAAc,QAC9B,KACE,GAAG,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW;EAC3C,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;EAEnE,MAAM,SAAS,IAAI,OAAO,GAAG,GAC3B,QAAQ,IAAI,MAAM,OAAO,MAAM;EAEjC,OAAO,cAAc,YAAY,UAC7B,GAAG,UAAU,OAAO,YAAY,UAChC,cAAc,YAAY,OACxB,GAAG,mBAAmB,OAAO,uCAAuC,MAAM,sBAC1E,GAAG,QAAQ,OAAO,mBAAmB,MAAM;CACnD,CAAC,CACH;CAEF,MAAM,eAAe,UAA+B;EAClD,MAAM,WAAW,MAAM,MAAM;EAC7B,MAAM,SAAS,cAAc,UAAU,SAAS;EAEhD,OAAO,4BACL,QACA,OAAO,OAAO,SAAS,KAAK,SAAS,MAAM,GAC3C,WACF;CACF;CAEA,MAAM,aAAa,cACjB,SACG,OAAO,EACN,OAAO,GAAG,aAAa,UAAU,kCAAkC,mBAAmB,SAAS,IAAI,OACrG,CAAC,CAAC,CACD,KAAK,GAAG,+BAA+B;CAE5C,MAAM,sBAAsB,OAAc,OAAY,SAA6B,CACjF,GAAG,yBAAyB,MAAM,SAAS,MAAM,MAAM,KAAK,UAC5D,GAAG,KAAK,KACL,QAAQ,GAAG,wBAAwB,MAAM,SAAS,KAAK,OAAO,SAAS,OAAO,GAAG,CAAC,EAAE,EACvF,CACF;CAKA,MAAM,UAAU,eAAmC;EACjD,MAAM,SAAgB,CAAC;EACvB,IAAI,UAAiB,CAAC;EAEtB,KAAK,MAAM,aAAa,YAAY;GAClC,MAAM,YAAY,CAAC,GAAG,SAAS,SAAS;GACxC,MAAM,WAAW,UAAU,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM;GAErD,IACE,QAAQ,SAAS,MAChB,SAAS,OAAO,SAAS,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS,GAAG,CAAC,CAAC,SAAS,OAChF;IACA,OAAO,KAAK,KAAK,GAAG,OAAO,CAAC;IAC5B,UAAU,CAAC,SAAS;GACtB,OAAO,UAAU;EACnB;EACA,IAAI,QAAQ,SAAS,GAAG,OAAO,KAAK,KAAK,GAAG,OAAO,CAAC;EAEpD,OAAO;CACT;CAEA,MAAM,oBAAoB,eAAmC;EAC3D,KAAK,MAAM,aAAa,OAAO,UAAU,GAAG,WAAW,KAAK,YAAY,UAAU,SAAS,CAAC,CAAC;CAC/F;CAEA,MAAM,YAAY,OAAc,OAAY,SAA6B;EACvE,MAAM,cAAc;GAAE;GAAO;GAAO;EAAK;EAEzC,aAAa,KAAK,WAAW;EAE7B,OAAO;CACT;CAEA,MAAM,kBAAkB,cACtB,SACG,OAAO,EACN,OAAO,GAAW,aAAa,UAAU,oBAAoB,QAAQ,MAAM,CAAC,CAAC,GAAG,OAAO,EACzF,CAAC,CAAC,CACD,KAAK,GAAG,2BAA2B;CAExC,MAAM,kBAAkB,cACtB,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,eAAe,SAAS;EAEtC,MAAM,OAA2B,OAAO,cAAc,YAAY,WAC9D,YAAY,KAAK,IAChB;EAEL,UAAU,KAAK,WAAW,CAAC;EAE3B,OAAO,KAAK,EAAE,CAAE,UAAU;CAC5B,CAAC;CAEH,MAAM,gBAAgB,OAAc,OAAY,QAAa,UAAyB;EACpF,UAAU,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO,KAAK,MAAM,QAAQ,GAAG;EAEjF,OAAO;GAAE,OAAO,SAAS,OAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,KAAK;GAAG,OAAO,EAAE,GAAG,MAAM;EAAE;CACvF;CAEA,MAAM,gBAAgB,UACpB,OAAO,IAAI,aAAa;EACtB,IAAI,cAAc,OAAO;GACvB,WAAW,KAAK,YAAY,MAAM,KAAK,CAAC;GACxC,WAAW,KAAK,YAAY,UAAU,GAAG,eAAe,MAAM,MAAM,MAAM,CAAC,CAAC;GAC5E,iBAAiB,CAAC,MAAM,MAAM,aAAa,CAAC;EAC9C,OAAO;GACL,IAAI,cAAc,OAAO;IAEvB,MAAM,UAAU,OAAO,MAAM;IAE7B,UAAU,QAAQ,iBAAiB,MAAM,MAAM,IAAI;GACrD,OAAO;IACL,MAAM,UAAU,OAAO,MAAM,MAAM,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAI9D,UAAU,QAAQ,WAAW,MAAM,MAAM,IAAI;GAC/C;GACA,UAAU,OAAO,eAAe,MAAM,MAAM,aAAa,CAAC;EAC5D;CACF,CAAC;CAEH,MAAM,QAAmC;EACvC;EACA;EACA;EACA,OAAO,cAAc;EACrB;EACA;EACA;EACA;EACA,OAAO;EACP,OAAO,OAAO,OAAO,UAAU,CAAC,MAC9B,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,MAAM,QAAQ,QAAQ,SAAS;GAE/B,IAAI,QAAQ,SACT,OACC,QAAQ,YAAY,KAAA,IAChB,KAAA,IACA,OAAO,YAAY,QAAQ,QAAQ,KAAK,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAC7E,CAAC,CACA,KAAK,KAAK,CAAC,CACX,MAAM,KAAK,CAAC,CACZ,MAAM,QAAQ,WAAW,QAAQ,QAAQ,CAAC;GAE7C,IAAI,QAAQ,YAAY,KAAA,GAAW,QAAQ,MAAM,QAAQ,QAAQ,OAAO;GACxE,IAAI,QAAQ,SAAS,SAAS,cAAc,SAAS,QAAQ,MAAM,IAAI,QAAQ;GAC/E,MAAM,OAAc,OAAO;GAE3B,UAAU,KAAK,UAAU,KAAK;GAC9B,IAAI,cAAc,UAAU,QAAQ,YAAY,SAAS,QAAQ,gBAC/D,iBAAiB,mBAAmB,OAAO,OAAO,IAAI,CAAC;GAEzD,OAAO,QAAQ,YAAY,SAAS,QAAQ,gBACxC;IAAE;IAAO;IAAO;GAAK,IACrB,SAAS,OAAO,OAAO,IAAI;EACjC,CAAC,CACH;EACF,QAAQ,UACN,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,IAAI,cAAc,OAAO,WAAW,KAAK,YAAY,KAAK,CAAC;QACtD,OAAO;EACd,CAAC,CACH;EACF,SAAS,OAAO,QAAQ,KAAK,SAAS,UACpC,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,IAAI,QAAQ,SAAS,OAAO,KAAK,CAAC,CAAC,OAAO,MAAM;GAEhD,IAAI,QACF,QAAQ,cAAc,QAClB,MAAM,qBAAqB,EACzB,KAAK,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,KAAM,IAAI,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,EAAG,EAAE,EAClE,CAAC,IACD,MAAM,oBAAoB;GAChC,OAAO,MAAM,MAAM,KAAK;GACxB,MAAM,QAAQ,MAAM,OAAO,GAAG;GAE9B,IAAI,cAAc,OAAO,OAAO,SAAS,OAAO,OAAO,CAAC,MAAM,CAAC;GAC/D,MAAM,QAAQ,OAAO,MAAM,KAAK,OAAO,OAAO,EAAE,OAAO,EAAE,CAAC;GAC1D,MAAM,eAAe,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,QAAQ,OAAO,SAAS,MAAM;GAE7E,IAAI,CAAC,UAAW,iBAAiB,KAAA,KAAa,MAAM,KAAK,EAAE,GAAG,kBAAkB,QAC9E,UACE,OAAO,MAAM,MACX,GAAG,wBAAwB,MAAM,SAAS,KAAK,OAAO,SAAS,OAAO,MAAM,CAAC,EAAE,EACjF,CACF;GAEF,OAAO;EACT,CAAC,CACH;EACF,SAAS,OAAO,KAAK,WACnB,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,OAAO,MAAM,MAAM,SAAS,OAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC;GAC9E,KAAK,MAAM,eAAe,cACxB,IAAI,YAAY,UAAU,OACxB,YAAY,OAAO,YAAY,KAAK,KAAK,QACvC,iBAAiB,OAAO,KAAK,GAAG,IAAI;IAAE,GAAG;IAAK,GAAG;GAAO,IAAI,GAC9D;EACN,CAAC,CACH;EACF,gBAAgB,OAAO,OAAO,QAAQ,UACpC,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,MAAM,QAAQ,aAAa,OAAO,OAAO,QAAQ,KAAK;GAEtD,OAAO,aAAa,KAAK;GACzB,eAAe,KAAK,MAAM,MAAM,aAAa;EAC/C,CAAC,CACH;EACF,cAAc,OAAO,OAAO,QAAQ,UAClC,OACE,OAAO,WAAW;GAChB,KAAK;GACL,UAAU,aAAa,SAAS,GAAG;GACnC,aAAa,KAAK,aAAa,OAAO,OAAO,QAAQ,KAAK,CAAC;EAC7D,CAAC,CACH;EACF,SAAS,OAAO,QACd,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,OAAO,MAAM,MAAM,SAAS,OAAO,KAAK,CAAC,CAAC,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC;GAClE,KAAK,MAAM,eAAe,cACxB,IAAI,YAAY,UAAU,OACxB,YAAY,OAAO,YAAY,KAAK,QACjC,QAAQ,CAAC,iBAAiB,OAAO,KAAK,GAAG,CAC5C;EACN,CAAC,CACH;EACF,QAAQ,cACN,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,MAAM,QAAQ,OAAO,eAAe,SAAS;GAE7C,IAAI,cAAc,OAChB,WAAW,KAAK,YAAY,UAAU,QAAQ,YAAY,GAAG,QAAQ,UAAU,EAAE,CAAC,CAAC;GAErF,OAAO;EACT,CAAC,CACH;EACF,MAAM,UACJ,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GAQL,MAAM,SAAQ,OANa,SACxB,OAAO,EACN,OAAO,GAAW,GAAG,MAAM,kBAAkB,QAAQ,MAAM,EAC7D,CAAC,CAAC,CACD,KAAK,GAAG,2BAA2B,EAAA,CAEnB,EAAE,EAAE;GAEvB,UAAU,OAAO,cAAc,KAAK,KAAK,SAAS,CAAC;GAEnD,OAAO;EACT,CAAC,CACH;EACF,cACE,OACE,OAAO,IAAI,aAAa;GACtB,KAAK;GACL,QAAQ;GACR,OAAO,OAAO,YAAY;GAC1B,OAAO,OAAO,cAAc;GAC5B,OAAO,OAAO,MAAM;GACpB,OAAO,OAAO,YAAY;GAI1B,MAAM,aAAa,aAAa,SAAS,gBACvC,mBAAmB,YAAY,OAAO,YAAY,OAAO,YAAY,IAAI,CAC3E;GAEA,WAAW,KACT,GAAG,eAAe,KAAK,cACrB,OAAO,cAAc,aAAa,UAAU,IAAI,SAClD,CACF;GACA,WAAW,KAAK,GAAG,aAAa,KAAK,UAAU,MAAM,MAAM,aAAa,CAAC;GACzE,KAAK,MAAM,SAAS,QAAQ;IAC1B,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,IAAI;IAE9C,UAAU,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,eAAe;GAChF;GACA,UAAU,CAAC,QAAQ;GACnB,KAAK,MAAM,SAAS,cAAc,OAAO,aAAa,KAAK;GAC3D,IAAI,cAAc,OAAO,iBAAiB,UAAU;QAElD,KAAK,MAAM,aAAa,OAAO,UAAU,GAAG,UAAU,OAAO,eAAe,SAAS,CAAC;GACxF,UAAU,CAAC,QAAQ;EACrB,CAAC,CAAC,CAAC,KACD,OAAO,SACL,OAAO,WAAW;GAChB,QAAQ;EACV,CAAC,CACH,CACF,CACF;CACJ;CAEA,OAAO;AACT"}

package/dist/email/EmailActionEvidence.d.mts

@@ -0,0 +1,33 @@
+import { AuthInvocation } from "../operations/context.mjs";
+import { AuthenticationEvidence, AuthenticationRequirement } from "../sessions/models.mjs";
+import { EmailActionChallenge } from "./models.mjs";
+import { EmailActionRequired, EmailUnavailable } from "./errors.mjs";
+import { Context, Effect, Redacted } from "effect";
+//#region src/email/EmailActionEvidence.d.ts
+interface EmailActionAuthorization {
+  readonly challenge: EmailActionChallenge;
+  readonly evidence: AuthenticationEvidence;
+  readonly requirement: AuthenticationRequirement;
+}
+declare const EmailActionEvidence_base: Context.ServiceClass<EmailActionEvidence, "effect-auth/EmailActionEvidence", {
+  readonly verify: (input: {
+    readonly invocation: AuthInvocation;
+    readonly challenge: EmailActionChallenge;
+    readonly proof?: Redacted.Redacted<string>;
+  }) => Effect.Effect<{
+    readonly evidence: AuthenticationEvidence;
+    readonly requirement: AuthenticationRequirement;
+  }, EmailActionRequired | EmailUnavailable>;
+}>;
+/** Current subject/action authority; no default grants mutations. Target email
+ * proof and login-pending credentials never satisfy this independent authorization.
+ * Consume replay-sensitive factors in their own authority before returning; later
+ * identity CAS failure does not refund them. Counter advancement preserves semantic
+ * factor revision, while revocation/replacement changes it and wins final CAS.
+ * Request/change and completion are separate calls requiring fresh authorization;
+ * no promise that a consumed one-time factor can be resubmitted at completion.
+ */
+declare class EmailActionEvidence extends EmailActionEvidence_base {}
+//#endregion
+export { EmailActionAuthorization, EmailActionEvidence };
+//# sourceMappingURL=EmailActionEvidence.d.mts.map

package/dist/email/EmailActionEvidence.mjs

@@ -0,0 +1,15 @@
+import { Context } from "effect";
+//#region src/email/EmailActionEvidence.ts
+/** Current subject/action authority; no default grants mutations. Target email
+* proof and login-pending credentials never satisfy this independent authorization.
+* Consume replay-sensitive factors in their own authority before returning; later
+* identity CAS failure does not refund them. Counter advancement preserves semantic
+* factor revision, while revocation/replacement changes it and wins final CAS.
+* Request/change and completion are separate calls requiring fresh authorization;
+* no promise that a consumed one-time factor can be resubmitted at completion.
+*/
+var EmailActionEvidence = class extends Context.Service()("effect-auth/EmailActionEvidence") {};
+//#endregion
+export { EmailActionEvidence };
+
+//# sourceMappingURL=EmailActionEvidence.mjs.map

package/dist/email/EmailActionEvidence.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailActionEvidence.mjs","names":[],"sources":["../../src/email/EmailActionEvidence.ts"],"sourcesContent":["import { Context, type Effect, type Redacted } from \"effect\";\n\nimport type { AuthInvocation } from \"../operations/context\";\nimport type { AuthenticationEvidence, AuthenticationRequirement } from \"../sessions/models\";\nimport type { EmailActionRequired, EmailUnavailable } from \"./errors\";\nimport type { EmailActionChallenge } from \"./models\";\n\nexport interface EmailActionAuthorization {\n  readonly challenge: EmailActionChallenge;\n  readonly evidence: AuthenticationEvidence;\n  readonly requirement: AuthenticationRequirement;\n}\n\n/** Current subject/action authority; no default grants mutations. Target email\n * proof and login-pending credentials never satisfy this independent authorization.\n * Consume replay-sensitive factors in their own authority before returning; later\n * identity CAS failure does not refund them. Counter advancement preserves semantic\n * factor revision, while revocation/replacement changes it and wins final CAS.\n * Request/change and completion are separate calls requiring fresh authorization;\n * no promise that a consumed one-time factor can be resubmitted at completion.\n */\nexport class EmailActionEvidence extends Context.Service<\n  EmailActionEvidence,\n  {\n    readonly verify: (input: {\n      readonly invocation: AuthInvocation;\n      readonly challenge: EmailActionChallenge;\n      readonly proof?: Redacted.Redacted<string>;\n    }) => Effect.Effect<\n      {\n        readonly evidence: AuthenticationEvidence;\n        readonly requirement: AuthenticationRequirement;\n      },\n      EmailActionRequired | EmailUnavailable\n    >;\n  }\n>()(\"effect-auth/EmailActionEvidence\") {}\n"],"mappings":";;;;;;;;;;AAqBA,IAAa,sBAAb,cAAyC,QAAQ,QAe/C,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC"}

package/dist/email/EmailAddressPersistence.d.mts

@@ -0,0 +1,63 @@
+import { SubjectId } from "../Schema.mjs";
+import { AuthenticationRevision } from "../sessions/models.mjs";
+import { LoginIdentifier } from "../identity/models.mjs";
+import { CommitJournal, PreparedCommit } from "../hooks/commit.mjs";
+import { SessionInvalidationWindow } from "../sessions/invalidation.mjs";
+import { EmailAddressDecision, EmailCommandId, EmailCredentialSnapshot } from "./models.mjs";
+import { ProofCompletionInput } from "../proofs/ProofPersistence.mjs";
+import { ProofCompletionPlan } from "../proofs/completion.mjs";
+import { EmailUnavailable } from "./errors.mjs";
+import { EmailActionAuthorization } from "./EmailActionEvidence.mjs";
+import { Context, Effect } from "effect";
+//#region src/email/EmailAddressPersistence.d.ts
+type PrepareEmailCommit<V, A> = (value: V, journal: CommitJournal) => PreparedCommit<A>;
+interface EmailAddressTarget {
+  readonly revision: AuthenticationRevision;
+  readonly source?: EmailCredentialSnapshot;
+  /** Target absent or same-subject unverified. Conflicts remain privately suppressed. */
+  readonly eligible: boolean;
+}
+interface EmailAddressMutation {
+  readonly moduleId: string;
+  readonly commandId: EmailCommandId;
+  readonly target: LoginIdentifier;
+  readonly captured: EmailAddressTarget;
+  readonly authorization: EmailActionAuthorization;
+  readonly completion: ProofCompletionPlan;
+  readonly invalidation: SessionInvalidationWindow;
+}
+declare const EmailAddressPersistence_base: Context.ServiceClass<EmailAddressPersistence, "effect-auth/EmailAddressPersistence", {
+  readonly target: (input: {
+    readonly moduleId: string;
+    readonly subjectId: SubjectId;
+    readonly target: LoginIdentifier;
+    readonly sourceCredentialId?: string;
+  }) => Effect.Effect<EmailAddressTarget, EmailUnavailable>;
+  /** Nonconsuming authoritative preflight before consuming independent action proof. Final mutation repeats it. */
+  readonly checkCompletion: (input: ProofCompletionInput) => Effect.Effect<boolean, EmailUnavailable>;
+  readonly verifyWithProof: <A>(input: EmailAddressMutation, prepare: PrepareEmailCommit<EmailAddressDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+  readonly changeWithProof: <A>(input: EmailAddressMutation, prepare: PrepareEmailCommit<EmailAddressDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+  readonly cleanup: <A>(input: {
+    readonly moduleId: string;
+    readonly limit: number;
+  }, prepare: PrepareEmailCommit<{
+    readonly removed: number;
+    readonly hasMore: boolean;
+  }, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+}>;
+/** Same-authority identity mutations, never generic CRUD. Preparation/crypto/hooks
+ * run before locks; plan.commit resolves the actual transaction-bound implementation
+ * from Effect context when it executes.
+ * Root implementations reject ambient ownership they cannot join before writes.
+ * Verify/change consume the exact continuation, enforce current subject/source and
+ * factor-policy/fresh-clock predicates, global target uniqueness, write verified
+ * identifier + email credential, bump binding/credential/security revisions, and
+ * invalidate pending/sessions in ONE physical transaction/batch. A zero-row protected
+ * write cannot burn the proof. D1 preplans receipts before its guarded batch; exact
+ * guard loss discards that journal before a separate rejected owner. Unknown outcome
+ * is unavailable. Generic IdentityMutation remains unmounted without this same join.
+ */
+declare class EmailAddressPersistence extends EmailAddressPersistence_base {}
+//#endregion
+export { EmailAddressMutation, EmailAddressPersistence, EmailAddressTarget, PrepareEmailCommit };
+//# sourceMappingURL=EmailAddressPersistence.d.mts.map

package/dist/email/EmailAddressPersistence.mjs

@@ -0,0 +1,19 @@
+import { Context } from "effect";
+//#region src/email/EmailAddressPersistence.ts
+/** Same-authority identity mutations, never generic CRUD. Preparation/crypto/hooks
+* run before locks; plan.commit resolves the actual transaction-bound implementation
+* from Effect context when it executes.
+* Root implementations reject ambient ownership they cannot join before writes.
+* Verify/change consume the exact continuation, enforce current subject/source and
+* factor-policy/fresh-clock predicates, global target uniqueness, write verified
+* identifier + email credential, bump binding/credential/security revisions, and
+* invalidate pending/sessions in ONE physical transaction/batch. A zero-row protected
+* write cannot burn the proof. D1 preplans receipts before its guarded batch; exact
+* guard loss discards that journal before a separate rejected owner. Unknown outcome
+* is unavailable. Generic IdentityMutation remains unmounted without this same join.
+*/
+var EmailAddressPersistence = class extends Context.Service()("effect-auth/EmailAddressPersistence") {};
+//#endregion
+export { EmailAddressPersistence };
+
+//# sourceMappingURL=EmailAddressPersistence.mjs.map

package/dist/email/EmailAddressPersistence.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailAddressPersistence.mjs","names":[],"sources":["../../src/email/EmailAddressPersistence.ts"],"sourcesContent":["import { Context, type Effect } from \"effect\";\n\nimport type { CommitJournal, PreparedCommit } from \"../hooks/commit\";\nimport type { LoginIdentifier } from \"../identity/models\";\nimport type { ProofCompletionPlan } from \"../proofs/completion\";\nimport type { ProofCompletionInput } from \"../proofs/ProofPersistence\";\nimport type { SubjectId } from \"../Schema\";\nimport type { SessionInvalidationWindow } from \"../sessions/invalidation\";\nimport type { AuthenticationRevision } from \"../sessions/models\";\nimport type { EmailActionAuthorization } from \"./EmailActionEvidence\";\nimport type { EmailUnavailable } from \"./errors\";\nimport type { EmailAddressDecision, EmailCommandId, EmailCredentialSnapshot } from \"./models\";\n\nexport type PrepareEmailCommit<V, A> = (value: V, journal: CommitJournal) => PreparedCommit<A>;\n\nexport interface EmailAddressTarget {\n  readonly revision: AuthenticationRevision;\n  readonly source?: EmailCredentialSnapshot;\n  /** Target absent or same-subject unverified. Conflicts remain privately suppressed. */\n  readonly eligible: boolean;\n}\n\nexport interface EmailAddressMutation {\n  readonly moduleId: string;\n  readonly commandId: EmailCommandId;\n  readonly target: LoginIdentifier;\n  readonly captured: EmailAddressTarget;\n  readonly authorization: EmailActionAuthorization;\n  readonly completion: ProofCompletionPlan;\n  readonly invalidation: SessionInvalidationWindow;\n}\n\n/** Same-authority identity mutations, never generic CRUD. Preparation/crypto/hooks\n * run before locks; plan.commit resolves the actual transaction-bound implementation\n * from Effect context when it executes.\n * Root implementations reject ambient ownership they cannot join before writes.\n * Verify/change consume the exact continuation, enforce current subject/source and\n * factor-policy/fresh-clock predicates, global target uniqueness, write verified\n * identifier + email credential, bump binding/credential/security revisions, and\n * invalidate pending/sessions in ONE physical transaction/batch. A zero-row protected\n * write cannot burn the proof. D1 preplans receipts before its guarded batch; exact\n * guard loss discards that journal before a separate rejected owner. Unknown outcome\n * is unavailable. Generic IdentityMutation remains unmounted without this same join.\n */\nexport class EmailAddressPersistence extends Context.Service<\n  EmailAddressPersistence,\n  {\n    readonly target: (input: {\n      readonly moduleId: string;\n      readonly subjectId: SubjectId;\n      readonly target: LoginIdentifier;\n      readonly sourceCredentialId?: string;\n    }) => Effect.Effect<EmailAddressTarget, EmailUnavailable>;\n    /** Nonconsuming authoritative preflight before consuming independent action proof. Final mutation repeats it. */\n    readonly checkCompletion: (\n      input: ProofCompletionInput,\n    ) => Effect.Effect<boolean, EmailUnavailable>;\n    readonly verifyWithProof: <A>(\n      input: EmailAddressMutation,\n      prepare: PrepareEmailCommit<EmailAddressDecision, A>,\n    ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n    readonly changeWithProof: <A>(\n      input: EmailAddressMutation,\n      prepare: PrepareEmailCommit<EmailAddressDecision, A>,\n    ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n    readonly cleanup: <A>(\n      input: { readonly moduleId: string; readonly limit: number },\n      prepare: PrepareEmailCommit<{ readonly removed: number; readonly hasMore: boolean }, A>,\n    ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n  }\n>()(\"effect-auth/EmailAddressPersistence\") {}\n"],"mappings":";;;;;;;;;;;;;;AA4CA,IAAa,0BAAb,cAA6C,QAAQ,QA0BnD,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC"}

package/dist/email/EmailIdentifierNotifier.d.mts

@@ -0,0 +1,30 @@
+import { LoginIdentifier } from "../identity/models.mjs";
+import { HookDeliveryFailed, LifecycleEventId } from "../hooks/models.mjs";
+import { HookContributionId, HookHandlers } from "../hooks/LifecycleHooks.mjs";
+import "../Hooks.mjs";
+import { Context, Effect } from "effect";
+//#region src/email/EmailIdentifierNotifier.d.ts
+declare const EmailIdentifierNotifier_base: Context.ServiceClass<EmailIdentifierNotifier, "effect-auth/EmailIdentifierNotifier", {
+  readonly notify: (input: {
+    readonly eventId: LifecycleEventId;
+    readonly oldIdentifier: LoginIdentifier;
+    readonly newIdentifier: LoginIdentifier;
+    readonly occurredAtMillis: number;
+  }) => Effect.Effect<void, HookDeliveryFailed>;
+}>;
+/** Optional explicit notification capability. Vendor failure never rolls back an
+ * identifier change. Stable event IDs support consumer idempotency; direct hooks
+ * are best effort, not a durable outbox or an exactly-once delivery guarantee.
+ */
+declare class EmailIdentifierNotifier extends EmailIdentifierNotifier_base {}
+declare const emailIdentifierNotifications: <const Id extends string>(moduleId: Id) => Readonly<{
+  contribution: Readonly<{
+    id: `email/${Id}/old-address-notification`;
+    resolve: Effect.Effect<HookHandlers<never, HookDeliveryFailed>, never, HookContributionId<`email/${Id}/old-address-notification`>>;
+    layer: <R, E>(handlers: HookHandlers<R, E>) => import("effect/Layer").Layer<HookContributionId<`email/${Id}/old-address-notification`>, never, Exclude<R, import("effect/Scope").Scope>>;
+  }>;
+  layer: import("effect/Layer").Layer<HookContributionId<`email/${Id}/old-address-notification`>, never, EmailIdentifierNotifier>;
+}>;
+//#endregion
+export { EmailIdentifierNotifier, emailIdentifierNotifications };
+//# sourceMappingURL=EmailIdentifierNotifier.d.mts.map