honertia 0.1.9 → 0.1.10

package/README.md

@@ -511,10 +511,11 @@ const input = yield* validateRequest(
   S.Struct({ name: requiredString, description: S.optional(S.String) }),
   { errorComponent: 'Projects/Create' }
 )
-// input is fully typed: { name: string, description?: string }
+// input is Validated<{ name: string, description?: string }>
 ```
 
 On validation failure, re-renders `errorComponent` with field-level errors.
+`validateRequest` returns a branded `Validated<T>` value that you can require for writes.
 
 #### `DatabaseService` - Database Access
 
@@ -552,7 +553,9 @@ import { Effect, Schema as S } from 'effect'
 import {
   action,
   authorize,
+  asTrusted,
   validateRequest,
+  dbMutation,
   DatabaseService,
   redirect,
   requiredString,
@@ -575,12 +578,12 @@ export const createProject = action(
 
     // 3. Database - perform the mutation
     const db = yield* DatabaseService
-    yield* Effect.tryPromise(() =>
-      db.insert(projects).values({
+    yield* dbMutation(db, async (db) => {
+      await db.insert(projects).values(asTrusted({
         ...input,
         userId: auth.user.id,
-      })
-    )
+      }))
+    })
 
     // 4. Response - redirect on success
     return yield* redirect('/projects')
@@ -656,23 +659,63 @@ export const searchProjects = action(
 
 ### Helper Utilities
 
+#### `dbMutation` - Safe Writes
+
+Use `dbMutation` for writes that require validated or trusted input:
+
+```typescript
+import { DatabaseService, dbMutation, validateRequest, asTrusted, authorize } from 'honertia/effect'
+
+const auth = yield* authorize()
+const input = yield* validateRequest(CreateProjectSchema)
+const values = asTrusted({ userId: auth.user.id, ...input })
+const db = yield* DatabaseService
+
+yield* dbMutation(db, async (db) => {
+  await db.insert(projects).values(values)
+})
+```
+
+Use `asTrusted` for server-derived values like audit logs or usage meters, or when combining validated input with server-only fields.
+`dbMutation` also wraps `execute`/`run` params to require validated or trusted inputs.
+
+Why this design: we intentionally use nominal brands that do not survive spreads or merges. That means any modified or combined object must be explicitly re-branded with `asTrusted`, which makes trust boundaries visible and prevents accidental writes of unvalidated data.
+
+```typescript
+const input = yield* validateRequest(CreateProjectSchema)
+
+// This fails typechecking because the brand is dropped by the merge
+const merged = { ...input, userId: auth.user.id }
+// await db.insert(projects).values(merged)
+
+// Explicitly re-brand after adding server data
+const values = asTrusted({ ...input, userId: auth.user.id })
+await db.insert(projects).values(values)
+```
+
+For multi-step writes, use `dbTransaction` so writes require validated or trusted input.
+
 #### `dbTransaction` - Database Transactions
 
 Run multiple database operations in a transaction with automatic rollback on failure. The database instance is passed explicitly to keep the dependency visible and consistent with other service patterns:
 
 ```typescript
-import { DatabaseService, dbTransaction } from 'honertia/effect'
+import { DatabaseService, dbTransaction, asTrusted } from 'honertia/effect'
 
 const db = yield* DatabaseService
+const user = asTrusted({ name: 'Alice', email: 'alice@example.com' })
+const balanceUpdate = asTrusted({ balance: 100 })
 
 yield* dbTransaction(db, async (tx) => {
-  await tx.insert(users).values({ name: 'Alice', email: 'alice@example.com' })
-  await tx.update(accounts).set({ balance: 100 }).where(eq(accounts.userId, id))
+  await tx.insert(users).values(user)
+  await tx.update(accounts).set(balanceUpdate).where(eq(accounts.userId, id))
   // If any operation fails, the entire transaction rolls back
   return { success: true }
 })
 ```
 
+`dbTransaction` wraps `insert`, `update`, and `execute`/`run` params; `delete` has no payload, so build its conditions from validated or trusted values.
+
 ## Core Concepts
 
 ### Effect-Based Handlers
@@ -684,7 +727,9 @@ import { Effect } from 'effect'
 import {
   action,
   authorize,
+  asTrusted,
   validateRequest,
+  dbMutation,
   DatabaseService,
   render,
   redirect,
@@ -716,12 +761,12 @@ export const createProject = action(
     })
     const db = yield* DatabaseService
 
-    yield* Effect.tryPromise(() =>
-      db.insert(schema.projects).values({
+    yield* dbMutation(db, async (db) => {
+      await db.insert(schema.projects).values(asTrusted({
         ...input,
         userId: auth.user.id,
-      })
-    )
+      }))
+    })
 
     return yield* redirect('/projects')
   })
@@ -892,7 +937,7 @@ export const createProject = Effect.gen(function* () {
     errorComponent: 'Projects/Create', // Re-render with errors on validation failure
   })
 
-  // input is fully typed: { name: string, description: string | null }
+  // input is Validated<{ name: string, description: string | null }>
   yield* insertProject(input)
 
   return yield* redirect('/projects')

package/dist/effect/action.d.ts

@@ -7,6 +7,7 @@
 import { Effect } from 'effect';
 import { type AuthUser } from './services.js';
 import { UnauthorizedError, ForbiddenError, Redirect } from './errors.js';
+import { type Validated, type Trusted } from './validation.js';
 /**
  * Semantic wrapper for Effect actions.
  *
@@ -25,8 +26,8 @@ import { UnauthorizedError, ForbiddenError, Redirect } from './errors.js';
  *     // Opt-in to database
  *     const db = yield* DatabaseService
  *
- *     yield* Effect.tryPromise(() =>
- *       db.insert(projects).values({ ...input, userId: auth.user.id })
+ *     yield* dbMutation(db, input, (db, input) =>
+ *       db.insert(projects).values(asTrusted({ ...input, userId: auth.user.id }))
  *     )
  *     return new Redirect({ url: '/projects', status: 303 })
  *   })
@@ -52,19 +53,75 @@ export declare function action<R, E>(handler: Effect.Effect<Response | Redirect,
  * const auth = yield* authorize((a) => a.user.id === project.userId)
  */
 export declare function authorize(check?: (user: AuthUser) => boolean): Effect.Effect<AuthUser, UnauthorizedError | ForbiddenError, never>;
+/**
+ * Run a database mutation with a safe wrapper.
+ * Writes only accept validated or trusted inputs for insert/update/execute params.
+ *
+ * @example
+ * const input = yield* validateRequest(CreateProjectSchema)
+ * const db = yield* DatabaseService
+ * yield* dbMutation(db, async (db) => {
+ *   await db.insert(projects).values(asTrusted({ ...input, userId: auth.user.id }))
+ * })
+ */
+export declare function dbMutation<DB, T>(db: DB, operation: (db: SafeTx<DB>) => Promise<T>): Effect.Effect<T, Error>;
+type SafeInput<A> = Validated<A> | Trusted<A>;
+type SafeValues<V> = V extends Array<infer E> ? Array<SafeInput<E>> | SafeInput<V> : V extends ReadonlyArray<infer E> ? ReadonlyArray<SafeInput<E>> | SafeInput<V> : SafeInput<V>;
+type SafeParam<P> = P extends ReadonlyArray<any> ? SafeValues<P> : P extends Array<any> ? SafeValues<P> : P extends Record<string, unknown> ? SafeInput<P> : P;
+type WrapExecuteArgs<A extends unknown[]> = A extends [infer Q, infer P, ...infer Rest] ? [Q, SafeParam<P>, ...Rest] : A;
+type WrapSecondArg<A extends unknown[]> = A extends [infer First, infer Second, ...infer Rest] ? [First, SafeParam<Second>, ...Rest] : A;
+type WrapMethod<I, K extends string> = I extends Record<K, (...args: infer A) => infer R> ? Omit<I, K> & {
+    [P in K]: (...args: WrapExecuteArgs<A>) => R;
+} : I;
+type WrapBuilder<I> = WrapMethod<WrapMethod<WrapMethod<I, 'execute'>, 'run'>, 'query'>;
+type WrapValues<I> = I extends {
+    values: (values: infer V) => infer R;
+} ? WrapBuilder<Omit<I, 'values'> & {
+    values: (values: SafeValues<V>) => R;
+}> : WrapBuilder<I>;
+type WrapSet<I> = I extends {
+    set: (values: infer V) => infer R;
+} ? WrapBuilder<Omit<I, 'set'> & {
+    set: (values: SafeValues<V>) => R;
+}> : WrapBuilder<I>;
+type SafeInsert<Tx> = Tx extends {
+    insert: (...args: infer A) => infer I;
+} ? Omit<Tx, 'insert'> & {
+    insert: (...args: WrapSecondArg<A>) => WrapValues<I>;
+} : Tx;
+type SafeUpdate<Tx> = Tx extends {
+    update: (...args: infer A) => infer I;
+} ? Omit<Tx, 'update'> & {
+    update: (...args: WrapSecondArg<A>) => WrapSet<I>;
+} : Tx;
+type SafeDelete<Tx> = Tx extends {
+    delete: (...args: infer A) => infer I;
+} ? Omit<Tx, 'delete'> & {
+    delete: (...args: WrapSecondArg<A>) => WrapBuilder<I>;
+} : Tx;
+export type SafeTx<Tx> = WrapBuilder<SafeDelete<SafeUpdate<SafeInsert<Tx>>>>;
+type TransactionClient<DB> = DB extends {
+    transaction: (fn: (tx: infer Tx) => Promise<any>) => Promise<any>;
+} ? Tx : never;
 /**
  * Run multiple database operations in a transaction.
  * Automatically rolls back on any failure.
  *
+ * The transaction client is wrapped as `SafeTx` so writes only accept
+ * validated or trusted inputs for insert/update/execute params.
+ *
  * @example
+ * const input = yield* validateRequest(CreateUserSchema)
+ * const balanceUpdate = asTrusted({ balance: 100 })
  * const db = yield* DatabaseService
  * yield* dbTransaction(db, async (tx) => {
- *   await tx.insert(users).values({ name: 'Alice' })
- *   await tx.update(accounts).set({ balance: 100 }).where(eq(accounts.userId, id))
+ *   await tx.insert(users).values(input)
+ *   await tx.update(accounts).set(balanceUpdate).where(eq(accounts.userId, id))
  *   return { success: true }
  * })
  */
 export declare function dbTransaction<DB extends {
-    transaction: (fn: (tx: unknown) => Promise<T>) => Promise<T>;
-}, T>(db: DB, operations: (tx: unknown) => Promise<T>): Effect.Effect<T, Error>;
+    transaction: (fn: (tx: any) => Promise<any>) => Promise<any>;
+}, T>(db: DB, operations: (tx: SafeTx<TransactionClient<DB>>) => Promise<T>): Effect.Effect<T, Error>;
+export {};
 //# sourceMappingURL=action.d.ts.map

package/dist/effect/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/effect/action.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,GAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAE1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,SAAS,CACvB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,GAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,cAAc,EAAE,KAAK,CAAC,CAoBpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,EAAE,SAAS;IAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,EAAE,CAAC,EAC1G,EAAE,EAAE,EAAE,EACN,UAAU,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAKzB"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/effect/action.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,EAEL,KAAK,QAAQ,EACd,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,GAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAE1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,SAAS,CACvB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,GAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,cAAc,EAAE,KAAK,CAAC,CAoBpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,CAAC,EAC9B,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GACxC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAKzB;AAED,KAAK,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;AAE7C,KAAK,UAAU,CAAC,CAAC,IACf,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GACpB,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAClC,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,CAAC,GAC9B,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAC1C,SAAS,CAAC,CAAC,CAAC,CAAA;AAEpB,KAAK,SAAS,CAAC,CAAC,IACd,CAAC,SAAS,aAAa,CAAC,GAAG,CAAC,GACxB,UAAU,CAAC,CAAC,CAAC,GACb,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAClB,UAAU,CAAC,CAAC,CAAC,GACb,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,SAAS,CAAC,CAAC,CAAC,GACZ,CAAC,CAAA;AAEX,KAAK,eAAe,CAAC,CAAC,SAAS,OAAO,EAAE,IACtC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,GACvC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAC1B,CAAC,CAAA;AAEP,KAAK,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,IACpC,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,MAAM,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAChD,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,GACnC,CAAC,CAAA;AAEP,KAAK,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IACjC,CAAC,SAAS,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,GAC9C,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;KAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;CAAE,GAC7D,CAAC,CAAA;AAEP,KAAK,WAAW,CAAC,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;AAEtF,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,CAAA;CAAE,GACnE,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG;IAAE,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;CAAE,CAAC,GACzE,WAAW,CAAC,CAAC,CAAC,CAAA;AAElB,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,CAAA;CAAE,GAC7D,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG;IAAE,GAAG,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;CAAE,CAAC,GACnE,WAAW,CAAC,CAAC,CAAC,CAAA;AAElB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS;IAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,CAAA;CAAE,GACtE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG;IAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAA;CAAE,GAC7E,EAAE,CAAA;AAEN,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS;IAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,CAAA;CAAE,GACtE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG;IAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,GAC1E,EAAE,CAAA;AAEN,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS;IAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,CAAA;CAAE,GACtE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG;IAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,CAAA;CAAE,GAC9E,EAAE,CAAA;AAEN,MAAM,MAAM,MAAM,CAAC,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5E,KAAK,iBAAiB,CAAC,EAAE,IACvB,EAAE,SAAS;IAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,GAC5E,EAAE,GACF,KAAK,CAAA;AAEX;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAC3B,EAAE,SAAS;IAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,EAC3E,CAAC,EAED,EAAE,EAAE,EAAE,EACN,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAOzB"}

package/dist/effect/action.js

@@ -25,8 +25,8 @@ import { UnauthorizedError, ForbiddenError } from './errors.js';
  *     // Opt-in to database
  *     const db = yield* DatabaseService
  *
- *     yield* Effect.tryPromise(() =>
- *       db.insert(projects).values({ ...input, userId: auth.user.id })
+ *     yield* dbMutation(db, input, (db, input) =>
+ *       db.insert(projects).values(asTrusted({ ...input, userId: auth.user.id }))
  *     )
  *     return new Redirect({ url: '/projects', status: 303 })
  *   })
@@ -69,21 +69,43 @@ export function authorize(check) {
         return user;
     });
 }
+/**
+ * Run a database mutation with a safe wrapper.
+ * Writes only accept validated or trusted inputs for insert/update/execute params.
+ *
+ * @example
+ * const input = yield* validateRequest(CreateProjectSchema)
+ * const db = yield* DatabaseService
+ * yield* dbMutation(db, async (db) => {
+ *   await db.insert(projects).values(asTrusted({ ...input, userId: auth.user.id }))
+ * })
+ */
+export function dbMutation(db, operation) {
+    return Effect.tryPromise({
+        try: () => operation(db),
+        catch: (error) => error instanceof Error ? error : new Error(String(error)),
+    });
+}
 /**
  * Run multiple database operations in a transaction.
  * Automatically rolls back on any failure.
  *
+ * The transaction client is wrapped as `SafeTx` so writes only accept
+ * validated or trusted inputs for insert/update/execute params.
+ *
  * @example
+ * const input = yield* validateRequest(CreateUserSchema)
+ * const balanceUpdate = asTrusted({ balance: 100 })
  * const db = yield* DatabaseService
  * yield* dbTransaction(db, async (tx) => {
- *   await tx.insert(users).values({ name: 'Alice' })
- *   await tx.update(accounts).set({ balance: 100 }).where(eq(accounts.userId, id))
+ *   await tx.insert(users).values(input)
+ *   await tx.update(accounts).set(balanceUpdate).where(eq(accounts.userId, id))
  *   return { success: true }
  * })
  */
 export function dbTransaction(db, operations) {
     return Effect.tryPromise({
-        try: () => db.transaction(operations),
+        try: () => db.transaction((tx) => operations(tx)),
         catch: (error) => error instanceof Error ? error : new Error(String(error)),
     });
 }

package/dist/effect/index.d.ts

@@ -6,10 +6,10 @@
 export { DatabaseService, AuthService, AuthUserService, HonertiaService, RequestService, ResponseFactoryService, type AuthUser, type HonertiaRenderer, type RequestContext, type ResponseFactory, type HonertiaDatabaseType, type HonertiaAuthType, } from './services.js';
 export { ValidationError, UnauthorizedError, NotFoundError, ForbiddenError, HttpError, Redirect, type AppError, } from './errors.js';
 export * from './schema.js';
-export { getValidationData, formatSchemaErrors, validate, validateRequest, } from './validation.js';
+export { getValidationData, formatSchemaErrors, validate, validateRequest, asValidated, asTrusted, type Validated, type Trusted, } from './validation.js';
 export { effectBridge, buildContextLayer, getEffectRuntime, type EffectBridgeConfig, } from './bridge.js';
 export { effectHandler, effect, handle, errorToResponse, } from './handler.js';
-export { action, authorize, dbTransaction, } from './action.js';
+export { action, authorize, dbMutation, dbTransaction, type SafeTx, } from './action.js';
 export { redirect, render, renderWithErrors, json, text, notFound, forbidden, httpError, prefersJson, jsonOrRender, share, } from './responses.js';
 export { EffectRouteBuilder, effectRoutes, type EffectHandler, type BaseServices, } from './routing.js';
 export { RequireAuthLayer, RequireGuestLayer, isAuthenticated, currentUser, requireAuth, requireGuest, shareAuth, shareAuthMiddleware, effectAuthRoutes, betterAuthFormAction, betterAuthLogoutAction, loadUser, type AuthRoutesConfig, type BetterAuthFormActionConfig, type BetterAuthLogoutConfig, type BetterAuthActionResult, } from './auth.js';

package/dist/effect/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/effect/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAA;AAGtB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,SAAS,EACT,QAAQ,EACR,KAAK,QAAQ,GACd,MAAM,aAAa,CAAA;AAGpB,cAAc,aAAa,CAAA;AAG3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,eAAe,GAChB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,aAAa,EACb,MAAM,EACN,MAAM,EACN,eAAe,GAChB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,MAAM,EACN,SAAS,EACT,aAAa,GACd,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,QAAQ,EACR,MAAM,EACN,gBAAgB,EAChB,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,KAAK,GACN,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/effect/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAA;AAGtB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,SAAS,EACT,QAAQ,EACR,KAAK,QAAQ,GACd,MAAM,aAAa,CAAA;AAGpB,cAAc,aAAa,CAAA;AAG3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,eAAe,EACf,WAAW,EACX,SAAS,EACT,KAAK,SAAS,EACd,KAAK,OAAO,GACb,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,aAAa,EACb,MAAM,EACN,MAAM,EACN,eAAe,GAChB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,MAAM,EACN,SAAS,EACT,UAAU,EACV,aAAa,EACb,KAAK,MAAM,GACZ,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,QAAQ,EACR,MAAM,EACN,gBAAgB,EAChB,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,KAAK,GACN,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,WAAW,CAAA"}

package/dist/effect/index.js

@@ -10,13 +10,13 @@ export { ValidationError, UnauthorizedError, NotFoundError, ForbiddenError, Http
 // Schema Validators
 export * from './schema.js';
 // Validation Helpers
-export { getValidationData, formatSchemaErrors, validate, validateRequest, } from './validation.js';
+export { getValidationData, formatSchemaErrors, validate, validateRequest, asValidated, asTrusted, } from './validation.js';
 // Bridge
 export { effectBridge, buildContextLayer, getEffectRuntime, } from './bridge.js';
 // Handler
 export { effectHandler, effect, handle, errorToResponse, } from './handler.js';
 // Action Composables
-export { action, authorize, dbTransaction, } from './action.js';
+export { action, authorize, dbMutation, dbTransaction, } from './action.js';
 // Response Helpers
 export { redirect, render, renderWithErrors, json, text, notFound, forbidden, httpError, prefersJson, jsonOrRender, share, } from './responses.js';
 // Routing

package/dist/effect/validation.d.ts

@@ -15,6 +15,30 @@ export declare const getValidationData: Effect.Effect<Record<string, unknown>, V
  * Format Effect Schema parse errors into field-level validation errors.
  */
 export declare function formatSchemaErrors(error: ParseResult.ParseError, messages?: Record<string, string>, attributes?: Record<string, string>): Record<string, string>;
+/**
+ * Nominal brand marker for validated data.
+ * Private field prevents the brand from surviving object spreads.
+ */
+declare class ValidatedBrand {
+    private readonly __validatedBrand;
+}
+export type Validated<A> = A & ValidatedBrand;
+/**
+ * Mark data as validated (type-level only).
+ */
+export declare const asValidated: <A>(input: A) => Validated<A>;
+/**
+ * Nominal brand marker for trusted (server-derived) data.
+ * Private field prevents the brand from surviving object spreads.
+ */
+declare class TrustedBrand {
+    private readonly __trustedBrand;
+}
+export type Trusted<A> = A & TrustedBrand;
+/**
+ * Mark data as trusted (type-level only).
+ */
+export declare const asTrusted: <A>(input: A) => Trusted<A>;
 /**
  * Options for validation functions.
  */
@@ -51,10 +75,11 @@ export interface ValidateOptions {
  * Validate data against a schema.
  * Returns validated data or fails with ValidationError.
  */
-export declare function validate<A, I>(schema: S.Schema<A, I>, data: unknown, options?: ValidateOptions): Effect.Effect<A, ValidationError, never>;
+export declare function validate<A, I>(schema: S.Schema<A, I>, data: unknown, options?: ValidateOptions): Effect.Effect<Validated<A>, ValidationError, never>;
 /**
  * Validate request data against a schema.
  * Extracts data from request and validates in one step.
  */
-export declare function validateRequest<A, I>(schema: S.Schema<A, I>, options?: ValidateOptions): Effect.Effect<A, ValidationError, RequestService>;
+export declare function validateRequest<A, I>(schema: S.Schema<A, I>, options?: ValidateOptions): Effect.Effect<Validated<A>, ValidationError, RequestService>;
+export {};
 //# sourceMappingURL=validation.d.ts.map

package/dist/effect/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/effect/validation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAC3C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvB,eAAe,EACf,cAAc,CA0Bd,CAAA;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,CAAC,UAAU,EAC7B,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACrC,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEjC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEnC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,eAAoB,GAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,CAS1C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,CAAC,EAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,OAAO,GAAE,eAAoB,GAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,CAAC,CAKnD"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/effect/validation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAC3C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvB,eAAe,EACf,cAAc,CA0Bd,CAAA;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,CAAC,UAAU,EAC7B,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACrC,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB;AAED;;;GAGG;AACH,OAAO,OAAO,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAM;CACxC;AAED,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,cAAc,CAAA;AAE7C;;GAEG;AACH,eAAO,MAAM,WAAW,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,SAAS,CAAC,CAAC,CAC9B,CAAA;AAEvB;;;GAGG;AACH,OAAO,OAAO,YAAY;IACxB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAM;CACtC;AAED,MAAM,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAA;AAEzC;;GAEG;AACH,eAAO,MAAM,SAAS,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC,CAAC,CAC5B,CAAA;AAErB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEjC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEnC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,eAAoB,GAC5B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,CAUrD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,CAAC,EAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,OAAO,GAAE,eAAoB,GAC5B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,CAAC,CAK9D"}

package/dist/effect/validation.js

@@ -41,6 +41,14 @@ export function formatSchemaErrors(error, messages = {}, attributes = {}) {
     }
     return errors;
 }
+/**
+ * Mark data as validated (type-level only).
+ */
+export const asValidated = (input) => input;
+/**
+ * Mark data as trusted (type-level only).
+ */
+export const asTrusted = (input) => input;
 /**
  * Validate data against a schema.
  * Returns validated data or fails with ValidationError.
@@ -49,7 +57,7 @@ export function validate(schema, data, options = {}) {
     return S.decodeUnknown(schema)(data).pipe(Effect.mapError((error) => new ValidationError({
         errors: formatSchemaErrors(error, options.messages, options.attributes),
         component: options.errorComponent,
-    })));
+    })), Effect.map(asValidated));
 }
 /**
  * Validate request data against a schema.

package/dist/schema.d.ts

@@ -5,5 +5,5 @@
  * Import from 'honertia/schema' for validation functionality.
  */
 export { S, trimmed, nullableString, optionalString, requiredString, required, alpha, alphaDash, alphaNum, startsWith, endsWith, lowercase, uppercase, coercedNumber, positiveInt, nonNegativeInt, parsePositiveInt, between, digits, digitsBetween, gt, gte, lt, lte, multipleOf, coercedBoolean, checkbox, accepted, declined, coercedDate, nullableDate, after, afterOrEqual, before, beforeOrEqual, ensureArray, distinct, minItems, maxItems, inArray, notIn, email, nullableEmail, url, nullableUrl, uuid, nullableUuid, ip, ipv4, ipv6, macAddress, jsonString, confirmed, size, min, max, password, nullable, filled, excludeIf, } from './effect/schema.js';
-export { getValidationData, formatSchemaErrors, validate, validateRequest, } from './effect/validation.js';
+export { getValidationData, formatSchemaErrors, validate, validateRequest, asValidated, asTrusted, type Validated, type Trusted, } from './effect/validation.js';
 //# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAEL,CAAC,EAED,OAAO,EACP,cAAc,EACd,cAAc,EACd,cAAc,EACd,QAAQ,EACR,KAAK,EACL,SAAS,EACT,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,SAAS,EAET,aAAa,EACb,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,OAAO,EACP,MAAM,EACN,aAAa,EACb,EAAE,EACF,GAAG,EACH,EAAE,EACF,GAAG,EACH,UAAU,EAEV,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,QAAQ,EAER,WAAW,EACX,YAAY,EACZ,KAAK,EACL,YAAY,EACZ,MAAM,EACN,aAAa,EAEb,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,QAAQ,EAER,OAAO,EACP,KAAK,EAEL,KAAK,EACL,aAAa,EACb,GAAG,EACH,WAAW,EACX,IAAI,EACJ,YAAY,EACZ,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,UAAU,EAEV,SAAS,EAET,IAAI,EACJ,GAAG,EACH,GAAG,EAEH,QAAQ,EAER,QAAQ,EACR,MAAM,EACN,SAAS,GACV,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,eAAe,GAChB,MAAM,wBAAwB,CAAA"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAEL,CAAC,EAED,OAAO,EACP,cAAc,EACd,cAAc,EACd,cAAc,EACd,QAAQ,EACR,KAAK,EACL,SAAS,EACT,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,SAAS,EAET,aAAa,EACb,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,OAAO,EACP,MAAM,EACN,aAAa,EACb,EAAE,EACF,GAAG,EACH,EAAE,EACF,GAAG,EACH,UAAU,EAEV,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,QAAQ,EAER,WAAW,EACX,YAAY,EACZ,KAAK,EACL,YAAY,EACZ,MAAM,EACN,aAAa,EAEb,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,QAAQ,EAER,OAAO,EACP,KAAK,EAEL,KAAK,EACL,aAAa,EACb,GAAG,EACH,WAAW,EACX,IAAI,EACJ,YAAY,EACZ,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,UAAU,EAEV,SAAS,EAET,IAAI,EACJ,GAAG,EACH,GAAG,EAEH,QAAQ,EAER,QAAQ,EACR,MAAM,EACN,SAAS,GACV,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,eAAe,EACf,WAAW,EACX,SAAS,EACT,KAAK,SAAS,EACd,KAAK,OAAO,GACb,MAAM,wBAAwB,CAAA"}

package/dist/schema.js

@@ -31,4 +31,4 @@ password,
 // Utility
 nullable, filled, excludeIf, } from './effect/schema.js';
 // Validation Helpers
-export { getValidationData, formatSchemaErrors, validate, validateRequest, } from './effect/validation.js';
+export { getValidationData, formatSchemaErrors, validate, validateRequest, asValidated, asTrusted, } from './effect/validation.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "honertia",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Inertia.js-style server-driven SPA adapter for Hono",
   "type": "module",
   "main": "./dist/index.js",