effect-auth

Add Recipient-Bound Invitations

Model recipient-bound invitations with first-party durable storage.

Recipient-bound invitations use delegated-access domain services and require durable invitation/access-grant ports with atomic consume semantics.

Focused direct Drizzle InvitationStore and AccessGrantStore adapters are available for SQLite, D1, and PostgreSQL. Compose the stores required by the delegated-access services over the application-owned database and apply the delegated-access migration stream first. The adapters preserve recipient binding, expiry, revocation, atomic supersession, and concurrent-loser behavior.

Do not substitute memory storage in production. Add the HTTP recipe only after the durable implementation has integration and concurrency coverage on the production database.