@noodleseed/one 0.63.0 → 0.64.0

package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.js

@@ -0,0 +1,249 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { PlatformIdentitySyncError } from './platform-identity-sync.js';
+import { isValidPlatformIdentitySyncEvidence, loadPlatformIdentitySyncEvidence, platformIdentitySyncEmail, } from './platform-identity-sync-evidence-postgres.js';
+import { ensurePlatformIdentitySyncRecoverySchema } from './platform-identity-sync-recovery-postgres.js';
+const GOOGLE_REALM = 'accounts.google.com';
+/** Additive upgrade kept separate so the already-large canonical identity schema stays reviewable. */
+export async function ensurePlatformIdentitySyncOutboxSchema(pool) {
+    await pool.query('ALTER TABLE platform_identity_sync_outbox ADD COLUMN IF NOT EXISTS lease_token text, ADD COLUMN IF NOT EXISTS lease_expires_at timestamptz, ADD COLUMN IF NOT EXISTS next_attempt_at timestamptz, ADD COLUMN IF NOT EXISTS failed_at timestamptz, ADD COLUMN IF NOT EXISTS outcome_code text, ADD COLUMN IF NOT EXISTS remote_user_id text');
+    await pool.query('UPDATE platform_identity_sync_outbox SET next_attempt_at = created_at WHERE next_attempt_at IS NULL');
+    await pool.query('ALTER TABLE platform_identity_sync_outbox ALTER COLUMN next_attempt_at SET DEFAULT now(), ALTER COLUMN next_attempt_at SET NOT NULL');
+    await pool.query('ALTER TABLE platform_identity_sync_outbox DROP CONSTRAINT IF EXISTS platform_identity_sync_outbox_event_type_check');
+    await pool.query("ALTER TABLE platform_identity_sync_outbox ADD CONSTRAINT platform_identity_sync_outbox_event_type_check CHECK (event_type IN ('google_identity_upsert', 'verified_email_changed', 'workos_external_id_reconcile')) NOT VALID");
+    await pool.query('ALTER TABLE platform_identity_sync_outbox VALIDATE CONSTRAINT platform_identity_sync_outbox_event_type_check');
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS platform_identity_sync_outbox_claim_idx
+      ON platform_identity_sync_outbox (next_attempt_at, created_at)
+      WHERE delivered_at IS NULL AND failed_at IS NULL
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_identity_sync_attempt_evidence (
+      id                         bigserial PRIMARY KEY,
+      idempotency_key_fingerprint text NOT NULL,
+      principal_fingerprint      text NOT NULL,
+      attempt                    integer NOT NULL CHECK (attempt >= 1),
+      outcome_code               text NOT NULL,
+      remote_user_fingerprint    text,
+      retry_at                   timestamptz,
+      created_at                 timestamptz NOT NULL DEFAULT now()
+    )
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_identity_sync_attempt_evidence_append_only()
+    RETURNS trigger AS $$
+    BEGIN
+      RAISE EXCEPTION 'platform identity sync attempt evidence is append-only';
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    DO $platform_identity_sync_evidence_triggers$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+         WHERE tgname = 'platform_identity_sync_attempt_evidence_update_trigger'
+           AND tgrelid = 'platform_identity_sync_attempt_evidence'::regclass AND NOT tgisinternal
+      ) THEN
+        CREATE TRIGGER platform_identity_sync_attempt_evidence_update_trigger
+          BEFORE UPDATE ON platform_identity_sync_attempt_evidence
+          FOR EACH ROW EXECUTE FUNCTION platform_identity_sync_attempt_evidence_append_only();
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+         WHERE tgname = 'platform_identity_sync_attempt_evidence_delete_trigger'
+           AND tgrelid = 'platform_identity_sync_attempt_evidence'::regclass AND NOT tgisinternal
+      ) THEN
+        CREATE TRIGGER platform_identity_sync_attempt_evidence_delete_trigger
+          BEFORE DELETE ON platform_identity_sync_attempt_evidence
+          FOR EACH ROW EXECUTE FUNCTION platform_identity_sync_attempt_evidence_append_only();
+      END IF;
+    EXCEPTION WHEN duplicate_object THEN NULL;
+    END
+    $platform_identity_sync_evidence_triggers$
+  `);
+    await ensurePlatformIdentitySyncRecoverySchema(pool);
+}
+/** Durable, lease-fenced outbox adapter. Remote calls occur only after the claim transaction commits. */
+export class PostgresPlatformIdentitySyncStore {
+    #pool;
+    #workosRealm;
+    #googleRealm;
+    constructor(pool, input) {
+        this.#pool = pool;
+        this.#workosRealm = bounded(input.workosRealm, 'WorkOS realm');
+        this.#googleRealm = bounded(input.googleRealm ?? GOOGLE_REALM, 'Google realm');
+    }
+    async claimBatch(input) {
+        if (!Number.isInteger(input.limit) || input.limit < 1 || input.limit > 100)
+            throw new Error('identity sync batch size must be between 1 and 100');
+        if (!Number.isInteger(input.leaseSeconds) ||
+            input.leaseSeconds < 10 ||
+            input.leaseSeconds > 300)
+            throw new Error('identity sync lease must be between 10 and 300 seconds');
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN');
+            const candidates = await client.query(`SELECT idempotency_key, principal_id, event_type, attempt_count
+           FROM platform_identity_sync_outbox
+          WHERE delivered_at IS NULL AND failed_at IS NULL
+            AND next_attempt_at <= now()
+            AND (lease_token IS NULL OR lease_expires_at <= now())
+          ORDER BY next_attempt_at, created_at, idempotency_key
+          FOR UPDATE SKIP LOCKED LIMIT $1`, [input.limit]);
+            const leases = [];
+            for (const candidate of candidates.rows) {
+                const evidence = await loadPlatformIdentitySyncEvidence(client, candidate.principal_id, this.#googleRealm, this.#workosRealm);
+                const normalizedEmail = platformIdentitySyncEmail(candidate.event_type, evidence);
+                if (normalizedEmail === undefined ||
+                    !isValidPlatformIdentitySyncEvidence(candidate.event_type, evidence)) {
+                    await markLocalEvidenceConflict(client, candidate);
+                    continue;
+                }
+                const leaseToken = randomUUID();
+                const claimed = await client.query(`UPDATE platform_identity_sync_outbox
+              SET lease_token = $2,
+                  lease_expires_at = now() + ($3 * interval '1 second'),
+                  attempt_count = attempt_count + 1
+            WHERE idempotency_key = $1 AND delivered_at IS NULL AND failed_at IS NULL
+            RETURNING attempt_count`, [candidate.idempotency_key, leaseToken, input.leaseSeconds]);
+                const attempt = claimed.rows[0]?.attempt_count;
+                if (attempt === undefined)
+                    continue;
+                leases.push({
+                    idempotencyKey: candidate.idempotency_key,
+                    principalId: candidate.principal_id,
+                    eventType: candidate.event_type,
+                    normalizedEmail,
+                    workosUserId: evidence.workosUserIds[0],
+                    leaseToken,
+                    attempt,
+                });
+            }
+            await client.query('COMMIT');
+            return leases;
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async finish(lease, result) {
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN');
+            const row = await client.query(`SELECT idempotency_key, principal_id, event_type, attempt_count, lease_token
+           FROM platform_identity_sync_outbox WHERE idempotency_key = $1 FOR UPDATE`, [lease.idempotencyKey]);
+            const current = row.rows[0];
+            if (current === undefined ||
+                current.lease_token !== lease.leaseToken ||
+                current.attempt_count !== lease.attempt ||
+                current.principal_id !== lease.principalId ||
+                current.event_type !== lease.eventType)
+                throw new PlatformIdentitySyncError('stale_lease');
+            const evidence = await loadPlatformIdentitySyncEvidence(client, lease.principalId, this.#googleRealm, this.#workosRealm);
+            const normalizedEmail = platformIdentitySyncEmail(lease.eventType, evidence);
+            if (normalizedEmail === undefined ||
+                !isValidPlatformIdentitySyncEvidence(lease.eventType, evidence) ||
+                normalizedEmail !== lease.normalizedEmail ||
+                !workosEvidenceStillMatches(lease, result, evidence))
+                throw new PlatformIdentitySyncError('identity_sync_drift');
+            if (result.state === 'delivered') {
+                await linkWorkOSIdentity(client, this.#workosRealm, lease.principalId, result.remoteUserId);
+                await client.query(`UPDATE platform_identity_sync_outbox
+              SET delivered_at = now(), failed_at = NULL, outcome_code = $3,
+                  remote_user_id = $4, lease_token = NULL, lease_expires_at = NULL
+            WHERE idempotency_key = $1 AND lease_token = $2`, [lease.idempotencyKey, lease.leaseToken, result.outcomeCode, result.remoteUserId]);
+            }
+            else if (result.state === 'retry') {
+                const retryAt = new Date(result.retryAt);
+                if (Number.isNaN(retryAt.getTime()) || retryAt.getTime() <= Date.now())
+                    throw new Error('identity sync retry must be in the future');
+                await client.query(`UPDATE platform_identity_sync_outbox
+              SET next_attempt_at = $3::timestamptz, outcome_code = $4,
+                  lease_token = NULL, lease_expires_at = NULL
+            WHERE idempotency_key = $1 AND lease_token = $2`, [lease.idempotencyKey, lease.leaseToken, result.retryAt, result.outcomeCode]);
+            }
+            else {
+                await client.query(`UPDATE platform_identity_sync_outbox
+              SET failed_at = now(), outcome_code = $3,
+                  lease_token = NULL, lease_expires_at = NULL
+            WHERE idempotency_key = $1 AND lease_token = $2`, [lease.idempotencyKey, lease.leaseToken, result.outcomeCode]);
+            }
+            await recordEvidence(client, lease, result);
+            await client.query('COMMIT');
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+}
+function workosEvidenceStillMatches(lease, result, evidence) {
+    if (lease.workosUserId !== undefined)
+        return evidence.workosUserIds[0] === lease.workosUserId;
+    if (evidence.workosUserIds.length === 0)
+        return true;
+    return result.state === 'delivered' && evidence.workosUserIds[0] === result.remoteUserId;
+}
+async function linkWorkOSIdentity(client, realm, principalId, remoteUserId) {
+    await client.query(`INSERT INTO platform_identity_links (provider, realm, external_id, principal_id)
+     VALUES ('workos', $1, $2, $3) ON CONFLICT (provider, realm, external_id) DO NOTHING`, [realm, remoteUserId, principalId]);
+    const exact = await client.query(`SELECT principal_id FROM platform_identity_links
+      WHERE provider = 'workos' AND realm = $1 AND external_id = $2 AND disabled_at IS NULL`, [realm, remoteUserId]);
+    const principal = await client.query(`SELECT external_id FROM platform_identity_links
+      WHERE provider = 'workos' AND realm = $1 AND principal_id = $2 AND disabled_at IS NULL`, [realm, principalId]);
+    if (exact.rows[0]?.principal_id !== principalId ||
+        principal.rows[0]?.external_id !== remoteUserId)
+        throw new PlatformIdentitySyncError('identity_sync_drift');
+}
+async function markLocalEvidenceConflict(client, row) {
+    await client.query(`UPDATE platform_identity_sync_outbox
+        SET failed_at = now(), outcome_code = 'local_evidence_conflict',
+            lease_token = NULL, lease_expires_at = NULL
+      WHERE idempotency_key = $1`, [row.idempotency_key]);
+    await client.query(`INSERT INTO platform_identity_sync_attempt_evidence
+       (idempotency_key_fingerprint, principal_fingerprint, attempt, outcome_code)
+     VALUES ($1, $2, $3, 'local_evidence_conflict')`, [fingerprint(row.idempotency_key), fingerprint(row.principal_id), row.attempt_count + 1]);
+}
+async function recordEvidence(client, lease, result) {
+    const remoteUserId = result.state === 'delivered' ? result.remoteUserId : undefined;
+    const retryAt = result.state === 'retry' ? result.retryAt : undefined;
+    await client.query(`INSERT INTO platform_identity_sync_attempt_evidence
+       (idempotency_key_fingerprint, principal_fingerprint, attempt, outcome_code,
+        remote_user_fingerprint, retry_at)
+     VALUES ($1, $2, $3, $4, $5, $6::timestamptz)`, [
+        fingerprint(lease.idempotencyKey),
+        fingerprint(lease.principalId),
+        lease.attempt,
+        result.outcomeCode,
+        remoteUserId === undefined ? null : fingerprint(remoteUserId),
+        retryAt ?? null,
+    ]);
+}
+function fingerprint(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function bounded(value, name) {
+    const normalized = value.trim();
+    if (normalized.length === 0 || normalized.length > 512)
+        throw new Error(`${name} is invalid`);
+    return normalized;
+}
+// Compile-time assertion that every persisted processor outcome remains intentionally enumerated.
+const _outcomes = [
+    'delivered',
+    'remote_identity_conflict',
+    'provider_conflict',
+    'provider_rate_limited',
+    'provider_transient',
+    'provider_permanent',
+    'provider_unauthorized',
+];
+void _outcomes;
+//# sourceMappingURL=platform-identity-sync-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-identity-sync-postgres.js","sourceRoot":"","sources":["../src/platform-identity-sync-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAEhC,yBAAyB,GAC1B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,wCAAwC,EAAE,MAAM,+CAA+C,CAAC;AAEzG,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CACd,4UAA4U,CAC7U,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qGAAqG,CACtG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qIAAqI,CACtI,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oHAAoH,CACrH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8NAA8N,CAC/N,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8GAA8G,CAC/G,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;GAwBhB,CAAC,CAAC;IACH,MAAM,wCAAwC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,yGAAyG;AACzG,MAAM,OAAO,iCAAiC;IACnC,KAAK,CAAO;IACZ,YAAY,CAAS;IACrB,YAAY,CAAS;IAE9B,YAAY,IAAU,EAAE,KAAsE;QAC5F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,YAAY,EAAE,cAAc,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAGhB;QACC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG;YACxE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;YACrC,KAAK,CAAC,YAAY,GAAG,EAAE;YACvB,KAAK,CAAC,YAAY,GAAG,GAAG;YAExB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CACnC;;;;;;0CAMkC,EAClC,CAAC,KAAK,CAAC,KAAK,CAAC,CACd,CAAC;YACF,MAAM,MAAM,GAAgC,EAAE,CAAC;YAC/C,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,MAAM,EACN,SAAS,CAAC,YAAY,EACtB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,CAClB,CAAC;gBACF,MAAM,eAAe,GAAG,yBAAyB,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAClF,IACE,eAAe,KAAK,SAAS;oBAC7B,CAAC,mCAAmC,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,EACpE,CAAC;oBACD,MAAM,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBACnD,SAAS;gBACX,CAAC;gBACD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAChC;;;;;oCAK0B,EAC1B,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAC5D,CAAC;gBACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBAC/C,IAAI,OAAO,KAAK,SAAS;oBAAE,SAAS;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,cAAc,EAAE,SAAS,CAAC,eAAe;oBACzC,WAAW,EAAE,SAAS,CAAC,YAAY;oBACnC,SAAS,EAAE,SAAS,CAAC,UAAU;oBAC/B,eAAe;oBACf,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;oBACvC,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAgC,EAChC,MAA0D;QAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;oFAC4E,EAC5E,CAAC,KAAK,CAAC,cAAc,CAAC,CACvB,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU;gBACxC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,OAAO;gBACvC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW;gBAC1C,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS;gBAEtC,MAAM,IAAI,yBAAyB,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,MAAM,EACN,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,CAClB,CAAC;YACF,MAAM,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7E,IACE,eAAe,KAAK,SAAS;gBAC7B,CAAC,mCAAmC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC/D,eAAe,KAAK,KAAK,CAAC,eAAe;gBACzC,CAAC,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC;gBAEpD,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;YAE7D,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC5F,MAAM,MAAM,CAAC,KAAK,CAChB;;;4DAGkD,EAClD,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAClF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;oBACpE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,MAAM,MAAM,CAAC,KAAK,CAChB;;;4DAGkD,EAClD,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAC7E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,CAAC,KAAK,CAChB;;;4DAGkD,EAClD,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAC7D,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AASD,SAAS,0BAA0B,CACjC,KAAgC,EAChC,MAA0D,EAC1D,QAAsC;IAEtC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IAC9F,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAkB,EAClB,KAAa,EACb,WAAmB,EACnB,YAAoB;IAEpB,MAAM,MAAM,CAAC,KAAK,CAChB;yFACqF,EACrF,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,CACnC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B;4FACwF,EACxF,CAAC,KAAK,EAAE,YAAY,CAAC,CACtB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC;6FACyF,EACzF,CAAC,KAAK,EAAE,WAAW,CAAC,CACrB,CAAC;IACF,IACE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,WAAW;QAC3C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,KAAK,YAAY;QAE/C,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAkB,EAAE,GAAc;IACzE,MAAM,MAAM,CAAC,KAAK,CAChB;;;iCAG6B,EAC7B,CAAC,GAAG,CAAC,eAAe,CAAC,CACtB,CAAC;IACF,MAAM,MAAM,CAAC,KAAK,CAChB;;oDAEgD,EAChD,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CACzF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAkB,EAClB,KAAgC,EAChC,MAA0D;IAE1D,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,CAAC,KAAK,CAChB;;;kDAG8C,EAC9C;QACE,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC;QACjC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9B,KAAK,CAAC,OAAO;QACb,MAAM,CAAC,WAAW;QAClB,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;QAC7D,OAAO,IAAI,IAAI;KAChB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAC9F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,kGAAkG;AAClG,MAAM,SAAS,GAA+C;IAC5D,WAAW;IACX,0BAA0B;IAC1B,mBAAmB;IACnB,uBAAuB;IACvB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;CACxB,CAAC;AACF,KAAK,SAAS,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.d.ts

@@ -0,0 +1,34 @@
+import type { Pool } from 'pg';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+import { type PlatformIdentitySyncRecoveryResult, type PlatformIdentitySyncRecoveryStore } from './platform-identity-sync.js';
+export declare function ensurePlatformIdentitySyncRecoverySchema(pool: PlatformIdentityQueryable): Promise<void>;
+/** Dangerous operator-only capability kept separate from the ordinary leased worker adapter. */
+export declare class PostgresPlatformIdentitySyncRecoveryStore implements PlatformIdentitySyncRecoveryStore {
+    #private;
+    constructor(pool: Pool, input: {
+        readonly workosRealm: string;
+        readonly googleRealm?: string;
+    });
+    previewTerminalRecovery(input: {
+        readonly limit: number;
+    }): Promise<{
+        readonly terminal: number;
+        readonly checksum: string;
+    }>;
+    replayTerminalRecovery(input: {
+        readonly limit: number;
+        readonly operationFingerprint: string;
+        readonly requestFingerprint: string;
+        readonly actorFingerprint: string;
+        readonly reasonFingerprint: string;
+    }): Promise<PlatformIdentitySyncRecoveryResult | undefined>;
+    recoverTerminal(input: {
+        readonly limit: number;
+        readonly expectedChecksum: string;
+        readonly operationFingerprint: string;
+        readonly requestFingerprint: string;
+        readonly actorFingerprint: string;
+        readonly reasonFingerprint: string;
+    }): Promise<PlatformIdentitySyncRecoveryResult>;
+}
+//# sourceMappingURL=platform-identity-sync-recovery-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-identity-sync-recovery-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-sync-recovery-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAGL,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACvC,MAAM,6BAA6B,CAAC;AASrC,wBAAsB,wCAAwC,CAC5D,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAkEf;AAED,gGAAgG;AAChG,qBAAa,yCACX,YAAW,iCAAiC;;gBAMhC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAMxF,uBAAuB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB/D,sBAAsB,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kCAAkC,GAAG,SAAS,CAAC;IAWrD,eAAe,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kCAAkC,CAAC;CAyFhD"}

package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.js

@@ -0,0 +1,275 @@
+import { createHash } from 'node:crypto';
+import { PlatformIdentitySyncError, } from './platform-identity-sync.js';
+import { isValidPlatformIdentitySyncEvidence, loadPlatformIdentitySyncEvidence, } from './platform-identity-sync-evidence-postgres.js';
+const GOOGLE_REALM = 'accounts.google.com';
+export async function ensurePlatformIdentitySyncRecoverySchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_identity_sync_recovery_operations (
+      operation_fingerprint text PRIMARY KEY CHECK (operation_fingerprint ~ '^[0-9a-f]{64}$'),
+      request_fingerprint   text NOT NULL CHECK (request_fingerprint ~ '^[0-9a-f]{64}$'),
+      actor_fingerprint     text NOT NULL CHECK (actor_fingerprint ~ '^[0-9a-f]{64}$'),
+      reason_fingerprint    text NOT NULL CHECK (reason_fingerprint ~ '^[0-9a-f]{64}$'),
+      expected_checksum     text NOT NULL CHECK (expected_checksum ~ '^[0-9a-f]{64}$'),
+      batch_limit           integer NOT NULL CHECK (batch_limit BETWEEN 1 AND 100),
+      attempted             integer NOT NULL CHECK (attempted >= 0),
+      recovered             integer NOT NULL CHECK (recovered >= 0),
+      rejected              integer NOT NULL CHECK (rejected >= 0),
+      created_at            timestamptz NOT NULL DEFAULT now(),
+      CHECK (attempted = recovered + rejected)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_identity_sync_recovery_attempt_evidence (
+      id                         bigserial PRIMARY KEY,
+      operation_fingerprint      text NOT NULL
+        REFERENCES platform_identity_sync_recovery_operations(operation_fingerprint)
+        DEFERRABLE INITIALLY DEFERRED,
+      idempotency_key_fingerprint text NOT NULL CHECK (idempotency_key_fingerprint ~ '^[0-9a-f]{64}$'),
+      principal_fingerprint      text NOT NULL CHECK (principal_fingerprint ~ '^[0-9a-f]{64}$'),
+      actor_fingerprint          text NOT NULL CHECK (actor_fingerprint ~ '^[0-9a-f]{64}$'),
+      attempt                    integer NOT NULL CHECK (attempt >= 1),
+      result_code                text NOT NULL CHECK (result_code IN ('recovered', 'evidence_rejected')),
+      evidence_fingerprint       text NOT NULL CHECK (evidence_fingerprint ~ '^[0-9a-f]{64}$'),
+      created_at                 timestamptz NOT NULL DEFAULT now()
+    )
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_identity_sync_recovery_evidence_append_only()
+    RETURNS trigger AS $$
+    BEGIN
+      RAISE EXCEPTION 'platform identity sync recovery evidence is append-only';
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    DO $platform_identity_sync_recovery_triggers$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+         WHERE tgname = 'platform_identity_sync_recovery_operations_guard'
+           AND tgrelid = 'platform_identity_sync_recovery_operations'::regclass
+           AND NOT tgisinternal
+      ) THEN
+        CREATE TRIGGER platform_identity_sync_recovery_operations_guard
+          BEFORE UPDATE OR DELETE ON platform_identity_sync_recovery_operations
+          FOR EACH ROW EXECUTE FUNCTION platform_identity_sync_recovery_evidence_append_only();
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+         WHERE tgname = 'platform_identity_sync_recovery_attempts_guard'
+           AND tgrelid = 'platform_identity_sync_recovery_attempt_evidence'::regclass
+           AND NOT tgisinternal
+      ) THEN
+        CREATE TRIGGER platform_identity_sync_recovery_attempts_guard
+          BEFORE UPDATE OR DELETE ON platform_identity_sync_recovery_attempt_evidence
+          FOR EACH ROW EXECUTE FUNCTION platform_identity_sync_recovery_evidence_append_only();
+      END IF;
+    EXCEPTION WHEN duplicate_object THEN NULL;
+    END
+    $platform_identity_sync_recovery_triggers$
+  `);
+}
+/** Dangerous operator-only capability kept separate from the ordinary leased worker adapter. */
+export class PostgresPlatformIdentitySyncRecoveryStore {
+    #pool;
+    #workosRealm;
+    #googleRealm;
+    constructor(pool, input) {
+        this.#pool = pool;
+        this.#workosRealm = bounded(input.workosRealm, 'WorkOS realm');
+        this.#googleRealm = bounded(input.googleRealm ?? GOOGLE_REALM, 'Google realm');
+    }
+    async previewTerminalRecovery(input) {
+        validateRecoveryLimit(input.limit);
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN ISOLATION LEVEL REPEATABLE READ');
+            const entries = await terminalRecoveryEntries(client, input.limit, this.#googleRealm, this.#workosRealm, false);
+            await client.query('COMMIT');
+            return { terminal: entries.length, checksum: recoveryChecksum(entries) };
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async replayTerminalRecovery(input) {
+        validateRecoveryReplayInput(input);
+        const client = await this.#pool.connect();
+        try {
+            const replay = await recoveryReplay(client, input);
+            return replay === undefined ? undefined : { ...replay, replayed: true };
+        }
+        finally {
+            client.release();
+        }
+    }
+    async recoverTerminal(input) {
+        validateRecoveryInput(input);
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN ISOLATION LEVEL SERIALIZABLE');
+            await client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
+                `platform-identity-sync-recovery:${input.operationFingerprint}`,
+            ]);
+            const replay = await recoveryReplay(client, input);
+            if (replay !== undefined) {
+                await client.query('COMMIT');
+                return { ...replay, replayed: true };
+            }
+            await client.query('LOCK TABLE platform_principals, platform_identity_links, platform_verified_emails IN SHARE MODE');
+            const entries = await terminalRecoveryEntries(client, input.limit, this.#googleRealm, this.#workosRealm, true);
+            if (recoveryChecksum(entries) !== input.expectedChecksum)
+                throw new PlatformIdentitySyncError('identity_sync_recovery_drift');
+            const outcomes = [];
+            for (const entry of entries) {
+                const outcome = isValidPlatformIdentitySyncEvidence(entry.row.event_type, entry.evidence)
+                    ? 'recovered'
+                    : 'evidence_rejected';
+                if (outcome === 'recovered') {
+                    const recovered = await client.query(`UPDATE platform_identity_sync_outbox
+                SET failed_at = NULL, outcome_code = 'operator_recovered',
+                    next_attempt_at = now(), lease_token = NULL, lease_expires_at = NULL
+              WHERE idempotency_key = $1 AND delivered_at IS NULL AND failed_at IS NOT NULL
+              RETURNING idempotency_key`, [entry.row.idempotency_key]);
+                    if (recovered.rows[0] === undefined)
+                        throw new PlatformIdentitySyncError('identity_sync_recovery_drift');
+                }
+                outcomes.push(outcome);
+            }
+            const recovered = outcomes.filter((outcome) => outcome === 'recovered').length;
+            const rejected = outcomes.length - recovered;
+            await client.query(`INSERT INTO platform_identity_sync_recovery_operations
+           (operation_fingerprint, request_fingerprint, actor_fingerprint, reason_fingerprint,
+            expected_checksum, batch_limit, attempted, recovered, rejected)
+         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)`, [
+                input.operationFingerprint,
+                input.requestFingerprint,
+                input.actorFingerprint,
+                input.reasonFingerprint,
+                input.expectedChecksum,
+                input.limit,
+                outcomes.length,
+                recovered,
+                rejected,
+            ]);
+            for (const [index, entry] of entries.entries()) {
+                await client.query(`INSERT INTO platform_identity_sync_recovery_attempt_evidence
+             (operation_fingerprint, idempotency_key_fingerprint, principal_fingerprint,
+              actor_fingerprint, attempt, result_code, evidence_fingerprint)
+           VALUES ($1, $2, $3, $4, $5, $6, $7)`, [
+                    input.operationFingerprint,
+                    fingerprint(entry.row.idempotency_key),
+                    fingerprint(entry.row.principal_id),
+                    input.actorFingerprint,
+                    entry.row.attempt_count + 1,
+                    outcomes[index],
+                    evidenceFingerprint(entry),
+                ]);
+            }
+            await client.query('COMMIT');
+            return { attempted: outcomes.length, recovered, rejected, replayed: false };
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+}
+async function terminalRecoveryEntries(client, limit, googleRealm, workosRealm, lock) {
+    const rows = await client.query(`SELECT idempotency_key, principal_id, event_type, attempt_count, outcome_code,
+            lease_token, lease_expires_at
+       FROM platform_identity_sync_outbox
+      WHERE delivered_at IS NULL AND failed_at IS NOT NULL
+      ORDER BY created_at, idempotency_key
+      LIMIT $1 ${lock ? 'FOR UPDATE' : ''}`, [limit]);
+    const entries = [];
+    for (const row of rows.rows) {
+        entries.push({
+            row,
+            evidence: await loadPlatformIdentitySyncEvidence(client, row.principal_id, googleRealm, workosRealm, lock),
+        });
+    }
+    return entries;
+}
+function recoveryChecksum(entries) {
+    return fingerprint(JSON.stringify(entries.map((entry) => ({
+        idempotencyKeyFingerprint: fingerprint(entry.row.idempotency_key),
+        principalFingerprint: fingerprint(entry.row.principal_id),
+        eventType: entry.row.event_type,
+        attempt: entry.row.attempt_count,
+        outcomeFingerprint: fingerprint(entry.row.outcome_code ?? ''),
+        leaseFingerprint: fingerprint(entry.row.lease_token ?? ''),
+        leaseExpiresAt: entry.row.lease_expires_at?.toISOString() ?? null,
+        evidenceFingerprint: evidenceFingerprint(entry),
+    }))));
+}
+function evidenceFingerprint(entry) {
+    return fingerprint(JSON.stringify({
+        status: entry.evidence.status,
+        googleEmailFingerprints: entry.evidence.googleEmails.map(fingerprint),
+        workosEmailFingerprints: entry.evidence.workosEmails.map(fingerprint),
+        sharedGoogleEmailPrincipalCount: entry.evidence.sharedGoogleEmailPrincipalCount,
+        sharedWorkosEmailPrincipalCount: entry.evidence.sharedWorkosEmailPrincipalCount,
+        googleLinkCount: entry.evidence.googleLinkCount,
+        workosUserFingerprints: entry.evidence.workosUserIds.map(fingerprint),
+    }));
+}
+async function recoveryReplay(client, input) {
+    const prior = await client.query(`SELECT request_fingerprint, actor_fingerprint, reason_fingerprint, expected_checksum,
+            batch_limit, attempted, recovered, rejected
+       FROM platform_identity_sync_recovery_operations WHERE operation_fingerprint = $1`, [input.operationFingerprint]);
+    const row = prior.rows[0];
+    if (row === undefined)
+        return undefined;
+    if (row.request_fingerprint !== input.requestFingerprint ||
+        row.actor_fingerprint !== input.actorFingerprint ||
+        row.reason_fingerprint !== input.reasonFingerprint ||
+        (input.expectedChecksum !== undefined && row.expected_checksum !== input.expectedChecksum) ||
+        row.batch_limit !== input.limit)
+        throw new PlatformIdentitySyncError('identity_sync_recovery_conflict');
+    return { attempted: row.attempted, recovered: row.recovered, rejected: row.rejected };
+}
+function validateRecoveryReplayInput(input) {
+    validateRecoveryLimit(input.limit);
+    validateFingerprints([
+        input.operationFingerprint,
+        input.requestFingerprint,
+        input.actorFingerprint,
+        input.reasonFingerprint,
+    ]);
+}
+function validateRecoveryInput(input) {
+    validateRecoveryLimit(input.limit);
+    validateFingerprints([
+        input.expectedChecksum,
+        input.operationFingerprint,
+        input.requestFingerprint,
+        input.actorFingerprint,
+        input.reasonFingerprint,
+    ]);
+}
+function validateRecoveryLimit(limit) {
+    if (!Number.isInteger(limit) || limit < 1 || limit > 100)
+        throw new Error('identity sync recovery batch size must be between 1 and 100');
+}
+function validateFingerprints(values) {
+    if (values.some((value) => !/^[0-9a-f]{64}$/.test(value)))
+        throw new Error('identity sync recovery evidence is invalid');
+}
+function fingerprint(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function bounded(value, name) {
+    const normalized = value.trim();
+    if (normalized.length === 0 || normalized.length > 512)
+        throw new Error(`${name} is invalid`);
+    return normalized;
+}
+//# sourceMappingURL=platform-identity-sync-recovery-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-identity-sync-recovery-postgres.js","sourceRoot":"","sources":["../src/platform-identity-sync-recovery-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,yBAAyB,GAI1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,mCAAmC,EACnC,gCAAgC,GAEjC,MAAM,+CAA+C,CAAC;AAEvD,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;GAchB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;GAchB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BhB,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,MAAM,OAAO,yCAAyC;IAG3C,KAAK,CAAO;IACZ,YAAY,CAAS;IACrB,YAAY,CAAS;IAE9B,YAAY,IAAU,EAAE,KAAsE;QAC5F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,YAAY,EAAE,cAAc,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAE7B;QACC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,MAAM,EACN,KAAK,CAAC,KAAK,EACX,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,EACjB,KAAK,CACN,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAM5B;QACC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAOrB;QACC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACzD,MAAM,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC1E,mCAAmC,KAAK,CAAC,oBAAoB,EAAE;aAChE,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAChB,iGAAiG,CAClG,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,MAAM,EACN,KAAK,CAAC,KAAK,EACX,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,EACjB,IAAI,CACL,CAAC;YACF,IAAI,gBAAgB,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,gBAAgB;gBACtD,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;YACtE,MAAM,QAAQ,GAA6C,EAAE,CAAC;YAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,mCAAmC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC;oBACvF,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,mBAAmB,CAAC;gBACxB,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;oBAC5B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC;;;;wCAI4B,EAC5B,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAC5B,CAAC;oBACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;wBACjC,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;gBACxE,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;YAC/E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7C,MAAM,MAAM,CAAC,KAAK,CAChB;;;qDAG6C,EAC7C;gBACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,gBAAgB;gBACtB,KAAK,CAAC,iBAAiB;gBACvB,KAAK,CAAC,gBAAgB;gBACtB,KAAK,CAAC,KAAK;gBACX,QAAQ,CAAC,MAAM;gBACf,SAAS;gBACT,QAAQ;aACT,CACF,CAAC;YACF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAChB;;;+CAGqC,EACrC;oBACE,KAAK,CAAC,oBAAoB;oBAC1B,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;oBACtC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;oBACnC,KAAK,CAAC,gBAAgB;oBACtB,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC;oBAC3B,QAAQ,CAAC,KAAK,CAAC;oBACf,mBAAmB,CAAC,KAAK,CAAC;iBAC3B,CACF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAiBD,KAAK,UAAU,uBAAuB,CACpC,MAAkB,EAClB,KAAa,EACb,WAAmB,EACnB,WAAmB,EACnB,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7B;;;;;iBAKa,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EACvC,CAAC,KAAK,CAAC,CACR,CAAC;IACF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,QAAQ,EAAE,MAAM,gCAAgC,CAC9C,MAAM,EACN,GAAG,CAAC,YAAY,EAChB,WAAW,EACX,WAAW,EACX,IAAI,CACL;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAyC;IACjE,OAAO,WAAW,CAChB,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,yBAAyB,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;QACjE,oBAAoB,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;QACzD,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU;QAC/B,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,aAAa;QAChC,kBAAkB,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC7D,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC1D,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,EAAE,IAAI,IAAI;QACjE,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC;KAChD,CAAC,CAAC,CACJ,CACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA4B;IACvD,OAAO,WAAW,CAChB,IAAI,CAAC,SAAS,CAAC;QACb,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QACrE,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QACrE,+BAA+B,EAAE,KAAK,CAAC,QAAQ,CAAC,+BAA+B;QAC/E,+BAA+B,EAAE,KAAK,CAAC,QAAQ,CAAC,+BAA+B;QAC/E,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,eAAe;QAC/C,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC;KACtE,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAkB,EAClB,KAOC;IAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAU9B;;wFAEoF,EACpF,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAC7B,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IACE,GAAG,CAAC,mBAAmB,KAAK,KAAK,CAAC,kBAAkB;QACpD,GAAG,CAAC,iBAAiB,KAAK,KAAK,CAAC,gBAAgB;QAChD,GAAG,CAAC,kBAAkB,KAAK,KAAK,CAAC,iBAAiB;QAClD,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK,CAAC,gBAAgB,CAAC;QAC1F,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK;QAE/B,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IACzE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,2BAA2B,CAAC,KAMpC;IACC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,oBAAoB,CAAC;QACnB,KAAK,CAAC,oBAAoB;QAC1B,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,iBAAiB;KACxB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAO9B;IACC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,oBAAoB,CAAC;QACnB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,oBAAoB;QAC1B,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,iBAAiB;KACxB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QACtD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAyB;IACrD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAC9F,OAAO,UAAU,CAAC;AACpB,CAAC"}