@sixb/pg 0.0.1

package/dist/auth-storage/rows.d.ts

@@ -0,0 +1,138 @@
+import type { AccessTokenRecord, GroupMembershipRecord, GroupMembershipSource, InvitationRecord, InvitationStatus, MagicLinkRecord, OidcAuthorizationAttemptRecord, ServiceAccountGroupMembershipRecord, ServiceAccountRecord, ServiceAccountStatus, SessionRecord, UserIdentityRecord, UserRecord, UserStatus } from "@sixb/core/storage";
+type PgDate = Date | string;
+export interface PgAuthUserRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly email: string;
+    readonly display_name: string | null;
+    readonly avatar_url: string | null;
+    readonly status: UserStatus;
+    readonly created_at: PgDate;
+    readonly updated_at: PgDate;
+}
+export interface PgAuthUserIdentityRow {
+    readonly project_id: string;
+    readonly strategy_id: string;
+    readonly subject: string;
+    readonly user_id: string;
+    readonly claims: Readonly<Record<string, unknown>> | string | null;
+    readonly created_at: PgDate;
+    readonly updated_at: PgDate;
+}
+export interface PgAuthServiceAccountRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly name: string;
+    readonly description: string | null;
+    readonly status: ServiceAccountStatus;
+    readonly created_by_user_id: string | null;
+    readonly created_by_service_account_id: string | null;
+    readonly created_by_system_id: string | null;
+    readonly created_by_session_id: string | null;
+    readonly created_at: PgDate;
+    readonly updated_at: PgDate;
+}
+export interface PgAuthServiceAccountGroupMembershipRow {
+    readonly project_id: string;
+    readonly service_account_id: string;
+    readonly group_id: string;
+    readonly source: GroupMembershipSource;
+    readonly created_at: PgDate;
+}
+export interface PgAuthSessionRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly user_id: string;
+    readonly strategy_id: string;
+    readonly audience: SessionRecord["audience"];
+    readonly token_hash: string;
+    readonly created_at: PgDate;
+    readonly expires_at: PgDate;
+    readonly absolute_expires_at: PgDate | null;
+    readonly revoked_at: PgDate | null;
+    readonly last_seen_at: PgDate | null;
+    readonly user_agent: string | null;
+    readonly ip_address: string | null;
+}
+export interface PgAuthAccessTokenRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly name: string;
+    readonly kind: AccessTokenRecord["kind"];
+    readonly subject_type: AccessTokenRecord["subjectType"];
+    readonly subject_id: string;
+    readonly token_hash: string;
+    readonly group_ids: readonly string[] | string | null;
+    readonly created_by_user_id: string | null;
+    readonly created_by_service_account_id: string | null;
+    readonly created_by_system_id: string | null;
+    readonly created_by_session_id: string | null;
+    readonly created_at: PgDate;
+    readonly expires_at: PgDate;
+    readonly revoked_at: PgDate | null;
+    readonly last_used_at: PgDate | null;
+    readonly last_used_user_agent: string | null;
+    readonly last_used_ip_address: string | null;
+}
+export interface PgAuthInvitationRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly email: string;
+    readonly status: InvitationStatus;
+    readonly created_by_user_id: string | null;
+    readonly created_by_service_account_id: string | null;
+    readonly created_by_system_id: string | null;
+    readonly created_by_session_id: string | null;
+    readonly created_at: PgDate;
+    readonly updated_at: PgDate;
+    readonly expires_at: PgDate;
+    readonly accepted_at: PgDate | null;
+    readonly revoked_at: PgDate | null;
+}
+export interface PgAuthGroupMembershipRow {
+    readonly project_id: string;
+    readonly user_id: string;
+    readonly group_id: string;
+    readonly source: GroupMembershipSource;
+    readonly created_at: PgDate;
+}
+export interface PgAuthMagicLinkRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly strategy_id: string;
+    readonly audience: MagicLinkRecord["audience"];
+    readonly email: string;
+    readonly token_hash: string;
+    readonly return_to: string | null;
+    readonly created_at: PgDate;
+    readonly expires_at: PgDate;
+    readonly consumed_at: PgDate | null;
+    readonly revoked_at: PgDate | null;
+}
+export interface PgAuthOidcAttemptRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly strategy_id: string;
+    readonly audience: OidcAuthorizationAttemptRecord["audience"];
+    readonly state_hash: string;
+    readonly nonce_hash: string;
+    readonly code_verifier: string;
+    readonly return_to: string | null;
+    readonly created_at: PgDate;
+    readonly expires_at: PgDate;
+    readonly consumed_at: PgDate | null;
+}
+export declare function rowToUserRecord(row: PgAuthUserRow): UserRecord;
+export declare function rowToIdentityRecord(row: PgAuthUserIdentityRow): UserIdentityRecord;
+export declare function rowToServiceAccountRecord(row: PgAuthServiceAccountRow): ServiceAccountRecord;
+export declare function rowToServiceAccountGroupMembershipRecord(row: PgAuthServiceAccountGroupMembershipRow): ServiceAccountGroupMembershipRecord;
+export declare function rowToSessionRecord(row: PgAuthSessionRow): SessionRecord;
+export declare function rowToAccessTokenRecord(row: PgAuthAccessTokenRow): AccessTokenRecord;
+export declare function rowToInvitationRecord(row: PgAuthInvitationRow, groupIds: readonly string[]): InvitationRecord;
+export declare function rowToGroupMembershipRecord(row: PgAuthGroupMembershipRow): GroupMembershipRecord;
+export declare function rowToMagicLinkRecord(row: PgAuthMagicLinkRow): MagicLinkRecord;
+export declare function rowToOidcAuthorizationAttemptRecord(row: PgAuthOidcAttemptRow): OidcAuthorizationAttemptRecord;
+export declare function serializeOptionalRecord(value: Readonly<Record<string, unknown>> | undefined): string | null;
+export declare function serializeOptionalStringArray(value: readonly string[] | undefined): string | null;
+export {};
+//# sourceMappingURL=rows.d.ts.map

package/dist/auth-storage/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../src/auth-storage/rows.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAA;AAE3B,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAA;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,aAAa,CAAC,CAAA;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAA;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC,UAAU,CAAC,CAAA;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,UAAU,CAW9D;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,GAAG,kBAAkB,CAUlF;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,uBAAuB,GAAG,oBAAoB,CAY5F;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,sCAAsC,GAC1C,mCAAmC,CAQrC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAgBvE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,oBAAoB,GAAG,iBAAiB,CAmBnF;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,mBAAmB,EACxB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,gBAAgB,CAelB;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,wBAAwB,GAAG,qBAAqB,CAQ/F;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe,CAc7E;AAED,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,oBAAoB,GACxB,8BAA8B,CAchC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GACnD,MAAM,GAAG,IAAI,CAEf;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAEhG"}

package/dist/auth-storage/service-account-group-memberships.d.ts

@@ -0,0 +1,17 @@
+import type { AuthServiceAccountGroupMembershipStore, ReconcileAuthServiceAccountGroupMembershipsInput, ServiceAccountGroupMembershipRecord, UpsertAuthServiceAccountGroupMembershipInput } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAuthServiceAccountGroupMembershipStore implements AuthServiceAccountGroupMembershipStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    upsert(input: UpsertAuthServiceAccountGroupMembershipInput): Promise<ServiceAccountGroupMembershipRecord>;
+    reconcileForServiceAccount(input: ReconcileAuthServiceAccountGroupMembershipsInput): Promise<readonly ServiceAccountGroupMembershipRecord[]>;
+    listForServiceAccount(params: {
+        readonly projectId: string;
+        readonly serviceAccountId: string;
+    }): Promise<readonly ServiceAccountGroupMembershipRecord[]>;
+    listForGroup(params: {
+        readonly projectId: string;
+        readonly groupId: string;
+    }): Promise<readonly ServiceAccountGroupMembershipRecord[]>;
+}
+//# sourceMappingURL=service-account-group-memberships.d.ts.map

package/dist/auth-storage/service-account-group-memberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-account-group-memberships.d.ts","sourceRoot":"","sources":["../../src/auth-storage/service-account-group-memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sCAAsC,EACtC,gDAAgD,EAChD,mCAAmC,EACnC,4CAA4C,EAC7C,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAKpD,qBAAa,wCACX,YAAW,sCAAsC;IAErC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CACV,KAAK,EAAE,4CAA4C,GAClD,OAAO,CAAC,mCAAmC,CAAC;IAuCzC,0BAA0B,CAC9B,KAAK,EAAE,gDAAgD,GACtD,OAAO,CAAC,SAAS,mCAAmC,EAAE,CAAC;IA4DpD,qBAAqB,CAAC,MAAM,EAAE;QAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAClC,GAAG,OAAO,CAAC,SAAS,mCAAmC,EAAE,CAAC;IAYrD,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,mCAAmC,EAAE,CAAC;CAW5D"}

package/dist/auth-storage/service-accounts.d.ts

@@ -0,0 +1,14 @@
+import type { AuthServiceAccountStore, CreateAuthServiceAccountInput, ListAuthServiceAccountsInput, ListAuthServiceAccountsResult, ServiceAccountRecord, UpdateAuthServiceAccountInput } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAuthServiceAccountStore implements AuthServiceAccountStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAuthServiceAccountInput): Promise<ServiceAccountRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<ServiceAccountRecord | null>;
+    update(input: UpdateAuthServiceAccountInput): Promise<ServiceAccountRecord>;
+    list(input: ListAuthServiceAccountsInput): Promise<ListAuthServiceAccountsResult>;
+}
+//# sourceMappingURL=service-accounts.d.ts.map

package/dist/auth-storage/service-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-accounts.d.ts","sourceRoot":"","sources":["../../src/auth-storage/service-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,oBAAoB,EACpB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAYpD,qBAAa,yBAA0B,YAAW,uBAAuB;IAC3D,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiD3E,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAUlC,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2B3E,IAAI,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,6BAA6B,CAAC;CAwCxF"}

package/dist/auth-storage/sessions.d.ts

@@ -0,0 +1,55 @@
+import type { AuthSessionAudience } from "@sixb/core";
+import type { AuthSessionStore, CreateAuthSessionInput, SessionRecord } from "@sixb/core/storage";
+import { type PgStoreClient } from "../transactions";
+export declare class PgAuthSessionStore implements AuthSessionStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAuthSessionInput): Promise<SessionRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<SessionRecord | null>;
+    getActiveByUserId(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly audience: AuthSessionAudience;
+        readonly now: Date;
+    }): Promise<SessionRecord | null>;
+    listActiveByUserId(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly now: Date;
+    }): Promise<readonly SessionRecord[]>;
+    findValidByTokenHash(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly audience: AuthSessionAudience;
+        readonly tokenHash: string;
+        readonly now: Date;
+    }): Promise<SessionRecord | null>;
+    renewIfValid(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly audience: AuthSessionAudience;
+        readonly tokenHash: string;
+        readonly now: Date;
+        readonly expiresAt: Date;
+    }): Promise<SessionRecord | null>;
+    revoke(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly revokedAt: Date;
+    }): Promise<SessionRecord>;
+    revokeActiveForUser(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly audience?: AuthSessionAudience;
+        readonly revokedAt: Date;
+    }): Promise<readonly SessionRecord[]>;
+    touch(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly lastSeenAt: Date;
+    }): Promise<SessionRecord>;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/dist/auth-storage/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/auth-storage/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEjG,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAWxB,qBAAa,kBAAmB,YAAW,gBAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IAM7D,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI3B,iBAAiB,CAAC,MAAM,EAAE;QAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAiB3B,kBAAkB,CAAC,MAAM,EAAE;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAe/B,oBAAoB,CAAC,MAAM,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAiB3B,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;QAClB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAwB3B,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,aAAa,CAAC;IAuBpB,mBAAmB,CAAC,MAAM,EAAE;QAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAA;QACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAW/B,KAAK,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;CAe3B"}

package/dist/auth-storage/shared.d.ts

@@ -0,0 +1,159 @@
+import type { AuthSessionAudience, Principal } from "@sixb/core";
+import type { CompleteAuthSessionInput, CreateAuthSessionInput, GroupMembershipRecord, InvitationRecord, MagicLinkRecord, OidcAuthorizationAttemptRecord, SessionRecord, UpsertAuthGroupMembershipInput, UserRecord } from "@sixb/core/storage";
+import type { SQLClient } from "../pg-client";
+import type { PgAuthMagicLinkRow, PgAuthOidcAttemptRow, PgAuthSessionRow, PgAuthUserIdentityRow, PgAuthUserRow } from "./rows";
+import { rowToSessionRecord } from "./rows";
+export type PgValue = string | number | Date | null;
+export declare function assertNonEmpty(value: string, label: string): string;
+export declare function normalizeEmail(email: string): string;
+export declare function normalizeGroupIds(groupIds: readonly string[] | undefined): readonly string[];
+export declare function dateOrNow(value: Date | undefined): Date;
+export declare function hasEmptyFilter(values: readonly unknown[] | undefined): boolean;
+export declare function appendPagination(query: string, params: PgValue[], nextIndex: number, input: {
+    readonly limit?: number;
+    readonly offset?: number;
+}): string;
+export declare function placeholders(startIndex: number, count: number): readonly string[];
+export declare function getUserRowById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<PgAuthUserRow | null>;
+export declare function getUserById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): Promise<UserRecord | null>;
+export declare function getUserRowByEmail(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly email: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<PgAuthUserRow | null>;
+export declare function getUserByEmail(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly email: string;
+}): Promise<UserRecord | null>;
+export declare function requireUserById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): Promise<UserRecord>;
+export declare function getIdentityRowBySubject(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly strategyId: string;
+    readonly subject: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<PgAuthUserIdentityRow | null>;
+export declare function getSessionRowById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<PgAuthSessionRow | null>;
+export declare function getSessionById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): Promise<ReturnType<typeof rowToSessionRecord> | null>;
+export declare function requireSessionById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): Promise<ReturnType<typeof rowToSessionRecord>>;
+export declare function getInvitationGroupIds(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly invitationId: string;
+}): Promise<readonly string[]>;
+export declare function getInvitationById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<InvitationRecord | null>;
+export declare function requireInvitationById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<InvitationRecord>;
+export declare function getActiveInvitationByEmail(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly email: string;
+    readonly now: Date;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<InvitationRecord | null>;
+export declare function replaceInvitationGroups(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly invitationId: string;
+    readonly groupIds: readonly string[];
+}): Promise<void>;
+export declare function getMagicLinkRowById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<PgAuthMagicLinkRow | null>;
+export declare function getMagicLinkById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): Promise<MagicLinkRecord | null>;
+export declare function consumeMagicLink(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+    readonly tokenHash: string;
+    readonly consumedAt: Date;
+}): Promise<MagicLinkRecord>;
+export declare function getOidcAttemptRowById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}, options?: {
+    readonly forUpdate?: boolean;
+}): Promise<PgAuthOidcAttemptRow | null>;
+export declare function getOidcAttemptById(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): Promise<OidcAuthorizationAttemptRecord | null>;
+export declare function consumeOidcAttempt(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly id: string;
+    readonly stateHash: string;
+    readonly consumedAt: Date;
+}): Promise<OidcAuthorizationAttemptRecord>;
+export declare function validateCompleteSessionInput(sql: SQLClient, projectId: string, session: CompleteAuthSessionInput): Promise<void>;
+export declare function assertSessionIdAvailable(sql: SQLClient, projectId: string, sessionId: string): Promise<void>;
+export declare function createSession(sql: SQLClient, input: CreateAuthSessionInput): Promise<SessionRecord>;
+export declare function revokeActiveSessionsForUser(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly audience?: AuthSessionAudience;
+    readonly revokedAt: Date;
+}): Promise<readonly SessionRecord[]>;
+export declare function upsertGroupMembership(sql: SQLClient, input: UpsertAuthGroupMembershipInput): Promise<GroupMembershipRecord>;
+export declare function removeGroupMembership(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly groupId: string;
+}): Promise<GroupMembershipRecord | null>;
+export declare function getGroupMembership(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly groupId: string;
+}): Promise<GroupMembershipRecord | null>;
+export declare function listMembershipsForUser(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly userId: string;
+}): Promise<readonly GroupMembershipRecord[]>;
+export declare function revokeActiveMagicLinksForEmail(sql: SQLClient, params: {
+    readonly projectId: string;
+    readonly email: string;
+    readonly revokedAt: Date;
+}): Promise<readonly MagicLinkRecord[]>;
+export declare function invitationCreatorColumns(principal: Principal | undefined): {
+    readonly createdByUserId: string | null;
+    readonly createdByServiceAccountId: string | null;
+    readonly createdBySystemId: string | null;
+};
+export declare function assertMagicLinkUsable(projectId: string, id: string, tokenHash: string, at: Date, row: PgAuthMagicLinkRow): void;
+export declare function assertOidcAttemptUsable(projectId: string, id: string, stateHash: string, at: Date, row: PgAuthOidcAttemptRow): void;
+export declare function mapUniqueConstraintError(error: unknown, code: "duplicate_access_token" | "duplicate_identity" | "duplicate_invitation" | "duplicate_magic_link" | "duplicate_oidc_attempt" | "duplicate_service_account" | "duplicate_session" | "duplicate_user", message: string): never;
+//# sourceMappingURL=shared.d.ts.map

package/dist/auth-storage/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/auth-storage/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,aAAa,EACb,8BAA8B,EAC9B,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAGV,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACd,MAAM,QAAQ,CAAA;AACf,OAAO,EAKL,kBAAkB,EAEnB,MAAM,QAAQ,CAAA;AAEf,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;AAEnD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAE5F;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI,CAEvD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GAAG,OAAO,CAE9E;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D,MAAM,CAcR;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEjF;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG5B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC9D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG5B;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,EACD,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAcvC;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAGvD;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAShD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAU5B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;CAAE,EAClF,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAiBlC;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACrC,GACA,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAapC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAatC;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC,CAGhD;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,OAAO,CAAC,8BAA8B,CAAC,CA0BzC;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAiDxB;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB,GACA,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAwDnC;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAgChC;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAcvC;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAUvC;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAU3C;AAED,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GACvF,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CA8BrC;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C,CAMA;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,IAAI,EACR,GAAG,EAAE,kBAAkB,GACtB,IAAI,CAcN;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,IAAI,EACR,GAAG,EAAE,oBAAoB,GACxB,IAAI,CAcN;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,IAAI,EACA,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GACnB,gBAAgB,EACpB,OAAO,EAAE,MAAM,GACd,KAAK,CAMP"}

package/dist/auth-storage/users.d.ts

@@ -0,0 +1,19 @@
+import type { AuthUserStore, CreateAuthUserInput, ListAuthUsersInput, ListAuthUsersResult, UpdateAuthUserProfileInput, UpdateAuthUserStatusInput, UserRecord } from "@sixb/core/storage";
+import type { PgStoreClient } from "../transactions";
+export declare class PgAuthUserStore implements AuthUserStore {
+    private readonly sql;
+    constructor(sql: PgStoreClient);
+    create(input: CreateAuthUserInput): Promise<UserRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<UserRecord | null>;
+    getByEmail(params: {
+        readonly projectId: string;
+        readonly email: string;
+    }): Promise<UserRecord | null>;
+    updateProfile(input: UpdateAuthUserProfileInput): Promise<UserRecord>;
+    updateStatus(input: UpdateAuthUserStatusInput): Promise<UserRecord>;
+    list(input: ListAuthUsersInput): Promise<ListAuthUsersResult>;
+}
+//# sourceMappingURL=users.d.ts.map

package/dist/auth-storage/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/auth-storage/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAepD,qBAAa,eAAgB,YAAW,aAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAwDvD,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKxB,UAAU,CAAC,MAAM,EAAE;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KACvB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKxB,aAAa,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,UAAU,CAAC;IA2BrE,YAAY,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BnE,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA0CpE"}

package/dist/index.d.ts

@@ -0,0 +1,127 @@
+import type { MigrationCapableStorage, Storage, StorageMigrator, StorageTransactionOptions } from "@sixb/core";
+import { type ObjectStorage } from "@sixb/core/storage";
+import { PgAgentStorage } from "./agents";
+import { PgAuthStorage } from "./auth-storage";
+import { PgOntologyStorage } from "./ontology-storage";
+import { PgActionRunStorage } from "./pg-action-run-storage";
+import { PgPipelineRunStorage } from "./pg-pipeline-run-storage";
+import { PgProjectionRunStorage } from "./pg-projection-run-storage";
+import { PgRulesStorage } from "./pg-rules-storage";
+import { PgSyncRunStorage } from "./pg-sync-run-storage";
+import { PgWebhookDeliveryStorage } from "./pg-webhook-delivery-storage";
+import { PgWebhookRunStorage } from "./pg-webhook-run-storage";
+import { PgWorkflowInterventionStorage } from "./pg-workflow-intervention-storage";
+import { PgWorkflowRunStorage } from "./pg-workflow-run-storage";
+export interface PostgresStorageOptions {
+    /** Full connection string (e.g. DATABASE_URL). Takes precedence over individual fields. */
+    connectionString?: string;
+    /** PostgreSQL host. Defaults to 'localhost'. */
+    host?: string;
+    /** PostgreSQL port. Defaults to 5432. */
+    port?: number;
+    /** Database name. */
+    database?: string;
+    /** Database user. */
+    user?: string;
+    /** Database password. */
+    password?: string;
+    /** Maximum number of connections in the pool. Defaults to 10. */
+    max?: number;
+    /** Idle connection timeout in milliseconds. Defaults to 30000. */
+    idleTimeoutMillis?: number;
+    /**
+     * Server-side `statement_timeout` (ms) applied to every connection in the pool. A query
+     * exceeding it is cancelled by PostgreSQL, which frees its pooled connection instead of
+     * pinning it indefinitely. Without this, a single stalled query can starve a small pool
+     * until the process is restarted. Unset by default (no timeout). Set per role — keep it
+     * generous or unset for workers that run long migrations/bulk writes.
+     */
+    statementTimeoutMillis?: number;
+    /**
+     * Server-side `idle_in_transaction_session_timeout` (ms) applied to every connection. A
+     * transaction left open and idle beyond it is aborted by PostgreSQL, releasing the
+     * connection. Unset by default (no timeout).
+     */
+    idleInTransactionSessionTimeoutMillis?: number;
+    /**
+     * Grace period (ms) for {@link PostgresStorage.close}. On shutdown the pool stops
+     * accepting new queries and waits up to this long for in-flight queries to finish before
+     * destroying the connections, so a restart drains cleanly instead of severing live work.
+     * Defaults to 5000.
+     */
+    shutdownTimeoutMillis?: number;
+    /** Seconds to wait when establishing a connection. Defaults to 10000. */
+    connectTimeoutMillis?: number;
+    /**
+     * Whether to use server-side prepared statements (porsager's default, faster against a
+     * direct Postgres connection). Behind PgBouncer transaction mode they require PgBouncer
+     * >= 1.21 with `max_prepared_statements > 0`; set `false` for an older PgBouncer or when
+     * that setting is 0. Defaults to `true`.
+     */
+    prepare?: boolean;
+    /** PostgreSQL schema name for all Sixb tables. Defaults to 'sixb'. */
+    schemaName?: string;
+    /** SSL configuration. */
+    ssl?: boolean | "require" | "prefer";
+}
+/**
+ * PostgreSQL storage provider for Sixb.
+ *
+ * Bundles Sixb storage adapters backed by a shared PostgreSQL connection pool (porsager
+ * `postgres`), which reliably reclaims connections under load.
+ *
+ * The storage exposes a core `StorageMigrator`. Sixb CLI startup and
+ * `sixb db migrate` run it automatically through `migrateStorage(storage)`.
+ *
+ * Usage:
+ * ```ts
+ * const pg = new PostgresStorage({
+ *   connectionString: process.env.DATABASE_URL!,
+ * })
+ *
+ * export const sixb = createSixb({
+ *   broker: myBroker,
+ *   storage: pg,
+ * })
+ * ```
+ */
+export declare class PostgresStorage implements MigrationCapableStorage {
+    readonly objects: ObjectStorage;
+    readonly ontology: PgOntologyStorage;
+    readonly auth: PgAuthStorage;
+    readonly agents: PgAgentStorage;
+    readonly actionRuns: PgActionRunStorage;
+    readonly pipelineRuns: PgPipelineRunStorage;
+    readonly workflowRuns: PgWorkflowRunStorage;
+    readonly workflowInterventions: PgWorkflowInterventionStorage;
+    readonly syncRuns: PgSyncRunStorage;
+    readonly projectionRuns: PgProjectionRunStorage;
+    readonly timeseries: Storage["timeseries"];
+    readonly webhookDeliveries: PgWebhookDeliveryStorage;
+    readonly webhookRuns: PgWebhookRunStorage;
+    readonly rules: PgRulesStorage;
+    readonly migrators: readonly StorageMigrator[];
+    private readonly sql;
+    private readonly schemaName;
+    private readonly shutdownTimeoutSeconds;
+    private readonly transactionScope;
+    constructor(options: PostgresStorageOptions);
+    ping(): Promise<void>;
+    transaction<T>(run: (tx: Storage) => Promise<T> | T, options?: StorageTransactionOptions): Promise<T>;
+    private assertRootOperationAvailable;
+    /**
+     * Close the connection pool. Should be called on shutdown.
+     *
+     * Stops accepting new queries and waits up to `shutdownTimeoutMillis` for in-flight
+     * queries to finish before destroying connections.
+     */
+    close(): Promise<void>;
+    /**
+     * Drop all Sixb tables and schema. Useful for test cleanup.
+     * WARNING: This permanently deletes all data.
+     */
+    dropSchema(): Promise<void>;
+    private createTransactionStorage;
+}
+export { migratePostgresStorage } from "./migrations";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,uBAAuB,EACvB,OAAO,EACP,eAAe,EACf,yBAAyB,EAC1B,MAAM,YAAY,CAAA;AAUnB,OAAO,EAEL,KAAK,aAAa,EAGnB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE9C,OAAO,EAAE,iBAAiB,EAAqC,MAAM,oBAAoB,CAAA;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAG5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAIhE,MAAM,WAAW,sBAAsB;IACrC,2FAA2F;IAC3F,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;;OAIG;IACH,qCAAqC,CAAC,EAAE,MAAM,CAAA;IAE9C;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAE9B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,yBAAyB;IACzB,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAA;CACrC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,eAAgB,YAAW,uBAAuB;IAC7D,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAA;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,6BAA6B,CAAA;IAC7D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAA;IAC/C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;IACpD,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;IAE9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAQ;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;gBAExD,OAAO,EAAE,sBAAsB;IAkErC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,WAAW,CAAC,CAAC,EACjB,GAAG,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACpC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,CAAC,CAAC;IA0Cb,OAAO,CAAC,4BAA4B;IAOpC;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,OAAO,CAAC,wBAAwB;CAiBjC;AA4DD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA"}