@voltro/protocol 0.85.0 → 0.87.0

package/dist/jsonSchema.js

@@ -0,0 +1,54 @@
+import { Schema as e, SchemaAST as t } from "effect";
+//#region src/jsonSchema.ts
+var n = (e) => typeof e == "object" && !!e && !Array.isArray(e), r = (e, t = /* @__PURE__ */ new Map()) => {
+	let n = t.get(e);
+	if (n !== void 0) return n;
+	let r = i(e, t);
+	return t.set(e, r), r;
+}, i = (n, i) => n.encoding === void 0 ? t.isNumber(n) ? e.make(n).check(e.isFinite()).ast : t.isObjects(n) ? new t.Objects(n.propertySignatures.map((e) => new t.PropertySignature(e.name, r(e.type, i))), n.indexSignatures.map((e) => new t.IndexSignature(e.parameter, r(e.type, i))), n.annotations, n.checks, void 0, n.context) : t.isArrays(n) ? new t.Arrays(n.isMutable, n.elements.map((e) => r(e, i)), n.rest.map((e) => r(e, i)), n.annotations, n.checks, void 0, n.context) : t.isUnion(n) ? new t.Union(n.types.map((e) => r(e, i)), n.options, n.annotations, n.checks, void 0, n.context) : t.isSuspend(n) ? new t.Suspend(() => r(n.thunk(), i), n.annotations, n.checks, void 0, n.context) : n : n, a = (e) => {
+	if (Array.isArray(e)) return e.map(a);
+	if (!n(e)) return e;
+	let t = e.not;
+	if (n(t) && t.type === "null" && Object.keys(e).length === 1) return {
+		type: "object",
+		properties: {},
+		additionalProperties: !1
+	};
+	let r = e.anyOf;
+	if (Array.isArray(r)) {
+		if (r.length === 2) {
+			let t = r.find((e) => n(e) && e.type === "number"), i = r.find((e) => n(e) && e.type === "string" && Array.isArray(e.enum) && e.enum.includes("Infinity"));
+			if (n(t) && i !== void 0) {
+				let { anyOf: n, ...r } = e;
+				return a({
+					...r,
+					...t
+				});
+			}
+		}
+		if (r.length === 1 && n(r[0])) {
+			let { anyOf: t, ...n } = e;
+			return a({
+				...n,
+				...r[0]
+			});
+		}
+	}
+	let i = {};
+	for (let [t, n] of Object.entries(e)) i[t] = a(n);
+	return i;
+}, o = (t, n = {}) => {
+	let i = e.make(r(t.ast)), o = e.toJsonSchemaDocument(i, n.closed === !1 ? {} : { onExcessProperty: "error" });
+	return {
+		schema: a(o.schema),
+		definitions: a(o.definitions)
+	};
+}, s = (e, t = {}) => {
+	let { schema: n, definitions: r } = o(e, t);
+	return Object.keys(r).length === 0 ? n : {
+		...n,
+		$defs: r
+	};
+};
+//#endregion
+export { r as finiteNumberView, o as jsonSchemaDocumentOf, s as jsonSchemaOf, a as plainJsonSchema };

package/dist/jwt.d.ts

@@ -48,6 +48,13 @@ declare interface AuthStrategy {
 declare interface AuthStrategyInput {
     readonly headers: Readonly<Record<string, string | undefined>>;
     readonly clientId: number;
+    /** HTTP request target, supplied by REST transports. Request selectors may
+     * read an explicit tenant hint here; it is never authentication or authority.
+     * Absent for connection transports and non-HTTP callers. */
+    readonly http?: {
+        readonly path: string;
+        readonly query: string;
+    };
     /**
      * The app's DataStore, for a strategy that must READ to identify the caller.
      *
@@ -291,6 +298,9 @@ declare type StrategyResolution = {
 
 declare const Subject: Schema.Union<readonly [Schema.Struct<{
     readonly type: Schema.Literal<"user">;
+    /** A guest has a stable identity but has not linked a registered account.
+     * This identity mark survives session signing; it never grants authority. */
+    readonly kind: Schema.optional<Schema.Literal<"guest">>;
     readonly id: Schema.String;
     readonly tenantId: Schema.String;
     readonly scopes: Schema.optional<Schema.$Array<Schema.String>>;

package/dist/jwt.js

@@ -77,7 +77,7 @@ var i = 36e5, a = /* @__PURE__ */ new Map(), o = (e, n) => {
 	if (e instanceof n.JWSInvalid || e instanceof n.JWTInvalid) return new c("malformed jwt", "malformed");
 	if (e instanceof n.JOSEAlgNotAllowed) return new c("jwt algorithm not allowed", "unsupported_algorithm");
 	let t = e?.message ?? String(e);
-	return /fetch|network|enotfound|econnrefused/i.test(t) ? new c(`jwks unreachable: ${t}`, "jwks_unreachable") : new c(`jwt verify failed: ${t}`, "other");
+	return e instanceof n.JWKSTimeout || /fetch|network|enotfound|econnrefused|JSON Web Key Set/i.test(t) ? new c(`jwks unreachable: ${t}`, "jwks_unreachable") : new c(`jwt verify failed: ${t}`, "other");
 }, v = (t, n, r) => {
 	let i = t.authorization ?? t.Authorization;
 	if (i?.startsWith("Bearer ")) {

package/dist/outbox.js

@@ -0,0 +1,10 @@
+//#region src/outbox.ts
+function e(e, t) {
+	if (typeof e != "object" || !e) throw Error(`Outbox handler ${t}: definition must be an object`);
+	let n = e;
+	if (typeof n.effect != "string" || n.effect.trim() === "") throw Error(`Outbox handler ${t}: effect must be a non-empty string`);
+	if (typeof n.handler != "function") throw Error(`Outbox handler ${t}: handler must be a function`);
+	if (n.maxAttempts !== void 0 && (typeof n.maxAttempts != "number" || !Number.isSafeInteger(n.maxAttempts) || n.maxAttempts < 1)) throw Error(`Outbox handler ${t}: maxAttempts must be a positive safe integer`);
+}
+//#endregion
+export { e as validateOutboxHandlerDefinition };

package/dist/pairing.js

@@ -0,0 +1,75 @@
+//#region src/pairing.ts
+var e = "voltro-dev", t = "pair", n = "voltro:pairing", r = (e) => {
+	try {
+		let t = new URL(e);
+		return t.protocol === "http:" || t.protocol === "https:";
+	} catch {
+		return !1;
+	}
+}, i = (e) => {
+	try {
+		let t = new URL(e).hostname;
+		return t === "localhost" || t === "127.0.0.1" || t === "::1" || t === "[::1]";
+	} catch {
+		return !1;
+	}
+}, a = (n) => {
+	if (!r(n.api)) throw Error(`pairingLink: api must be an http(s) url, got ${JSON.stringify(n.api)}`);
+	if (i(n.api)) throw Error("pairingLink: api must be the LAN address — a device cannot reach localhost on this machine");
+	if (!/^[A-Za-z0-9_-]+$/.test(n.name)) throw Error(`pairingLink: name must be a plain identifier, got ${JSON.stringify(n.name)}`);
+	let a = new URLSearchParams({
+		api: n.api,
+		name: n.name
+	});
+	return n.token !== void 0 && n.token.length > 0 && a.set("token", n.token), `${e}://${t}?${a.toString()}`;
+}, o = (e) => {
+	let t;
+	try {
+		t = new URL(e);
+	} catch {
+		return null;
+	}
+	if (t.protocol !== "voltro-dev:" || (t.host || t.pathname.replace(/^\/+/, "")) !== "pair") return null;
+	let n = t.searchParams.get("api") ?? "", a = t.searchParams.get("name") ?? "", o = t.searchParams.get("token");
+	return !r(n) || i(n) || !/^[A-Za-z0-9_-]+$/.test(a) ? null : {
+		api: n,
+		name: a,
+		...o !== null && o.length > 0 ? { token: o } : {}
+	};
+}, s = (e) => "getItem" in e ? {
+	get: async (t) => e.getItem(t),
+	set: async (t, n) => {
+		await e.setItem(t, n);
+	},
+	remove: e.removeItem ? async (t) => {
+		await e.removeItem(t);
+	} : null
+} : {
+	get: async (t) => e.get(t),
+	set: async (t, n) => {
+		await e.set(t, n);
+	},
+	remove: e.remove ? async (t) => {
+		await e.remove(t);
+	} : null
+}, c = async (e, t) => {
+	await s(e).set(n, JSON.stringify(t));
+}, l = async (e) => {
+	let t = await s(e).get(n);
+	if (t === null || t === "") return null;
+	try {
+		let e = JSON.parse(t);
+		return typeof e.api != "string" || typeof e.name != "string" || !r(e.api) ? null : {
+			api: e.api,
+			name: e.name,
+			...typeof e.token == "string" && e.token.length > 0 ? { token: e.token } : {}
+		};
+	} catch {
+		return null;
+	}
+}, u = async (e) => {
+	let t = s(e);
+	t.remove ? await t.remove(n) : await t.set(n, "");
+};
+//#endregion
+export { t as PAIRING_HOST, e as PAIRING_SCHEME, n as PAIRING_STORAGE_KEY, c as applyPairing, u as clearPairing, a as pairingLink, o as parsePairingLink, l as readPairing };

package/dist/plugin.js

@@ -0,0 +1,87 @@
+import { Context as e, Layer as t } from "effect";
+//#region src/plugin.ts
+var n = Object.freeze([
+	"rpc",
+	"subscriptions",
+	"events",
+	"presence",
+	"workflows",
+	"schedules",
+	"directors",
+	"drainers",
+	"reapers",
+	"retention",
+	"rest",
+	"webhooks",
+	"inspect",
+	"cdc"
+]), r = (e) => e, i = (e) => e, a = (e) => {
+	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
+	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
+}, o = (e) => {
+	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
+}, s = (n, r) => {
+	let i = e.Service(n);
+	return {
+		Tag: i,
+		Live: t.succeed(i, r)
+	};
+}, c = (e, t, n) => {
+	if (!t) return { ok: !0 };
+	let r = n === void 0 ? null : l(n);
+	if (!r) return {
+		ok: !0,
+		unverified: `plugin "${e}" requires framework ${t}, but the running framework version is ${n === void 0 ? "unknown" : `unreadable ("${n}")`} — not checked.`
+	};
+	let i = t.trim();
+	if (i === "*" || i === "") return { ok: !0 };
+	let a = i.split(/\s+/);
+	for (let i of a) if (!d(i, r)) return {
+		ok: !1,
+		reason: `plugin "${e}" requires framework ${t}, running ${n}`
+	};
+	return { ok: !0 };
+}, l = (e) => {
+	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
+	return t ? {
+		major: Number(t[1]),
+		minor: Number(t[2]),
+		patch: Number(t[3]),
+		pre: t[4] ?? ""
+	} : null;
+}, u = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, d = (e, t) => {
+	if (e === "*") return !0;
+	if (e.startsWith("^")) {
+		let n = l(e.slice(1));
+		return !n || t.major !== n.major ? !1 : u(t, n) >= 0;
+	}
+	if (e.startsWith("~")) {
+		let n = l(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : u(t, n) >= 0;
+	}
+	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
+	if (n) {
+		let e = n[1], r = l(n[2]);
+		if (!r) return !1;
+		let i = u(t, r);
+		if (e === ">=") return i >= 0;
+		if (e === "<=") return i <= 0;
+		if (e === ">") return i > 0;
+		if (e === "<") return i < 0;
+	}
+	let r = l(e);
+	return r ? u(t, r) === 0 : !1;
+}, f = (e) => {
+	let t = e.flatMap((e) => e.bindReplayAuthority === void 0 ? [] : [e.bindReplayAuthority]);
+	if (t.length !== 0) {
+		if (t.some((e) => typeof e != "function")) throw Error("Invalid replay authority binding");
+		return (e) => {
+			for (let n of t) {
+				let t = n(e);
+				if (t !== void 0) throw t instanceof Promise && t.catch(() => void 0), Error("Replay authority bindings must complete synchronously");
+			}
+		};
+	}
+};
+//#endregion
+export { n as API_WORKLOADS, c as checkFrameworkCompat, f as composeReplayAuthorityBindings, o as composeRpcInterceptors, r as definePlugin, i as definePluginRoute, s as definePluginService, a as pluginInstanceName };

package/dist/pluginAccountMerge.js

@@ -0,0 +1,88 @@
+import { Effect as e, Schema as t } from "effect";
+//#region src/pluginAccountMerge.ts
+var n = class extends t.TaggedError()("PluginAccountMergeFailure", {
+	code: t.Literals([
+		"invalid_request",
+		"coverage_missing",
+		"hook_failed"
+	]),
+	requestId: t.String,
+	plugin: t.NullOr(t.String),
+	returned: t.Array(t.String),
+	missing: t.Array(t.String)
+}) {}, r = (e) => typeof e == "object" && e && "tableName" in e && typeof e.tableName == "string" ? e.tableName : void 0, i = (t) => {
+	let i = /* @__PURE__ */ new Set(), a = t.map((e) => {
+		if (i.has(e.name)) throw Error("Duplicate account merge plugin instance: " + e.name);
+		i.add(e.name);
+		let t = e.subjectMerge;
+		if ((t !== void 0 || e.onMergeAccounts !== void 0) && (t === void 0 || e.onMergeAccounts === void 0 || t.kinds.length === 0 || t.kinds.some((e) => e !== "user" && e !== "guest") || new Set(t.kinds).size !== t.kinds.length || t.tables.some((e) => typeof e != "string" || !e.trim()) || new Set(t.tables).size !== t.tables.length)) throw Error("Account merge requires a valid declaration and hook: " + e.name);
+		return {
+			name: e.name,
+			tables: (e.extendSchema?.tables ?? []).map(r),
+			declaration: t === void 0 ? void 0 : {
+				tables: [...t.tables],
+				kinds: [...t.kinds]
+			},
+			hook: e.onMergeAccounts
+		};
+	}), o = (e) => {
+		let t = [], n = [];
+		for (let r of a) if (r.declaration?.kinds.includes(e) && r.hook) {
+			t.push({
+				name: r.name,
+				tables: Object.freeze([...r.declaration.tables])
+			});
+			for (let e of r.tables) (e === void 0 || !r.declaration.tables.includes(e)) && n.push(r.name);
+		} else (r.tables.length > 0 || r.declaration !== void 0) && n.push(r.name);
+		return {
+			participants: Object.freeze(t),
+			missing: Object.freeze([...new Set(n)])
+		};
+	};
+	return {
+		coverage: o,
+		mergeInTransaction: (t) => e.gen(function* () {
+			if (![
+				t.requestId,
+				t.tenantId,
+				t.sourceId,
+				t.targetId
+			].every((e) => typeof e == "string" && e.trim().length > 0 && e.length <= 256) || t.sourceKind !== "user" && t.sourceKind !== "guest" || t.sourceId === t.targetId || t.store === void 0) return yield* e.fail(new n({
+				code: "invalid_request",
+				requestId: typeof t.requestId == "string" ? t.requestId.slice(0, 256) : "",
+				plugin: null,
+				returned: [],
+				missing: []
+			}));
+			let r = o(t.sourceKind);
+			if (r.missing.length > 0) return yield* e.fail(new n({
+				code: "coverage_missing",
+				requestId: t.requestId,
+				plugin: null,
+				returned: [],
+				missing: [...r.missing]
+			}));
+			let i = [], s = Object.freeze({
+				requestId: t.requestId,
+				tenantId: t.tenantId,
+				sourceId: t.sourceId,
+				sourceKind: t.sourceKind,
+				targetId: t.targetId,
+				store: t.store
+			});
+			for (let t of r.participants) {
+				let r = a.find((e) => e.name === t.name);
+				yield* e.suspend(() => r.hook(s)).pipe(e.catchCause(() => e.fail(new n({
+					code: "hook_failed",
+					requestId: s.requestId,
+					plugin: t.name,
+					returned: [...i],
+					missing: []
+				})))), i.push(t.name);
+			}
+			return Object.freeze(i);
+		})
+	};
+};
+//#endregion
+export { n as PluginAccountMergeFailure, i as createPluginAccountMergeRegistry };

package/dist/pluginNaming.js

@@ -0,0 +1,32 @@
+//#region src/pluginNaming.ts
+var e = (e) => {
+	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
+	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
+}, t = (e) => {
+	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
+	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
+}, n = Symbol.for("@voltro/protocol/pluginAliases"), r = () => {
+	let e = globalThis, t = e[n];
+	if (t instanceof Map) return t;
+	let r = /* @__PURE__ */ new Map();
+	return e[n] = r, r;
+}, i = (e) => {
+	let t = r();
+	for (let [n, r] of Object.entries(e)) {
+		if (r === "") continue;
+		let e = t.get(n);
+		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
+	}
+}, a = () => {
+	r().clear();
+}, o = (t, n) => {
+	let i = r().get(t);
+	if (i === void 0 || i.size === 0) return `${e(t)}.${n}`;
+	if (i.size === 1) for (let e of i) return `${e}.${n}`;
+	let a, o = 0;
+	for (let e of i) e.includes("#") || (a = e, o++);
+	if (o === 1) return `${a}.${n}`;
+	throw Error(`[voltro] ${t} is installed more than once (${[...i].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...i].sort()[0]}.${n}').`);
+};
+//#endregion
+export { e as pluginAlias, t as pluginSlug, o as pluginTag, i as registerPluginAliases, a as resetPluginAliases };

package/dist/pluginPrivacy.js

@@ -0,0 +1,166 @@
+import { Effect as e, Schema as t } from "effect";
+//#region src/pluginPrivacy.ts
+var n = t.Literals([
+	"prepare",
+	"data",
+	"identity",
+	"finalize"
+]), r = class extends t.TaggedError()("PluginPrivacyFailure", {
+	code: t.Literals([
+		"invalid_request",
+		"coverage_missing",
+		"hook_failed",
+		"unavailable"
+	]),
+	operation: t.Literals(["export", "erase"]),
+	requestId: t.String,
+	plugin: t.NullOr(t.String),
+	completed: t.Array(t.String),
+	missing: t.Array(t.String)
+}) {}, i = (e) => typeof e == "object" && e && "tableName" in e && typeof e.tableName == "string" ? e.tableName : void 0, a = (e) => {
+	let t = /* @__PURE__ */ new Set(), n = (e) => {
+		if (e === null || typeof e == "string" || typeof e == "boolean" || typeof e == "number" && Number.isFinite(e)) return;
+		if (typeof e != "object" || !e || t.has(e)) throw Error("Invalid privacy JSON");
+		let r = Array.isArray(e), i = Object.getPrototypeOf(e);
+		if (r && i !== Array.prototype || !r && i !== Object.prototype && i !== null || Object.getOwnPropertySymbols(e).length !== 0) throw Error("Invalid privacy JSON");
+		t.add(e);
+		let a = Object.getOwnPropertyDescriptors(e);
+		if (r) {
+			let e = a.length?.value;
+			if (typeof e != "number" || Object.keys(a).length !== e + 1) throw Error("Invalid privacy JSON");
+			for (let t = 0; t < e; t++) {
+				let e = a[t];
+				if (!e || !e.enumerable || !("value" in e)) throw Error("Invalid privacy JSON");
+				n(e.value);
+			}
+		} else for (let e of Object.values(a)) {
+			if (!e.enumerable || !("value" in e)) throw Error("Invalid privacy JSON");
+			n(e.value);
+		}
+		t.delete(e);
+	};
+	return n(e), JSON.parse(JSON.stringify(e));
+}, o = (o) => {
+	let s = /* @__PURE__ */ new Set(), c = o.map((e) => {
+		if (s.has(e.name)) throw Error(`Duplicate privacy plugin instance: ${e.name}`);
+		s.add(e.name);
+		let r = e.subjectPrivacy, a = [...e.extendSchema?.tables ?? []].map(i);
+		if (r !== void 0 || e.onErase !== void 0 || e.onExport !== void 0) {
+			if (r === void 0 || e.onErase === void 0 || e.onExport === void 0) throw Error(`Subject privacy requires a declaration and both hooks: ${e.name}`);
+			if (r.kinds.length === 0 || r.kinds.some((e) => e !== "user" && e !== "guest") || new Set(r.kinds).size !== r.kinds.length || r.tables.some((e) => typeof e != "string" || !e.trim()) || new Set(r.tables).size !== r.tables.length || r.erasePhase !== void 0 && !t.is(n)(r.erasePhase)) throw Error(`Invalid subject privacy declaration: ${e.name}`);
+		}
+		return {
+			name: e.name,
+			tables: a,
+			declaration: r === void 0 ? void 0 : {
+				tables: [...r.tables],
+				kinds: [...r.kinds],
+				erasePhase: r.erasePhase ?? "data"
+			},
+			onErase: e.onErase,
+			onExport: e.onExport
+		};
+	});
+	for (let e of ["user", "guest"]) if (c.filter((t) => t.declaration?.erasePhase === "finalize" && t.declaration.kinds.includes(e)).length > 1) throw Error(`Subject privacy allows one completion owner per kind: ${e}`);
+	let l = (e) => {
+		let t = [], n = [];
+		for (let r of c) {
+			let i = r.declaration;
+			(i === void 0 || i.kinds.includes(e)) && (i !== void 0 && t.push({
+				name: r.name,
+				tables: [...i.tables],
+				erasePhase: i.erasePhase
+			}), r.tables.some((e) => e === void 0 || !i?.tables.includes(e)) && n.push(r.name));
+		}
+		return {
+			participants: t,
+			missing: n
+		};
+	}, u = (t, n) => e.gen(function* () {
+		let i = typeof t?.requestId == "string" ? t.requestId : "", a = t?.target;
+		if (!i.trim() || typeof a?.subjectId != "string" || !a.subjectId.trim() || !(a.tenantId === null || typeof a.tenantId == "string" && a.tenantId.trim()) || a.kind !== "user" && a.kind !== "guest") return yield* e.fail(new r({
+			code: "invalid_request",
+			operation: n,
+			requestId: i,
+			plugin: null,
+			completed: [],
+			missing: []
+		}));
+		let o = l(a.kind);
+		return o.missing.length > 0 || o.participants.length === 0 ? yield* e.fail(new r({
+			code: "coverage_missing",
+			operation: n,
+			requestId: i,
+			plugin: null,
+			completed: [],
+			missing: o.missing
+		})) : {
+			requestId: i,
+			target: Object.freeze({
+				subjectId: a.subjectId,
+				tenantId: a.tenantId,
+				kind: a.kind
+			}),
+			context: Object.freeze({
+				requestId: i,
+				tenantId: a.tenantId,
+				kind: a.kind
+			}),
+			participants: o.participants
+		};
+	});
+	return {
+		coverage: l,
+		exportSubject: (t) => e.gen(function* () {
+			let n = yield* u(t, "export"), i = [];
+			for (let t of n.participants) {
+				let o = c.find((e) => e.name === t.name).onExport, s = yield* e.suspend(() => o(n.target.subjectId, n.context)).pipe(e.map(a), e.catchCause(() => e.fail(new r({
+					code: "hook_failed",
+					operation: "export",
+					requestId: n.requestId,
+					plugin: t.name,
+					completed: i.map((e) => e.name),
+					missing: []
+				}))));
+				i.push({
+					name: t.name,
+					data: s
+				});
+			}
+			return {
+				requestId: n.requestId,
+				target: n.target,
+				plugins: i
+			};
+		}),
+		eraseSubject: (t) => e.gen(function* () {
+			let n = yield* u(t, "erase"), i = [], a = [
+				...n.participants.filter((e) => e.erasePhase === "prepare"),
+				...n.participants.filter((e) => e.erasePhase === "data"),
+				...n.participants.filter((e) => e.erasePhase === "identity"),
+				...n.participants.filter((e) => e.erasePhase === "finalize")
+			];
+			for (let t of a) {
+				let a = c.find((e) => e.name === t.name).onErase, o = t.erasePhase === "finalize" ? Object.freeze({
+					...n.context,
+					completed: Object.freeze([...i])
+				}) : n.context;
+				yield* e.suspend(() => a(n.target.subjectId, o)).pipe(e.catchCause(() => e.fail(new r({
+					code: "hook_failed",
+					operation: "erase",
+					requestId: n.requestId,
+					plugin: t.name,
+					completed: [...i],
+					missing: []
+				})))), i.push(t.name);
+			}
+			return {
+				requestId: n.requestId,
+				target: n.target,
+				completed: i
+			};
+		})
+	};
+};
+//#endregion
+export { n as PluginPrivacyErasePhaseSchema, r as PluginPrivacyFailure, o as createPluginPrivacyRegistry };