npm - @yielded/auth-persistence - Versions diffs - 0.1.0-beta.10 → 0.1.0-beta.11 - Mend

@yielded/auth-persistence 0.1.0-beta.10 → 0.1.0-beta.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (65) hide show

package/README.md +2 -7
package/dist/index.d.mts +1 -2
package/dist/index.mjs +1 -2
package/dist/internal/configuration.d.mts +1 -1
package/dist/internal/configuration.mjs.map +1 -1
package/dist/internal/email-kernel.d.mts +1 -1
package/dist/internal/email-kernel.mjs.map +1 -1
package/dist/internal/oauth-server.d.mts +1 -1
package/dist/internal/oauth-server.mjs +1 -1
package/dist/internal/oauth-server.mjs.map +1 -1
package/dist/internal/passkey/state.mjs +3 -2
package/dist/internal/passkey/state.mjs.map +1 -1
package/dist/internal/passkey/target.d.mts +1 -1
package/dist/internal/passkey/target.mjs.map +1 -1
package/dist/internal/passkey/write-state.mjs +3 -2
package/dist/internal/passkey/write-state.mjs.map +1 -1
package/dist/internal/passkey/write-target.mjs.map +1 -1
package/dist/internal/passkey-kernel.d.mts +5 -5
package/dist/internal/passkeys.mjs +1 -1
package/dist/internal/passkeys.mjs.map +1 -1
package/dist/internal/password-kernel.d.mts +1 -1
package/dist/internal/password-kernel.mjs.map +1 -1
package/dist/internal/persistence.d.mts +1 -1
package/dist/internal/persistence.mjs +1 -1
package/dist/internal/persistence.mjs.map +1 -1
package/dist/internal/proof-kernel.d.mts +1 -1
package/dist/internal/proof-kernel.mjs.map +1 -1
package/dist/internal/query-operations.d.mts +1 -1
package/dist/internal/session-kernel.d.mts +1 -1
package/dist/internal/session-kernel.mjs.map +1 -1
package/dist/internal/sql-persistence.mjs +1 -1
package/dist/internal/sql-persistence.mjs.map +1 -1
package/dist/internal/sql-query.mjs.map +1 -1
package/dist/internal/standalone.d.mts +1 -1
package/dist/internal/standalone.mjs.map +1 -1
package/dist/internal/storage-validation.mjs.map +1 -1
package/dist/internal/transaction-execution-kernel.d.mts +3 -3
package/dist/internal/transaction-execution-kernel.mjs.map +1 -1
package/dist/internal/transaction-kernel.d.mts +3 -3
package/dist/internal/transaction-kernel.mjs.map +1 -1
package/package.json +1 -1
package/src/index.ts +0 -1
package/src/internal/configuration.ts +1 -1
package/src/internal/email-kernel.ts +1 -1
package/src/internal/oauth-server.ts +1 -1
package/src/internal/passkey/state.ts +3 -2
package/src/internal/passkey/target.ts +1 -1
package/src/internal/passkey/write-state.ts +3 -2
package/src/internal/passkey/write-target.ts +1 -1
package/src/internal/passkeys.ts +1 -1
package/src/internal/password-kernel.ts +1 -1
package/src/internal/persistence.ts +1 -1
package/src/internal/proof-kernel.ts +1 -1
package/src/internal/query-operations.ts +1 -1
package/src/internal/session-kernel.ts +1 -1
package/src/internal/sql-persistence.ts +1 -1
package/src/internal/sql-query.ts +2 -2
package/src/internal/standalone.ts +1 -1
package/src/internal/storage-validation.ts +1 -1
package/src/internal/transaction-execution-kernel.ts +3 -3
package/src/internal/transaction-kernel.ts +3 -3
package/dist/internal/oauth-app.d.mts +0 -11
package/dist/internal/oauth-app.mjs +0 -57
package/dist/internal/oauth-app.mjs.map +0 -1
package/src/internal/oauth-app.ts +0 -82

package/dist/internal/passkey/state.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"state.mjs","names":[],"sources":["../../../src/internal/passkey/state.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\n// oxlint-disable-next-line import/extensions -- Noble exposes its explicit .js subpaths.\nimport { sha256 } from \"@noble/hashes/sha2.js\";\n// oxlint-disable-next-line import/extensions -- Noble exposes its explicit .js subpaths.\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport {\n PasskeyConfigurationError,\n PasskeyUnavailable,\n PasskeyCeremony,\n PasskeyCredential,\n PasskeyModuleId,\n PasskeyProfile,\n PasskeyRevision,\n PasskeyMethodPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport { Context, Effect, Encoding, Schema } from \"effect\";\n\nimport {\n requiredPasskeyCredentialConstraints,\n requiredPasskeyPersistenceConstraints,\n} from \"../models/passkey-model\";\nimport { requiredPasskeyRegistrationCeremonyConstraints } from \"../models/passkey-registration-ceremony-model\";\nimport type { SqlExpression as SQL, QueryOperations } from \"../query-operations\";\nimport type { TransactionOwner, makeTransactionKernel } from \"../transaction-kernel\";\n\nexport type PasskeyOwner = TransactionOwner<PasskeyUnavailable>;\n\nexport class CurrentPasskeyTransaction extends Context.Service<\n CurrentPasskeyTransaction,\n PasskeyOwner\n>()(\"effect-auth/drizzle/CurrentPasskeyTransaction\") {}\n\nexport const makePasskeyStateKernel = (\n operations: QueryOperations,\n transactions: Pick<ReturnType<typeof makeTransactionKernel>, \"both\" \| \"makeTransactionRows\">,\n) => {\n const { getTableColumns, sql } = operations;\n const { both, makeTransactionRows } = transactions;\n\n const unavailable = () => PasskeyUnavailable.make({});\n\n const invariant: (value: unknown) => asserts value = (value) => {\n if (!value) throw unavailable();\n };\n\n const { col, equal, copiedRow, matchesNativeRow } = makeTransactionRows(unavailable);\n\n const nonce = () => Encoding.encodeBase64Url(randomBytes(32));\n\n const encoder = new TextEncoder();\n\n const decoder = new TextDecoder(\"utf-8\", { fatal: true });\n\n /* RP tuples and admission scopes have no collation-dependent string identity. /\n const key = (kind: string, fields: ReadonlyArray<string>) => {\n const values = [\"effect-auth/passkey/\" + kind + \"/v1\", ...fields].map((field) => {\n const bytes = encoder.encode(field);\n\n invariant(decoder.decode(bytes) === field);\n\n return bytes;\n });\n\n const packed = new Uint8Array(values.reduce((size, bytes) => size + 4 + bytes.length, 0));\n const view = new DataView(packed.buffer);\n let offset = 0;\n\n for (const bytes of values) {\n view.setUint32(offset, bytes.length, false);\n packed.set(bytes, offset + 4);\n offset += 4 + bytes.length;\n }\n\n return (\n \"v1:\" + Array.from(sha256(packed), (value) => value.toString(16).padStart(2, \"0\")).join(\"\")\n );\n };\n\n const credentialKey = (rpId: string, id: string) => key(\"credential\", [rpId, id]);\n\n const handleKey = (rpId: string, handle: string) => key(\"handle\", [rpId, handle]);\n\n const subjectScope = (subjectId: string) => key(\"subject\", [subjectId]);\n\n const targetScope = (ceremony: PasskeyCeremony) => {\n const context = ceremony.context;\n\n if (!(\"target\" in context)) return null;\n const target = context.target;\n\n return key(\"target\", [\n target.moduleId,\n target.kind,\n target.flowId,\n target.commandId,\n target.bindingDigest,\n target.revision.subjectId,\n ]);\n };\n\n /* Private storage is decoded Type data, never a consumer wire transform. /\n const storage = <S extends Schema.Codec<unknown, unknown, never, never>>(\n schema: S,\n maximumBytes: number,\n ) => {\n const codec = Schema.fromJsonString(Schema.toCodecJson(Schema.toType(schema)));\n\n const encode = (value: S[\"Type\"]) => {\n const text = \"v1:\" + Schema.encodeSync(codec)(snapshotPasskeySync(schema, value));\n\n invariant(encoder.encode(text).length <= maximumBytes);\n\n return text;\n };\n\n return {\n encode,\n decode: (text: unknown): S[\"Type\"] => {\n invariant(typeof text === \"string\" && text.startsWith(\"v1:\"));\n invariant(encoder.encode(text).length <= maximumBytes);\n const value = snapshotPasskeySync(schema, Schema.decodeSync(codec)(text.slice(3)));\n\n invariant(encode(value) === text);\n\n return value;\n },\n };\n };\n\n // Legal 32 x 16 x 2048 origins require more than one MiB before JSON escaping.\n const policyStorage = storage(PasskeyMethodPolicy, 8 1024 * 1024);\n\n const ceremonyStorage = storage(PasskeyCeremony, 512 * 1024);\n\n const credentialStorage = storage(PasskeyCredential, 512 * 1024);\n\n const profileStorage = storage(PasskeyProfile, 256 * 1024);\n\n const revisionStorage = storage(PasskeyRevision, 256 * 1024);\n\n const sameCredential = (left: PasskeyCredential, right: PasskeyCredential) => {\n const semantic = (value: PasskeyCredential) => ({\n ...value,\n counter: 0,\n maximumCounter: 0,\n backupState: false,\n revision: { ...value.revision, credentials: [] },\n });\n\n return credentialStorage.encode(semantic(left)) === credentialStorage.encode(semantic(right));\n };\n\n const sameRevision = (left: typeof PasskeyRevision.Type, right: typeof PasskeyRevision.Type) => {\n const pairs = new Map(left.credentials.map((item) => [item.credentialId, item.revision]));\n\n return (\n left.subjectId === right.subjectId &&\n left.securityRevision === right.securityRevision &&\n pairs.size === left.credentials.length &&\n new Set(right.credentials.map((item) => item.credentialId)).size ===\n right.credentials.length &&\n pairs.size === right.credentials.length &&\n right.credentials.every((item) => pairs.get(item.credentialId) === item.revision)\n );\n };\n\n const semanticCredentialColumns = (mapping: any): string[] =>\n [\n \"credentialId\",\n \"subjectId\",\n \"rpId\",\n \"protocolCredentialId\",\n \"credentialKey\",\n \"handleKey\",\n \"userHandle\",\n \"publicKey\",\n \"algorithm\",\n \"profile\",\n \"credentialRevision\",\n \"status\",\n \"primarySignIn\",\n \"enrollmentUserVerified\",\n \"backupEligible\",\n ].map((name) => mapping[name]);\n\n const mappedColumns = (mapping: any): string[] =>\n Object.entries(mapping)\n .filter(\n ([name, value]) =>\n ![\"table\", \"reservedState\", \"pendingState\", \"acceptedState\", \"rejectedState\"].includes(\n name,\n ) && typeof value === \"string\",\n )\n .map(([, value]) => value as string);\n\n const observeSemantic = (mapping: any, where: SQL, row: any) =>\n Effect.map(CurrentPasskeyTransaction, (owner) => {\n owner.observations.push({\n table: mapping.table,\n where,\n rows: [\n Object.fromEntries(\n semanticCredentialColumns(mapping).map((column) => [column, row[column]]),\n ),\n ],\n });\n });\n\n /** Capture descriptor graphs, preserving native SQL expressions and table objects. /\n const captureMapping = <A>(input: A): A => {\n const seen = new Map<object, unknown>();\n\n const copy = (value: unknown): unknown => {\n if (value === null \|\| typeof value !== \"object\" \|\| Effect.isEffect(value)) return value;\n if (!Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype) return value;\n const prior = seen.get(value);\n\n if (prior !== undefined) return prior;\n const result: any = Array.isArray(value) ? [] : {};\n\n seen.set(value, result);\n for (const [name, child] of Object.entries(value)) result[name] = copy(child);\n\n return Object.freeze(result);\n };\n\n return copy(input) as A;\n };\n\n const constraints = (actual: any, expected: any) => {\n for (const [name, columns] of Object.entries(expected))\n // oxlint-disable-next-line no-restricted-properties -- exact configured constraint descriptor fingerprint.\n invariant(JSON.stringify(actual?.[name]) === JSON.stringify(columns));\n };\n\n const descriptor = (value: any) => {\n const columns = getTableColumns(value.table);\n\n for (const name of mappedColumns(value)) invariant(columns[name] !== undefined);\n };\n\n const validateMapping = (\n mapping: any,\n kind: \"read\" \| \"context\" \| \"assertion\" \| \"registration\",\n ) => {\n try {\n const read = kind === \"read\" ? mapping : kind !== \"registration\" ? mapping.read : undefined;\n\n if (read !== undefined) {\n for (const name of [\n \"subject\",\n \"credential\",\n \"authority\",\n \"credentialOwnership\",\n \"handleOwnership\",\n ])\n descriptor(read[name]);\n constraints(read.constraints, requiredPasskeyCredentialConstraints);\n }\n if (kind === \"read\") return;\n // oxlint-disable-next-line no-restricted-properties -- validate the untyped captured configuration boundary.\n Schema.decodeUnknownSync(PasskeyModuleId)(mapping.moduleId);\n descriptor(mapping.module);\n invariant(mapping.module.policyColumns.length > 0);\n for (const name of mapping.module.policyColumns) col(mapping.module.table, name);\n const scopes = new Set<string>();\n\n for (const guard of mapping.module.guards ?? []) {\n invariant(\n typeof guard.scope === \"string\" && guard.scope.length > 0 && guard.scope.length <= 256,\n );\n invariant(!scopes.has(guard.scope) && guard.columns.length > 0);\n scopes.add(guard.scope);\n for (const name of guard.columns) col(guard.table, name);\n }\n invariant(scopes.size <= 32);\n if (kind === \"context\") return;\n invariant(\n typeof mapping.authorityScope === \"string\" &&\n mapping.authorityScope.length > 0 &&\n mapping.authorityScope.length <= 256,\n );\n for (const name of [\"flow\", \"admission\", \"charge\"]) descriptor(mapping[name]);\n if (kind === \"registration\") {\n descriptor(mapping.intent);\n descriptor(mapping.handle);\n } else col(mapping.read.credential.table, mapping.telemetry.lastUsedAt);\n constraints(\n mapping.constraints,\n kind === \"registration\"\n ? requiredPasskeyRegistrationCeremonyConstraints\n : requiredPasskeyPersistenceConstraints,\n );\n const states = Object.values(mapping.flow.states);\n\n // oxlint-disable-next-line no-restricted-properties -- configured native state identity fingerprints.\n invariant(\n // oxlint-disable-next-line no-restricted-properties -- configured native state identity fingerprints.\n states.length === 7 && new Set(states.map((value) => JSON.stringify(value))).size === 7,\n );\n for (const value of [0, 1, 123456789, 8640000000000])\n invariant(mapping.clock.decodeInstant(mapping.clock.encodeInstant(value)) === value);\n } catch {\n throw PasskeyConfigurationError.make({});\n }\n };\n\n const assertNow = (condition: SQL) =>\n Effect.flatMap(CurrentPasskeyTransaction, (owner) =>\n Effect.gen(function () {\n invariant(yield* owner.check(condition));\n owner.postconditions.push(condition);\n }),\n );\n\n const existsExact = (table: any, values: any, condition?: SQL) =>\n Effect.map(\n CurrentPasskeyTransaction,\n (owner) =>\n sql`exists(select 1 from ${table} where ${both(owner.exact(table, values), condition)})`,\n );\n\n return {\n unavailable,\n invariant,\n col,\n equal,\n copiedRow,\n matchesNativeRow,\n nonce,\n key,\n credentialKey,\n handleKey,\n subjectScope,\n targetScope,\n policyStorage,\n ceremonyStorage,\n credentialStorage,\n profileStorage,\n revisionStorage,\n sameCredential,\n sameRevision,\n semanticCredentialColumns,\n mappedColumns,\n observeSemantic,\n captureMapping,\n validateMapping,\n assertNow,\n existsExact,\n };\n};\n"],"mappings":";;;;;;;AA6BA,IAAa,4BAAb,cAA+C,QAAQ,QAGrD,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC;AAEtD,MAAa,0BACX,YACA,iBACG;CACH,MAAM,EAAE,iBAAiB,QAAQ;CACjC,MAAM,EAAE,MAAM,wBAAwB;CAEtC,MAAM,oBAAoB,mBAAmB,KAAK,CAAC,CAAC;CAEpD,MAAM,aAAgD,UAAU;EAC9D,IAAI,CAAC,OAAO,MAAM,YAAY;CAChC;CAEA,MAAM,EAAE,KAAK,OAAO,WAAW,qBAAqB,oBAAoB,WAAW;CAEnF,MAAM,cAAc,SAAS,gBAAgB,YAAY,EAAE,CAAC;CAE5D,MAAM,UAAU,IAAI,YAAY;CAEhC,MAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;;CAGxD,MAAM,OAAO,MAAc,WAAkC;EAC3D,MAAM,SAAS,CAAC,yBAAyB,OAAO,OAAO,GAAG,MAAM,CAAC,CAAC,KAAK,UAAU;GAC/E,MAAM,QAAQ,QAAQ,OAAO,KAAK;GAElC,UAAU,QAAQ,OAAO,KAAK,MAAM,KAAK;GAEzC,OAAO;EACT,CAAC;EAED,MAAM,SAAS,IAAI,WAAW,OAAO,QAAQ,MAAM,UAAU,OAAO,IAAI,MAAM,QAAQ,CAAC,CAAC;EACxF,MAAM,OAAO,IAAI,SAAS,OAAO,MAAM;EACvC,IAAI,SAAS;EAEb,KAAK,MAAM,SAAS,QAAQ;GAC1B,KAAK,UAAU,QAAQ,MAAM,QAAQ,KAAK;GAC1C,OAAO,IAAI,OAAO,SAAS,CAAC;GAC5B,UAAU,IAAI,MAAM;EACtB;EAEA,OACE,QAAQ,MAAM,KAAK,OAAO,MAAM,IAAI,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;CAE9F;CAEA,MAAM,iBAAiB,MAAc,OAAe,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;CAEhF,MAAM,aAAa,MAAc,WAAmB,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC;CAEhF,MAAM,gBAAgB,cAAsB,IAAI,WAAW,CAAC,SAAS,CAAC;CAEtE,MAAM,eAAe,aAA8B;EACjD,MAAM,UAAU,SAAS;EAEzB,IAAI,EAAE,YAAY,UAAU,OAAO;EACnC,MAAM,SAAS,QAAQ;EAEvB,OAAO,IAAI,UAAU;GACnB,OAAO;GACP,OAAO;GACP,OAAO;GACP,OAAO;GACP,OAAO;GACP,OAAO,SAAS;EAClB,CAAC;CACH;;CAGA,MAAM,WACJ,QACA,iBACG;EACH,MAAM,QAAQ,OAAO,eAAe,OAAO,YAAY,OAAO,OAAO,MAAM,CAAC,CAAC;EAE7E,MAAM,UAAU,UAAqB;GACnC,MAAM,OAAO,QAAQ,OAAO,WAAW,KAAK,CAAC,CAAC,oBAAoB,QAAQ,KAAK,CAAC;GAEhF,UAAU,QAAQ,OAAO,IAAI,CAAC,CAAC,UAAU,YAAY;GAErD,OAAO;EACT;EAEA,OAAO;GACL;GACA,SAAS,SAA6B;IACpC,UAAU,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,CAAC;IAC5D,UAAU,QAAQ,OAAO,IAAI,CAAC,CAAC,UAAU,YAAY;IACrD,MAAM,QAAQ,oBAAoB,QAAQ,OAAO,WAAW,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;IAEjF,UAAU,OAAO,KAAK,MAAM,IAAI;IAEhC,OAAO;GACT;EACF;CACF;CAGA,MAAM,gBAAgB,QAAQ,qBAAqB,OAAe;CAElE,MAAM,kBAAkB,QAAQ,iBAAiB,MAAU;CAE3D,MAAM,oBAAoB,QAAQ,mBAAmB,MAAU;CAE/D,MAAM,iBAAiB,QAAQ,gBAAgB,MAAU;CAEzD,MAAM,kBAAkB,QAAQ,iBAAiB,MAAU;CAE3D,MAAM,kBAAkB,MAAyB,UAA6B;EAC5E,MAAM,YAAY,WAA8B;GAC9C,GAAG;GACH,SAAS;GACT,gBAAgB;GAChB,aAAa;GACb,UAAU;IAAE,GAAG,MAAM;IAAU,aAAa,CAAC;GAAE;EACjD;EAEA,OAAO,kBAAkB,OAAO,SAAS,IAAI,CAAC,MAAM,kBAAkB,OAAO,SAAS,KAAK,CAAC;CAC9F;CAEA,MAAM,gBAAgB,MAAmC,UAAuC;EAC9F,MAAM,QAAQ,IAAI,IAAI,KAAK,YAAY,KAAK,SAAS,CAAC,KAAK,cAAc,KAAK,QAAQ,CAAC,CAAC;EAExF,OACE,KAAK,cAAc,MAAM,aACzB,KAAK,qBAAqB,MAAM,oBAChC,MAAM,SAAS,KAAK,YAAY,UAChC,IAAI,IAAI,MAAM,YAAY,KAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAC1D,MAAM,YAAY,UACpB,MAAM,SAAS,MAAM,YAAY,UACjC,MAAM,YAAY,OAAO,SAAS,MAAM,IAAI,KAAK,YAAY,MAAM,KAAK,QAAQ;CAEpF;CAEA,MAAM,6BAA6B,YACjC;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,SAAS,QAAQ,KAAK;CAE/B,MAAM,iBAAiB,YACrB,OAAO,QAAQ,OAAO,CAAC,CACpB,QACE,CAAC,MAAM,WACN,CAAC;EAAC;EAAS;EAAiB;EAAgB;EAAiB;CAAe,CAAC,CAAC,SAC5E,IACF,KAAK,OAAO,UAAU,QAC1B,CAAC,CACA,KAAK,GAAG,WAAW,KAAe;CAEvC,MAAM,mBAAmB,SAAc,OAAY,QACjD,OAAO,IAAI,4BAA4B,UAAU;EAC/C,MAAM,aAAa,KAAK;GACtB,OAAO,QAAQ;GACf;GACA,MAAM,CACJ,OAAO,YACL,0BAA0B,OAAO,CAAC,CAAC,KAAK,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,CAC1E,CACF;EACF,CAAC;CACH,CAAC;;CAGH,MAAM,kBAAqB,UAAgB;EACzC,MAAM,uBAAO,IAAI,IAAqB;EAEtC,MAAM,QAAQ,UAA4B;GACxC,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,GAAG,OAAO;GAClF,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,OAAO,eAAe,KAAK,MAAM,OAAO,WAAW,OAAO;GACvF,MAAM,QAAQ,KAAK,IAAI,KAAK;GAE5B,IAAI,UAAU,KAAA,GAAW,OAAO;GAChC,MAAM,SAAc,MAAM,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC;GAEjD,KAAK,IAAI,OAAO,MAAM;GACtB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,GAAG,OAAO,QAAQ,KAAK,KAAK;GAE5E,OAAO,OAAO,OAAO,MAAM;EAC7B;EAEA,OAAO,KAAK,KAAK;CACnB;CAEA,MAAM,eAAe,QAAa,aAAkB;EAClD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,QAAQ,GAEnD,UAAU,KAAK,UAAU,SAAS,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;CACxE;CAEA,MAAM,cAAc,UAAe;EACjC,MAAM,UAAU,gBAAgB,MAAM,KAAK;EAE3C,KAAK,MAAM,QAAQ,cAAc,KAAK,GAAG,UAAU,QAAQ,UAAU,KAAA,CAAS;CAChF;CAEA,MAAM,mBACJ,SACA,SACG;EACH,IAAI;GACF,MAAM,OAAO,SAAS,SAAS,UAAU,SAAS,iBAAiB,QAAQ,OAAO,KAAA;GAElF,IAAI,SAAS,KAAA,GAAW;IACtB,KAAK,MAAM,QAAQ;KACjB;KACA;KACA;KACA;KACA;IACF,GACE,WAAW,KAAK,KAAK;IACvB,YAAY,KAAK,aAAa,oCAAoC;GACpE;GACA,IAAI,SAAS,QAAQ;GAErB,OAAO,kBAAkB,eAAe,CAAC,CAAC,QAAQ,QAAQ;GAC1D,WAAW,QAAQ,MAAM;GACzB,UAAU,QAAQ,OAAO,cAAc,SAAS,CAAC;GACjD,KAAK,MAAM,QAAQ,QAAQ,OAAO,eAAe,IAAI,QAAQ,OAAO,OAAO,IAAI;GAC/E,MAAM,yBAAS,IAAI,IAAY;GAE/B,KAAK,MAAM,SAAS,QAAQ,OAAO,UAAU,CAAC,GAAG;IAC/C,UACE,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,SAAS,KAAK,MAAM,MAAM,UAAU,GACrF;IACA,UAAU,CAAC,OAAO,IAAI,MAAM,KAAK,KAAK,MAAM,QAAQ,SAAS,CAAC;IAC9D,OAAO,IAAI,MAAM,KAAK;IACtB,KAAK,MAAM,QAAQ,MAAM,SAAS,IAAI,MAAM,OAAO,IAAI;GACzD;GACA,UAAU,OAAO,QAAQ,EAAE;GAC3B,IAAI,SAAS,WAAW;GACxB,UACE,OAAO,QAAQ,mBAAmB,YAChC,QAAQ,eAAe,SAAS,KAChC,QAAQ,eAAe,UAAU,GACrC;GACA,KAAK,MAAM,QAAQ;IAAC;IAAQ;IAAa;GAAQ,GAAG,WAAW,QAAQ,KAAK;GAC5E,IAAI,SAAS,gBAAgB;IAC3B,WAAW,QAAQ,MAAM;IACzB,WAAW,QAAQ,MAAM;GAC3B,OAAO,IAAI,QAAQ,KAAK,WAAW,OAAO,QAAQ,UAAU,UAAU;GACtE,YACE,QAAQ,aACR,SAAS,iBACL,iDACA,qCACN;GACA,MAAM,SAAS,OAAO,OAAO,QAAQ,KAAK,MAAM;GAGhD,UAEE,OAAO,WAAW,KAAK,IAAI,IAAI,OAAO,KAAK,UAAU,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACxF;GACA,KAAK,MAAM,SAAS;IAAC;IAAG;IAAG;IAAW;GAAa,GACjD,UAAU,QAAQ,MAAM,cAAc,QAAQ,MAAM,cAAc,KAAK,CAAC,MAAM,KAAK;EACvF,QAAQ;GACN,MAAM,0BAA0B,KAAK,CAAC,CAAC;EACzC;CACF;CAEA,MAAM,aAAa,cACjB,OAAO,QAAQ,4BAA4B,UACzC,OAAO,IAAI,aAAa;EACtB,UAAU,OAAO,MAAM,MAAM,SAAS,CAAC;EACvC,MAAM,eAAe,KAAK,SAAS;CACrC,CAAC,CACH;CAEF,MAAM,eAAe,OAAY,QAAa,cAC5C,OAAO,IACL,4BACC,UACC,GAAG,wBAAwB,MAAM,SAAS,KAAK,MAAM,MAAM,OAAO,MAAM,GAAG,SAAS,EAAE,EAC1F;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
1	+ {"version":3,"file":"state.mjs","names":[],"sources":["../../../src/internal/passkey/state.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\n// oxlint-disable-next-line import/extensions -- Noble exposes its explicit .js subpaths.\nimport { sha256 } from \"@noble/hashes/sha2.js\";\n// oxlint-disable-next-line import/extensions -- Noble exposes its explicit .js subpaths.\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport {\n PasskeyConfigurationError,\n PasskeyUnavailable,\n PasskeyCeremony,\n PasskeyCredential,\n PasskeyModuleId,\n PasskeyProfile,\n PasskeyRevision,\n PasskeyMethodPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport { Context, Effect, Schema } from \"effect\";\nimport { Base64Url } from \"effect/encoding\";\n\nimport {\n requiredPasskeyCredentialConstraints,\n requiredPasskeyPersistenceConstraints,\n} from \"../models/passkey-model\";\nimport { requiredPasskeyRegistrationCeremonyConstraints } from \"../models/passkey-registration-ceremony-model\";\nimport type { SqlExpression as SQL, QueryOperations } from \"../query-operations\";\nimport type { TransactionOwner, makeTransactionKernel } from \"../transaction-kernel\";\n\nexport type PasskeyOwner = TransactionOwner<PasskeyUnavailable>;\n\nexport class CurrentPasskeyTransaction extends Context.Service<\n CurrentPasskeyTransaction,\n PasskeyOwner\n>()(\"effect-auth/drizzle/CurrentPasskeyTransaction\") {}\n\nexport const makePasskeyStateKernel = (\n operations: QueryOperations,\n transactions: Pick<ReturnType<typeof makeTransactionKernel>, \"both\" \| \"makeTransactionRows\">,\n) => {\n const { getTableColumns, sql } = operations;\n const { both, makeTransactionRows } = transactions;\n\n const unavailable = () => PasskeyUnavailable.make({});\n\n const invariant: (value: unknown) => asserts value = (value) => {\n if (!value) throw unavailable();\n };\n\n const { col, equal, copiedRow, matchesNativeRow } = makeTransactionRows(unavailable);\n\n const nonce = () => Base64Url.encode(randomBytes(32));\n\n const encoder = new TextEncoder();\n\n const decoder = new TextDecoder(\"utf-8\", { fatal: true });\n\n /* RP tuples and admission scopes have no collation-dependent string identity. /\n const key = (kind: string, fields: ReadonlyArray<string>) => {\n const values = [\"effect-auth/passkey/\" + kind + \"/v1\", ...fields].map((field) => {\n const bytes = encoder.encode(field);\n\n invariant(decoder.decode(bytes) === field);\n\n return bytes;\n });\n\n const packed = new Uint8Array(values.reduce((size, bytes) => size + 4 + bytes.length, 0));\n const view = new DataView(packed.buffer);\n let offset = 0;\n\n for (const bytes of values) {\n view.setUint32(offset, bytes.length, false);\n packed.set(bytes, offset + 4);\n offset += 4 + bytes.length;\n }\n\n return (\n \"v1:\" + Array.from(sha256(packed), (value) => value.toString(16).padStart(2, \"0\")).join(\"\")\n );\n };\n\n const credentialKey = (rpId: string, id: string) => key(\"credential\", [rpId, id]);\n\n const handleKey = (rpId: string, handle: string) => key(\"handle\", [rpId, handle]);\n\n const subjectScope = (subjectId: string) => key(\"subject\", [subjectId]);\n\n const targetScope = (ceremony: PasskeyCeremony) => {\n const context = ceremony.context;\n\n if (!(\"target\" in context)) return null;\n const target = context.target;\n\n return key(\"target\", [\n target.moduleId,\n target.kind,\n target.flowId,\n target.commandId,\n target.bindingDigest,\n target.revision.subjectId,\n ]);\n };\n\n /* Private storage is decoded Type data, never a consumer wire transform. /\n const storage = <S extends Schema.Codec<unknown, unknown, never, never>>(\n schema: S,\n maximumBytes: number,\n ) => {\n const codec = Schema.fromJsonString(Schema.toCodecJson(Schema.toType(schema)));\n\n const encode = (value: S[\"Type\"]) => {\n const text = \"v1:\" + Schema.encodeSync(codec)(snapshotPasskeySync(schema, value));\n\n invariant(encoder.encode(text).length <= maximumBytes);\n\n return text;\n };\n\n return {\n encode,\n decode: (text: unknown): S[\"Type\"] => {\n invariant(typeof text === \"string\" && text.startsWith(\"v1:\"));\n invariant(encoder.encode(text).length <= maximumBytes);\n const value = snapshotPasskeySync(schema, Schema.decodeSync(codec)(text.slice(3)));\n\n invariant(encode(value) === text);\n\n return value;\n },\n };\n };\n\n // Legal 32 x 16 x 2048 origins require more than one MiB before JSON escaping.\n const policyStorage = storage(PasskeyMethodPolicy, 8 1024 * 1024);\n\n const ceremonyStorage = storage(PasskeyCeremony, 512 * 1024);\n\n const credentialStorage = storage(PasskeyCredential, 512 * 1024);\n\n const profileStorage = storage(PasskeyProfile, 256 * 1024);\n\n const revisionStorage = storage(PasskeyRevision, 256 * 1024);\n\n const sameCredential = (left: PasskeyCredential, right: PasskeyCredential) => {\n const semantic = (value: PasskeyCredential) => ({\n ...value,\n counter: 0,\n maximumCounter: 0,\n backupState: false,\n revision: { ...value.revision, credentials: [] },\n });\n\n return credentialStorage.encode(semantic(left)) === credentialStorage.encode(semantic(right));\n };\n\n const sameRevision = (left: typeof PasskeyRevision.Type, right: typeof PasskeyRevision.Type) => {\n const pairs = new Map(left.credentials.map((item) => [item.credentialId, item.revision]));\n\n return (\n left.subjectId === right.subjectId &&\n left.securityRevision === right.securityRevision &&\n pairs.size === left.credentials.length &&\n new Set(right.credentials.map((item) => item.credentialId)).size ===\n right.credentials.length &&\n pairs.size === right.credentials.length &&\n right.credentials.every((item) => pairs.get(item.credentialId) === item.revision)\n );\n };\n\n const semanticCredentialColumns = (mapping: any): string[] =>\n [\n \"credentialId\",\n \"subjectId\",\n \"rpId\",\n \"protocolCredentialId\",\n \"credentialKey\",\n \"handleKey\",\n \"userHandle\",\n \"publicKey\",\n \"algorithm\",\n \"profile\",\n \"credentialRevision\",\n \"status\",\n \"primarySignIn\",\n \"enrollmentUserVerified\",\n \"backupEligible\",\n ].map((name) => mapping[name]);\n\n const mappedColumns = (mapping: any): string[] =>\n Object.entries(mapping)\n .filter(\n ([name, value]) =>\n ![\"table\", \"reservedState\", \"pendingState\", \"acceptedState\", \"rejectedState\"].includes(\n name,\n ) && typeof value === \"string\",\n )\n .map(([, value]) => value as string);\n\n const observeSemantic = (mapping: any, where: SQL, row: any) =>\n Effect.map(CurrentPasskeyTransaction, (owner) => {\n owner.observations.push({\n table: mapping.table,\n where,\n rows: [\n Object.fromEntries(\n semanticCredentialColumns(mapping).map((column) => [column, row[column]]),\n ),\n ],\n });\n });\n\n /** Capture descriptor graphs, preserving native SQL expressions and table objects. /\n const captureMapping = <A>(input: A): A => {\n const seen = new Map<object, unknown>();\n\n const copy = (value: unknown): unknown => {\n if (value === null \|\| typeof value !== \"object\" \|\| Effect.isEffect(value)) return value;\n if (!Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype) return value;\n const prior = seen.get(value);\n\n if (prior !== undefined) return prior;\n const result: any = Array.isArray(value) ? [] : {};\n\n seen.set(value, result);\n for (const [name, child] of Object.entries(value)) result[name] = copy(child);\n\n return Object.freeze(result);\n };\n\n return copy(input) as A;\n };\n\n const constraints = (actual: any, expected: any) => {\n for (const [name, columns] of Object.entries(expected))\n // oxlint-disable-next-line no-restricted-properties -- exact configured constraint descriptor fingerprint.\n invariant(JSON.stringify(actual?.[name]) === JSON.stringify(columns));\n };\n\n const descriptor = (value: any) => {\n const columns = getTableColumns(value.table);\n\n for (const name of mappedColumns(value)) invariant(columns[name] !== undefined);\n };\n\n const validateMapping = (\n mapping: any,\n kind: \"read\" \| \"context\" \| \"assertion\" \| \"registration\",\n ) => {\n try {\n const read = kind === \"read\" ? mapping : kind !== \"registration\" ? mapping.read : undefined;\n\n if (read !== undefined) {\n for (const name of [\n \"subject\",\n \"credential\",\n \"authority\",\n \"credentialOwnership\",\n \"handleOwnership\",\n ])\n descriptor(read[name]);\n constraints(read.constraints, requiredPasskeyCredentialConstraints);\n }\n if (kind === \"read\") return;\n // oxlint-disable-next-line no-restricted-properties -- validate the untyped captured configuration boundary.\n Schema.decodeUnknownSync(PasskeyModuleId)(mapping.moduleId);\n descriptor(mapping.module);\n invariant(mapping.module.policyColumns.length > 0);\n for (const name of mapping.module.policyColumns) col(mapping.module.table, name);\n const scopes = new Set<string>();\n\n for (const guard of mapping.module.guards ?? []) {\n invariant(\n typeof guard.scope === \"string\" && guard.scope.length > 0 && guard.scope.length <= 256,\n );\n invariant(!scopes.has(guard.scope) && guard.columns.length > 0);\n scopes.add(guard.scope);\n for (const name of guard.columns) col(guard.table, name);\n }\n invariant(scopes.size <= 32);\n if (kind === \"context\") return;\n invariant(\n typeof mapping.authorityScope === \"string\" &&\n mapping.authorityScope.length > 0 &&\n mapping.authorityScope.length <= 256,\n );\n for (const name of [\"flow\", \"admission\", \"charge\"]) descriptor(mapping[name]);\n if (kind === \"registration\") {\n descriptor(mapping.intent);\n descriptor(mapping.handle);\n } else col(mapping.read.credential.table, mapping.telemetry.lastUsedAt);\n constraints(\n mapping.constraints,\n kind === \"registration\"\n ? requiredPasskeyRegistrationCeremonyConstraints\n : requiredPasskeyPersistenceConstraints,\n );\n const states = Object.values(mapping.flow.states);\n\n // oxlint-disable-next-line no-restricted-properties -- configured native state identity fingerprints.\n invariant(\n // oxlint-disable-next-line no-restricted-properties -- configured native state identity fingerprints.\n states.length === 7 && new Set(states.map((value) => JSON.stringify(value))).size === 7,\n );\n for (const value of [0, 1, 123456789, 8640000000000])\n invariant(mapping.clock.decodeInstant(mapping.clock.encodeInstant(value)) === value);\n } catch {\n throw PasskeyConfigurationError.make({});\n }\n };\n\n const assertNow = (condition: SQL) =>\n Effect.flatMap(CurrentPasskeyTransaction, (owner) =>\n Effect.gen(function () {\n invariant(yield* owner.check(condition));\n owner.postconditions.push(condition);\n }),\n );\n\n const existsExact = (table: any, values: any, condition?: SQL) =>\n Effect.map(\n CurrentPasskeyTransaction,\n (owner) =>\n sql`exists(select 1 from ${table} where ${both(owner.exact(table, values), condition)})`,\n );\n\n return {\n unavailable,\n invariant,\n col,\n equal,\n copiedRow,\n matchesNativeRow,\n nonce,\n key,\n credentialKey,\n handleKey,\n subjectScope,\n targetScope,\n policyStorage,\n ceremonyStorage,\n credentialStorage,\n profileStorage,\n revisionStorage,\n sameCredential,\n sameRevision,\n semanticCredentialColumns,\n mappedColumns,\n observeSemantic,\n captureMapping,\n validateMapping,\n assertNow,\n existsExact,\n };\n};\n"],"mappings":";;;;;;;;AA8BA,IAAa,4BAAb,cAA+C,QAAQ,QAGrD,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC;AAEtD,MAAa,0BACX,YACA,iBACG;CACH,MAAM,EAAE,iBAAiB,QAAQ;CACjC,MAAM,EAAE,MAAM,wBAAwB;CAEtC,MAAM,oBAAoB,mBAAmB,KAAK,CAAC,CAAC;CAEpD,MAAM,aAAgD,UAAU;EAC9D,IAAI,CAAC,OAAO,MAAM,YAAY;CAChC;CAEA,MAAM,EAAE,KAAK,OAAO,WAAW,qBAAqB,oBAAoB,WAAW;CAEnF,MAAM,cAAc,UAAU,OAAO,YAAY,EAAE,CAAC;CAEpD,MAAM,UAAU,IAAI,YAAY;CAEhC,MAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;;CAGxD,MAAM,OAAO,MAAc,WAAkC;EAC3D,MAAM,SAAS,CAAC,yBAAyB,OAAO,OAAO,GAAG,MAAM,CAAC,CAAC,KAAK,UAAU;GAC/E,MAAM,QAAQ,QAAQ,OAAO,KAAK;GAElC,UAAU,QAAQ,OAAO,KAAK,MAAM,KAAK;GAEzC,OAAO;EACT,CAAC;EAED,MAAM,SAAS,IAAI,WAAW,OAAO,QAAQ,MAAM,UAAU,OAAO,IAAI,MAAM,QAAQ,CAAC,CAAC;EACxF,MAAM,OAAO,IAAI,SAAS,OAAO,MAAM;EACvC,IAAI,SAAS;EAEb,KAAK,MAAM,SAAS,QAAQ;GAC1B,KAAK,UAAU,QAAQ,MAAM,QAAQ,KAAK;GAC1C,OAAO,IAAI,OAAO,SAAS,CAAC;GAC5B,UAAU,IAAI,MAAM;EACtB;EAEA,OACE,QAAQ,MAAM,KAAK,OAAO,MAAM,IAAI,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;CAE9F;CAEA,MAAM,iBAAiB,MAAc,OAAe,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;CAEhF,MAAM,aAAa,MAAc,WAAmB,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC;CAEhF,MAAM,gBAAgB,cAAsB,IAAI,WAAW,CAAC,SAAS,CAAC;CAEtE,MAAM,eAAe,aAA8B;EACjD,MAAM,UAAU,SAAS;EAEzB,IAAI,EAAE,YAAY,UAAU,OAAO;EACnC,MAAM,SAAS,QAAQ;EAEvB,OAAO,IAAI,UAAU;GACnB,OAAO;GACP,OAAO;GACP,OAAO;GACP,OAAO;GACP,OAAO;GACP,OAAO,SAAS;EAClB,CAAC;CACH;;CAGA,MAAM,WACJ,QACA,iBACG;EACH,MAAM,QAAQ,OAAO,eAAe,OAAO,YAAY,OAAO,OAAO,MAAM,CAAC,CAAC;EAE7E,MAAM,UAAU,UAAqB;GACnC,MAAM,OAAO,QAAQ,OAAO,WAAW,KAAK,CAAC,CAAC,oBAAoB,QAAQ,KAAK,CAAC;GAEhF,UAAU,QAAQ,OAAO,IAAI,CAAC,CAAC,UAAU,YAAY;GAErD,OAAO;EACT;EAEA,OAAO;GACL;GACA,SAAS,SAA6B;IACpC,UAAU,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,CAAC;IAC5D,UAAU,QAAQ,OAAO,IAAI,CAAC,CAAC,UAAU,YAAY;IACrD,MAAM,QAAQ,oBAAoB,QAAQ,OAAO,WAAW,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;IAEjF,UAAU,OAAO,KAAK,MAAM,IAAI;IAEhC,OAAO;GACT;EACF;CACF;CAGA,MAAM,gBAAgB,QAAQ,qBAAqB,OAAe;CAElE,MAAM,kBAAkB,QAAQ,iBAAiB,MAAU;CAE3D,MAAM,oBAAoB,QAAQ,mBAAmB,MAAU;CAE/D,MAAM,iBAAiB,QAAQ,gBAAgB,MAAU;CAEzD,MAAM,kBAAkB,QAAQ,iBAAiB,MAAU;CAE3D,MAAM,kBAAkB,MAAyB,UAA6B;EAC5E,MAAM,YAAY,WAA8B;GAC9C,GAAG;GACH,SAAS;GACT,gBAAgB;GAChB,aAAa;GACb,UAAU;IAAE,GAAG,MAAM;IAAU,aAAa,CAAC;GAAE;EACjD;EAEA,OAAO,kBAAkB,OAAO,SAAS,IAAI,CAAC,MAAM,kBAAkB,OAAO,SAAS,KAAK,CAAC;CAC9F;CAEA,MAAM,gBAAgB,MAAmC,UAAuC;EAC9F,MAAM,QAAQ,IAAI,IAAI,KAAK,YAAY,KAAK,SAAS,CAAC,KAAK,cAAc,KAAK,QAAQ,CAAC,CAAC;EAExF,OACE,KAAK,cAAc,MAAM,aACzB,KAAK,qBAAqB,MAAM,oBAChC,MAAM,SAAS,KAAK,YAAY,UAChC,IAAI,IAAI,MAAM,YAAY,KAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAC1D,MAAM,YAAY,UACpB,MAAM,SAAS,MAAM,YAAY,UACjC,MAAM,YAAY,OAAO,SAAS,MAAM,IAAI,KAAK,YAAY,MAAM,KAAK,QAAQ;CAEpF;CAEA,MAAM,6BAA6B,YACjC;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,SAAS,QAAQ,KAAK;CAE/B,MAAM,iBAAiB,YACrB,OAAO,QAAQ,OAAO,CAAC,CACpB,QACE,CAAC,MAAM,WACN,CAAC;EAAC;EAAS;EAAiB;EAAgB;EAAiB;CAAe,CAAC,CAAC,SAC5E,IACF,KAAK,OAAO,UAAU,QAC1B,CAAC,CACA,KAAK,GAAG,WAAW,KAAe;CAEvC,MAAM,mBAAmB,SAAc,OAAY,QACjD,OAAO,IAAI,4BAA4B,UAAU;EAC/C,MAAM,aAAa,KAAK;GACtB,OAAO,QAAQ;GACf;GACA,MAAM,CACJ,OAAO,YACL,0BAA0B,OAAO,CAAC,CAAC,KAAK,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,CAC1E,CACF;EACF,CAAC;CACH,CAAC;;CAGH,MAAM,kBAAqB,UAAgB;EACzC,MAAM,uBAAO,IAAI,IAAqB;EAEtC,MAAM,QAAQ,UAA4B;GACxC,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,GAAG,OAAO;GAClF,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,OAAO,eAAe,KAAK,MAAM,OAAO,WAAW,OAAO;GACvF,MAAM,QAAQ,KAAK,IAAI,KAAK;GAE5B,IAAI,UAAU,KAAA,GAAW,OAAO;GAChC,MAAM,SAAc,MAAM,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC;GAEjD,KAAK,IAAI,OAAO,MAAM;GACtB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,GAAG,OAAO,QAAQ,KAAK,KAAK;GAE5E,OAAO,OAAO,OAAO,MAAM;EAC7B;EAEA,OAAO,KAAK,KAAK;CACnB;CAEA,MAAM,eAAe,QAAa,aAAkB;EAClD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,QAAQ,GAEnD,UAAU,KAAK,UAAU,SAAS,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;CACxE;CAEA,MAAM,cAAc,UAAe;EACjC,MAAM,UAAU,gBAAgB,MAAM,KAAK;EAE3C,KAAK,MAAM,QAAQ,cAAc,KAAK,GAAG,UAAU,QAAQ,UAAU,KAAA,CAAS;CAChF;CAEA,MAAM,mBACJ,SACA,SACG;EACH,IAAI;GACF,MAAM,OAAO,SAAS,SAAS,UAAU,SAAS,iBAAiB,QAAQ,OAAO,KAAA;GAElF,IAAI,SAAS,KAAA,GAAW;IACtB,KAAK,MAAM,QAAQ;KACjB;KACA;KACA;KACA;KACA;IACF,GACE,WAAW,KAAK,KAAK;IACvB,YAAY,KAAK,aAAa,oCAAoC;GACpE;GACA,IAAI,SAAS,QAAQ;GAErB,OAAO,kBAAkB,eAAe,CAAC,CAAC,QAAQ,QAAQ;GAC1D,WAAW,QAAQ,MAAM;GACzB,UAAU,QAAQ,OAAO,cAAc,SAAS,CAAC;GACjD,KAAK,MAAM,QAAQ,QAAQ,OAAO,eAAe,IAAI,QAAQ,OAAO,OAAO,IAAI;GAC/E,MAAM,yBAAS,IAAI,IAAY;GAE/B,KAAK,MAAM,SAAS,QAAQ,OAAO,UAAU,CAAC,GAAG;IAC/C,UACE,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,SAAS,KAAK,MAAM,MAAM,UAAU,GACrF;IACA,UAAU,CAAC,OAAO,IAAI,MAAM,KAAK,KAAK,MAAM,QAAQ,SAAS,CAAC;IAC9D,OAAO,IAAI,MAAM,KAAK;IACtB,KAAK,MAAM,QAAQ,MAAM,SAAS,IAAI,MAAM,OAAO,IAAI;GACzD;GACA,UAAU,OAAO,QAAQ,EAAE;GAC3B,IAAI,SAAS,WAAW;GACxB,UACE,OAAO,QAAQ,mBAAmB,YAChC,QAAQ,eAAe,SAAS,KAChC,QAAQ,eAAe,UAAU,GACrC;GACA,KAAK,MAAM,QAAQ;IAAC;IAAQ;IAAa;GAAQ,GAAG,WAAW,QAAQ,KAAK;GAC5E,IAAI,SAAS,gBAAgB;IAC3B,WAAW,QAAQ,MAAM;IACzB,WAAW,QAAQ,MAAM;GAC3B,OAAO,IAAI,QAAQ,KAAK,WAAW,OAAO,QAAQ,UAAU,UAAU;GACtE,YACE,QAAQ,aACR,SAAS,iBACL,iDACA,qCACN;GACA,MAAM,SAAS,OAAO,OAAO,QAAQ,KAAK,MAAM;GAGhD,UAEE,OAAO,WAAW,KAAK,IAAI,IAAI,OAAO,KAAK,UAAU,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACxF;GACA,KAAK,MAAM,SAAS;IAAC;IAAG;IAAG;IAAW;GAAa,GACjD,UAAU,QAAQ,MAAM,cAAc,QAAQ,MAAM,cAAc,KAAK,CAAC,MAAM,KAAK;EACvF,QAAQ;GACN,MAAM,0BAA0B,KAAK,CAAC,CAAC;EACzC;CACF;CAEA,MAAM,aAAa,cACjB,OAAO,QAAQ,4BAA4B,UACzC,OAAO,IAAI,aAAa;EACtB,UAAU,OAAO,MAAM,MAAM,SAAS,CAAC;EACvC,MAAM,eAAe,KAAK,SAAS;CACrC,CAAC,CACH;CAEF,MAAM,eAAe,OAAY,QAAa,cAC5C,OAAO,IACL,4BACC,UACC,GAAG,wBAAwB,MAAM,SAAS,KAAK,MAAM,MAAM,OAAO,MAAM,GAAG,SAAS,EAAE,EAC1F;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/internal/passkey/target.d.mts CHANGED Viewed

@@ -10,7 +10,7 @@ import "./registration-ceremony.mjs";
 import { Effect, Schema } from "effect";
 import { PasskeyConfigurationError, PasskeyPersistence, PasskeyUnavailable, PreparePasskeyCommit } from "@yielded/auth/Passkey";
 import { LifecycleHooks, PreparedCommit } from "@yielded/auth/Hooks";
-import { Statement } from "effect/unstable/sql/Statement";
+import { Statement } from "effect/sql/Statement";
 //#region src/internal/passkey/target.d.ts
 export type PasskeyTargetConfiguration = TransactionTargetConfiguration<PasskeyUnavailable>;
 export type PasskeyCoordinatorError<E> = TransactionCoordinatorError<E, PasskeyUnavailable> | PasskeyConfigurationError | PersistenceMappingError;

package/dist/internal/passkey/target.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"target.mjs","names":[],"sources":["../../../src/internal/passkey/target.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\nimport { type PreparedCommit, LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n PasskeyConfigurationError,\n type PasskeyUnavailable,\n type PasskeyCredentials,\n type PasskeyEnrollmentContext,\n type PasskeyPersistence,\n type PreparePasskeyCommit,\n PasskeyAccess,\n PasskeyAssertionVerified,\n PasskeyCeremony,\n PasskeyClaim,\n PasskeyClaimDecision,\n PasskeyCleanupResult,\n PasskeyCredential,\n PasskeyEnrollmentSnapshot,\n PasskeyEvidence,\n PasskeyInstant,\n PasskeyIssueDecision,\n PasskeyModuleId,\n PasskeyProfile,\n PasskeyProtocolCredentialId,\n PasskeySettlement,\n PasskeyMethodPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport { SubjectId } from \"@yielded/auth/Schema\";\nimport { Effect, Schema } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"../mapping-error\";\nimport type {\n PasskeyCredentialServices,\n PasskeyEnrollmentContextServices,\n PasskeyMappingSource,\n PasskeyPersistenceServices,\n} from \"../models/passkey-model\";\nimport type { PasskeyRegistrationCeremonyServices } from \"../models/passkey-registration-ceremony-model\";\nimport type {\n TransactionCoordinatorError,\n TransactionExecution,\n TransactionTargetConfiguration,\n makeTransactionExecutionKernel,\n} from \"../transaction-execution-kernel\";\nimport type { makePasskeyCredentialsKernel } from \"./credentials\";\nimport type { makePasskeyFlowKernel } from \"./flow\";\nimport type { makePasskeyRegistrationCeremonyKernel } from \"./registration-ceremony\";\nimport { CurrentPasskeyTransaction } from \"./state\";\nimport type { makePasskeyStateKernel } from \"./state\";\n\nexport type PasskeyTargetConfiguration = TransactionTargetConfiguration<PasskeyUnavailable>;\n\nexport type PasskeyCoordinatorError<E> =\n \| TransactionCoordinatorError<E, PasskeyUnavailable>\n \| PasskeyConfigurationError\n \| PersistenceMappingError;\n\nexport type PasskeyExecution = TransactionExecution<\n PasskeyUnavailable,\n CurrentPasskeyTransaction,\n never\n>;\n\nexport const makePasskeyTargetKernel = (\n credentials: Pick<\n ReturnType<typeof makePasskeyCredentialsKernel>,\n \"captureEnrollmentContext\" \| \"lookupCredential\"\n >,\n flow: Pick<\n ReturnType<typeof makePasskeyFlowKernel>,\n \| \"assertionPurposes\"\n \| \"claimAssertion\"\n \| \"cleanupCeremonies\"\n \| \"contextAssertion\"\n \| \"issueAssertion\"\n \| \"settleAssertion\"\n >,\n registrationCeremony: Pick<\n ReturnType<typeof makePasskeyRegistrationCeremonyKernel>,\n \"claimRegistration\" \| \"contextRegistration\" \| \"settleRegistration\"\n >,\n state: Pick<\n ReturnType<typeof makePasskeyStateKernel>,\n \"captureMapping\" \| \"invariant\" \| \"nonce\" \| \"unavailable\" \| \"validateMapping\"\n >,\n execution: Pick<\n ReturnType<typeof makeTransactionExecutionKernel>,\n \| \"coordinateTransactionOwner\"\n \| \"makeTransactionExecution\"\n \| \"sqlClientTransactionStandaloneGuard\"\n >,\n) => {\n const { captureEnrollmentContext, lookupCredential } = credentials;\n\n const {\n assertionPurposes,\n claimAssertion,\n cleanupCeremonies,\n contextAssertion,\n issueAssertion,\n settleAssertion,\n } = flow;\n\n const { claimRegistration, contextRegistration, settleRegistration } = registrationCeremony;\n const { captureMapping, nonce, unavailable, validateMapping } = state;\n const invariant: (value: unknown) => asserts value = state.invariant;\n\n const {\n coordinateTransactionOwner,\n makeTransactionExecution,\n sqlClientTransactionStandaloneGuard,\n } = execution;\n\n const sqlClientPasskeyStandaloneGuard = (\n database: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n ) => sqlClientTransactionStandaloneGuard(unavailable, database);\n\n const emptyHooks: LifecycleHooks[\"Service\"] = {\n before: () => Effect.void,\n after: () => Effect.succeed([]),\n };\n\n const makePasskeyExecution = (\n database: Parameters<typeof makeTransactionExecution>[1],\n hooks: LifecycleHooks[\"Service\"],\n configuration: PasskeyTargetConfiguration,\n ): PasskeyExecution => {\n const execution = makeTransactionExecution(\n CurrentPasskeyTransaction,\n database,\n configuration,\n unavailable,\n nonce,\n );\n\n return {\n ...execution,\n run: (operation, mutation) =>\n execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n };\n };\n\n const issueInput = Schema.Struct({ ceremony: PasskeyCeremony, policy: PasskeyMethodPolicy });\n\n const claimInput = Schema.Struct({\n access: PasskeyAccess,\n policy: PasskeyMethodPolicy,\n ceremony: PasskeyCeremony,\n claimId: PasskeyClaim.fields.claimId,\n credential: Schema.optionalKey(PasskeyCredential),\n });\n\n const settleInput = Schema.Struct({\n claim: PasskeyClaim,\n nowMillis: PasskeyInstant,\n outcome: Schema.Union([\n Schema.TaggedStruct(\"Rejected\", {}),\n Schema.TaggedStruct(\"Ambiguous\", {}),\n Schema.TaggedStruct(\"Assertion\", {\n credential: PasskeyCredential,\n assertion: PasskeyAssertionVerified,\n evidence: PasskeyEvidence,\n }),\n ]),\n });\n\n const cleanupInput = Schema.Struct({\n moduleId: PasskeyModuleId,\n nowMillis: PasskeyInstant,\n limit: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1000 })),\n });\n\n const lookupInput = Schema.Struct({\n rpId: PasskeyProfile.fields.rpId,\n protocolCredentialId: PasskeyProtocolCredentialId,\n });\n\n const contextInput = Schema.Struct({\n moduleId: PasskeyModuleId,\n rpId: PasskeyProfile.fields.rpId,\n subjectId: SubjectId,\n });\n\n const inputs = {\n issue: issueInput,\n context: PasskeyAccess,\n claim: claimInput,\n settle: settleInput,\n cleanup: cleanupInput,\n };\n\n const capturedService = <S>(\n service: S,\n schemas: Record<string, Schema.Codec<any, any, never, never>>,\n execute: PasskeyExecution,\n ): S =>\n Object.freeze(\n Object.fromEntries(\n Object.entries(\n service as Record<string, (...args: any[]) => Effect.Effect<any, PasskeyUnavailable>>,\n ).map(([name, method]) => [\n name,\n (original: any, prepare?: any) =>\n Effect.suspend(() => {\n invariant(execute.active());\n const input = snapshotPasskeySync(schemas[name]!, original);\n\n return method(input, prepare);\n }).pipe(\n Effect.onExit((exit) =>\n Effect.sync(() => {\n if (exit._tag === \"Failure\") execute.poison();\n }),\n ),\n Effect.catchDefect(() => Effect.fail(unavailable())),\n ),\n ]),\n ),\n ) as S;\n\n const prepareValue = <Value, A>(\n value: Value,\n prepare: PreparePasskeyCommit<Value, A>,\n ): Effect.Effect<PreparedCommit<A>, never, CurrentPasskeyTransaction> =>\n Effect.flatMap(CurrentPasskeyTransaction, (owner) =>\n Effect.sync(() => {\n owner.guards.push(owner.journal.prepare(undefined));\n const receipt = prepare(value, owner.journal);\n\n invariant(\n receipt !== null &&\n typeof receipt === \"object\" &&\n receipt._tag === \"PreparedCommit\" &&\n typeof receipt.read === \"object\" &&\n Effect.isEffect(receipt.read),\n );\n owner.guards.push(receipt);\n\n return receipt;\n }),\n );\n\n const requirePurpose = (purpose: string, registration: boolean, enrollment = false) =>\n invariant(\n enrollment\n ? purpose === \"enrollment\"\n : registration\n ? purpose === \"registration\"\n : assertionPurposes.some((supported) => supported === purpose),\n );\n\n /* Context is advisory. Retain observations and final predicates without taking\n * later-ranked locks before a subsequent mutation acquires its full lock set. /\n const observationalContext = <A, E, R>(operation: Effect.Effect<A, E, R>) =>\n Effect.flatMap(CurrentPasskeyTransaction, (owner) =>\n operation.pipe(\n Effect.provideService(CurrentPasskeyTransaction, {\n ...owner,\n read: (table, where, options) => owner.read(table, where, { ...options, lock: false }),\n }),\n ),\n );\n\n const makePasskeyPersistence = (\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n registration = false,\n enrollment = false,\n ): PasskeyPersistence[\"Service\"] =>\n capturedService<PasskeyPersistence[\"Service\"]>(\n {\n issue: (input, prepare) =>\n Effect.suspend(() => {\n invariant(!registration && !enrollment);\n requirePurpose(input.ceremony.purpose, false);\n\n return execute.run(\n Effect.gen(function () {\n const value = yield* issueAssertion(mapping, input.ceremony, input.policy);\n\n return yield* prepareValue(\n snapshotPasskeySync(PasskeyIssueDecision, value),\n prepare,\n );\n }),\n );\n }),\n context: (access) =>\n Effect.suspend(() => {\n requirePurpose(access.purpose, registration, enrollment);\n\n return execute.run(\n observationalContext(\n registration\n ? contextRegistration(mapping, access)\n : contextAssertion(mapping, access),\n ),\n false,\n );\n }),\n claim: (input, prepare) =>\n Effect.suspend(() => {\n requirePurpose(input.access.purpose, registration, enrollment);\n requirePurpose(input.ceremony.purpose, registration, enrollment);\n invariant((!registration && !enrollment) \|\| input.credential === undefined);\n\n return execute.run(\n Effect.gen(function* () {\n const value = yield* registration\n ? claimRegistration(mapping, input)\n : claimAssertion(mapping, input);\n\n return yield* prepareValue(\n snapshotPasskeySync(PasskeyClaimDecision, value),\n prepare,\n );\n }),\n );\n }),\n settle: (input, prepare) =>\n Effect.suspend(() => {\n requirePurpose(input.claim.ceremony.purpose, registration, enrollment);\n invariant((!registration && !enrollment) \|\| input.outcome._tag !== \"Assertion\");\n\n return execute.run(\n Effect.gen(function* () {\n const value = yield* registration\n ? settleRegistration(\n mapping,\n input.claim,\n input.outcome._tag as \"Rejected\" \| \"Ambiguous\",\n )\n : settleAssertion(mapping, input.claim, input.outcome, configuration.dialect);\n\n return yield* prepareValue(snapshotPasskeySync(PasskeySettlement, value), prepare);\n }),\n );\n }),\n cleanup: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n const value = yield* cleanupCeremonies(\n mapping,\n input,\n registration ? [\"registration\"] : enrollment ? [\"enrollment\"] : assertionPurposes,\n );\n\n return yield* prepareValue(snapshotPasskeySync(PasskeyCleanupResult, value), prepare);\n }),\n ),\n },\n inputs,\n execute,\n );\n\n const credentialService = (\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyCredentials[\"Service\"] =>\n capturedService<PasskeyCredentials[\"Service\"]>(\n {\n lookup: (input) =>\n execute.run(lookupCredential(mapping, input.rpId, input.protocolCredentialId), false),\n },\n { lookup: lookupInput },\n execute,\n );\n\n const enrollmentService = (\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyEnrollmentContext[\"Service\"] =>\n capturedService<PasskeyEnrollmentContext[\"Service\"]>(\n {\n capture: (input) =>\n execute.run(\n Effect.map(captureEnrollmentContext(mapping, input), (value) =>\n value === undefined\n ? undefined\n : snapshotPasskeySync(PasskeyEnrollmentSnapshot, value),\n ),\n false,\n ),\n },\n { capture: contextInput },\n execute,\n );\n\n const registrationServices = (\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n ): PasskeyRegistrationCeremonyServices => ({\n capabilities: Object.freeze({\n purposes: Object.freeze([\"registration\"] as const),\n issue: \"registration-authority\",\n assertionSettlement: false,\n }),\n passkeyPersistence: makePasskeyPersistence(mapping, execute, configuration, true),\n });\n\n const capturedMapping = <M, RSetup>(\n source: PasskeyMappingSource<M, RSetup>,\n kind: \"read\" \| \"context\" \| \"assertion\" \| \"registration\",\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<M, PasskeyConfigurationError \| PersistenceMappingError, RSetup> =>\n Effect.flatMap(Effect.isEffect(source) ? source : Effect.succeed(source), (mapping) =>\n Effect.try({\n try: () => {\n const captured = captureMapping(mapping);\n\n validateMapping(captured, kind);\n if (configuration.mode === \"batch\") invariant((captured as any).d1?.primary === true);\n\n return captured;\n },\n catch: () => PasskeyConfigurationError.make({}),\n }),\n );\n\n const makeTargetPasskeyCredentials = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyCredentialServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup\n > =>\n Effect.map(capturedMapping(source, \"read\", configuration), (mapping) => ({\n passkeyCredentials: credentialService(\n mapping,\n makePasskeyExecution(database, emptyHooks, configuration),\n ),\n }));\n\n const makeTargetPasskeyEnrollmentContext = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyEnrollmentContextServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup\n > =>\n Effect.map(capturedMapping(source, \"context\", configuration), (mapping) => ({\n passkeyEnrollmentContext: enrollmentService(\n mapping,\n makePasskeyExecution(database, emptyHooks, configuration),\n ),\n }));\n\n const makeTargetPasskeyPersistence = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyPersistenceServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup \| LifecycleHooks\n > =>\n Effect.gen(function* () {\n const mapping = yield* capturedMapping(source, \"assertion\", configuration);\n const hooks = yield* LifecycleHooks;\n\n return {\n passkeyPersistence: makePasskeyPersistence(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n ),\n };\n });\n\n const makeTargetPasskeyRegistration = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyRegistrationCeremonyServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup \| LifecycleHooks\n > =>\n Effect.gen(function* () {\n const mapping = yield* capturedMapping(source, \"registration\", configuration);\n const hooks = yield* LifecycleHooks;\n\n return registrationServices(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n );\n });\n\n const coordinateTargetPasskey = <M, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n owner: (\n transaction: Transaction,\n services: PasskeyPersistenceServices,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.flatMap(capturedMapping(source, \"assertion\", configuration), (mapping) =>\n Effect.flatMap(LifecycleHooks, (hooks) =>\n coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execution) => ({\n passkeyPersistence: makePasskeyPersistence(\n mapping,\n {\n ...execution,\n run: (operation, mutation) =>\n execution\n .run(operation, mutation)\n .pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n }),\n owner,\n ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n ),\n );\n\n const coordinateTargetPasskeyRegistration = <M, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n owner: (\n transaction: Transaction,\n services: PasskeyRegistrationCeremonyServices,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.flatMap(capturedMapping(source, \"registration\", configuration), (mapping) =>\n Effect.flatMap(LifecycleHooks, (hooks) =>\n coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execution) =>\n registrationServices(\n mapping,\n {\n ...execution,\n run: (operation, mutation) =>\n execution\n .run(operation, mutation)\n .pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n owner,\n ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n ),\n );\n\n return {\n sqlClientPasskeyStandaloneGuard,\n makePasskeyExecution,\n capturedService,\n prepareValue,\n observationalContext,\n makePasskeyPersistence,\n capturedMapping,\n makeTargetPasskeyCredentials,\n makeTargetPasskeyEnrollmentContext,\n makeTargetPasskeyPersistence,\n makeTargetPasskeyRegistration,\n coordinateTargetPasskey,\n coordinateTargetPasskeyRegistration,\n };\n};\n"],"mappings":";;;;;;AAiEA,MAAa,2BACX,aAIA,MASA,sBAIA,OAIA,cAMG;CACH,MAAM,EAAE,0BAA0B,qBAAqB;CAEvD,MAAM,EACJ,mBACA,gBACA,mBACA,kBACA,gBACA,oBACE;CAEJ,MAAM,EAAE,mBAAmB,qBAAqB,uBAAuB;CACvE,MAAM,EAAE,gBAAgB,OAAO,aAAa,oBAAoB;CAChE,MAAM,YAA+C,MAAM;CAE3D,MAAM,EACJ,4BACA,0BACA,wCACE;CAEJ,MAAM,mCACJ,aACG,oCAAoC,aAAa,QAAQ;CAE9D,MAAM,aAAwC;EAC5C,cAAc,OAAO;EACrB,aAAa,OAAO,QAAQ,CAAC,CAAC;CAChC;CAEA,MAAM,wBACJ,UACA,OACA,kBACqB;EACrB,MAAM,YAAY,yBAChB,2BACA,UACA,eACA,aACA,KACF;EAEA,OAAO;GACL,GAAG;GACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;EACxF;CACF;CAEA,MAAM,aAAa,OAAO,OAAO;EAAE,UAAU;EAAiB,QAAQ;CAAoB,CAAC;CAE3F,MAAM,aAAa,OAAO,OAAO;EAC/B,QAAQ;EACR,QAAQ;EACR,UAAU;EACV,SAAS,aAAa,OAAO;EAC7B,YAAY,OAAO,YAAY,iBAAiB;CAClD,CAAC;CAED,MAAM,cAAc,OAAO,OAAO;EAChC,OAAO;EACP,WAAW;EACX,SAAS,OAAO,MAAM;GACpB,OAAO,aAAa,YAAY,CAAC,CAAC;GAClC,OAAO,aAAa,aAAa,CAAC,CAAC;GACnC,OAAO,aAAa,aAAa;IAC/B,YAAY;IACZ,WAAW;IACX,UAAU;GACZ,CAAC;EACH,CAAC;CACH,CAAC;CAED,MAAM,eAAe,OAAO,OAAO;EACjC,UAAU;EACV,WAAW;EACX,OAAO,OAAO,IAAI,MAAM,OAAO,UAAU;GAAE,SAAS;GAAG,SAAS;EAAK,CAAC,CAAC;CACzE,CAAC;CAED,MAAM,cAAc,OAAO,OAAO;EAChC,MAAM,eAAe,OAAO;EAC5B,sBAAsB;CACxB,CAAC;CAED,MAAM,eAAe,OAAO,OAAO;EACjC,UAAU;EACV,MAAM,eAAe,OAAO;EAC5B,WAAW;CACb,CAAC;CAED,MAAM,SAAS;EACb,OAAO;EACP,SAAS;EACT,OAAO;EACP,QAAQ;EACR,SAAS;CACX;CAEA,MAAM,mBACJ,SACA,SACA,YAEA,OAAO,OACL,OAAO,YACL,OAAO,QACL,OACF,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CACxB,OACC,UAAe,YACd,OAAO,cAAc;EACnB,UAAU,QAAQ,OAAO,CAAC;EAG1B,OAAO,OAFO,oBAAoB,QAAQ,OAAQ,QAEhC,GAAG,OAAO;CAC9B,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD,CACJ,CAAC,CACH,CACF;CAEF,MAAM,gBACJ,OACA,YAEA,OAAO,QAAQ,4BAA4B,UACzC,OAAO,WAAW;EAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;EAClD,MAAM,UAAU,QAAQ,OAAO,MAAM,OAAO;EAE5C,UACE,YAAY,QACV,OAAO,YAAY,YACnB,QAAQ,SAAS,oBACjB,OAAO,QAAQ,SAAS,YACxB,OAAO,SAAS,QAAQ,IAAI,CAChC;EACA,MAAM,OAAO,KAAK,OAAO;EAEzB,OAAO;CACT,CAAC,CACH;CAEF,MAAM,kBAAkB,SAAiB,cAAuB,aAAa,UAC3E,UACE,aACI,YAAY,eACZ,eACE,YAAY,iBACZ,kBAAkB,MAAM,cAAc,cAAc,OAAO,CACnE;;;CAIF,MAAM,wBAAiC,cACrC,OAAO,QAAQ,4BAA4B,UACzC,UAAU,KACR,OAAO,eAAe,2BAA2B;EAC/C,GAAG;EACH,OAAO,OAAO,OAAO,YAAY,MAAM,KAAK,OAAO,OAAO;GAAE,GAAG;GAAS,MAAM;EAAM,CAAC;CACvF,CAAC,CACH,CACF;CAEF,MAAM,0BACJ,SACA,SACA,eACA,eAAe,OACf,aAAa,UAEb,gBACE;EACE,QAAQ,OAAO,YACb,OAAO,cAAc;GACnB,UAAU,CAAC,gBAAgB,CAAC,UAAU;GACtC,eAAe,MAAM,SAAS,SAAS,KAAK;GAE5C,OAAO,QAAQ,IACb,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,OAAO,eAAe,SAAS,MAAM,UAAU,MAAM,MAAM;IAEzE,OAAO,OAAO,aACZ,oBAAoB,sBAAsB,KAAK,GAC/C,OACF;GACF,CAAC,CACH;EACF,CAAC;EACH,UAAU,WACR,OAAO,cAAc;GACnB,eAAe,OAAO,SAAS,cAAc,UAAU;GAEvD,OAAO,QAAQ,IACb,qBACE,eACI,oBAAoB,SAAS,MAAM,IACnC,iBAAiB,SAAS,MAAM,CACtC,GACA,KACF;EACF,CAAC;EACH,QAAQ,OAAO,YACb,OAAO,cAAc;GACnB,eAAe,MAAM,OAAO,SAAS,cAAc,UAAU;GAC7D,eAAe,MAAM,SAAS,SAAS,cAAc,UAAU;GAC/D,UAAW,CAAC,gBAAgB,CAAC,cAAe,MAAM,eAAe,KAAA,CAAS;GAE1E,OAAO,QAAQ,IACb,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,OAAO,eACjB,kBAAkB,SAAS,KAAK,IAChC,eAAe,SAAS,KAAK;IAEjC,OAAO,OAAO,aACZ,oBAAoB,sBAAsB,KAAK,GAC/C,OACF;GACF,CAAC,CACH;EACF,CAAC;EACH,SAAS,OAAO,YACd,OAAO,cAAc;GACnB,eAAe,MAAM,MAAM,SAAS,SAAS,cAAc,UAAU;GACrE,UAAW,CAAC,gBAAgB,CAAC,cAAe,MAAM,QAAQ,SAAS,WAAW;GAE9E,OAAO,QAAQ,IACb,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,OAAO,eACjB,mBACE,SACA,MAAM,OACN,MAAM,QAAQ,IAChB,IACA,gBAAgB,SAAS,MAAM,OAAO,MAAM,SAAS,cAAc,OAAO;IAE9E,OAAO,OAAO,aAAa,oBAAoB,mBAAmB,KAAK,GAAG,OAAO;GACnF,CAAC,CACH;EACF,CAAC;EACH,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,kBACnB,SACA,OACA,eAAe,CAAC,cAAc,IAAI,aAAa,CAAC,YAAY,IAAI,iBAClE;GAEA,OAAO,OAAO,aAAa,oBAAoB,sBAAsB,KAAK,GAAG,OAAO;EACtF,CAAC,CACH;CACJ,GACA,QACA,OACF;CAEF,MAAM,qBACJ,SACA,YAEA,gBACE,EACE,SAAS,UACP,QAAQ,IAAI,iBAAiB,SAAS,MAAM,MAAM,MAAM,oBAAoB,GAAG,KAAK,EACxF,GACA,EAAE,QAAQ,YAAY,GACtB,OACF;CAEF,MAAM,qBACJ,SACA,YAEA,gBACE,EACE,UAAU,UACR,QAAQ,IACN,OAAO,IAAI,yBAAyB,SAAS,KAAK,IAAI,UACpD,UAAU,KAAA,IACN,KAAA,IACA,oBAAoB,2BAA2B,KAAK,CAC1D,GACA,KACF,EACJ,GACA,EAAE,SAAS,aAAa,GACxB,OACF;CAEF,MAAM,wBACJ,SACA,SACA,mBACyC;EACzC,cAAc,OAAO,OAAO;GAC1B,UAAU,OAAO,OAAO,CAAC,cAAc,CAAU;GACjD,OAAO;GACP,qBAAqB;EACvB,CAAC;EACD,oBAAoB,uBAAuB,SAAS,SAAS,eAAe,IAAI;CAClF;CAEA,MAAM,mBACJ,QACA,MACA,kBAEA,OAAO,QAAQ,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,QAAQ,MAAM,IAAI,YACzE,OAAO,IAAI;EACT,WAAW;GACT,MAAM,WAAW,eAAe,OAAO;GAEvC,gBAAgB,UAAU,IAAI;GAC9B,IAAI,cAAc,SAAS,SAAS,UAAW,SAAiB,IAAI,YAAY,IAAI;GAEpF,OAAO;EACT;EACA,aAAa,0BAA0B,KAAK,CAAC,CAAC;CAChD,CAAC,CACH;CAEF,MAAM,gCACJ,UACA,QACA,kBAMA,OAAO,IAAI,gBAAgB,QAAQ,QAAQ,aAAa,IAAI,aAAa,EACvE,oBAAoB,kBAClB,SACA,qBAAqB,UAAU,YAAY,aAAa,CAC1D,EACF,EAAE;CAEJ,MAAM,sCACJ,UACA,QACA,kBAMA,OAAO,IAAI,gBAAgB,QAAQ,WAAW,aAAa,IAAI,aAAa,EAC1E,0BAA0B,kBACxB,SACA,qBAAqB,UAAU,YAAY,aAAa,CAC1D,EACF,EAAE;CAEJ,MAAM,gCACJ,UACA,QACA,kBAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,gBAAgB,QAAQ,aAAa,aAAa;EACzE,MAAM,QAAQ,OAAO;EAErB,OAAO,EACL,oBAAoB,uBAClB,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF,EACF;CACF,CAAC;CAEH,MAAM,iCACJ,UACA,QACA,kBAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,gBAAgB,QAAQ,gBAAgB,aAAa;EAC5E,MAAM,QAAQ,OAAO;EAErB,OAAO,qBACL,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF;CACF,CAAC;CAEH,MAAM,2BACJ,UACA,QACA,eACA,UAMA,OAAO,QAAQ,gBAAgB,QAAQ,aAAa,aAAa,IAAI,YACnE,OAAO,QAAQ,iBAAiB,UAC9B,2BACE,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,eAAe,EACd,oBAAoB,uBAClB,SACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UACG,IAAI,WAAW,QAAQ,CAAC,CACxB,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxD,GACA,aACF,EACF,IACA,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD,CACF;CAEF,MAAM,uCACJ,UACA,QACA,eACA,UAMA,OAAO,QAAQ,gBAAgB,QAAQ,gBAAgB,aAAa,IAAI,YACtE,OAAO,QAAQ,iBAAiB,UAC9B,2BACE,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,cACC,qBACE,SACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UACG,IAAI,WAAW,QAAQ,CAAC,CACxB,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxD,GACA,aACF,GACF,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD,CACF;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
1	+ {"version":3,"file":"target.mjs","names":[],"sources":["../../../src/internal/passkey/target.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\nimport { type PreparedCommit, LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n PasskeyConfigurationError,\n type PasskeyUnavailable,\n type PasskeyCredentials,\n type PasskeyEnrollmentContext,\n type PasskeyPersistence,\n type PreparePasskeyCommit,\n PasskeyAccess,\n PasskeyAssertionVerified,\n PasskeyCeremony,\n PasskeyClaim,\n PasskeyClaimDecision,\n PasskeyCleanupResult,\n PasskeyCredential,\n PasskeyEnrollmentSnapshot,\n PasskeyEvidence,\n PasskeyInstant,\n PasskeyIssueDecision,\n PasskeyModuleId,\n PasskeyProfile,\n PasskeyProtocolCredentialId,\n PasskeySettlement,\n PasskeyMethodPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport { SubjectId } from \"@yielded/auth/Schema\";\nimport { Effect, Schema } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PersistenceMappingError } from \"../mapping-error\";\nimport type {\n PasskeyCredentialServices,\n PasskeyEnrollmentContextServices,\n PasskeyMappingSource,\n PasskeyPersistenceServices,\n} from \"../models/passkey-model\";\nimport type { PasskeyRegistrationCeremonyServices } from \"../models/passkey-registration-ceremony-model\";\nimport type {\n TransactionCoordinatorError,\n TransactionExecution,\n TransactionTargetConfiguration,\n makeTransactionExecutionKernel,\n} from \"../transaction-execution-kernel\";\nimport type { makePasskeyCredentialsKernel } from \"./credentials\";\nimport type { makePasskeyFlowKernel } from \"./flow\";\nimport type { makePasskeyRegistrationCeremonyKernel } from \"./registration-ceremony\";\nimport { CurrentPasskeyTransaction } from \"./state\";\nimport type { makePasskeyStateKernel } from \"./state\";\n\nexport type PasskeyTargetConfiguration = TransactionTargetConfiguration<PasskeyUnavailable>;\n\nexport type PasskeyCoordinatorError<E> =\n \| TransactionCoordinatorError<E, PasskeyUnavailable>\n \| PasskeyConfigurationError\n \| PersistenceMappingError;\n\nexport type PasskeyExecution = TransactionExecution<\n PasskeyUnavailable,\n CurrentPasskeyTransaction,\n never\n>;\n\nexport const makePasskeyTargetKernel = (\n credentials: Pick<\n ReturnType<typeof makePasskeyCredentialsKernel>,\n \"captureEnrollmentContext\" \| \"lookupCredential\"\n >,\n flow: Pick<\n ReturnType<typeof makePasskeyFlowKernel>,\n \| \"assertionPurposes\"\n \| \"claimAssertion\"\n \| \"cleanupCeremonies\"\n \| \"contextAssertion\"\n \| \"issueAssertion\"\n \| \"settleAssertion\"\n >,\n registrationCeremony: Pick<\n ReturnType<typeof makePasskeyRegistrationCeremonyKernel>,\n \"claimRegistration\" \| \"contextRegistration\" \| \"settleRegistration\"\n >,\n state: Pick<\n ReturnType<typeof makePasskeyStateKernel>,\n \"captureMapping\" \| \"invariant\" \| \"nonce\" \| \"unavailable\" \| \"validateMapping\"\n >,\n execution: Pick<\n ReturnType<typeof makeTransactionExecutionKernel>,\n \| \"coordinateTransactionOwner\"\n \| \"makeTransactionExecution\"\n \| \"sqlClientTransactionStandaloneGuard\"\n >,\n) => {\n const { captureEnrollmentContext, lookupCredential } = credentials;\n\n const {\n assertionPurposes,\n claimAssertion,\n cleanupCeremonies,\n contextAssertion,\n issueAssertion,\n settleAssertion,\n } = flow;\n\n const { claimRegistration, contextRegistration, settleRegistration } = registrationCeremony;\n const { captureMapping, nonce, unavailable, validateMapping } = state;\n const invariant: (value: unknown) => asserts value = state.invariant;\n\n const {\n coordinateTransactionOwner,\n makeTransactionExecution,\n sqlClientTransactionStandaloneGuard,\n } = execution;\n\n const sqlClientPasskeyStandaloneGuard = (\n database: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n ) => sqlClientTransactionStandaloneGuard(unavailable, database);\n\n const emptyHooks: LifecycleHooks[\"Service\"] = {\n before: () => Effect.void,\n after: () => Effect.succeed([]),\n };\n\n const makePasskeyExecution = (\n database: Parameters<typeof makeTransactionExecution>[1],\n hooks: LifecycleHooks[\"Service\"],\n configuration: PasskeyTargetConfiguration,\n ): PasskeyExecution => {\n const execution = makeTransactionExecution(\n CurrentPasskeyTransaction,\n database,\n configuration,\n unavailable,\n nonce,\n );\n\n return {\n ...execution,\n run: (operation, mutation) =>\n execution.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n };\n };\n\n const issueInput = Schema.Struct({ ceremony: PasskeyCeremony, policy: PasskeyMethodPolicy });\n\n const claimInput = Schema.Struct({\n access: PasskeyAccess,\n policy: PasskeyMethodPolicy,\n ceremony: PasskeyCeremony,\n claimId: PasskeyClaim.fields.claimId,\n credential: Schema.optionalKey(PasskeyCredential),\n });\n\n const settleInput = Schema.Struct({\n claim: PasskeyClaim,\n nowMillis: PasskeyInstant,\n outcome: Schema.Union([\n Schema.TaggedStruct(\"Rejected\", {}),\n Schema.TaggedStruct(\"Ambiguous\", {}),\n Schema.TaggedStruct(\"Assertion\", {\n credential: PasskeyCredential,\n assertion: PasskeyAssertionVerified,\n evidence: PasskeyEvidence,\n }),\n ]),\n });\n\n const cleanupInput = Schema.Struct({\n moduleId: PasskeyModuleId,\n nowMillis: PasskeyInstant,\n limit: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1000 })),\n });\n\n const lookupInput = Schema.Struct({\n rpId: PasskeyProfile.fields.rpId,\n protocolCredentialId: PasskeyProtocolCredentialId,\n });\n\n const contextInput = Schema.Struct({\n moduleId: PasskeyModuleId,\n rpId: PasskeyProfile.fields.rpId,\n subjectId: SubjectId,\n });\n\n const inputs = {\n issue: issueInput,\n context: PasskeyAccess,\n claim: claimInput,\n settle: settleInput,\n cleanup: cleanupInput,\n };\n\n const capturedService = <S>(\n service: S,\n schemas: Record<string, Schema.Codec<any, any, never, never>>,\n execute: PasskeyExecution,\n ): S =>\n Object.freeze(\n Object.fromEntries(\n Object.entries(\n service as Record<string, (...args: any[]) => Effect.Effect<any, PasskeyUnavailable>>,\n ).map(([name, method]) => [\n name,\n (original: any, prepare?: any) =>\n Effect.suspend(() => {\n invariant(execute.active());\n const input = snapshotPasskeySync(schemas[name]!, original);\n\n return method(input, prepare);\n }).pipe(\n Effect.onExit((exit) =>\n Effect.sync(() => {\n if (exit._tag === \"Failure\") execute.poison();\n }),\n ),\n Effect.catchDefect(() => Effect.fail(unavailable())),\n ),\n ]),\n ),\n ) as S;\n\n const prepareValue = <Value, A>(\n value: Value,\n prepare: PreparePasskeyCommit<Value, A>,\n ): Effect.Effect<PreparedCommit<A>, never, CurrentPasskeyTransaction> =>\n Effect.flatMap(CurrentPasskeyTransaction, (owner) =>\n Effect.sync(() => {\n owner.guards.push(owner.journal.prepare(undefined));\n const receipt = prepare(value, owner.journal);\n\n invariant(\n receipt !== null &&\n typeof receipt === \"object\" &&\n receipt._tag === \"PreparedCommit\" &&\n typeof receipt.read === \"object\" &&\n Effect.isEffect(receipt.read),\n );\n owner.guards.push(receipt);\n\n return receipt;\n }),\n );\n\n const requirePurpose = (purpose: string, registration: boolean, enrollment = false) =>\n invariant(\n enrollment\n ? purpose === \"enrollment\"\n : registration\n ? purpose === \"registration\"\n : assertionPurposes.some((supported) => supported === purpose),\n );\n\n /* Context is advisory. Retain observations and final predicates without taking\n * later-ranked locks before a subsequent mutation acquires its full lock set. /\n const observationalContext = <A, E, R>(operation: Effect.Effect<A, E, R>) =>\n Effect.flatMap(CurrentPasskeyTransaction, (owner) =>\n operation.pipe(\n Effect.provideService(CurrentPasskeyTransaction, {\n ...owner,\n read: (table, where, options) => owner.read(table, where, { ...options, lock: false }),\n }),\n ),\n );\n\n const makePasskeyPersistence = (\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n registration = false,\n enrollment = false,\n ): PasskeyPersistence[\"Service\"] =>\n capturedService<PasskeyPersistence[\"Service\"]>(\n {\n issue: (input, prepare) =>\n Effect.suspend(() => {\n invariant(!registration && !enrollment);\n requirePurpose(input.ceremony.purpose, false);\n\n return execute.run(\n Effect.gen(function () {\n const value = yield* issueAssertion(mapping, input.ceremony, input.policy);\n\n return yield* prepareValue(\n snapshotPasskeySync(PasskeyIssueDecision, value),\n prepare,\n );\n }),\n );\n }),\n context: (access) =>\n Effect.suspend(() => {\n requirePurpose(access.purpose, registration, enrollment);\n\n return execute.run(\n observationalContext(\n registration\n ? contextRegistration(mapping, access)\n : contextAssertion(mapping, access),\n ),\n false,\n );\n }),\n claim: (input, prepare) =>\n Effect.suspend(() => {\n requirePurpose(input.access.purpose, registration, enrollment);\n requirePurpose(input.ceremony.purpose, registration, enrollment);\n invariant((!registration && !enrollment) \|\| input.credential === undefined);\n\n return execute.run(\n Effect.gen(function* () {\n const value = yield* registration\n ? claimRegistration(mapping, input)\n : claimAssertion(mapping, input);\n\n return yield* prepareValue(\n snapshotPasskeySync(PasskeyClaimDecision, value),\n prepare,\n );\n }),\n );\n }),\n settle: (input, prepare) =>\n Effect.suspend(() => {\n requirePurpose(input.claim.ceremony.purpose, registration, enrollment);\n invariant((!registration && !enrollment) \|\| input.outcome._tag !== \"Assertion\");\n\n return execute.run(\n Effect.gen(function* () {\n const value = yield* registration\n ? settleRegistration(\n mapping,\n input.claim,\n input.outcome._tag as \"Rejected\" \| \"Ambiguous\",\n )\n : settleAssertion(mapping, input.claim, input.outcome, configuration.dialect);\n\n return yield* prepareValue(snapshotPasskeySync(PasskeySettlement, value), prepare);\n }),\n );\n }),\n cleanup: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n const value = yield* cleanupCeremonies(\n mapping,\n input,\n registration ? [\"registration\"] : enrollment ? [\"enrollment\"] : assertionPurposes,\n );\n\n return yield* prepareValue(snapshotPasskeySync(PasskeyCleanupResult, value), prepare);\n }),\n ),\n },\n inputs,\n execute,\n );\n\n const credentialService = (\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyCredentials[\"Service\"] =>\n capturedService<PasskeyCredentials[\"Service\"]>(\n {\n lookup: (input) =>\n execute.run(lookupCredential(mapping, input.rpId, input.protocolCredentialId), false),\n },\n { lookup: lookupInput },\n execute,\n );\n\n const enrollmentService = (\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyEnrollmentContext[\"Service\"] =>\n capturedService<PasskeyEnrollmentContext[\"Service\"]>(\n {\n capture: (input) =>\n execute.run(\n Effect.map(captureEnrollmentContext(mapping, input), (value) =>\n value === undefined\n ? undefined\n : snapshotPasskeySync(PasskeyEnrollmentSnapshot, value),\n ),\n false,\n ),\n },\n { capture: contextInput },\n execute,\n );\n\n const registrationServices = (\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n ): PasskeyRegistrationCeremonyServices => ({\n capabilities: Object.freeze({\n purposes: Object.freeze([\"registration\"] as const),\n issue: \"registration-authority\",\n assertionSettlement: false,\n }),\n passkeyPersistence: makePasskeyPersistence(mapping, execute, configuration, true),\n });\n\n const capturedMapping = <M, RSetup>(\n source: PasskeyMappingSource<M, RSetup>,\n kind: \"read\" \| \"context\" \| \"assertion\" \| \"registration\",\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<M, PasskeyConfigurationError \| PersistenceMappingError, RSetup> =>\n Effect.flatMap(Effect.isEffect(source) ? source : Effect.succeed(source), (mapping) =>\n Effect.try({\n try: () => {\n const captured = captureMapping(mapping);\n\n validateMapping(captured, kind);\n if (configuration.mode === \"batch\") invariant((captured as any).d1?.primary === true);\n\n return captured;\n },\n catch: () => PasskeyConfigurationError.make({}),\n }),\n );\n\n const makeTargetPasskeyCredentials = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyCredentialServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup\n > =>\n Effect.map(capturedMapping(source, \"read\", configuration), (mapping) => ({\n passkeyCredentials: credentialService(\n mapping,\n makePasskeyExecution(database, emptyHooks, configuration),\n ),\n }));\n\n const makeTargetPasskeyEnrollmentContext = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyEnrollmentContextServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup\n > =>\n Effect.map(capturedMapping(source, \"context\", configuration), (mapping) => ({\n passkeyEnrollmentContext: enrollmentService(\n mapping,\n makePasskeyExecution(database, emptyHooks, configuration),\n ),\n }));\n\n const makeTargetPasskeyPersistence = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyPersistenceServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup \| LifecycleHooks\n > =>\n Effect.gen(function* () {\n const mapping = yield* capturedMapping(source, \"assertion\", configuration);\n const hooks = yield* LifecycleHooks;\n\n return {\n passkeyPersistence: makePasskeyPersistence(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n ),\n };\n });\n\n const makeTargetPasskeyRegistration = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ): Effect.Effect<\n PasskeyRegistrationCeremonyServices,\n PasskeyConfigurationError \| PersistenceMappingError,\n RSetup \| LifecycleHooks\n > =>\n Effect.gen(function* () {\n const mapping = yield* capturedMapping(source, \"registration\", configuration);\n const hooks = yield* LifecycleHooks;\n\n return registrationServices(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n );\n });\n\n const coordinateTargetPasskey = <M, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n owner: (\n transaction: Transaction,\n services: PasskeyPersistenceServices,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.flatMap(capturedMapping(source, \"assertion\", configuration), (mapping) =>\n Effect.flatMap(LifecycleHooks, (hooks) =>\n coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execution) => ({\n passkeyPersistence: makePasskeyPersistence(\n mapping,\n {\n ...execution,\n run: (operation, mutation) =>\n execution\n .run(operation, mutation)\n .pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n }),\n owner,\n ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n ),\n );\n\n const coordinateTargetPasskeyRegistration = <M, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n owner: (\n transaction: Transaction,\n services: PasskeyRegistrationCeremonyServices,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.flatMap(capturedMapping(source, \"registration\", configuration), (mapping) =>\n Effect.flatMap(LifecycleHooks, (hooks) =>\n coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execution) =>\n registrationServices(\n mapping,\n {\n ...execution,\n run: (operation, mutation) =>\n execution\n .run(operation, mutation)\n .pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n owner,\n ).pipe(Effect.provideService(LifecycleHooks, hooks)),\n ),\n );\n\n return {\n sqlClientPasskeyStandaloneGuard,\n makePasskeyExecution,\n capturedService,\n prepareValue,\n observationalContext,\n makePasskeyPersistence,\n capturedMapping,\n makeTargetPasskeyCredentials,\n makeTargetPasskeyEnrollmentContext,\n makeTargetPasskeyPersistence,\n makeTargetPasskeyRegistration,\n coordinateTargetPasskey,\n coordinateTargetPasskeyRegistration,\n };\n};\n"],"mappings":";;;;;;AAiEA,MAAa,2BACX,aAIA,MASA,sBAIA,OAIA,cAMG;CACH,MAAM,EAAE,0BAA0B,qBAAqB;CAEvD,MAAM,EACJ,mBACA,gBACA,mBACA,kBACA,gBACA,oBACE;CAEJ,MAAM,EAAE,mBAAmB,qBAAqB,uBAAuB;CACvE,MAAM,EAAE,gBAAgB,OAAO,aAAa,oBAAoB;CAChE,MAAM,YAA+C,MAAM;CAE3D,MAAM,EACJ,4BACA,0BACA,wCACE;CAEJ,MAAM,mCACJ,aACG,oCAAoC,aAAa,QAAQ;CAE9D,MAAM,aAAwC;EAC5C,cAAc,OAAO;EACrB,aAAa,OAAO,QAAQ,CAAC,CAAC;CAChC;CAEA,MAAM,wBACJ,UACA,OACA,kBACqB;EACrB,MAAM,YAAY,yBAChB,2BACA,UACA,eACA,aACA,KACF;EAEA,OAAO;GACL,GAAG;GACH,MAAM,WAAW,aACf,UAAU,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;EACxF;CACF;CAEA,MAAM,aAAa,OAAO,OAAO;EAAE,UAAU;EAAiB,QAAQ;CAAoB,CAAC;CAE3F,MAAM,aAAa,OAAO,OAAO;EAC/B,QAAQ;EACR,QAAQ;EACR,UAAU;EACV,SAAS,aAAa,OAAO;EAC7B,YAAY,OAAO,YAAY,iBAAiB;CAClD,CAAC;CAED,MAAM,cAAc,OAAO,OAAO;EAChC,OAAO;EACP,WAAW;EACX,SAAS,OAAO,MAAM;GACpB,OAAO,aAAa,YAAY,CAAC,CAAC;GAClC,OAAO,aAAa,aAAa,CAAC,CAAC;GACnC,OAAO,aAAa,aAAa;IAC/B,YAAY;IACZ,WAAW;IACX,UAAU;GACZ,CAAC;EACH,CAAC;CACH,CAAC;CAED,MAAM,eAAe,OAAO,OAAO;EACjC,UAAU;EACV,WAAW;EACX,OAAO,OAAO,IAAI,MAAM,OAAO,UAAU;GAAE,SAAS;GAAG,SAAS;EAAK,CAAC,CAAC;CACzE,CAAC;CAED,MAAM,cAAc,OAAO,OAAO;EAChC,MAAM,eAAe,OAAO;EAC5B,sBAAsB;CACxB,CAAC;CAED,MAAM,eAAe,OAAO,OAAO;EACjC,UAAU;EACV,MAAM,eAAe,OAAO;EAC5B,WAAW;CACb,CAAC;CAED,MAAM,SAAS;EACb,OAAO;EACP,SAAS;EACT,OAAO;EACP,QAAQ;EACR,SAAS;CACX;CAEA,MAAM,mBACJ,SACA,SACA,YAEA,OAAO,OACL,OAAO,YACL,OAAO,QACL,OACF,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CACxB,OACC,UAAe,YACd,OAAO,cAAc;EACnB,UAAU,QAAQ,OAAO,CAAC;EAG1B,OAAO,OAFO,oBAAoB,QAAQ,OAAQ,QAEhC,GAAG,OAAO;CAC9B,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,SACb,OAAO,WAAW;EAChB,IAAI,KAAK,SAAS,WAAW,QAAQ,OAAO;CAC9C,CAAC,CACH,GACA,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CACrD,CACJ,CAAC,CACH,CACF;CAEF,MAAM,gBACJ,OACA,YAEA,OAAO,QAAQ,4BAA4B,UACzC,OAAO,WAAW;EAChB,MAAM,OAAO,KAAK,MAAM,QAAQ,QAAQ,KAAA,CAAS,CAAC;EAClD,MAAM,UAAU,QAAQ,OAAO,MAAM,OAAO;EAE5C,UACE,YAAY,QACV,OAAO,YAAY,YACnB,QAAQ,SAAS,oBACjB,OAAO,QAAQ,SAAS,YACxB,OAAO,SAAS,QAAQ,IAAI,CAChC;EACA,MAAM,OAAO,KAAK,OAAO;EAEzB,OAAO;CACT,CAAC,CACH;CAEF,MAAM,kBAAkB,SAAiB,cAAuB,aAAa,UAC3E,UACE,aACI,YAAY,eACZ,eACE,YAAY,iBACZ,kBAAkB,MAAM,cAAc,cAAc,OAAO,CACnE;;;CAIF,MAAM,wBAAiC,cACrC,OAAO,QAAQ,4BAA4B,UACzC,UAAU,KACR,OAAO,eAAe,2BAA2B;EAC/C,GAAG;EACH,OAAO,OAAO,OAAO,YAAY,MAAM,KAAK,OAAO,OAAO;GAAE,GAAG;GAAS,MAAM;EAAM,CAAC;CACvF,CAAC,CACH,CACF;CAEF,MAAM,0BACJ,SACA,SACA,eACA,eAAe,OACf,aAAa,UAEb,gBACE;EACE,QAAQ,OAAO,YACb,OAAO,cAAc;GACnB,UAAU,CAAC,gBAAgB,CAAC,UAAU;GACtC,eAAe,MAAM,SAAS,SAAS,KAAK;GAE5C,OAAO,QAAQ,IACb,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,OAAO,eAAe,SAAS,MAAM,UAAU,MAAM,MAAM;IAEzE,OAAO,OAAO,aACZ,oBAAoB,sBAAsB,KAAK,GAC/C,OACF;GACF,CAAC,CACH;EACF,CAAC;EACH,UAAU,WACR,OAAO,cAAc;GACnB,eAAe,OAAO,SAAS,cAAc,UAAU;GAEvD,OAAO,QAAQ,IACb,qBACE,eACI,oBAAoB,SAAS,MAAM,IACnC,iBAAiB,SAAS,MAAM,CACtC,GACA,KACF;EACF,CAAC;EACH,QAAQ,OAAO,YACb,OAAO,cAAc;GACnB,eAAe,MAAM,OAAO,SAAS,cAAc,UAAU;GAC7D,eAAe,MAAM,SAAS,SAAS,cAAc,UAAU;GAC/D,UAAW,CAAC,gBAAgB,CAAC,cAAe,MAAM,eAAe,KAAA,CAAS;GAE1E,OAAO,QAAQ,IACb,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,OAAO,eACjB,kBAAkB,SAAS,KAAK,IAChC,eAAe,SAAS,KAAK;IAEjC,OAAO,OAAO,aACZ,oBAAoB,sBAAsB,KAAK,GAC/C,OACF;GACF,CAAC,CACH;EACF,CAAC;EACH,SAAS,OAAO,YACd,OAAO,cAAc;GACnB,eAAe,MAAM,MAAM,SAAS,SAAS,cAAc,UAAU;GACrE,UAAW,CAAC,gBAAgB,CAAC,cAAe,MAAM,QAAQ,SAAS,WAAW;GAE9E,OAAO,QAAQ,IACb,OAAO,IAAI,aAAa;IACtB,MAAM,QAAQ,OAAO,eACjB,mBACE,SACA,MAAM,OACN,MAAM,QAAQ,IAChB,IACA,gBAAgB,SAAS,MAAM,OAAO,MAAM,SAAS,cAAc,OAAO;IAE9E,OAAO,OAAO,aAAa,oBAAoB,mBAAmB,KAAK,GAAG,OAAO;GACnF,CAAC,CACH;EACF,CAAC;EACH,UAAU,OAAO,YACf,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,kBACnB,SACA,OACA,eAAe,CAAC,cAAc,IAAI,aAAa,CAAC,YAAY,IAAI,iBAClE;GAEA,OAAO,OAAO,aAAa,oBAAoB,sBAAsB,KAAK,GAAG,OAAO;EACtF,CAAC,CACH;CACJ,GACA,QACA,OACF;CAEF,MAAM,qBACJ,SACA,YAEA,gBACE,EACE,SAAS,UACP,QAAQ,IAAI,iBAAiB,SAAS,MAAM,MAAM,MAAM,oBAAoB,GAAG,KAAK,EACxF,GACA,EAAE,QAAQ,YAAY,GACtB,OACF;CAEF,MAAM,qBACJ,SACA,YAEA,gBACE,EACE,UAAU,UACR,QAAQ,IACN,OAAO,IAAI,yBAAyB,SAAS,KAAK,IAAI,UACpD,UAAU,KAAA,IACN,KAAA,IACA,oBAAoB,2BAA2B,KAAK,CAC1D,GACA,KACF,EACJ,GACA,EAAE,SAAS,aAAa,GACxB,OACF;CAEF,MAAM,wBACJ,SACA,SACA,mBACyC;EACzC,cAAc,OAAO,OAAO;GAC1B,UAAU,OAAO,OAAO,CAAC,cAAc,CAAU;GACjD,OAAO;GACP,qBAAqB;EACvB,CAAC;EACD,oBAAoB,uBAAuB,SAAS,SAAS,eAAe,IAAI;CAClF;CAEA,MAAM,mBACJ,QACA,MACA,kBAEA,OAAO,QAAQ,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,QAAQ,MAAM,IAAI,YACzE,OAAO,IAAI;EACT,WAAW;GACT,MAAM,WAAW,eAAe,OAAO;GAEvC,gBAAgB,UAAU,IAAI;GAC9B,IAAI,cAAc,SAAS,SAAS,UAAW,SAAiB,IAAI,YAAY,IAAI;GAEpF,OAAO;EACT;EACA,aAAa,0BAA0B,KAAK,CAAC,CAAC;CAChD,CAAC,CACH;CAEF,MAAM,gCACJ,UACA,QACA,kBAMA,OAAO,IAAI,gBAAgB,QAAQ,QAAQ,aAAa,IAAI,aAAa,EACvE,oBAAoB,kBAClB,SACA,qBAAqB,UAAU,YAAY,aAAa,CAC1D,EACF,EAAE;CAEJ,MAAM,sCACJ,UACA,QACA,kBAMA,OAAO,IAAI,gBAAgB,QAAQ,WAAW,aAAa,IAAI,aAAa,EAC1E,0BAA0B,kBACxB,SACA,qBAAqB,UAAU,YAAY,aAAa,CAC1D,EACF,EAAE;CAEJ,MAAM,gCACJ,UACA,QACA,kBAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,gBAAgB,QAAQ,aAAa,aAAa;EACzE,MAAM,QAAQ,OAAO;EAErB,OAAO,EACL,oBAAoB,uBAClB,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF,EACF;CACF,CAAC;CAEH,MAAM,iCACJ,UACA,QACA,kBAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,gBAAgB,QAAQ,gBAAgB,aAAa;EAC5E,MAAM,QAAQ,OAAO;EAErB,OAAO,qBACL,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF;CACF,CAAC;CAEH,MAAM,2BACJ,UACA,QACA,eACA,UAMA,OAAO,QAAQ,gBAAgB,QAAQ,aAAa,aAAa,IAAI,YACnE,OAAO,QAAQ,iBAAiB,UAC9B,2BACE,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,eAAe,EACd,oBAAoB,uBAClB,SACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UACG,IAAI,WAAW,QAAQ,CAAC,CACxB,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxD,GACA,aACF,EACF,IACA,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD,CACF;CAEF,MAAM,uCACJ,UACA,QACA,eACA,UAMA,OAAO,QAAQ,gBAAgB,QAAQ,gBAAgB,aAAa,IAAI,YACtE,OAAO,QAAQ,iBAAiB,UAC9B,2BACE,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,cACC,qBACE,SACA;EACE,GAAG;EACH,MAAM,WAAW,aACf,UACG,IAAI,WAAW,QAAQ,CAAC,CACxB,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACxD,GACA,aACF,GACF,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,CACrD,CACF;CAEF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/internal/passkey/write-state.mjs CHANGED Viewed

@@ -1,7 +1,8 @@
 import { CurrentPasskeyTransaction } from "./state.mjs";
-import { DateTime, Effect, Encoding, Schema } from "effect";
+import { DateTime, Effect, Schema } from "effect";
 import { PasskeyBegin, PasskeyCredential, PasskeyCredentialSummary, PasskeyDescriptor, PasskeyLabel, PasskeyManagementPolicy, PasskeyModuleId, PasskeyProfile, PasskeyRequirement, PasskeyRevision, PasskeyUserHandle, snapshotPasskeySync } from "@yielded/auth/Passkey";
 import { sha256 } from "@noble/hashes/sha2.js";
+import { Base64Url } from "effect/encoding";
 import { TokenDigest } from "@yielded/auth/Schema";
 import { SessionInvalidationWindow } from "@yielded/auth/Sessions";
 //#region src/internal/passkey/write-state.ts
@@ -19,7 +20,7 @@ const makePasskeyWriteStateKernel = (operations, state, transactions) => {
 			}
 		};
 	};
-	const digest = (schema, value) => TokenDigest.make(Encoding.encodeBase64Url(sha256(new TextEncoder().encode(jsonStorage(schema).encode(value)))));
+	const digest = (schema, value) => TokenDigest.make(Base64Url.encode(sha256(new TextEncoder().encode(jsonStorage(schema).encode(value)))));
 	const currentSubject = Effect.fn("passkey.currentWriteSubject")(function* (mapping, subjectId) {
 		const owner = yield* CurrentPasskeyTransaction;
 		const read = mapping.read;

package/dist/internal/passkey/write-state.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"write-state.mjs","names":[],"sources":["../../../src/internal/passkey/write-state.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\n// oxlint-disable-next-line import/extensions -- Noble exposes explicit .js subpaths.\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n type PasskeyActionAuthorization,\n type PasskeyCeremony,\n PasskeyBegin,\n PasskeyCredential,\n PasskeyCredentialSummary,\n PasskeyDescriptor,\n PasskeyLabel,\n PasskeyModuleId,\n PasskeyProfile,\n PasskeyRequirement,\n PasskeyRevision,\n PasskeyUserHandle,\n PasskeyManagementPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport { TokenDigest, type SubjectId } from \"@yielded/auth/Schema\";\nimport { SessionInvalidationWindow } from \"@yielded/auth/Sessions\";\nimport { DateTime, Effect, Encoding, Schema } from \"effect\";\n\nimport type { PersistenceMappingError } from \"../mapping-error\";\nimport type { QueryOperations } from \"../query-operations\";\nimport type { makeTransactionKernel } from \"../transaction-kernel\";\nimport { CurrentPasskeyTransaction } from \"./state\";\nimport type { makePasskeyStateKernel } from \"./state\";\n\nexport interface WriteSubject {\n readonly subjectId: SubjectId;\n readonly nativeId: any;\n readonly row: Record<string, any>;\n readonly revision: typeof PasskeyRevision.Type;\n}\n\nexport const makePasskeyWriteStateKernel = (\n operations: QueryOperations,\n state: Pick<\n ReturnType<typeof makePasskeyStateKernel>,\n \| \"col\"\n \| \"copiedRow\"\n \| \"credentialKey\"\n \| \"equal\"\n \| \"handleKey\"\n \| \"invariant\"\n \| \"mappedColumns\"\n \| \"sameCredential\"\n \| \"sameRevision\"\n \| \"subjectScope\"\n >,\n transactions: Pick<ReturnType<typeof makeTransactionKernel>, \"both\">,\n) => {\n const { sql } = operations;\n\n const {\n col,\n copiedRow,\n credentialKey,\n equal,\n handleKey,\n mappedColumns,\n sameCredential,\n sameRevision,\n subjectScope,\n } = state;\n\n const invariant: (value: unknown) => asserts value = state.invariant;\n const { both } = transactions;\n\n const jsonStorage = <S extends Schema.Codec<unknown, unknown, never, never>>(schema: S) => {\n const codec = Schema.fromJsonString(Schema.toCodecJson(Schema.toType(schema)));\n\n return {\n encode: (value: S[\"Type\"]) => Schema.encodeSync(codec)(snapshotPasskeySync(schema, value)),\n decode: (text: unknown): S[\"Type\"] => {\n // oxlint-disable-next-line no-restricted-properties -- persisted private JSON enters through its schema.\n return Schema.decodeUnknownSync(codec)(text);\n },\n };\n };\n\n const digest = <S extends Schema.Codec<unknown, unknown, never, never>>(\n schema: S,\n value: S[\"Type\"],\n ) =>\n TokenDigest.make(\n Encoding.encodeBase64Url(sha256(new TextEncoder().encode(jsonStorage(schema).encode(value)))),\n );\n\n const currentSubject = Effect.fn(\"passkey.currentWriteSubject\")(function (\n mapping: any,\n subjectId: SubjectId,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const read = mapping.read;\n const table = read.subject;\n const nativeId = read.subjectIds.toNative(subjectId);\n\n invariant(read.subjectIds.toSubject(nativeId) === subjectId);\n\n const row = (yield* owner.read(table.table, equal(table.table, { [table.id]: nativeId }), {\n limit: 1,\n columns: [\n ...new Set<string>([\n table.id,\n table.status,\n table.securityRevision,\n ...mapping.write.policy.subjectColumns,\n ]),\n ],\n })).rows[0];\n\n if (row === undefined \|\| !table.isActiveStatus(row[table.status])) return undefined;\n invariant(read.subjectIds.equals(table.decodeId(copiedRow(row)), nativeId));\n const active = sql`exists(select 1 from ${table.table} where ${both(equal(table.table, { [table.id]: nativeId }), table.activeCondition)})`;\n\n if (!(yield* owner.check(active))) return undefined;\n owner.postconditions.push(active);\n const factor = read.authority;\n\n const factors = (yield* owner.read(\n factor.table,\n both(equal(factor.table, { [factor.subjectId]: nativeId }), factor.activeCondition),\n {\n limit: 64,\n columns: mappedColumns(factor),\n orderBy: col(factor.table, factor.credentialId),\n },\n )).rows;\n\n const revision = snapshotPasskeySync(PasskeyRevision, {\n subjectId,\n securityRevision: row[table.securityRevision],\n credentials: factors.map((value) => ({\n credentialId: value[factor.credentialId],\n revision: value[factor.revision],\n })),\n });\n\n invariant(\n new Set(revision.credentials.map((item) => item.credentialId)).size ===\n revision.credentials.length,\n );\n\n return { subjectId, nativeId, row, revision };\n });\n\n const credentialRows = Effect.fn(\"passkey.writeCredentialRows\")(function* (\n mapping: any,\n subject: WriteSubject,\n rpId?: string,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const table = mapping.read.credential;\n\n return (yield* owner.read(\n table.table,\n both(\n equal(table.table, { [table.subjectId]: subject.nativeId }),\n table.activeCondition,\n rpId === undefined ? undefined : equal(table.table, { [table.rpId]: rpId }),\n ),\n { limit: 64, orderBy: col(table.table, table.credentialId) },\n )).rows;\n });\n\n const summary = (mapping: any, row: any) => {\n const table = mapping.read.credential;\n const write = mapping.write.credential;\n const decoded = table.decode(copiedRow(row));\n\n return snapshotPasskeySync(PasskeyCredentialSummary, {\n credentialId: decoded.credentialId,\n name: row[write.name],\n primarySignIn: decoded.primarySignIn,\n createdAtMillis: mapping.clock.decodeInstant(row[write.createdAt]),\n ...(row[mapping.telemetry.lastUsedAt] === null \|\|\n row[mapping.telemetry.lastUsedAt] === undefined\n ? {}\n : { lastUsedAtMillis: mapping.clock.decodeInstant(row[mapping.telemetry.lastUsedAt]) }),\n });\n };\n\n const ownedCredential = Effect.fn(\"passkey.ownedWriteCredential\")(function* (\n mapping: any,\n subject: WriteSubject,\n row: any,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const read = mapping.read;\n const table = read.credential;\n\n const decoded = snapshotPasskeySync(PasskeyCredential, {\n ...table.decode(copiedRow(row)),\n revision: subject.revision,\n active: true,\n });\n\n invariant(\n decoded.credentialId === row[table.credentialId] &&\n decoded.profile.rpId === decoded.rpId &&\n read.subjectIds.equals(table.decodeSubjectId(copiedRow(row)), subject.nativeId),\n );\n const ownership = read.credentialOwnership;\n const key = credentialKey(decoded.rpId, decoded.protocolCredentialId);\n\n const tuple = (yield* owner.read(\n ownership.table,\n equal(ownership.table, { [ownership.credentialKey]: key }),\n { limit: 1, columns: mappedColumns(ownership) },\n )).rows[0];\n\n if (\n tuple === undefined \|\|\n !ownership.isOwnedState(tuple[ownership.state]) \|\|\n !read.subjectIds.equals(ownership.decodeSubjectId(copiedRow(tuple)), subject.nativeId)\n )\n return undefined;\n invariant(\n tuple[ownership.rpId] === decoded.rpId &&\n tuple[ownership.protocolCredentialId] === decoded.protocolCredentialId &&\n tuple[ownership.credentialId] === decoded.credentialId &&\n row[table.credentialKey] === key,\n );\n const handle = read.handleOwnership;\n const hashedHandle = handleKey(decoded.rpId, decoded.userHandle);\n\n const held = (yield* owner.read(\n handle.table,\n equal(handle.table, { [handle.handleKey]: hashedHandle }),\n { limit: 1, columns: mappedColumns(handle) },\n )).rows[0];\n\n if (\n held === undefined \|\|\n !handle.isOwnedState(held[handle.state]) \|\|\n !read.subjectIds.equals(handle.decodeSubjectId(copiedRow(held)), subject.nativeId)\n )\n return undefined;\n invariant(\n held[handle.rpId] === decoded.rpId &&\n held[handle.userHandle] === decoded.userHandle &&\n row[table.handleKey] === hashedHandle,\n );\n invariant(\n subject.revision.credentials.some(\n (item) =>\n item.credentialId === decoded.credentialId &&\n item.revision === row[table.credentialRevision],\n ),\n );\n\n return decoded;\n });\n\n const managementPolicy = (mapping: any, subject: WriteSubject) =>\n snapshotPasskeySync(\n PasskeyManagementPolicy,\n mapping.write.policy.management(copiedRow(subject.row)),\n );\n\n const metadataAllowed = Effect.fn(\"passkey.metadataAllowed\")(function* (\n mapping: any,\n subject: WriteSubject,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const condition = mapping.write.policy.metadata(subject.nativeId);\n const allowed = yield* owner.check(condition);\n\n if (allowed) owner.postconditions.push(condition);\n\n return allowed;\n });\n\n const enrollmentDigest = (ceremony: PasskeyCeremony) => {\n invariant(ceremony.context._tag === \"Enrollment\");\n const context = ceremony.context;\n\n return digest(\n Schema.Tuple([\n PasskeyModuleId,\n Schema.Literal(\"enrollment\"),\n Schema.Struct({ ...PasskeyBegin.fields, name: PasskeyLabel }),\n PasskeyProfile,\n PasskeyRevision,\n PasskeyUserHandle,\n Schema.Array(PasskeyDescriptor),\n ]),\n [\n ceremony.moduleId,\n \"enrollment\",\n {\n flowId: ceremony.flowId,\n commandId: ceremony.commandId,\n profileId: ceremony.profile.profileId,\n name: context.name,\n },\n ceremony.profile,\n context.revision,\n context.userHandle,\n ceremony.allowedCredentials,\n ],\n );\n };\n\n const removeDigest = (moduleId: string, commandId: string, credential: PasskeyCredential) =>\n digest(\n Schema.Tuple([\n PasskeyModuleId,\n Schema.Literal(\"remove\"),\n PasskeyBegin.fields.commandId,\n PasskeyCredential,\n ]),\n [\n PasskeyModuleId.make(moduleId),\n \"remove\",\n PasskeyBegin.fields.commandId.make(commandId),\n credential,\n ],\n );\n\n const authorizeAction = Effect.fn(\"passkey.authorizeWriteAction\")(function* (\n mapping: any,\n subject: WriteSubject,\n authorization: PasskeyActionAuthorization,\n expected: {\n readonly action: PasskeyActionAuthorization[\"challenge\"][\"action\"];\n readonly commandId: string;\n readonly flowId: string;\n readonly bindingDigest: string;\n readonly revision: typeof PasskeyRevision.Type;\n },\n policy: PasskeyManagementPolicy,\n original?: typeof PasskeyRequirement.Type,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const { challenge, evidence } = authorization;\n\n if (\n challenge.moduleId !== mapping.moduleId \|\|\n challenge.action !== expected.action \|\|\n challenge.commandId !== expected.commandId \|\|\n challenge.flowId !== expected.flowId \|\|\n challenge.bindingDigest !== expected.bindingDigest \|\|\n evidence.flowId !== expected.flowId \|\|\n evidence.bindingDigest !== expected.bindingDigest \|\|\n !sameRevision(challenge.revision, expected.revision) \|\|\n subject.revision.subjectId !== expected.revision.subjectId \|\|\n subject.revision.securityRevision !== expected.revision.securityRevision \|\|\n evidence.revision.subjectId !== subject.subjectId \|\|\n evidence.revision.securityRevision !== subject.revision.securityRevision\n )\n return false;\n for (const revision of [expected.revision, evidence.revision])\n if (\n revision.credentials.some(\n (item) =>\n !subject.revision.credentials.some(\n (current) =>\n current.credentialId === item.credentialId && current.revision === item.revision,\n ),\n )\n )\n return false;\n const now = yield* owner.now(mapping.clock);\n\n if (\n evidence.proofs.some(\n (proof) =>\n DateTime.toEpochMillis(proof.verifiedAt) > now \|\|\n !evidence.revision.credentials.some((item) => item.credentialId === proof.credentialId),\n )\n )\n return false;\n\n const currentRequirement: Effect.Effect<\n typeof PasskeyRequirement.Type,\n PersistenceMappingError\n > = mapping.write.policy.requirement(copiedRow(subject.row), expected.action);\n\n const current = snapshotPasskeySync(PasskeyRequirement, yield* currentRequirement);\n\n for (const requirement of [\n authorization.requirement,\n current,\n ...(original === undefined ? [] : [original]),\n ]) {\n const age = Math.min(policy.maximumEvidenceAgeMillis, requirement.maximumAgeMillis);\n\n const fresh = evidence.proofs.filter(\n (proof) => now - DateTime.toEpochMillis(proof.verifiedAt) < age,\n );\n\n const factors = new Set(fresh.flatMap((proof) => proof.factors));\n\n if (\n !requirement.alternatives.some(\n (alternative) =>\n alternative.factors.every((factor) => factors.has(factor)) &&\n new Set(fresh.map((proof) => proof.credentialId)).size >=\n alternative.minimumCredentials &&\n fresh.some(\n (proof) =>\n (!alternative.userVerified \|\| proof.userVerified) &&\n (!alternative.phishingResistant \|\| proof.phishingResistant),\n ),\n )\n )\n return false;\n owner.postconditions.push(\n both(\n sql`${mapping.clock.engineNowMillis} >= ${now}`,\n ...fresh.map(\n (proof) =>\n sql`${mapping.clock.engineNowMillis} < ${DateTime.toEpochMillis(proof.verifiedAt) + age}`,\n ),\n ),\n );\n }\n const condition = mapping.write.policy.action(subject.nativeId, authorization);\n\n if (!(yield* owner.check(condition))) return false;\n owner.postconditions.push(condition);\n\n return true;\n });\n\n const invalidationMatches = (\n mapping: any,\n supplied: SessionInvalidationWindow,\n policy: PasskeyManagementPolicy,\n ) =>\n jsonStorage(SessionInvalidationWindow).encode(supplied) ===\n jsonStorage(SessionInvalidationWindow).encode(mapping.invalidation.window) &&\n (!policy.requireImmediateInvalidation \|\| supplied.existingSessions === \"immediate\");\n\n const invalidate = Effect.fn(\"passkey.invalidateCredentialChange\")(function* (\n mapping: any,\n subject: WriteSubject,\n invalidation: SessionInvalidationWindow,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const table = mapping.read.subject;\n const revision = PasskeyRevision.fields.securityRevision.make(owner.marker);\n\n yield* owner.update(\n table.table,\n { [table.id]: subject.nativeId },\n { [table.securityRevision]: revision },\n );\n\n const input = {\n subjectId: subject.nativeId,\n previousRevision: subject.revision.securityRevision,\n securityRevision: revision,\n invalidation,\n };\n\n for (const mutation of mapping.invalidation.mutations) {\n yield* owner.write(\n owner.database\n .update(mutation.table)\n .set(mutation.values(input))\n .where(mutation.where(input)),\n );\n owner.postconditions.push(mutation.postcondition(input));\n }\n owner.postconditions.push(mapping.invalidation.postcondition(input));\n const flow = mapping.flow;\n\n const where = both(\n equal(flow.table, { [flow.subjectScope]: subjectScope(subject.subjectId) }),\n sql`${col(flow.table, flow.state)} in (${flow.states.Pending}, ${flow.states.Claimed})`,\n );\n\n yield* owner.write(\n owner.database\n .update(flow.table)\n .set({ [flow.state]: flow.states.Rejected, [flow.version]: owner.marker })\n .where(where),\n );\n for (const observation of owner.observations)\n if (observation.table === flow.table)\n observation.rows = observation.rows.map((row) =>\n row[flow.subjectScope] === subjectScope(subject.subjectId) &&\n [flow.states.Pending, flow.states.Claimed].includes(row[flow.state])\n ? { ...row, [flow.state]: flow.states.Rejected, [flow.version]: owner.marker }\n : row,\n );\n owner.postconditions.push(sql`not exists(select 1 from ${flow.table} where ${where})`);\n\n return revision;\n });\n\n const validRegistration = (\n ceremony: PasskeyCeremony,\n verified: {\n readonly algorithm: number;\n readonly userVerified: boolean;\n readonly backupEligible: boolean;\n readonly backupState: boolean;\n readonly protocolCredentialId: string;\n },\n ) =>\n ceremony.profile.algorithms.some((algorithm) => algorithm === verified.algorithm) &&\n (ceremony.profile.userVerification !== \"required\" \|\| verified.userVerified) &&\n (!verified.backupState \|\| verified.backupEligible) &&\n !ceremony.allowedCredentials.some((item) => item.id === verified.protocolCredentialId);\n\n const insertCredential = Effect.fn(\"passkey.insertCredential\")(function* (\n mapping: any,\n subject: WriteSubject,\n ceremony: PasskeyCeremony,\n verified: any,\n now: number,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n\n invariant(ceremony.context._tag === \"Enrollment\" \|\| ceremony.context._tag === \"Registration\");\n const read = mapping.read;\n const write = mapping.write;\n const id = PasskeyCredential.fields.credentialId.make(owner.marker);\n\n const credential = snapshotPasskeySync(PasskeyCredential, {\n credentialId: id,\n rpId: ceremony.profile.rpId,\n protocolCredentialId: verified.protocolCredentialId,\n userHandle: ceremony.context.userHandle,\n publicKey: verified.publicKey,\n algorithm: verified.algorithm,\n profile: ceremony.profile,\n revision: {\n ...subject.revision,\n credentials: [\n ...subject.revision.credentials,\n {\n credentialId: id,\n revision: PasskeyRevision.fields.securityRevision.make(owner.marker),\n },\n ],\n },\n active: true,\n primarySignIn: ceremony.profile.primarySignIn && verified.userVerified,\n enrollmentUserVerified: verified.userVerified,\n backupEligible: verified.backupEligible,\n backupState: verified.backupState,\n counter: verified.counter,\n maximumCounter: verified.counter,\n });\n\n const safe = snapshotPasskeySync(PasskeyCredentialSummary, {\n credentialId: id,\n name: ceremony.context.name,\n primarySignIn: credential.primarySignIn,\n createdAtMillis: now,\n });\n\n const input = { subjectId: subject.nativeId, credential, summary: safe, marker: owner.marker };\n const tupleKey = credentialKey(credential.rpId, credential.protocolCredentialId);\n const hashedHandle = handleKey(credential.rpId, credential.userHandle);\n const tuple = read.credentialOwnership;\n\n const absent = yield* owner.read(\n tuple.table,\n equal(tuple.table, { [tuple.credentialKey]: tupleKey }),\n { limit: 1 },\n );\n\n invariant(absent.rows.length === 0);\n\n const inserted = yield* owner.insert(\n tuple.table,\n {\n ...write.credentialOwnership.encodeInsert(input),\n [tuple.credentialKey]: tupleKey,\n [tuple.rpId]: credential.rpId,\n [tuple.protocolCredentialId]: credential.protocolCredentialId,\n [tuple.subjectId]: subject.nativeId,\n [tuple.credentialId]: id,\n [tuple.state]: write.credentialOwnership.ownedState,\n [tuple.version]: owner.marker,\n [tuple.reservationId]: null,\n },\n { [tuple.credentialKey]: tupleKey },\n );\n\n absent.rows = inserted.rows;\n const table = read.credential;\n\n const values = {\n ...write.credential.encodeInsert(input),\n [table.credentialId]: id,\n [table.subjectId]: subject.nativeId,\n [table.rpId]: credential.rpId,\n [table.protocolCredentialId]: credential.protocolCredentialId,\n [table.credentialKey]: tupleKey,\n [table.handleKey]: hashedHandle,\n [table.userHandle]: credential.userHandle,\n [table.algorithm]: credential.algorithm,\n [table.credentialRevision]: owner.marker,\n [table.status]: write.credential.activeStatus,\n [table.primarySignIn]: write.credential.encodePrimarySignIn(credential.primarySignIn),\n [table.enrollmentUserVerified]: write.credential.encodeEnrollmentUserVerified(\n credential.enrollmentUserVerified,\n ),\n [table.backupEligible]: write.credential.encodeBackupEligible(credential.backupEligible),\n [table.backupState]: mapping.telemetry.encodeBackupState(credential.backupState),\n [table.counter]: credential.counter,\n [table.maximumCounter]: credential.maximumCounter,\n [write.credential.name]: safe.name,\n [write.credential.createdAt]: mapping.clock.encodeInstant(now),\n [mapping.telemetry.lastUsedAt]: null,\n };\n\n yield* owner.insert(table.table, values, { [table.credentialId]: id });\n for (const observation of owner.observations)\n if (\n observation.table === table.table &&\n observation.rows !== inserted.rows &&\n !observation.rows.some((row) => row[table.credentialId] === id)\n )\n observation.rows = [...observation.rows, values];\n const factor = read.authority;\n\n const factorValues = {\n ...write.authority.encodeInsert(input),\n [factor.subjectId]: subject.nativeId,\n [factor.credentialId]: id,\n [factor.revision]: owner.marker,\n [factor.status]: write.authority.activeStatus,\n };\n\n yield* owner.insert(factor.table, factorValues, {\n [factor.subjectId]: subject.nativeId,\n [factor.credentialId]: id,\n });\n for (const observation of owner.observations)\n if (\n observation.table === factor.table &&\n !observation.rows.some((row) => row[factor.credentialId] === id)\n )\n observation.rows = [...observation.rows, factorValues];\n\n const decoded = snapshotPasskeySync(PasskeyCredential, {\n ...table.decode(copiedRow(values)),\n revision: credential.revision,\n active: true,\n });\n\n invariant(\n sameCredential(decoded, credential) &&\n decoded.counter === credential.counter &&\n decoded.maximumCounter === credential.maximumCounter &&\n decoded.backupState === credential.backupState,\n );\n invariant(summary(mapping, values).credentialId === id);\n owner.postconditions.push(sql`${mapping.clock.engineNowMillis} >= ${now}`);\n\n return safe;\n });\n\n return {\n jsonStorage,\n digest,\n currentSubject,\n credentialRows,\n summary,\n ownedCredential,\n managementPolicy,\n metadataAllowed,\n enrollmentDigest,\n removeDigest,\n authorizeAction,\n invalidationMatches,\n invalidate,\n validRegistration,\n insertCredential,\n };\n};\n"],"mappings":";;;;;;;AAqCA,MAAa,+BACX,YACA,OAaA,iBACG;CACH,MAAM,EAAE,QAAQ;CAEhB,MAAM,EACJ,KACA,WACA,eACA,OACA,WACA,eACA,gBACA,cACA,iBACE;CAEJ,MAAM,YAA+C,MAAM;CAC3D,MAAM,EAAE,SAAS;CAEjB,MAAM,eAAuE,WAAc;EACzF,MAAM,QAAQ,OAAO,eAAe,OAAO,YAAY,OAAO,OAAO,MAAM,CAAC,CAAC;EAE7E,OAAO;GACL,SAAS,UAAqB,OAAO,WAAW,KAAK,CAAC,CAAC,oBAAoB,QAAQ,KAAK,CAAC;GACzF,SAAS,SAA6B;IAEpC,OAAO,OAAO,kBAAkB,KAAK,CAAC,CAAC,IAAI;GAC7C;EACF;CACF;CAEA,MAAM,UACJ,QACA,UAEA,YAAY,KACV,SAAS,gBAAgB,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,YAAY,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAC9F;CAEF,MAAM,iBAAiB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC9D,SACA,WACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,QAAQ;EACrB,MAAM,QAAQ,KAAK;EACnB,MAAM,WAAW,KAAK,WAAW,SAAS,SAAS;EAEnD,UAAU,KAAK,WAAW,UAAU,QAAQ,MAAM,SAAS;EAE3D,MAAM,OAAO,OAAO,MAAM,KAAK,MAAM,OAAO,MAAM,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,GAAG;GACxF,OAAO;GACP,SAAS,CACP,mBAAG,IAAI,IAAY;IACjB,MAAM;IACN,MAAM;IACN,MAAM;IACN,GAAG,QAAQ,MAAM,OAAO;GAC1B,CAAC,CACH;EACF,CAAC,EAAA,CAAG,KAAK;EAET,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,eAAe,IAAI,MAAM,OAAO,GAAG,OAAO,KAAA;EAC1E,UAAU,KAAK,WAAW,OAAO,MAAM,SAAS,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC;EAC1E,MAAM,SAAS,GAAG,wBAAwB,MAAM,MAAM,SAAS,KAAK,MAAM,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,GAAG,MAAM,eAAe,EAAE;EAEzI,IAAI,EAAE,OAAO,MAAM,MAAM,MAAM,IAAI,OAAO,KAAA;EAC1C,MAAM,eAAe,KAAK,MAAM;EAChC,MAAM,SAAS,KAAK;EAEpB,MAAM,WAAW,OAAO,MAAM,KAC5B,OAAO,OACP,KAAK,MAAM,OAAO,OAAO,GAAG,OAAO,YAAY,SAAS,CAAC,GAAG,OAAO,eAAe,GAClF;GACE,OAAO;GACP,SAAS,cAAc,MAAM;GAC7B,SAAS,IAAI,OAAO,OAAO,OAAO,YAAY;EAChD,CACF,EAAA,CAAG;EAEH,MAAM,WAAW,oBAAoB,iBAAiB;GACpD;GACA,kBAAkB,IAAI,MAAM;GAC5B,aAAa,QAAQ,KAAK,WAAW;IACnC,cAAc,MAAM,OAAO;IAC3B,UAAU,MAAM,OAAO;GACzB,EAAE;EACJ,CAAC;EAED,UACE,IAAI,IAAI,SAAS,YAAY,KAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAC7D,SAAS,YAAY,MACzB;EAEA,OAAO;GAAE;GAAW;GAAU;GAAK;EAAS;CAC9C,CAAC;CAED,MAAM,iBAAiB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC9D,SACA,SACA,MACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,QAAQ,KAAK;EAE3B,QAAQ,OAAO,MAAM,KACnB,MAAM,OACN,KACE,MAAM,MAAM,OAAO,GAAG,MAAM,YAAY,QAAQ,SAAS,CAAC,GAC1D,MAAM,iBACN,SAAS,KAAA,IAAY,KAAA,IAAY,MAAM,MAAM,OAAO,GAAG,MAAM,OAAO,KAAK,CAAC,CAC5E,GACA;GAAE,OAAO;GAAI,SAAS,IAAI,MAAM,OAAO,MAAM,YAAY;EAAE,CAC7D,EAAA,CAAG;CACL,CAAC;CAED,MAAM,WAAW,SAAc,QAAa;EAC1C,MAAM,QAAQ,QAAQ,KAAK;EAC3B,MAAM,QAAQ,QAAQ,MAAM;EAC5B,MAAM,UAAU,MAAM,OAAO,UAAU,GAAG,CAAC;EAE3C,OAAO,oBAAoB,0BAA0B;GACnD,cAAc,QAAQ;GACtB,MAAM,IAAI,MAAM;GAChB,eAAe,QAAQ;GACvB,iBAAiB,QAAQ,MAAM,cAAc,IAAI,MAAM,UAAU;GACjE,GAAI,IAAI,QAAQ,UAAU,gBAAgB,QAC1C,IAAI,QAAQ,UAAU,gBAAgB,KAAA,IAClC,CAAC,IACD,EAAE,kBAAkB,QAAQ,MAAM,cAAc,IAAI,QAAQ,UAAU,WAAW,EAAE;EACzF,CAAC;CACH;CAEA,MAAM,kBAAkB,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAChE,SACA,SACA,KACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,QAAQ;EACrB,MAAM,QAAQ,KAAK;EAEnB,MAAM,UAAU,oBAAoB,mBAAmB;GACrD,GAAG,MAAM,OAAO,UAAU,GAAG,CAAC;GAC9B,UAAU,QAAQ;GAClB,QAAQ;EACV,CAAC;EAED,UACE,QAAQ,iBAAiB,IAAI,MAAM,iBACjC,QAAQ,QAAQ,SAAS,QAAQ,QACjC,KAAK,WAAW,OAAO,MAAM,gBAAgB,UAAU,GAAG,CAAC,GAAG,QAAQ,QAAQ,CAClF;EACA,MAAM,YAAY,KAAK;EACvB,MAAM,MAAM,cAAc,QAAQ,MAAM,QAAQ,oBAAoB;EAEpE,MAAM,SAAS,OAAO,MAAM,KAC1B,UAAU,OACV,MAAM,UAAU,OAAO,GAAG,UAAU,gBAAgB,IAAI,CAAC,GACzD;GAAE,OAAO;GAAG,SAAS,cAAc,SAAS;EAAE,CAChD,EAAA,CAAG,KAAK;EAER,IACE,UAAU,KAAA,KACV,CAAC,UAAU,aAAa,MAAM,UAAU,MAAM,KAC9C,CAAC,KAAK,WAAW,OAAO,UAAU,gBAAgB,UAAU,KAAK,CAAC,GAAG,QAAQ,QAAQ,GAErF,OAAO,KAAA;EACT,UACE,MAAM,UAAU,UAAU,QAAQ,QAChC,MAAM,UAAU,0BAA0B,QAAQ,wBAClD,MAAM,UAAU,kBAAkB,QAAQ,gBAC1C,IAAI,MAAM,mBAAmB,GACjC;EACA,MAAM,SAAS,KAAK;EACpB,MAAM,eAAe,UAAU,QAAQ,MAAM,QAAQ,UAAU;EAE/D,MAAM,QAAQ,OAAO,MAAM,KACzB,OAAO,OACP,MAAM,OAAO,OAAO,GAAG,OAAO,YAAY,aAAa,CAAC,GACxD;GAAE,OAAO;GAAG,SAAS,cAAc,MAAM;EAAE,CAC7C,EAAA,CAAG,KAAK;EAER,IACE,SAAS,KAAA,KACT,CAAC,OAAO,aAAa,KAAK,OAAO,MAAM,KACvC,CAAC,KAAK,WAAW,OAAO,OAAO,gBAAgB,UAAU,IAAI,CAAC,GAAG,QAAQ,QAAQ,GAEjF,OAAO,KAAA;EACT,UACE,KAAK,OAAO,UAAU,QAAQ,QAC5B,KAAK,OAAO,gBAAgB,QAAQ,cACpC,IAAI,MAAM,eAAe,YAC7B;EACA,UACE,QAAQ,SAAS,YAAY,MAC1B,SACC,KAAK,iBAAiB,QAAQ,gBAC9B,KAAK,aAAa,IAAI,MAAM,mBAChC,CACF;EAEA,OAAO;CACT,CAAC;CAED,MAAM,oBAAoB,SAAc,YACtC,oBACE,yBACA,QAAQ,MAAM,OAAO,WAAW,UAAU,QAAQ,GAAG,CAAC,CACxD;CAEF,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,SACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,YAAY,QAAQ,MAAM,OAAO,SAAS,QAAQ,QAAQ;EAChE,MAAM,UAAU,OAAO,MAAM,MAAM,SAAS;EAE5C,IAAI,SAAS,MAAM,eAAe,KAAK,SAAS;EAEhD,OAAO;CACT,CAAC;CAED,MAAM,oBAAoB,aAA8B;EACtD,UAAU,SAAS,QAAQ,SAAS,YAAY;EAChD,MAAM,UAAU,SAAS;EAEzB,OAAO,OACL,OAAO,MAAM;GACX;GACA,OAAO,QAAQ,YAAY;GAC3B,OAAO,OAAO;IAAE,GAAG,aAAa;IAAQ,MAAM;GAAa,CAAC;GAC5D;GACA;GACA;GACA,OAAO,MAAM,iBAAiB;EAChC,CAAC,GACD;GACE,SAAS;GACT;GACA;IACE,QAAQ,SAAS;IACjB,WAAW,SAAS;IACpB,WAAW,SAAS,QAAQ;IAC5B,MAAM,QAAQ;GAChB;GACA,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,SAAS;EACX,CACF;CACF;CAEA,MAAM,gBAAgB,UAAkB,WAAmB,eACzD,OACE,OAAO,MAAM;EACX;EACA,OAAO,QAAQ,QAAQ;EACvB,aAAa,OAAO;EACpB;CACF,CAAC,GACD;EACE,gBAAgB,KAAK,QAAQ;EAC7B;EACA,aAAa,OAAO,UAAU,KAAK,SAAS;EAC5C;CACF,CACF;CAEF,MAAM,kBAAkB,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAChE,SACA,SACA,eACA,UAOA,QACA,UACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,EAAE,WAAW,aAAa;EAEhC,IACE,UAAU,aAAa,QAAQ,YAC/B,UAAU,WAAW,SAAS,UAC9B,UAAU,cAAc,SAAS,aACjC,UAAU,WAAW,SAAS,UAC9B,UAAU,kBAAkB,SAAS,iBACrC,SAAS,WAAW,SAAS,UAC7B,SAAS,kBAAkB,SAAS,iBACpC,CAAC,aAAa,UAAU,UAAU,SAAS,QAAQ,KACnD,QAAQ,SAAS,cAAc,SAAS,SAAS,aACjD,QAAQ,SAAS,qBAAqB,SAAS,SAAS,oBACxD,SAAS,SAAS,cAAc,QAAQ,aACxC,SAAS,SAAS,qBAAqB,QAAQ,SAAS,kBAExD,OAAO;EACT,KAAK,MAAM,YAAY,CAAC,SAAS,UAAU,SAAS,QAAQ,GAC1D,IACE,SAAS,YAAY,MAClB,SACC,CAAC,QAAQ,SAAS,YAAY,MAC3B,YACC,QAAQ,iBAAiB,KAAK,gBAAgB,QAAQ,aAAa,KAAK,QAC5E,CACJ,GAEA,OAAO;EACX,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK;EAE1C,IACE,SAAS,OAAO,MACb,UACC,SAAS,cAAc,MAAM,UAAU,IAAI,OAC3C,CAAC,SAAS,SAAS,YAAY,MAAM,SAAS,KAAK,iBAAiB,MAAM,YAAY,CAC1F,GAEA,OAAO;EAET,MAAM,qBAGF,QAAQ,MAAM,OAAO,YAAY,UAAU,QAAQ,GAAG,GAAG,SAAS,MAAM;EAE5E,MAAM,UAAU,oBAAoB,oBAAoB,OAAO,kBAAkB;EAEjF,KAAK,MAAM,eAAe;GACxB,cAAc;GACd;GACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,CAAC,QAAQ;EAC7C,GAAG;GACD,MAAM,MAAM,KAAK,IAAI,OAAO,0BAA0B,YAAY,gBAAgB;GAElF,MAAM,QAAQ,SAAS,OAAO,QAC3B,UAAU,MAAM,SAAS,cAAc,MAAM,UAAU,IAAI,GAC9D;GAEA,MAAM,UAAU,IAAI,IAAI,MAAM,SAAS,UAAU,MAAM,OAAO,CAAC;GAE/D,IACE,CAAC,YAAY,aAAa,MACvB,gBACC,YAAY,QAAQ,OAAO,WAAW,QAAQ,IAAI,MAAM,CAAC,KACzD,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,YAAY,CAAC,CAAC,CAAC,QAChD,YAAY,sBACd,MAAM,MACH,WACE,CAAC,YAAY,gBAAgB,MAAM,kBACnC,CAAC,YAAY,qBAAqB,MAAM,kBAC7C,CACJ,GAEA,OAAO;GACT,MAAM,eAAe,KACnB,KACE,GAAG,GAAG,QAAQ,MAAM,gBAAgB,MAAM,OAC1C,GAAG,MAAM,KACN,UACC,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS,cAAc,MAAM,UAAU,IAAI,KACxF,CACF,CACF;EACF;EACA,MAAM,YAAY,QAAQ,MAAM,OAAO,OAAO,QAAQ,UAAU,aAAa;EAE7E,IAAI,EAAE,OAAO,MAAM,MAAM,SAAS,IAAI,OAAO;EAC7C,MAAM,eAAe,KAAK,SAAS;EAEnC,OAAO;CACT,CAAC;CAED,MAAM,uBACJ,SACA,UACA,WAEA,YAAY,yBAAyB,CAAC,CAAC,OAAO,QAAQ,MACpD,YAAY,yBAAyB,CAAC,CAAC,OAAO,QAAQ,aAAa,MAAM,MAC1E,CAAC,OAAO,gCAAgC,SAAS,qBAAqB;CAEzE,MAAM,aAAa,OAAO,GAAG,oCAAoC,CAAC,CAAC,WACjE,SACA,SACA,cACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,QAAQ,KAAK;EAC3B,MAAM,WAAW,gBAAgB,OAAO,iBAAiB,KAAK,MAAM,MAAM;EAE1E,OAAO,MAAM,OACX,MAAM,OACN,GAAG,MAAM,KAAK,QAAQ,SAAS,GAC/B,GAAG,MAAM,mBAAmB,SAAS,CACvC;EAEA,MAAM,QAAQ;GACZ,WAAW,QAAQ;GACnB,kBAAkB,QAAQ,SAAS;GACnC,kBAAkB;GAClB;EACF;EAEA,KAAK,MAAM,YAAY,QAAQ,aAAa,WAAW;GACrD,OAAO,MAAM,MACX,MAAM,SACH,OAAO,SAAS,KAAK,CAAC,CACtB,IAAI,SAAS,OAAO,KAAK,CAAC,CAAC,CAC3B,MAAM,SAAS,MAAM,KAAK,CAAC,CAChC;GACA,MAAM,eAAe,KAAK,SAAS,cAAc,KAAK,CAAC;EACzD;EACA,MAAM,eAAe,KAAK,QAAQ,aAAa,cAAc,KAAK,CAAC;EACnE,MAAM,OAAO,QAAQ;EAErB,MAAM,QAAQ,KACZ,MAAM,KAAK,OAAO,GAAG,KAAK,eAAe,aAAa,QAAQ,SAAS,EAAE,CAAC,GAC1E,GAAG,GAAG,IAAI,KAAK,OAAO,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,QAAQ,IAAI,KAAK,OAAO,QAAQ,EACvF;EAEA,OAAO,MAAM,MACX,MAAM,SACH,OAAO,KAAK,KAAK,CAAC,CAClB,IAAI;IAAG,KAAK,QAAQ,KAAK,OAAO;IAAW,KAAK,UAAU,MAAM;EAAO,CAAC,CAAC,CACzE,MAAM,KAAK,CAChB;EACA,KAAK,MAAM,eAAe,MAAM,cAC9B,IAAI,YAAY,UAAU,KAAK,OAC7B,YAAY,OAAO,YAAY,KAAK,KAAK,QACvC,IAAI,KAAK,kBAAkB,aAAa,QAAQ,SAAS,KACzD,CAAC,KAAK,OAAO,SAAS,KAAK,OAAO,OAAO,CAAC,CAAC,SAAS,IAAI,KAAK,MAAM,IAC/D;GAAE,GAAG;IAAM,KAAK,QAAQ,KAAK,OAAO;IAAW,KAAK,UAAU,MAAM;EAAO,IAC3E,GACN;EACJ,MAAM,eAAe,KAAK,GAAG,4BAA4B,KAAK,MAAM,SAAS,MAAM,EAAE;EAErF,OAAO;CACT,CAAC;CAED,MAAM,qBACJ,UACA,aAQA,SAAS,QAAQ,WAAW,MAAM,cAAc,cAAc,SAAS,SAAS,MAC/E,SAAS,QAAQ,qBAAqB,cAAc,SAAS,kBAC7D,CAAC,SAAS,eAAe,SAAS,mBACnC,CAAC,SAAS,mBAAmB,MAAM,SAAS,KAAK,OAAO,SAAS,oBAAoB;CA0JvF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,kBAvKuB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,SACA,UACA,UACA,KACA;GACA,MAAM,QAAQ,OAAO;GAErB,UAAU,SAAS,QAAQ,SAAS,gBAAgB,SAAS,QAAQ,SAAS,cAAc;GAC5F,MAAM,OAAO,QAAQ;GACrB,MAAM,QAAQ,QAAQ;GACtB,MAAM,KAAK,kBAAkB,OAAO,aAAa,KAAK,MAAM,MAAM;GAElE,MAAM,aAAa,oBAAoB,mBAAmB;IACxD,cAAc;IACd,MAAM,SAAS,QAAQ;IACvB,sBAAsB,SAAS;IAC/B,YAAY,SAAS,QAAQ;IAC7B,WAAW,SAAS;IACpB,WAAW,SAAS;IACpB,SAAS,SAAS;IAClB,UAAU;KACR,GAAG,QAAQ;KACX,aAAa,CACX,GAAG,QAAQ,SAAS,aACpB;MACE,cAAc;MACd,UAAU,gBAAgB,OAAO,iBAAiB,KAAK,MAAM,MAAM;KACrE,CACF;IACF;IACA,QAAQ;IACR,eAAe,SAAS,QAAQ,iBAAiB,SAAS;IAC1D,wBAAwB,SAAS;IACjC,gBAAgB,SAAS;IACzB,aAAa,SAAS;IACtB,SAAS,SAAS;IAClB,gBAAgB,SAAS;GAC3B,CAAC;GAED,MAAM,OAAO,oBAAoB,0BAA0B;IACzD,cAAc;IACd,MAAM,SAAS,QAAQ;IACvB,eAAe,WAAW;IAC1B,iBAAiB;GACnB,CAAC;GAED,MAAM,QAAQ;IAAE,WAAW,QAAQ;IAAU;IAAY,SAAS;IAAM,QAAQ,MAAM;GAAO;GAC7F,MAAM,WAAW,cAAc,WAAW,MAAM,WAAW,oBAAoB;GAC/E,MAAM,eAAe,UAAU,WAAW,MAAM,WAAW,UAAU;GACrE,MAAM,QAAQ,KAAK;GAEnB,MAAM,SAAS,OAAO,MAAM,KAC1B,MAAM,OACN,MAAM,MAAM,OAAO,GAAG,MAAM,gBAAgB,SAAS,CAAC,GACtD,EAAE,OAAO,EAAE,CACb;GAEA,UAAU,OAAO,KAAK,WAAW,CAAC;GAElC,MAAM,WAAW,OAAO,MAAM,OAC5B,MAAM,OACN;IACE,GAAG,MAAM,oBAAoB,aAAa,KAAK;KAC9C,MAAM,gBAAgB;KACtB,MAAM,OAAO,WAAW;KACxB,MAAM,uBAAuB,WAAW;KACxC,MAAM,YAAY,QAAQ;KAC1B,MAAM,eAAe;KACrB,MAAM,QAAQ,MAAM,oBAAoB;KACxC,MAAM,UAAU,MAAM;KACtB,MAAM,gBAAgB;GACzB,GACA,GAAG,MAAM,gBAAgB,SAAS,CACpC;GAEA,OAAO,OAAO,SAAS;GACvB,MAAM,QAAQ,KAAK;GAEnB,MAAM,SAAS;IACb,GAAG,MAAM,WAAW,aAAa,KAAK;KACrC,MAAM,eAAe;KACrB,MAAM,YAAY,QAAQ;KAC1B,MAAM,OAAO,WAAW;KACxB,MAAM,uBAAuB,WAAW;KACxC,MAAM,gBAAgB;KACtB,MAAM,YAAY;KAClB,MAAM,aAAa,WAAW;KAC9B,MAAM,YAAY,WAAW;KAC7B,MAAM,qBAAqB,MAAM;KACjC,MAAM,SAAS,MAAM,WAAW;KAChC,MAAM,gBAAgB,MAAM,WAAW,oBAAoB,WAAW,aAAa;KACnF,MAAM,yBAAyB,MAAM,WAAW,6BAC/C,WAAW,sBACb;KACC,MAAM,iBAAiB,MAAM,WAAW,qBAAqB,WAAW,cAAc;KACtF,MAAM,cAAc,QAAQ,UAAU,kBAAkB,WAAW,WAAW;KAC9E,MAAM,UAAU,WAAW;KAC3B,MAAM,iBAAiB,WAAW;KAClC,MAAM,WAAW,OAAO,KAAK;KAC7B,MAAM,WAAW,YAAY,QAAQ,MAAM,cAAc,GAAG;KAC5D,QAAQ,UAAU,aAAa;GAClC;GAEA,OAAO,MAAM,OAAO,MAAM,OAAO,QAAQ,GAAG,MAAM,eAAe,GAAG,CAAC;GACrE,KAAK,MAAM,eAAe,MAAM,cAC9B,IACE,YAAY,UAAU,MAAM,SAC5B,YAAY,SAAS,SAAS,QAC9B,CAAC,YAAY,KAAK,MAAM,QAAQ,IAAI,MAAM,kBAAkB,EAAE,GAE9D,YAAY,OAAO,CAAC,GAAG,YAAY,MAAM,MAAM;GACnD,MAAM,SAAS,KAAK;GAEpB,MAAM,eAAe;IACnB,GAAG,MAAM,UAAU,aAAa,KAAK;KACpC,OAAO,YAAY,QAAQ;KAC3B,OAAO,eAAe;KACtB,OAAO,WAAW,MAAM;KACxB,OAAO,SAAS,MAAM,UAAU;GACnC;GAEA,OAAO,MAAM,OAAO,OAAO,OAAO,cAAc;KAC7C,OAAO,YAAY,QAAQ;KAC3B,OAAO,eAAe;GACzB,CAAC;GACD,KAAK,MAAM,eAAe,MAAM,cAC9B,IACE,YAAY,UAAU,OAAO,SAC7B,CAAC,YAAY,KAAK,MAAM,QAAQ,IAAI,OAAO,kBAAkB,EAAE,GAE/D,YAAY,OAAO,CAAC,GAAG,YAAY,MAAM,YAAY;GAEzD,MAAM,UAAU,oBAAoB,mBAAmB;IACrD,GAAG,MAAM,OAAO,UAAU,MAAM,CAAC;IACjC,UAAU,WAAW;IACrB,QAAQ;GACV,CAAC;GAED,UACE,eAAe,SAAS,UAAU,KAChC,QAAQ,YAAY,WAAW,WAC/B,QAAQ,mBAAmB,WAAW,kBACtC,QAAQ,gBAAgB,WAAW,WACvC;GACA,UAAU,QAAQ,SAAS,MAAM,CAAC,CAAC,iBAAiB,EAAE;GACtD,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,MAAM,KAAK;GAEzE,OAAO;EACT,CAiBiB;CACjB;AACF"}
1	+ {"version":3,"file":"write-state.mjs","names":[],"sources":["../../../src/internal/passkey/write-state.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\n// oxlint-disable-next-line import/extensions -- Noble exposes explicit .js subpaths.\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n type PasskeyActionAuthorization,\n type PasskeyCeremony,\n PasskeyBegin,\n PasskeyCredential,\n PasskeyCredentialSummary,\n PasskeyDescriptor,\n PasskeyLabel,\n PasskeyModuleId,\n PasskeyProfile,\n PasskeyRequirement,\n PasskeyRevision,\n PasskeyUserHandle,\n PasskeyManagementPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport { TokenDigest, type SubjectId } from \"@yielded/auth/Schema\";\nimport { SessionInvalidationWindow } from \"@yielded/auth/Sessions\";\nimport { DateTime, Effect, Schema } from \"effect\";\nimport { Base64Url } from \"effect/encoding\";\n\nimport type { PersistenceMappingError } from \"../mapping-error\";\nimport type { QueryOperations } from \"../query-operations\";\nimport type { makeTransactionKernel } from \"../transaction-kernel\";\nimport { CurrentPasskeyTransaction } from \"./state\";\nimport type { makePasskeyStateKernel } from \"./state\";\n\nexport interface WriteSubject {\n readonly subjectId: SubjectId;\n readonly nativeId: any;\n readonly row: Record<string, any>;\n readonly revision: typeof PasskeyRevision.Type;\n}\n\nexport const makePasskeyWriteStateKernel = (\n operations: QueryOperations,\n state: Pick<\n ReturnType<typeof makePasskeyStateKernel>,\n \| \"col\"\n \| \"copiedRow\"\n \| \"credentialKey\"\n \| \"equal\"\n \| \"handleKey\"\n \| \"invariant\"\n \| \"mappedColumns\"\n \| \"sameCredential\"\n \| \"sameRevision\"\n \| \"subjectScope\"\n >,\n transactions: Pick<ReturnType<typeof makeTransactionKernel>, \"both\">,\n) => {\n const { sql } = operations;\n\n const {\n col,\n copiedRow,\n credentialKey,\n equal,\n handleKey,\n mappedColumns,\n sameCredential,\n sameRevision,\n subjectScope,\n } = state;\n\n const invariant: (value: unknown) => asserts value = state.invariant;\n const { both } = transactions;\n\n const jsonStorage = <S extends Schema.Codec<unknown, unknown, never, never>>(schema: S) => {\n const codec = Schema.fromJsonString(Schema.toCodecJson(Schema.toType(schema)));\n\n return {\n encode: (value: S[\"Type\"]) => Schema.encodeSync(codec)(snapshotPasskeySync(schema, value)),\n decode: (text: unknown): S[\"Type\"] => {\n // oxlint-disable-next-line no-restricted-properties -- persisted private JSON enters through its schema.\n return Schema.decodeUnknownSync(codec)(text);\n },\n };\n };\n\n const digest = <S extends Schema.Codec<unknown, unknown, never, never>>(\n schema: S,\n value: S[\"Type\"],\n ) =>\n TokenDigest.make(\n Base64Url.encode(sha256(new TextEncoder().encode(jsonStorage(schema).encode(value)))),\n );\n\n const currentSubject = Effect.fn(\"passkey.currentWriteSubject\")(function (\n mapping: any,\n subjectId: SubjectId,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const read = mapping.read;\n const table = read.subject;\n const nativeId = read.subjectIds.toNative(subjectId);\n\n invariant(read.subjectIds.toSubject(nativeId) === subjectId);\n\n const row = (yield* owner.read(table.table, equal(table.table, { [table.id]: nativeId }), {\n limit: 1,\n columns: [\n ...new Set<string>([\n table.id,\n table.status,\n table.securityRevision,\n ...mapping.write.policy.subjectColumns,\n ]),\n ],\n })).rows[0];\n\n if (row === undefined \|\| !table.isActiveStatus(row[table.status])) return undefined;\n invariant(read.subjectIds.equals(table.decodeId(copiedRow(row)), nativeId));\n const active = sql`exists(select 1 from ${table.table} where ${both(equal(table.table, { [table.id]: nativeId }), table.activeCondition)})`;\n\n if (!(yield* owner.check(active))) return undefined;\n owner.postconditions.push(active);\n const factor = read.authority;\n\n const factors = (yield* owner.read(\n factor.table,\n both(equal(factor.table, { [factor.subjectId]: nativeId }), factor.activeCondition),\n {\n limit: 64,\n columns: mappedColumns(factor),\n orderBy: col(factor.table, factor.credentialId),\n },\n )).rows;\n\n const revision = snapshotPasskeySync(PasskeyRevision, {\n subjectId,\n securityRevision: row[table.securityRevision],\n credentials: factors.map((value) => ({\n credentialId: value[factor.credentialId],\n revision: value[factor.revision],\n })),\n });\n\n invariant(\n new Set(revision.credentials.map((item) => item.credentialId)).size ===\n revision.credentials.length,\n );\n\n return { subjectId, nativeId, row, revision };\n });\n\n const credentialRows = Effect.fn(\"passkey.writeCredentialRows\")(function* (\n mapping: any,\n subject: WriteSubject,\n rpId?: string,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const table = mapping.read.credential;\n\n return (yield* owner.read(\n table.table,\n both(\n equal(table.table, { [table.subjectId]: subject.nativeId }),\n table.activeCondition,\n rpId === undefined ? undefined : equal(table.table, { [table.rpId]: rpId }),\n ),\n { limit: 64, orderBy: col(table.table, table.credentialId) },\n )).rows;\n });\n\n const summary = (mapping: any, row: any) => {\n const table = mapping.read.credential;\n const write = mapping.write.credential;\n const decoded = table.decode(copiedRow(row));\n\n return snapshotPasskeySync(PasskeyCredentialSummary, {\n credentialId: decoded.credentialId,\n name: row[write.name],\n primarySignIn: decoded.primarySignIn,\n createdAtMillis: mapping.clock.decodeInstant(row[write.createdAt]),\n ...(row[mapping.telemetry.lastUsedAt] === null \|\|\n row[mapping.telemetry.lastUsedAt] === undefined\n ? {}\n : { lastUsedAtMillis: mapping.clock.decodeInstant(row[mapping.telemetry.lastUsedAt]) }),\n });\n };\n\n const ownedCredential = Effect.fn(\"passkey.ownedWriteCredential\")(function* (\n mapping: any,\n subject: WriteSubject,\n row: any,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const read = mapping.read;\n const table = read.credential;\n\n const decoded = snapshotPasskeySync(PasskeyCredential, {\n ...table.decode(copiedRow(row)),\n revision: subject.revision,\n active: true,\n });\n\n invariant(\n decoded.credentialId === row[table.credentialId] &&\n decoded.profile.rpId === decoded.rpId &&\n read.subjectIds.equals(table.decodeSubjectId(copiedRow(row)), subject.nativeId),\n );\n const ownership = read.credentialOwnership;\n const key = credentialKey(decoded.rpId, decoded.protocolCredentialId);\n\n const tuple = (yield* owner.read(\n ownership.table,\n equal(ownership.table, { [ownership.credentialKey]: key }),\n { limit: 1, columns: mappedColumns(ownership) },\n )).rows[0];\n\n if (\n tuple === undefined \|\|\n !ownership.isOwnedState(tuple[ownership.state]) \|\|\n !read.subjectIds.equals(ownership.decodeSubjectId(copiedRow(tuple)), subject.nativeId)\n )\n return undefined;\n invariant(\n tuple[ownership.rpId] === decoded.rpId &&\n tuple[ownership.protocolCredentialId] === decoded.protocolCredentialId &&\n tuple[ownership.credentialId] === decoded.credentialId &&\n row[table.credentialKey] === key,\n );\n const handle = read.handleOwnership;\n const hashedHandle = handleKey(decoded.rpId, decoded.userHandle);\n\n const held = (yield* owner.read(\n handle.table,\n equal(handle.table, { [handle.handleKey]: hashedHandle }),\n { limit: 1, columns: mappedColumns(handle) },\n )).rows[0];\n\n if (\n held === undefined \|\|\n !handle.isOwnedState(held[handle.state]) \|\|\n !read.subjectIds.equals(handle.decodeSubjectId(copiedRow(held)), subject.nativeId)\n )\n return undefined;\n invariant(\n held[handle.rpId] === decoded.rpId &&\n held[handle.userHandle] === decoded.userHandle &&\n row[table.handleKey] === hashedHandle,\n );\n invariant(\n subject.revision.credentials.some(\n (item) =>\n item.credentialId === decoded.credentialId &&\n item.revision === row[table.credentialRevision],\n ),\n );\n\n return decoded;\n });\n\n const managementPolicy = (mapping: any, subject: WriteSubject) =>\n snapshotPasskeySync(\n PasskeyManagementPolicy,\n mapping.write.policy.management(copiedRow(subject.row)),\n );\n\n const metadataAllowed = Effect.fn(\"passkey.metadataAllowed\")(function* (\n mapping: any,\n subject: WriteSubject,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const condition = mapping.write.policy.metadata(subject.nativeId);\n const allowed = yield* owner.check(condition);\n\n if (allowed) owner.postconditions.push(condition);\n\n return allowed;\n });\n\n const enrollmentDigest = (ceremony: PasskeyCeremony) => {\n invariant(ceremony.context._tag === \"Enrollment\");\n const context = ceremony.context;\n\n return digest(\n Schema.Tuple([\n PasskeyModuleId,\n Schema.Literal(\"enrollment\"),\n Schema.Struct({ ...PasskeyBegin.fields, name: PasskeyLabel }),\n PasskeyProfile,\n PasskeyRevision,\n PasskeyUserHandle,\n Schema.Array(PasskeyDescriptor),\n ]),\n [\n ceremony.moduleId,\n \"enrollment\",\n {\n flowId: ceremony.flowId,\n commandId: ceremony.commandId,\n profileId: ceremony.profile.profileId,\n name: context.name,\n },\n ceremony.profile,\n context.revision,\n context.userHandle,\n ceremony.allowedCredentials,\n ],\n );\n };\n\n const removeDigest = (moduleId: string, commandId: string, credential: PasskeyCredential) =>\n digest(\n Schema.Tuple([\n PasskeyModuleId,\n Schema.Literal(\"remove\"),\n PasskeyBegin.fields.commandId,\n PasskeyCredential,\n ]),\n [\n PasskeyModuleId.make(moduleId),\n \"remove\",\n PasskeyBegin.fields.commandId.make(commandId),\n credential,\n ],\n );\n\n const authorizeAction = Effect.fn(\"passkey.authorizeWriteAction\")(function* (\n mapping: any,\n subject: WriteSubject,\n authorization: PasskeyActionAuthorization,\n expected: {\n readonly action: PasskeyActionAuthorization[\"challenge\"][\"action\"];\n readonly commandId: string;\n readonly flowId: string;\n readonly bindingDigest: string;\n readonly revision: typeof PasskeyRevision.Type;\n },\n policy: PasskeyManagementPolicy,\n original?: typeof PasskeyRequirement.Type,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const { challenge, evidence } = authorization;\n\n if (\n challenge.moduleId !== mapping.moduleId \|\|\n challenge.action !== expected.action \|\|\n challenge.commandId !== expected.commandId \|\|\n challenge.flowId !== expected.flowId \|\|\n challenge.bindingDigest !== expected.bindingDigest \|\|\n evidence.flowId !== expected.flowId \|\|\n evidence.bindingDigest !== expected.bindingDigest \|\|\n !sameRevision(challenge.revision, expected.revision) \|\|\n subject.revision.subjectId !== expected.revision.subjectId \|\|\n subject.revision.securityRevision !== expected.revision.securityRevision \|\|\n evidence.revision.subjectId !== subject.subjectId \|\|\n evidence.revision.securityRevision !== subject.revision.securityRevision\n )\n return false;\n for (const revision of [expected.revision, evidence.revision])\n if (\n revision.credentials.some(\n (item) =>\n !subject.revision.credentials.some(\n (current) =>\n current.credentialId === item.credentialId && current.revision === item.revision,\n ),\n )\n )\n return false;\n const now = yield* owner.now(mapping.clock);\n\n if (\n evidence.proofs.some(\n (proof) =>\n DateTime.toEpochMillis(proof.verifiedAt) > now \|\|\n !evidence.revision.credentials.some((item) => item.credentialId === proof.credentialId),\n )\n )\n return false;\n\n const currentRequirement: Effect.Effect<\n typeof PasskeyRequirement.Type,\n PersistenceMappingError\n > = mapping.write.policy.requirement(copiedRow(subject.row), expected.action);\n\n const current = snapshotPasskeySync(PasskeyRequirement, yield* currentRequirement);\n\n for (const requirement of [\n authorization.requirement,\n current,\n ...(original === undefined ? [] : [original]),\n ]) {\n const age = Math.min(policy.maximumEvidenceAgeMillis, requirement.maximumAgeMillis);\n\n const fresh = evidence.proofs.filter(\n (proof) => now - DateTime.toEpochMillis(proof.verifiedAt) < age,\n );\n\n const factors = new Set(fresh.flatMap((proof) => proof.factors));\n\n if (\n !requirement.alternatives.some(\n (alternative) =>\n alternative.factors.every((factor) => factors.has(factor)) &&\n new Set(fresh.map((proof) => proof.credentialId)).size >=\n alternative.minimumCredentials &&\n fresh.some(\n (proof) =>\n (!alternative.userVerified \|\| proof.userVerified) &&\n (!alternative.phishingResistant \|\| proof.phishingResistant),\n ),\n )\n )\n return false;\n owner.postconditions.push(\n both(\n sql`${mapping.clock.engineNowMillis} >= ${now}`,\n ...fresh.map(\n (proof) =>\n sql`${mapping.clock.engineNowMillis} < ${DateTime.toEpochMillis(proof.verifiedAt) + age}`,\n ),\n ),\n );\n }\n const condition = mapping.write.policy.action(subject.nativeId, authorization);\n\n if (!(yield* owner.check(condition))) return false;\n owner.postconditions.push(condition);\n\n return true;\n });\n\n const invalidationMatches = (\n mapping: any,\n supplied: SessionInvalidationWindow,\n policy: PasskeyManagementPolicy,\n ) =>\n jsonStorage(SessionInvalidationWindow).encode(supplied) ===\n jsonStorage(SessionInvalidationWindow).encode(mapping.invalidation.window) &&\n (!policy.requireImmediateInvalidation \|\| supplied.existingSessions === \"immediate\");\n\n const invalidate = Effect.fn(\"passkey.invalidateCredentialChange\")(function* (\n mapping: any,\n subject: WriteSubject,\n invalidation: SessionInvalidationWindow,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n const table = mapping.read.subject;\n const revision = PasskeyRevision.fields.securityRevision.make(owner.marker);\n\n yield* owner.update(\n table.table,\n { [table.id]: subject.nativeId },\n { [table.securityRevision]: revision },\n );\n\n const input = {\n subjectId: subject.nativeId,\n previousRevision: subject.revision.securityRevision,\n securityRevision: revision,\n invalidation,\n };\n\n for (const mutation of mapping.invalidation.mutations) {\n yield* owner.write(\n owner.database\n .update(mutation.table)\n .set(mutation.values(input))\n .where(mutation.where(input)),\n );\n owner.postconditions.push(mutation.postcondition(input));\n }\n owner.postconditions.push(mapping.invalidation.postcondition(input));\n const flow = mapping.flow;\n\n const where = both(\n equal(flow.table, { [flow.subjectScope]: subjectScope(subject.subjectId) }),\n sql`${col(flow.table, flow.state)} in (${flow.states.Pending}, ${flow.states.Claimed})`,\n );\n\n yield* owner.write(\n owner.database\n .update(flow.table)\n .set({ [flow.state]: flow.states.Rejected, [flow.version]: owner.marker })\n .where(where),\n );\n for (const observation of owner.observations)\n if (observation.table === flow.table)\n observation.rows = observation.rows.map((row) =>\n row[flow.subjectScope] === subjectScope(subject.subjectId) &&\n [flow.states.Pending, flow.states.Claimed].includes(row[flow.state])\n ? { ...row, [flow.state]: flow.states.Rejected, [flow.version]: owner.marker }\n : row,\n );\n owner.postconditions.push(sql`not exists(select 1 from ${flow.table} where ${where})`);\n\n return revision;\n });\n\n const validRegistration = (\n ceremony: PasskeyCeremony,\n verified: {\n readonly algorithm: number;\n readonly userVerified: boolean;\n readonly backupEligible: boolean;\n readonly backupState: boolean;\n readonly protocolCredentialId: string;\n },\n ) =>\n ceremony.profile.algorithms.some((algorithm) => algorithm === verified.algorithm) &&\n (ceremony.profile.userVerification !== \"required\" \|\| verified.userVerified) &&\n (!verified.backupState \|\| verified.backupEligible) &&\n !ceremony.allowedCredentials.some((item) => item.id === verified.protocolCredentialId);\n\n const insertCredential = Effect.fn(\"passkey.insertCredential\")(function* (\n mapping: any,\n subject: WriteSubject,\n ceremony: PasskeyCeremony,\n verified: any,\n now: number,\n ) {\n const owner = yield* CurrentPasskeyTransaction;\n\n invariant(ceremony.context._tag === \"Enrollment\" \|\| ceremony.context._tag === \"Registration\");\n const read = mapping.read;\n const write = mapping.write;\n const id = PasskeyCredential.fields.credentialId.make(owner.marker);\n\n const credential = snapshotPasskeySync(PasskeyCredential, {\n credentialId: id,\n rpId: ceremony.profile.rpId,\n protocolCredentialId: verified.protocolCredentialId,\n userHandle: ceremony.context.userHandle,\n publicKey: verified.publicKey,\n algorithm: verified.algorithm,\n profile: ceremony.profile,\n revision: {\n ...subject.revision,\n credentials: [\n ...subject.revision.credentials,\n {\n credentialId: id,\n revision: PasskeyRevision.fields.securityRevision.make(owner.marker),\n },\n ],\n },\n active: true,\n primarySignIn: ceremony.profile.primarySignIn && verified.userVerified,\n enrollmentUserVerified: verified.userVerified,\n backupEligible: verified.backupEligible,\n backupState: verified.backupState,\n counter: verified.counter,\n maximumCounter: verified.counter,\n });\n\n const safe = snapshotPasskeySync(PasskeyCredentialSummary, {\n credentialId: id,\n name: ceremony.context.name,\n primarySignIn: credential.primarySignIn,\n createdAtMillis: now,\n });\n\n const input = { subjectId: subject.nativeId, credential, summary: safe, marker: owner.marker };\n const tupleKey = credentialKey(credential.rpId, credential.protocolCredentialId);\n const hashedHandle = handleKey(credential.rpId, credential.userHandle);\n const tuple = read.credentialOwnership;\n\n const absent = yield* owner.read(\n tuple.table,\n equal(tuple.table, { [tuple.credentialKey]: tupleKey }),\n { limit: 1 },\n );\n\n invariant(absent.rows.length === 0);\n\n const inserted = yield* owner.insert(\n tuple.table,\n {\n ...write.credentialOwnership.encodeInsert(input),\n [tuple.credentialKey]: tupleKey,\n [tuple.rpId]: credential.rpId,\n [tuple.protocolCredentialId]: credential.protocolCredentialId,\n [tuple.subjectId]: subject.nativeId,\n [tuple.credentialId]: id,\n [tuple.state]: write.credentialOwnership.ownedState,\n [tuple.version]: owner.marker,\n [tuple.reservationId]: null,\n },\n { [tuple.credentialKey]: tupleKey },\n );\n\n absent.rows = inserted.rows;\n const table = read.credential;\n\n const values = {\n ...write.credential.encodeInsert(input),\n [table.credentialId]: id,\n [table.subjectId]: subject.nativeId,\n [table.rpId]: credential.rpId,\n [table.protocolCredentialId]: credential.protocolCredentialId,\n [table.credentialKey]: tupleKey,\n [table.handleKey]: hashedHandle,\n [table.userHandle]: credential.userHandle,\n [table.algorithm]: credential.algorithm,\n [table.credentialRevision]: owner.marker,\n [table.status]: write.credential.activeStatus,\n [table.primarySignIn]: write.credential.encodePrimarySignIn(credential.primarySignIn),\n [table.enrollmentUserVerified]: write.credential.encodeEnrollmentUserVerified(\n credential.enrollmentUserVerified,\n ),\n [table.backupEligible]: write.credential.encodeBackupEligible(credential.backupEligible),\n [table.backupState]: mapping.telemetry.encodeBackupState(credential.backupState),\n [table.counter]: credential.counter,\n [table.maximumCounter]: credential.maximumCounter,\n [write.credential.name]: safe.name,\n [write.credential.createdAt]: mapping.clock.encodeInstant(now),\n [mapping.telemetry.lastUsedAt]: null,\n };\n\n yield* owner.insert(table.table, values, { [table.credentialId]: id });\n for (const observation of owner.observations)\n if (\n observation.table === table.table &&\n observation.rows !== inserted.rows &&\n !observation.rows.some((row) => row[table.credentialId] === id)\n )\n observation.rows = [...observation.rows, values];\n const factor = read.authority;\n\n const factorValues = {\n ...write.authority.encodeInsert(input),\n [factor.subjectId]: subject.nativeId,\n [factor.credentialId]: id,\n [factor.revision]: owner.marker,\n [factor.status]: write.authority.activeStatus,\n };\n\n yield* owner.insert(factor.table, factorValues, {\n [factor.subjectId]: subject.nativeId,\n [factor.credentialId]: id,\n });\n for (const observation of owner.observations)\n if (\n observation.table === factor.table &&\n !observation.rows.some((row) => row[factor.credentialId] === id)\n )\n observation.rows = [...observation.rows, factorValues];\n\n const decoded = snapshotPasskeySync(PasskeyCredential, {\n ...table.decode(copiedRow(values)),\n revision: credential.revision,\n active: true,\n });\n\n invariant(\n sameCredential(decoded, credential) &&\n decoded.counter === credential.counter &&\n decoded.maximumCounter === credential.maximumCounter &&\n decoded.backupState === credential.backupState,\n );\n invariant(summary(mapping, values).credentialId === id);\n owner.postconditions.push(sql`${mapping.clock.engineNowMillis} >= ${now}`);\n\n return safe;\n });\n\n return {\n jsonStorage,\n digest,\n currentSubject,\n credentialRows,\n summary,\n ownedCredential,\n managementPolicy,\n metadataAllowed,\n enrollmentDigest,\n removeDigest,\n authorizeAction,\n invalidationMatches,\n invalidate,\n validRegistration,\n insertCredential,\n };\n};\n"],"mappings":";;;;;;;;AAsCA,MAAa,+BACX,YACA,OAaA,iBACG;CACH,MAAM,EAAE,QAAQ;CAEhB,MAAM,EACJ,KACA,WACA,eACA,OACA,WACA,eACA,gBACA,cACA,iBACE;CAEJ,MAAM,YAA+C,MAAM;CAC3D,MAAM,EAAE,SAAS;CAEjB,MAAM,eAAuE,WAAc;EACzF,MAAM,QAAQ,OAAO,eAAe,OAAO,YAAY,OAAO,OAAO,MAAM,CAAC,CAAC;EAE7E,OAAO;GACL,SAAS,UAAqB,OAAO,WAAW,KAAK,CAAC,CAAC,oBAAoB,QAAQ,KAAK,CAAC;GACzF,SAAS,SAA6B;IAEpC,OAAO,OAAO,kBAAkB,KAAK,CAAC,CAAC,IAAI;GAC7C;EACF;CACF;CAEA,MAAM,UACJ,QACA,UAEA,YAAY,KACV,UAAU,OAAO,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,YAAY,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CACtF;CAEF,MAAM,iBAAiB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC9D,SACA,WACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,QAAQ;EACrB,MAAM,QAAQ,KAAK;EACnB,MAAM,WAAW,KAAK,WAAW,SAAS,SAAS;EAEnD,UAAU,KAAK,WAAW,UAAU,QAAQ,MAAM,SAAS;EAE3D,MAAM,OAAO,OAAO,MAAM,KAAK,MAAM,OAAO,MAAM,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,GAAG;GACxF,OAAO;GACP,SAAS,CACP,mBAAG,IAAI,IAAY;IACjB,MAAM;IACN,MAAM;IACN,MAAM;IACN,GAAG,QAAQ,MAAM,OAAO;GAC1B,CAAC,CACH;EACF,CAAC,EAAA,CAAG,KAAK;EAET,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,eAAe,IAAI,MAAM,OAAO,GAAG,OAAO,KAAA;EAC1E,UAAU,KAAK,WAAW,OAAO,MAAM,SAAS,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC;EAC1E,MAAM,SAAS,GAAG,wBAAwB,MAAM,MAAM,SAAS,KAAK,MAAM,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,GAAG,MAAM,eAAe,EAAE;EAEzI,IAAI,EAAE,OAAO,MAAM,MAAM,MAAM,IAAI,OAAO,KAAA;EAC1C,MAAM,eAAe,KAAK,MAAM;EAChC,MAAM,SAAS,KAAK;EAEpB,MAAM,WAAW,OAAO,MAAM,KAC5B,OAAO,OACP,KAAK,MAAM,OAAO,OAAO,GAAG,OAAO,YAAY,SAAS,CAAC,GAAG,OAAO,eAAe,GAClF;GACE,OAAO;GACP,SAAS,cAAc,MAAM;GAC7B,SAAS,IAAI,OAAO,OAAO,OAAO,YAAY;EAChD,CACF,EAAA,CAAG;EAEH,MAAM,WAAW,oBAAoB,iBAAiB;GACpD;GACA,kBAAkB,IAAI,MAAM;GAC5B,aAAa,QAAQ,KAAK,WAAW;IACnC,cAAc,MAAM,OAAO;IAC3B,UAAU,MAAM,OAAO;GACzB,EAAE;EACJ,CAAC;EAED,UACE,IAAI,IAAI,SAAS,YAAY,KAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAC7D,SAAS,YAAY,MACzB;EAEA,OAAO;GAAE;GAAW;GAAU;GAAK;EAAS;CAC9C,CAAC;CAED,MAAM,iBAAiB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC9D,SACA,SACA,MACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,QAAQ,KAAK;EAE3B,QAAQ,OAAO,MAAM,KACnB,MAAM,OACN,KACE,MAAM,MAAM,OAAO,GAAG,MAAM,YAAY,QAAQ,SAAS,CAAC,GAC1D,MAAM,iBACN,SAAS,KAAA,IAAY,KAAA,IAAY,MAAM,MAAM,OAAO,GAAG,MAAM,OAAO,KAAK,CAAC,CAC5E,GACA;GAAE,OAAO;GAAI,SAAS,IAAI,MAAM,OAAO,MAAM,YAAY;EAAE,CAC7D,EAAA,CAAG;CACL,CAAC;CAED,MAAM,WAAW,SAAc,QAAa;EAC1C,MAAM,QAAQ,QAAQ,KAAK;EAC3B,MAAM,QAAQ,QAAQ,MAAM;EAC5B,MAAM,UAAU,MAAM,OAAO,UAAU,GAAG,CAAC;EAE3C,OAAO,oBAAoB,0BAA0B;GACnD,cAAc,QAAQ;GACtB,MAAM,IAAI,MAAM;GAChB,eAAe,QAAQ;GACvB,iBAAiB,QAAQ,MAAM,cAAc,IAAI,MAAM,UAAU;GACjE,GAAI,IAAI,QAAQ,UAAU,gBAAgB,QAC1C,IAAI,QAAQ,UAAU,gBAAgB,KAAA,IAClC,CAAC,IACD,EAAE,kBAAkB,QAAQ,MAAM,cAAc,IAAI,QAAQ,UAAU,WAAW,EAAE;EACzF,CAAC;CACH;CAEA,MAAM,kBAAkB,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAChE,SACA,SACA,KACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,QAAQ;EACrB,MAAM,QAAQ,KAAK;EAEnB,MAAM,UAAU,oBAAoB,mBAAmB;GACrD,GAAG,MAAM,OAAO,UAAU,GAAG,CAAC;GAC9B,UAAU,QAAQ;GAClB,QAAQ;EACV,CAAC;EAED,UACE,QAAQ,iBAAiB,IAAI,MAAM,iBACjC,QAAQ,QAAQ,SAAS,QAAQ,QACjC,KAAK,WAAW,OAAO,MAAM,gBAAgB,UAAU,GAAG,CAAC,GAAG,QAAQ,QAAQ,CAClF;EACA,MAAM,YAAY,KAAK;EACvB,MAAM,MAAM,cAAc,QAAQ,MAAM,QAAQ,oBAAoB;EAEpE,MAAM,SAAS,OAAO,MAAM,KAC1B,UAAU,OACV,MAAM,UAAU,OAAO,GAAG,UAAU,gBAAgB,IAAI,CAAC,GACzD;GAAE,OAAO;GAAG,SAAS,cAAc,SAAS;EAAE,CAChD,EAAA,CAAG,KAAK;EAER,IACE,UAAU,KAAA,KACV,CAAC,UAAU,aAAa,MAAM,UAAU,MAAM,KAC9C,CAAC,KAAK,WAAW,OAAO,UAAU,gBAAgB,UAAU,KAAK,CAAC,GAAG,QAAQ,QAAQ,GAErF,OAAO,KAAA;EACT,UACE,MAAM,UAAU,UAAU,QAAQ,QAChC,MAAM,UAAU,0BAA0B,QAAQ,wBAClD,MAAM,UAAU,kBAAkB,QAAQ,gBAC1C,IAAI,MAAM,mBAAmB,GACjC;EACA,MAAM,SAAS,KAAK;EACpB,MAAM,eAAe,UAAU,QAAQ,MAAM,QAAQ,UAAU;EAE/D,MAAM,QAAQ,OAAO,MAAM,KACzB,OAAO,OACP,MAAM,OAAO,OAAO,GAAG,OAAO,YAAY,aAAa,CAAC,GACxD;GAAE,OAAO;GAAG,SAAS,cAAc,MAAM;EAAE,CAC7C,EAAA,CAAG,KAAK;EAER,IACE,SAAS,KAAA,KACT,CAAC,OAAO,aAAa,KAAK,OAAO,MAAM,KACvC,CAAC,KAAK,WAAW,OAAO,OAAO,gBAAgB,UAAU,IAAI,CAAC,GAAG,QAAQ,QAAQ,GAEjF,OAAO,KAAA;EACT,UACE,KAAK,OAAO,UAAU,QAAQ,QAC5B,KAAK,OAAO,gBAAgB,QAAQ,cACpC,IAAI,MAAM,eAAe,YAC7B;EACA,UACE,QAAQ,SAAS,YAAY,MAC1B,SACC,KAAK,iBAAiB,QAAQ,gBAC9B,KAAK,aAAa,IAAI,MAAM,mBAChC,CACF;EAEA,OAAO;CACT,CAAC;CAED,MAAM,oBAAoB,SAAc,YACtC,oBACE,yBACA,QAAQ,MAAM,OAAO,WAAW,UAAU,QAAQ,GAAG,CAAC,CACxD;CAEF,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,SACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,YAAY,QAAQ,MAAM,OAAO,SAAS,QAAQ,QAAQ;EAChE,MAAM,UAAU,OAAO,MAAM,MAAM,SAAS;EAE5C,IAAI,SAAS,MAAM,eAAe,KAAK,SAAS;EAEhD,OAAO;CACT,CAAC;CAED,MAAM,oBAAoB,aAA8B;EACtD,UAAU,SAAS,QAAQ,SAAS,YAAY;EAChD,MAAM,UAAU,SAAS;EAEzB,OAAO,OACL,OAAO,MAAM;GACX;GACA,OAAO,QAAQ,YAAY;GAC3B,OAAO,OAAO;IAAE,GAAG,aAAa;IAAQ,MAAM;GAAa,CAAC;GAC5D;GACA;GACA;GACA,OAAO,MAAM,iBAAiB;EAChC,CAAC,GACD;GACE,SAAS;GACT;GACA;IACE,QAAQ,SAAS;IACjB,WAAW,SAAS;IACpB,WAAW,SAAS,QAAQ;IAC5B,MAAM,QAAQ;GAChB;GACA,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,SAAS;EACX,CACF;CACF;CAEA,MAAM,gBAAgB,UAAkB,WAAmB,eACzD,OACE,OAAO,MAAM;EACX;EACA,OAAO,QAAQ,QAAQ;EACvB,aAAa,OAAO;EACpB;CACF,CAAC,GACD;EACE,gBAAgB,KAAK,QAAQ;EAC7B;EACA,aAAa,OAAO,UAAU,KAAK,SAAS;EAC5C;CACF,CACF;CAEF,MAAM,kBAAkB,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAChE,SACA,SACA,eACA,UAOA,QACA,UACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,EAAE,WAAW,aAAa;EAEhC,IACE,UAAU,aAAa,QAAQ,YAC/B,UAAU,WAAW,SAAS,UAC9B,UAAU,cAAc,SAAS,aACjC,UAAU,WAAW,SAAS,UAC9B,UAAU,kBAAkB,SAAS,iBACrC,SAAS,WAAW,SAAS,UAC7B,SAAS,kBAAkB,SAAS,iBACpC,CAAC,aAAa,UAAU,UAAU,SAAS,QAAQ,KACnD,QAAQ,SAAS,cAAc,SAAS,SAAS,aACjD,QAAQ,SAAS,qBAAqB,SAAS,SAAS,oBACxD,SAAS,SAAS,cAAc,QAAQ,aACxC,SAAS,SAAS,qBAAqB,QAAQ,SAAS,kBAExD,OAAO;EACT,KAAK,MAAM,YAAY,CAAC,SAAS,UAAU,SAAS,QAAQ,GAC1D,IACE,SAAS,YAAY,MAClB,SACC,CAAC,QAAQ,SAAS,YAAY,MAC3B,YACC,QAAQ,iBAAiB,KAAK,gBAAgB,QAAQ,aAAa,KAAK,QAC5E,CACJ,GAEA,OAAO;EACX,MAAM,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK;EAE1C,IACE,SAAS,OAAO,MACb,UACC,SAAS,cAAc,MAAM,UAAU,IAAI,OAC3C,CAAC,SAAS,SAAS,YAAY,MAAM,SAAS,KAAK,iBAAiB,MAAM,YAAY,CAC1F,GAEA,OAAO;EAET,MAAM,qBAGF,QAAQ,MAAM,OAAO,YAAY,UAAU,QAAQ,GAAG,GAAG,SAAS,MAAM;EAE5E,MAAM,UAAU,oBAAoB,oBAAoB,OAAO,kBAAkB;EAEjF,KAAK,MAAM,eAAe;GACxB,cAAc;GACd;GACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,CAAC,QAAQ;EAC7C,GAAG;GACD,MAAM,MAAM,KAAK,IAAI,OAAO,0BAA0B,YAAY,gBAAgB;GAElF,MAAM,QAAQ,SAAS,OAAO,QAC3B,UAAU,MAAM,SAAS,cAAc,MAAM,UAAU,IAAI,GAC9D;GAEA,MAAM,UAAU,IAAI,IAAI,MAAM,SAAS,UAAU,MAAM,OAAO,CAAC;GAE/D,IACE,CAAC,YAAY,aAAa,MACvB,gBACC,YAAY,QAAQ,OAAO,WAAW,QAAQ,IAAI,MAAM,CAAC,KACzD,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,YAAY,CAAC,CAAC,CAAC,QAChD,YAAY,sBACd,MAAM,MACH,WACE,CAAC,YAAY,gBAAgB,MAAM,kBACnC,CAAC,YAAY,qBAAqB,MAAM,kBAC7C,CACJ,GAEA,OAAO;GACT,MAAM,eAAe,KACnB,KACE,GAAG,GAAG,QAAQ,MAAM,gBAAgB,MAAM,OAC1C,GAAG,MAAM,KACN,UACC,GAAG,GAAG,QAAQ,MAAM,gBAAgB,KAAK,SAAS,cAAc,MAAM,UAAU,IAAI,KACxF,CACF,CACF;EACF;EACA,MAAM,YAAY,QAAQ,MAAM,OAAO,OAAO,QAAQ,UAAU,aAAa;EAE7E,IAAI,EAAE,OAAO,MAAM,MAAM,SAAS,IAAI,OAAO;EAC7C,MAAM,eAAe,KAAK,SAAS;EAEnC,OAAO;CACT,CAAC;CAED,MAAM,uBACJ,SACA,UACA,WAEA,YAAY,yBAAyB,CAAC,CAAC,OAAO,QAAQ,MACpD,YAAY,yBAAyB,CAAC,CAAC,OAAO,QAAQ,aAAa,MAAM,MAC1E,CAAC,OAAO,gCAAgC,SAAS,qBAAqB;CAEzE,MAAM,aAAa,OAAO,GAAG,oCAAoC,CAAC,CAAC,WACjE,SACA,SACA,cACA;EACA,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,QAAQ,KAAK;EAC3B,MAAM,WAAW,gBAAgB,OAAO,iBAAiB,KAAK,MAAM,MAAM;EAE1E,OAAO,MAAM,OACX,MAAM,OACN,GAAG,MAAM,KAAK,QAAQ,SAAS,GAC/B,GAAG,MAAM,mBAAmB,SAAS,CACvC;EAEA,MAAM,QAAQ;GACZ,WAAW,QAAQ;GACnB,kBAAkB,QAAQ,SAAS;GACnC,kBAAkB;GAClB;EACF;EAEA,KAAK,MAAM,YAAY,QAAQ,aAAa,WAAW;GACrD,OAAO,MAAM,MACX,MAAM,SACH,OAAO,SAAS,KAAK,CAAC,CACtB,IAAI,SAAS,OAAO,KAAK,CAAC,CAAC,CAC3B,MAAM,SAAS,MAAM,KAAK,CAAC,CAChC;GACA,MAAM,eAAe,KAAK,SAAS,cAAc,KAAK,CAAC;EACzD;EACA,MAAM,eAAe,KAAK,QAAQ,aAAa,cAAc,KAAK,CAAC;EACnE,MAAM,OAAO,QAAQ;EAErB,MAAM,QAAQ,KACZ,MAAM,KAAK,OAAO,GAAG,KAAK,eAAe,aAAa,QAAQ,SAAS,EAAE,CAAC,GAC1E,GAAG,GAAG,IAAI,KAAK,OAAO,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,QAAQ,IAAI,KAAK,OAAO,QAAQ,EACvF;EAEA,OAAO,MAAM,MACX,MAAM,SACH,OAAO,KAAK,KAAK,CAAC,CAClB,IAAI;IAAG,KAAK,QAAQ,KAAK,OAAO;IAAW,KAAK,UAAU,MAAM;EAAO,CAAC,CAAC,CACzE,MAAM,KAAK,CAChB;EACA,KAAK,MAAM,eAAe,MAAM,cAC9B,IAAI,YAAY,UAAU,KAAK,OAC7B,YAAY,OAAO,YAAY,KAAK,KAAK,QACvC,IAAI,KAAK,kBAAkB,aAAa,QAAQ,SAAS,KACzD,CAAC,KAAK,OAAO,SAAS,KAAK,OAAO,OAAO,CAAC,CAAC,SAAS,IAAI,KAAK,MAAM,IAC/D;GAAE,GAAG;IAAM,KAAK,QAAQ,KAAK,OAAO;IAAW,KAAK,UAAU,MAAM;EAAO,IAC3E,GACN;EACJ,MAAM,eAAe,KAAK,GAAG,4BAA4B,KAAK,MAAM,SAAS,MAAM,EAAE;EAErF,OAAO;CACT,CAAC;CAED,MAAM,qBACJ,UACA,aAQA,SAAS,QAAQ,WAAW,MAAM,cAAc,cAAc,SAAS,SAAS,MAC/E,SAAS,QAAQ,qBAAqB,cAAc,SAAS,kBAC7D,CAAC,SAAS,eAAe,SAAS,mBACnC,CAAC,SAAS,mBAAmB,MAAM,SAAS,KAAK,OAAO,SAAS,oBAAoB;CA0JvF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,kBAvKuB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,SACA,UACA,UACA,KACA;GACA,MAAM,QAAQ,OAAO;GAErB,UAAU,SAAS,QAAQ,SAAS,gBAAgB,SAAS,QAAQ,SAAS,cAAc;GAC5F,MAAM,OAAO,QAAQ;GACrB,MAAM,QAAQ,QAAQ;GACtB,MAAM,KAAK,kBAAkB,OAAO,aAAa,KAAK,MAAM,MAAM;GAElE,MAAM,aAAa,oBAAoB,mBAAmB;IACxD,cAAc;IACd,MAAM,SAAS,QAAQ;IACvB,sBAAsB,SAAS;IAC/B,YAAY,SAAS,QAAQ;IAC7B,WAAW,SAAS;IACpB,WAAW,SAAS;IACpB,SAAS,SAAS;IAClB,UAAU;KACR,GAAG,QAAQ;KACX,aAAa,CACX,GAAG,QAAQ,SAAS,aACpB;MACE,cAAc;MACd,UAAU,gBAAgB,OAAO,iBAAiB,KAAK,MAAM,MAAM;KACrE,CACF;IACF;IACA,QAAQ;IACR,eAAe,SAAS,QAAQ,iBAAiB,SAAS;IAC1D,wBAAwB,SAAS;IACjC,gBAAgB,SAAS;IACzB,aAAa,SAAS;IACtB,SAAS,SAAS;IAClB,gBAAgB,SAAS;GAC3B,CAAC;GAED,MAAM,OAAO,oBAAoB,0BAA0B;IACzD,cAAc;IACd,MAAM,SAAS,QAAQ;IACvB,eAAe,WAAW;IAC1B,iBAAiB;GACnB,CAAC;GAED,MAAM,QAAQ;IAAE,WAAW,QAAQ;IAAU;IAAY,SAAS;IAAM,QAAQ,MAAM;GAAO;GAC7F,MAAM,WAAW,cAAc,WAAW,MAAM,WAAW,oBAAoB;GAC/E,MAAM,eAAe,UAAU,WAAW,MAAM,WAAW,UAAU;GACrE,MAAM,QAAQ,KAAK;GAEnB,MAAM,SAAS,OAAO,MAAM,KAC1B,MAAM,OACN,MAAM,MAAM,OAAO,GAAG,MAAM,gBAAgB,SAAS,CAAC,GACtD,EAAE,OAAO,EAAE,CACb;GAEA,UAAU,OAAO,KAAK,WAAW,CAAC;GAElC,MAAM,WAAW,OAAO,MAAM,OAC5B,MAAM,OACN;IACE,GAAG,MAAM,oBAAoB,aAAa,KAAK;KAC9C,MAAM,gBAAgB;KACtB,MAAM,OAAO,WAAW;KACxB,MAAM,uBAAuB,WAAW;KACxC,MAAM,YAAY,QAAQ;KAC1B,MAAM,eAAe;KACrB,MAAM,QAAQ,MAAM,oBAAoB;KACxC,MAAM,UAAU,MAAM;KACtB,MAAM,gBAAgB;GACzB,GACA,GAAG,MAAM,gBAAgB,SAAS,CACpC;GAEA,OAAO,OAAO,SAAS;GACvB,MAAM,QAAQ,KAAK;GAEnB,MAAM,SAAS;IACb,GAAG,MAAM,WAAW,aAAa,KAAK;KACrC,MAAM,eAAe;KACrB,MAAM,YAAY,QAAQ;KAC1B,MAAM,OAAO,WAAW;KACxB,MAAM,uBAAuB,WAAW;KACxC,MAAM,gBAAgB;KACtB,MAAM,YAAY;KAClB,MAAM,aAAa,WAAW;KAC9B,MAAM,YAAY,WAAW;KAC7B,MAAM,qBAAqB,MAAM;KACjC,MAAM,SAAS,MAAM,WAAW;KAChC,MAAM,gBAAgB,MAAM,WAAW,oBAAoB,WAAW,aAAa;KACnF,MAAM,yBAAyB,MAAM,WAAW,6BAC/C,WAAW,sBACb;KACC,MAAM,iBAAiB,MAAM,WAAW,qBAAqB,WAAW,cAAc;KACtF,MAAM,cAAc,QAAQ,UAAU,kBAAkB,WAAW,WAAW;KAC9E,MAAM,UAAU,WAAW;KAC3B,MAAM,iBAAiB,WAAW;KAClC,MAAM,WAAW,OAAO,KAAK;KAC7B,MAAM,WAAW,YAAY,QAAQ,MAAM,cAAc,GAAG;KAC5D,QAAQ,UAAU,aAAa;GAClC;GAEA,OAAO,MAAM,OAAO,MAAM,OAAO,QAAQ,GAAG,MAAM,eAAe,GAAG,CAAC;GACrE,KAAK,MAAM,eAAe,MAAM,cAC9B,IACE,YAAY,UAAU,MAAM,SAC5B,YAAY,SAAS,SAAS,QAC9B,CAAC,YAAY,KAAK,MAAM,QAAQ,IAAI,MAAM,kBAAkB,EAAE,GAE9D,YAAY,OAAO,CAAC,GAAG,YAAY,MAAM,MAAM;GACnD,MAAM,SAAS,KAAK;GAEpB,MAAM,eAAe;IACnB,GAAG,MAAM,UAAU,aAAa,KAAK;KACpC,OAAO,YAAY,QAAQ;KAC3B,OAAO,eAAe;KACtB,OAAO,WAAW,MAAM;KACxB,OAAO,SAAS,MAAM,UAAU;GACnC;GAEA,OAAO,MAAM,OAAO,OAAO,OAAO,cAAc;KAC7C,OAAO,YAAY,QAAQ;KAC3B,OAAO,eAAe;GACzB,CAAC;GACD,KAAK,MAAM,eAAe,MAAM,cAC9B,IACE,YAAY,UAAU,OAAO,SAC7B,CAAC,YAAY,KAAK,MAAM,QAAQ,IAAI,OAAO,kBAAkB,EAAE,GAE/D,YAAY,OAAO,CAAC,GAAG,YAAY,MAAM,YAAY;GAEzD,MAAM,UAAU,oBAAoB,mBAAmB;IACrD,GAAG,MAAM,OAAO,UAAU,MAAM,CAAC;IACjC,UAAU,WAAW;IACrB,QAAQ;GACV,CAAC;GAED,UACE,eAAe,SAAS,UAAU,KAChC,QAAQ,YAAY,WAAW,WAC/B,QAAQ,mBAAmB,WAAW,kBACtC,QAAQ,gBAAgB,WAAW,WACvC;GACA,UAAU,QAAQ,SAAS,MAAM,CAAC,CAAC,iBAAiB,EAAE;GACtD,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,MAAM,gBAAgB,MAAM,KAAK;GAEzE,OAAO;EACT,CAiBiB;CACjB;AACF"}

package/dist/internal/passkey/write-target.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"write-target.mjs","names":[],"sources":["../../../src/internal/passkey/write-target.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\nimport { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n PasskeyConfigurationError,\n PasskeyManagementPersistence,\n PasskeyManagementPolicy,\n PasskeyMethodPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport as M from \"@yielded/auth/Passkey\";\nimport { SubjectId } from \"@yielded/auth/Schema\";\nimport { SessionInvalidationWindow } from \"@yielded/auth/Sessions\";\nimport { Effect, Layer, Schema } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport type { PasskeyMappingSource } from \"../models/passkey-model\";\nimport type {\n PasskeyManagementServices,\n PasskeyRegistrationServices,\n PasskeyRegistrationWriter,\n} from \"../models/passkey-write-model\";\nimport type { QueryOperations } from \"../query-operations\";\nimport type { makeTransactionExecutionKernel } from \"../transaction-execution-kernel\";\nimport type { makePasskeyEnrollmentKernel } from \"./enrollment\";\nimport type { makePasskeyManagementKernel } from \"./management\";\nimport type { makePasskeyRegistrationWriteKernel } from \"./registration-write\";\nimport { CurrentPasskeyTransaction } from \"./state\";\nimport type { makePasskeyStateKernel } from \"./state\";\nimport type {\n PasskeyExecution,\n PasskeyCoordinatorError,\n PasskeyTargetConfiguration,\n makePasskeyTargetKernel,\n} from \"./target\";\n\nexport const makePasskeyWriteTargetKernel = (\n operations: QueryOperations,\n enrollment: Pick<\n ReturnType<typeof makePasskeyEnrollmentKernel>,\n \"completeEnrollment\" \| \"issueEnrollment\"\n >,\n management: Pick<\n ReturnType<typeof makePasskeyManagementKernel>,\n \"inspectRemove\" \| \"listCredentials\" \| \"removeCredential\" \| \"renameCredential\"\n >,\n registrationWrite: Pick<\n ReturnType<typeof makePasskeyRegistrationWriteKernel>,\n \"completeRegistration\" \| \"inspectRegistration\" \| \"issueRegistration\"\n >,\n state: Pick<ReturnType<typeof makePasskeyStateKernel>, \"invariant\" \| \"nonce\" \| \"unavailable\">,\n target: Pick<\n ReturnType<typeof makePasskeyTargetKernel>,\n \| \"capturedMapping\"\n \| \"capturedService\"\n \| \"makePasskeyExecution\"\n \| \"makePasskeyPersistence\"\n \| \"observationalContext\"\n \| \"prepareValue\"\n >,\n execution: Pick<ReturnType<typeof makeTransactionExecutionKernel>, \"coordinateTransactionOwner\">,\n) => {\n const { getTableColumns } = operations;\n const { completeEnrollment, issueEnrollment } = enrollment;\n const { inspectRemove, listCredentials, removeCredential, renameCredential } = management;\n const { completeRegistration, inspectRegistration, issueRegistration } = registrationWrite;\n const { nonce, unavailable } = state;\n const invariant: (value: unknown) => asserts value = state.invariant;\n\n const {\n capturedMapping,\n capturedService,\n makePasskeyExecution,\n makePasskeyPersistence,\n observationalContext,\n prepareValue,\n } = target;\n\n const { coordinateTransactionOwner } = execution;\n\n const passkeyManagementPersistenceLayer = <E, R>(\n services: Effect.Effect<PasskeyManagementServices, E, R>,\n ) =>\n Layer.effect(\n PasskeyManagementPersistence,\n Effect.map(services, (value) => value.passkeyManagementPersistence),\n );\n\n const issueSchema = Schema.Struct({\n ceremony: M.PasskeyCeremony,\n policy: PasskeyMethodPolicy,\n management: PasskeyManagementPolicy,\n authorization: M.PasskeyActionAuthorization,\n });\n\n const completeSchema = Schema.Struct({\n claim: M.PasskeyClaim,\n verified: M.PasskeyRegistrationVerified,\n authorization: M.PasskeyActionAuthorization,\n management: PasskeyManagementPolicy,\n nowMillis: M.PasskeyInstant,\n });\n\n const metadata = { moduleId: M.PasskeyModuleId, subjectId: SubjectId };\n\n const identity = {\n ...metadata,\n commandId: M.PasskeyCommandId,\n credentialId: M.PasskeyCredentialId,\n };\n\n const retention = { nowMillis: M.PasskeyInstant, retentionUntilMillis: M.PasskeyInstant };\n\n const managementSchemas = {\n list: Schema.Struct({\n ...metadata,\n cursor: Schema.optionalKey(M.PasskeyCredentialId),\n limit: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 64 })),\n }),\n issueEnrollment: issueSchema,\n completeEnrollment: completeSchema,\n inspectRemove: Schema.Struct(identity),\n rename: Schema.Struct({ ...identity, ...retention, name: M.PasskeyLabel }),\n remove: Schema.Struct({\n moduleId: M.PasskeyModuleId,\n commandId: M.PasskeyCommandId,\n credential: M.PasskeyCredential,\n authorization: M.PasskeyActionAuthorization,\n management: PasskeyManagementPolicy,\n invalidation: SessionInvalidationWindow,\n ...retention,\n }),\n };\n\n const enrolled = Schema.Union([\n Schema.TaggedStruct(\"Enrolled\", { credential: M.PasskeyCredentialSummary }),\n Schema.TaggedStruct(\"Rejected\", {}),\n ]);\n\n const renamed = Schema.Union([\n Schema.TaggedStruct(\"Renamed\", {\n credential: M.PasskeyCredentialSummary,\n replayed: Schema.Boolean,\n }),\n Schema.TaggedStruct(\"Rejected\", {}),\n ]);\n\n const removed = Schema.Union([\n Schema.TaggedStruct(\"Removed\", { result: M.PasskeyRemoved }),\n Schema.TaggedStruct(\"Rejected\", {}),\n Schema.TaggedStruct(\"LastSignInMethod\", {}),\n ]);\n\n const registrationDecision = Schema.Union([\n M.PasskeyRegistrationResult,\n Schema.TaggedStruct(\"Rejected\", {}),\n ]);\n\n const managementService = (\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyManagementPersistence[\"Service\"] =>\n capturedService<PasskeyManagementPersistence[\"Service\"]>(\n {\n list: (input) => execute.run(observationalContext(listCredentials(mapping, input)), false),\n inspectRemove: (input) =>\n execute.run(observationalContext(inspectRemove(mapping, input)), false),\n issueEnrollment: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(M.PasskeyIssueDecision, yield* issueEnrollment(mapping, input)),\n prepare,\n );\n }),\n ),\n completeEnrollment: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(enrolled, yield* completeEnrollment(mapping, input)),\n prepare,\n );\n }),\n ),\n rename: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(renamed, yield* renameCredential(mapping, input)),\n prepare,\n );\n }),\n ),\n remove: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(removed, yield* removeCredential(mapping, input)),\n prepare,\n );\n }),\n ),\n },\n managementSchemas,\n execute,\n );\n\n const registrationService = <R>(\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyRegistrationWriter<R> =>\n capturedService<PasskeyRegistrationWriter<R>>(\n {\n inspect: (registration) =>\n execute.run(observationalContext(inspectRegistration(mapping, registration)), false),\n issueRegistration: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(\n M.PasskeyIssueDecision,\n yield* issueRegistration(mapping, input),\n ),\n prepare,\n );\n }),\n ),\n completeRegistration: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(\n registrationDecision,\n yield* completeRegistration(mapping, input),\n ),\n prepare,\n );\n }),\n ),\n },\n {\n inspect: Schema.toType(mapping.registration.schema),\n issueRegistration: Schema.Struct({\n ceremony: M.PasskeyCeremony,\n policy: PasskeyMethodPolicy,\n registration: Schema.toType(mapping.registration.schema),\n }),\n completeRegistration: Schema.Struct({\n claim: M.PasskeyClaim,\n verified: M.PasskeyRegistrationVerified,\n nowMillis: M.PasskeyInstant,\n }),\n },\n execute,\n );\n\n const descriptor = (table: any) => {\n const columns = getTableColumns(table.table);\n\n for (const [field, name] of Object.entries(table))\n if (typeof name === \"string\" && !field.endsWith(\"State\"))\n invariant(columns[name] !== undefined);\n };\n\n const writeMapping = <M, RSetup>(\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n registration: boolean,\n ) =>\n Effect.flatMap(capturedMapping(source, \"assertion\", configuration), (mapping) =>\n Effect.try({\n try: () => {\n const m = mapping as any;\n\n for (const name of [m.write.credential.name, m.write.credential.createdAt])\n invariant(getTableColumns(m.read.credential.table)[name] !== undefined);\n for (const name of m.write.policy.subjectColumns)\n invariant(getTableColumns(m.read.subject.table)[name] !== undefined);\n invariant(\n m.write.credential.activeStatus !== m.write.credential.removedStatus &&\n m.write.authority.activeStatus !== m.write.authority.removedStatus &&\n m.write.credentialOwnership.ownedState !== m.write.credentialOwnership.removedState,\n );\n invariant(\n m.read.credential.isActiveStatus(m.write.credential.activeStatus) &&\n !m.read.credential.isActiveStatus(m.write.credential.removedStatus) &&\n m.read.authority.isActiveStatus(m.write.authority.activeStatus) &&\n !m.read.authority.isActiveStatus(m.write.authority.removedStatus) &&\n m.read.credentialOwnership.isOwnedState(m.write.credentialOwnership.ownedState) &&\n !m.read.credentialOwnership.isOwnedState(m.write.credentialOwnership.removedState) &&\n m.read.handleOwnership.isOwnedState(m.write.handleOwnership.ownedState),\n );\n if (registration) {\n descriptor(m.intent);\n descriptor(m.handle);\n invariant(m.handle.table === m.read.handleOwnership.table);\n invariant(\n m.handle.reservedState !== m.write.handleOwnership.ownedState &&\n m.intent.pendingState !== m.intent.acceptedState &&\n m.intent.rejectedState !== m.intent.pendingState &&\n m.intent.rejectedState !== m.intent.acceptedState,\n );\n invariant(\n m.registrationConstraints.intentFlow.join(\"/\") === \"moduleId/flowId\" &&\n m.registrationConstraints.intentCommand.join(\"/\") === \"moduleId/commandId\" &&\n m.registrationConstraints.handle.join(\"/\") === \"handleKey\",\n );\n } else {\n descriptor(m.command);\n invariant(m.managementConstraints.command.join(\"/\") === \"moduleId/commandId\");\n snapshotPasskeySync(SessionInvalidationWindow, m.invalidation.window);\n invariant(\n m.invalidation.window.trigger === \"credential-change\" &&\n m.invalidation.mutations.length <= 32,\n );\n }\n\n return mapping;\n },\n catch: () => PasskeyConfigurationError.make({}),\n }),\n );\n\n const managementServices = (\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n ): PasskeyManagementServices => ({\n passkeyManagementPersistence: managementService(mapping, execute),\n passkeyPersistence: makePasskeyPersistence(mapping, execute, configuration, false, true),\n });\n\n const registrationServices = <R>(\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n ): PasskeyRegistrationServices<R> => ({\n passkeyRegistrationAuthority: registrationService<R>(mapping, execute),\n passkeyPersistence: makePasskeyPersistence(mapping, execute, configuration, true),\n });\n\n const makeTargetPasskeyManagement = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ) =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, false);\n const hooks = yield* LifecycleHooks;\n\n return managementServices(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n );\n });\n\n const makeTargetPasskeyRegistrationWriter = <M, R, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ) =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, true);\n const hooks = yield* LifecycleHooks;\n\n return registrationServices<R>(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n );\n });\n\n const coordinateTargetPasskeyManagement = <M, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n body: (\n transaction: Transaction,\n services: PasskeyManagementServices,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, false);\n const hooks = yield* LifecycleHooks;\n\n return yield* coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execute) =>\n managementServices(\n mapping,\n {\n ...execute,\n run: (operation, mutation) =>\n execute.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n body,\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n });\n\n const coordinateTargetPasskeyRegistrationWriter = <M, Value, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n body: (\n transaction: Transaction,\n services: PasskeyRegistrationServices<Value>,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, true);\n const hooks = yield* LifecycleHooks;\n\n return yield* coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execute) =>\n registrationServices<Value>(\n mapping,\n {\n ...execute,\n run: (operation, mutation) =>\n execute.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n body,\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n });\n\n return {\n passkeyManagementPersistenceLayer,\n makeTargetPasskeyManagement,\n makeTargetPasskeyRegistrationWriter,\n coordinateTargetPasskeyManagement,\n coordinateTargetPasskeyRegistrationWriter,\n };\n};\n"],"mappings":";;;;;;;;AAoCA,MAAa,gCACX,YACA,YAIA,YAIA,mBAIA,OACA,QASA,cACG;CACH,MAAM,EAAE,oBAAoB;CAC5B,MAAM,EAAE,oBAAoB,oBAAoB;CAChD,MAAM,EAAE,eAAe,iBAAiB,kBAAkB,qBAAqB;CAC/E,MAAM,EAAE,sBAAsB,qBAAqB,sBAAsB;CACzE,MAAM,EAAE,OAAO,gBAAgB;CAC/B,MAAM,YAA+C,MAAM;CAE3D,MAAM,EACJ,iBACA,iBACA,sBACA,wBACA,sBACA,iBACE;CAEJ,MAAM,EAAE,+BAA+B;CAEvC,MAAM,qCACJ,aAEA,MAAM,OACJ,8BACA,OAAO,IAAI,WAAW,UAAU,MAAM,4BAA4B,CACpE;CAEF,MAAM,cAAc,OAAO,OAAO;EAChC,UAAU,EAAE;EACZ,QAAQ;EACR,YAAY;EACZ,eAAe,EAAE;CACnB,CAAC;CAED,MAAM,iBAAiB,OAAO,OAAO;EACnC,OAAO,EAAE;EACT,UAAU,EAAE;EACZ,eAAe,EAAE;EACjB,YAAY;EACZ,WAAW,EAAE;CACf,CAAC;CAED,MAAM,WAAW;EAAE,UAAU,EAAE;EAAiB,WAAW;CAAU;CAErE,MAAM,WAAW;EACf,GAAG;EACH,WAAW,EAAE;EACb,cAAc,EAAE;CAClB;CAEA,MAAM,YAAY;EAAE,WAAW,EAAE;EAAgB,sBAAsB,EAAE;CAAe;CAExF,MAAM,oBAAoB;EACxB,MAAM,OAAO,OAAO;GAClB,GAAG;GACH,QAAQ,OAAO,YAAY,EAAE,mBAAmB;GAChD,OAAO,OAAO,IAAI,MAAM,OAAO,UAAU;IAAE,SAAS;IAAG,SAAS;GAAG,CAAC,CAAC;EACvE,CAAC;EACD,iBAAiB;EACjB,oBAAoB;EACpB,eAAe,OAAO,OAAO,QAAQ;EACrC,QAAQ,OAAO,OAAO;GAAE,GAAG;GAAU,GAAG;GAAW,MAAM,EAAE;EAAa,CAAC;EACzE,QAAQ,OAAO,OAAO;GACpB,UAAU,EAAE;GACZ,WAAW,EAAE;GACb,YAAY,EAAE;GACd,eAAe,EAAE;GACjB,YAAY;GACZ,cAAc;GACd,GAAG;EACL,CAAC;CACH;CAEA,MAAM,WAAW,OAAO,MAAM,CAC5B,OAAO,aAAa,YAAY,EAAE,YAAY,EAAE,yBAAyB,CAAC,GAC1E,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;CAED,MAAM,UAAU,OAAO,MAAM,CAC3B,OAAO,aAAa,WAAW;EAC7B,YAAY,EAAE;EACd,UAAU,OAAO;CACnB,CAAC,GACD,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;CAED,MAAM,UAAU,OAAO,MAAM;EAC3B,OAAO,aAAa,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;EAC3D,OAAO,aAAa,YAAY,CAAC,CAAC;EAClC,OAAO,aAAa,oBAAoB,CAAC,CAAC;CAC5C,CAAC;CAED,MAAM,uBAAuB,OAAO,MAAM,CACxC,EAAE,2BACF,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;CAED,MAAM,qBACJ,SACA,YAEA,gBACE;EACE,OAAO,UAAU,QAAQ,IAAI,qBAAqB,gBAAgB,SAAS,KAAK,CAAC,GAAG,KAAK;EACzF,gBAAgB,UACd,QAAQ,IAAI,qBAAqB,cAAc,SAAS,KAAK,CAAC,GAAG,KAAK;EACxE,kBAAkB,OAAO,YACvB,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,EAAE,sBAAsB,OAAO,gBAAgB,SAAS,KAAK,CAAC,GAClF,OACF;EACF,CAAC,CACH;EACF,qBAAqB,OAAO,YAC1B,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,UAAU,OAAO,mBAAmB,SAAS,KAAK,CAAC,GACvE,OACF;EACF,CAAC,CACH;EACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,SAAS,OAAO,iBAAiB,SAAS,KAAK,CAAC,GACpE,OACF;EACF,CAAC,CACH;EACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,SAAS,OAAO,iBAAiB,SAAS,KAAK,CAAC,GACpE,OACF;EACF,CAAC,CACH;CACJ,GACA,mBACA,OACF;CAEF,MAAM,uBACJ,SACA,YAEA,gBACE;EACE,UAAU,iBACR,QAAQ,IAAI,qBAAqB,oBAAoB,SAAS,YAAY,CAAC,GAAG,KAAK;EACrF,oBAAoB,OAAO,YACzB,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBACE,EAAE,sBACF,OAAO,kBAAkB,SAAS,KAAK,CACzC,GACA,OACF;EACF,CAAC,CACH;EACF,uBAAuB,OAAO,YAC5B,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBACE,sBACA,OAAO,qBAAqB,SAAS,KAAK,CAC5C,GACA,OACF;EACF,CAAC,CACH;CACJ,GACA;EACE,SAAS,OAAO,OAAO,QAAQ,aAAa,MAAM;EAClD,mBAAmB,OAAO,OAAO;GAC/B,UAAU,EAAE;GACZ,QAAQ;GACR,cAAc,OAAO,OAAO,QAAQ,aAAa,MAAM;EACzD,CAAC;EACD,sBAAsB,OAAO,OAAO;GAClC,OAAO,EAAE;GACT,UAAU,EAAE;GACZ,WAAW,EAAE;EACf,CAAC;CACH,GACA,OACF;CAEF,MAAM,cAAc,UAAe;EACjC,MAAM,UAAU,gBAAgB,MAAM,KAAK;EAE3C,KAAK,MAAM,CAAC,OAAO,SAAS,OAAO,QAAQ,KAAK,GAC9C,IAAI,OAAO,SAAS,YAAY,CAAC,MAAM,SAAS,OAAO,GACrD,UAAU,QAAQ,UAAU,KAAA,CAAS;CAC3C;CAEA,MAAM,gBACJ,QACA,eACA,iBAEA,OAAO,QAAQ,gBAAgB,QAAQ,aAAa,aAAa,IAAI,YACnE,OAAO,IAAI;EACT,WAAW;GACT,MAAM,IAAI;GAEV,KAAK,MAAM,QAAQ,CAAC,EAAE,MAAM,WAAW,MAAM,EAAE,MAAM,WAAW,SAAS,GACvE,UAAU,gBAAgB,EAAE,KAAK,WAAW,KAAK,CAAC,CAAC,UAAU,KAAA,CAAS;GACxE,KAAK,MAAM,QAAQ,EAAE,MAAM,OAAO,gBAChC,UAAU,gBAAgB,EAAE,KAAK,QAAQ,KAAK,CAAC,CAAC,UAAU,KAAA,CAAS;GACrE,UACE,EAAE,MAAM,WAAW,iBAAiB,EAAE,MAAM,WAAW,iBACrD,EAAE,MAAM,UAAU,iBAAiB,EAAE,MAAM,UAAU,iBACrD,EAAE,MAAM,oBAAoB,eAAe,EAAE,MAAM,oBAAoB,YAC3E;GACA,UACE,EAAE,KAAK,WAAW,eAAe,EAAE,MAAM,WAAW,YAAY,KAC9D,CAAC,EAAE,KAAK,WAAW,eAAe,EAAE,MAAM,WAAW,aAAa,KAClE,EAAE,KAAK,UAAU,eAAe,EAAE,MAAM,UAAU,YAAY,KAC9D,CAAC,EAAE,KAAK,UAAU,eAAe,EAAE,MAAM,UAAU,aAAa,KAChE,EAAE,KAAK,oBAAoB,aAAa,EAAE,MAAM,oBAAoB,UAAU,KAC9E,CAAC,EAAE,KAAK,oBAAoB,aAAa,EAAE,MAAM,oBAAoB,YAAY,KACjF,EAAE,KAAK,gBAAgB,aAAa,EAAE,MAAM,gBAAgB,UAAU,CAC1E;GACA,IAAI,cAAc;IAChB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,OAAO,UAAU,EAAE,KAAK,gBAAgB,KAAK;IACzD,UACE,EAAE,OAAO,kBAAkB,EAAE,MAAM,gBAAgB,cACjD,EAAE,OAAO,iBAAiB,EAAE,OAAO,iBACnC,EAAE,OAAO,kBAAkB,EAAE,OAAO,gBACpC,EAAE,OAAO,kBAAkB,EAAE,OAAO,aACxC;IACA,UACE,EAAE,wBAAwB,WAAW,KAAK,GAAG,MAAM,qBACjD,EAAE,wBAAwB,cAAc,KAAK,GAAG,MAAM,wBACtD,EAAE,wBAAwB,OAAO,KAAK,GAAG,MAAM,WACnD;GACF,OAAO;IACL,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,sBAAsB,QAAQ,KAAK,GAAG,MAAM,oBAAoB;IAC5E,oBAAoB,2BAA2B,EAAE,aAAa,MAAM;IACpE,UACE,EAAE,aAAa,OAAO,YAAY,uBAChC,EAAE,aAAa,UAAU,UAAU,EACvC;GACF;GAEA,OAAO;EACT;EACA,aAAa,0BAA0B,KAAK,CAAC,CAAC;CAChD,CAAC,CACH;CAEF,MAAM,sBACJ,SACA,SACA,mBAC+B;EAC/B,8BAA8B,kBAAkB,SAAS,OAAO;EAChE,oBAAoB,uBAAuB,SAAS,SAAS,eAAe,OAAO,IAAI;CACzF;CAEA,MAAM,wBACJ,SACA,SACA,mBACoC;EACpC,8BAA8B,oBAAuB,SAAS,OAAO;EACrE,oBAAoB,uBAAuB,SAAS,SAAS,eAAe,IAAI;CAClF;CAEA,MAAM,+BACJ,UACA,QACA,kBAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,KAAK;EAChE,MAAM,QAAQ,OAAO;EAErB,OAAO,mBACL,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF;CACF,CAAC;CAEH,MAAM,uCACJ,UACA,QACA,kBAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,IAAI;EAC/D,MAAM,QAAQ,OAAO;EAErB,OAAO,qBACL,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF;CACF,CAAC;CAEH,MAAM,qCACJ,UACA,QACA,eACA,SAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,KAAK;EAChE,MAAM,QAAQ,OAAO;EAErB,OAAO,OAAO,2BACZ,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,YACC,mBACE,SACA;GACE,GAAG;GACH,MAAM,WAAW,aACf,QAAQ,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;EACtF,GACA,aACF,GACF,IACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACrD,CAAC;CAEH,MAAM,6CACJ,UACA,QACA,eACA,SAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,IAAI;EAC/D,MAAM,QAAQ,OAAO;EAErB,OAAO,OAAO,2BACZ,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,YACC,qBACE,SACA;GACE,GAAG;GACH,MAAM,WAAW,aACf,QAAQ,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;EACtF,GACA,aACF,GACF,IACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACrD,CAAC;CAEH,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF"}
1	+ {"version":3,"file":"write-target.mjs","names":[],"sources":["../../../src/internal/passkey/write-target.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- existing mapped-row bridge; public adapters preserve table, ID, and Effect types. /\n\nimport { LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport {\n PasskeyConfigurationError,\n PasskeyManagementPersistence,\n PasskeyManagementPolicy,\n PasskeyMethodPolicy,\n snapshotPasskeySync,\n} from \"@yielded/auth/Passkey\";\nimport as M from \"@yielded/auth/Passkey\";\nimport { SubjectId } from \"@yielded/auth/Schema\";\nimport { SessionInvalidationWindow } from \"@yielded/auth/Sessions\";\nimport { Effect, Layer, Schema } from \"effect\";\nimport type { Statement } from \"effect/sql/Statement\";\n\nimport type { PasskeyMappingSource } from \"../models/passkey-model\";\nimport type {\n PasskeyManagementServices,\n PasskeyRegistrationServices,\n PasskeyRegistrationWriter,\n} from \"../models/passkey-write-model\";\nimport type { QueryOperations } from \"../query-operations\";\nimport type { makeTransactionExecutionKernel } from \"../transaction-execution-kernel\";\nimport type { makePasskeyEnrollmentKernel } from \"./enrollment\";\nimport type { makePasskeyManagementKernel } from \"./management\";\nimport type { makePasskeyRegistrationWriteKernel } from \"./registration-write\";\nimport { CurrentPasskeyTransaction } from \"./state\";\nimport type { makePasskeyStateKernel } from \"./state\";\nimport type {\n PasskeyExecution,\n PasskeyCoordinatorError,\n PasskeyTargetConfiguration,\n makePasskeyTargetKernel,\n} from \"./target\";\n\nexport const makePasskeyWriteTargetKernel = (\n operations: QueryOperations,\n enrollment: Pick<\n ReturnType<typeof makePasskeyEnrollmentKernel>,\n \"completeEnrollment\" \| \"issueEnrollment\"\n >,\n management: Pick<\n ReturnType<typeof makePasskeyManagementKernel>,\n \"inspectRemove\" \| \"listCredentials\" \| \"removeCredential\" \| \"renameCredential\"\n >,\n registrationWrite: Pick<\n ReturnType<typeof makePasskeyRegistrationWriteKernel>,\n \"completeRegistration\" \| \"inspectRegistration\" \| \"issueRegistration\"\n >,\n state: Pick<ReturnType<typeof makePasskeyStateKernel>, \"invariant\" \| \"nonce\" \| \"unavailable\">,\n target: Pick<\n ReturnType<typeof makePasskeyTargetKernel>,\n \| \"capturedMapping\"\n \| \"capturedService\"\n \| \"makePasskeyExecution\"\n \| \"makePasskeyPersistence\"\n \| \"observationalContext\"\n \| \"prepareValue\"\n >,\n execution: Pick<ReturnType<typeof makeTransactionExecutionKernel>, \"coordinateTransactionOwner\">,\n) => {\n const { getTableColumns } = operations;\n const { completeEnrollment, issueEnrollment } = enrollment;\n const { inspectRemove, listCredentials, removeCredential, renameCredential } = management;\n const { completeRegistration, inspectRegistration, issueRegistration } = registrationWrite;\n const { nonce, unavailable } = state;\n const invariant: (value: unknown) => asserts value = state.invariant;\n\n const {\n capturedMapping,\n capturedService,\n makePasskeyExecution,\n makePasskeyPersistence,\n observationalContext,\n prepareValue,\n } = target;\n\n const { coordinateTransactionOwner } = execution;\n\n const passkeyManagementPersistenceLayer = <E, R>(\n services: Effect.Effect<PasskeyManagementServices, E, R>,\n ) =>\n Layer.effect(\n PasskeyManagementPersistence,\n Effect.map(services, (value) => value.passkeyManagementPersistence),\n );\n\n const issueSchema = Schema.Struct({\n ceremony: M.PasskeyCeremony,\n policy: PasskeyMethodPolicy,\n management: PasskeyManagementPolicy,\n authorization: M.PasskeyActionAuthorization,\n });\n\n const completeSchema = Schema.Struct({\n claim: M.PasskeyClaim,\n verified: M.PasskeyRegistrationVerified,\n authorization: M.PasskeyActionAuthorization,\n management: PasskeyManagementPolicy,\n nowMillis: M.PasskeyInstant,\n });\n\n const metadata = { moduleId: M.PasskeyModuleId, subjectId: SubjectId };\n\n const identity = {\n ...metadata,\n commandId: M.PasskeyCommandId,\n credentialId: M.PasskeyCredentialId,\n };\n\n const retention = { nowMillis: M.PasskeyInstant, retentionUntilMillis: M.PasskeyInstant };\n\n const managementSchemas = {\n list: Schema.Struct({\n ...metadata,\n cursor: Schema.optionalKey(M.PasskeyCredentialId),\n limit: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 64 })),\n }),\n issueEnrollment: issueSchema,\n completeEnrollment: completeSchema,\n inspectRemove: Schema.Struct(identity),\n rename: Schema.Struct({ ...identity, ...retention, name: M.PasskeyLabel }),\n remove: Schema.Struct({\n moduleId: M.PasskeyModuleId,\n commandId: M.PasskeyCommandId,\n credential: M.PasskeyCredential,\n authorization: M.PasskeyActionAuthorization,\n management: PasskeyManagementPolicy,\n invalidation: SessionInvalidationWindow,\n ...retention,\n }),\n };\n\n const enrolled = Schema.Union([\n Schema.TaggedStruct(\"Enrolled\", { credential: M.PasskeyCredentialSummary }),\n Schema.TaggedStruct(\"Rejected\", {}),\n ]);\n\n const renamed = Schema.Union([\n Schema.TaggedStruct(\"Renamed\", {\n credential: M.PasskeyCredentialSummary,\n replayed: Schema.Boolean,\n }),\n Schema.TaggedStruct(\"Rejected\", {}),\n ]);\n\n const removed = Schema.Union([\n Schema.TaggedStruct(\"Removed\", { result: M.PasskeyRemoved }),\n Schema.TaggedStruct(\"Rejected\", {}),\n Schema.TaggedStruct(\"LastSignInMethod\", {}),\n ]);\n\n const registrationDecision = Schema.Union([\n M.PasskeyRegistrationResult,\n Schema.TaggedStruct(\"Rejected\", {}),\n ]);\n\n const managementService = (\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyManagementPersistence[\"Service\"] =>\n capturedService<PasskeyManagementPersistence[\"Service\"]>(\n {\n list: (input) => execute.run(observationalContext(listCredentials(mapping, input)), false),\n inspectRemove: (input) =>\n execute.run(observationalContext(inspectRemove(mapping, input)), false),\n issueEnrollment: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(M.PasskeyIssueDecision, yield* issueEnrollment(mapping, input)),\n prepare,\n );\n }),\n ),\n completeEnrollment: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(enrolled, yield* completeEnrollment(mapping, input)),\n prepare,\n );\n }),\n ),\n rename: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(renamed, yield* renameCredential(mapping, input)),\n prepare,\n );\n }),\n ),\n remove: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(removed, yield* removeCredential(mapping, input)),\n prepare,\n );\n }),\n ),\n },\n managementSchemas,\n execute,\n );\n\n const registrationService = <R>(\n mapping: any,\n execute: PasskeyExecution,\n ): PasskeyRegistrationWriter<R> =>\n capturedService<PasskeyRegistrationWriter<R>>(\n {\n inspect: (registration) =>\n execute.run(observationalContext(inspectRegistration(mapping, registration)), false),\n issueRegistration: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(\n M.PasskeyIssueDecision,\n yield* issueRegistration(mapping, input),\n ),\n prepare,\n );\n }),\n ),\n completeRegistration: (input, prepare) =>\n execute.run(\n Effect.gen(function* () {\n return yield* prepareValue(\n snapshotPasskeySync(\n registrationDecision,\n yield* completeRegistration(mapping, input),\n ),\n prepare,\n );\n }),\n ),\n },\n {\n inspect: Schema.toType(mapping.registration.schema),\n issueRegistration: Schema.Struct({\n ceremony: M.PasskeyCeremony,\n policy: PasskeyMethodPolicy,\n registration: Schema.toType(mapping.registration.schema),\n }),\n completeRegistration: Schema.Struct({\n claim: M.PasskeyClaim,\n verified: M.PasskeyRegistrationVerified,\n nowMillis: M.PasskeyInstant,\n }),\n },\n execute,\n );\n\n const descriptor = (table: any) => {\n const columns = getTableColumns(table.table);\n\n for (const [field, name] of Object.entries(table))\n if (typeof name === \"string\" && !field.endsWith(\"State\"))\n invariant(columns[name] !== undefined);\n };\n\n const writeMapping = <M, RSetup>(\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n registration: boolean,\n ) =>\n Effect.flatMap(capturedMapping(source, \"assertion\", configuration), (mapping) =>\n Effect.try({\n try: () => {\n const m = mapping as any;\n\n for (const name of [m.write.credential.name, m.write.credential.createdAt])\n invariant(getTableColumns(m.read.credential.table)[name] !== undefined);\n for (const name of m.write.policy.subjectColumns)\n invariant(getTableColumns(m.read.subject.table)[name] !== undefined);\n invariant(\n m.write.credential.activeStatus !== m.write.credential.removedStatus &&\n m.write.authority.activeStatus !== m.write.authority.removedStatus &&\n m.write.credentialOwnership.ownedState !== m.write.credentialOwnership.removedState,\n );\n invariant(\n m.read.credential.isActiveStatus(m.write.credential.activeStatus) &&\n !m.read.credential.isActiveStatus(m.write.credential.removedStatus) &&\n m.read.authority.isActiveStatus(m.write.authority.activeStatus) &&\n !m.read.authority.isActiveStatus(m.write.authority.removedStatus) &&\n m.read.credentialOwnership.isOwnedState(m.write.credentialOwnership.ownedState) &&\n !m.read.credentialOwnership.isOwnedState(m.write.credentialOwnership.removedState) &&\n m.read.handleOwnership.isOwnedState(m.write.handleOwnership.ownedState),\n );\n if (registration) {\n descriptor(m.intent);\n descriptor(m.handle);\n invariant(m.handle.table === m.read.handleOwnership.table);\n invariant(\n m.handle.reservedState !== m.write.handleOwnership.ownedState &&\n m.intent.pendingState !== m.intent.acceptedState &&\n m.intent.rejectedState !== m.intent.pendingState &&\n m.intent.rejectedState !== m.intent.acceptedState,\n );\n invariant(\n m.registrationConstraints.intentFlow.join(\"/\") === \"moduleId/flowId\" &&\n m.registrationConstraints.intentCommand.join(\"/\") === \"moduleId/commandId\" &&\n m.registrationConstraints.handle.join(\"/\") === \"handleKey\",\n );\n } else {\n descriptor(m.command);\n invariant(m.managementConstraints.command.join(\"/\") === \"moduleId/commandId\");\n snapshotPasskeySync(SessionInvalidationWindow, m.invalidation.window);\n invariant(\n m.invalidation.window.trigger === \"credential-change\" &&\n m.invalidation.mutations.length <= 32,\n );\n }\n\n return mapping;\n },\n catch: () => PasskeyConfigurationError.make({}),\n }),\n );\n\n const managementServices = (\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n ): PasskeyManagementServices => ({\n passkeyManagementPersistence: managementService(mapping, execute),\n passkeyPersistence: makePasskeyPersistence(mapping, execute, configuration, false, true),\n });\n\n const registrationServices = <R>(\n mapping: any,\n execute: PasskeyExecution,\n configuration: PasskeyTargetConfiguration,\n ): PasskeyRegistrationServices<R> => ({\n passkeyRegistrationAuthority: registrationService<R>(mapping, execute),\n passkeyPersistence: makePasskeyPersistence(mapping, execute, configuration, true),\n });\n\n const makeTargetPasskeyManagement = <M, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ) =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, false);\n const hooks = yield* LifecycleHooks;\n\n return managementServices(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n );\n });\n\n const makeTargetPasskeyRegistrationWriter = <M, R, RSetup>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n ) =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, true);\n const hooks = yield* LifecycleHooks;\n\n return registrationServices<R>(\n mapping,\n makePasskeyExecution(database, hooks, configuration),\n configuration,\n );\n });\n\n const coordinateTargetPasskeyManagement = <M, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n body: (\n transaction: Transaction,\n services: PasskeyManagementServices,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, false);\n const hooks = yield* LifecycleHooks;\n\n return yield* coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execute) =>\n managementServices(\n mapping,\n {\n ...execute,\n run: (operation, mutation) =>\n execute.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n body,\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n });\n\n const coordinateTargetPasskeyRegistrationWriter = <M, Value, RSetup, Transaction, A, E, R>(\n database: any,\n source: PasskeyMappingSource<M, RSetup>,\n configuration: PasskeyTargetConfiguration,\n body: (\n transaction: Transaction,\n services: PasskeyRegistrationServices<Value>,\n append: (statement: Statement<unknown>) => void,\n ) => Effect.Effect<A, E, R>,\n ): Effect.Effect<A, PasskeyCoordinatorError<E>, R \| RSetup \| LifecycleHooks> =>\n Effect.gen(function* () {\n const mapping = yield* writeMapping(source, configuration, true);\n const hooks = yield* LifecycleHooks;\n\n return yield* coordinateTransactionOwner(\n database,\n CurrentPasskeyTransaction,\n configuration,\n Effect.void,\n unavailable,\n nonce,\n (execute) =>\n registrationServices<Value>(\n mapping,\n {\n ...execute,\n run: (operation, mutation) =>\n execute.run(operation, mutation).pipe(Effect.provideService(LifecycleHooks, hooks)),\n },\n configuration,\n ),\n body,\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n });\n\n return {\n passkeyManagementPersistenceLayer,\n makeTargetPasskeyManagement,\n makeTargetPasskeyRegistrationWriter,\n coordinateTargetPasskeyManagement,\n coordinateTargetPasskeyRegistrationWriter,\n };\n};\n"],"mappings":";;;;;;;;AAoCA,MAAa,gCACX,YACA,YAIA,YAIA,mBAIA,OACA,QASA,cACG;CACH,MAAM,EAAE,oBAAoB;CAC5B,MAAM,EAAE,oBAAoB,oBAAoB;CAChD,MAAM,EAAE,eAAe,iBAAiB,kBAAkB,qBAAqB;CAC/E,MAAM,EAAE,sBAAsB,qBAAqB,sBAAsB;CACzE,MAAM,EAAE,OAAO,gBAAgB;CAC/B,MAAM,YAA+C,MAAM;CAE3D,MAAM,EACJ,iBACA,iBACA,sBACA,wBACA,sBACA,iBACE;CAEJ,MAAM,EAAE,+BAA+B;CAEvC,MAAM,qCACJ,aAEA,MAAM,OACJ,8BACA,OAAO,IAAI,WAAW,UAAU,MAAM,4BAA4B,CACpE;CAEF,MAAM,cAAc,OAAO,OAAO;EAChC,UAAU,EAAE;EACZ,QAAQ;EACR,YAAY;EACZ,eAAe,EAAE;CACnB,CAAC;CAED,MAAM,iBAAiB,OAAO,OAAO;EACnC,OAAO,EAAE;EACT,UAAU,EAAE;EACZ,eAAe,EAAE;EACjB,YAAY;EACZ,WAAW,EAAE;CACf,CAAC;CAED,MAAM,WAAW;EAAE,UAAU,EAAE;EAAiB,WAAW;CAAU;CAErE,MAAM,WAAW;EACf,GAAG;EACH,WAAW,EAAE;EACb,cAAc,EAAE;CAClB;CAEA,MAAM,YAAY;EAAE,WAAW,EAAE;EAAgB,sBAAsB,EAAE;CAAe;CAExF,MAAM,oBAAoB;EACxB,MAAM,OAAO,OAAO;GAClB,GAAG;GACH,QAAQ,OAAO,YAAY,EAAE,mBAAmB;GAChD,OAAO,OAAO,IAAI,MAAM,OAAO,UAAU;IAAE,SAAS;IAAG,SAAS;GAAG,CAAC,CAAC;EACvE,CAAC;EACD,iBAAiB;EACjB,oBAAoB;EACpB,eAAe,OAAO,OAAO,QAAQ;EACrC,QAAQ,OAAO,OAAO;GAAE,GAAG;GAAU,GAAG;GAAW,MAAM,EAAE;EAAa,CAAC;EACzE,QAAQ,OAAO,OAAO;GACpB,UAAU,EAAE;GACZ,WAAW,EAAE;GACb,YAAY,EAAE;GACd,eAAe,EAAE;GACjB,YAAY;GACZ,cAAc;GACd,GAAG;EACL,CAAC;CACH;CAEA,MAAM,WAAW,OAAO,MAAM,CAC5B,OAAO,aAAa,YAAY,EAAE,YAAY,EAAE,yBAAyB,CAAC,GAC1E,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;CAED,MAAM,UAAU,OAAO,MAAM,CAC3B,OAAO,aAAa,WAAW;EAC7B,YAAY,EAAE;EACd,UAAU,OAAO;CACnB,CAAC,GACD,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;CAED,MAAM,UAAU,OAAO,MAAM;EAC3B,OAAO,aAAa,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;EAC3D,OAAO,aAAa,YAAY,CAAC,CAAC;EAClC,OAAO,aAAa,oBAAoB,CAAC,CAAC;CAC5C,CAAC;CAED,MAAM,uBAAuB,OAAO,MAAM,CACxC,EAAE,2BACF,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;CAED,MAAM,qBACJ,SACA,YAEA,gBACE;EACE,OAAO,UAAU,QAAQ,IAAI,qBAAqB,gBAAgB,SAAS,KAAK,CAAC,GAAG,KAAK;EACzF,gBAAgB,UACd,QAAQ,IAAI,qBAAqB,cAAc,SAAS,KAAK,CAAC,GAAG,KAAK;EACxE,kBAAkB,OAAO,YACvB,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,EAAE,sBAAsB,OAAO,gBAAgB,SAAS,KAAK,CAAC,GAClF,OACF;EACF,CAAC,CACH;EACF,qBAAqB,OAAO,YAC1B,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,UAAU,OAAO,mBAAmB,SAAS,KAAK,CAAC,GACvE,OACF;EACF,CAAC,CACH;EACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,SAAS,OAAO,iBAAiB,SAAS,KAAK,CAAC,GACpE,OACF;EACF,CAAC,CACH;EACF,SAAS,OAAO,YACd,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBAAoB,SAAS,OAAO,iBAAiB,SAAS,KAAK,CAAC,GACpE,OACF;EACF,CAAC,CACH;CACJ,GACA,mBACA,OACF;CAEF,MAAM,uBACJ,SACA,YAEA,gBACE;EACE,UAAU,iBACR,QAAQ,IAAI,qBAAqB,oBAAoB,SAAS,YAAY,CAAC,GAAG,KAAK;EACrF,oBAAoB,OAAO,YACzB,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBACE,EAAE,sBACF,OAAO,kBAAkB,SAAS,KAAK,CACzC,GACA,OACF;EACF,CAAC,CACH;EACF,uBAAuB,OAAO,YAC5B,QAAQ,IACN,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,aACZ,oBACE,sBACA,OAAO,qBAAqB,SAAS,KAAK,CAC5C,GACA,OACF;EACF,CAAC,CACH;CACJ,GACA;EACE,SAAS,OAAO,OAAO,QAAQ,aAAa,MAAM;EAClD,mBAAmB,OAAO,OAAO;GAC/B,UAAU,EAAE;GACZ,QAAQ;GACR,cAAc,OAAO,OAAO,QAAQ,aAAa,MAAM;EACzD,CAAC;EACD,sBAAsB,OAAO,OAAO;GAClC,OAAO,EAAE;GACT,UAAU,EAAE;GACZ,WAAW,EAAE;EACf,CAAC;CACH,GACA,OACF;CAEF,MAAM,cAAc,UAAe;EACjC,MAAM,UAAU,gBAAgB,MAAM,KAAK;EAE3C,KAAK,MAAM,CAAC,OAAO,SAAS,OAAO,QAAQ,KAAK,GAC9C,IAAI,OAAO,SAAS,YAAY,CAAC,MAAM,SAAS,OAAO,GACrD,UAAU,QAAQ,UAAU,KAAA,CAAS;CAC3C;CAEA,MAAM,gBACJ,QACA,eACA,iBAEA,OAAO,QAAQ,gBAAgB,QAAQ,aAAa,aAAa,IAAI,YACnE,OAAO,IAAI;EACT,WAAW;GACT,MAAM,IAAI;GAEV,KAAK,MAAM,QAAQ,CAAC,EAAE,MAAM,WAAW,MAAM,EAAE,MAAM,WAAW,SAAS,GACvE,UAAU,gBAAgB,EAAE,KAAK,WAAW,KAAK,CAAC,CAAC,UAAU,KAAA,CAAS;GACxE,KAAK,MAAM,QAAQ,EAAE,MAAM,OAAO,gBAChC,UAAU,gBAAgB,EAAE,KAAK,QAAQ,KAAK,CAAC,CAAC,UAAU,KAAA,CAAS;GACrE,UACE,EAAE,MAAM,WAAW,iBAAiB,EAAE,MAAM,WAAW,iBACrD,EAAE,MAAM,UAAU,iBAAiB,EAAE,MAAM,UAAU,iBACrD,EAAE,MAAM,oBAAoB,eAAe,EAAE,MAAM,oBAAoB,YAC3E;GACA,UACE,EAAE,KAAK,WAAW,eAAe,EAAE,MAAM,WAAW,YAAY,KAC9D,CAAC,EAAE,KAAK,WAAW,eAAe,EAAE,MAAM,WAAW,aAAa,KAClE,EAAE,KAAK,UAAU,eAAe,EAAE,MAAM,UAAU,YAAY,KAC9D,CAAC,EAAE,KAAK,UAAU,eAAe,EAAE,MAAM,UAAU,aAAa,KAChE,EAAE,KAAK,oBAAoB,aAAa,EAAE,MAAM,oBAAoB,UAAU,KAC9E,CAAC,EAAE,KAAK,oBAAoB,aAAa,EAAE,MAAM,oBAAoB,YAAY,KACjF,EAAE,KAAK,gBAAgB,aAAa,EAAE,MAAM,gBAAgB,UAAU,CAC1E;GACA,IAAI,cAAc;IAChB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,OAAO,UAAU,EAAE,KAAK,gBAAgB,KAAK;IACzD,UACE,EAAE,OAAO,kBAAkB,EAAE,MAAM,gBAAgB,cACjD,EAAE,OAAO,iBAAiB,EAAE,OAAO,iBACnC,EAAE,OAAO,kBAAkB,EAAE,OAAO,gBACpC,EAAE,OAAO,kBAAkB,EAAE,OAAO,aACxC;IACA,UACE,EAAE,wBAAwB,WAAW,KAAK,GAAG,MAAM,qBACjD,EAAE,wBAAwB,cAAc,KAAK,GAAG,MAAM,wBACtD,EAAE,wBAAwB,OAAO,KAAK,GAAG,MAAM,WACnD;GACF,OAAO;IACL,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,sBAAsB,QAAQ,KAAK,GAAG,MAAM,oBAAoB;IAC5E,oBAAoB,2BAA2B,EAAE,aAAa,MAAM;IACpE,UACE,EAAE,aAAa,OAAO,YAAY,uBAChC,EAAE,aAAa,UAAU,UAAU,EACvC;GACF;GAEA,OAAO;EACT;EACA,aAAa,0BAA0B,KAAK,CAAC,CAAC;CAChD,CAAC,CACH;CAEF,MAAM,sBACJ,SACA,SACA,mBAC+B;EAC/B,8BAA8B,kBAAkB,SAAS,OAAO;EAChE,oBAAoB,uBAAuB,SAAS,SAAS,eAAe,OAAO,IAAI;CACzF;CAEA,MAAM,wBACJ,SACA,SACA,mBACoC;EACpC,8BAA8B,oBAAuB,SAAS,OAAO;EACrE,oBAAoB,uBAAuB,SAAS,SAAS,eAAe,IAAI;CAClF;CAEA,MAAM,+BACJ,UACA,QACA,kBAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,KAAK;EAChE,MAAM,QAAQ,OAAO;EAErB,OAAO,mBACL,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF;CACF,CAAC;CAEH,MAAM,uCACJ,UACA,QACA,kBAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,IAAI;EAC/D,MAAM,QAAQ,OAAO;EAErB,OAAO,qBACL,SACA,qBAAqB,UAAU,OAAO,aAAa,GACnD,aACF;CACF,CAAC;CAEH,MAAM,qCACJ,UACA,QACA,eACA,SAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,KAAK;EAChE,MAAM,QAAQ,OAAO;EAErB,OAAO,OAAO,2BACZ,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,YACC,mBACE,SACA;GACE,GAAG;GACH,MAAM,WAAW,aACf,QAAQ,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;EACtF,GACA,aACF,GACF,IACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACrD,CAAC;CAEH,MAAM,6CACJ,UACA,QACA,eACA,SAMA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,aAAa,QAAQ,eAAe,IAAI;EAC/D,MAAM,QAAQ,OAAO;EAErB,OAAO,OAAO,2BACZ,UACA,2BACA,eACA,OAAO,MACP,aACA,QACC,YACC,qBACE,SACA;GACE,GAAG;GACH,MAAM,WAAW,aACf,QAAQ,IAAI,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;EACtF,GACA,aACF,GACF,IACF,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC;CACrD,CAAC;CAEH,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/internal/passkey-kernel.d.mts CHANGED Viewed

@@ -4349,7 +4349,7 @@ export declare const makePasskeyKernel: (operations: QueryOperations) => {
   };
   target: {
     sqlClientPasskeyStandaloneGuard: (database: Parameters<<Failure>(unavailable: () => Failure, database: {
-      readonly $client: Pick<import("effect/unstable/sql/SqlClient").SqlClient, "transactionService">;
+      readonly $client: Pick<import("effect/sql/SqlClient").SqlClient, "transactionService">;
     }) => import("effect/Effect").Effect<void, Failure, never>>[1]) => import("effect/Effect").Effect<void, import("@yielded/auth/Passkey").PasskeyUnavailable, never>;
     makePasskeyExecution: (database: Parameters<<Failure, OwnerId>(ownerTag: import("effect/Context").Key<OwnerId, TransactionOwner<Failure>>, database: TransactionNativeDatabase, configuration: TransactionTargetConfiguration<Failure>, unavailable: () => Failure, nonce: () => string, bound?: TransactionBound<Failure>) => TransactionExecution<Failure, OwnerId>>[1], hooks: import("@yielded/auth/Hooks").LifecycleHooks["Service"], configuration: PasskeyTargetConfiguration) => PasskeyExecution;
     capturedService: <S>(service: S, schemas: Record<string, import("effect/Schema").Codec<any, any, never, never>>, execute: PasskeyExecution) => S;
@@ -4361,8 +4361,8 @@ export declare const makePasskeyKernel: (operations: QueryOperations) => {
     makeTargetPasskeyEnrollmentContext: <M, RSetup>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration) => import("effect/Effect").Effect<PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup>;
     makeTargetPasskeyPersistence: <M, RSetup>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration) => import("effect/Effect").Effect<PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
     makeTargetPasskeyRegistration: <M, RSetup>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration) => import("effect/Effect").Effect<PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
-    coordinateTargetPasskey: <M, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, owner: (transaction: Transaction, services: PasskeyPersistenceServices, append: (statement: import("effect/unstable/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
-    coordinateTargetPasskeyRegistration: <M, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, owner: (transaction: Transaction, services: PasskeyRegistrationCeremonyServices, append: (statement: import("effect/unstable/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
+    coordinateTargetPasskey: <M, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, owner: (transaction: Transaction, services: PasskeyPersistenceServices, append: (statement: import("effect/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
+    coordinateTargetPasskeyRegistration: <M, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, owner: (transaction: Transaction, services: PasskeyRegistrationCeremonyServices, append: (statement: import("effect/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
   };
   writeState: {
     jsonStorage: <S extends import("effect/Schema").Codec<unknown, unknown, never, never>>(schema: S) => {
@@ -5584,8 +5584,8 @@ export declare const makePasskeyKernel: (operations: QueryOperations) => {
     passkeyManagementPersistenceLayer: <E, R>(services: import("effect/Effect").Effect<PasskeyManagementServices, E, R>) => import("effect/Layer").Layer<import("@yielded/auth/Passkey").PasskeyManagementPersistence, E, Exclude<R, import("effect/Scope").Scope>>;
     makeTargetPasskeyManagement: <M, RSetup>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration) => import("effect/Effect").Effect<PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
     makeTargetPasskeyRegistrationWriter: <M, R, RSetup>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration) => import("effect/Effect").Effect<PasskeyRegistrationServices<R>, import("@yielded/auth/Passkey").PasskeyConfigurationError | PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
-    coordinateTargetPasskeyManagement: <M, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, body: (transaction: Transaction, services: PasskeyManagementServices, append: (statement: import("effect/unstable/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
-    coordinateTargetPasskeyRegistrationWriter: <M, Value, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, body: (transaction: Transaction, services: PasskeyRegistrationServices<Value>, append: (statement: import("effect/unstable/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
+    coordinateTargetPasskeyManagement: <M, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, body: (transaction: Transaction, services: PasskeyManagementServices, append: (statement: import("effect/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
+    coordinateTargetPasskeyRegistrationWriter: <M, Value, RSetup, Transaction, A, E, R>(database: any, source: PasskeyMappingSource<M, RSetup>, configuration: PasskeyTargetConfiguration, body: (transaction: Transaction, services: PasskeyRegistrationServices<Value>, append: (statement: import("effect/sql/Statement").Statement<unknown>) => void) => import("effect/Effect").Effect<A, E, R>) => import("effect/Effect").Effect<A, PasskeyCoordinatorError<E>, R | RSetup | import("@yielded/auth/Hooks").LifecycleHooks>;
   };
 };
 //#endregion

package/dist/internal/passkeys.mjs CHANGED Viewed

@@ -6,7 +6,7 @@ import { requireStandalone } from "./standalone.mjs";
 import { makePasskeyKernel } from "./passkey-kernel.mjs";
 import { storageTables } from "./storage-tables.mjs";
 import { Context, Effect, Schema } from "effect";
-import { SqlClient } from "effect/unstable/sql";
+import { SqlClient } from "effect/sql";
 import { digest } from "@yielded/auth-crypto";
 import { PasskeyCredential, PasskeyCredentials, PasskeyEnrollmentContext, PasskeyManagementPersistence, PasskeyManagementPolicy, PasskeyMethodPolicy, PasskeyPersistence, PasskeyProfile, PasskeyRequirement, PasskeyUnavailable } from "@yielded/auth/Passkey";
 //#region src/internal/passkeys.ts