@yielded/auth-persistence 0.1.0-beta.10

package/dist/internal/proof-kernel.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-kernel.mjs","names":[],"sources":["../../src/internal/proof-kernel.ts"],"sourcesContent":["import {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  LifecycleHooks,\n  HookConfigurationError,\n} from \"@yielded/auth/Hooks\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport {\n  type ProofCompletionPlan,\n  ProofBinding,\n  type ProofAttemptDecision,\n  type ProofCleanupResult,\n  type ProofCompletionDecision,\n  type ProofDeliveryOutcome,\n  type ProofVersion,\n  type ProofBudget,\n  type ProofPolicy,\n  ProofPersistence,\n  type ProofDeliveryClaim,\n  ProofRequestConflict,\n  ProofUnavailable,\n} from \"@yielded/auth/Proofs\";\nimport { Cause, Context, DateTime, Effect, Option, Schema } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport {\n  type AnyProofPersistenceMapping,\n  requiredProofConstraints,\n  type ProofPersistenceMapping,\n  type ProofAction,\n  type ProofCommandDecision,\n  type ProofContinuationRecord,\n  type ProofScopeKeys,\n  type ProofScopeKind,\n} from \"./models/proof-model\";\nimport {\n  CurrentPasswordPreparedTransaction,\n  PasswordPreparedPostconditions,\n} from \"./PasswordPreparedPostconditions\";\n/* oxlint-disable no-explicit-any -- existing storage kernels erase foreign table shapes; domain errors remain typed. */\nimport type { TableModel as Table } from \"./query-operations\";\nimport type { QueryFailure } from \"./query-operations\";\nimport type { QueryOperations, SqlFragment, SqlColumn } from \"./query-operations\";\n\ntype AdapterFailure = QueryFailure | PersistenceMappingError | SqlError.SqlError;\n\nexport interface ProofSqlQuery<A = ReadonlyArray<any>> extends Effect.Effect<A, AdapterFailure> {\n  readonly getSQL: () => ReturnType<QueryOperations[\"sql\"]>;\n  readonly from: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly where: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly limit: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly orderBy: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly for: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly set: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly values: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly onConflictDoNothing: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n  readonly onDuplicateKeyUpdate: (...args: ReadonlyArray<any>) => ProofSqlQuery<A>;\n}\n\nexport interface ProofSqlDatabase {\n  readonly select: (...args: ReadonlyArray<any>) => ProofSqlQuery;\n  readonly insert: (...args: ReadonlyArray<any>) => ProofSqlQuery;\n  readonly update: (...args: ReadonlyArray<any>) => ProofSqlQuery;\n  readonly delete: (...args: ReadonlyArray<any>) => ProofSqlQuery;\n  readonly transaction: <A, E, R>(\n    body: (transaction: ProofSqlDatabase) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport class CurrentProofSql extends Context.Service<CurrentProofSql, ProofSqlDatabase>()(\n  \"effect-auth/CurrentProofSql\",\n) {}\n\nexport interface ProofSqlConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, ProofUnavailable>;\n  readonly coordinated?: boolean;\n  /** Dialect-native insert-if-absent used to create serialization anchors. */\n  readonly insertIfAbsent: (\n    query: ProofSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => ProofSqlQuery;\n}\n\ntype Database = ProofSqlDatabase;\n\ninterface ScopeEntry {\n  readonly kind: ProofScopeKind;\n  readonly key: string;\n  readonly budget: ProofBudget;\n}\n\nexport const makeProofKernel = <\n  Fragment extends SqlFragment = SqlFragment,\n  Column extends SqlColumn = SqlColumn,\n>(\n  operations: QueryOperations<Fragment, Column>,\n) => {\n  type Mapping = AnyProofPersistenceMapping<Fragment>;\n\n  const { and, eq, gte, inArray, isNull, lte, notExists, sql, column, updateValues } = operations;\n  const unavailable = () => ProofUnavailable.make({});\n\n  const translateFailure = <A, E, R>(\n    effect: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, ProofUnavailable, R> =>\n    reportPersistenceFailure(\n      effect,\n      (error) => Schema.is(ProofUnavailable)(error) || Schema.is(HookConfigurationError)(error),\n    ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\n  const translateIssueFailure = <A, E, R>(\n    effect: Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, ProofUnavailable | ProofRequestConflict, R> =>\n    reportPersistenceFailure(\n      effect,\n      (error) =>\n        Schema.is(ProofUnavailable)(error) ||\n        Schema.is(ProofRequestConflict)(error) ||\n        Schema.is(HookConfigurationError)(error),\n    ).pipe(\n      Effect.catchCause((cause) =>\n        Effect.failCause(\n          Cause.map(cause, (error) =>\n            Schema.is(ProofRequestConflict)(error) ? error : unavailable(),\n          ),\n        ),\n      ),\n    );\n\n  const conflict = () => ProofRequestConflict.make({});\n\n  const validConstraints = (mapping: Mapping) =>\n    Object.entries(requiredProofConstraints).every(\n      ([key, value]) => mapping.constraints[key as keyof typeof requiredProofConstraints] === value,\n    );\n\n  const selectRows = (query: ProofSqlQuery, locking: boolean) =>\n    locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\n  const allocateVersion = (\n    mapping: Mapping,\n    mode: ProofSqlConfiguration[\"mode\"],\n  ): Effect.Effect<ProofVersion, ProofUnavailable | PersistenceMappingError> => {\n    if (mode === \"synchronous\")\n      return mapping.allocateVersionSync === undefined\n        ? Effect.fail(unavailable())\n        : Effect.try({\n            try: mapping.allocateVersionSync,\n            catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n          });\n    if (mapping.allocateVersion !== undefined) return mapping.allocateVersion;\n\n    return mapping.allocateVersionSync === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: mapping.allocateVersionSync,\n          catch: (cause) => new PersistenceMappingError({ operation: \"mapping\", cause }),\n        });\n  };\n\n  const canonicalBinding = Schema.encodeSync(Schema.fromJsonString(ProofBinding));\n\n  const sameBinding = (left: ProofBinding, right: ProofBinding): boolean =>\n    canonicalBinding(left) === canonicalBinding(right);\n\n  const requestColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.request.table, mapping.request.moduleId),\n    requestId: column(mapping.request.table, mapping.request.requestId),\n    fingerprint: column(mapping.request.table, mapping.request.fingerprint),\n    proofId: column(mapping.request.table, mapping.request.proofId),\n    retentionUntil: column(mapping.request.table, mapping.request.retentionUntil),\n  });\n\n  const seriesColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.series.table, mapping.series.moduleId),\n    purpose: column(mapping.series.table, mapping.series.purpose),\n    scopeKey: column(mapping.series.table, mapping.series.scopeKey),\n    activeProofId: column(mapping.series.table, mapping.series.activeProofId),\n    lastIssueAt: column(mapping.series.table, mapping.series.lastIssueAt),\n    version: column(mapping.series.table, mapping.series.version),\n  });\n\n  const generationColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.generation.table, mapping.generation.moduleId),\n    purpose: column(mapping.generation.table, mapping.generation.purpose),\n    proofId: column(mapping.generation.table, mapping.generation.proofId),\n    requestId: column(mapping.generation.table, mapping.generation.requestId),\n    seriesKey: column(mapping.generation.table, mapping.generation.seriesKey),\n    deliveryId: column(mapping.generation.table, mapping.generation.deliveryId),\n    verifierKeyId: column(mapping.generation.table, mapping.generation.verifierKeyId),\n    verifierDigest: column(mapping.generation.table, mapping.generation.verifierDigest),\n    issuedAt: column(mapping.generation.table, mapping.generation.issuedAt),\n    expiresAt: column(mapping.generation.table, mapping.generation.expiresAt),\n    version: column(mapping.generation.table, mapping.generation.version),\n    state: column(mapping.generation.table, mapping.generation.state),\n    sendCount: column(mapping.generation.table, mapping.generation.sendCount),\n    deliveryState: column(mapping.generation.table, mapping.generation.deliveryState),\n    claimVersion: column(mapping.generation.table, mapping.generation.claimVersion),\n    claimDeadline: column(mapping.generation.table, mapping.generation.claimDeadline),\n    retryAt: column(mapping.generation.table, mapping.generation.retryAt),\n    deliveryRetryMillis: column(mapping.generation.table, mapping.generation.deliveryRetryMillis),\n    retentionUntil: column(mapping.generation.table, mapping.generation.retentionUntil),\n  });\n\n  const continuationColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.continuation.table, mapping.continuation.moduleId),\n    purpose: column(mapping.continuation.table, mapping.continuation.purpose),\n    continuationId: column(mapping.continuation.table, mapping.continuation.continuationId),\n    digest: column(mapping.continuation.table, mapping.continuation.digest),\n    proofId: column(mapping.continuation.table, mapping.continuation.proofId),\n    seriesKey: column(mapping.continuation.table, mapping.continuation.seriesKey),\n    expiresAt: column(mapping.continuation.table, mapping.continuation.expiresAt),\n    consumed: column(mapping.continuation.table, mapping.continuation.consumed),\n    version: column(mapping.continuation.table, mapping.continuation.version),\n    retentionUntil: column(mapping.continuation.table, mapping.continuation.retentionUntil),\n  });\n\n  const scopeColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.rateScope.table, mapping.rateScope.moduleId),\n    purpose: column(mapping.rateScope.table, mapping.rateScope.purpose),\n    action: column(mapping.rateScope.table, mapping.rateScope.action),\n    scopeKind: column(mapping.rateScope.table, mapping.rateScope.scopeKind),\n    scopeKey: column(mapping.rateScope.table, mapping.rateScope.scopeKey),\n  });\n\n  const abuseColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.abuseEvent.table, mapping.abuseEvent.moduleId),\n    purpose: column(mapping.abuseEvent.table, mapping.abuseEvent.purpose),\n    action: column(mapping.abuseEvent.table, mapping.abuseEvent.action),\n    scopeKind: column(mapping.abuseEvent.table, mapping.abuseEvent.scopeKind),\n    scopeKey: column(mapping.abuseEvent.table, mapping.abuseEvent.scopeKey),\n    commandId: column(mapping.abuseEvent.table, mapping.abuseEvent.commandId),\n    occurredAt: column(mapping.abuseEvent.table, mapping.abuseEvent.occurredAt),\n    retentionUntil: column(mapping.abuseEvent.table, mapping.abuseEvent.retentionUntil),\n  });\n\n  const failureColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.failureEvent.table, mapping.failureEvent.moduleId),\n    purpose: column(mapping.failureEvent.table, mapping.failureEvent.purpose),\n    seriesKey: column(mapping.failureEvent.table, mapping.failureEvent.seriesKey),\n    commandId: column(mapping.failureEvent.table, mapping.failureEvent.commandId),\n    occurredAt: column(mapping.failureEvent.table, mapping.failureEvent.occurredAt),\n    retentionUntil: column(mapping.failureEvent.table, mapping.failureEvent.retentionUntil),\n  });\n\n  const commandColumns = (mapping: Mapping) => ({\n    moduleId: column(mapping.command.table, mapping.command.moduleId),\n    commandId: column(mapping.command.table, mapping.command.commandId),\n    kind: column(mapping.command.table, mapping.command.kind),\n    decision: column(mapping.command.table, mapping.command.decision),\n    retentionUntil: column(mapping.command.table, mapping.command.retentionUntil),\n  });\n\n  const nowMillis = DateTime.now.pipe(Effect.map(DateTime.toEpochMillis));\n\n  const lockAuthority = Effect.fn(\"DrizzleProof.lockAuthority\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    purpose: any,\n    binding: ProofBinding,\n    locking: boolean,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const authority = mapping.authority;\n    let nativeSubjectId: unknown | undefined;\n\n    // Canonical order: subject, identifier rows, credentials sorted by ID.\n    if (binding._tag !== \"Identifier\") {\n      if (\n        authority.subject === undefined ||\n        authority.credential === undefined ||\n        authority.subjectId === undefined\n      )\n        return yield* unavailable();\n      nativeSubjectId = yield* authority.subjectId.toNative(binding.revision.subjectId);\n      const subject = authority.subject;\n\n      const rows = yield* selectRows(\n        database\n          .select()\n          .from(subject.table)\n          .where(eq(column(subject.table, subject.id), nativeSubjectId))\n          .limit(1),\n        locking,\n      );\n\n      const row = rows[0];\n\n      if (\n        row === undefined ||\n        !subject.isActiveStatus(row[subject.status]) ||\n        row[subject.securityRevision] !== binding.revision.securityRevision\n      )\n        return false;\n    }\n    const identifier = authority.identifier;\n\n    const identifierRows = yield* selectRows(\n      database\n        .select()\n        .from(identifier.table)\n        .where(\n          and(\n            eq(column(identifier.table, identifier.namespace), binding.identifier.namespace),\n            eq(column(identifier.table, identifier.value), binding.identifier.value),\n          ),\n        ),\n      locking,\n    );\n\n    if (\n      !identifier.isCurrent(\n        {\n          moduleId,\n          purpose,\n          binding,\n          ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n        },\n        identifierRows,\n      )\n    )\n      return false;\n    if (binding._tag === \"Identifier\") return true;\n    const credential = authority.credential!;\n\n    const expected = [...binding.revision.credentials].sort((a, b) =>\n      a.credentialId.localeCompare(b.credentialId),\n    );\n\n    const rows =\n      expected.length === 0\n        ? []\n        : yield* selectRows(\n            database\n              .select()\n              .from(credential.table)\n              .where(\n                and(\n                  eq(column(credential.table, credential.subjectId), nativeSubjectId),\n                  inArray(\n                    column(credential.table, credential.credentialId),\n                    expected.map((item) => item.credentialId),\n                  ),\n                ),\n              ),\n            locking,\n          );\n\n    if (rows.length !== expected.length) return false;\n\n    const actual = rows\n      .map((row: any) => ({\n        credentialId: row[credential.credentialId] as string,\n        revision: row[credential.revision],\n        active:\n          credential.status === undefined ||\n          credential.isActiveStatus?.(row[credential.status]) === true,\n      }))\n      .sort((a: any, b: any) => a.credentialId.localeCompare(b.credentialId));\n\n    return actual.every(\n      (item: any, index: number) =>\n        item.active &&\n        item.credentialId === expected[index]?.credentialId &&\n        item.revision === expected[index]?.revision,\n    );\n  });\n\n  const scopeEntries = (\n    keys: ProofScopeKeys,\n    binding: ProofBinding,\n    action: ProofAction,\n    policy: ProofPolicy,\n  ): ReadonlyArray<ScopeEntry> => {\n    const suffix = action === \"issue\" ? \"Issues\" : \"Attempts\";\n    const simple = action === \"issue\" ? \"issues\" : \"attempts\";\n\n    const entries: ScopeEntry[] = [\n      { kind: \"action\", key: \"*\", budget: policy.abuse[`action${suffix}`] },\n      { kind: \"identifier\", key: keys.identifier, budget: policy.abuse[simple] },\n    ];\n\n    if (binding._tag !== \"Identifier\")\n      entries.push({\n        kind: \"subject\",\n        key: keys.subject,\n        budget: policy.abuse[`subject${suffix}`],\n      });\n\n    return entries;\n  };\n\n  const lockScopes = Effect.fn(\"DrizzleProof.lockScopes\")(function* (\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n    moduleId: string,\n    purpose: any,\n    action: ProofAction,\n    entries: ReadonlyArray<ScopeEntry>,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const c = scopeColumns(mapping);\n\n    for (const entry of entries) {\n      const values = mapping.rateScope.encodeInsert({\n        moduleId,\n        purpose,\n        action,\n        scopeKind: entry.kind,\n        scopeKey: entry.key,\n      });\n\n      const query = database.insert(mapping.rateScope.table).values(values);\n\n      yield* configuration.insertIfAbsent(query, mapping.rateScope.scopeKey, entry.key);\n      yield* selectRows(\n        database\n          .select()\n          .from(mapping.rateScope.table)\n          .where(\n            and(\n              eq(c.moduleId, moduleId),\n              eq(c.purpose, purpose),\n              eq(c.action, action),\n              eq(c.scopeKind, entry.kind),\n              eq(c.scopeKey, entry.key),\n            ),\n          )\n          .limit(1),\n        configuration.locking,\n      );\n    }\n  });\n\n  const admittedScopes = Effect.fn(\"DrizzleProof.admittedScopes\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    purpose: any,\n    action: ProofAction,\n    entries: ReadonlyArray<ScopeEntry>,\n    now: number,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const c = abuseColumns(mapping);\n    const admitted: ScopeEntry[] = [];\n\n    for (const entry of entries) {\n      const rows = yield* selectRows(\n        database\n          .select({ commandId: c.commandId })\n          .from(mapping.abuseEvent.table)\n          .where(\n            and(\n              eq(c.moduleId, moduleId),\n              eq(c.purpose, purpose),\n              eq(c.action, action),\n              eq(c.scopeKind, entry.kind),\n              eq(c.scopeKey, entry.key),\n              gte(c.occurredAt, mapping.encodeInstant(now - entry.budget.windowMillis)),\n            ),\n          )\n          .limit(entry.budget.limit),\n        true,\n      );\n\n      if (rows.length < entry.budget.limit) admitted.push(entry);\n    }\n\n    return admitted;\n  });\n\n  const insertScopeEvents = Effect.fn(\"Drizzle.insertScopeEvents\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    purpose: any,\n    action: ProofAction,\n    commandId: string,\n    entries: ReadonlyArray<ScopeEntry>,\n    now: number,\n    retentionUntil: number,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    return yield* Effect.forEach(\n      entries,\n      (entry) =>\n        database.insert(mapping.abuseEvent.table).values(\n          mapping.abuseEvent.encodeInsert({\n            moduleId,\n            purpose,\n            action,\n            scopeKind: entry.kind,\n            scopeKey: entry.key,\n            commandId,\n            occurredAtMillis: now,\n            retentionUntilMillis: retentionUntil,\n          }),\n        ),\n      { discard: true },\n    );\n  });\n\n  const ensureSeries = Effect.fn(\"DrizzleProof.ensureSeries\")(function* (\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n    moduleId: string,\n    purpose: any,\n    scopeKey: string,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const c = seriesColumns(mapping);\n    const initialVersion = yield* allocateVersion(mapping, configuration.mode);\n\n    const query = database\n      .insert(mapping.series.table)\n      .values(\n        mapping.series.encodeInsert({ moduleId, purpose, scopeKey, version: initialVersion }),\n      );\n\n    yield* configuration.insertIfAbsent(query, mapping.series.scopeKey, scopeKey);\n\n    const rows = yield* selectRows(\n      database\n        .select()\n        .from(mapping.series.table)\n        .where(and(eq(c.moduleId, moduleId), eq(c.purpose, purpose), eq(c.scopeKey, scopeKey)))\n        .limit(1),\n      configuration.locking,\n    );\n\n    return rows[0] ?? (yield* unavailable());\n  });\n\n  const readGeneration = Effect.fn(\"Drizzle.readGeneration\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    proofId: string,\n    locking: boolean,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const c = generationColumns(mapping);\n\n    return yield* selectRows(\n      database\n        .select()\n        .from(mapping.generation.table)\n        .where(and(eq(c.moduleId, moduleId), eq(c.proofId, proofId)))\n        .limit(1),\n      locking,\n    );\n  });\n\n  const failureCount = Effect.fn(\"DrizzleProof.failureCount\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    purpose: any,\n    seriesKey: string,\n    now: number,\n    policy: ProofPolicy,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const c = failureColumns(mapping);\n\n    const rows = yield* selectRows(\n      database\n        .select({ commandId: c.commandId })\n        .from(mapping.failureEvent.table)\n        .where(\n          and(\n            eq(c.moduleId, moduleId),\n            eq(c.purpose, purpose),\n            eq(c.seriesKey, seriesKey),\n            gte(c.occurredAt, mapping.encodeInstant(now - policy.abuse.attempts.windowMillis)),\n          ),\n        )\n        .limit(policy.maximumFailedAttempts),\n      true,\n    );\n\n    return rows.length;\n  });\n\n  const commandRow = Effect.fn(\"Drizzle.commandRow\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    commandId: string,\n    locking: boolean,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const c = commandColumns(mapping);\n\n    return yield* selectRows(\n      database\n        .select()\n        .from(mapping.command.table)\n        .where(and(eq(c.moduleId, moduleId), eq(c.commandId, commandId)))\n        .limit(1),\n      locking,\n    );\n  });\n\n  const insertCommand = Effect.fn(\"Drizzle.insertCommand\")(function* (\n    mapping: Mapping,\n    moduleId: string,\n    commandId: string,\n    kind: \"attempt\" | \"complete\",\n    decision: ProofCommandDecision,\n    retentionUntil: number,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    return yield* database.insert(mapping.command.table).values(\n      mapping.command.encodeInsert({\n        moduleId,\n        commandId,\n        kind,\n        decision,\n        retentionUntilMillis: retentionUntil,\n      }),\n    );\n  });\n\n  const owned = <A, E, R>(\n    database: Database,\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n    body: Effect.Effect<A, E, R>,\n  ) => {\n    if (!validConstraints(mapping)) return Effect.fail(unavailable());\n\n    const run = coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          body.pipe(Effect.provideService(CurrentProofSql, transaction)),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.map((result) => result.value));\n\n    return configuration.coordinated !== true\n      ? Effect.gen(function* () {\n          if (yield* hasCommitScope) return yield* unavailable();\n          yield* configuration.standaloneGuard;\n\n          return yield* run;\n        })\n      : run;\n  };\n\n  const makeSqlProofPersistence = Effect.fn(\"makeSqlProofPersistence\")(function* (\n    database: Database,\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n  ): Effect.fn.Return<ProofPersistence[\"Service\"], never, LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    return ProofPersistence.of({\n      issue: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentProofSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const keys = mapping.scopeKeys({\n              moduleId: input.record.moduleId,\n              purpose: input.record.purpose,\n              binding: input.record.binding,\n            });\n\n            const authorityCurrent = yield* lockAuthority(\n              mapping,\n              input.record.moduleId,\n              input.record.purpose,\n              input.record.binding,\n              configuration.locking,\n            );\n\n            const scopes = scopeEntries(keys, input.record.binding, \"issue\", input.policy);\n\n            yield* lockScopes(\n              mapping,\n              configuration,\n              input.record.moduleId,\n              input.record.purpose,\n              \"issue\",\n              scopes.slice(0, 1),\n            );\n            const actionNow = yield* nowMillis;\n\n            const actionOpen =\n              (yield* admittedScopes(\n                mapping,\n                input.record.moduleId,\n                input.record.purpose,\n                \"issue\",\n                scopes.slice(0, 1),\n                actionNow,\n              )).length === 1;\n\n            if (actionOpen)\n              yield* lockScopes(\n                mapping,\n                configuration,\n                input.record.moduleId,\n                input.record.purpose,\n                \"issue\",\n                scopes.slice(1),\n              );\n\n            const series = actionOpen\n              ? yield* ensureSeries(\n                  mapping,\n                  configuration,\n                  input.record.moduleId,\n                  input.record.purpose,\n                  keys.series,\n                )\n              : undefined;\n\n            const now = yield* nowMillis;\n            const retentionUntil = now + input.policy.requestRetentionMillis;\n            const rc = requestColumns(mapping);\n\n            let requestRows = yield* selectRows(\n              transaction\n                .select()\n                .from(mapping.request.table)\n                .where(\n                  and(\n                    eq(rc.moduleId, input.record.moduleId),\n                    eq(rc.requestId, input.record.requestId),\n                  ),\n                )\n                .limit(1),\n              configuration.locking,\n            );\n\n            let request = requestRows[0];\n\n            if (request !== undefined) {\n              const retainedUntil = yield* mapping.decodeInstant(\n                request[mapping.request.retentionUntil],\n              );\n\n              if (retainedUntil > now) {\n                if (request[mapping.request.fingerprint] !== input.record.fingerprint)\n                  return yield* conflict();\n                const receipt = yield* mapping.request.decodeReceipt(request);\n\n                return prepare({ _tag: \"Existing\", receipt }, journal);\n              }\n              yield* transaction\n                .delete(mapping.request.table)\n                .where(\n                  and(\n                    eq(rc.moduleId, input.record.moduleId),\n                    eq(rc.requestId, input.record.requestId),\n                    lte(rc.retentionUntil, mapping.encodeInstant(now)),\n                  ),\n                );\n            }\n\n            const requestInsert = mapping.request.encodeInsert({\n              record: input.record,\n              createdAtMillis: now,\n              retentionUntilMillis: retentionUntil,\n            });\n\n            const requestQuery = transaction.insert(mapping.request.table).values(requestInsert);\n\n            yield* configuration.insertIfAbsent(\n              requestQuery,\n              mapping.request.requestId,\n              input.record.requestId,\n            );\n            requestRows = yield* selectRows(\n              transaction\n                .select()\n                .from(mapping.request.table)\n                .where(\n                  and(\n                    eq(rc.moduleId, input.record.moduleId),\n                    eq(rc.requestId, input.record.requestId),\n                  ),\n                )\n                .limit(1),\n              configuration.locking,\n            );\n            request = requestRows[0];\n\n            if (request === undefined) return yield* unavailable();\n            if (request[mapping.request.fingerprint] !== input.record.fingerprint)\n              return yield* conflict();\n            if (request[mapping.request.proofId] !== input.record.proofId) {\n              const receipt = yield* mapping.request.decodeReceipt(request);\n\n              return prepare({ _tag: \"Existing\", receipt }, journal);\n            }\n\n            const admitted = actionOpen\n              ? yield* admittedScopes(\n                  mapping,\n                  input.record.moduleId,\n                  input.record.purpose,\n                  \"issue\",\n                  scopes,\n                  now,\n                )\n              : [];\n\n            const sc = seriesColumns(mapping);\n\n            const lastIssueAt =\n              series?.[mapping.series.lastIssueAt] === null ||\n              series?.[mapping.series.lastIssueAt] === undefined\n                ? undefined\n                : yield* mapping.decodeInstant(series[mapping.series.lastIssueAt]);\n\n            const activeProofId = series?.[mapping.series.activeProofId] as\n              | string\n              | null\n              | undefined;\n\n            const supersedesCurrent =\n              input.supersedes === undefined || input.supersedes === activeProofId;\n\n            const allowed =\n              authorityCurrent &&\n              input.eligible &&\n              admitted.length === scopes.length &&\n              input.record.issuedAtMillis <= now &&\n              input.record.expiresAtMillis > now &&\n              supersedesCurrent &&\n              (lastIssueAt === undefined ||\n                now - lastIssueAt >= input.policy.abuse.resendCooldownMillis);\n\n            const receipt = {\n              requestId: input.record.requestId,\n              reference: {\n                proofId: input.record.proofId,\n                purpose: input.record.purpose,\n                keyId: input.record.verifier.keyId,\n              },\n            };\n\n            const prepared = prepare(\n              allowed\n                ? ({ _tag: \"Issued\", record: input.record } as const)\n                : ({ _tag: \"Suppressed\", receipt } as const),\n              journal,\n            );\n\n            if (admitted.length > 0)\n              yield* insertScopeEvents(\n                mapping,\n                input.record.moduleId,\n                input.record.purpose,\n                \"issue\",\n                input.record.requestId,\n                admitted,\n                now,\n                retentionUntil,\n              );\n            if (!allowed) return prepared;\n            if (activeProofId !== null && activeProofId !== undefined)\n              yield* transaction\n                .update(mapping.generation.table)\n                .set(updateValues([[mapping.generation.state, \"superseded\"]]))\n                .where(\n                  and(\n                    eq(generationColumns(mapping).moduleId, input.record.moduleId),\n                    eq(generationColumns(mapping).proofId, activeProofId),\n                    eq(generationColumns(mapping).state, \"active\"),\n                  ),\n                );\n            yield* transaction.insert(mapping.generation.table).values(\n              mapping.generation.encodeInsert({\n                record: input.record,\n                seriesKey: keys.series,\n                retentionUntilMillis: retentionUntil,\n                state: \"active\",\n                deliveryState: \"new\",\n                policy: input.policy,\n              }),\n            );\n            const nextVersion = yield* allocateVersion(mapping, configuration.mode);\n\n            yield* transaction\n              .update(mapping.series.table)\n              .set(\n                updateValues([\n                  [mapping.series.activeProofId, input.record.proofId],\n                  [mapping.series.lastIssueAt, mapping.encodeInstant(now)],\n                  [mapping.series.version, nextVersion],\n                ]),\n              )\n              .where(\n                and(\n                  eq(sc.moduleId, input.record.moduleId),\n                  eq(sc.purpose, input.record.purpose),\n                  eq(sc.scopeKey, keys.series),\n                ),\n              );\n\n            return prepared;\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateIssueFailure,\n        ),\n      attempt: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentProofSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const keys = mapping.scopeKeys({\n              moduleId: input.moduleId,\n              purpose: input.purpose,\n              binding: input.binding,\n            });\n\n            const authorityCurrent = yield* lockAuthority(\n              mapping,\n              input.moduleId,\n              input.purpose,\n              input.binding,\n              configuration.locking,\n            );\n\n            const scopes = scopeEntries(keys, input.binding, \"attempt\", input.policy);\n\n            yield* lockScopes(\n              mapping,\n              configuration,\n              input.moduleId,\n              input.purpose,\n              \"attempt\",\n              scopes.slice(0, 1),\n            );\n            const actionNow = yield* nowMillis;\n\n            const actionOpen =\n              (yield* admittedScopes(\n                mapping,\n                input.moduleId,\n                input.purpose,\n                \"attempt\",\n                scopes.slice(0, 1),\n                actionNow,\n              )).length === 1;\n\n            if (actionOpen)\n              yield* lockScopes(\n                mapping,\n                configuration,\n                input.moduleId,\n                input.purpose,\n                \"attempt\",\n                scopes.slice(1),\n              );\n\n            const series = actionOpen\n              ? yield* ensureSeries(\n                  mapping,\n                  configuration,\n                  input.moduleId,\n                  input.purpose,\n                  keys.series,\n                )\n              : undefined;\n\n            const generation = (yield* readGeneration(\n              mapping,\n              input.moduleId,\n              input.proofId,\n              configuration.locking,\n            ))[0];\n\n            const existingCommand = (yield* commandRow(\n              mapping,\n              input.moduleId,\n              input.continuationId,\n              configuration.locking,\n            ))[0];\n\n            if (existingCommand !== undefined) {\n              if (existingCommand[mapping.command.decision] === \"rejected\")\n                return prepare({ _tag: \"Rejected\" }, journal);\n\n              return yield* unavailable();\n            }\n            const now = yield* nowMillis;\n\n            const admitted = actionOpen\n              ? yield* admittedScopes(\n                  mapping,\n                  input.moduleId,\n                  input.purpose,\n                  \"attempt\",\n                  scopes,\n                  now,\n                )\n              : [];\n\n            const failures = yield* failureCount(\n              mapping,\n              input.moduleId,\n              input.purpose,\n              keys.series,\n              now,\n              input.policy,\n            );\n\n            const gc = generationColumns(mapping);\n            const activeProofId = series?.[mapping.series.activeProofId];\n\n            const storedBinding =\n              generation === undefined\n                ? undefined\n                : yield* mapping.generation.decodeBinding(generation);\n\n            const candidateMatches =\n              generation !== undefined &&\n              input.candidate !== undefined &&\n              generation[mapping.generation.verifierKeyId] === input.candidate.keyId &&\n              generation[mapping.generation.verifierDigest] === input.candidate.digest;\n\n            const currentGeneration =\n              generation !== undefined &&\n              generation[mapping.generation.purpose] === input.purpose &&\n              generation[mapping.generation.state] === \"active\" &&\n              activeProofId === input.proofId &&\n              storedBinding !== undefined &&\n              sameBinding(storedBinding, input.binding) &&\n              Number(yield* mapping.decodeInstant(generation[mapping.generation.expiresAt])) > now;\n\n            const accepted =\n              authorityCurrent &&\n              currentGeneration &&\n              candidateMatches &&\n              admitted.length === scopes.length &&\n              failures < input.policy.maximumFailedAttempts;\n\n            const retentionUntil = now + input.policy.requestRetentionMillis;\n\n            if (!accepted) {\n              const prepared = prepare({ _tag: \"Rejected\" }, journal);\n\n              yield* insertCommand(\n                mapping,\n                input.moduleId,\n                input.continuationId,\n                \"attempt\",\n                \"rejected\",\n                retentionUntil,\n              );\n              yield* insertScopeEvents(\n                mapping,\n                input.moduleId,\n                input.purpose,\n                \"attempt\",\n                input.continuationId,\n                admitted,\n                now,\n                retentionUntil,\n              );\n              if (\n                admitted.length === scopes.length &&\n                currentGeneration &&\n                !candidateMatches &&\n                failures < input.policy.maximumFailedAttempts\n              )\n                yield* transaction.insert(mapping.failureEvent.table).values(\n                  mapping.failureEvent.encodeInsert({\n                    moduleId: input.moduleId,\n                    purpose: input.purpose,\n                    seriesKey: keys.series,\n                    commandId: input.continuationId,\n                    occurredAtMillis: now,\n                    retentionUntilMillis: retentionUntil,\n                  }),\n                );\n\n              return prepared;\n            }\n            const version = yield* allocateVersion(mapping, configuration.mode);\n\n            const expiresAt = Math.min(\n              Number(yield* mapping.decodeInstant(generation![mapping.generation.expiresAt])),\n              now + input.policy.continuationLifetimeMillis,\n            );\n\n            const continuation: ProofContinuationRecord = {\n              moduleId: input.moduleId,\n              purpose: input.purpose,\n              continuationId: input.continuationId,\n              digest: input.continuationDigest,\n              proofId: input.proofId,\n              seriesKey: keys.series,\n              binding: input.binding,\n              expiresAtMillis: expiresAt,\n              version,\n            };\n\n            const decision: ProofAttemptDecision = {\n              _tag: \"Accepted\",\n              continuation: {\n                continuationId: input.continuationId,\n                purpose: input.purpose,\n                expiresAtMillis: expiresAt,\n              },\n            };\n\n            const prepared = prepare(decision, journal);\n\n            yield* insertCommand(\n              mapping,\n              input.moduleId,\n              input.continuationId,\n              \"attempt\",\n              \"accepted\",\n              retentionUntil,\n            );\n            yield* insertScopeEvents(\n              mapping,\n              input.moduleId,\n              input.purpose,\n              \"attempt\",\n              input.continuationId,\n              scopes,\n              now,\n              retentionUntil,\n            );\n            yield* transaction\n              .update(mapping.generation.table)\n              .set(updateValues([[mapping.generation.state, \"consumed\"]]))\n              .where(\n                and(\n                  eq(gc.moduleId, input.moduleId),\n                  eq(gc.proofId, input.proofId),\n                  eq(gc.state, \"active\"),\n                ),\n              );\n            yield* transaction.insert(mapping.continuation.table).values(\n              mapping.continuation.encodeInsert({\n                ...continuation,\n                retentionUntilMillis: retentionUntil,\n              }),\n            );\n\n            return prepared;\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n      complete: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const journal = yield* CurrentCommitJournal;\n\n            return yield* completeIn(mapping, configuration, input, (decision) =>\n              prepare(decision, journal),\n            );\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n      claimDelivery: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentProofSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const rows = yield* readGeneration(\n              mapping,\n              input.moduleId,\n              input.proofId,\n              configuration.locking,\n            );\n\n            const row = rows[0];\n            const now = yield* nowMillis;\n\n            if (row === undefined) return prepare({ _tag: \"Declined\" }, journal);\n            const c = generationColumns(mapping);\n            const expiresAt = yield* mapping.decodeInstant(row[mapping.generation.expiresAt]);\n\n            const claimDeadline =\n              row[mapping.generation.claimDeadline] === null ||\n              row[mapping.generation.claimDeadline] === undefined\n                ? undefined\n                : yield* mapping.decodeInstant(row[mapping.generation.claimDeadline]);\n\n            const retryAt =\n              row[mapping.generation.retryAt] === null ||\n              row[mapping.generation.retryAt] === undefined\n                ? undefined\n                : yield* mapping.decodeInstant(row[mapping.generation.retryAt]);\n\n            let state = row[mapping.generation.deliveryState] as string;\n\n            if (state === \"claimed\" && claimDeadline !== undefined && claimDeadline <= now) {\n              state = \"ambiguous\";\n              yield* transaction\n                .update(mapping.generation.table)\n                .set(updateValues([[mapping.generation.deliveryState, \"ambiguous\"]]))\n                .where(and(eq(c.moduleId, input.moduleId), eq(c.proofId, input.proofId)));\n            }\n\n            const canClaim =\n              row[mapping.generation.version] === input.version &&\n              row[mapping.generation.deliveryId] === input.deliveryId &&\n              row[mapping.generation.state] === \"active\" &&\n              expiresAt > now &&\n              Number(row[mapping.generation.sendCount]) < input.policy.maximumDeliveryAttempts &&\n              (state === \"new\" ||\n                (state === \"ambiguous\" &&\n                  input.allowAmbiguousRetry &&\n                  (retryAt === undefined || retryAt <= now)));\n\n            if (!canClaim) return prepare({ _tag: \"Declined\" }, journal);\n            const claimVersion = yield* allocateVersion(mapping, configuration.mode);\n            const decision: ProofDeliveryClaim = { _tag: \"Claimed\", claimVersion };\n            const prepared = prepare(decision, journal);\n\n            yield* transaction\n              .update(mapping.generation.table)\n              .set(\n                updateValues([\n                  [mapping.generation.sendCount, Number(row[mapping.generation.sendCount]) + 1],\n                  [mapping.generation.deliveryState, \"claimed\"],\n                  [mapping.generation.claimVersion, claimVersion],\n                  [\n                    mapping.generation.claimDeadline,\n                    mapping.encodeInstant(now + input.policy.deliveryClaimMillis),\n                  ],\n                  [\n                    mapping.generation.retryAt,\n                    mapping.encodeInstant(now + input.policy.deliveryRetryMillis),\n                  ],\n                ]),\n              )\n              .where(and(eq(c.moduleId, input.moduleId), eq(c.proofId, input.proofId)));\n\n            return prepared;\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n      settleDelivery: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentProofSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const initial = (yield* readGeneration(\n              mapping,\n              input.moduleId,\n              input.proofId,\n              false,\n            ))[0];\n\n            if (initial === undefined) return prepare(undefined, journal);\n            const keys = initial[mapping.generation.seriesKey] as string;\n\n            yield* ensureSeries(\n              mapping,\n              configuration,\n              input.moduleId,\n              initial[mapping.generation.purpose],\n              keys,\n            );\n\n            const row = (yield* readGeneration(\n              mapping,\n              input.moduleId,\n              input.proofId,\n              configuration.locking,\n            ))[0];\n\n            const prepared = prepare(undefined, journal);\n\n            if (\n              row === undefined ||\n              row[mapping.generation.version] !== input.version ||\n              row[mapping.generation.deliveryId] !== input.deliveryId ||\n              row[mapping.generation.claimVersion] !== input.claimVersion ||\n              row[mapping.generation.deliveryState] !== \"claimed\"\n            )\n              return prepared;\n            const c = generationColumns(mapping);\n            const outcome: ProofDeliveryOutcome = input.outcome;\n\n            const state =\n              outcome._tag === \"Accepted\"\n                ? \"accepted\"\n                : outcome._tag === \"DefiniteFailure\"\n                  ? \"failed\"\n                  : \"ambiguous\";\n\n            const values: Array<readonly [string, unknown]> = [\n              [mapping.generation.deliveryState, state],\n              [mapping.generation.claimDeadline, null],\n            ];\n\n            if (outcome._tag === \"Ambiguous\")\n              values.push([\n                mapping.generation.retryAt,\n                mapping.encodeInstant(\n                  (yield* nowMillis) + Number(row[mapping.generation.deliveryRetryMillis]),\n                ),\n              ]);\n            if (outcome._tag === \"DefiniteFailure\")\n              values.push([mapping.generation.state, \"cancelled\"]);\n            yield* transaction\n              .update(mapping.generation.table)\n              .set(updateValues(values))\n              .where(and(eq(c.moduleId, input.moduleId), eq(c.proofId, input.proofId)));\n            if (outcome._tag === \"DefiniteFailure\") {\n              const sc = seriesColumns(mapping);\n\n              yield* transaction\n                .update(mapping.series.table)\n                .set(updateValues([[mapping.series.activeProofId, null]]))\n                .where(\n                  and(\n                    eq(sc.moduleId, input.moduleId),\n                    eq(sc.purpose, row[mapping.generation.purpose]),\n                    eq(sc.scopeKey, keys),\n                    eq(sc.activeProofId, input.proofId),\n                  ),\n                );\n            }\n\n            return prepared;\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n      cancel: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentProofSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const authorityCurrent = yield* lockAuthority(\n              mapping,\n              input.moduleId,\n              input.purpose,\n              input.binding,\n              configuration.locking,\n            );\n\n            const keys = mapping.scopeKeys({\n              moduleId: input.moduleId,\n              purpose: input.purpose,\n              binding: input.binding,\n            });\n\n            const series = yield* ensureSeries(\n              mapping,\n              configuration,\n              input.moduleId,\n              input.purpose,\n              keys.series,\n            );\n\n            const active = series[mapping.series.activeProofId] as string | undefined | null;\n            const prepared = prepare(undefined, journal);\n\n            if (authorityCurrent && active !== undefined && active !== null) {\n              const gc = generationColumns(mapping);\n              const sc = seriesColumns(mapping);\n\n              const row = (yield* readGeneration(\n                mapping,\n                input.moduleId,\n                active,\n                configuration.locking,\n              ))[0];\n\n              const storedBinding =\n                row === undefined ? undefined : yield* mapping.generation.decodeBinding(row);\n\n              if (storedBinding === undefined || !sameBinding(storedBinding, input.binding))\n                return prepared;\n\n              yield* transaction\n                .update(mapping.generation.table)\n                .set(updateValues([[mapping.generation.state, \"cancelled\"]]))\n                .where(and(eq(gc.moduleId, input.moduleId), eq(gc.proofId, active)));\n              yield* transaction\n                .update(mapping.series.table)\n                .set(updateValues([[mapping.series.activeProofId, null]]))\n                .where(\n                  and(\n                    eq(sc.moduleId, input.moduleId),\n                    eq(sc.purpose, input.purpose),\n                    eq(sc.scopeKey, keys.series),\n                    eq(sc.activeProofId, active),\n                  ),\n                );\n            }\n\n            return prepared;\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n      cleanup: (input, prepare) =>\n        owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentProofSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const now = yield* nowMillis;\n            const nativeNow = mapping.encodeInstant(now);\n            const gc = generationColumns(mapping);\n            const cc = continuationColumns(mapping);\n            const rc = requestColumns(mapping);\n            const ac = abuseColumns(mapping);\n            const fc = failureColumns(mapping);\n            const mc = commandColumns(mapping);\n            const sc = seriesColumns(mapping);\n            const rsc = scopeColumns(mapping);\n            let remaining = input.limit;\n            let hasMore = false;\n\n            const take = <A>(query: ProofSqlQuery<ReadonlyArray<A>>) =>\n              selectRows(query.limit(remaining + 1), configuration.locking).pipe(\n                Effect.map((rows) => {\n                  if (rows.length > remaining) hasMore = true;\n                  const selected = rows.slice(0, remaining);\n\n                  remaining -= selected.length;\n\n                  return selected;\n                }),\n              );\n\n            // Child rows and secret-bearing generations are removed before their\n            // retained request/decision records. Every selected row counts toward\n            // one caller-wide limit and is locked until this owner commits.\n            const continuations = yield* take(\n              transaction\n                .select({ continuationId: cc.continuationId })\n                .from(mapping.continuation.table)\n                .where(and(eq(cc.moduleId, input.moduleId), lte(cc.retentionUntil, nativeNow)))\n                .orderBy(cc.retentionUntil),\n            );\n\n            const generations = yield* take(\n              transaction\n                .select({ proofId: gc.proofId })\n                .from(mapping.generation.table)\n                .where(and(eq(gc.moduleId, input.moduleId), lte(gc.retentionUntil, nativeNow)))\n                .orderBy(gc.retentionUntil),\n            );\n\n            const requests = yield* take(\n              transaction\n                .select({ requestId: rc.requestId })\n                .from(mapping.request.table)\n                .where(and(eq(rc.moduleId, input.moduleId), lte(rc.retentionUntil, nativeNow)))\n                .orderBy(rc.retentionUntil),\n            );\n\n            const abuse = yield* take(\n              transaction\n                .select({\n                  action: ac.action,\n                  scopeKind: ac.scopeKind,\n                  scopeKey: ac.scopeKey,\n                  commandId: ac.commandId,\n                })\n                .from(mapping.abuseEvent.table)\n                .where(and(eq(ac.moduleId, input.moduleId), lte(ac.retentionUntil, nativeNow)))\n                .orderBy(ac.retentionUntil),\n            );\n\n            const failures = yield* take(\n              transaction\n                .select({ seriesKey: fc.seriesKey, commandId: fc.commandId })\n                .from(mapping.failureEvent.table)\n                .where(and(eq(fc.moduleId, input.moduleId), lte(fc.retentionUntil, nativeNow)))\n                .orderBy(fc.retentionUntil),\n            );\n\n            const commands = yield* take(\n              transaction\n                .select({ commandId: mc.commandId })\n                .from(mapping.command.table)\n                .where(and(eq(mc.moduleId, input.moduleId), lte(mc.retentionUntil, nativeNow)))\n                .orderBy(mc.retentionUntil),\n            );\n\n            const series = yield* take(\n              transaction\n                .select({ purpose: sc.purpose, scopeKey: sc.scopeKey })\n                .from(mapping.series.table)\n                .where(\n                  and(\n                    eq(sc.moduleId, input.moduleId),\n                    isNull(sc.activeProofId),\n                    notExists(\n                      transaction\n                        .select({ one: sql`1` })\n                        .from(mapping.generation.table)\n                        .where(\n                          and(\n                            eq(gc.moduleId, sc.moduleId),\n                            eq(gc.purpose, sc.purpose),\n                            eq(gc.seriesKey, sc.scopeKey),\n                          ),\n                        ),\n                    ),\n                    notExists(\n                      transaction\n                        .select({ one: sql`1` })\n                        .from(mapping.failureEvent.table)\n                        .where(\n                          and(\n                            eq(fc.moduleId, sc.moduleId),\n                            eq(fc.purpose, sc.purpose),\n                            eq(fc.seriesKey, sc.scopeKey),\n                          ),\n                        ),\n                    ),\n                  ),\n                ),\n            );\n\n            const rateScopes = yield* take(\n              transaction\n                .select({\n                  purpose: rsc.purpose,\n                  action: rsc.action,\n                  scopeKind: rsc.scopeKind,\n                  scopeKey: rsc.scopeKey,\n                })\n                .from(mapping.rateScope.table)\n                .where(\n                  and(\n                    eq(rsc.moduleId, input.moduleId),\n                    notExists(\n                      transaction\n                        .select({ one: sql`1` })\n                        .from(mapping.abuseEvent.table)\n                        .where(\n                          and(\n                            eq(ac.moduleId, rsc.moduleId),\n                            eq(ac.purpose, rsc.purpose),\n                            eq(ac.action, rsc.action),\n                            eq(ac.scopeKind, rsc.scopeKind),\n                            eq(ac.scopeKey, rsc.scopeKey),\n                          ),\n                        ),\n                    ),\n                  ),\n                ),\n            );\n\n            // Removing the final history row can make an anchor eligible only after this\n            // transaction/batch commits. One extra page lets the caller reclaim it.\n            hasMore ||= generations.length > 0 || failures.length > 0 || abuse.length > 0;\n            const removed = input.limit - remaining;\n            const prepared = prepare({ removed, hasMore } satisfies ProofCleanupResult, journal);\n\n            if (continuations.length > 0)\n              yield* transaction.delete(mapping.continuation.table).where(\n                and(\n                  eq(cc.moduleId, input.moduleId),\n                  inArray(\n                    cc.continuationId,\n                    continuations.map((row: any) => row.continuationId),\n                  ),\n                  lte(cc.retentionUntil, nativeNow),\n                ),\n              );\n            if (generations.length > 0)\n              yield* transaction\n                .update(mapping.series.table)\n                .set(updateValues([[mapping.series.activeProofId, null]]))\n                .where(\n                  and(\n                    eq(sc.moduleId, input.moduleId),\n                    inArray(\n                      sc.activeProofId,\n                      generations.map((row: any) => row.proofId),\n                    ),\n                  ),\n                );\n            if (generations.length > 0)\n              yield* transaction.delete(mapping.generation.table).where(\n                and(\n                  eq(gc.moduleId, input.moduleId),\n                  inArray(\n                    gc.proofId,\n                    generations.map((row: any) => row.proofId),\n                  ),\n                  lte(gc.retentionUntil, nativeNow),\n                ),\n              );\n            if (requests.length > 0)\n              yield* transaction.delete(mapping.request.table).where(\n                and(\n                  eq(rc.moduleId, input.moduleId),\n                  inArray(\n                    rc.requestId,\n                    requests.map((row: any) => row.requestId),\n                  ),\n                  lte(rc.retentionUntil, nativeNow),\n                ),\n              );\n            for (const row of abuse)\n              yield* transaction\n                .delete(mapping.abuseEvent.table)\n                .where(\n                  and(\n                    eq(ac.moduleId, input.moduleId),\n                    eq(ac.action, row.action),\n                    eq(ac.scopeKind, row.scopeKind),\n                    eq(ac.scopeKey, row.scopeKey),\n                    eq(ac.commandId, row.commandId),\n                    lte(ac.retentionUntil, nativeNow),\n                  ),\n                );\n            for (const row of failures)\n              yield* transaction\n                .delete(mapping.failureEvent.table)\n                .where(\n                  and(\n                    eq(fc.moduleId, input.moduleId),\n                    eq(fc.seriesKey, row.seriesKey),\n                    eq(fc.commandId, row.commandId),\n                    lte(fc.retentionUntil, nativeNow),\n                  ),\n                );\n            if (commands.length > 0)\n              yield* transaction.delete(mapping.command.table).where(\n                and(\n                  eq(mc.moduleId, input.moduleId),\n                  inArray(\n                    mc.commandId,\n                    commands.map((row: any) => row.commandId),\n                  ),\n                  lte(mc.retentionUntil, nativeNow),\n                ),\n              );\n            for (const row of series)\n              yield* transaction.delete(mapping.series.table).where(\n                and(\n                  eq(sc.moduleId, input.moduleId),\n                  eq(sc.purpose, row.purpose),\n                  eq(sc.scopeKey, row.scopeKey),\n                  isNull(sc.activeProofId),\n                  notExists(\n                    transaction\n                      .select({ one: sql`1` })\n                      .from(mapping.generation.table)\n                      .where(\n                        and(\n                          eq(gc.moduleId, sc.moduleId),\n                          eq(gc.purpose, sc.purpose),\n                          eq(gc.seriesKey, sc.scopeKey),\n                        ),\n                      ),\n                  ),\n                ),\n              );\n            for (const row of rateScopes)\n              yield* transaction.delete(mapping.rateScope.table).where(\n                and(\n                  eq(rsc.moduleId, input.moduleId),\n                  eq(rsc.purpose, row.purpose),\n                  eq(rsc.action, row.action),\n                  eq(rsc.scopeKind, row.scopeKind),\n                  eq(rsc.scopeKey, row.scopeKey),\n                  notExists(\n                    transaction\n                      .select({ one: sql`1` })\n                      .from(mapping.abuseEvent.table)\n                      .where(\n                        and(\n                          eq(ac.moduleId, rsc.moduleId),\n                          eq(ac.purpose, rsc.purpose),\n                          eq(ac.action, rsc.action),\n                          eq(ac.scopeKind, rsc.scopeKind),\n                          eq(ac.scopeKey, rsc.scopeKey),\n                        ),\n                      ),\n                  ),\n                ),\n              );\n\n            return prepared;\n          }),\n        ).pipe(\n          Effect.provideService(CurrentProofSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    });\n  });\n\n  const inspectCompletionIn = Effect.fn(\"DrizzleProof.inspectCompletionIn\")(function* (\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n    input: ProofCompletionPlan[\"input\"],\n    ensure: boolean,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const authorityCurrent = yield* lockAuthority(\n      mapping,\n      input.moduleId,\n      input.purpose,\n      input.binding,\n      configuration.locking,\n    );\n\n    const keys = mapping.scopeKeys({\n      moduleId: input.moduleId,\n      purpose: input.purpose,\n      binding: input.binding,\n    });\n\n    if (ensure)\n      yield* ensureSeries(mapping, configuration, input.moduleId, input.purpose, keys.series);\n    const c = continuationColumns(mapping);\n\n    const rows = yield* selectRows(\n      database\n        .select()\n        .from(mapping.continuation.table)\n        .where(and(eq(c.moduleId, input.moduleId), eq(c.continuationId, input.continuationId)))\n        .limit(1),\n      configuration.locking,\n    );\n\n    const row = rows[0];\n    const now = yield* nowMillis;\n    const record = row === undefined ? undefined : yield* mapping.continuation.decode(row);\n\n    const completed =\n      authorityCurrent &&\n      row !== undefined &&\n      record !== undefined &&\n      record.moduleId === input.moduleId &&\n      record.continuationId === input.continuationId &&\n      record.purpose === input.purpose &&\n      record.digest === input.continuationDigest &&\n      record.seriesKey === keys.series &&\n      sameBinding(record.binding, input.binding) &&\n      row[mapping.continuation.consumed] === false &&\n      record.expiresAtMillis > now;\n\n    return completed ? { record: record!, row, columns: c } : undefined;\n  });\n\n  /** Nonconsuming same-owner preflight; it never inserts a series or changes expiry. */\n  const checkProofCompletionIn = Effect.fn(\"Drizzle.checkProofCompletionIn\")(function* (\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n    input: ProofCompletionPlan[\"input\"],\n  ) {\n    return yield* inspectCompletionIn(mapping, configuration, input, false).pipe(\n      Effect.map((value) => value !== undefined),\n    );\n  });\n\n  const completeIn = Effect.fn(\"DrizzleProof.completeIn\")(function* <A, E = never, R = never>(\n    mapping: Mapping,\n    configuration: ProofSqlConfiguration,\n    input: ProofCompletionPlan[\"input\"],\n    prepare: (decision: ProofCompletionDecision) => A,\n    protectedMutation?: Effect.Effect<boolean, E, R>,\n  ) {\n    const database = yield* CurrentProofSql;\n\n    const accepted = yield* inspectCompletionIn(mapping, configuration, input, true);\n\n    if (accepted === undefined) return prepare(\"rejected\");\n    const { record, row: original, columns: c } = accepted;\n\n    if (protectedMutation !== undefined && !(yield* protectedMutation)) return yield* unavailable();\n    const value = prepare(\"completed\");\n\n    yield* database\n      .update(mapping.continuation.table)\n      .set(updateValues([[mapping.continuation.consumed, true]]))\n      .where(\n        and(\n          eq(c.moduleId, input.moduleId),\n          eq(c.continuationId, input.continuationId),\n          eq(c.digest, input.continuationDigest),\n          eq(c.consumed, false),\n        ),\n      );\n    yield* insertCommand(\n      mapping,\n      input.moduleId,\n      input.continuationDigest,\n      \"complete\",\n      \"completed\",\n      record.expiresAtMillis,\n    );\n\n    const assertApplied = Effect.flatMap(CurrentPasswordPreparedTransaction, (currentTransaction) =>\n      Effect.gen(function* () {\n        const persisted = (yield* selectRows(\n          currentTransaction\n            .select()\n            .from(mapping.continuation.table)\n            .where(and(eq(c.moduleId, input.moduleId), eq(c.continuationId, input.continuationId)))\n            .limit(1),\n          false,\n        ))[0];\n\n        const command = (yield* commandRow(\n          mapping,\n          input.moduleId,\n          input.continuationDigest,\n          false,\n        ))[0];\n\n        const decoded =\n          persisted === undefined ? undefined : yield* mapping.continuation.decode(persisted);\n\n        const immutable = [\n          mapping.continuation.moduleId,\n          mapping.continuation.purpose,\n          mapping.continuation.continuationId,\n          mapping.continuation.digest,\n          mapping.continuation.proofId,\n          mapping.continuation.seriesKey,\n          mapping.continuation.version,\n        ];\n\n        if (\n          persisted === undefined ||\n          decoded === undefined ||\n          !sameBinding(decoded.binding, record.binding) ||\n          persisted[mapping.continuation.consumed] !== true ||\n          immutable.some((key) => persisted[key] !== original[key]) ||\n          (yield* mapping.decodeInstant(persisted[mapping.continuation.expiresAt])) !==\n            record.expiresAtMillis ||\n          (yield* mapping.decodeInstant(persisted[mapping.continuation.retentionUntil])) !==\n            (yield* mapping.decodeInstant(original[mapping.continuation.retentionUntil])) ||\n          command === undefined ||\n          command[mapping.command.kind] !== \"complete\" ||\n          command[mapping.command.decision] !== \"completed\" ||\n          (yield* mapping.decodeInstant(command[mapping.command.retentionUntil])) !==\n            record.expiresAtMillis\n        )\n          return yield* unavailable();\n\n        if (record.expiresAtMillis <= (yield* nowMillis)) return yield* unavailable();\n      }).pipe(Effect.provideService(CurrentProofSql, currentTransaction)),\n    );\n\n    yield* assertApplied.pipe(Effect.provideService(CurrentPasswordPreparedTransaction, database));\n    const postconditions = yield* Effect.serviceOption(PasswordPreparedPostconditions);\n\n    if (\n      Option.isSome(postconditions) &&\n      !postconditions.value.register(assertApplied.pipe(translateFailure))\n    )\n      return yield* unavailable();\n\n    return value;\n  });\n\n  /** Private same-owner seam for password and identifier mutations. */\n  const completeProofPlanIn = Effect.fn(\"Drizzle.completeProofPlanIn\")(function* <\n    Rq extends Table,\n    S extends Table,\n    G extends Table,\n    Cn extends Table,\n    Rs extends Table,\n    Aev extends Table,\n    F extends Table,\n    C extends Table,\n    Sub extends Table,\n    I extends Table,\n    Cr extends Table,\n    NativeId,\n    A,\n    E,\n    R,\n  >(\n    mapping: ProofPersistenceMapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>,\n    configuration: ProofSqlConfiguration,\n    plan: ProofCompletionPlan,\n    protectedMutation: Effect.Effect<boolean, E, R>,\n    project: (decision: ProofCompletionDecision) => A,\n  ) {\n    const journal = yield* CurrentCommitJournal;\n\n    return yield* completeIn(\n      mapping as unknown as Mapping,\n      configuration,\n      plan.input,\n      (decision) => plan.prepare(decision, journal, project),\n      protectedMutation,\n    );\n  });\n\n  return { makeSqlProofPersistence, checkProofCompletionIn, completeProofPlanIn };\n};\n"],"mappings":";;;;;;;;AAuEA,IAAa,kBAAb,cAAqC,QAAQ,QAA2C,CAAC,CACvF,6BACF,CAAC,CAAC,CAAC;AAuBH,MAAa,mBAIX,eACG;CAGH,MAAM,EAAE,KAAK,IAAI,KAAK,SAAS,QAAQ,KAAK,WAAW,KAAK,QAAQ,iBAAiB;CACrF,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;CAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UAAU,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KAAK,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC1F,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;CAE9F,MAAM,yBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,oBAAoB,CAAC,CAAC,KAAK,KACrC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KACA,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAChB,OAAO,GAAG,oBAAoB,CAAC,CAAC,KAAK,IAAI,QAAQ,YAAY,CAC/D,CACF,CACF,CACF;CAEF,MAAM,iBAAiB,qBAAqB,KAAK,CAAC,CAAC;CAEnD,MAAM,oBAAoB,YACxB,OAAO,QAAQ,wBAAwB,CAAC,CAAC,OACtC,CAAC,KAAK,WAAW,QAAQ,YAAY,SAAkD,KAC1F;CAEF,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;CAErE,MAAM,mBACJ,SACA,SAC4E;EAC5E,IAAI,SAAS,eACX,OAAO,QAAQ,wBAAwB,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;GACT,KAAK,QAAQ;GACb,QAAQ,UAAU,IAAI,wBAAwB;IAAE,WAAW;IAAW;GAAM,CAAC;EAC/E,CAAC;EACP,IAAI,QAAQ,oBAAoB,KAAA,GAAW,OAAO,QAAQ;EAE1D,OAAO,QAAQ,wBAAwB,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;GACT,KAAK,QAAQ;GACb,QAAQ,UAAU,IAAI,wBAAwB;IAAE,WAAW;IAAW;GAAM,CAAC;EAC/E,CAAC;CACP;CAEA,MAAM,mBAAmB,OAAO,WAAW,OAAO,eAAe,YAAY,CAAC;CAE9E,MAAM,eAAe,MAAoB,UACvC,iBAAiB,IAAI,MAAM,iBAAiB,KAAK;CAEnD,MAAM,kBAAkB,aAAsB;EAC5C,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;EAChE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;EAClE,aAAa,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,WAAW;EACtE,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,OAAO;EAC9D,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;CAC9E;CAEA,MAAM,iBAAiB,aAAsB;EAC3C,UAAU,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,QAAQ;EAC9D,SAAS,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,OAAO;EAC5D,UAAU,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,QAAQ;EAC9D,eAAe,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,aAAa;EACxE,aAAa,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,WAAW;EACpE,SAAS,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,OAAO;CAC9D;CAEA,MAAM,qBAAqB,aAAsB;EAC/C,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;EACtE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;EACpE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;EACpE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EACxE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EACxE,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;EAC1E,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;EAChF,gBAAgB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,cAAc;EAClF,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;EACtE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EACxE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;EACpE,OAAO,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;EAChE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EACxE,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;EAChF,cAAc,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;EAC9E,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;EAChF,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;EACpE,qBAAqB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,mBAAmB;EAC5F,gBAAgB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,cAAc;CACpF;CAEA,MAAM,uBAAuB,aAAsB;EACjD,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC1E,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,OAAO;EACxE,gBAAgB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc;EACtF,QAAQ,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,MAAM;EACtE,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,OAAO;EACxE,WAAW,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAC5E,WAAW,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAC5E,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC1E,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,OAAO;EACxE,gBAAgB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc;CACxF;CAEA,MAAM,gBAAgB,aAAsB;EAC1C,UAAU,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,QAAQ;EACpE,SAAS,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,OAAO;EAClE,QAAQ,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,MAAM;EAChE,WAAW,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,SAAS;EACtE,UAAU,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,QAAQ;CACtE;CAEA,MAAM,gBAAgB,aAAsB;EAC1C,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;EACtE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;EACpE,QAAQ,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,MAAM;EAClE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EACxE,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;EACtE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EACxE,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;EAC1E,gBAAgB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,cAAc;CACpF;CAEA,MAAM,kBAAkB,aAAsB;EAC5C,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC1E,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,OAAO;EACxE,WAAW,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAC5E,WAAW,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAC5E,YAAY,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,UAAU;EAC9E,gBAAgB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc;CACxF;CAEA,MAAM,kBAAkB,aAAsB;EAC5C,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;EAChE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;EAClE,MAAM,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,IAAI;EACxD,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;EAChE,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;CAC9E;CAEA,MAAM,YAAY,SAAS,IAAI,KAAK,OAAO,IAAI,SAAS,aAAa,CAAC;CAEtE,MAAM,gBAAgB,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAC5D,SACA,UACA,SACA,SACA,SACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,YAAY,QAAQ;EAC1B,IAAI;EAGJ,IAAI,QAAQ,SAAS,cAAc;GACjC,IACE,UAAU,YAAY,KAAA,KACtB,UAAU,eAAe,KAAA,KACzB,UAAU,cAAc,KAAA,GAExB,OAAO,OAAO,YAAY;GAC5B,kBAAkB,OAAO,UAAU,UAAU,SAAS,QAAQ,SAAS,SAAS;GAChF,MAAM,UAAU,UAAU;GAW1B,MAAM,OAAM,OATQ,WAClB,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,KAAK,CAAC,CACnB,MAAM,GAAG,OAAO,QAAQ,OAAO,QAAQ,EAAE,GAAG,eAAe,CAAC,CAAC,CAC7D,MAAM,CAAC,GACV,OACF,EAAA,CAEiB;GAEjB,IACE,QAAQ,KAAA,KACR,CAAC,QAAQ,eAAe,IAAI,QAAQ,OAAO,KAC3C,IAAI,QAAQ,sBAAsB,QAAQ,SAAS,kBAEnD,OAAO;EACX;EACA,MAAM,aAAa,UAAU;EAE7B,MAAM,iBAAiB,OAAO,WAC5B,SACG,OAAO,CAAC,CACR,KAAK,WAAW,KAAK,CAAC,CACtB,MACC,IACE,GAAG,OAAO,WAAW,OAAO,WAAW,SAAS,GAAG,QAAQ,WAAW,SAAS,GAC/E,GAAG,OAAO,WAAW,OAAO,WAAW,KAAK,GAAG,QAAQ,WAAW,KAAK,CACzE,CACF,GACF,OACF;EAEA,IACE,CAAC,WAAW,UACV;GACE;GACA;GACA;GACA,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;EAC7D,GACA,cACF,GAEA,OAAO;EACT,IAAI,QAAQ,SAAS,cAAc,OAAO;EAC1C,MAAM,aAAa,UAAU;EAE7B,MAAM,WAAW,CAAC,GAAG,QAAQ,SAAS,WAAW,CAAC,CAAC,MAAM,GAAG,MAC1D,EAAE,aAAa,cAAc,EAAE,YAAY,CAC7C;EAEA,MAAM,OACJ,SAAS,WAAW,IAChB,CAAC,IACD,OAAO,WACL,SACG,OAAO,CAAC,CACR,KAAK,WAAW,KAAK,CAAC,CACtB,MACC,IACE,GAAG,OAAO,WAAW,OAAO,WAAW,SAAS,GAAG,eAAe,GAClE,QACE,OAAO,WAAW,OAAO,WAAW,YAAY,GAChD,SAAS,KAAK,SAAS,KAAK,YAAY,CAC1C,CACF,CACF,GACF,OACF;EAEN,IAAI,KAAK,WAAW,SAAS,QAAQ,OAAO;EAY5C,OAVe,KACZ,KAAK,SAAc;GAClB,cAAc,IAAI,WAAW;GAC7B,UAAU,IAAI,WAAW;GACzB,QACE,WAAW,WAAW,KAAA,KACtB,WAAW,iBAAiB,IAAI,WAAW,OAAO,MAAM;EAC5D,EAAE,CAAC,CACF,MAAM,GAAQ,MAAW,EAAE,aAAa,cAAc,EAAE,YAAY,CAE3D,CAAC,CAAC,OACX,MAAW,UACV,KAAK,UACL,KAAK,iBAAiB,SAAS,MAAM,EAAE,gBACvC,KAAK,aAAa,SAAS,MAAM,EAAE,QACvC;CACF,CAAC;CAED,MAAM,gBACJ,MACA,SACA,QACA,WAC8B;EAC9B,MAAM,SAAS,WAAW,UAAU,WAAW;EAC/C,MAAM,SAAS,WAAW,UAAU,WAAW;EAE/C,MAAM,UAAwB,CAC5B;GAAE,MAAM;GAAU,KAAK;GAAK,QAAQ,OAAO,MAAM,SAAS;EAAU,GACpE;GAAE,MAAM;GAAc,KAAK,KAAK;GAAY,QAAQ,OAAO,MAAM;EAAQ,CAC3E;EAEA,IAAI,QAAQ,SAAS,cACnB,QAAQ,KAAK;GACX,MAAM;GACN,KAAK,KAAK;GACV,QAAQ,OAAO,MAAM,UAAU;EACjC,CAAC;EAEH,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACtD,SACA,eACA,UACA,SACA,QACA,SACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,IAAI,aAAa,OAAO;EAE9B,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,SAAS,QAAQ,UAAU,aAAa;IAC5C;IACA;IACA;IACA,WAAW,MAAM;IACjB,UAAU,MAAM;GAClB,CAAC;GAED,MAAM,QAAQ,SAAS,OAAO,QAAQ,UAAU,KAAK,CAAC,CAAC,OAAO,MAAM;GAEpE,OAAO,cAAc,eAAe,OAAO,QAAQ,UAAU,UAAU,MAAM,GAAG;GAChF,OAAO,WACL,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,UAAU,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,SAAS,OAAO,GACrB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,WAAW,MAAM,IAAI,GAC1B,GAAG,EAAE,UAAU,MAAM,GAAG,CAC1B,CACF,CAAC,CACA,MAAM,CAAC,GACV,cAAc,OAChB;EACF;CACF,CAAC;CAED,MAAM,iBAAiB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC9D,SACA,UACA,SACA,QACA,SACA,KACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,IAAI,aAAa,OAAO;EAC9B,MAAM,WAAyB,CAAC;EAEhC,KAAK,MAAM,SAAS,SAmBlB,KAAI,OAlBgB,WAClB,SACG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAClC,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,SAAS,OAAO,GACrB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,WAAW,MAAM,IAAI,GAC1B,GAAG,EAAE,UAAU,MAAM,GAAG,GACxB,IAAI,EAAE,YAAY,QAAQ,cAAc,MAAM,MAAM,OAAO,YAAY,CAAC,CAC1E,CACF,CAAC,CACA,MAAM,MAAM,OAAO,KAAK,GAC3B,IACF,EAAA,CAES,SAAS,MAAM,OAAO,OAAO,SAAS,KAAK,KAAK;EAG3D,OAAO;CACT,CAAC;CAED,MAAM,oBAAoB,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC/D,SACA,UACA,SACA,QACA,WACA,SACA,KACA,gBACA;EACA,MAAM,WAAW,OAAO;EAExB,OAAO,OAAO,OAAO,QACnB,UACC,UACC,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OACxC,QAAQ,WAAW,aAAa;GAC9B;GACA;GACA;GACA,WAAW,MAAM;GACjB,UAAU,MAAM;GAChB;GACA,kBAAkB;GAClB,sBAAsB;EACxB,CAAC,CACH,GACF,EAAE,SAAS,KAAK,CAClB;CACF,CAAC;CAED,MAAM,eAAe,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC1D,SACA,eACA,UACA,SACA,UACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,IAAI,cAAc,OAAO;EAC/B,MAAM,iBAAiB,OAAO,gBAAgB,SAAS,cAAc,IAAI;EAEzE,MAAM,QAAQ,SACX,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,OACC,QAAQ,OAAO,aAAa;GAAE;GAAU;GAAS;GAAU,SAAS;EAAe,CAAC,CACtF;EAEF,OAAO,cAAc,eAAe,OAAO,QAAQ,OAAO,UAAU,QAAQ;EAW5E,QAAO,OATa,WAClB,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,SAAS,OAAO,GAAG,GAAG,EAAE,UAAU,QAAQ,CAAC,CAAC,CAAC,CACtF,MAAM,CAAC,GACV,cAAc,OAChB,EAAA,CAEY,OAAO,OAAO,YAAY;CACxC,CAAC;CAED,MAAM,iBAAiB,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACzD,SACA,UACA,SACA,SACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,IAAI,kBAAkB,OAAO;EAEnC,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,CAC5D,MAAM,CAAC,GACV,OACF;CACF,CAAC;CAED,MAAM,eAAe,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC1D,SACA,UACA,SACA,WACA,KACA,QACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,IAAI,eAAe,OAAO;EAkBhC,QAAO,OAhBa,WAClB,SACG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAClC,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,SAAS,OAAO,GACrB,GAAG,EAAE,WAAW,SAAS,GACzB,IAAI,EAAE,YAAY,QAAQ,cAAc,MAAM,OAAO,MAAM,SAAS,YAAY,CAAC,CACnF,CACF,CAAC,CACA,MAAM,OAAO,qBAAqB,GACrC,IACF,EAAA,CAEY;CACd,CAAC;CAED,MAAM,aAAa,OAAO,GAAG,oBAAoB,CAAC,CAAC,WACjD,SACA,UACA,WACA,SACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,IAAI,eAAe,OAAO;EAEhC,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,WAAW,SAAS,CAAC,CAAC,CAAC,CAChE,MAAM,CAAC,GACV,OACF;CACF,CAAC;CAED,MAAM,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WACvD,SACA,UACA,WACA,MACA,UACA,gBACA;EAGA,OAAO,QAAO,OAFU,gBAAA,CAED,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACnD,QAAQ,QAAQ,aAAa;GAC3B;GACA;GACA;GACA;GACA,sBAAsB;EACxB,CAAC,CACH;CACF,CAAC;CAED,MAAM,SACJ,UACA,SACA,eACA,SACG;EACH,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,KAAK,YAAY,CAAC;EAEhE,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KAAK,OAAO,eAAe,iBAAiB,WAAW,CAAC,CAC/D,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;EAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;GACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;GACrD,OAAO,cAAc;GAErB,OAAO,OAAO;EAChB,CAAC,IACD;CACN;CAEA,MAAM,0BAA0B,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACnE,UACA,SACA,eACsE;EACtE,MAAM,QAAQ,OAAO;EAErB,OAAO,iBAAiB,GAAG;GACzB,QAAQ,OAAO,YACb,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,OAAO,QAAQ,UAAU;KAC7B,UAAU,MAAM,OAAO;KACvB,SAAS,MAAM,OAAO;KACtB,SAAS,MAAM,OAAO;IACxB,CAAC;IAED,MAAM,mBAAmB,OAAO,cAC9B,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,MAAM,OAAO,SACb,cAAc,OAChB;IAEA,MAAM,SAAS,aAAa,MAAM,MAAM,OAAO,SAAS,SAAS,MAAM,MAAM;IAE7E,OAAO,WACL,SACA,eACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,OAAO,MAAM,GAAG,CAAC,CACnB;IACA,MAAM,YAAY,OAAO;IAEzB,MAAM,cACH,OAAO,eACN,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,OAAO,MAAM,GAAG,CAAC,GACjB,SACF,EAAA,CAAG,WAAW;IAEhB,IAAI,YACF,OAAO,WACL,SACA,eACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,OAAO,MAAM,CAAC,CAChB;IAEF,MAAM,SAAS,aACX,OAAO,aACL,SACA,eACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,KAAK,MACP,IACA,KAAA;IAEJ,MAAM,MAAM,OAAO;IACnB,MAAM,iBAAiB,MAAM,MAAM,OAAO;IAC1C,MAAM,KAAK,eAAe,OAAO;IAEjC,IAAI,cAAc,OAAO,WACvB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,WAAW,MAAM,OAAO,SAAS,CACzC,CACF,CAAC,CACA,MAAM,CAAC,GACV,cAAc,OAChB;IAEA,IAAI,UAAU,YAAY;IAE1B,IAAI,YAAY,KAAA,GAAW;KAKzB,KAAI,OAJyB,QAAQ,cACnC,QAAQ,QAAQ,QAAQ,eAC1B,KAEoB,KAAK;MACvB,IAAI,QAAQ,QAAQ,QAAQ,iBAAiB,MAAM,OAAO,aACxD,OAAO,OAAO,SAAS;MAGzB,OAAO,QAAQ;OAAE,MAAM;OAAY,SAAA,OAFZ,QAAQ,QAAQ,cAAc,OAAO;MAEjB,GAAG,OAAO;KACvD;KACA,OAAO,YACJ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,WAAW,MAAM,OAAO,SAAS,GACvC,IAAI,GAAG,gBAAgB,QAAQ,cAAc,GAAG,CAAC,CACnD,CACF;IACJ;IAEA,MAAM,gBAAgB,QAAQ,QAAQ,aAAa;KACjD,QAAQ,MAAM;KACd,iBAAiB;KACjB,sBAAsB;IACxB,CAAC;IAED,MAAM,eAAe,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAAO,aAAa;IAEnF,OAAO,cAAc,eACnB,cACA,QAAQ,QAAQ,WAChB,MAAM,OAAO,SACf;IACA,cAAc,OAAO,WACnB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,WAAW,MAAM,OAAO,SAAS,CACzC,CACF,CAAC,CACA,MAAM,CAAC,GACV,cAAc,OAChB;IACA,UAAU,YAAY;IAEtB,IAAI,YAAY,KAAA,GAAW,OAAO,OAAO,YAAY;IACrD,IAAI,QAAQ,QAAQ,QAAQ,iBAAiB,MAAM,OAAO,aACxD,OAAO,OAAO,SAAS;IACzB,IAAI,QAAQ,QAAQ,QAAQ,aAAa,MAAM,OAAO,SAGpD,OAAO,QAAQ;KAAE,MAAM;KAAY,SAAA,OAFZ,QAAQ,QAAQ,cAAc,OAAO;IAEjB,GAAG,OAAO;IAGvD,MAAM,WAAW,aACb,OAAO,eACL,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,QACA,GACF,IACA,CAAC;IAEL,MAAM,KAAK,cAAc,OAAO;IAEhC,MAAM,cACJ,SAAS,QAAQ,OAAO,iBAAiB,QACzC,SAAS,QAAQ,OAAO,iBAAiB,KAAA,IACrC,KAAA,IACA,OAAO,QAAQ,cAAc,OAAO,QAAQ,OAAO,YAAY;IAErE,MAAM,gBAAgB,SAAS,QAAQ,OAAO;IAK9C,MAAM,oBACJ,MAAM,eAAe,KAAA,KAAa,MAAM,eAAe;IAEzD,MAAM,UACJ,oBACA,MAAM,YACN,SAAS,WAAW,OAAO,UAC3B,MAAM,OAAO,kBAAkB,OAC/B,MAAM,OAAO,kBAAkB,OAC/B,sBACC,gBAAgB,KAAA,KACf,MAAM,eAAe,MAAM,OAAO,MAAM;IAE5C,MAAM,UAAU;KACd,WAAW,MAAM,OAAO;KACxB,WAAW;MACT,SAAS,MAAM,OAAO;MACtB,SAAS,MAAM,OAAO;MACtB,OAAO,MAAM,OAAO,SAAS;KAC/B;IACF;IAEA,MAAM,WAAW,QACf,UACK;KAAE,MAAM;KAAU,QAAQ,MAAM;IAAO,IACvC;KAAE,MAAM;KAAc;IAAQ,GACnC,OACF;IAEA,IAAI,SAAS,SAAS,GACpB,OAAO,kBACL,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,MAAM,OAAO,WACb,UACA,KACA,cACF;IACF,IAAI,CAAC,SAAS,OAAO;IACrB,IAAI,kBAAkB,QAAQ,kBAAkB,KAAA,GAC9C,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAC7D,MACC,IACE,GAAG,kBAAkB,OAAO,CAAC,CAAC,UAAU,MAAM,OAAO,QAAQ,GAC7D,GAAG,kBAAkB,OAAO,CAAC,CAAC,SAAS,aAAa,GACpD,GAAG,kBAAkB,OAAO,CAAC,CAAC,OAAO,QAAQ,CAC/C,CACF;IACJ,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,aAAa;KAC9B,QAAQ,MAAM;KACd,WAAW,KAAK;KAChB,sBAAsB;KACtB,OAAO;KACP,eAAe;KACf,QAAQ,MAAM;IAChB,CAAC,CACH;IACA,MAAM,cAAc,OAAO,gBAAgB,SAAS,cAAc,IAAI;IAEtE,OAAO,YACJ,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IACC,aAAa;KACX,CAAC,QAAQ,OAAO,eAAe,MAAM,OAAO,OAAO;KACnD,CAAC,QAAQ,OAAO,aAAa,QAAQ,cAAc,GAAG,CAAC;KACvD,CAAC,QAAQ,OAAO,SAAS,WAAW;IACtC,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,SAAS,MAAM,OAAO,OAAO,GACnC,GAAG,GAAG,UAAU,KAAK,MAAM,CAC7B,CACF;IAEF,OAAO;GACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,qBACF;GACF,UAAU,OAAO,YACf,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,OAAO,QAAQ,UAAU;KAC7B,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,SAAS,MAAM;IACjB,CAAC;IAED,MAAM,mBAAmB,OAAO,cAC9B,SACA,MAAM,UACN,MAAM,SACN,MAAM,SACN,cAAc,OAChB;IAEA,MAAM,SAAS,aAAa,MAAM,MAAM,SAAS,WAAW,MAAM,MAAM;IAExE,OAAO,WACL,SACA,eACA,MAAM,UACN,MAAM,SACN,WACA,OAAO,MAAM,GAAG,CAAC,CACnB;IACA,MAAM,YAAY,OAAO;IAEzB,MAAM,cACH,OAAO,eACN,SACA,MAAM,UACN,MAAM,SACN,WACA,OAAO,MAAM,GAAG,CAAC,GACjB,SACF,EAAA,CAAG,WAAW;IAEhB,IAAI,YACF,OAAO,WACL,SACA,eACA,MAAM,UACN,MAAM,SACN,WACA,OAAO,MAAM,CAAC,CAChB;IAEF,MAAM,SAAS,aACX,OAAO,aACL,SACA,eACA,MAAM,UACN,MAAM,SACN,KAAK,MACP,IACA,KAAA;IAEJ,MAAM,cAAc,OAAO,eACzB,SACA,MAAM,UACN,MAAM,SACN,cAAc,OAChB,EAAA,CAAG;IAEH,MAAM,mBAAmB,OAAO,WAC9B,SACA,MAAM,UACN,MAAM,gBACN,cAAc,OAChB,EAAA,CAAG;IAEH,IAAI,oBAAoB,KAAA,GAAW;KACjC,IAAI,gBAAgB,QAAQ,QAAQ,cAAc,YAChD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;KAE9C,OAAO,OAAO,YAAY;IAC5B;IACA,MAAM,MAAM,OAAO;IAEnB,MAAM,WAAW,aACb,OAAO,eACL,SACA,MAAM,UACN,MAAM,SACN,WACA,QACA,GACF,IACA,CAAC;IAEL,MAAM,WAAW,OAAO,aACtB,SACA,MAAM,UACN,MAAM,SACN,KAAK,QACL,KACA,MAAM,MACR;IAEA,MAAM,KAAK,kBAAkB,OAAO;IACpC,MAAM,gBAAgB,SAAS,QAAQ,OAAO;IAE9C,MAAM,gBACJ,eAAe,KAAA,IACX,KAAA,IACA,OAAO,QAAQ,WAAW,cAAc,UAAU;IAExD,MAAM,mBACJ,eAAe,KAAA,KACf,MAAM,cAAc,KAAA,KACpB,WAAW,QAAQ,WAAW,mBAAmB,MAAM,UAAU,SACjE,WAAW,QAAQ,WAAW,oBAAoB,MAAM,UAAU;IAEpE,MAAM,oBACJ,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,aAAa,MAAM,WACjD,WAAW,QAAQ,WAAW,WAAW,YACzC,kBAAkB,MAAM,WACxB,kBAAkB,KAAA,KAClB,YAAY,eAAe,MAAM,OAAO,KACxC,OAAO,OAAO,QAAQ,cAAc,WAAW,QAAQ,WAAW,UAAU,CAAC,IAAI;IAEnF,MAAM,WACJ,oBACA,qBACA,oBACA,SAAS,WAAW,OAAO,UAC3B,WAAW,MAAM,OAAO;IAE1B,MAAM,iBAAiB,MAAM,MAAM,OAAO;IAE1C,IAAI,CAAC,UAAU;KACb,MAAM,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;KAEtD,OAAO,cACL,SACA,MAAM,UACN,MAAM,gBACN,WACA,YACA,cACF;KACA,OAAO,kBACL,SACA,MAAM,UACN,MAAM,SACN,WACA,MAAM,gBACN,UACA,KACA,cACF;KACA,IACE,SAAS,WAAW,OAAO,UAC3B,qBACA,CAAC,oBACD,WAAW,MAAM,OAAO,uBAExB,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa;MAChC,UAAU,MAAM;MAChB,SAAS,MAAM;MACf,WAAW,KAAK;MAChB,WAAW,MAAM;MACjB,kBAAkB;MAClB,sBAAsB;KACxB,CAAC,CACH;KAEF,OAAO;IACT;IACA,MAAM,UAAU,OAAO,gBAAgB,SAAS,cAAc,IAAI;IAElE,MAAM,YAAY,KAAK,IACrB,OAAO,OAAO,QAAQ,cAAc,WAAY,QAAQ,WAAW,UAAU,CAAC,GAC9E,MAAM,MAAM,OAAO,0BACrB;IAEA,MAAM,eAAwC;KAC5C,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,gBAAgB,MAAM;KACtB,QAAQ,MAAM;KACd,SAAS,MAAM;KACf,WAAW,KAAK;KAChB,SAAS,MAAM;KACf,iBAAiB;KACjB;IACF;IAWA,MAAM,WAAW,QAAQ;KARvB,MAAM;KACN,cAAc;MACZ,gBAAgB,MAAM;MACtB,SAAS,MAAM;MACf,iBAAiB;KACnB;IAG8B,GAAG,OAAO;IAE1C,OAAO,cACL,SACA,MAAM,UACN,MAAM,gBACN,WACA,YACA,cACF;IACA,OAAO,kBACL,SACA,MAAM,UACN,MAAM,SACN,WACA,MAAM,gBACN,QACA,KACA,cACF;IACA,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAC3D,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,MAAM,OAAO,GAC5B,GAAG,GAAG,OAAO,QAAQ,CACvB,CACF;IACF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa;KAChC,GAAG;KACH,sBAAsB;IACxB,CAAC,CACH;IAEA,OAAO;GACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;GACF,WAAW,OAAO,YAChB,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IAEvB,OAAO,OAAO,WAAW,SAAS,eAAe,QAAQ,aACvD,QAAQ,UAAU,OAAO,CAC3B;GACF,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;GACF,gBAAgB,OAAO,YACrB,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IASvB,MAAM,OAAM,OAPQ,eAClB,SACA,MAAM,UACN,MAAM,SACN,cAAc,OAChB,EAAA,CAEiB;IACjB,MAAM,MAAM,OAAO;IAEnB,IAAI,QAAQ,KAAA,GAAW,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;IACnE,MAAM,IAAI,kBAAkB,OAAO;IACnC,MAAM,YAAY,OAAO,QAAQ,cAAc,IAAI,QAAQ,WAAW,UAAU;IAEhF,MAAM,gBACJ,IAAI,QAAQ,WAAW,mBAAmB,QAC1C,IAAI,QAAQ,WAAW,mBAAmB,KAAA,IACtC,KAAA,IACA,OAAO,QAAQ,cAAc,IAAI,QAAQ,WAAW,cAAc;IAExE,MAAM,UACJ,IAAI,QAAQ,WAAW,aAAa,QACpC,IAAI,QAAQ,WAAW,aAAa,KAAA,IAChC,KAAA,IACA,OAAO,QAAQ,cAAc,IAAI,QAAQ,WAAW,QAAQ;IAElE,IAAI,QAAQ,IAAI,QAAQ,WAAW;IAEnC,IAAI,UAAU,aAAa,kBAAkB,KAAA,KAAa,iBAAiB,KAAK;KAC9E,QAAQ;KACR,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,eAAe,WAAW,CAAC,CAAC,CAAC,CAAC,CACpE,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,SAAS,MAAM,OAAO,CAAC,CAAC;IAC5E;IAaA,IAAI,EAVF,IAAI,QAAQ,WAAW,aAAa,MAAM,WAC1C,IAAI,QAAQ,WAAW,gBAAgB,MAAM,cAC7C,IAAI,QAAQ,WAAW,WAAW,YAClC,YAAY,OACZ,OAAO,IAAI,QAAQ,WAAW,UAAU,IAAI,MAAM,OAAO,4BACxD,UAAU,SACR,UAAU,eACT,MAAM,wBACL,YAAY,KAAA,KAAa,WAAW,QAE5B,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;IAC3D,MAAM,eAAe,OAAO,gBAAgB,SAAS,cAAc,IAAI;IAEvE,MAAM,WAAW,QAAQ;KADc,MAAM;KAAW;IACxB,GAAG,OAAO;IAE1C,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IACC,aAAa;KACX,CAAC,QAAQ,WAAW,WAAW,OAAO,IAAI,QAAQ,WAAW,UAAU,IAAI,CAAC;KAC5E,CAAC,QAAQ,WAAW,eAAe,SAAS;KAC5C,CAAC,QAAQ,WAAW,cAAc,YAAY;KAC9C,CACE,QAAQ,WAAW,eACnB,QAAQ,cAAc,MAAM,MAAM,OAAO,mBAAmB,CAC9D;KACA,CACE,QAAQ,WAAW,SACnB,QAAQ,cAAc,MAAM,MAAM,OAAO,mBAAmB,CAC9D;IACF,CAAC,CACH,CAAC,CACA,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,SAAS,MAAM,OAAO,CAAC,CAAC;IAE1E,OAAO;GACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;GACF,iBAAiB,OAAO,YACtB,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,WAAW,OAAO,eACtB,SACA,MAAM,UACN,MAAM,SACN,KACF,EAAA,CAAG;IAEH,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,KAAA,GAAW,OAAO;IAC5D,MAAM,OAAO,QAAQ,QAAQ,WAAW;IAExC,OAAO,aACL,SACA,eACA,MAAM,UACN,QAAQ,QAAQ,WAAW,UAC3B,IACF;IAEA,MAAM,OAAO,OAAO,eAClB,SACA,MAAM,UACN,MAAM,SACN,cAAc,OAChB,EAAA,CAAG;IAEH,MAAM,WAAW,QAAQ,KAAA,GAAW,OAAO;IAE3C,IACE,QAAQ,KAAA,KACR,IAAI,QAAQ,WAAW,aAAa,MAAM,WAC1C,IAAI,QAAQ,WAAW,gBAAgB,MAAM,cAC7C,IAAI,QAAQ,WAAW,kBAAkB,MAAM,gBAC/C,IAAI,QAAQ,WAAW,mBAAmB,WAE1C,OAAO;IACT,MAAM,IAAI,kBAAkB,OAAO;IACnC,MAAM,UAAgC,MAAM;IAE5C,MAAM,QACJ,QAAQ,SAAS,aACb,aACA,QAAQ,SAAS,oBACf,WACA;IAER,MAAM,SAA4C,CAChD,CAAC,QAAQ,WAAW,eAAe,KAAK,GACxC,CAAC,QAAQ,WAAW,eAAe,IAAI,CACzC;IAEA,IAAI,QAAQ,SAAS,aACnB,OAAO,KAAK,CACV,QAAQ,WAAW,SACnB,QAAQ,eACL,OAAO,aAAa,OAAO,IAAI,QAAQ,WAAW,oBAAoB,CACzE,CACF,CAAC;IACH,IAAI,QAAQ,SAAS,mBACnB,OAAO,KAAK,CAAC,QAAQ,WAAW,OAAO,WAAW,CAAC;IACrD,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,MAAM,CAAC,CAAC,CACzB,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,SAAS,MAAM,OAAO,CAAC,CAAC;IAC1E,IAAI,QAAQ,SAAS,mBAAmB;KACtC,MAAM,KAAK,cAAc,OAAO;KAEhC,OAAO,YACJ,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IAAI,aAAa,CAAC,CAAC,QAAQ,OAAO,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC,CACzD,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,IAAI,QAAQ,WAAW,QAAQ,GAC9C,GAAG,GAAG,UAAU,IAAI,GACpB,GAAG,GAAG,eAAe,MAAM,OAAO,CACpC,CACF;IACJ;IAEA,OAAO;GACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;GACF,SAAS,OAAO,YACd,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,mBAAmB,OAAO,cAC9B,SACA,MAAM,UACN,MAAM,SACN,MAAM,SACN,cAAc,OAChB;IAEA,MAAM,OAAO,QAAQ,UAAU;KAC7B,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,SAAS,MAAM;IACjB,CAAC;IAUD,MAAM,UAAS,OARO,aACpB,SACA,eACA,MAAM,UACN,MAAM,SACN,KAAK,MACP,EAAA,CAEsB,QAAQ,OAAO;IACrC,MAAM,WAAW,QAAQ,KAAA,GAAW,OAAO;IAE3C,IAAI,oBAAoB,WAAW,KAAA,KAAa,WAAW,MAAM;KAC/D,MAAM,KAAK,kBAAkB,OAAO;KACpC,MAAM,KAAK,cAAc,OAAO;KAEhC,MAAM,OAAO,OAAO,eAClB,SACA,MAAM,UACN,QACA,cAAc,OAChB,EAAA,CAAG;KAEH,MAAM,gBACJ,QAAQ,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,WAAW,cAAc,GAAG;KAE7E,IAAI,kBAAkB,KAAA,KAAa,CAAC,YAAY,eAAe,MAAM,OAAO,GAC1E,OAAO;KAET,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAC5D,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,GAAG,GAAG,SAAS,MAAM,CAAC,CAAC;KACrE,OAAO,YACJ,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IAAI,aAAa,CAAC,CAAC,QAAQ,OAAO,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC,CACzD,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,MAAM,OAAO,GAC5B,GAAG,GAAG,UAAU,KAAK,MAAM,GAC3B,GAAG,GAAG,eAAe,MAAM,CAC7B,CACF;IACJ;IAEA,OAAO;GACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;GACF,UAAU,OAAO,YACf,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,MAAM,OAAO;IACnB,MAAM,YAAY,QAAQ,cAAc,GAAG;IAC3C,MAAM,KAAK,kBAAkB,OAAO;IACpC,MAAM,KAAK,oBAAoB,OAAO;IACtC,MAAM,KAAK,eAAe,OAAO;IACjC,MAAM,KAAK,aAAa,OAAO;IAC/B,MAAM,KAAK,eAAe,OAAO;IACjC,MAAM,KAAK,eAAe,OAAO;IACjC,MAAM,KAAK,cAAc,OAAO;IAChC,MAAM,MAAM,aAAa,OAAO;IAChC,IAAI,YAAY,MAAM;IACtB,IAAI,UAAU;IAEd,MAAM,QAAW,UACf,WAAW,MAAM,MAAM,YAAY,CAAC,GAAG,cAAc,OAAO,CAAC,CAAC,KAC5D,OAAO,KAAK,SAAS;KACnB,IAAI,KAAK,SAAS,WAAW,UAAU;KACvC,MAAM,WAAW,KAAK,MAAM,GAAG,SAAS;KAExC,aAAa,SAAS;KAEtB,OAAO;IACT,CAAC,CACH;IAKF,MAAM,gBAAgB,OAAO,KAC3B,YACG,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAAC,CAAC,CAC7C,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,QAAQ,GAAG,cAAc,CAC9B;IAEA,MAAM,cAAc,OAAO,KACzB,YACG,OAAO,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC,CAC/B,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,QAAQ,GAAG,cAAc,CAC9B;IAEA,MAAM,WAAW,OAAO,KACtB,YACG,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC,CAAC,CACnC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,QAAQ,GAAG,cAAc,CAC9B;IAEA,MAAM,QAAQ,OAAO,KACnB,YACG,OAAO;KACN,QAAQ,GAAG;KACX,WAAW,GAAG;KACd,UAAU,GAAG;KACb,WAAW,GAAG;IAChB,CAAC,CAAC,CACD,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,QAAQ,GAAG,cAAc,CAC9B;IAEA,MAAM,WAAW,OAAO,KACtB,YACG,OAAO;KAAE,WAAW,GAAG;KAAW,WAAW,GAAG;IAAU,CAAC,CAAC,CAC5D,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,QAAQ,GAAG,cAAc,CAC9B;IAEA,MAAM,WAAW,OAAO,KACtB,YACG,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC,CAAC,CACnC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,QAAQ,GAAG,cAAc,CAC9B;IAEA,MAAM,SAAS,OAAO,KACpB,YACG,OAAO;KAAE,SAAS,GAAG;KAAS,UAAU,GAAG;IAAS,CAAC,CAAC,CACtD,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,OAAO,GAAG,aAAa,GACvB,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,GAAG,QAAQ,GAC3B,GAAG,GAAG,SAAS,GAAG,OAAO,GACzB,GAAG,GAAG,WAAW,GAAG,QAAQ,CAC9B,CACF,CACJ,GACA,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,GAAG,UAAU,GAAG,QAAQ,GAC3B,GAAG,GAAG,SAAS,GAAG,OAAO,GACzB,GAAG,GAAG,WAAW,GAAG,QAAQ,CAC9B,CACF,CACJ,CACF,CACF,CACJ;IAEA,MAAM,aAAa,OAAO,KACxB,YACG,OAAO;KACN,SAAS,IAAI;KACb,QAAQ,IAAI;KACZ,WAAW,IAAI;KACf,UAAU,IAAI;IAChB,CAAC,CAAC,CACD,KAAK,QAAQ,UAAU,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,IAAI,UAAU,MAAM,QAAQ,GAC/B,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,CAC9B,CACF,CACJ,CACF,CACF,CACJ;IAIA,YAAY,YAAY,SAAS,KAAK,SAAS,SAAS,KAAK,MAAM,SAAS;IAE5E,MAAM,WAAW,QAAQ;KAAE,SADX,MAAM,QAAQ;KACM;IAAQ,GAAgC,OAAO;IAEnF,IAAI,cAAc,SAAS,GACzB,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,MACpD,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,QACE,GAAG,gBACH,cAAc,KAAK,QAAa,IAAI,cAAc,CACpD,GACA,IAAI,GAAG,gBAAgB,SAAS,CAClC,CACF;IACF,IAAI,YAAY,SAAS,GACvB,OAAO,YACJ,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IAAI,aAAa,CAAC,CAAC,QAAQ,OAAO,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC,CACzD,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,QACE,GAAG,eACH,YAAY,KAAK,QAAa,IAAI,OAAO,CAC3C,CACF,CACF;IACJ,IAAI,YAAY,SAAS,GACvB,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,MAClD,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,QACE,GAAG,SACH,YAAY,KAAK,QAAa,IAAI,OAAO,CAC3C,GACA,IAAI,GAAG,gBAAgB,SAAS,CAClC,CACF;IACF,IAAI,SAAS,SAAS,GACpB,OAAO,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAC/C,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,QACE,GAAG,WACH,SAAS,KAAK,QAAa,IAAI,SAAS,CAC1C,GACA,IAAI,GAAG,gBAAgB,SAAS,CAClC,CACF;IACF,KAAK,MAAM,OAAO,OAChB,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,IAAI,GAAG,gBAAgB,SAAS,CAClC,CACF;IACJ,KAAK,MAAM,OAAO,UAChB,OAAO,YACJ,OAAO,QAAQ,aAAa,KAAK,CAAC,CAClC,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,IAAI,GAAG,gBAAgB,SAAS,CAClC,CACF;IACJ,IAAI,SAAS,SAAS,GACpB,OAAO,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAC/C,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,QACE,GAAG,WACH,SAAS,KAAK,QAAa,IAAI,SAAS,CAC1C,GACA,IAAI,GAAG,gBAAgB,SAAS,CAClC,CACF;IACF,KAAK,MAAM,OAAO,QAChB,OAAO,YAAY,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,MAC9C,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,OAAO,GAAG,aAAa,GACvB,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,GAAG,QAAQ,GAC3B,GAAG,GAAG,SAAS,GAAG,OAAO,GACzB,GAAG,GAAG,WAAW,GAAG,QAAQ,CAC9B,CACF,CACJ,CACF,CACF;IACF,KAAK,MAAM,OAAO,YAChB,OAAO,YAAY,OAAO,QAAQ,UAAU,KAAK,CAAC,CAAC,MACjD,IACE,GAAG,IAAI,UAAU,MAAM,QAAQ,GAC/B,GAAG,IAAI,SAAS,IAAI,OAAO,GAC3B,GAAG,IAAI,QAAQ,IAAI,MAAM,GACzB,GAAG,IAAI,WAAW,IAAI,SAAS,GAC/B,GAAG,IAAI,UAAU,IAAI,QAAQ,GAC7B,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,CAC9B,CACF,CACJ,CACF,CACF;IAEF,OAAO;GACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,CAAC;CACH,CAAC;CAED,MAAM,sBAAsB,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACxE,SACA,eACA,OACA,QACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,mBAAmB,OAAO,cAC9B,SACA,MAAM,UACN,MAAM,SACN,MAAM,SACN,cAAc,OAChB;EAEA,MAAM,OAAO,QAAQ,UAAU;GAC7B,UAAU,MAAM;GAChB,SAAS,MAAM;GACf,SAAS,MAAM;EACjB,CAAC;EAED,IAAI,QACF,OAAO,aAAa,SAAS,eAAe,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM;EACxF,MAAM,IAAI,oBAAoB,OAAO;EAWrC,MAAM,OAAM,OATQ,WAClB,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,gBAAgB,MAAM,cAAc,CAAC,CAAC,CAAC,CACtF,MAAM,CAAC,GACV,cAAc,OAChB,EAAA,CAEiB;EACjB,MAAM,MAAM,OAAO;EACnB,MAAM,SAAS,QAAQ,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,aAAa,OAAO,GAAG;EAerF,OAZE,oBACA,QAAQ,KAAA,KACR,WAAW,KAAA,KACX,OAAO,aAAa,MAAM,YAC1B,OAAO,mBAAmB,MAAM,kBAChC,OAAO,YAAY,MAAM,WACzB,OAAO,WAAW,MAAM,sBACxB,OAAO,cAAc,KAAK,UAC1B,YAAY,OAAO,SAAS,MAAM,OAAO,KACzC,IAAI,QAAQ,aAAa,cAAc,SACvC,OAAO,kBAAkB,MAER;GAAU;GAAS;GAAK,SAAS;EAAE,IAAI,KAAA;CAC5D,CAAC;;CAGD,MAAM,yBAAyB,OAAO,GAAG,gCAAgC,CAAC,CAAC,WACzE,SACA,eACA,OACA;EACA,OAAO,OAAO,oBAAoB,SAAS,eAAe,OAAO,KAAK,CAAC,CAAC,KACtE,OAAO,KAAK,UAAU,UAAU,KAAA,CAAS,CAC3C;CACF,CAAC;CAED,MAAM,aAAa,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACtD,SACA,eACA,OACA,SACA,mBACA;EACA,MAAM,WAAW,OAAO;EAExB,MAAM,WAAW,OAAO,oBAAoB,SAAS,eAAe,OAAO,IAAI;EAE/E,IAAI,aAAa,KAAA,GAAW,OAAO,QAAQ,UAAU;EACrD,MAAM,EAAE,QAAQ,KAAK,UAAU,SAAS,MAAM;EAE9C,IAAI,sBAAsB,KAAA,KAAa,EAAE,OAAO,oBAAoB,OAAO,OAAO,YAAY;EAC9F,MAAM,QAAQ,QAAQ,WAAW;EAEjC,OAAO,SACJ,OAAO,QAAQ,aAAa,KAAK,CAAC,CAClC,IAAI,aAAa,CAAC,CAAC,QAAQ,aAAa,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAC1D,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,gBAAgB,MAAM,cAAc,GACzC,GAAG,EAAE,QAAQ,MAAM,kBAAkB,GACrC,GAAG,EAAE,UAAU,KAAK,CACtB,CACF;EACF,OAAO,cACL,SACA,MAAM,UACN,MAAM,oBACN,YACA,aACA,OAAO,eACT;EAEA,MAAM,gBAAgB,OAAO,QAAQ,qCAAqC,uBACxE,OAAO,IAAI,aAAa;GACtB,MAAM,aAAa,OAAO,WACxB,mBACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,gBAAgB,MAAM,cAAc,CAAC,CAAC,CAAC,CACtF,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,WAAW,OAAO,WACtB,SACA,MAAM,UACN,MAAM,oBACN,KACF,EAAA,CAAG;GAEH,MAAM,UACJ,cAAc,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,aAAa,OAAO,SAAS;GAEpF,MAAM,YAAY;IAChB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;GACvB;GAEA,IACE,cAAc,KAAA,KACd,YAAY,KAAA,KACZ,CAAC,YAAY,QAAQ,SAAS,OAAO,OAAO,KAC5C,UAAU,QAAQ,aAAa,cAAc,QAC7C,UAAU,MAAM,QAAQ,UAAU,SAAS,SAAS,IAAI,MACvD,OAAO,QAAQ,cAAc,UAAU,QAAQ,aAAa,UAAU,OACrE,OAAO,oBACR,OAAO,QAAQ,cAAc,UAAU,QAAQ,aAAa,eAAe,QACzE,OAAO,QAAQ,cAAc,SAAS,QAAQ,aAAa,eAAe,MAC7E,YAAY,KAAA,KACZ,QAAQ,QAAQ,QAAQ,UAAU,cAClC,QAAQ,QAAQ,QAAQ,cAAc,gBACrC,OAAO,QAAQ,cAAc,QAAQ,QAAQ,QAAQ,eAAe,OACnE,OAAO,iBAET,OAAO,OAAO,YAAY;GAE5B,IAAI,OAAO,oBAAoB,OAAO,YAAY,OAAO,OAAO,YAAY;EAC9E,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,kBAAkB,CAAC,CACpE;EAEA,OAAO,cAAc,KAAK,OAAO,eAAe,oCAAoC,QAAQ,CAAC;EAC7F,MAAM,iBAAiB,OAAO,OAAO,cAAc,8BAA8B;EAEjF,IACE,OAAO,OAAO,cAAc,KAC5B,CAAC,eAAe,MAAM,SAAS,cAAc,KAAK,gBAAgB,CAAC,GAEnE,OAAO,OAAO,YAAY;EAE5B,OAAO;CACT,CAAC;CAqCD,OAAO;EAAE;EAAyB;EAAwB,qBAlC9B,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAiBnE,SACA,eACA,MACA,mBACA,SACA;GACA,MAAM,UAAU,OAAO;GAEvB,OAAO,OAAO,WACZ,SACA,eACA,KAAK,QACJ,aAAa,KAAK,QAAQ,UAAU,SAAS,OAAO,GACrD,iBACF;EACF,CAE4E;CAAE;AAChF"}

package/dist/internal/query-operations.d.mts

@@ -0,0 +1,61 @@
+import { Statement } from "effect/unstable/sql/Statement";
+//#region src/internal/query-operations.d.ts
+/** Adapter-owned table metadata. No driver or ORM type enters the shared models. */
+export interface TableModel {
+  readonly table: object;
+  readonly column: string;
+  readonly select: Record<string, unknown>;
+  readonly insert: Record<string, unknown>;
+}
+/** Kernels erase the physical table handle after the adapter validates its
+ * mapping. Rows and insert values still pass through their declared codecs. */
+export interface AnyTableModel extends TableModel {
+  readonly table: any;
+}
+/** Opaque compiler expression; only the owning compiler interprets its contents. */
+export interface SqlExpression {
+  readonly getSQL: () => SqlExpression;
+}
+export interface SqlFragment extends SqlExpression {
+  readonly mapWith: (decode: (value: unknown) => unknown) => SqlFragment;
+  readonly as: (name: string) => SqlExpression;
+}
+export interface SqlColumn extends SqlExpression {
+  readonly mapToDriverValue: (value: unknown) => unknown;
+}
+/** Native query failures stay in E until the owning kernel reports and redacts
+ * them. Drivers may carry a more specific tag; the cause remains available to
+ * the application's constraint classifier and is never public telemetry. */
+export interface QueryFailure {
+  readonly _tag: string;
+  readonly cause: unknown;
+}
+type Predicate<Fragment> = (...parts: ReadonlyArray<SqlExpression | undefined>) => Fragment | undefined;
+type Comparison<Fragment> = (left: unknown, right: unknown) => Fragment;
+/** Compiler operations shared by the SQL state machines; no driver is acquired here. */
+export interface QueryOperations<Fragment extends SqlFragment = SqlFragment, Column extends SqlColumn = SqlColumn> {
+  readonly and: Predicate<Fragment>;
+  readonly or: Predicate<Fragment>;
+  readonly balancedD1And: Predicate<Fragment>;
+  readonly asc: (value: unknown) => Fragment;
+  readonly eq: Comparison<Fragment>;
+  readonly gt: Comparison<Fragment>;
+  readonly gte: Comparison<Fragment>;
+  readonly lte: Comparison<Fragment>;
+  readonly inArray: (value: unknown, values: ReadonlyArray<unknown>) => Fragment;
+  readonly isNull: (value: unknown) => Fragment;
+  readonly notExists: (value: SqlExpression) => Fragment;
+  readonly sql: {
+    (parts: TemplateStringsArray, ...values: ReadonlyArray<unknown>): Fragment;
+    readonly param: (value: unknown, column: SqlColumn) => unknown;
+    readonly join: (values: ReadonlyArray<unknown>, separator: SqlExpression) => Fragment;
+  };
+  readonly getTableColumns: (table: object) => Readonly<Record<string, Column>>;
+  readonly column: (table: object, key: string) => Column;
+  readonly updateValues: (entries: ReadonlyArray<readonly [string, unknown]>) => Record<string, unknown>;
+  readonly compactD1GeneratedStatement: <A extends object>(client: {
+    readonly unsafe: <Row extends object>(sql: string, params?: ReadonlyArray<unknown>) => Statement<Row>;
+  }, statement: Statement<A>, invalid: () => unknown) => Statement<A>;
+}
+//#endregion
+//# sourceMappingURL=query-operations.d.mts.map

package/dist/internal/registration-contract.d.mts

@@ -0,0 +1,16 @@
+import { Effect } from "effect";
+import { PreparedCommit } from "@yielded/auth/Hooks";
+import { PasswordRegistrationDecision, PasswordReplacement, PasswordUnavailable, PreparePasswordCommit } from "@yielded/auth/Password";
+import { LoginIdentifier } from "@yielded/auth/Identity";
+//#region src/internal/registration-contract.d.ts
+export interface PasswordRegistrationAuthority<Registration> {
+  readonly register: <A>(input: {
+    readonly moduleId: string;
+    readonly requestId: string;
+    readonly identifier: LoginIdentifier;
+    readonly registration: Registration;
+    readonly replacement: PasswordReplacement;
+  }, prepare: PreparePasswordCommit<PasswordRegistrationDecision, A>) => Effect.Effect<PreparedCommit<A>, PasswordUnavailable>;
+}
+//#endregion
+//# sourceMappingURL=registration-contract.d.mts.map

package/dist/internal/registration.mjs

@@ -0,0 +1,66 @@
+import { Effect, Schema } from "effect";
+import { randomId } from "@yielded/auth-crypto";
+import { LifecycleHooks, coordinateCommit, hasCommitScope } from "@yielded/auth/Hooks";
+import { SecurityRevision } from "@yielded/auth/Sessions";
+import { reportPersistenceFailure } from "@yielded/auth/Persistence";
+import { PasswordUnavailable } from "@yielded/auth/Password";
+//#region src/internal/registration.ts
+var IdentifierTaken = class extends Schema.TaggedError()("IdentifierTaken", {}) {};
+/** Registration reserves the command, provisions the application's subject, and
+* creates the unverified identifier and password in one SQL transaction. Replays
+* always suppress; a public request ID never recovers a private password intent.
+*/
+const makeRegistrationAuthority = Effect.fn("makeRegistrationAuthority")(function* (database, mappings, operations, standalone, createSubject) {
+	const hooks = yield* LifecycleHooks;
+	const { and, eq, column } = operations;
+	const mapping = mappings.passwords();
+	const receipts = mappings.table("passwordRegistrations");
+	return { register: (input, prepare) => Effect.gen(function* () {
+		if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});
+		yield* standalone;
+		const receipt = {
+			moduleId: input.moduleId,
+			requestId: input.requestId
+		};
+		const suppress = coordinateCommit((journal) => database.transaction((tx) => Effect.gen(function* () {
+			yield* tx.insert(receipts).values(receipt).onConflictDoNothing();
+			return prepare({ _tag: "Suppressed" }, journal);
+		})), { mode: "interactive" });
+		return (yield* coordinateCommit((journal) => database.transaction((tx) => Effect.gen(function* () {
+			if ((yield* tx.insert(receipts).values(receipt).onConflictDoNothing().returning()).length === 0) return prepare({ _tag: "Suppressed" }, journal);
+			if ((yield* tx.select().from(mapping.identifier.table).where(and(eq(column(mapping.identifier.table, mapping.identifier.namespace), input.identifier.namespace), eq(column(mapping.identifier.table, mapping.identifier.value), input.identifier.value))).limit(1)).length !== 0) return prepare({ _tag: "Suppressed" }, journal);
+			const subjectId = yield* createSubject({
+				identifier: input.identifier,
+				registration: input.registration
+			});
+			const nativeId = yield* mapping.subjectId.toNative(subjectId);
+			const subjects = yield* tx.select().from(mapping.subject.table).where(eq(column(mapping.subject.table, mapping.subject.id), nativeId)).limit(1);
+			if (subjects.length !== 1 || !mapping.subject.isActiveStatus(subjects[0][mapping.subject.status])) return yield* PasswordUnavailable.make({});
+			yield* Schema.decodeUnknownEffect(SecurityRevision)(subjects[0][mapping.subject.securityRevision]);
+			if ((yield* tx.insert(mapping.identifier.table).values(mapping.identifier.encodeInitialInsert(input.identifier, nativeId, SecurityRevision.make(randomId()))).onConflictDoNothing().returning()).length !== 1) return yield* new IdentifierTaken({});
+			const credentialId = randomId();
+			const credentialRevision = SecurityRevision.make(randomId());
+			yield* tx.insert(mapping.credential.table).values(mapping.credential.encodeInsert({
+				moduleId: input.moduleId,
+				subjectId: nativeId,
+				credentialId,
+				credentialRevision,
+				verifierVersion: SecurityRevision.make(randomId()),
+				replacement: input.replacement
+			}));
+			yield* tx.insert(mapping.authorityCredential.table).values(mapping.authorityCredential.encodeInsert({
+				subjectId: nativeId,
+				credentialId,
+				revision: credentialRevision
+			}));
+			return prepare({
+				_tag: "Created",
+				subjectId
+			}, journal);
+		})), { mode: "interactive" }).pipe(Effect.catchTag("IdentifierTaken", () => suppress))).value;
+	}).pipe(Effect.provideService(LifecycleHooks, hooks), (work) => reportPersistenceFailure(work, Schema.is(PasswordUnavailable)), Effect.mapError(() => PasswordUnavailable.make({}))) };
+});
+//#endregion
+export { makeRegistrationAuthority };
+
+//# sourceMappingURL=registration.mjs.map

package/dist/internal/registration.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.mjs","names":[],"sources":["../../src/internal/registration.ts"],"sourcesContent":["import { randomId } from \"@yielded/auth-crypto\";\nimport { coordinateCommit, hasCommitScope, LifecycleHooks } from \"@yielded/auth/Hooks\";\nimport type { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport { PasswordUnavailable } from \"@yielded/auth/Password\";\nimport { reportPersistenceFailure } from \"@yielded/auth/Persistence\";\nimport type { SubjectId } from \"@yielded/auth/Schema\";\nimport { SecurityRevision } from \"@yielded/auth/Sessions\";\nimport { Effect, Schema } from \"effect\";\n\nimport type { PasswordSqlDatabase } from \"./password-kernel\";\nimport type { QueryOperations } from \"./query-operations\";\nimport type { PasswordRegistrationAuthority } from \"./registration-contract\";\nimport type { makeMappings } from \"./storage-mapping\";\n\nclass IdentifierTaken extends Schema.TaggedError<IdentifierTaken>()(\"IdentifierTaken\", {}) {}\n\nexport type CreateSubject = (input: {\n  readonly identifier: LoginIdentifier;\n  readonly registration: unknown;\n}) => Effect.Effect<SubjectId, PasswordUnavailable>;\n\n/** Registration reserves the command, provisions the application's subject, and\n * creates the unverified identifier and password in one SQL transaction. Replays\n * always suppress; a public request ID never recovers a private password intent.\n */\nexport const makeRegistrationAuthority = Effect.fn(\"makeRegistrationAuthority\")(function* (\n  database: PasswordSqlDatabase,\n  mappings: ReturnType<typeof makeMappings>,\n  operations: QueryOperations,\n  standalone: Effect.Effect<void, PasswordUnavailable>,\n  createSubject: CreateSubject,\n): Effect.fn.Return<PasswordRegistrationAuthority<unknown>, never, LifecycleHooks> {\n  const hooks = yield* LifecycleHooks;\n  const { and, eq, column } = operations;\n  const mapping = mappings.passwords();\n  const receipts = mappings.table(\"passwordRegistrations\");\n\n  return {\n    register: (input, prepare) =>\n      Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n        yield* standalone;\n\n        const receipt = { moduleId: input.moduleId, requestId: input.requestId };\n\n        const suppress = coordinateCommit(\n          (journal) =>\n            database.transaction((tx) =>\n              Effect.gen(function* () {\n                yield* tx.insert(receipts).values(receipt).onConflictDoNothing();\n\n                return prepare({ _tag: \"Suppressed\" }, journal);\n              }),\n            ),\n          { mode: \"interactive\" },\n        );\n\n        const committed = yield* coordinateCommit(\n          (journal) =>\n            database.transaction((tx) =>\n              Effect.gen(function* () {\n                const reserved = yield* tx\n                  .insert(receipts)\n                  .values(receipt)\n                  .onConflictDoNothing()\n                  .returning();\n\n                if (reserved.length === 0) return prepare({ _tag: \"Suppressed\" }, journal);\n\n                const identifiers = yield* tx\n                  .select()\n                  .from(mapping.identifier.table)\n                  .where(\n                    and(\n                      eq(\n                        column(mapping.identifier.table, mapping.identifier.namespace),\n                        input.identifier.namespace,\n                      ),\n                      eq(\n                        column(mapping.identifier.table, mapping.identifier.value),\n                        input.identifier.value,\n                      ),\n                    ),\n                  )\n                  .limit(1);\n\n                if (identifiers.length !== 0) return prepare({ _tag: \"Suppressed\" }, journal);\n\n                const subjectId = yield* createSubject({\n                  identifier: input.identifier,\n                  registration: input.registration,\n                });\n\n                const nativeId = yield* mapping.subjectId.toNative(subjectId);\n\n                const subjects = yield* tx\n                  .select()\n                  .from(mapping.subject.table)\n                  .where(eq(column(mapping.subject.table, mapping.subject.id), nativeId))\n                  .limit(1);\n\n                if (\n                  subjects.length !== 1 ||\n                  !mapping.subject.isActiveStatus(subjects[0][mapping.subject.status])\n                )\n                  return yield* PasswordUnavailable.make({});\n                yield* Schema.decodeUnknownEffect(SecurityRevision)(\n                  subjects[0][mapping.subject.securityRevision],\n                );\n\n                const bound = yield* tx\n                  .insert(mapping.identifier.table)\n                  .values(\n                    mapping.identifier.encodeInitialInsert(\n                      input.identifier,\n                      nativeId,\n                      SecurityRevision.make(randomId()),\n                    ),\n                  )\n                  .onConflictDoNothing()\n                  .returning();\n\n                // A concurrent registration won the identifier. Roll back the application\n                // subject too, then persist a non-authorizing receipt in a new transaction.\n                if (bound.length !== 1) return yield* new IdentifierTaken({});\n\n                const credentialId = randomId();\n                const credentialRevision = SecurityRevision.make(randomId());\n\n                yield* tx.insert(mapping.credential.table).values(\n                  mapping.credential.encodeInsert({\n                    moduleId: input.moduleId,\n                    subjectId: nativeId,\n                    credentialId,\n                    credentialRevision,\n                    verifierVersion: SecurityRevision.make(randomId()),\n                    replacement: input.replacement,\n                  }),\n                );\n                yield* tx.insert(mapping.authorityCredential.table).values(\n                  mapping.authorityCredential.encodeInsert({\n                    subjectId: nativeId,\n                    credentialId,\n                    revision: credentialRevision,\n                  }),\n                );\n\n                return prepare({ _tag: \"Created\", subjectId }, journal);\n              }),\n            ),\n          { mode: \"interactive\" },\n        ).pipe(Effect.catchTag(\"IdentifierTaken\", () => suppress));\n\n        return committed.value;\n      }).pipe(\n        Effect.provideService(LifecycleHooks, hooks),\n        (work) => reportPersistenceFailure(work, Schema.is(PasswordUnavailable)),\n        Effect.mapError(() => PasswordUnavailable.make({})),\n      ),\n  };\n});\n"],"mappings":";;;;;;;AAcA,IAAM,kBAAN,cAA8B,OAAO,YAA6B,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;;;;;AAW5F,MAAa,4BAA4B,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC9E,UACA,UACA,YACA,YACA,eACiF;CACjF,MAAM,QAAQ,OAAO;CACrB,MAAM,EAAE,KAAK,IAAI,WAAW;CAC5B,MAAM,UAAU,SAAS,UAAU;CACnC,MAAM,WAAW,SAAS,MAAM,uBAAuB;CAEvD,OAAO,EACL,WAAW,OAAO,YAChB,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;EACpE,OAAO;EAEP,MAAM,UAAU;GAAE,UAAU,MAAM;GAAU,WAAW,MAAM;EAAU;EAEvE,MAAM,WAAW,kBACd,YACC,SAAS,aAAa,OACpB,OAAO,IAAI,aAAa;GACtB,OAAO,GAAG,OAAO,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,oBAAoB;GAE/D,OAAO,QAAQ,EAAE,MAAM,aAAa,GAAG,OAAO;EAChD,CAAC,CACH,GACF,EAAE,MAAM,cAAc,CACxB;EAkGA,QAAO,OAhGkB,kBACtB,YACC,SAAS,aAAa,OACpB,OAAO,IAAI,aAAa;GAOtB,KAAI,OANoB,GACrB,OAAO,QAAQ,CAAC,CAChB,OAAO,OAAO,CAAC,CACf,oBAAoB,CAAC,CACrB,UAAU,EAAA,CAEA,WAAW,GAAG,OAAO,QAAQ,EAAE,MAAM,aAAa,GAAG,OAAO;GAmBzE,KAAI,OAjBuB,GACxB,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GACE,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS,GAC7D,MAAM,WAAW,SACnB,GACA,GACE,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK,GACzD,MAAM,WAAW,KACnB,CACF,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAEM,WAAW,GAAG,OAAO,QAAQ,EAAE,MAAM,aAAa,GAAG,OAAO;GAE5E,MAAM,YAAY,OAAO,cAAc;IACrC,YAAY,MAAM;IAClB,cAAc,MAAM;GACtB,CAAC;GAED,MAAM,WAAW,OAAO,QAAQ,UAAU,SAAS,SAAS;GAE5D,MAAM,WAAW,OAAO,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CACtE,MAAM,CAAC;GAEV,IACE,SAAS,WAAW,KACpB,CAAC,QAAQ,QAAQ,eAAe,SAAS,EAAE,CAAC,QAAQ,QAAQ,OAAO,GAEnE,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;GAC3C,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CACjD,SAAS,EAAE,CAAC,QAAQ,QAAQ,iBAC9B;GAgBA,KAAI,OAdiB,GAClB,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,OACC,QAAQ,WAAW,oBACjB,MAAM,YACN,UACA,iBAAiB,KAAK,SAAS,CAAC,CAClC,CACF,CAAC,CACA,oBAAoB,CAAC,CACrB,UAAU,EAAA,CAIH,WAAW,GAAG,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC;GAE5D,MAAM,eAAe,SAAS;GAC9B,MAAM,qBAAqB,iBAAiB,KAAK,SAAS,CAAC;GAE3D,OAAO,GAAG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OACzC,QAAQ,WAAW,aAAa;IAC9B,UAAU,MAAM;IAChB,WAAW;IACX;IACA;IACA,iBAAiB,iBAAiB,KAAK,SAAS,CAAC;IACjD,aAAa,MAAM;GACrB,CAAC,CACH;GACA,OAAO,GAAG,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAClD,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX;IACA,UAAU;GACZ,CAAC,CACH;GAEA,OAAO,QAAQ;IAAE,MAAM;IAAW;GAAU,GAAG,OAAO;EACxD,CAAC,CACH,GACF,EAAE,MAAM,cAAc,CACxB,CAAC,CAAC,KAAK,OAAO,SAAS,yBAAyB,QAAQ,CAAC,EAAA,CAExC;CACnB,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,gBAAgB,KAAK,IAC1C,SAAS,yBAAyB,MAAM,OAAO,GAAG,mBAAmB,CAAC,GACvE,OAAO,eAAe,oBAAoB,KAAK,CAAC,CAAC,CAAC,CACpD,EACJ;AACF,CAAC"}

package/dist/internal/session-kernel.d.mts

@@ -0,0 +1,48 @@
+import { QueryFailure, QueryOperations } from "./query-operations.mjs";
+import { AuthenticationAuthorityMapping, PendingAuthenticationMapping, SignedSessionValidityMapping, StatefulSessionMapping } from "./models/session-model.mjs";
+import { SessionStepUpMapping } from "./models/step-up-model.mjs";
+import { Context, Effect } from "effect";
+import { LifecycleHooks } from "@yielded/auth/Hooks";
+import { AuthenticationAuthority, PendingAuthentication, SessionRepository, SessionStepUpPersistence, SessionUnavailable, SignedSessionValidity, StatefulSessionPersistence } from "@yielded/auth/Sessions";
+import * as SqlError$1 from "effect/unstable/sql/SqlError";
+//#region src/internal/session-kernel.d.ts
+type CommitMode = "interactive" | "synchronous";
+interface SessionSqlQuery<A = ReadonlyArray<any>> extends Effect.Effect<A, QueryFailure | SqlError$1.SqlError> {
+  readonly from: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+  readonly where: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+  readonly limit: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+  readonly orderBy: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+  readonly for: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+  readonly set: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+  readonly values: (...args: ReadonlyArray<any>) => SessionSqlQuery<A>;
+}
+export interface SessionSqlDatabase {
+  readonly select: (...args: ReadonlyArray<any>) => SessionSqlQuery;
+  readonly insert: (...args: ReadonlyArray<any>) => SessionSqlQuery;
+  readonly update: (...args: ReadonlyArray<any>) => SessionSqlQuery;
+  readonly delete: (...args: ReadonlyArray<any>) => SessionSqlQuery;
+  readonly transaction: <A, E, R>(body: (transaction: SessionSqlDatabase) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | SqlError$1.SqlError, R>;
+}
+type Database = SessionSqlDatabase;
+declare const CurrentSessionSql_base: Context.ServiceClass<CurrentSessionSql, "effect-auth/drizzle/CurrentSessionSql", SessionSqlDatabase>;
+/** Native SQL authority for the current transaction or savepoint. */
+export declare class CurrentSessionSql extends CurrentSessionSql_base {}
+type Guard = Effect.Effect<void, SessionUnavailable>;
+export interface SessionSqlOptions {
+  readonly mode: CommitMode;
+  readonly locking: boolean;
+  /** Target-specific ambient transaction preflight. It runs before IDs or writes. */
+  readonly standaloneGuard: Guard;
+}
+export declare const makeSessionKernel: (operations: QueryOperations) => {
+  makeSqlAuthenticationAuthority: <Claims>(database: Database, mapping: AuthenticationAuthorityMapping<Claims, any, any, any, any, any>, options: SessionSqlOptions) => Effect.Effect<AuthenticationAuthority["Service"], never, LifecycleHooks>;
+  makeSqlPendingAuthentication: <Claims>(database: Database, mapping: PendingAuthenticationMapping<Claims, any, any, any, any, any>, options: SessionSqlOptions) => Effect.Effect<PendingAuthentication<Claims>, never, LifecycleHooks>;
+  makeSqlStatefulSessions: <Claims>(database: Database, mapping: StatefulSessionMapping<Claims, any, any, any, any, any, any, any>, options: SessionSqlOptions) => Effect.Effect<{
+    readonly statefulSessionPersistence: StatefulSessionPersistence<Claims>;
+    readonly sessionRepository: SessionRepository;
+  }, never, LifecycleHooks>;
+  makeSqlSignedValidity: (database: Database, mapping: SignedSessionValidityMapping<any, any, any, any>, options: SessionSqlOptions) => Effect.Effect<SignedSessionValidity, never, LifecycleHooks>;
+  makeSqlSessionStepUp: <Claims>(database: Database, mapping: SessionStepUpMapping<Claims, any, any, any, any, any, any, any>, options: SessionSqlOptions) => Effect.Effect<SessionStepUpPersistence<Claims>, never, LifecycleHooks>;
+};
+//#endregion
+//# sourceMappingURL=session-kernel.d.mts.map