@yielded/auth-persistence 0.1.0-beta.17 → 0.1.0-beta.19

package/dist/internal/sql-query.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sql-query.mjs","names":[],"sources":["../../src/internal/sql-query.ts"],"sourcesContent":["import { Effect, Predicate } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport type { QueryOperations } from \"./query-operations\";\nimport {\n  type Column,\n  Fragment,\n  Table,\n  identifier,\n  type Compiler,\n  type Dialect,\n  type Row,\n} from \"./sql-table\";\n\nconst render = (value: unknown, compiler: Compiler): string => {\n  if (value instanceof Fragment) return value.render(compiler);\n  if (Predicate.hasProperty(value, \"getSQL\") && typeof value.getSQL === \"function\") {\n    return render(value.getSQL(), compiler);\n  }\n\n  compiler.parameters.push(\n    compiler.dialect === \"sqlite\" && typeof value === \"boolean\" ? Number(value) : value,\n  );\n\n  return compiler.dialect === \"pg\" ? `$${compiler.parameters.length}` : \"?\";\n};\n\nconst template = (parts: TemplateStringsArray, ...values: unknown[]): Fragment =>\n  new Fragment((compiler) =>\n    parts.reduce(\n      (sql, part, i) => sql + (i === 0 ? \"\" : render(values[i - 1], compiler)) + part,\n      \"\",\n    ),\n  );\n\nconst combine = (separator: string, values: ReadonlyArray<Fragment | undefined>) => {\n  const fragments = values.filter((value) => value !== undefined);\n\n  return fragments.length === 0\n    ? undefined\n    : new Fragment(\n        (compiler) =>\n          \"(\" + fragments.map((fragment) => fragment.render(compiler)).join(separator) + \")\",\n      );\n};\n\nconst and = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" AND \", values);\nconst or = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" OR \", values);\n\nconst operations = {\n  and,\n  or,\n  asc: (value: unknown) => template`${value} ASC`,\n  eq: (left: unknown, right: unknown) => template`${left} = ${right}`,\n  gt: (left: unknown, right: unknown) => template`${left} > ${right}`,\n  gte: (left: unknown, right: unknown) => template`${left} >= ${right}`,\n  lte: (left: unknown, right: unknown) => template`${left} <= ${right}`,\n  isNull: (value: unknown) => template`${value} IS NULL`,\n  notExists: (value: unknown) => template`NOT EXISTS (${value})`,\n  inArray: (column: unknown, values: ReadonlyArray<unknown>) =>\n    values.length === 0\n      ? template`false`\n      : new Fragment(\n          (compiler) =>\n            `${render(column, compiler)} IN (${values.map((value) => render(value, compiler)).join(\", \")})`,\n        ),\n  sql: Object.assign(template, {\n    param: (value: unknown, column: Column) => column.mapToDriverValue(value),\n    join: (values: ReadonlyArray<unknown>, separator: Fragment = template``) =>\n      new Fragment((compiler) =>\n        values\n          .map(\n            (value, index) =>\n              (index === 0 ? \"\" : separator.render(compiler)) + render(value, compiler),\n          )\n          .join(\"\"),\n      ),\n  }),\n  getTableColumns: (table: Table) => table.columns,\n  column: (table: Table, key: string) => {\n    const column = table.columns[key];\n\n    if (column === undefined)\n      throw PersistenceMappingError.make({ operation: \"column\", cause: key });\n\n    return column;\n  },\n  updateValues: (entries: ReadonlyArray<readonly [string, unknown]>) => Object.fromEntries(entries),\n  balancedD1And: and,\n  // Raw clients use interactive transactions, so no D1 batch compaction is needed.\n  compactD1GeneratedStatement: <S>(_client: unknown, statement: S) => statement,\n};\n\n// The existing kernels erase query-builder shapes at this boundary. The raw compiler\n// implements precisely those operations; no row decoding or Effect requirements are cast.\nexport const sqlQueryOperations = operations as unknown as QueryOperations;\n\ntype Selection = Readonly<Record<string, Fragment>>;\n\ninterface QueryState {\n  readonly operation: \"select\" | \"insert\" | \"update\" | \"delete\";\n  readonly table?: Table | Fragment;\n  readonly joins?: ReadonlyArray<{\n    readonly table: Table | Fragment;\n    readonly on: Fragment;\n  }>;\n  readonly selection?: Selection;\n  readonly where?: Fragment;\n  readonly values?: Row;\n  readonly returning?: Selection | true;\n  readonly order?: ReadonlyArray<Fragment>;\n  readonly limit?: number;\n  readonly lock?: boolean;\n  readonly conflict?: boolean;\n}\n\nconst selectionFor = (state: QueryState): Selection =>\n  state.selection ?? (state.table instanceof Table ? state.table.columns : {});\n\nconst selectionFields = (selection: Selection) => {\n  const used = new Set(Object.keys(selection));\n  let index = 0;\n\n  return Object.entries(selection).flatMap<{\n    readonly key: string;\n    readonly name: string | undefined;\n    readonly column: Fragment;\n    readonly alias: string;\n  }>(([key, value]) =>\n    value instanceof Table\n      ? Object.entries(value.columns).map(([name, column]) => {\n          let alias: string;\n\n          do alias = `auth_column_${index++}`;\n          while (used.has(alias));\n          used.add(alias);\n\n          return { key, name, column, alias };\n        })\n      : [{ key, name: undefined, column: value, alias: key }],\n  );\n};\n\nconst projection = (selection: Selection, compiler: Compiler) =>\n  selectionFields(selection)\n    .map(({ column, alias }) => `${column.render(compiler)} AS ${identifier(alias)}`)\n    .join(\", \");\n\n// Joined table selections retain their own column codecs and nested row names.\nconst decodeRow = (selection: Selection, row: Row): Row => {\n  const entries: Array<readonly [string, unknown]> = [];\n  const groups = new Map<string, Array<readonly [string, unknown]>>();\n\n  for (const field of selectionFields(selection)) {\n    const value = field.column.decode(row[field.alias]);\n\n    if (field.name === undefined) entries.push([field.key, value]);\n    else {\n      const group = groups.get(field.key) ?? [];\n\n      group.push([field.name, value]);\n      groups.set(field.key, group);\n    }\n  }\n\n  return Object.fromEntries([\n    ...entries,\n    ...Array.from(groups, ([key, values]) => [key, Object.fromEntries(values)]),\n  ]);\n};\n\nconst compile = (state: QueryState, compiler: Compiler): string => {\n  const table = state.table;\n\n  if (table === undefined)\n    throw PersistenceMappingError.make({ operation: \"query\", cause: \"Missing table\" });\n  let query: string;\n\n  if (state.operation === \"select\") {\n    query = `SELECT ${projection(selectionFor(state), compiler)} FROM ${table.render(compiler)}`;\n    for (const join of state.joins ?? [])\n      query += ` INNER JOIN ${join.table.render(compiler)} ON ${join.on.render(compiler)}`;\n  } else {\n    if (!(table instanceof Table))\n      throw PersistenceMappingError.make({\n        operation: \"query\",\n        cause: \"Mutation requires a table\",\n      });\n    const target = table.render(compiler);\n\n    const fields = Object.entries(state.values ?? {}).filter(\n      ([key, value]) => table.columns[key] !== undefined && value !== undefined,\n    );\n\n    if (state.operation === \"insert\") {\n      query = `INSERT INTO ${target} (${fields.map(([key]) => identifier(table.columns[key].options.name)).join(\", \")}) VALUES (${fields.map(([, value]) => render(value, compiler)).join(\", \")})`;\n    } else if (state.operation === \"update\") {\n      query = `UPDATE ${target} SET ${fields.map(([key, value]) => `${identifier(table.columns[key].options.name)} = ${render(value, compiler)}`).join(\", \")}`;\n    } else query = `DELETE FROM ${target}`;\n  }\n  if (state.where !== undefined) query += ` WHERE ${state.where.render(compiler)}`;\n  if (state.order?.length)\n    query += ` ORDER BY ${state.order.map((field) => field.render(compiler)).join(\", \")}`;\n  if (state.limit !== undefined) query += ` LIMIT ${render(state.limit, compiler)}`;\n  if (state.conflict) query += \" ON CONFLICT DO NOTHING\";\n  if (state.returning)\n    query += ` RETURNING ${projection(state.returning === true && table instanceof Table ? table.columns : state.returning === true ? {} : state.returning, compiler)}`;\n  if (state.lock && compiler.dialect === \"pg\") query += \" FOR UPDATE\";\n\n  return query;\n};\n\n/** Captures one Effect SQL client. Its transaction service remains the physical owner. */\nexport const makeSqlDatabase = Effect.fnUntraced(function* (dialect: Dialect) {\n  const client = yield* SqlClient;\n\n  const query = (state: QueryState): Query => {\n    const execute = Effect.suspend(() => {\n      const compiler: Compiler = { dialect, parameters: [] };\n      const text = compile(state, compiler);\n\n      const selected: Selection =\n        state.operation === \"select\"\n          ? selectionFor(state)\n          : state.returning === true\n            ? state.table instanceof Table\n              ? state.table.columns\n              : {}\n            : state.returning || {};\n\n      return client\n        .unsafe<Row>(text, compiler.parameters)\n        .pipe(Effect.map((rows) => rows.map((row) => decodeRow(selected, row))));\n    });\n\n    return Object.assign(execute, {\n      toSQL: () => {\n        const compiler: Compiler = { dialect, parameters: [] };\n\n        return { sql: compile(state, compiler), params: compiler.parameters };\n      },\n      getSQL: () => new Fragment((compiler) => compile(state, compiler)),\n      from: (table: Table | Fragment) => query({ ...state, table }),\n      innerJoin: (table: Table | Fragment, on: Fragment) =>\n        query({ ...state, joins: [...(state.joins ?? []), { table, on }] }),\n      where: (where: Fragment | undefined) => query({ ...state, where }),\n      limit: (limit: number) => query({ ...state, limit }),\n      orderBy: (...order: Fragment[]) => query({ ...state, order }),\n      for: (_lock: \"update\") => query({ ...state, lock: true }),\n      values: (values: Row) => query({ ...state, values }),\n      set: (values: Row) => query({ ...state, values }),\n      returning: (returning: Selection | true = true) => query({ ...state, returning }),\n      onConflictDoNothing: () => query({ ...state, conflict: true }),\n    });\n  };\n\n  const database: SqlDatabase = {\n    $client: client,\n    select: (selection?: Selection) => query({ operation: \"select\", selection }),\n    insert: (table: Table) => query({ operation: \"insert\", table }),\n    update: (table: Table) => query({ operation: \"update\", table }),\n    delete: (table: Table) => query({ operation: \"delete\", table }),\n    transaction: <A, E, R>(\n      body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n    ): Effect.Effect<A, E | SqlError, R> =>\n      client.withTransaction(Effect.suspend(() => body(database))),\n  };\n\n  return database;\n});\n\ninterface Query extends Effect.Effect<Row[], SqlError> {\n  toSQL(): { readonly sql: string; readonly params: ReadonlyArray<unknown> };\n  getSQL(): Fragment;\n  from(table: Table | Fragment): Query;\n  innerJoin(table: Table | Fragment, on: Fragment): Query;\n  where(where: Fragment | undefined): Query;\n  limit(limit: number): Query;\n  orderBy(...order: Fragment[]): Query;\n  for(lock: \"update\"): Query;\n  values(values: Row): Query;\n  set(values: Row): Query;\n  returning(returning?: Selection | true): Query;\n  onConflictDoNothing(): Query;\n}\n\nexport interface SqlDatabase {\n  readonly $client: SqlClient;\n  select(selection?: Selection): Query;\n  insert(table: Table): Query;\n  update(table: Table): Query;\n  delete(table: Table): Query;\n  transaction<A, E, R>(\n    body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | SqlError, R>;\n}\n\nexport const sql = template;\n"],"mappings":";;;;;AAgBA,MAAM,UAAU,OAAgB,aAA+B;CAC7D,IAAI,iBAAiB,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC3D,IAAI,UAAU,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM,WAAW,YACpE,OAAO,OAAO,MAAM,OAAO,GAAG,QAAQ;CAGxC,SAAS,WAAW,KAClB,SAAS,YAAY,YAAY,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI,KAChF;CAEA,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,WAAW,WAAW;AACxE;AAEA,MAAM,YAAY,OAA6B,GAAG,WAChD,IAAI,UAAU,aACZ,MAAM,QACH,KAAK,MAAM,MAAM,OAAO,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI,IAAI,QAAQ,KAAK,MAC3E,EACF,CACF;AAEF,MAAM,WAAW,WAAmB,WAAgD;CAClF,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,KAAA,CAAS;CAE9D,OAAO,UAAU,WAAW,IACxB,KAAA,IACA,IAAI,UACD,aACC,MAAM,UAAU,KAAK,aAAa,SAAS,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,GACnF;AACN;AAEA,MAAM,OAAO,GAAG,WAAgD,QAAQ,SAAS,MAAM;AACvF,MAAM,MAAM,GAAG,WAAgD,QAAQ,QAAQ,MAAM;AAgDrF,MAAa,qBAAqB;CA7ChC;CACA;CACA,MAAM,UAAmB,QAAQ,GAAG,MAAM;CAC1C,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,SAAS,UAAmB,QAAQ,GAAG,MAAM;CAC7C,YAAY,UAAmB,QAAQ,eAAe,MAAM;CAC5D,UAAU,QAAiB,WACzB,OAAO,WAAW,IACd,QAAQ,UACR,IAAI,UACD,aACC,GAAG,OAAO,QAAQ,QAAQ,EAAE,OAAO,OAAO,KAAK,UAAU,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACjG;CACN,KAAK,OAAO,OAAO,UAAU;EAC3B,QAAQ,OAAgB,WAAmB,OAAO,iBAAiB,KAAK;EACxE,OAAO,QAAgC,YAAsB,QAAQ,OACnE,IAAI,UAAU,aACZ,OACG,KACE,OAAO,WACL,UAAU,IAAI,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,OAAO,QAAQ,CAC5E,CAAC,CACA,KAAK,EAAE,CACZ;CACJ,CAAC;CACD,kBAAkB,UAAiB,MAAM;CACzC,SAAS,OAAc,QAAgB;EACrC,MAAM,SAAS,MAAM,QAAQ;EAE7B,IAAI,WAAW,KAAA,GACb,MAAM,wBAAwB,KAAK;GAAE,WAAW;GAAU,OAAO;EAAI,CAAC;EAExE,OAAO;CACT;CACA,eAAe,YAAuD,OAAO,YAAY,OAAO;CAChG,eAAe;CAEf,8BAAiC,SAAkB,cAAiB;AAKpC;AAqBlC,MAAM,gBAAgB,UACpB,MAAM,cAAc,MAAM,iBAAiB,QAAQ,MAAM,MAAM,UAAU,CAAC;AAE5E,MAAM,mBAAmB,cAAyB;CAChD,MAAM,OAAO,IAAI,IAAI,OAAO,KAAK,SAAS,CAAC;CAC3C,IAAI,QAAQ;CAEZ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,SAK7B,CAAC,KAAK,WACR,iBAAiB,QACb,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;EACpD,IAAI;EAEJ;GAAG,QAAQ,eAAe;SACnB,KAAK,IAAI,KAAK;EACrB,KAAK,IAAI,KAAK;EAEd,OAAO;GAAE;GAAK;GAAM;GAAQ;EAAM;CACpC,CAAC,IACD,CAAC;EAAE;EAAK,MAAM,KAAA;EAAW,QAAQ;EAAO,OAAO;CAAI,CAAC,CAC1D;AACF;AAEA,MAAM,cAAc,WAAsB,aACxC,gBAAgB,SAAS,CAAC,CACvB,KAAK,EAAE,QAAQ,YAAY,GAAG,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,KAAK,GAAG,CAAC,CAChF,KAAK,IAAI;AAGd,MAAM,aAAa,WAAsB,QAAkB;CACzD,MAAM,UAA6C,CAAC;CACpD,MAAM,yBAAS,IAAI,IAA+C;CAElE,KAAK,MAAM,SAAS,gBAAgB,SAAS,GAAG;EAC9C,MAAM,QAAQ,MAAM,OAAO,OAAO,IAAI,MAAM,MAAM;EAElD,IAAI,MAAM,SAAS,KAAA,GAAW,QAAQ,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;OACxD;GACH,MAAM,QAAQ,OAAO,IAAI,MAAM,GAAG,KAAK,CAAC;GAExC,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC;GAC9B,OAAO,IAAI,MAAM,KAAK,KAAK;EAC7B;CACF;CAEA,OAAO,OAAO,YAAY,CACxB,GAAG,SACH,GAAG,MAAM,KAAK,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO,YAAY,MAAM,CAAC,CAAC,CAC5E,CAAC;AACH;AAEA,MAAM,WAAW,OAAmB,aAA+B;CACjE,MAAM,QAAQ,MAAM;CAEpB,IAAI,UAAU,KAAA,GACZ,MAAM,wBAAwB,KAAK;EAAE,WAAW;EAAS,OAAO;CAAgB,CAAC;CACnF,IAAI;CAEJ,IAAI,MAAM,cAAc,UAAU;EAChC,QAAQ,UAAU,WAAW,aAAa,KAAK,GAAG,QAAQ,EAAE,QAAQ,MAAM,OAAO,QAAQ;EACzF,KAAK,MAAM,QAAQ,MAAM,SAAS,CAAC,GACjC,SAAS,eAAe,KAAK,MAAM,OAAO,QAAQ,EAAE,MAAM,KAAK,GAAG,OAAO,QAAQ;CACrF,OAAO;EACL,IAAI,EAAE,iBAAiB,QACrB,MAAM,wBAAwB,KAAK;GACjC,WAAW;GACX,OAAO;EACT,CAAC;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ;EAEpC,MAAM,SAAS,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,QAC/C,CAAC,KAAK,WAAW,MAAM,QAAQ,SAAS,KAAA,KAAa,UAAU,KAAA,CAClE;EAEA,IAAI,MAAM,cAAc,UACtB,QAAQ,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC,SAAS,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,YAAY,OAAO,KAAK,GAAG,WAAW,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;OACrL,IAAI,MAAM,cAAc,UAC7B,QAAQ,UAAU,OAAO,OAAO,OAAO,KAAK,CAAC,KAAK,WAAW,GAAG,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,OAAO,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI;OAChJ,QAAQ,eAAe;CAChC;CACA,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,MAAM,MAAM,OAAO,QAAQ;CAC7E,IAAI,MAAM,OAAO,QACf,SAAS,aAAa,MAAM,MAAM,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;CACpF,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC9E,IAAI,MAAM,UAAU,SAAS;CAC7B,IAAI,MAAM,WACR,SAAS,cAAc,WAAW,MAAM,cAAc,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,MAAM,cAAc,OAAO,CAAC,IAAI,MAAM,WAAW,QAAQ;CAClK,IAAI,MAAM,QAAQ,SAAS,YAAY,MAAM,SAAS;CAEtD,OAAO;AACT;;AAGA,MAAa,kBAAkB,OAAO,WAAW,WAAW,SAAkB;CAC5E,MAAM,SAAS,OAAO;CAEtB,MAAM,SAAS,UAA6B;EAC1C,MAAM,UAAU,OAAO,cAAc;GACnC,MAAM,WAAqB;IAAE;IAAS,YAAY,CAAC;GAAE;GACrD,MAAM,OAAO,QAAQ,OAAO,QAAQ;GAEpC,MAAM,WACJ,MAAM,cAAc,WAChB,aAAa,KAAK,IAClB,MAAM,cAAc,OAClB,MAAM,iBAAiB,QACrB,MAAM,MAAM,UACZ,CAAC,IACH,MAAM,aAAa,CAAC;GAE5B,OAAO,OACJ,OAAY,MAAM,SAAS,UAAU,CAAC,CACtC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC;EAC3E,CAAC;EAED,OAAO,OAAO,OAAO,SAAS;GAC5B,aAAa;IACX,MAAM,WAAqB;KAAE;KAAS,YAAY,CAAC;IAAE;IAErD,OAAO;KAAE,KAAK,QAAQ,OAAO,QAAQ;KAAG,QAAQ,SAAS;IAAW;GACtE;GACA,cAAc,IAAI,UAAU,aAAa,QAAQ,OAAO,QAAQ,CAAC;GACjE,OAAO,UAA4B,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,YAAY,OAAyB,OACnC,MAAM;IAAE,GAAG;IAAO,OAAO,CAAC,GAAI,MAAM,SAAS,CAAC,GAAI;KAAE;KAAO;IAAG,CAAC;GAAE,CAAC;GACpE,QAAQ,UAAgC,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACjE,QAAQ,UAAkB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACnD,UAAU,GAAG,UAAsB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,MAAM,UAAoB,MAAM;IAAE,GAAG;IAAO,MAAM;GAAK,CAAC;GACxD,SAAS,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GACnD,MAAM,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GAChD,YAAY,YAA8B,SAAS,MAAM;IAAE,GAAG;IAAO;GAAU,CAAC;GAChF,2BAA2B,MAAM;IAAE,GAAG;IAAO,UAAU;GAAK,CAAC;EAC/D,CAAC;CACH;CAEA,MAAM,WAAwB;EAC5B,SAAS;EACT,SAAS,cAA0B,MAAM;GAAE,WAAW;GAAU;EAAU,CAAC;EAC3E,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,cACE,SAEA,OAAO,gBAAgB,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;CAC/D;CAEA,OAAO;AACT,CAAC"}
+{"version":3,"file":"sql-query.mjs","names":[],"sources":["../../src/internal/sql-query.ts"],"sourcesContent":["import { Effect, Predicate } from \"effect\";\nimport { SqlClient } from \"effect/sql/SqlClient\";\nimport type { SqlError } from \"effect/sql/SqlError\";\n\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport type { QueryOperations } from \"./query-operations\";\nimport {\n  type Column,\n  Fragment,\n  Table,\n  identifier,\n  type Compiler,\n  type Dialect,\n  type Row,\n} from \"./sql-table\";\n\nconst render = (value: unknown, compiler: Compiler): string => {\n  if (value instanceof Fragment) return value.render(compiler);\n  if (Predicate.hasProperty(value, \"getSQL\") && typeof value.getSQL === \"function\") {\n    return render(value.getSQL(), compiler);\n  }\n\n  compiler.parameters.push(\n    compiler.dialect === \"sqlite\" && typeof value === \"boolean\" ? Number(value) : value,\n  );\n\n  return compiler.dialect === \"pg\" ? `$${compiler.parameters.length}` : \"?\";\n};\n\nconst template = (parts: TemplateStringsArray, ...values: unknown[]): Fragment =>\n  new Fragment((compiler) =>\n    parts.reduce(\n      (sql, part, i) => sql + (i === 0 ? \"\" : render(values[i - 1], compiler)) + part,\n      \"\",\n    ),\n  );\n\nconst combine = (separator: string, values: ReadonlyArray<Fragment | undefined>) => {\n  const fragments = values.filter((value) => value !== undefined);\n\n  return fragments.length === 0\n    ? undefined\n    : new Fragment(\n        (compiler) =>\n          \"(\" + fragments.map((fragment) => fragment.render(compiler)).join(separator) + \")\",\n      );\n};\n\nconst and = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" AND \", values);\nconst or = (...values: ReadonlyArray<Fragment | undefined>) => combine(\" OR \", values);\n\nconst operations = {\n  and,\n  or,\n  asc: (value: unknown) => template`${value} ASC`,\n  eq: (left: unknown, right: unknown) => template`${left} = ${right}`,\n  gt: (left: unknown, right: unknown) => template`${left} > ${right}`,\n  gte: (left: unknown, right: unknown) => template`${left} >= ${right}`,\n  lte: (left: unknown, right: unknown) => template`${left} <= ${right}`,\n  isNull: (value: unknown) => template`${value} IS NULL`,\n  notExists: (value: unknown) => template`NOT EXISTS (${value})`,\n  inArray: (column: unknown, values: ReadonlyArray<unknown>) =>\n    values.length === 0\n      ? template`false`\n      : new Fragment(\n          (compiler) =>\n            `${render(column, compiler)} IN (${values.map((value) => render(value, compiler)).join(\", \")})`,\n        ),\n  sql: Object.assign(template, {\n    param: (value: unknown, column: Column) => column.mapToDriverValue(value),\n    join: (values: ReadonlyArray<unknown>, separator: Fragment = template``) =>\n      new Fragment((compiler) =>\n        values\n          .map(\n            (value, index) =>\n              (index === 0 ? \"\" : separator.render(compiler)) + render(value, compiler),\n          )\n          .join(\"\"),\n      ),\n  }),\n  getTableColumns: (table: Table) => table.columns,\n  column: (table: Table, key: string) => {\n    const column = table.columns[key];\n\n    if (column === undefined)\n      throw PersistenceMappingError.make({ operation: \"column\", cause: key });\n\n    return column;\n  },\n  updateValues: (entries: ReadonlyArray<readonly [string, unknown]>) => Object.fromEntries(entries),\n  balancedD1And: and,\n  // Raw clients use interactive transactions, so no D1 batch compaction is needed.\n  compactD1GeneratedStatement: <S>(_client: unknown, statement: S) => statement,\n};\n\n// The existing kernels erase query-builder shapes at this boundary. The raw compiler\n// implements precisely those operations; no row decoding or Effect requirements are cast.\nexport const sqlQueryOperations = operations as unknown as QueryOperations;\n\ntype Selection = Readonly<Record<string, Fragment>>;\n\ninterface QueryState {\n  readonly operation: \"select\" | \"insert\" | \"update\" | \"delete\";\n  readonly table?: Table | Fragment;\n  readonly joins?: ReadonlyArray<{\n    readonly table: Table | Fragment;\n    readonly on: Fragment;\n  }>;\n  readonly selection?: Selection;\n  readonly where?: Fragment | undefined;\n  readonly values?: Row;\n  readonly returning?: Selection | true;\n  readonly order?: ReadonlyArray<Fragment>;\n  readonly limit?: number;\n  readonly lock?: boolean;\n  readonly conflict?: boolean;\n}\n\nconst selectionFor = (state: QueryState): Selection =>\n  state.selection ?? (state.table instanceof Table ? state.table.columns : {});\n\nconst selectionFields = (selection: Selection) => {\n  const used = new Set(Object.keys(selection));\n  let index = 0;\n\n  return Object.entries(selection).flatMap<{\n    readonly key: string;\n    readonly name: string | undefined;\n    readonly column: Fragment;\n    readonly alias: string;\n  }>(([key, value]) =>\n    value instanceof Table\n      ? Object.entries(value.columns).map(([name, column]) => {\n          let alias: string;\n\n          do alias = `auth_column_${index++}`;\n          while (used.has(alias));\n          used.add(alias);\n\n          return { key, name, column, alias };\n        })\n      : [{ key, name: undefined, column: value, alias: key }],\n  );\n};\n\nconst projection = (selection: Selection, compiler: Compiler) =>\n  selectionFields(selection)\n    .map(({ column, alias }) => `${column.render(compiler)} AS ${identifier(alias)}`)\n    .join(\", \");\n\n// Joined table selections retain their own column codecs and nested row names.\nconst decodeRow = (selection: Selection, row: Row): Row => {\n  const entries: Array<readonly [string, unknown]> = [];\n  const groups = new Map<string, Array<readonly [string, unknown]>>();\n\n  for (const field of selectionFields(selection)) {\n    const value = field.column.decode(row[field.alias]);\n\n    if (field.name === undefined) entries.push([field.key, value]);\n    else {\n      const group = groups.get(field.key) ?? [];\n\n      group.push([field.name, value]);\n      groups.set(field.key, group);\n    }\n  }\n\n  return Object.fromEntries([\n    ...entries,\n    ...Array.from(groups, ([key, values]) => [key, Object.fromEntries(values)]),\n  ]);\n};\n\nconst compile = (state: QueryState, compiler: Compiler): string => {\n  const table = state.table;\n\n  if (table === undefined)\n    throw PersistenceMappingError.make({ operation: \"query\", cause: \"Missing table\" });\n  let query: string;\n\n  if (state.operation === \"select\") {\n    query = `SELECT ${projection(selectionFor(state), compiler)} FROM ${table.render(compiler)}`;\n    for (const join of state.joins ?? [])\n      query += ` INNER JOIN ${join.table.render(compiler)} ON ${join.on.render(compiler)}`;\n  } else {\n    if (!(table instanceof Table))\n      throw PersistenceMappingError.make({\n        operation: \"query\",\n        cause: \"Mutation requires a table\",\n      });\n    const target = table.render(compiler);\n\n    const fields = Object.entries(state.values ?? {}).filter(\n      ([key, value]) => table.columns[key] !== undefined && value !== undefined,\n    );\n\n    if (state.operation === \"insert\") {\n      query = `INSERT INTO ${target} (${fields.map(([key]) => identifier(table.columns[key].options.name)).join(\", \")}) VALUES (${fields.map(([, value]) => render(value, compiler)).join(\", \")})`;\n    } else if (state.operation === \"update\") {\n      query = `UPDATE ${target} SET ${fields.map(([key, value]) => `${identifier(table.columns[key].options.name)} = ${render(value, compiler)}`).join(\", \")}`;\n    } else query = `DELETE FROM ${target}`;\n  }\n  if (state.where !== undefined) query += ` WHERE ${state.where.render(compiler)}`;\n  if (state.order?.length)\n    query += ` ORDER BY ${state.order.map((field) => field.render(compiler)).join(\", \")}`;\n  if (state.limit !== undefined) query += ` LIMIT ${render(state.limit, compiler)}`;\n  if (state.conflict) query += \" ON CONFLICT DO NOTHING\";\n  if (state.returning)\n    query += ` RETURNING ${projection(state.returning === true && table instanceof Table ? table.columns : state.returning === true ? {} : state.returning, compiler)}`;\n  if (state.lock && compiler.dialect === \"pg\") query += \" FOR UPDATE\";\n\n  return query;\n};\n\n/** Captures one Effect SQL client. Its transaction service remains the physical owner. */\nexport const makeSqlDatabase = Effect.fnUntraced(function* (dialect: Dialect) {\n  const client = yield* SqlClient;\n\n  const query = (state: QueryState): Query => {\n    const execute = Effect.suspend(() => {\n      const compiler: Compiler = { dialect, parameters: [] };\n      const text = compile(state, compiler);\n\n      const selected: Selection =\n        state.operation === \"select\"\n          ? selectionFor(state)\n          : state.returning === true\n            ? state.table instanceof Table\n              ? state.table.columns\n              : {}\n            : state.returning || {};\n\n      return client\n        .unsafe<Row>(text, compiler.parameters)\n        .pipe(Effect.map((rows) => rows.map((row) => decodeRow(selected, row))));\n    });\n\n    return Object.assign(execute, {\n      toSQL: () => {\n        const compiler: Compiler = { dialect, parameters: [] };\n\n        return { sql: compile(state, compiler), params: compiler.parameters };\n      },\n      getSQL: () => new Fragment((compiler) => compile(state, compiler)),\n      from: (table: Table | Fragment) => query({ ...state, table }),\n      innerJoin: (table: Table | Fragment, on: Fragment) =>\n        query({ ...state, joins: [...(state.joins ?? []), { table, on }] }),\n      where: (where: Fragment | undefined) => query({ ...state, where }),\n      limit: (limit: number) => query({ ...state, limit }),\n      orderBy: (...order: Fragment[]) => query({ ...state, order }),\n      for: (_lock: \"update\") => query({ ...state, lock: true }),\n      values: (values: Row) => query({ ...state, values }),\n      set: (values: Row) => query({ ...state, values }),\n      returning: (returning: Selection | true = true) => query({ ...state, returning }),\n      onConflictDoNothing: () => query({ ...state, conflict: true }),\n    });\n  };\n\n  const database: SqlDatabase = {\n    $client: client,\n    select: (selection?: Selection) =>\n      query({ operation: \"select\", ...(selection === undefined ? {} : { selection }) }),\n    insert: (table: Table) => query({ operation: \"insert\", table }),\n    update: (table: Table) => query({ operation: \"update\", table }),\n    delete: (table: Table) => query({ operation: \"delete\", table }),\n    transaction: <A, E, R>(\n      body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n    ): Effect.Effect<A, E | SqlError, R> =>\n      client.withTransaction(Effect.suspend(() => body(database))),\n  };\n\n  return database;\n});\n\ninterface Query extends Effect.Effect<Row[], SqlError> {\n  toSQL(): { readonly sql: string; readonly params: ReadonlyArray<unknown> };\n  getSQL(): Fragment;\n  from(table: Table | Fragment): Query;\n  innerJoin(table: Table | Fragment, on: Fragment): Query;\n  where(where: Fragment | undefined): Query;\n  limit(limit: number): Query;\n  orderBy(...order: Fragment[]): Query;\n  for(lock: \"update\"): Query;\n  values(values: Row): Query;\n  set(values: Row): Query;\n  returning(returning?: Selection | true): Query;\n  onConflictDoNothing(): Query;\n}\n\nexport interface SqlDatabase {\n  readonly $client: SqlClient;\n  select(selection?: Selection): Query;\n  insert(table: Table): Query;\n  update(table: Table): Query;\n  delete(table: Table): Query;\n  transaction<A, E, R>(\n    body: (database: SqlDatabase) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E | SqlError, R>;\n}\n\nexport const sql = template;\n"],"mappings":";;;;;AAgBA,MAAM,UAAU,OAAgB,aAA+B;CAC7D,IAAI,iBAAiB,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC3D,IAAI,UAAU,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM,WAAW,YACpE,OAAO,OAAO,MAAM,OAAO,GAAG,QAAQ;CAGxC,SAAS,WAAW,KAClB,SAAS,YAAY,YAAY,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI,KAChF;CAEA,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,WAAW,WAAW;AACxE;AAEA,MAAM,YAAY,OAA6B,GAAG,WAChD,IAAI,UAAU,aACZ,MAAM,QACH,KAAK,MAAM,MAAM,OAAO,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI,IAAI,QAAQ,KAAK,MAC3E,EACF,CACF;AAEF,MAAM,WAAW,WAAmB,WAAgD;CAClF,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,KAAA,CAAS;CAE9D,OAAO,UAAU,WAAW,IACxB,KAAA,IACA,IAAI,UACD,aACC,MAAM,UAAU,KAAK,aAAa,SAAS,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,GACnF;AACN;AAEA,MAAM,OAAO,GAAG,WAAgD,QAAQ,SAAS,MAAM;AACvF,MAAM,MAAM,GAAG,WAAgD,QAAQ,QAAQ,MAAM;AAgDrF,MAAa,qBAAqB;CA7ChC;CACA;CACA,MAAM,UAAmB,QAAQ,GAAG,MAAM;CAC1C,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,KAAK,MAAe,UAAmB,QAAQ,GAAG,KAAK,KAAK;CAC5D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,MAAM,MAAe,UAAmB,QAAQ,GAAG,KAAK,MAAM;CAC9D,SAAS,UAAmB,QAAQ,GAAG,MAAM;CAC7C,YAAY,UAAmB,QAAQ,eAAe,MAAM;CAC5D,UAAU,QAAiB,WACzB,OAAO,WAAW,IACd,QAAQ,UACR,IAAI,UACD,aACC,GAAG,OAAO,QAAQ,QAAQ,EAAE,OAAO,OAAO,KAAK,UAAU,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACjG;CACN,KAAK,OAAO,OAAO,UAAU;EAC3B,QAAQ,OAAgB,WAAmB,OAAO,iBAAiB,KAAK;EACxE,OAAO,QAAgC,YAAsB,QAAQ,OACnE,IAAI,UAAU,aACZ,OACG,KACE,OAAO,WACL,UAAU,IAAI,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,OAAO,QAAQ,CAC5E,CAAC,CACA,KAAK,EAAE,CACZ;CACJ,CAAC;CACD,kBAAkB,UAAiB,MAAM;CACzC,SAAS,OAAc,QAAgB;EACrC,MAAM,SAAS,MAAM,QAAQ;EAE7B,IAAI,WAAW,KAAA,GACb,MAAM,wBAAwB,KAAK;GAAE,WAAW;GAAU,OAAO;EAAI,CAAC;EAExE,OAAO;CACT;CACA,eAAe,YAAuD,OAAO,YAAY,OAAO;CAChG,eAAe;CAEf,8BAAiC,SAAkB,cAAiB;AAKpC;AAqBlC,MAAM,gBAAgB,UACpB,MAAM,cAAc,MAAM,iBAAiB,QAAQ,MAAM,MAAM,UAAU,CAAC;AAE5E,MAAM,mBAAmB,cAAyB;CAChD,MAAM,OAAO,IAAI,IAAI,OAAO,KAAK,SAAS,CAAC;CAC3C,IAAI,QAAQ;CAEZ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,SAK7B,CAAC,KAAK,WACR,iBAAiB,QACb,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;EACpD,IAAI;EAEJ;GAAG,QAAQ,eAAe;SACnB,KAAK,IAAI,KAAK;EACrB,KAAK,IAAI,KAAK;EAEd,OAAO;GAAE;GAAK;GAAM;GAAQ;EAAM;CACpC,CAAC,IACD,CAAC;EAAE;EAAK,MAAM,KAAA;EAAW,QAAQ;EAAO,OAAO;CAAI,CAAC,CAC1D;AACF;AAEA,MAAM,cAAc,WAAsB,aACxC,gBAAgB,SAAS,CAAC,CACvB,KAAK,EAAE,QAAQ,YAAY,GAAG,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,KAAK,GAAG,CAAC,CAChF,KAAK,IAAI;AAGd,MAAM,aAAa,WAAsB,QAAkB;CACzD,MAAM,UAA6C,CAAC;CACpD,MAAM,yBAAS,IAAI,IAA+C;CAElE,KAAK,MAAM,SAAS,gBAAgB,SAAS,GAAG;EAC9C,MAAM,QAAQ,MAAM,OAAO,OAAO,IAAI,MAAM,MAAM;EAElD,IAAI,MAAM,SAAS,KAAA,GAAW,QAAQ,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;OACxD;GACH,MAAM,QAAQ,OAAO,IAAI,MAAM,GAAG,KAAK,CAAC;GAExC,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC;GAC9B,OAAO,IAAI,MAAM,KAAK,KAAK;EAC7B;CACF;CAEA,OAAO,OAAO,YAAY,CACxB,GAAG,SACH,GAAG,MAAM,KAAK,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO,YAAY,MAAM,CAAC,CAAC,CAC5E,CAAC;AACH;AAEA,MAAM,WAAW,OAAmB,aAA+B;CACjE,MAAM,QAAQ,MAAM;CAEpB,IAAI,UAAU,KAAA,GACZ,MAAM,wBAAwB,KAAK;EAAE,WAAW;EAAS,OAAO;CAAgB,CAAC;CACnF,IAAI;CAEJ,IAAI,MAAM,cAAc,UAAU;EAChC,QAAQ,UAAU,WAAW,aAAa,KAAK,GAAG,QAAQ,EAAE,QAAQ,MAAM,OAAO,QAAQ;EACzF,KAAK,MAAM,QAAQ,MAAM,SAAS,CAAC,GACjC,SAAS,eAAe,KAAK,MAAM,OAAO,QAAQ,EAAE,MAAM,KAAK,GAAG,OAAO,QAAQ;CACrF,OAAO;EACL,IAAI,EAAE,iBAAiB,QACrB,MAAM,wBAAwB,KAAK;GACjC,WAAW;GACX,OAAO;EACT,CAAC;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ;EAEpC,MAAM,SAAS,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,QAC/C,CAAC,KAAK,WAAW,MAAM,QAAQ,SAAS,KAAA,KAAa,UAAU,KAAA,CAClE;EAEA,IAAI,MAAM,cAAc,UACtB,QAAQ,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC,SAAS,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,YAAY,OAAO,KAAK,GAAG,WAAW,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;OACrL,IAAI,MAAM,cAAc,UAC7B,QAAQ,UAAU,OAAO,OAAO,OAAO,KAAK,CAAC,KAAK,WAAW,GAAG,WAAW,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,OAAO,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI;OAChJ,QAAQ,eAAe;CAChC;CACA,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,MAAM,MAAM,OAAO,QAAQ;CAC7E,IAAI,MAAM,OAAO,QACf,SAAS,aAAa,MAAM,MAAM,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;CACpF,IAAI,MAAM,UAAU,KAAA,GAAW,SAAS,UAAU,OAAO,MAAM,OAAO,QAAQ;CAC9E,IAAI,MAAM,UAAU,SAAS;CAC7B,IAAI,MAAM,WACR,SAAS,cAAc,WAAW,MAAM,cAAc,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,MAAM,cAAc,OAAO,CAAC,IAAI,MAAM,WAAW,QAAQ;CAClK,IAAI,MAAM,QAAQ,SAAS,YAAY,MAAM,SAAS;CAEtD,OAAO;AACT;;AAGA,MAAa,kBAAkB,OAAO,WAAW,WAAW,SAAkB;CAC5E,MAAM,SAAS,OAAO;CAEtB,MAAM,SAAS,UAA6B;EAC1C,MAAM,UAAU,OAAO,cAAc;GACnC,MAAM,WAAqB;IAAE;IAAS,YAAY,CAAC;GAAE;GACrD,MAAM,OAAO,QAAQ,OAAO,QAAQ;GAEpC,MAAM,WACJ,MAAM,cAAc,WAChB,aAAa,KAAK,IAClB,MAAM,cAAc,OAClB,MAAM,iBAAiB,QACrB,MAAM,MAAM,UACZ,CAAC,IACH,MAAM,aAAa,CAAC;GAE5B,OAAO,OACJ,OAAY,MAAM,SAAS,UAAU,CAAC,CACtC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC;EAC3E,CAAC;EAED,OAAO,OAAO,OAAO,SAAS;GAC5B,aAAa;IACX,MAAM,WAAqB;KAAE;KAAS,YAAY,CAAC;IAAE;IAErD,OAAO;KAAE,KAAK,QAAQ,OAAO,QAAQ;KAAG,QAAQ,SAAS;IAAW;GACtE;GACA,cAAc,IAAI,UAAU,aAAa,QAAQ,OAAO,QAAQ,CAAC;GACjE,OAAO,UAA4B,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,YAAY,OAAyB,OACnC,MAAM;IAAE,GAAG;IAAO,OAAO,CAAC,GAAI,MAAM,SAAS,CAAC,GAAI;KAAE;KAAO;IAAG,CAAC;GAAE,CAAC;GACpE,QAAQ,UAAgC,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACjE,QAAQ,UAAkB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GACnD,UAAU,GAAG,UAAsB,MAAM;IAAE,GAAG;IAAO;GAAM,CAAC;GAC5D,MAAM,UAAoB,MAAM;IAAE,GAAG;IAAO,MAAM;GAAK,CAAC;GACxD,SAAS,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GACnD,MAAM,WAAgB,MAAM;IAAE,GAAG;IAAO;GAAO,CAAC;GAChD,YAAY,YAA8B,SAAS,MAAM;IAAE,GAAG;IAAO;GAAU,CAAC;GAChF,2BAA2B,MAAM;IAAE,GAAG;IAAO,UAAU;GAAK,CAAC;EAC/D,CAAC;CACH;CAEA,MAAM,WAAwB;EAC5B,SAAS;EACT,SAAS,cACP,MAAM;GAAE,WAAW;GAAU,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;EAAG,CAAC;EAClF,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,SAAS,UAAiB,MAAM;GAAE,WAAW;GAAU;EAAM,CAAC;EAC9D,cACE,SAEA,OAAO,gBAAgB,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;CAC/D;CAEA,OAAO;AACT,CAAC"}

package/dist/internal/storage-mapping.d.mts

@@ -6,16 +6,17 @@ import { AnyProofPersistenceMapping } from "./models/proof-model.mjs";
 import { StatefulSessionMapping } from "./models/session-model.mjs";
 import { StorageRole } from "./storage-tables.mjs";
 import { MappingInput } from "./configuration.mjs";
-import { Effect, Schema } from "effect";
+import { Crypto, Effect, Schema } from "effect";
 import { SecurityRevision } from "@yielded/auth/Sessions";
 //#region src/internal/storage-mapping.d.ts
 declare const string: (value: unknown) => string;
 /** Derive shared row mappings from a managed or custom storage layout.
+ * Acquire Effect Crypto once; the returned allocators retain that implementation.
  * Each factory requires its role tables to exist. Adapter authors supply typed
  * table handles and dialect-specific clocks/commit predicates, and may refine
  * authority policy for explicit services. This does not alter composed defaults.
  */
-export declare const makeMappings: (input: MappingInput) => {
+export declare const makeMappings: (input: MappingInput) => Effect.Effect<{
   table: (role: StorageRole) => object;
   authority: () => {
     subjectId: {
@@ -32,7 +33,7 @@ export declare const makeMappings: (input: MappingInput) => {
       d1ActiveStatusValue: unknown;
       decodeRequirement: (row: Readonly<Record<string, unknown>>) => Effect.Effect<import("@yielded/auth/Sessions").AuthenticationRequirement, PersistenceMappingError>;
       decodeActionRequirement: (row: Readonly<Record<string, unknown>>, action: import("@yielded/auth/Password").PasswordAction | import("@yielded/auth/Email").EmailAction | import("@yielded/auth/Passkey").PasskeyActionChallenge["action"]) => Effect.Effect<import("@yielded/auth/Sessions").AuthenticationRequirement, PersistenceMappingError>;
-      nextSecurityRevisionSync: () => string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      nextSecurityRevision: () => Effect.Effect<string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">, PersistenceMappingError, never>;
     };
     credential: {
       table: object;
@@ -54,6 +55,6 @@ export declare const makeMappings: (input: MappingInput) => {
   emails: () => AnyEmailAddressMapping<SqlFragment>;
   sessions: <C extends Schema.Codec<unknown, unknown, never, never>>(claims: C) => StatefulSessionMapping<C["Type"], TableModel, TableModel, TableModel, TableModel, TableModel, unknown, string>;
   string: typeof string;
-};
+}, never, Crypto.Crypto>;
 //#endregion
 //# sourceMappingURL=storage-mapping.d.mts.map

package/dist/internal/storage-mapping.mjs

@@ -1,10 +1,10 @@
+import { randomId } from "./crypto.mjs";
 import { PersistenceMappingError } from "./mapping-error.mjs";
 import { requiredProofConstraints } from "./models/proof-model.mjs";
 import { storageTables } from "./storage-tables.mjs";
 import { requiredEmailAddressConstraints } from "./models/email-model.mjs";
 import { requiredPasswordConstraints } from "./models/password-model.mjs";
-import { DateTime, Effect, Redacted, Schema } from "effect";
-import { randomId } from "@yielded/auth-crypto";
+import { Crypto, DateTime, Effect, Redacted, Schema } from "effect";
 import { TokenDigest } from "@yielded/auth/Schema";
 import { SecurityRevision, SessionAuthenticationProvenance, SessionCredentialVersion, SessionId, SessionMetadata } from "@yielded/auth/Sessions";
 import { ProofBinding, ProofContinuationId, ProofDeliveryId, ProofId, ProofPurpose, ProofRequestId, ProofRequestReceipt, ProofVersion } from "@yielded/auth/Proofs";
@@ -49,11 +49,14 @@ const ProofContinuation = Schema.Struct({
 	version: ProofVersion
 });
 /** Derive shared row mappings from a managed or custom storage layout.
+* Acquire Effect Crypto once; the returned allocators retain that implementation.
 * Each factory requires its role tables to exist. Adapter authors supply typed
 * table handles and dialect-specific clocks/commit predicates, and may refine
 * authority policy for explicit services. This does not alter composed defaults.
 */
-const makeMappings = (input) => {
+const makeMappings = Effect.fnUntraced(function* (input) {
+	const crypto = yield* Crypto.Crypto;
+	const allocate = randomId.pipe(Effect.provideService(Crypto.Crypto, crypto), Effect.mapError(failure));
 	const table = (role) => {
 		const found = input.tables[role];
 		if (found === void 0) throw failure(`Missing ${role} mapping`);
@@ -78,7 +81,7 @@ const makeMappings = (input) => {
 		d1ActiveStatusValue: s.activeValue,
 		decodeRequirement: s.requirements,
 		decodeActionRequirement: s.actionRequirements,
-		nextSecurityRevisionSync: () => SecurityRevision.make(randomId())
+		nextSecurityRevision: () => allocate.pipe(Effect.map(SecurityRevision.make))
 	};
 	const authorityCredential = () => ({
 		...mapped("credentials"),
@@ -102,7 +105,7 @@ const makeMappings = (input) => {
 		constraints: requiredProofConstraints,
 		encodeInstant: instant,
 		decodeInstant: readInstant,
-		allocateVersionSync: () => ProofVersion.make(randomId()),
+		allocateVersion: allocate.pipe(Effect.map(ProofVersion.make)),
 		isRequestConflict: () => false,
 		isSeriesConflict: () => false,
 		isCommandConflict: () => false,
@@ -332,9 +335,9 @@ const makeMappings = (input) => {
 			}),
 			encodeInstant: instant,
 			decodeInstant: readInstant,
-			allocateAttemptIdSync: () => PasswordAttemptId.make(randomId()),
-			allocateCredentialIdSync: randomId,
-			allocateRevisionSync: () => SecurityRevision.make(randomId()),
+			allocateAttemptId: allocate.pipe(Effect.map(PasswordAttemptId.make)),
+			allocateCredentialId: allocate,
+			allocateRevision: allocate.pipe(Effect.map(SecurityRevision.make)),
 			commandRetentionMillis: 864e5,
 			sessionInvalidation: "same-authority-immediate",
 			identifier: {
@@ -482,8 +485,8 @@ const makeMappings = (input) => {
 		changeDisposition: "retire-source",
 		encodeInstant: instant,
 		decodeInstant: readInstant,
-		allocateCredentialIdSync: randomId,
-		allocateRevisionSync: () => SecurityRevision.make(randomId()),
+		allocateCredentialId: allocate,
+		allocateRevision: allocate.pipe(Effect.map(SecurityRevision.make)),
 		commandRetentionMillis: 864e5,
 		sessionInvalidation: "same-authority-immediate",
 		isCommandConflict: () => false,
@@ -657,8 +660,8 @@ const makeMappings = (input) => {
 				expiresAt: "expiresAt",
 				absoluteExpiresAt: "absoluteExpiresAt",
 				encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),
-				allocateIdSync: randomId,
-				allocateVersionSync: () => SecurityRevision.make(randomId()),
+				allocateId: allocate,
+				allocateVersion: allocate.pipe(Effect.map(SecurityRevision.make)),
 				encodeInsert: (value, ids) => ({
 					...encodeRow(value),
 					...ids
@@ -684,7 +687,7 @@ const makeMappings = (input) => {
 		sessions,
 		string
 	};
-};
+});
 //#endregion
 export { makeMappings };
 

package/dist/internal/storage-mapping.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storage-mapping.mjs","names":["ProofRecord"],"sources":["../../src/internal/storage-mapping.ts"],"sourcesContent":["import { randomId } from \"@yielded/auth-crypto\";\nimport { EmailCredentialSnapshot } from \"@yielded/auth/Email\";\nimport { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport {\n  PasswordAttemptId,\n  PasswordCredentialSnapshot,\n  EncodedPasswordHash,\n  type PasswordReplacement,\n} from \"@yielded/auth/Password\";\nimport {\n  ProofBinding,\n  ProofContinuationId,\n  ProofDeliveryId,\n  ProofId,\n  ProofPurpose,\n  ProofRequestId,\n  ProofRequestReceipt,\n  ProofVersion,\n} from \"@yielded/auth/Proofs\";\nimport { TokenDigest } from \"@yielded/auth/Schema\";\nimport {\n  SecurityRevision,\n  SessionId,\n  SessionMetadata,\n  SessionAuthenticationProvenance,\n  SessionCredentialVersion,\n  type StatefulSessionRecord,\n} from \"@yielded/auth/Sessions\";\nimport { DateTime, Effect, Redacted, Schema } from \"effect\";\n\nimport type { MappingInput } from \"./configuration\";\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport { requiredEmailAddressConstraints, type AnyEmailAddressMapping } from \"./models/email-model\";\nimport {\n  requiredPasswordConstraints,\n  type AnyPasswordPersistenceMapping,\n} from \"./models/password-model\";\nimport { requiredProofConstraints, type AnyProofPersistenceMapping } from \"./models/proof-model\";\nimport type { StatefulSessionMapping } from \"./models/session-model\";\nimport type { TableModel, SqlFragment } from \"./query-operations\";\nimport { storageTables, type StorageRole } from \"./storage-tables\";\n\nconst failure = (cause: unknown) => PersistenceMappingError.make({ operation: \"decode\", cause });\n\nconst decode = <S extends Schema.Codec<unknown, unknown>>(schema: S, value: unknown) =>\n  Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(failure));\n\nconst string = (value: unknown) => Schema.decodeUnknownSync(Schema.String)(value);\nconst tuple = Schema.encodeSync(Schema.fromJsonString(Schema.Array(Schema.String)));\nconst bindingJson = Schema.fromJsonString(ProofBinding);\nconst receiptJson = Schema.fromJsonString(ProofRequestReceipt);\n\nconst ProofRecord = Schema.Struct({\n  moduleId: Schema.String,\n  purpose: ProofPurpose,\n  proofId: ProofId,\n  requestId: ProofRequestId,\n  fingerprint: TokenDigest,\n  deliveryId: ProofDeliveryId,\n  binding: ProofBinding,\n  verifier: Schema.Struct({ keyId: Schema.String, digest: TokenDigest }),\n  issuedAtMillis: Schema.Int,\n  expiresAtMillis: Schema.Int,\n  version: ProofVersion,\n});\n\nconst ProofContinuation = Schema.Struct({\n  moduleId: Schema.String,\n  purpose: ProofPurpose,\n  continuationId: ProofContinuationId,\n  digest: TokenDigest,\n  proofId: ProofId,\n  seriesKey: Schema.String,\n  binding: ProofBinding,\n  expiresAtMillis: Schema.Int,\n  version: ProofVersion,\n});\n\n/** Derive shared row mappings from a managed or custom storage layout.\n * Each factory requires its role tables to exist. Adapter authors supply typed\n * table handles and dialect-specific clocks/commit predicates, and may refine\n * authority policy for explicit services. This does not alter composed defaults.\n */\nexport const makeMappings = (input: MappingInput) => {\n  const table = (role: StorageRole) => {\n    const found = input.tables[role];\n\n    if (found === undefined) throw failure(`Missing ${role} mapping`);\n\n    return found;\n  };\n\n  const mapped = (role: StorageRole) => ({\n    table: table(role),\n    ...Object.fromEntries(Object.keys(storageTables[role].columns).map((key) => [key, key])),\n  });\n\n  const { subjects: s, encodeInstant: instant, decodeInstant: readInstant } = input;\n  const subjectId = { toNative: s.toNative, toSubject: s.toSubject, equals: Object.is };\n\n  const subject = {\n    table: s.table,\n    id: s.id,\n    status: s.status,\n    securityRevision: s.securityRevision,\n    isActiveStatus: (value: unknown) => Object.is(value, s.activeValue),\n    d1ActiveStatusValue: s.activeValue,\n    decodeRequirement: s.requirements,\n    decodeActionRequirement: s.actionRequirements,\n    nextSecurityRevisionSync: () => SecurityRevision.make(randomId()),\n  };\n\n  const authorityCredential = () => ({\n    ...mapped(\"credentials\"),\n    subjectId: \"subjectId\",\n    credentialId: \"credentialId\",\n    revision: \"revision\",\n    status: \"active\",\n    isActiveStatus: (value: unknown) => value === true,\n    encodeInsert: (row: object) => ({ ...row, active: true }),\n    encodeRevision: (revision: SecurityRevision) => ({ revision }),\n  });\n\n  const authority = () => ({ subjectId, subject, credential: authorityCredential() });\n\n  const proofs = (): AnyProofPersistenceMapping<SqlFragment> => ({\n    constraints: requiredProofConstraints,\n    encodeInstant: instant,\n    decodeInstant: readInstant,\n    allocateVersionSync: () => ProofVersion.make(randomId()),\n    isRequestConflict: () => false,\n    isSeriesConflict: () => false,\n    isCommandConflict: () => false,\n    scopeKeys: ({ binding }) => ({\n      series: tuple([\n        binding.identifier.namespace,\n        binding.identifier.value,\n        binding._tag === \"Identifier\" ? \"anonymous\" : binding.revision.subjectId,\n      ]),\n      identifier: tuple([binding.identifier.namespace, binding.identifier.value]),\n      subject: binding._tag === \"Identifier\" ? \"anonymous\" : binding.revision.subjectId,\n    }),\n    authority: {\n      ...authority(),\n      identifier: {\n        table: table(\"identifiers\"),\n        namespace: \"namespace\",\n        value: \"value\",\n        isCurrent: (request, rows) =>\n          request.binding._tag === \"Identifier\"\n            ? rows.length === 0\n            : request.binding._tag === \"IdentifierChange\"\n              ? rows.length === 0 ||\n                (rows.length === 1 &&\n                  rows.every(\n                    (row) =>\n                      Object.is(row.subjectId, request.nativeSubjectId) &&\n                      row.active === true &&\n                      row.verifiedAt === null,\n                  ))\n              : rows.length === 1 &&\n                rows.every(\n                  (row) => Object.is(row.subjectId, request.nativeSubjectId) && row.active === true,\n                ),\n      },\n    },\n    request: {\n      ...mapped(\"proofRequests\"),\n      moduleId: \"moduleId\",\n      requestId: \"requestId\",\n      fingerprint: \"fingerprint\",\n      proofId: \"proofId\",\n      purpose: \"purpose\",\n      keyId: \"keyId\",\n      createdAt: \"createdAt\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: ({ record, retentionUntilMillis }) => ({\n        moduleId: record.moduleId,\n        requestId: record.requestId,\n        fingerprint: record.fingerprint,\n        proofId: record.proofId,\n        purpose: record.purpose,\n        keyId: record.verifier.keyId,\n        createdAt: instant(record.issuedAtMillis),\n        retentionUntil: instant(retentionUntilMillis),\n        receipt: Schema.encodeSync(receiptJson)({\n          requestId: record.requestId,\n          reference: {\n            proofId: record.proofId,\n            purpose: record.purpose,\n            keyId: record.verifier.keyId,\n          },\n        }),\n      }),\n      decodeReceipt: (row) => decode(receiptJson, row.receipt),\n    },\n    series: {\n      ...mapped(\"proofSeries\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      scopeKey: \"scopeKey\",\n      activeProofId: \"activeProofId\",\n      lastIssueAt: \"lastIssueAt\",\n      version: \"version\",\n      encodeInsert: (row) => ({ ...row, activeProofId: null, lastIssueAt: null }),\n    },\n    generation: {\n      ...mapped(\"proofGenerations\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      proofId: \"proofId\",\n      requestId: \"requestId\",\n      seriesKey: \"seriesKey\",\n      deliveryId: \"deliveryId\",\n      binding: \"binding\",\n      verifierKeyId: \"verifierKeyId\",\n      verifierDigest: \"verifierDigest\",\n      issuedAt: \"issuedAt\",\n      expiresAt: \"expiresAt\",\n      version: \"version\",\n      state: \"state\",\n      sendCount: \"sendCount\",\n      deliveryState: \"deliveryState\",\n      claimVersion: \"claimVersion\",\n      claimDeadline: \"claimDeadline\",\n      retryAt: \"retryAt\",\n      deliveryRetryMillis: \"deliveryRetryMillis\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: ({\n        record,\n        seriesKey,\n        retentionUntilMillis,\n        state,\n        deliveryState,\n        policy,\n      }) => ({\n        moduleId: record.moduleId,\n        purpose: record.purpose,\n        proofId: record.proofId,\n        requestId: record.requestId,\n        seriesKey,\n        deliveryId: record.deliveryId,\n        binding: Schema.encodeSync(bindingJson)(record.binding),\n        verifierKeyId: record.verifier.keyId,\n        verifierDigest: record.verifier.digest,\n        issuedAt: instant(record.issuedAtMillis),\n        expiresAt: instant(record.expiresAtMillis),\n        version: record.version,\n        state,\n        sendCount: 0,\n        deliveryState,\n        claimVersion: null,\n        claimDeadline: null,\n        retryAt: null,\n        deliveryRetryMillis: policy.deliveryRetryMillis,\n        retentionUntil: instant(retentionUntilMillis),\n        fingerprint: record.fingerprint,\n      }),\n      decodeBinding: (row) => decode(bindingJson, row.binding),\n      decodeRecord: (row) =>\n        Effect.gen(function* () {\n          return yield* decode(ProofRecord, {\n            moduleId: row.moduleId,\n            purpose: row.purpose,\n            proofId: row.proofId,\n            requestId: row.requestId,\n            fingerprint: row.fingerprint,\n            deliveryId: row.deliveryId,\n            binding: yield* decode(bindingJson, row.binding),\n            verifier: { keyId: row.verifierKeyId, digest: row.verifierDigest },\n            issuedAtMillis: yield* readInstant(row.issuedAt),\n            expiresAtMillis: yield* readInstant(row.expiresAt),\n            version: row.version,\n          });\n        }),\n    },\n    continuation: {\n      ...mapped(\"proofContinuations\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      continuationId: \"continuationId\",\n      digest: \"digest\",\n      proofId: \"proofId\",\n      seriesKey: \"seriesKey\",\n      binding: \"binding\",\n      expiresAt: \"expiresAt\",\n      consumed: \"consumed\",\n      version: \"version\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (record) => ({\n        ...record,\n        binding: Schema.encodeSync(bindingJson)(record.binding),\n        expiresAt: instant(record.expiresAtMillis),\n        consumed: false,\n        retentionUntil: instant(record.retentionUntilMillis),\n      }),\n      decode: (row) =>\n        Effect.gen(function* () {\n          return yield* decode(ProofContinuation, {\n            ...row,\n            binding: yield* decode(bindingJson, row.binding),\n            expiresAtMillis: yield* readInstant(row.expiresAt),\n          });\n        }),\n    },\n    rateScope: {\n      ...mapped(\"proofScopes\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      action: \"action\",\n      scopeKind: \"scopeKind\",\n      scopeKey: \"scopeKey\",\n      encodeInsert: (row) => ({ ...row }),\n    },\n    abuseEvent: {\n      ...mapped(\"proofAbuse\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      action: \"action\",\n      scopeKind: \"scopeKind\",\n      scopeKey: \"scopeKey\",\n      commandId: \"commandId\",\n      occurredAt: \"occurredAt\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (row) => ({\n        ...row,\n        occurredAt: instant(row.occurredAtMillis),\n        retentionUntil: instant(row.retentionUntilMillis),\n      }),\n    },\n    failureEvent: {\n      ...mapped(\"proofFailures\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      seriesKey: \"seriesKey\",\n      commandId: \"commandId\",\n      occurredAt: \"occurredAt\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (row) => ({\n        ...row,\n        occurredAt: instant(row.occurredAtMillis),\n        retentionUntil: instant(row.retentionUntilMillis),\n      }),\n    },\n    command: {\n      ...mapped(\"proofCommands\"),\n      moduleId: \"moduleId\",\n      commandId: \"commandId\",\n      kind: \"kind\",\n      decision: \"decision\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (row) => ({ ...row, retentionUntil: instant(row.retentionUntilMillis) }),\n    },\n  });\n\n  const passwords = (): AnyPasswordPersistenceMapping<SqlFragment> => {\n    const verifier = (replacement: PasswordReplacement) => ({\n      verifier: Redacted.value(replacement.verifier),\n      normalization: replacement.normalization,\n    });\n\n    return {\n      subjectId,\n      subject,\n      authorityCredential: authorityCredential(),\n      constraints: requiredPasswordConstraints,\n      isCommandConflict: () => false,\n      isRateScopeConflict: () => false,\n      scopeKeys: ({ moduleId, action, identifier, subjectId }) => ({\n        action: tuple([moduleId, action]),\n        identifier: tuple([identifier.namespace, identifier.value]),\n        ...(subjectId === undefined ? {} : { subject: subjectId }),\n      }),\n      encodeInstant: instant,\n      decodeInstant: readInstant,\n      allocateAttemptIdSync: () => PasswordAttemptId.make(randomId()),\n      allocateCredentialIdSync: randomId,\n      allocateRevisionSync: () => SecurityRevision.make(randomId()),\n      commandRetentionMillis: 86_400_000,\n      sessionInvalidation: \"same-authority-immediate\",\n      identifier: {\n        table: table(\"identifiers\"),\n        namespace: \"namespace\",\n        value: \"value\",\n        subjectId: \"subjectId\",\n        verifiedAt: \"verifiedAt\",\n        bindingRevision: \"revision\",\n        isCurrent: (row) => row.active === true,\n        encodeInitialInsert: (identifier, subjectId, revision) => ({\n          ...identifier,\n          subjectId,\n          revision,\n          verifiedAt: null,\n          active: true,\n        }),\n      },\n      credential: {\n        ...mapped(\"passwords\"),\n        moduleId: \"moduleId\",\n        subjectId: \"subjectId\",\n        credentialId: \"credentialId\",\n        credentialRevision: \"credentialRevision\",\n        verifierVersion: \"verifierVersion\",\n        verifier: \"verifier\",\n        normalization: \"normalization\",\n        encodeInsert: ({ replacement, ...row }) => ({ ...row, ...verifier(replacement) }),\n        encodeVerifier: (hash, verifierVersion) => ({\n          verifier: Redacted.value(hash),\n          verifierVersion,\n        }),\n        encodeReplacement: ({ replacement, ...row }) => ({ ...row, ...verifier(replacement) }),\n        decode: ({ moduleId, subject: row, identifier, credential }) =>\n          Effect.gen(function* () {\n            const id = yield* s.toSubject(row[s.id]);\n            const hash = yield* decode(EncodedPasswordHash, credential.verifier);\n\n            return yield* decode(PasswordCredentialSnapshot, {\n              moduleId,\n              revision: {\n                subjectId: id,\n                securityRevision: row[s.securityRevision],\n                credentials: [\n                  {\n                    credentialId: credential.credentialId,\n                    revision: credential.credentialRevision,\n                  },\n                ],\n              },\n              credentialId: credential.credentialId,\n              credentialRevision: credential.credentialRevision,\n              verifierVersion: credential.verifierVersion,\n              verifier: hash,\n              normalization: credential.normalization,\n              identifier: yield* decode(LoginIdentifier, {\n                namespace: identifier.namespace,\n                value: identifier.value,\n              }),\n              identifierBindingRevision: identifier.revision,\n              ...(identifier.verifiedAt === null\n                ? {}\n                : { identifierVerifiedAtMillis: yield* readInstant(identifier.verifiedAt) }),\n            });\n          }),\n      },\n      attempt: {\n        ...mapped(\"passwordAttempts\"),\n        moduleId: \"moduleId\",\n        action: \"action\",\n        attemptId: \"attemptId\",\n        identifierNamespace: \"identifierNamespace\",\n        identifierValue: \"identifierValue\",\n        subjectId: \"subjectId\",\n        credentialId: \"credentialId\",\n        securityRevision: \"securityRevision\",\n        credentialRevision: \"credentialRevision\",\n        verifierVersion: \"verifierVersion\",\n        identifierBindingRevision: \"identifierBindingRevision\",\n        admittedAt: \"admittedAt\",\n        deadline: \"deadline\",\n        retentionUntil: \"retentionUntil\",\n        state: \"state\",\n        encodeInsert: (row, { nativeSubjectId, state }) => ({\n          moduleId: row.moduleId,\n          action: row.action,\n          attemptId: row.attemptId,\n          identifierNamespace: row.identifier.namespace,\n          identifierValue: row.identifier.value,\n          subjectId: nativeSubjectId ?? null,\n          credentialId: row.credentialId ?? null,\n          securityRevision: row.securityRevision ?? null,\n          credentialRevision: row.credentialRevision ?? null,\n          verifierVersion: row.verifierVersion ?? null,\n          identifierBindingRevision: row.identifierBindingRevision ?? null,\n          admittedAt: instant(row.admittedAtMillis),\n          deadline: instant(row.deadlineMillis),\n          retentionUntil: instant(row.retentionUntilMillis),\n          state,\n        }),\n      },\n      rateScope: {\n        ...mapped(\"passwordScopes\"),\n        moduleId: \"moduleId\",\n        action: \"action\",\n        scopeKind: \"scopeKind\",\n        scopeKey: \"scopeKey\",\n        encodeInsert: (row) => ({ ...row }),\n      },\n      charge: {\n        ...mapped(\"passwordCharges\"),\n        moduleId: \"moduleId\",\n        action: \"action\",\n        scopeKind: \"scopeKind\",\n        scopeKey: \"scopeKey\",\n        attemptId: \"attemptId\",\n        occurredAt: \"occurredAt\",\n        retentionUntil: \"retentionUntil\",\n        encodeInsert: (row) => ({\n          ...row,\n          occurredAt: instant(row.occurredAtMillis),\n          retentionUntil: instant(row.retentionUntilMillis),\n        }),\n      },\n      command: {\n        ...mapped(\"passwordCommands\"),\n        moduleId: \"moduleId\",\n        commandId: \"commandId\",\n        action: \"action\",\n        bindingDigest: \"bindingDigest\",\n        decision: \"decision\",\n        retentionUntil: \"retentionUntil\",\n        encodeInsert: (row) => ({ ...row, retentionUntil: instant(row.retentionUntilMillis) }),\n      },\n    };\n  };\n\n  const emails = (): AnyEmailAddressMapping<SqlFragment> => ({\n    subjectId,\n    subject,\n    constraints: requiredEmailAddressConstraints,\n    addressCardinality: \"single\",\n    changeDisposition: \"retire-source\",\n    encodeInstant: instant,\n    decodeInstant: readInstant,\n    allocateCredentialIdSync: randomId,\n    allocateRevisionSync: () => SecurityRevision.make(randomId()),\n    commandRetentionMillis: 86_400_000,\n    sessionInvalidation: \"same-authority-immediate\",\n    isCommandConflict: () => false,\n    isIdentifierConflict: () => false,\n    isCredentialConflict: () => false,\n    authorityCredential: {\n      ...authorityCredential(),\n      encodeActivation: (revision) => ({ revision, active: true }),\n      encodeRetirement: (revision) => ({ revision, active: false }),\n    },\n    identifier: {\n      table: table(\"identifiers\"),\n      namespace: \"namespace\",\n      value: \"value\",\n      subjectId: \"subjectId\",\n      verifiedAt: \"verifiedAt\",\n      bindingRevision: \"revision\",\n      isCurrent: (row) => row.active === true && row.verifiedAt !== null,\n      isMutableTarget: (row) => row.active === true && row.verifiedAt === null,\n      encodeVerifiedInsert: ({ identifier, subjectId, verifiedAtMillis, bindingRevision }) => ({\n        ...identifier,\n        subjectId,\n        verifiedAt: instant(verifiedAtMillis),\n        revision: bindingRevision,\n        active: true,\n      }),\n      encodeVerification: ({ verifiedAtMillis, bindingRevision }) => ({\n        verifiedAt: instant(verifiedAtMillis),\n        revision: bindingRevision,\n        active: true,\n      }),\n      encodeRetirement: ({ bindingRevision }) => ({ revision: bindingRevision, active: false }),\n    },\n    credential: {\n      table: table(\"emailCredentials\"),\n      moduleId: \"moduleId\",\n      subjectId: \"subjectId\",\n      credentialId: \"credentialId\",\n      identifierNamespace: \"identifierNamespace\",\n      identifierValue: \"identifierValue\",\n      credentialRevision: \"credentialRevision\",\n      status: \"active\",\n      isActiveStatus: (value) => value === true,\n      encodeVerifiedInsert: ({ identifier, ...row }) => ({\n        ...row,\n        identifierNamespace: identifier.namespace,\n        identifierValue: identifier.value,\n        active: true,\n      }),\n      encodeActivation: ({ identifier, credentialRevision }) => ({\n        identifierNamespace: identifier.namespace,\n        identifierValue: identifier.value,\n        credentialRevision,\n        active: true,\n      }),\n      encodeRetirement: ({ credentialRevision }) => ({ credentialRevision, active: false }),\n      decode: ({ moduleId, subject: row, identifier, credential }) =>\n        Effect.gen(function* () {\n          return yield* decode(EmailCredentialSnapshot, {\n            moduleId,\n            identifier: { namespace: identifier.namespace, value: identifier.value },\n            identifierRevision: identifier.revision,\n            verifiedAtMillis: yield* readInstant(identifier.verifiedAt),\n            credentialId: credential.credentialId,\n            credentialRevision: credential.credentialRevision,\n            revision: {\n              subjectId: yield* s.toSubject(row[s.id]),\n              securityRevision: row[s.securityRevision],\n              credentials: [\n                { credentialId: credential.credentialId, revision: credential.credentialRevision },\n              ],\n            },\n          });\n        }),\n    },\n    command: {\n      table: table(\"emailCommands\"),\n      moduleId: \"moduleId\",\n      commandId: \"commandId\",\n      action: \"action\",\n      bindingDigest: \"bindingDigest\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: ({ retentionUntilMillis, ...row }) => ({\n        ...row,\n        retentionUntil: instant(retentionUntilMillis),\n      }),\n    },\n  });\n\n  const sessions = <C extends Schema.Codec<unknown, unknown, never, never>>(\n    claims: C,\n  ): StatefulSessionMapping<\n    C[\"Type\"],\n    TableModel,\n    TableModel,\n    TableModel,\n    TableModel,\n    TableModel,\n    unknown,\n    string\n  > => {\n    const record = Schema.fromJsonString(\n      Schema.Struct({\n        ...SessionMetadata.fields,\n        claims: Schema.Unknown,\n        digest: TokenDigest,\n        version: SecurityRevision,\n        provenance: SessionAuthenticationProvenance,\n        credentialVersion: SessionCredentialVersion,\n      }),\n    );\n\n    const encodeRow = (value: StatefulSessionRecord<C[\"Type\"]>) => ({\n      digest: value.digest,\n      version: value.version,\n      securityRevision: value.securityRevision,\n      issuedAt: instant(DateTime.toEpochMillis(value.issuedAt)),\n      expiresAt: instant(DateTime.toEpochMillis(value.expiresAt)),\n      absoluteExpiresAt: instant(DateTime.toEpochMillis(value.absoluteExpiresAt)),\n      record: Schema.encodeSync(record)({\n        ...value,\n        claims: Schema.encodeSync(claims)(value.claims),\n      }),\n    });\n\n    return {\n      ...authority(),\n      isConstraintConflict: () => false,\n      constraints: { sessionDigest: \"unique(session.digest)\", flowId: \"unique(flow.flowId)\" },\n      sessionId: {\n        toNative: (id) => Effect.succeed(id),\n        toSession: (id) => decode(SessionId, id),\n        equals: Object.is,\n      },\n      flow: {\n        table: table(\"sessionFlows\"),\n        flowId: \"flowId\",\n        subjectId: \"subjectId\",\n        state: \"state\",\n        pendingDigest: \"pendingDigest\",\n        dedupUntil: \"dedupUntil\",\n        pendingStateValue: \"pending\",\n        establishedStateValue: \"established\",\n        encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),\n        decodeInstant: (value) => readInstant(value).pipe(Effect.map(DateTime.makeUnsafe)),\n        encodePendingInsert: (row) => ({\n          flowId: row.evidence.flowId,\n          subjectId: row.subjectId,\n          state: \"pending\",\n          pendingDigest: row.pendingDigest,\n          dedupUntil: instant(DateTime.toEpochMillis(row.dedupUntil)),\n        }),\n        encodeEstablishedInsert: (row) => ({\n          flowId: row.evidence.flowId,\n          subjectId: row.subjectId,\n          state: \"established\",\n          pendingDigest: null,\n          dedupUntil: instant(DateTime.toEpochMillis(row.dedupUntil)),\n        }),\n      },\n      session: {\n        table: table(\"sessions\"),\n        sessionId: \"sessionId\",\n        subjectId: \"subjectId\",\n        digest: \"digest\",\n        version: \"version\",\n        securityRevision: \"securityRevision\",\n        issuedAt: \"issuedAt\",\n        expiresAt: \"expiresAt\",\n        absoluteExpiresAt: \"absoluteExpiresAt\",\n        encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),\n        allocateIdSync: randomId,\n        allocateVersionSync: () => SecurityRevision.make(randomId()),\n        encodeInsert: (value, ids) => ({ ...encodeRow(value), ...ids }),\n        encodeRotation: encodeRow,\n        decode: (row) =>\n          Effect.gen(function* () {\n            const saved = yield* decode(record, row.record);\n            const decodedClaims = yield* decode(claims, saved.claims);\n\n            return { ...saved, claims: decodedClaims };\n          }),\n      },\n    };\n  };\n\n  return { table, authority, proofs, passwords, emails, sessions, string };\n};\n"],"mappings":";;;;;;;;;;;;;;AA0CA,MAAM,WAAW,UAAmB,wBAAwB,KAAK;CAAE,WAAW;CAAU;AAAM,CAAC;AAE/F,MAAM,UAAoD,QAAW,UACnE,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,SAAS,OAAO,CAAC;AAEzE,MAAM,UAAU,UAAmB,OAAO,kBAAkB,OAAO,MAAM,CAAC,CAAC,KAAK;AAChF,MAAM,QAAQ,OAAO,WAAW,OAAO,eAAe,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;AAClF,MAAM,cAAc,OAAO,eAAe,YAAY;AACtD,MAAM,cAAc,OAAO,eAAe,mBAAmB;AAE7D,MAAMA,gBAAc,OAAO,OAAO;CAChC,UAAU,OAAO;CACjB,SAAS;CACT,SAAS;CACT,WAAW;CACX,aAAa;CACb,YAAY;CACZ,SAAS;CACT,UAAU,OAAO,OAAO;EAAE,OAAO,OAAO;EAAQ,QAAQ;CAAY,CAAC;CACrE,gBAAgB,OAAO;CACvB,iBAAiB,OAAO;CACxB,SAAS;AACX,CAAC;AAED,MAAM,oBAAoB,OAAO,OAAO;CACtC,UAAU,OAAO;CACjB,SAAS;CACT,gBAAgB;CAChB,QAAQ;CACR,SAAS;CACT,WAAW,OAAO;CAClB,SAAS;CACT,iBAAiB,OAAO;CACxB,SAAS;AACX,CAAC;;;;;;AAOD,MAAa,gBAAgB,UAAwB;CACnD,MAAM,SAAS,SAAsB;EACnC,MAAM,QAAQ,MAAM,OAAO;EAE3B,IAAI,UAAU,KAAA,GAAW,MAAM,QAAQ,WAAW,KAAK,SAAS;EAEhE,OAAO;CACT;CAEA,MAAM,UAAU,UAAuB;EACrC,OAAO,MAAM,IAAI;EACjB,GAAG,OAAO,YAAY,OAAO,KAAK,cAAc,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;CACzF;CAEA,MAAM,EAAE,UAAU,GAAG,eAAe,SAAS,eAAe,gBAAgB;CAC5E,MAAM,YAAY;EAAE,UAAU,EAAE;EAAU,WAAW,EAAE;EAAW,QAAQ,OAAO;CAAG;CAEpF,MAAM,UAAU;EACd,OAAO,EAAE;EACT,IAAI,EAAE;EACN,QAAQ,EAAE;EACV,kBAAkB,EAAE;EACpB,iBAAiB,UAAmB,OAAO,GAAG,OAAO,EAAE,WAAW;EAClE,qBAAqB,EAAE;EACvB,mBAAmB,EAAE;EACrB,yBAAyB,EAAE;EAC3B,gCAAgC,iBAAiB,KAAK,SAAS,CAAC;CAClE;CAEA,MAAM,6BAA6B;EACjC,GAAG,OAAO,aAAa;EACvB,WAAW;EACX,cAAc;EACd,UAAU;EACV,QAAQ;EACR,iBAAiB,UAAmB,UAAU;EAC9C,eAAe,SAAiB;GAAE,GAAG;GAAK,QAAQ;EAAK;EACvD,iBAAiB,cAAgC,EAAE,SAAS;CAC9D;CAEA,MAAM,mBAAmB;EAAE;EAAW;EAAS,YAAY,oBAAoB;CAAE;CAEjF,MAAM,gBAAyD;EAC7D,aAAa;EACb,eAAe;EACf,eAAe;EACf,2BAA2B,aAAa,KAAK,SAAS,CAAC;EACvD,yBAAyB;EACzB,wBAAwB;EACxB,yBAAyB;EACzB,YAAY,EAAE,eAAe;GAC3B,QAAQ,MAAM;IACZ,QAAQ,WAAW;IACnB,QAAQ,WAAW;IACnB,QAAQ,SAAS,eAAe,cAAc,QAAQ,SAAS;GACjE,CAAC;GACD,YAAY,MAAM,CAAC,QAAQ,WAAW,WAAW,QAAQ,WAAW,KAAK,CAAC;GAC1E,SAAS,QAAQ,SAAS,eAAe,cAAc,QAAQ,SAAS;EAC1E;EACA,WAAW;GACT,GAAG,UAAU;GACb,YAAY;IACV,OAAO,MAAM,aAAa;IAC1B,WAAW;IACX,OAAO;IACP,YAAY,SAAS,SACnB,QAAQ,QAAQ,SAAS,eACrB,KAAK,WAAW,IAChB,QAAQ,QAAQ,SAAS,qBACvB,KAAK,WAAW,KACf,KAAK,WAAW,KACf,KAAK,OACF,QACC,OAAO,GAAG,IAAI,WAAW,QAAQ,eAAe,KAChD,IAAI,WAAW,QACf,IAAI,eAAe,IACvB,IACF,KAAK,WAAW,KAChB,KAAK,OACF,QAAQ,OAAO,GAAG,IAAI,WAAW,QAAQ,eAAe,KAAK,IAAI,WAAW,IAC/E;GACV;EACF;EACA,SAAS;GACP,GAAG,OAAO,eAAe;GACzB,UAAU;GACV,WAAW;GACX,aAAa;GACb,SAAS;GACT,SAAS;GACT,OAAO;GACP,WAAW;GACX,gBAAgB;GAChB,eAAe,EAAE,QAAQ,4BAA4B;IACnD,UAAU,OAAO;IACjB,WAAW,OAAO;IAClB,aAAa,OAAO;IACpB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,OAAO,OAAO,SAAS;IACvB,WAAW,QAAQ,OAAO,cAAc;IACxC,gBAAgB,QAAQ,oBAAoB;IAC5C,SAAS,OAAO,WAAW,WAAW,CAAC,CAAC;KACtC,WAAW,OAAO;KAClB,WAAW;MACT,SAAS,OAAO;MAChB,SAAS,OAAO;MAChB,OAAO,OAAO,SAAS;KACzB;IACF,CAAC;GACH;GACA,gBAAgB,QAAQ,OAAO,aAAa,IAAI,OAAO;EACzD;EACA,QAAQ;GACN,GAAG,OAAO,aAAa;GACvB,UAAU;GACV,SAAS;GACT,UAAU;GACV,eAAe;GACf,aAAa;GACb,SAAS;GACT,eAAe,SAAS;IAAE,GAAG;IAAK,eAAe;IAAM,aAAa;GAAK;EAC3E;EACA,YAAY;GACV,GAAG,OAAO,kBAAkB;GAC5B,UAAU;GACV,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;GACX,YAAY;GACZ,SAAS;GACT,eAAe;GACf,gBAAgB;GAChB,UAAU;GACV,WAAW;GACX,SAAS;GACT,OAAO;GACP,WAAW;GACX,eAAe;GACf,cAAc;GACd,eAAe;GACf,SAAS;GACT,qBAAqB;GACrB,gBAAgB;GAChB,eAAe,EACb,QACA,WACA,sBACA,OACA,eACA,cACK;IACL,UAAU,OAAO;IACjB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB;IACA,YAAY,OAAO;IACnB,SAAS,OAAO,WAAW,WAAW,CAAC,CAAC,OAAO,OAAO;IACtD,eAAe,OAAO,SAAS;IAC/B,gBAAgB,OAAO,SAAS;IAChC,UAAU,QAAQ,OAAO,cAAc;IACvC,WAAW,QAAQ,OAAO,eAAe;IACzC,SAAS,OAAO;IAChB;IACA,WAAW;IACX;IACA,cAAc;IACd,eAAe;IACf,SAAS;IACT,qBAAqB,OAAO;IAC5B,gBAAgB,QAAQ,oBAAoB;IAC5C,aAAa,OAAO;GACtB;GACA,gBAAgB,QAAQ,OAAO,aAAa,IAAI,OAAO;GACvD,eAAe,QACb,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,OAAOA,eAAa;KAChC,UAAU,IAAI;KACd,SAAS,IAAI;KACb,SAAS,IAAI;KACb,WAAW,IAAI;KACf,aAAa,IAAI;KACjB,YAAY,IAAI;KAChB,SAAS,OAAO,OAAO,aAAa,IAAI,OAAO;KAC/C,UAAU;MAAE,OAAO,IAAI;MAAe,QAAQ,IAAI;KAAe;KACjE,gBAAgB,OAAO,YAAY,IAAI,QAAQ;KAC/C,iBAAiB,OAAO,YAAY,IAAI,SAAS;KACjD,SAAS,IAAI;IACf,CAAC;GACH,CAAC;EACL;EACA,cAAc;GACZ,GAAG,OAAO,oBAAoB;GAC9B,UAAU;GACV,SAAS;GACT,gBAAgB;GAChB,QAAQ;GACR,SAAS;GACT,WAAW;GACX,SAAS;GACT,WAAW;GACX,UAAU;GACV,SAAS;GACT,gBAAgB;GAChB,eAAe,YAAY;IACzB,GAAG;IACH,SAAS,OAAO,WAAW,WAAW,CAAC,CAAC,OAAO,OAAO;IACtD,WAAW,QAAQ,OAAO,eAAe;IACzC,UAAU;IACV,gBAAgB,QAAQ,OAAO,oBAAoB;GACrD;GACA,SAAS,QACP,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,OAAO,mBAAmB;KACtC,GAAG;KACH,SAAS,OAAO,OAAO,aAAa,IAAI,OAAO;KAC/C,iBAAiB,OAAO,YAAY,IAAI,SAAS;IACnD,CAAC;GACH,CAAC;EACL;EACA,WAAW;GACT,GAAG,OAAO,aAAa;GACvB,UAAU;GACV,SAAS;GACT,QAAQ;GACR,WAAW;GACX,UAAU;GACV,eAAe,SAAS,EAAE,GAAG,IAAI;EACnC;EACA,YAAY;GACV,GAAG,OAAO,YAAY;GACtB,UAAU;GACV,SAAS;GACT,QAAQ;GACR,WAAW;GACX,UAAU;GACV,WAAW;GACX,YAAY;GACZ,gBAAgB;GAChB,eAAe,SAAS;IACtB,GAAG;IACH,YAAY,QAAQ,IAAI,gBAAgB;IACxC,gBAAgB,QAAQ,IAAI,oBAAoB;GAClD;EACF;EACA,cAAc;GACZ,GAAG,OAAO,eAAe;GACzB,UAAU;GACV,SAAS;GACT,WAAW;GACX,WAAW;GACX,YAAY;GACZ,gBAAgB;GAChB,eAAe,SAAS;IACtB,GAAG;IACH,YAAY,QAAQ,IAAI,gBAAgB;IACxC,gBAAgB,QAAQ,IAAI,oBAAoB;GAClD;EACF;EACA,SAAS;GACP,GAAG,OAAO,eAAe;GACzB,UAAU;GACV,WAAW;GACX,MAAM;GACN,UAAU;GACV,gBAAgB;GAChB,eAAe,SAAS;IAAE,GAAG;IAAK,gBAAgB,QAAQ,IAAI,oBAAoB;GAAE;EACtF;CACF;CAEA,MAAM,kBAA8D;EAClE,MAAM,YAAY,iBAAsC;GACtD,UAAU,SAAS,MAAM,YAAY,QAAQ;GAC7C,eAAe,YAAY;EAC7B;EAEA,OAAO;GACL;GACA;GACA,qBAAqB,oBAAoB;GACzC,aAAa;GACb,yBAAyB;GACzB,2BAA2B;GAC3B,YAAY,EAAE,UAAU,QAAQ,YAAY,iBAAiB;IAC3D,QAAQ,MAAM,CAAC,UAAU,MAAM,CAAC;IAChC,YAAY,MAAM,CAAC,WAAW,WAAW,WAAW,KAAK,CAAC;IAC1D,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,UAAU;GAC1D;GACA,eAAe;GACf,eAAe;GACf,6BAA6B,kBAAkB,KAAK,SAAS,CAAC;GAC9D,0BAA0B;GAC1B,4BAA4B,iBAAiB,KAAK,SAAS,CAAC;GAC5D,wBAAwB;GACxB,qBAAqB;GACrB,YAAY;IACV,OAAO,MAAM,aAAa;IAC1B,WAAW;IACX,OAAO;IACP,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,YAAY,QAAQ,IAAI,WAAW;IACnC,sBAAsB,YAAY,WAAW,cAAc;KACzD,GAAG;KACH;KACA;KACA,YAAY;KACZ,QAAQ;IACV;GACF;GACA,YAAY;IACV,GAAG,OAAO,WAAW;IACrB,UAAU;IACV,WAAW;IACX,cAAc;IACd,oBAAoB;IACpB,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,eAAe,EAAE,aAAa,GAAG,WAAW;KAAE,GAAG;KAAK,GAAG,SAAS,WAAW;IAAE;IAC/E,iBAAiB,MAAM,qBAAqB;KAC1C,UAAU,SAAS,MAAM,IAAI;KAC7B;IACF;IACA,oBAAoB,EAAE,aAAa,GAAG,WAAW;KAAE,GAAG;KAAK,GAAG,SAAS,WAAW;IAAE;IACpF,SAAS,EAAE,UAAU,SAAS,KAAK,YAAY,iBAC7C,OAAO,IAAI,aAAa;KACtB,MAAM,KAAK,OAAO,EAAE,UAAU,IAAI,EAAE,GAAG;KACvC,MAAM,OAAO,OAAO,OAAO,qBAAqB,WAAW,QAAQ;KAEnE,OAAO,OAAO,OAAO,4BAA4B;MAC/C;MACA,UAAU;OACR,WAAW;OACX,kBAAkB,IAAI,EAAE;OACxB,aAAa,CACX;QACE,cAAc,WAAW;QACzB,UAAU,WAAW;OACvB,CACF;MACF;MACA,cAAc,WAAW;MACzB,oBAAoB,WAAW;MAC/B,iBAAiB,WAAW;MAC5B,UAAU;MACV,eAAe,WAAW;MAC1B,YAAY,OAAO,OAAO,iBAAiB;OACzC,WAAW,WAAW;OACtB,OAAO,WAAW;MACpB,CAAC;MACD,2BAA2B,WAAW;MACtC,GAAI,WAAW,eAAe,OAC1B,CAAC,IACD,EAAE,4BAA4B,OAAO,YAAY,WAAW,UAAU,EAAE;KAC9E,CAAC;IACH,CAAC;GACL;GACA,SAAS;IACP,GAAG,OAAO,kBAAkB;IAC5B,UAAU;IACV,QAAQ;IACR,WAAW;IACX,qBAAqB;IACrB,iBAAiB;IACjB,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,2BAA2B;IAC3B,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,OAAO;IACP,eAAe,KAAK,EAAE,iBAAiB,aAAa;KAClD,UAAU,IAAI;KACd,QAAQ,IAAI;KACZ,WAAW,IAAI;KACf,qBAAqB,IAAI,WAAW;KACpC,iBAAiB,IAAI,WAAW;KAChC,WAAW,mBAAmB;KAC9B,cAAc,IAAI,gBAAgB;KAClC,kBAAkB,IAAI,oBAAoB;KAC1C,oBAAoB,IAAI,sBAAsB;KAC9C,iBAAiB,IAAI,mBAAmB;KACxC,2BAA2B,IAAI,6BAA6B;KAC5D,YAAY,QAAQ,IAAI,gBAAgB;KACxC,UAAU,QAAQ,IAAI,cAAc;KACpC,gBAAgB,QAAQ,IAAI,oBAAoB;KAChD;IACF;GACF;GACA,WAAW;IACT,GAAG,OAAO,gBAAgB;IAC1B,UAAU;IACV,QAAQ;IACR,WAAW;IACX,UAAU;IACV,eAAe,SAAS,EAAE,GAAG,IAAI;GACnC;GACA,QAAQ;IACN,GAAG,OAAO,iBAAiB;IAC3B,UAAU;IACV,QAAQ;IACR,WAAW;IACX,UAAU;IACV,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,eAAe,SAAS;KACtB,GAAG;KACH,YAAY,QAAQ,IAAI,gBAAgB;KACxC,gBAAgB,QAAQ,IAAI,oBAAoB;IAClD;GACF;GACA,SAAS;IACP,GAAG,OAAO,kBAAkB;IAC5B,UAAU;IACV,WAAW;IACX,QAAQ;IACR,eAAe;IACf,UAAU;IACV,gBAAgB;IAChB,eAAe,SAAS;KAAE,GAAG;KAAK,gBAAgB,QAAQ,IAAI,oBAAoB;IAAE;GACtF;EACF;CACF;CAEA,MAAM,gBAAqD;EACzD;EACA;EACA,aAAa;EACb,oBAAoB;EACpB,mBAAmB;EACnB,eAAe;EACf,eAAe;EACf,0BAA0B;EAC1B,4BAA4B,iBAAiB,KAAK,SAAS,CAAC;EAC5D,wBAAwB;EACxB,qBAAqB;EACrB,yBAAyB;EACzB,4BAA4B;EAC5B,4BAA4B;EAC5B,qBAAqB;GACnB,GAAG,oBAAoB;GACvB,mBAAmB,cAAc;IAAE;IAAU,QAAQ;GAAK;GAC1D,mBAAmB,cAAc;IAAE;IAAU,QAAQ;GAAM;EAC7D;EACA,YAAY;GACV,OAAO,MAAM,aAAa;GAC1B,WAAW;GACX,OAAO;GACP,WAAW;GACX,YAAY;GACZ,iBAAiB;GACjB,YAAY,QAAQ,IAAI,WAAW,QAAQ,IAAI,eAAe;GAC9D,kBAAkB,QAAQ,IAAI,WAAW,QAAQ,IAAI,eAAe;GACpE,uBAAuB,EAAE,YAAY,WAAW,kBAAkB,uBAAuB;IACvF,GAAG;IACH;IACA,YAAY,QAAQ,gBAAgB;IACpC,UAAU;IACV,QAAQ;GACV;GACA,qBAAqB,EAAE,kBAAkB,uBAAuB;IAC9D,YAAY,QAAQ,gBAAgB;IACpC,UAAU;IACV,QAAQ;GACV;GACA,mBAAmB,EAAE,uBAAuB;IAAE,UAAU;IAAiB,QAAQ;GAAM;EACzF;EACA,YAAY;GACV,OAAO,MAAM,kBAAkB;GAC/B,UAAU;GACV,WAAW;GACX,cAAc;GACd,qBAAqB;GACrB,iBAAiB;GACjB,oBAAoB;GACpB,QAAQ;GACR,iBAAiB,UAAU,UAAU;GACrC,uBAAuB,EAAE,YAAY,GAAG,WAAW;IACjD,GAAG;IACH,qBAAqB,WAAW;IAChC,iBAAiB,WAAW;IAC5B,QAAQ;GACV;GACA,mBAAmB,EAAE,YAAY,0BAA0B;IACzD,qBAAqB,WAAW;IAChC,iBAAiB,WAAW;IAC5B;IACA,QAAQ;GACV;GACA,mBAAmB,EAAE,0BAA0B;IAAE;IAAoB,QAAQ;GAAM;GACnF,SAAS,EAAE,UAAU,SAAS,KAAK,YAAY,iBAC7C,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,OAAO,yBAAyB;KAC5C;KACA,YAAY;MAAE,WAAW,WAAW;MAAW,OAAO,WAAW;KAAM;KACvE,oBAAoB,WAAW;KAC/B,kBAAkB,OAAO,YAAY,WAAW,UAAU;KAC1D,cAAc,WAAW;KACzB,oBAAoB,WAAW;KAC/B,UAAU;MACR,WAAW,OAAO,EAAE,UAAU,IAAI,EAAE,GAAG;MACvC,kBAAkB,IAAI,EAAE;MACxB,aAAa,CACX;OAAE,cAAc,WAAW;OAAc,UAAU,WAAW;MAAmB,CACnF;KACF;IACF,CAAC;GACH,CAAC;EACL;EACA,SAAS;GACP,OAAO,MAAM,eAAe;GAC5B,UAAU;GACV,WAAW;GACX,QAAQ;GACR,eAAe;GACf,gBAAgB;GAChB,eAAe,EAAE,sBAAsB,GAAG,WAAW;IACnD,GAAG;IACH,gBAAgB,QAAQ,oBAAoB;GAC9C;EACF;CACF;CAEA,MAAM,YACJ,WAUG;EACH,MAAM,SAAS,OAAO,eACpB,OAAO,OAAO;GACZ,GAAG,gBAAgB;GACnB,QAAQ,OAAO;GACf,QAAQ;GACR,SAAS;GACT,YAAY;GACZ,mBAAmB;EACrB,CAAC,CACH;EAEA,MAAM,aAAa,WAA6C;GAC9D,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,kBAAkB,MAAM;GACxB,UAAU,QAAQ,SAAS,cAAc,MAAM,QAAQ,CAAC;GACxD,WAAW,QAAQ,SAAS,cAAc,MAAM,SAAS,CAAC;GAC1D,mBAAmB,QAAQ,SAAS,cAAc,MAAM,iBAAiB,CAAC;GAC1E,QAAQ,OAAO,WAAW,MAAM,CAAC,CAAC;IAChC,GAAG;IACH,QAAQ,OAAO,WAAW,MAAM,CAAC,CAAC,MAAM,MAAM;GAChD,CAAC;EACH;EAEA,OAAO;GACL,GAAG,UAAU;GACb,4BAA4B;GAC5B,aAAa;IAAE,eAAe;IAA0B,QAAQ;GAAsB;GACtF,WAAW;IACT,WAAW,OAAO,OAAO,QAAQ,EAAE;IACnC,YAAY,OAAO,OAAO,WAAW,EAAE;IACvC,QAAQ,OAAO;GACjB;GACA,MAAM;IACJ,OAAO,MAAM,cAAc;IAC3B,QAAQ;IACR,WAAW;IACX,OAAO;IACP,eAAe;IACf,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,gBAAgB,SAAS,QAAQ,SAAS,cAAc,IAAI,CAAC;IAC7D,gBAAgB,UAAU,YAAY,KAAK,CAAC,CAAC,KAAK,OAAO,IAAI,SAAS,UAAU,CAAC;IACjF,sBAAsB,SAAS;KAC7B,QAAQ,IAAI,SAAS;KACrB,WAAW,IAAI;KACf,OAAO;KACP,eAAe,IAAI;KACnB,YAAY,QAAQ,SAAS,cAAc,IAAI,UAAU,CAAC;IAC5D;IACA,0BAA0B,SAAS;KACjC,QAAQ,IAAI,SAAS;KACrB,WAAW,IAAI;KACf,OAAO;KACP,eAAe;KACf,YAAY,QAAQ,SAAS,cAAc,IAAI,UAAU,CAAC;IAC5D;GACF;GACA,SAAS;IACP,OAAO,MAAM,UAAU;IACvB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,SAAS;IACT,kBAAkB;IAClB,UAAU;IACV,WAAW;IACX,mBAAmB;IACnB,gBAAgB,SAAS,QAAQ,SAAS,cAAc,IAAI,CAAC;IAC7D,gBAAgB;IAChB,2BAA2B,iBAAiB,KAAK,SAAS,CAAC;IAC3D,eAAe,OAAO,SAAS;KAAE,GAAG,UAAU,KAAK;KAAG,GAAG;IAAI;IAC7D,gBAAgB;IAChB,SAAS,QACP,OAAO,IAAI,aAAa;KACtB,MAAM,QAAQ,OAAO,OAAO,QAAQ,IAAI,MAAM;KAC9C,MAAM,gBAAgB,OAAO,OAAO,QAAQ,MAAM,MAAM;KAExD,OAAO;MAAE,GAAG;MAAO,QAAQ;KAAc;IAC3C,CAAC;GACL;EACF;CACF;CAEA,OAAO;EAAE;EAAO;EAAW;EAAQ;EAAW;EAAQ;EAAU;CAAO;AACzE"}
+{"version":3,"file":"storage-mapping.mjs","names":["ProofRecord"],"sources":["../../src/internal/storage-mapping.ts"],"sourcesContent":["import { EmailCredentialSnapshot } from \"@yielded/auth/Email\";\nimport { LoginIdentifier } from \"@yielded/auth/Identity\";\nimport {\n  PasswordAttemptId,\n  PasswordCredentialSnapshot,\n  EncodedPasswordHash,\n  type PasswordReplacement,\n} from \"@yielded/auth/Password\";\nimport {\n  ProofBinding,\n  ProofContinuationId,\n  ProofDeliveryId,\n  ProofId,\n  ProofPurpose,\n  ProofRequestId,\n  ProofRequestReceipt,\n  ProofVersion,\n} from \"@yielded/auth/Proofs\";\nimport { TokenDigest } from \"@yielded/auth/Schema\";\nimport {\n  SecurityRevision,\n  SessionId,\n  SessionMetadata,\n  SessionAuthenticationProvenance,\n  SessionCredentialVersion,\n  type StatefulSessionRecord,\n} from \"@yielded/auth/Sessions\";\nimport { Crypto, DateTime, Effect, Redacted, Schema } from \"effect\";\n\nimport type { MappingInput } from \"./configuration\";\nimport { randomId } from \"./crypto\";\nimport { PersistenceMappingError } from \"./mapping-error\";\nimport { requiredEmailAddressConstraints, type AnyEmailAddressMapping } from \"./models/email-model\";\nimport {\n  requiredPasswordConstraints,\n  type AnyPasswordPersistenceMapping,\n} from \"./models/password-model\";\nimport { requiredProofConstraints, type AnyProofPersistenceMapping } from \"./models/proof-model\";\nimport type { StatefulSessionMapping } from \"./models/session-model\";\nimport type { TableModel, SqlFragment } from \"./query-operations\";\nimport { storageTables, type StorageRole } from \"./storage-tables\";\n\nconst failure = (cause: unknown) => PersistenceMappingError.make({ operation: \"decode\", cause });\n\nconst decode = <S extends Schema.Codec<unknown, unknown>>(schema: S, value: unknown) =>\n  Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(failure));\n\nconst string = (value: unknown) => Schema.decodeUnknownSync(Schema.String)(value);\nconst tuple = Schema.encodeSync(Schema.fromJsonString(Schema.Array(Schema.String)));\nconst bindingJson = Schema.fromJsonString(ProofBinding);\nconst receiptJson = Schema.fromJsonString(ProofRequestReceipt);\n\nconst ProofRecord = Schema.Struct({\n  moduleId: Schema.String,\n  purpose: ProofPurpose,\n  proofId: ProofId,\n  requestId: ProofRequestId,\n  fingerprint: TokenDigest,\n  deliveryId: ProofDeliveryId,\n  binding: ProofBinding,\n  verifier: Schema.Struct({ keyId: Schema.String, digest: TokenDigest }),\n  issuedAtMillis: Schema.Int,\n  expiresAtMillis: Schema.Int,\n  version: ProofVersion,\n});\n\nconst ProofContinuation = Schema.Struct({\n  moduleId: Schema.String,\n  purpose: ProofPurpose,\n  continuationId: ProofContinuationId,\n  digest: TokenDigest,\n  proofId: ProofId,\n  seriesKey: Schema.String,\n  binding: ProofBinding,\n  expiresAtMillis: Schema.Int,\n  version: ProofVersion,\n});\n\n/** Derive shared row mappings from a managed or custom storage layout.\n * Acquire Effect Crypto once; the returned allocators retain that implementation.\n * Each factory requires its role tables to exist. Adapter authors supply typed\n * table handles and dialect-specific clocks/commit predicates, and may refine\n * authority policy for explicit services. This does not alter composed defaults.\n */\nexport const makeMappings = Effect.fnUntraced(function* (input: MappingInput) {\n  const crypto = yield* Crypto.Crypto;\n\n  const allocate = randomId.pipe(\n    Effect.provideService(Crypto.Crypto, crypto),\n    Effect.mapError(failure),\n  );\n\n  const table = (role: StorageRole) => {\n    const found = input.tables[role];\n\n    if (found === undefined) throw failure(`Missing ${role} mapping`);\n\n    return found;\n  };\n\n  const mapped = (role: StorageRole) => ({\n    table: table(role),\n    ...Object.fromEntries(Object.keys(storageTables[role].columns).map((key) => [key, key])),\n  });\n\n  const { subjects: s, encodeInstant: instant, decodeInstant: readInstant } = input;\n  const subjectId = { toNative: s.toNative, toSubject: s.toSubject, equals: Object.is };\n\n  const subject = {\n    table: s.table,\n    id: s.id,\n    status: s.status,\n    securityRevision: s.securityRevision,\n    isActiveStatus: (value: unknown) => Object.is(value, s.activeValue),\n    d1ActiveStatusValue: s.activeValue,\n    decodeRequirement: s.requirements,\n    decodeActionRequirement: s.actionRequirements,\n    nextSecurityRevision: () => allocate.pipe(Effect.map(SecurityRevision.make)),\n  };\n\n  const authorityCredential = () => ({\n    ...mapped(\"credentials\"),\n    subjectId: \"subjectId\",\n    credentialId: \"credentialId\",\n    revision: \"revision\",\n    status: \"active\",\n    isActiveStatus: (value: unknown) => value === true,\n    encodeInsert: (row: object) => ({ ...row, active: true }),\n    encodeRevision: (revision: SecurityRevision) => ({ revision }),\n  });\n\n  const authority = () => ({ subjectId, subject, credential: authorityCredential() });\n\n  const proofs = (): AnyProofPersistenceMapping<SqlFragment> => ({\n    constraints: requiredProofConstraints,\n    encodeInstant: instant,\n    decodeInstant: readInstant,\n    allocateVersion: allocate.pipe(Effect.map(ProofVersion.make)),\n    isRequestConflict: () => false,\n    isSeriesConflict: () => false,\n    isCommandConflict: () => false,\n    scopeKeys: ({ binding }) => ({\n      series: tuple([\n        binding.identifier.namespace,\n        binding.identifier.value,\n        binding._tag === \"Identifier\" ? \"anonymous\" : binding.revision.subjectId,\n      ]),\n      identifier: tuple([binding.identifier.namespace, binding.identifier.value]),\n      subject: binding._tag === \"Identifier\" ? \"anonymous\" : binding.revision.subjectId,\n    }),\n    authority: {\n      ...authority(),\n      identifier: {\n        table: table(\"identifiers\"),\n        namespace: \"namespace\",\n        value: \"value\",\n        isCurrent: (request, rows) =>\n          request.binding._tag === \"Identifier\"\n            ? rows.length === 0\n            : request.binding._tag === \"IdentifierChange\"\n              ? rows.length === 0 ||\n                (rows.length === 1 &&\n                  rows.every(\n                    (row) =>\n                      Object.is(row.subjectId, request.nativeSubjectId) &&\n                      row.active === true &&\n                      row.verifiedAt === null,\n                  ))\n              : rows.length === 1 &&\n                rows.every(\n                  (row) => Object.is(row.subjectId, request.nativeSubjectId) && row.active === true,\n                ),\n      },\n    },\n    request: {\n      ...mapped(\"proofRequests\"),\n      moduleId: \"moduleId\",\n      requestId: \"requestId\",\n      fingerprint: \"fingerprint\",\n      proofId: \"proofId\",\n      purpose: \"purpose\",\n      keyId: \"keyId\",\n      createdAt: \"createdAt\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: ({ record, retentionUntilMillis }) => ({\n        moduleId: record.moduleId,\n        requestId: record.requestId,\n        fingerprint: record.fingerprint,\n        proofId: record.proofId,\n        purpose: record.purpose,\n        keyId: record.verifier.keyId,\n        createdAt: instant(record.issuedAtMillis),\n        retentionUntil: instant(retentionUntilMillis),\n        receipt: Schema.encodeSync(receiptJson)({\n          requestId: record.requestId,\n          reference: {\n            proofId: record.proofId,\n            purpose: record.purpose,\n            keyId: record.verifier.keyId,\n          },\n        }),\n      }),\n      decodeReceipt: (row) => decode(receiptJson, row.receipt),\n    },\n    series: {\n      ...mapped(\"proofSeries\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      scopeKey: \"scopeKey\",\n      activeProofId: \"activeProofId\",\n      lastIssueAt: \"lastIssueAt\",\n      version: \"version\",\n      encodeInsert: (row) => ({ ...row, activeProofId: null, lastIssueAt: null }),\n    },\n    generation: {\n      ...mapped(\"proofGenerations\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      proofId: \"proofId\",\n      requestId: \"requestId\",\n      seriesKey: \"seriesKey\",\n      deliveryId: \"deliveryId\",\n      binding: \"binding\",\n      verifierKeyId: \"verifierKeyId\",\n      verifierDigest: \"verifierDigest\",\n      issuedAt: \"issuedAt\",\n      expiresAt: \"expiresAt\",\n      version: \"version\",\n      state: \"state\",\n      sendCount: \"sendCount\",\n      deliveryState: \"deliveryState\",\n      claimVersion: \"claimVersion\",\n      claimDeadline: \"claimDeadline\",\n      retryAt: \"retryAt\",\n      deliveryRetryMillis: \"deliveryRetryMillis\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: ({\n        record,\n        seriesKey,\n        retentionUntilMillis,\n        state,\n        deliveryState,\n        policy,\n      }) => ({\n        moduleId: record.moduleId,\n        purpose: record.purpose,\n        proofId: record.proofId,\n        requestId: record.requestId,\n        seriesKey,\n        deliveryId: record.deliveryId,\n        binding: Schema.encodeSync(bindingJson)(record.binding),\n        verifierKeyId: record.verifier.keyId,\n        verifierDigest: record.verifier.digest,\n        issuedAt: instant(record.issuedAtMillis),\n        expiresAt: instant(record.expiresAtMillis),\n        version: record.version,\n        state,\n        sendCount: 0,\n        deliveryState,\n        claimVersion: null,\n        claimDeadline: null,\n        retryAt: null,\n        deliveryRetryMillis: policy.deliveryRetryMillis,\n        retentionUntil: instant(retentionUntilMillis),\n        fingerprint: record.fingerprint,\n      }),\n      decodeBinding: (row) => decode(bindingJson, row.binding),\n      decodeRecord: (row) =>\n        Effect.gen(function* () {\n          return yield* decode(ProofRecord, {\n            moduleId: row.moduleId,\n            purpose: row.purpose,\n            proofId: row.proofId,\n            requestId: row.requestId,\n            fingerprint: row.fingerprint,\n            deliveryId: row.deliveryId,\n            binding: yield* decode(bindingJson, row.binding),\n            verifier: { keyId: row.verifierKeyId, digest: row.verifierDigest },\n            issuedAtMillis: yield* readInstant(row.issuedAt),\n            expiresAtMillis: yield* readInstant(row.expiresAt),\n            version: row.version,\n          });\n        }),\n    },\n    continuation: {\n      ...mapped(\"proofContinuations\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      continuationId: \"continuationId\",\n      digest: \"digest\",\n      proofId: \"proofId\",\n      seriesKey: \"seriesKey\",\n      binding: \"binding\",\n      expiresAt: \"expiresAt\",\n      consumed: \"consumed\",\n      version: \"version\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (record) => ({\n        ...record,\n        binding: Schema.encodeSync(bindingJson)(record.binding),\n        expiresAt: instant(record.expiresAtMillis),\n        consumed: false,\n        retentionUntil: instant(record.retentionUntilMillis),\n      }),\n      decode: (row) =>\n        Effect.gen(function* () {\n          return yield* decode(ProofContinuation, {\n            ...row,\n            binding: yield* decode(bindingJson, row.binding),\n            expiresAtMillis: yield* readInstant(row.expiresAt),\n          });\n        }),\n    },\n    rateScope: {\n      ...mapped(\"proofScopes\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      action: \"action\",\n      scopeKind: \"scopeKind\",\n      scopeKey: \"scopeKey\",\n      encodeInsert: (row) => ({ ...row }),\n    },\n    abuseEvent: {\n      ...mapped(\"proofAbuse\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      action: \"action\",\n      scopeKind: \"scopeKind\",\n      scopeKey: \"scopeKey\",\n      commandId: \"commandId\",\n      occurredAt: \"occurredAt\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (row) => ({\n        ...row,\n        occurredAt: instant(row.occurredAtMillis),\n        retentionUntil: instant(row.retentionUntilMillis),\n      }),\n    },\n    failureEvent: {\n      ...mapped(\"proofFailures\"),\n      moduleId: \"moduleId\",\n      purpose: \"purpose\",\n      seriesKey: \"seriesKey\",\n      commandId: \"commandId\",\n      occurredAt: \"occurredAt\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (row) => ({\n        ...row,\n        occurredAt: instant(row.occurredAtMillis),\n        retentionUntil: instant(row.retentionUntilMillis),\n      }),\n    },\n    command: {\n      ...mapped(\"proofCommands\"),\n      moduleId: \"moduleId\",\n      commandId: \"commandId\",\n      kind: \"kind\",\n      decision: \"decision\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: (row) => ({ ...row, retentionUntil: instant(row.retentionUntilMillis) }),\n    },\n  });\n\n  const passwords = (): AnyPasswordPersistenceMapping<SqlFragment> => {\n    const verifier = (replacement: PasswordReplacement) => ({\n      verifier: Redacted.value(replacement.verifier),\n      normalization: replacement.normalization,\n    });\n\n    return {\n      subjectId,\n      subject,\n      authorityCredential: authorityCredential(),\n      constraints: requiredPasswordConstraints,\n      isCommandConflict: () => false,\n      isRateScopeConflict: () => false,\n      scopeKeys: ({ moduleId, action, identifier, subjectId }) => ({\n        action: tuple([moduleId, action]),\n        identifier: tuple([identifier.namespace, identifier.value]),\n        ...(subjectId === undefined ? {} : { subject: subjectId }),\n      }),\n      encodeInstant: instant,\n      decodeInstant: readInstant,\n      allocateAttemptId: allocate.pipe(Effect.map(PasswordAttemptId.make)),\n      allocateCredentialId: allocate,\n      allocateRevision: allocate.pipe(Effect.map(SecurityRevision.make)),\n      commandRetentionMillis: 86_400_000,\n      sessionInvalidation: \"same-authority-immediate\",\n      identifier: {\n        table: table(\"identifiers\"),\n        namespace: \"namespace\",\n        value: \"value\",\n        subjectId: \"subjectId\",\n        verifiedAt: \"verifiedAt\",\n        bindingRevision: \"revision\",\n        isCurrent: (row) => row.active === true,\n        encodeInitialInsert: (identifier, subjectId, revision) => ({\n          ...identifier,\n          subjectId,\n          revision,\n          verifiedAt: null,\n          active: true,\n        }),\n      },\n      credential: {\n        ...mapped(\"passwords\"),\n        moduleId: \"moduleId\",\n        subjectId: \"subjectId\",\n        credentialId: \"credentialId\",\n        credentialRevision: \"credentialRevision\",\n        verifierVersion: \"verifierVersion\",\n        verifier: \"verifier\",\n        normalization: \"normalization\",\n        encodeInsert: ({ replacement, ...row }) => ({ ...row, ...verifier(replacement) }),\n        encodeVerifier: (hash, verifierVersion) => ({\n          verifier: Redacted.value(hash),\n          verifierVersion,\n        }),\n        encodeReplacement: ({ replacement, ...row }) => ({ ...row, ...verifier(replacement) }),\n        decode: ({ moduleId, subject: row, identifier, credential }) =>\n          Effect.gen(function* () {\n            const id = yield* s.toSubject(row[s.id]);\n            const hash = yield* decode(EncodedPasswordHash, credential.verifier);\n\n            return yield* decode(PasswordCredentialSnapshot, {\n              moduleId,\n              revision: {\n                subjectId: id,\n                securityRevision: row[s.securityRevision],\n                credentials: [\n                  {\n                    credentialId: credential.credentialId,\n                    revision: credential.credentialRevision,\n                  },\n                ],\n              },\n              credentialId: credential.credentialId,\n              credentialRevision: credential.credentialRevision,\n              verifierVersion: credential.verifierVersion,\n              verifier: hash,\n              normalization: credential.normalization,\n              identifier: yield* decode(LoginIdentifier, {\n                namespace: identifier.namespace,\n                value: identifier.value,\n              }),\n              identifierBindingRevision: identifier.revision,\n              ...(identifier.verifiedAt === null\n                ? {}\n                : { identifierVerifiedAtMillis: yield* readInstant(identifier.verifiedAt) }),\n            });\n          }),\n      },\n      attempt: {\n        ...mapped(\"passwordAttempts\"),\n        moduleId: \"moduleId\",\n        action: \"action\",\n        attemptId: \"attemptId\",\n        identifierNamespace: \"identifierNamespace\",\n        identifierValue: \"identifierValue\",\n        subjectId: \"subjectId\",\n        credentialId: \"credentialId\",\n        securityRevision: \"securityRevision\",\n        credentialRevision: \"credentialRevision\",\n        verifierVersion: \"verifierVersion\",\n        identifierBindingRevision: \"identifierBindingRevision\",\n        admittedAt: \"admittedAt\",\n        deadline: \"deadline\",\n        retentionUntil: \"retentionUntil\",\n        state: \"state\",\n        encodeInsert: (row, { nativeSubjectId, state }) => ({\n          moduleId: row.moduleId,\n          action: row.action,\n          attemptId: row.attemptId,\n          identifierNamespace: row.identifier.namespace,\n          identifierValue: row.identifier.value,\n          subjectId: nativeSubjectId ?? null,\n          credentialId: row.credentialId ?? null,\n          securityRevision: row.securityRevision ?? null,\n          credentialRevision: row.credentialRevision ?? null,\n          verifierVersion: row.verifierVersion ?? null,\n          identifierBindingRevision: row.identifierBindingRevision ?? null,\n          admittedAt: instant(row.admittedAtMillis),\n          deadline: instant(row.deadlineMillis),\n          retentionUntil: instant(row.retentionUntilMillis),\n          state,\n        }),\n      },\n      rateScope: {\n        ...mapped(\"passwordScopes\"),\n        moduleId: \"moduleId\",\n        action: \"action\",\n        scopeKind: \"scopeKind\",\n        scopeKey: \"scopeKey\",\n        encodeInsert: (row) => ({ ...row }),\n      },\n      charge: {\n        ...mapped(\"passwordCharges\"),\n        moduleId: \"moduleId\",\n        action: \"action\",\n        scopeKind: \"scopeKind\",\n        scopeKey: \"scopeKey\",\n        attemptId: \"attemptId\",\n        occurredAt: \"occurredAt\",\n        retentionUntil: \"retentionUntil\",\n        encodeInsert: (row) => ({\n          ...row,\n          occurredAt: instant(row.occurredAtMillis),\n          retentionUntil: instant(row.retentionUntilMillis),\n        }),\n      },\n      command: {\n        ...mapped(\"passwordCommands\"),\n        moduleId: \"moduleId\",\n        commandId: \"commandId\",\n        action: \"action\",\n        bindingDigest: \"bindingDigest\",\n        decision: \"decision\",\n        retentionUntil: \"retentionUntil\",\n        encodeInsert: (row) => ({ ...row, retentionUntil: instant(row.retentionUntilMillis) }),\n      },\n    };\n  };\n\n  const emails = (): AnyEmailAddressMapping<SqlFragment> => ({\n    subjectId,\n    subject,\n    constraints: requiredEmailAddressConstraints,\n    addressCardinality: \"single\",\n    changeDisposition: \"retire-source\",\n    encodeInstant: instant,\n    decodeInstant: readInstant,\n    allocateCredentialId: allocate,\n    allocateRevision: allocate.pipe(Effect.map(SecurityRevision.make)),\n    commandRetentionMillis: 86_400_000,\n    sessionInvalidation: \"same-authority-immediate\",\n    isCommandConflict: () => false,\n    isIdentifierConflict: () => false,\n    isCredentialConflict: () => false,\n    authorityCredential: {\n      ...authorityCredential(),\n      encodeActivation: (revision) => ({ revision, active: true }),\n      encodeRetirement: (revision) => ({ revision, active: false }),\n    },\n    identifier: {\n      table: table(\"identifiers\"),\n      namespace: \"namespace\",\n      value: \"value\",\n      subjectId: \"subjectId\",\n      verifiedAt: \"verifiedAt\",\n      bindingRevision: \"revision\",\n      isCurrent: (row) => row.active === true && row.verifiedAt !== null,\n      isMutableTarget: (row) => row.active === true && row.verifiedAt === null,\n      encodeVerifiedInsert: ({ identifier, subjectId, verifiedAtMillis, bindingRevision }) => ({\n        ...identifier,\n        subjectId,\n        verifiedAt: instant(verifiedAtMillis),\n        revision: bindingRevision,\n        active: true,\n      }),\n      encodeVerification: ({ verifiedAtMillis, bindingRevision }) => ({\n        verifiedAt: instant(verifiedAtMillis),\n        revision: bindingRevision,\n        active: true,\n      }),\n      encodeRetirement: ({ bindingRevision }) => ({ revision: bindingRevision, active: false }),\n    },\n    credential: {\n      table: table(\"emailCredentials\"),\n      moduleId: \"moduleId\",\n      subjectId: \"subjectId\",\n      credentialId: \"credentialId\",\n      identifierNamespace: \"identifierNamespace\",\n      identifierValue: \"identifierValue\",\n      credentialRevision: \"credentialRevision\",\n      status: \"active\",\n      isActiveStatus: (value) => value === true,\n      encodeVerifiedInsert: ({ identifier, ...row }) => ({\n        ...row,\n        identifierNamespace: identifier.namespace,\n        identifierValue: identifier.value,\n        active: true,\n      }),\n      encodeActivation: ({ identifier, credentialRevision }) => ({\n        identifierNamespace: identifier.namespace,\n        identifierValue: identifier.value,\n        credentialRevision,\n        active: true,\n      }),\n      encodeRetirement: ({ credentialRevision }) => ({ credentialRevision, active: false }),\n      decode: ({ moduleId, subject: row, identifier, credential }) =>\n        Effect.gen(function* () {\n          return yield* decode(EmailCredentialSnapshot, {\n            moduleId,\n            identifier: { namespace: identifier.namespace, value: identifier.value },\n            identifierRevision: identifier.revision,\n            verifiedAtMillis: yield* readInstant(identifier.verifiedAt),\n            credentialId: credential.credentialId,\n            credentialRevision: credential.credentialRevision,\n            revision: {\n              subjectId: yield* s.toSubject(row[s.id]),\n              securityRevision: row[s.securityRevision],\n              credentials: [\n                { credentialId: credential.credentialId, revision: credential.credentialRevision },\n              ],\n            },\n          });\n        }),\n    },\n    command: {\n      table: table(\"emailCommands\"),\n      moduleId: \"moduleId\",\n      commandId: \"commandId\",\n      action: \"action\",\n      bindingDigest: \"bindingDigest\",\n      retentionUntil: \"retentionUntil\",\n      encodeInsert: ({ retentionUntilMillis, ...row }) => ({\n        ...row,\n        retentionUntil: instant(retentionUntilMillis),\n      }),\n    },\n  });\n\n  const sessions = <C extends Schema.Codec<unknown, unknown, never, never>>(\n    claims: C,\n  ): StatefulSessionMapping<\n    C[\"Type\"],\n    TableModel,\n    TableModel,\n    TableModel,\n    TableModel,\n    TableModel,\n    unknown,\n    string\n  > => {\n    const record = Schema.fromJsonString(\n      Schema.Struct({\n        ...SessionMetadata.fields,\n        claims: Schema.Unknown,\n        digest: TokenDigest,\n        version: SecurityRevision,\n        provenance: SessionAuthenticationProvenance,\n        credentialVersion: SessionCredentialVersion,\n      }),\n    );\n\n    const encodeRow = (value: StatefulSessionRecord<C[\"Type\"]>) => ({\n      digest: value.digest,\n      version: value.version,\n      securityRevision: value.securityRevision,\n      issuedAt: instant(DateTime.toEpochMillis(value.issuedAt)),\n      expiresAt: instant(DateTime.toEpochMillis(value.expiresAt)),\n      absoluteExpiresAt: instant(DateTime.toEpochMillis(value.absoluteExpiresAt)),\n      record: Schema.encodeSync(record)({\n        ...value,\n        claims: Schema.encodeSync(claims)(value.claims),\n      }),\n    });\n\n    return {\n      ...authority(),\n      isConstraintConflict: () => false,\n      constraints: { sessionDigest: \"unique(session.digest)\", flowId: \"unique(flow.flowId)\" },\n      sessionId: {\n        toNative: (id) => Effect.succeed(id),\n        toSession: (id) => decode(SessionId, id),\n        equals: Object.is,\n      },\n      flow: {\n        table: table(\"sessionFlows\"),\n        flowId: \"flowId\",\n        subjectId: \"subjectId\",\n        state: \"state\",\n        pendingDigest: \"pendingDigest\",\n        dedupUntil: \"dedupUntil\",\n        pendingStateValue: \"pending\",\n        establishedStateValue: \"established\",\n        encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),\n        decodeInstant: (value) => readInstant(value).pipe(Effect.map(DateTime.makeUnsafe)),\n        encodePendingInsert: (row) => ({\n          flowId: row.evidence.flowId,\n          subjectId: row.subjectId,\n          state: \"pending\",\n          pendingDigest: row.pendingDigest,\n          dedupUntil: instant(DateTime.toEpochMillis(row.dedupUntil)),\n        }),\n        encodeEstablishedInsert: (row) => ({\n          flowId: row.evidence.flowId,\n          subjectId: row.subjectId,\n          state: \"established\",\n          pendingDigest: null,\n          dedupUntil: instant(DateTime.toEpochMillis(row.dedupUntil)),\n        }),\n      },\n      session: {\n        table: table(\"sessions\"),\n        sessionId: \"sessionId\",\n        subjectId: \"subjectId\",\n        digest: \"digest\",\n        version: \"version\",\n        securityRevision: \"securityRevision\",\n        issuedAt: \"issuedAt\",\n        expiresAt: \"expiresAt\",\n        absoluteExpiresAt: \"absoluteExpiresAt\",\n        encodeInstant: (date) => instant(DateTime.toEpochMillis(date)),\n        allocateId: allocate,\n        allocateVersion: allocate.pipe(Effect.map(SecurityRevision.make)),\n        encodeInsert: (value, ids) => ({ ...encodeRow(value), ...ids }),\n        encodeRotation: encodeRow,\n        decode: (row) =>\n          Effect.gen(function* () {\n            const saved = yield* decode(record, row.record);\n            const decodedClaims = yield* decode(claims, saved.claims);\n\n            return { ...saved, claims: decodedClaims };\n          }),\n      },\n    };\n  };\n\n  return { table, authority, proofs, passwords, emails, sessions, string };\n});\n"],"mappings":";;;;;;;;;;;;;;AA0CA,MAAM,WAAW,UAAmB,wBAAwB,KAAK;CAAE,WAAW;CAAU;AAAM,CAAC;AAE/F,MAAM,UAAoD,QAAW,UACnE,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,SAAS,OAAO,CAAC;AAEzE,MAAM,UAAU,UAAmB,OAAO,kBAAkB,OAAO,MAAM,CAAC,CAAC,KAAK;AAChF,MAAM,QAAQ,OAAO,WAAW,OAAO,eAAe,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;AAClF,MAAM,cAAc,OAAO,eAAe,YAAY;AACtD,MAAM,cAAc,OAAO,eAAe,mBAAmB;AAE7D,MAAMA,gBAAc,OAAO,OAAO;CAChC,UAAU,OAAO;CACjB,SAAS;CACT,SAAS;CACT,WAAW;CACX,aAAa;CACb,YAAY;CACZ,SAAS;CACT,UAAU,OAAO,OAAO;EAAE,OAAO,OAAO;EAAQ,QAAQ;CAAY,CAAC;CACrE,gBAAgB,OAAO;CACvB,iBAAiB,OAAO;CACxB,SAAS;AACX,CAAC;AAED,MAAM,oBAAoB,OAAO,OAAO;CACtC,UAAU,OAAO;CACjB,SAAS;CACT,gBAAgB;CAChB,QAAQ;CACR,SAAS;CACT,WAAW,OAAO;CAClB,SAAS;CACT,iBAAiB,OAAO;CACxB,SAAS;AACX,CAAC;;;;;;;AAQD,MAAa,eAAe,OAAO,WAAW,WAAW,OAAqB;CAC5E,MAAM,SAAS,OAAO,OAAO;CAE7B,MAAM,WAAW,SAAS,KACxB,OAAO,eAAe,OAAO,QAAQ,MAAM,GAC3C,OAAO,SAAS,OAAO,CACzB;CAEA,MAAM,SAAS,SAAsB;EACnC,MAAM,QAAQ,MAAM,OAAO;EAE3B,IAAI,UAAU,KAAA,GAAW,MAAM,QAAQ,WAAW,KAAK,SAAS;EAEhE,OAAO;CACT;CAEA,MAAM,UAAU,UAAuB;EACrC,OAAO,MAAM,IAAI;EACjB,GAAG,OAAO,YAAY,OAAO,KAAK,cAAc,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;CACzF;CAEA,MAAM,EAAE,UAAU,GAAG,eAAe,SAAS,eAAe,gBAAgB;CAC5E,MAAM,YAAY;EAAE,UAAU,EAAE;EAAU,WAAW,EAAE;EAAW,QAAQ,OAAO;CAAG;CAEpF,MAAM,UAAU;EACd,OAAO,EAAE;EACT,IAAI,EAAE;EACN,QAAQ,EAAE;EACV,kBAAkB,EAAE;EACpB,iBAAiB,UAAmB,OAAO,GAAG,OAAO,EAAE,WAAW;EAClE,qBAAqB,EAAE;EACvB,mBAAmB,EAAE;EACrB,yBAAyB,EAAE;EAC3B,4BAA4B,SAAS,KAAK,OAAO,IAAI,iBAAiB,IAAI,CAAC;CAC7E;CAEA,MAAM,6BAA6B;EACjC,GAAG,OAAO,aAAa;EACvB,WAAW;EACX,cAAc;EACd,UAAU;EACV,QAAQ;EACR,iBAAiB,UAAmB,UAAU;EAC9C,eAAe,SAAiB;GAAE,GAAG;GAAK,QAAQ;EAAK;EACvD,iBAAiB,cAAgC,EAAE,SAAS;CAC9D;CAEA,MAAM,mBAAmB;EAAE;EAAW;EAAS,YAAY,oBAAoB;CAAE;CAEjF,MAAM,gBAAyD;EAC7D,aAAa;EACb,eAAe;EACf,eAAe;EACf,iBAAiB,SAAS,KAAK,OAAO,IAAI,aAAa,IAAI,CAAC;EAC5D,yBAAyB;EACzB,wBAAwB;EACxB,yBAAyB;EACzB,YAAY,EAAE,eAAe;GAC3B,QAAQ,MAAM;IACZ,QAAQ,WAAW;IACnB,QAAQ,WAAW;IACnB,QAAQ,SAAS,eAAe,cAAc,QAAQ,SAAS;GACjE,CAAC;GACD,YAAY,MAAM,CAAC,QAAQ,WAAW,WAAW,QAAQ,WAAW,KAAK,CAAC;GAC1E,SAAS,QAAQ,SAAS,eAAe,cAAc,QAAQ,SAAS;EAC1E;EACA,WAAW;GACT,GAAG,UAAU;GACb,YAAY;IACV,OAAO,MAAM,aAAa;IAC1B,WAAW;IACX,OAAO;IACP,YAAY,SAAS,SACnB,QAAQ,QAAQ,SAAS,eACrB,KAAK,WAAW,IAChB,QAAQ,QAAQ,SAAS,qBACvB,KAAK,WAAW,KACf,KAAK,WAAW,KACf,KAAK,OACF,QACC,OAAO,GAAG,IAAI,WAAW,QAAQ,eAAe,KAChD,IAAI,WAAW,QACf,IAAI,eAAe,IACvB,IACF,KAAK,WAAW,KAChB,KAAK,OACF,QAAQ,OAAO,GAAG,IAAI,WAAW,QAAQ,eAAe,KAAK,IAAI,WAAW,IAC/E;GACV;EACF;EACA,SAAS;GACP,GAAG,OAAO,eAAe;GACzB,UAAU;GACV,WAAW;GACX,aAAa;GACb,SAAS;GACT,SAAS;GACT,OAAO;GACP,WAAW;GACX,gBAAgB;GAChB,eAAe,EAAE,QAAQ,4BAA4B;IACnD,UAAU,OAAO;IACjB,WAAW,OAAO;IAClB,aAAa,OAAO;IACpB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,OAAO,OAAO,SAAS;IACvB,WAAW,QAAQ,OAAO,cAAc;IACxC,gBAAgB,QAAQ,oBAAoB;IAC5C,SAAS,OAAO,WAAW,WAAW,CAAC,CAAC;KACtC,WAAW,OAAO;KAClB,WAAW;MACT,SAAS,OAAO;MAChB,SAAS,OAAO;MAChB,OAAO,OAAO,SAAS;KACzB;IACF,CAAC;GACH;GACA,gBAAgB,QAAQ,OAAO,aAAa,IAAI,OAAO;EACzD;EACA,QAAQ;GACN,GAAG,OAAO,aAAa;GACvB,UAAU;GACV,SAAS;GACT,UAAU;GACV,eAAe;GACf,aAAa;GACb,SAAS;GACT,eAAe,SAAS;IAAE,GAAG;IAAK,eAAe;IAAM,aAAa;GAAK;EAC3E;EACA,YAAY;GACV,GAAG,OAAO,kBAAkB;GAC5B,UAAU;GACV,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;GACX,YAAY;GACZ,SAAS;GACT,eAAe;GACf,gBAAgB;GAChB,UAAU;GACV,WAAW;GACX,SAAS;GACT,OAAO;GACP,WAAW;GACX,eAAe;GACf,cAAc;GACd,eAAe;GACf,SAAS;GACT,qBAAqB;GACrB,gBAAgB;GAChB,eAAe,EACb,QACA,WACA,sBACA,OACA,eACA,cACK;IACL,UAAU,OAAO;IACjB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB;IACA,YAAY,OAAO;IACnB,SAAS,OAAO,WAAW,WAAW,CAAC,CAAC,OAAO,OAAO;IACtD,eAAe,OAAO,SAAS;IAC/B,gBAAgB,OAAO,SAAS;IAChC,UAAU,QAAQ,OAAO,cAAc;IACvC,WAAW,QAAQ,OAAO,eAAe;IACzC,SAAS,OAAO;IAChB;IACA,WAAW;IACX;IACA,cAAc;IACd,eAAe;IACf,SAAS;IACT,qBAAqB,OAAO;IAC5B,gBAAgB,QAAQ,oBAAoB;IAC5C,aAAa,OAAO;GACtB;GACA,gBAAgB,QAAQ,OAAO,aAAa,IAAI,OAAO;GACvD,eAAe,QACb,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,OAAOA,eAAa;KAChC,UAAU,IAAI;KACd,SAAS,IAAI;KACb,SAAS,IAAI;KACb,WAAW,IAAI;KACf,aAAa,IAAI;KACjB,YAAY,IAAI;KAChB,SAAS,OAAO,OAAO,aAAa,IAAI,OAAO;KAC/C,UAAU;MAAE,OAAO,IAAI;MAAe,QAAQ,IAAI;KAAe;KACjE,gBAAgB,OAAO,YAAY,IAAI,QAAQ;KAC/C,iBAAiB,OAAO,YAAY,IAAI,SAAS;KACjD,SAAS,IAAI;IACf,CAAC;GACH,CAAC;EACL;EACA,cAAc;GACZ,GAAG,OAAO,oBAAoB;GAC9B,UAAU;GACV,SAAS;GACT,gBAAgB;GAChB,QAAQ;GACR,SAAS;GACT,WAAW;GACX,SAAS;GACT,WAAW;GACX,UAAU;GACV,SAAS;GACT,gBAAgB;GAChB,eAAe,YAAY;IACzB,GAAG;IACH,SAAS,OAAO,WAAW,WAAW,CAAC,CAAC,OAAO,OAAO;IACtD,WAAW,QAAQ,OAAO,eAAe;IACzC,UAAU;IACV,gBAAgB,QAAQ,OAAO,oBAAoB;GACrD;GACA,SAAS,QACP,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,OAAO,mBAAmB;KACtC,GAAG;KACH,SAAS,OAAO,OAAO,aAAa,IAAI,OAAO;KAC/C,iBAAiB,OAAO,YAAY,IAAI,SAAS;IACnD,CAAC;GACH,CAAC;EACL;EACA,WAAW;GACT,GAAG,OAAO,aAAa;GACvB,UAAU;GACV,SAAS;GACT,QAAQ;GACR,WAAW;GACX,UAAU;GACV,eAAe,SAAS,EAAE,GAAG,IAAI;EACnC;EACA,YAAY;GACV,GAAG,OAAO,YAAY;GACtB,UAAU;GACV,SAAS;GACT,QAAQ;GACR,WAAW;GACX,UAAU;GACV,WAAW;GACX,YAAY;GACZ,gBAAgB;GAChB,eAAe,SAAS;IACtB,GAAG;IACH,YAAY,QAAQ,IAAI,gBAAgB;IACxC,gBAAgB,QAAQ,IAAI,oBAAoB;GAClD;EACF;EACA,cAAc;GACZ,GAAG,OAAO,eAAe;GACzB,UAAU;GACV,SAAS;GACT,WAAW;GACX,WAAW;GACX,YAAY;GACZ,gBAAgB;GAChB,eAAe,SAAS;IACtB,GAAG;IACH,YAAY,QAAQ,IAAI,gBAAgB;IACxC,gBAAgB,QAAQ,IAAI,oBAAoB;GAClD;EACF;EACA,SAAS;GACP,GAAG,OAAO,eAAe;GACzB,UAAU;GACV,WAAW;GACX,MAAM;GACN,UAAU;GACV,gBAAgB;GAChB,eAAe,SAAS;IAAE,GAAG;IAAK,gBAAgB,QAAQ,IAAI,oBAAoB;GAAE;EACtF;CACF;CAEA,MAAM,kBAA8D;EAClE,MAAM,YAAY,iBAAsC;GACtD,UAAU,SAAS,MAAM,YAAY,QAAQ;GAC7C,eAAe,YAAY;EAC7B;EAEA,OAAO;GACL;GACA;GACA,qBAAqB,oBAAoB;GACzC,aAAa;GACb,yBAAyB;GACzB,2BAA2B;GAC3B,YAAY,EAAE,UAAU,QAAQ,YAAY,iBAAiB;IAC3D,QAAQ,MAAM,CAAC,UAAU,MAAM,CAAC;IAChC,YAAY,MAAM,CAAC,WAAW,WAAW,WAAW,KAAK,CAAC;IAC1D,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,UAAU;GAC1D;GACA,eAAe;GACf,eAAe;GACf,mBAAmB,SAAS,KAAK,OAAO,IAAI,kBAAkB,IAAI,CAAC;GACnE,sBAAsB;GACtB,kBAAkB,SAAS,KAAK,OAAO,IAAI,iBAAiB,IAAI,CAAC;GACjE,wBAAwB;GACxB,qBAAqB;GACrB,YAAY;IACV,OAAO,MAAM,aAAa;IAC1B,WAAW;IACX,OAAO;IACP,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,YAAY,QAAQ,IAAI,WAAW;IACnC,sBAAsB,YAAY,WAAW,cAAc;KACzD,GAAG;KACH;KACA;KACA,YAAY;KACZ,QAAQ;IACV;GACF;GACA,YAAY;IACV,GAAG,OAAO,WAAW;IACrB,UAAU;IACV,WAAW;IACX,cAAc;IACd,oBAAoB;IACpB,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,eAAe,EAAE,aAAa,GAAG,WAAW;KAAE,GAAG;KAAK,GAAG,SAAS,WAAW;IAAE;IAC/E,iBAAiB,MAAM,qBAAqB;KAC1C,UAAU,SAAS,MAAM,IAAI;KAC7B;IACF;IACA,oBAAoB,EAAE,aAAa,GAAG,WAAW;KAAE,GAAG;KAAK,GAAG,SAAS,WAAW;IAAE;IACpF,SAAS,EAAE,UAAU,SAAS,KAAK,YAAY,iBAC7C,OAAO,IAAI,aAAa;KACtB,MAAM,KAAK,OAAO,EAAE,UAAU,IAAI,EAAE,GAAG;KACvC,MAAM,OAAO,OAAO,OAAO,qBAAqB,WAAW,QAAQ;KAEnE,OAAO,OAAO,OAAO,4BAA4B;MAC/C;MACA,UAAU;OACR,WAAW;OACX,kBAAkB,IAAI,EAAE;OACxB,aAAa,CACX;QACE,cAAc,WAAW;QACzB,UAAU,WAAW;OACvB,CACF;MACF;MACA,cAAc,WAAW;MACzB,oBAAoB,WAAW;MAC/B,iBAAiB,WAAW;MAC5B,UAAU;MACV,eAAe,WAAW;MAC1B,YAAY,OAAO,OAAO,iBAAiB;OACzC,WAAW,WAAW;OACtB,OAAO,WAAW;MACpB,CAAC;MACD,2BAA2B,WAAW;MACtC,GAAI,WAAW,eAAe,OAC1B,CAAC,IACD,EAAE,4BAA4B,OAAO,YAAY,WAAW,UAAU,EAAE;KAC9E,CAAC;IACH,CAAC;GACL;GACA,SAAS;IACP,GAAG,OAAO,kBAAkB;IAC5B,UAAU;IACV,QAAQ;IACR,WAAW;IACX,qBAAqB;IACrB,iBAAiB;IACjB,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,2BAA2B;IAC3B,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,OAAO;IACP,eAAe,KAAK,EAAE,iBAAiB,aAAa;KAClD,UAAU,IAAI;KACd,QAAQ,IAAI;KACZ,WAAW,IAAI;KACf,qBAAqB,IAAI,WAAW;KACpC,iBAAiB,IAAI,WAAW;KAChC,WAAW,mBAAmB;KAC9B,cAAc,IAAI,gBAAgB;KAClC,kBAAkB,IAAI,oBAAoB;KAC1C,oBAAoB,IAAI,sBAAsB;KAC9C,iBAAiB,IAAI,mBAAmB;KACxC,2BAA2B,IAAI,6BAA6B;KAC5D,YAAY,QAAQ,IAAI,gBAAgB;KACxC,UAAU,QAAQ,IAAI,cAAc;KACpC,gBAAgB,QAAQ,IAAI,oBAAoB;KAChD;IACF;GACF;GACA,WAAW;IACT,GAAG,OAAO,gBAAgB;IAC1B,UAAU;IACV,QAAQ;IACR,WAAW;IACX,UAAU;IACV,eAAe,SAAS,EAAE,GAAG,IAAI;GACnC;GACA,QAAQ;IACN,GAAG,OAAO,iBAAiB;IAC3B,UAAU;IACV,QAAQ;IACR,WAAW;IACX,UAAU;IACV,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,eAAe,SAAS;KACtB,GAAG;KACH,YAAY,QAAQ,IAAI,gBAAgB;KACxC,gBAAgB,QAAQ,IAAI,oBAAoB;IAClD;GACF;GACA,SAAS;IACP,GAAG,OAAO,kBAAkB;IAC5B,UAAU;IACV,WAAW;IACX,QAAQ;IACR,eAAe;IACf,UAAU;IACV,gBAAgB;IAChB,eAAe,SAAS;KAAE,GAAG;KAAK,gBAAgB,QAAQ,IAAI,oBAAoB;IAAE;GACtF;EACF;CACF;CAEA,MAAM,gBAAqD;EACzD;EACA;EACA,aAAa;EACb,oBAAoB;EACpB,mBAAmB;EACnB,eAAe;EACf,eAAe;EACf,sBAAsB;EACtB,kBAAkB,SAAS,KAAK,OAAO,IAAI,iBAAiB,IAAI,CAAC;EACjE,wBAAwB;EACxB,qBAAqB;EACrB,yBAAyB;EACzB,4BAA4B;EAC5B,4BAA4B;EAC5B,qBAAqB;GACnB,GAAG,oBAAoB;GACvB,mBAAmB,cAAc;IAAE;IAAU,QAAQ;GAAK;GAC1D,mBAAmB,cAAc;IAAE;IAAU,QAAQ;GAAM;EAC7D;EACA,YAAY;GACV,OAAO,MAAM,aAAa;GAC1B,WAAW;GACX,OAAO;GACP,WAAW;GACX,YAAY;GACZ,iBAAiB;GACjB,YAAY,QAAQ,IAAI,WAAW,QAAQ,IAAI,eAAe;GAC9D,kBAAkB,QAAQ,IAAI,WAAW,QAAQ,IAAI,eAAe;GACpE,uBAAuB,EAAE,YAAY,WAAW,kBAAkB,uBAAuB;IACvF,GAAG;IACH;IACA,YAAY,QAAQ,gBAAgB;IACpC,UAAU;IACV,QAAQ;GACV;GACA,qBAAqB,EAAE,kBAAkB,uBAAuB;IAC9D,YAAY,QAAQ,gBAAgB;IACpC,UAAU;IACV,QAAQ;GACV;GACA,mBAAmB,EAAE,uBAAuB;IAAE,UAAU;IAAiB,QAAQ;GAAM;EACzF;EACA,YAAY;GACV,OAAO,MAAM,kBAAkB;GAC/B,UAAU;GACV,WAAW;GACX,cAAc;GACd,qBAAqB;GACrB,iBAAiB;GACjB,oBAAoB;GACpB,QAAQ;GACR,iBAAiB,UAAU,UAAU;GACrC,uBAAuB,EAAE,YAAY,GAAG,WAAW;IACjD,GAAG;IACH,qBAAqB,WAAW;IAChC,iBAAiB,WAAW;IAC5B,QAAQ;GACV;GACA,mBAAmB,EAAE,YAAY,0BAA0B;IACzD,qBAAqB,WAAW;IAChC,iBAAiB,WAAW;IAC5B;IACA,QAAQ;GACV;GACA,mBAAmB,EAAE,0BAA0B;IAAE;IAAoB,QAAQ;GAAM;GACnF,SAAS,EAAE,UAAU,SAAS,KAAK,YAAY,iBAC7C,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,OAAO,yBAAyB;KAC5C;KACA,YAAY;MAAE,WAAW,WAAW;MAAW,OAAO,WAAW;KAAM;KACvE,oBAAoB,WAAW;KAC/B,kBAAkB,OAAO,YAAY,WAAW,UAAU;KAC1D,cAAc,WAAW;KACzB,oBAAoB,WAAW;KAC/B,UAAU;MACR,WAAW,OAAO,EAAE,UAAU,IAAI,EAAE,GAAG;MACvC,kBAAkB,IAAI,EAAE;MACxB,aAAa,CACX;OAAE,cAAc,WAAW;OAAc,UAAU,WAAW;MAAmB,CACnF;KACF;IACF,CAAC;GACH,CAAC;EACL;EACA,SAAS;GACP,OAAO,MAAM,eAAe;GAC5B,UAAU;GACV,WAAW;GACX,QAAQ;GACR,eAAe;GACf,gBAAgB;GAChB,eAAe,EAAE,sBAAsB,GAAG,WAAW;IACnD,GAAG;IACH,gBAAgB,QAAQ,oBAAoB;GAC9C;EACF;CACF;CAEA,MAAM,YACJ,WAUG;EACH,MAAM,SAAS,OAAO,eACpB,OAAO,OAAO;GACZ,GAAG,gBAAgB;GACnB,QAAQ,OAAO;GACf,QAAQ;GACR,SAAS;GACT,YAAY;GACZ,mBAAmB;EACrB,CAAC,CACH;EAEA,MAAM,aAAa,WAA6C;GAC9D,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,kBAAkB,MAAM;GACxB,UAAU,QAAQ,SAAS,cAAc,MAAM,QAAQ,CAAC;GACxD,WAAW,QAAQ,SAAS,cAAc,MAAM,SAAS,CAAC;GAC1D,mBAAmB,QAAQ,SAAS,cAAc,MAAM,iBAAiB,CAAC;GAC1E,QAAQ,OAAO,WAAW,MAAM,CAAC,CAAC;IAChC,GAAG;IACH,QAAQ,OAAO,WAAW,MAAM,CAAC,CAAC,MAAM,MAAM;GAChD,CAAC;EACH;EAEA,OAAO;GACL,GAAG,UAAU;GACb,4BAA4B;GAC5B,aAAa;IAAE,eAAe;IAA0B,QAAQ;GAAsB;GACtF,WAAW;IACT,WAAW,OAAO,OAAO,QAAQ,EAAE;IACnC,YAAY,OAAO,OAAO,WAAW,EAAE;IACvC,QAAQ,OAAO;GACjB;GACA,MAAM;IACJ,OAAO,MAAM,cAAc;IAC3B,QAAQ;IACR,WAAW;IACX,OAAO;IACP,eAAe;IACf,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,gBAAgB,SAAS,QAAQ,SAAS,cAAc,IAAI,CAAC;IAC7D,gBAAgB,UAAU,YAAY,KAAK,CAAC,CAAC,KAAK,OAAO,IAAI,SAAS,UAAU,CAAC;IACjF,sBAAsB,SAAS;KAC7B,QAAQ,IAAI,SAAS;KACrB,WAAW,IAAI;KACf,OAAO;KACP,eAAe,IAAI;KACnB,YAAY,QAAQ,SAAS,cAAc,IAAI,UAAU,CAAC;IAC5D;IACA,0BAA0B,SAAS;KACjC,QAAQ,IAAI,SAAS;KACrB,WAAW,IAAI;KACf,OAAO;KACP,eAAe;KACf,YAAY,QAAQ,SAAS,cAAc,IAAI,UAAU,CAAC;IAC5D;GACF;GACA,SAAS;IACP,OAAO,MAAM,UAAU;IACvB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,SAAS;IACT,kBAAkB;IAClB,UAAU;IACV,WAAW;IACX,mBAAmB;IACnB,gBAAgB,SAAS,QAAQ,SAAS,cAAc,IAAI,CAAC;IAC7D,YAAY;IACZ,iBAAiB,SAAS,KAAK,OAAO,IAAI,iBAAiB,IAAI,CAAC;IAChE,eAAe,OAAO,SAAS;KAAE,GAAG,UAAU,KAAK;KAAG,GAAG;IAAI;IAC7D,gBAAgB;IAChB,SAAS,QACP,OAAO,IAAI,aAAa;KACtB,MAAM,QAAQ,OAAO,OAAO,QAAQ,IAAI,MAAM;KAC9C,MAAM,gBAAgB,OAAO,OAAO,QAAQ,MAAM,MAAM;KAExD,OAAO;MAAE,GAAG;MAAO,QAAQ;KAAc;IAC3C,CAAC;GACL;EACF;CACF;CAEA,OAAO;EAAE;EAAO;EAAW;EAAQ;EAAW;EAAQ;EAAU;CAAO;AACzE,CAAC"}

package/dist/internal/storage-validation.d.mts

@@ -11,8 +11,18 @@ export interface PhysicalStorageTable {
     readonly name: string;
   }>>;
 }
-/** Validate physical uniqueness before the first authentication operation. A
- * partial or expression index cannot establish these unconditional guarantees. */
-export declare const validateStorage: (dialect: "mysql" | "pg" | "sqlite", table: PhysicalStorageTable, required: readonly (readonly string[])[]) => Effect.Effect<undefined, PersistenceConfigurationError, SqlClient>;
+/** Share metadata only while constructing one service graph. Captured contexts
+ * cannot reuse it after acquisition succeeds, fails, or is interrupted. */
+export declare const withStorageValidation: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+/** Requirements checked against one physical catalog snapshot. */
+export interface StorageValidation {
+  readonly table: PhysicalStorageTable;
+  readonly required: ReadonlyArray<ReadonlyArray<string>>;
+}
+/** Batch physical metadata reads, reusing only the current acquisition snapshot.
+ * Every requirement is still checked; later acquisitions read fresh metadata. */
+export declare const validateStorageBatch: (dialect: "mysql" | "pg" | "sqlite", requirements: readonly StorageValidation[]) => Effect.Effect<undefined, PersistenceConfigurationError, SqlClient>;
+/** Validate physical columns and unconditional uniqueness before operations run. */
+export declare const validateStorage: (dialect: "pg" | "mysql" | "sqlite", table: PhysicalStorageTable, required: ReadonlyArray<ReadonlyArray<string>>) => Effect.Effect<undefined, PersistenceConfigurationError, SqlClient>;
 //#endregion
 //# sourceMappingURL=storage-validation.d.mts.map