@yielded/auth 0.1.0-beta.1

package/dist/proofs/abuse.mjs

@@ -0,0 +1,12 @@
+import { LoginIdentifier } from "../identity/models.mjs";
+//#region src/proofs/abuse.ts
+const proofAbuseScope = (moduleId, purpose, binding) => Object.freeze({
+	moduleId,
+	purpose,
+	identifier: Object.freeze(LoginIdentifier.make(binding.identifier)),
+	...binding._tag === "Identifier" ? {} : { subjectId: binding.revision.subjectId }
+});
+//#endregion
+export { proofAbuseScope };
+
+//# sourceMappingURL=abuse.mjs.map

package/dist/proofs/abuse.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"abuse.mjs","names":[],"sources":["../../src/proofs/abuse.ts"],"sourcesContent":["import { LoginIdentifier } from \"../identity/models\";\nimport type { SubjectId } from \"../Schema\";\nimport type { ProofBinding, ProofPurpose } from \"./models\";\n\n/** Structured composite keys. Every dimension is independent of flow, context, request, and proof IDs. */\nexport interface ProofAbuseScope {\n  readonly moduleId: string;\n  readonly purpose: ProofPurpose;\n  readonly identifier: LoginIdentifier;\n  readonly subjectId?: SubjectId;\n}\n\nexport const proofAbuseScope = (\n  moduleId: string,\n  purpose: ProofPurpose,\n  binding: ProofBinding,\n): ProofAbuseScope =>\n  Object.freeze({\n    moduleId,\n    purpose,\n    identifier: Object.freeze(LoginIdentifier.make(binding.identifier)),\n    ...(binding._tag === \"Identifier\" ? {} : { subjectId: binding.revision.subjectId }),\n  });\n"],"mappings":";;AAYA,MAAa,mBACX,UACA,SACA,YAEA,OAAO,OAAO;CACZ;CACA;CACA,YAAY,OAAO,OAAO,gBAAgB,KAAK,QAAQ,UAAU,CAAC;CAClE,GAAI,QAAQ,SAAS,eAAe,CAAC,IAAI,EAAE,WAAW,QAAQ,SAAS,UAAU;AACnF,CAAC"}

package/dist/proofs/completion.d.mts

@@ -0,0 +1,22 @@
+import { CommitJournal, PreparedCommit } from "../hooks/commit.mjs";
+import { ProofCompletionDecision } from "./models.mjs";
+import { ProofCompletionInput } from "./ProofPersistence.mjs";
+//#region src/proofs/completion.d.ts
+/** Server-internal plan for method-specific atomic commands. Never serialize this
+ * digest-bearing object. The driver consumes input and performs its protected
+ * mutation under the SAME decision/transaction, then calls prepare before commit.
+ * Report completed only if both continuation CAS and protected write apply; a
+ * zero-row/stale protected write must reject or roll back the same authority.
+ * D1 compiles conditional statements; this API does not run arbitrary callbacks
+ * inside a batch. The callback only projects a precomputed decision, synchronously.
+ * Keep the original action/flow binding stable. Material chosen later needs
+ * separate trusted action authorization, not a rewrite of this proof binding.
+ * Public context must not contain plaintext secrets or guessable secret hashes.
+ */
+interface ProofCompletionPlan {
+  readonly input: ProofCompletionInput;
+  readonly prepare: <A>(decision: ProofCompletionDecision, journal: CommitJournal, project: (decision: ProofCompletionDecision) => A) => PreparedCommit<A>;
+}
+//#endregion
+export { ProofCompletionPlan };
+//# sourceMappingURL=completion.d.mts.map

package/dist/proofs/crypto.d.mts

@@ -0,0 +1,196 @@
+import { LoginIdentifier } from "../identity/models.mjs";
+import { SubtleCrypto } from "../WebCrypto.mjs";
+import { ProofConfigurationError, ProofUnavailable } from "./errors.mjs";
+import { ProofDigest } from "./ProofPersistence.mjs";
+import "../Identity.mjs";
+import { Crypto, Effect, Redacted, Schema } from "effect";
+//#region src/proofs/crypto.d.ts
+declare const ProofSecretPolicy: Schema.Union<readonly [Schema.TaggedStruct<"Token", {}>, Schema.TaggedStruct<"NumericCode", {
+  readonly digits: Schema.Int;
+}>]>;
+type ProofSecretPolicy = typeof ProofSecretPolicy.Type;
+interface ProofKeyring {
+  readonly activeKeyId: string;
+  readonly keys: ReadonlyArray<{
+    readonly id: string;
+    readonly material: Redacted.Redacted<string>;
+  }>;
+}
+declare const validateProofBinding: (input: {
+  readonly _tag: "Identifier";
+  readonly flowId: string;
+  readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+  readonly identifier: LoginIdentifier;
+} | {
+  readonly _tag: "Subject";
+  readonly flowId: string;
+  readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+  readonly revision: {
+    readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+    readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    readonly credentials: readonly {
+      readonly credentialId: string;
+      readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    }[];
+  };
+  readonly identifier: LoginIdentifier;
+} | {
+  readonly _tag: "IdentifierChange";
+  readonly flowId: string;
+  readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+  readonly revision: {
+    readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+    readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    readonly credentials: readonly {
+      readonly credentialId: string;
+      readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    }[];
+  };
+  readonly identifier: LoginIdentifier;
+}) => Effect.Effect<Readonly<{
+  _tag: "Identifier";
+  flowId: string;
+  contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+  identifier: Readonly<LoginIdentifier>;
+}> | Readonly<{
+  _tag: "Subject";
+  flowId: string;
+  contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+  identifier: Readonly<LoginIdentifier>;
+  revision: Readonly<{
+    subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+    securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    credentials: readonly Readonly<{
+      credentialId: string;
+      revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    }>[];
+  }>;
+} | {
+  _tag: "IdentifierChange";
+  flowId: string;
+  contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+  identifier: Readonly<LoginIdentifier>;
+  revision: Readonly<{
+    subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+    securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    credentials: readonly Readonly<{
+      credentialId: string;
+      revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    }>[];
+  }>;
+}>, ProofUnavailable, never>;
+declare const makeProofCrypto: (moduleId: string, purpose: string & import("effect/Brand").Brand<"effect-auth/ProofPurpose">, input: {
+  readonly _tag: "Token";
+} | {
+  readonly _tag: "NumericCode";
+  readonly digits: number;
+}, configuredKeys?: ProofKeyring | undefined) => Effect.Effect<Readonly<{
+  activeKeyId: string;
+  format: "numeric-code" | "token";
+  generate: () => Effect.Effect<Redacted.Redacted<string>, ProofUnavailable, never>;
+  generateOpaque: () => Effect.Effect<Redacted.Redacted<string>, ProofUnavailable, never>;
+  digest: (proofId: string & import("effect/Brand").Brand<"effect-auth/ProofId">, binding: {
+    readonly _tag: "Identifier";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly identifier: LoginIdentifier;
+  } | {
+    readonly _tag: "Subject";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly revision: {
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly credentials: readonly {
+        readonly credentialId: string;
+        readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      }[];
+    };
+    readonly identifier: LoginIdentifier;
+  } | {
+    readonly _tag: "IdentifierChange";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly revision: {
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly credentials: readonly {
+        readonly credentialId: string;
+        readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      }[];
+    };
+    readonly identifier: LoginIdentifier;
+  }, secret: Redacted.Redacted<string>, keyId: string) => Effect.Effect<ProofDigest | undefined, ProofUnavailable, never>;
+  continuationDigest: (id: string, binding: {
+    readonly _tag: "Identifier";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly identifier: LoginIdentifier;
+  } | {
+    readonly _tag: "Subject";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly revision: {
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly credentials: readonly {
+        readonly credentialId: string;
+        readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      }[];
+    };
+    readonly identifier: LoginIdentifier;
+  } | {
+    readonly _tag: "IdentifierChange";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly revision: {
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly credentials: readonly {
+        readonly credentialId: string;
+        readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      }[];
+    };
+    readonly identifier: LoginIdentifier;
+  }, secret: Redacted.Redacted<string>) => Effect.Effect<(string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) | undefined, ProofUnavailable, never>;
+  fingerprint: (binding: {
+    readonly _tag: "Identifier";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly identifier: LoginIdentifier;
+  } | {
+    readonly _tag: "Subject";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly revision: {
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly credentials: readonly {
+        readonly credentialId: string;
+        readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      }[];
+    };
+    readonly identifier: LoginIdentifier;
+  } | {
+    readonly _tag: "IdentifierChange";
+    readonly flowId: string;
+    readonly contextDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+    readonly revision: {
+      readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+      readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly credentials: readonly {
+        readonly credentialId: string;
+        readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      }[];
+    };
+    readonly identifier: LoginIdentifier;
+  }, delivery: {
+    readonly channel: string;
+    readonly vendor: string;
+    readonly template: string;
+    readonly locale: string;
+  }, supersedes?: (string & import("effect/Brand").Brand<"effect-auth/ProofId">) | undefined) => Effect.Effect<string & import("effect/Brand").Brand<"effect-auth/TokenDigest">, ProofUnavailable, never>;
+}>, ProofConfigurationError, Crypto.Crypto | SubtleCrypto>;
+//#endregion
+export { ProofKeyring, ProofSecretPolicy, makeProofCrypto, validateProofBinding };
+//# sourceMappingURL=crypto.d.mts.map

package/dist/proofs/crypto.mjs

@@ -0,0 +1,189 @@
+import { TokenDigest } from "../Schema.mjs";
+import { SubtleCrypto } from "../WebCrypto.mjs";
+import { ProofConfigurationError, ProofUnavailable } from "./errors.mjs";
+import { ProofBinding } from "./models.mjs";
+import { Crypto, Effect, Encoding, Redacted, Result, Schema } from "effect";
+//#region src/proofs/crypto.ts
+const ProofSecretPolicy = Schema.Union([Schema.TaggedStruct("Token", {}), Schema.TaggedStruct("NumericCode", { digits: Schema.Int.check(Schema.isBetween({
+	minimum: 6,
+	maximum: 10
+})) })]);
+const KeyId = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{1,64}$/));
+const Keyring = Schema.Struct({
+	activeKeyId: KeyId,
+	keys: Schema.Array(Schema.Struct({
+		id: KeyId,
+		material: Schema.Redacted(Schema.String)
+	})).check(Schema.isMinLength(1), Schema.isMaxLength(8))
+});
+const OpaqueSecret = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
+const encoder = new TextEncoder();
+/** Versioned fixed tuples: no dynamic object key ordering or delimiter ambiguity. */
+const BindingTuple = Schema.Tuple([
+	Schema.String,
+	Schema.String,
+	Schema.String,
+	Schema.String,
+	Schema.String,
+	Schema.Array(Schema.Tuple([Schema.String, Schema.String])),
+	Schema.String,
+	Schema.String
+]);
+const DigestInput = Schema.fromJsonString(Schema.Tuple([
+	Schema.Literal("effect-auth/proof/v1"),
+	Schema.String,
+	Schema.String,
+	Schema.String,
+	BindingTuple,
+	Schema.String,
+	Schema.String
+]));
+const FingerprintInput = Schema.fromJsonString(Schema.Tuple([
+	Schema.Literal("effect-auth/proof-request/v1"),
+	Schema.String,
+	Schema.String,
+	BindingTuple,
+	Schema.String,
+	Schema.String,
+	Schema.String,
+	Schema.String,
+	Schema.String
+]));
+const bindingTuple = (binding) => {
+	const revision = binding._tag === "Identifier" ? void 0 : binding.revision;
+	return [
+		binding._tag,
+		binding.identifier.namespace,
+		binding.identifier.value,
+		revision?.subjectId ?? "",
+		revision?.securityRevision ?? "",
+		[...revision?.credentials ?? []].map((item) => [item.credentialId, item.revision]).sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0),
+		binding.flowId,
+		binding.contextDigest
+	];
+};
+const validateProofBinding = Effect.fn("validateProofBinding")(function* (input) {
+	const binding = yield* Schema.decodeEffect(ProofBinding)(input).pipe(Effect.mapError(() => ProofUnavailable.make({})));
+	if (binding._tag !== "Identifier") {
+		const ids = /* @__PURE__ */ new Set();
+		for (const credential of binding.revision.credentials) {
+			if (ids.has(credential.credentialId)) return yield* ProofUnavailable.make({});
+			ids.add(credential.credentialId);
+		}
+	}
+	const identifier = Object.freeze(binding.identifier);
+	return binding._tag === "Identifier" ? Object.freeze({
+		...binding,
+		identifier
+	}) : Object.freeze({
+		...binding,
+		identifier,
+		revision: Object.freeze({
+			...binding.revision,
+			credentials: Object.freeze([...binding.revision.credentials].sort((a, b) => a.credentialId < b.credentialId ? -1 : a.credentialId > b.credentialId ? 1 : 0).map((value) => Object.freeze({ ...value })))
+		})
+	});
+});
+const makeProofCrypto = Effect.fn("makeProofCrypto")(function* (moduleId, purpose, input, configuredKeys) {
+	const policy = yield* Schema.decodeEffect(ProofSecretPolicy)(input).pipe(Effect.mapError(() => ProofConfigurationError.make({ reason: "policy" })));
+	const crypto = yield* Crypto.Crypto;
+	const subtle = yield* SubtleCrypto;
+	const keys = /* @__PURE__ */ new Map();
+	let activeKeyId = "token";
+	if (policy._tag === "NumericCode") {
+		if (configuredKeys === void 0) return yield* ProofConfigurationError.make({ reason: "keyring" });
+		const keyring = yield* Schema.decodeEffect(Keyring)(configuredKeys).pipe(Effect.mapError(() => ProofConfigurationError.make({ reason: "keyring" })));
+		for (const entry of keyring.keys) {
+			const material = Result.getOrUndefined(Encoding.decodeBase64Url(Redacted.value(entry.material)));
+			if (entry.id === "token" || keys.has(entry.id) || material === void 0 || material.length < 32) return yield* ProofConfigurationError.make({ reason: "keyring" });
+			const key = yield* Effect.tryPromise({
+				try: () => subtle.importKey("raw", material, {
+					name: "HMAC",
+					hash: "SHA-256"
+				}, false, ["sign"]),
+				catch: () => ProofConfigurationError.make({ reason: "keyring" })
+			});
+			keys.set(entry.id, key);
+		}
+		activeKeyId = keyring.activeKeyId;
+		if (!keys.has(activeKeyId)) return yield* ProofConfigurationError.make({ reason: "keyring" });
+	}
+	const generateOpaque = Effect.fn("ProofCrypto.generateOpaque")(function* () {
+		return Redacted.make(Encoding.encodeBase64Url(yield* crypto.randomBytes(32).pipe(Effect.mapError(() => ProofUnavailable.make({})))));
+	});
+	const generate = Effect.fn("ProofCrypto.generate")(function* () {
+		if (policy._tag === "Token") return yield* generateOpaque();
+		let code = "";
+		for (let batch = 0; batch < 8 && code.length < policy.digits; batch++) for (const byte of yield* crypto.randomBytes(policy.digits * 2).pipe(Effect.mapError(() => ProofUnavailable.make({})))) if (byte < 250 && code.length < policy.digits) code += String(byte % 10);
+		if (code.length !== policy.digits) return yield* ProofUnavailable.make({});
+		return Redacted.make(code);
+	});
+	const digest = Effect.fn("ProofCrypto.digest")(function* (proofId, binding, secret, keyId) {
+		binding = yield* validateProofBinding(binding);
+		const value = Redacted.value(secret);
+		const secretSchema = policy._tag === "Token" ? OpaqueSecret : Schema.String.check(Schema.isPattern(new RegExp(`^[0-9]{${policy.digits}}$`)));
+		if (!Schema.is(secretSchema)(value) || (policy._tag === "Token" ? keyId !== "token" : !keys.has(keyId))) return void 0;
+		const message = yield* Schema.encodeEffect(DigestInput)([
+			"effect-auth/proof/v1",
+			moduleId,
+			purpose,
+			proofId,
+			bindingTuple(binding),
+			keyId,
+			value
+		]).pipe(Effect.mapError(() => ProofUnavailable.make({})));
+		if (encoder.encode(message).byteLength > 16384) return yield* ProofUnavailable.make({});
+		const bytes = policy._tag === "Token" ? yield* crypto.digest("SHA-256", encoder.encode(message)).pipe(Effect.mapError(() => ProofUnavailable.make({}))) : new Uint8Array(yield* Effect.tryPromise({
+			try: () => subtle.sign("HMAC", keys.get(keyId), encoder.encode(message)),
+			catch: () => ProofUnavailable.make({})
+		}));
+		return {
+			keyId,
+			digest: TokenDigest.make(Encoding.encodeBase64Url(bytes))
+		};
+	});
+	const continuationDigest = Effect.fn("ProofCrypto.continuationDigest")(function* (id, binding, secret) {
+		binding = yield* validateProofBinding(binding);
+		if (!Schema.is(OpaqueSecret)(Redacted.value(secret))) return void 0;
+		const message = yield* Schema.encodeEffect(DigestInput)([
+			"effect-auth/proof/v1",
+			moduleId,
+			purpose,
+			id,
+			bindingTuple(binding),
+			"continuation",
+			Redacted.value(secret)
+		]).pipe(Effect.mapError(() => ProofUnavailable.make({})));
+		if (encoder.encode(message).byteLength > 16384) return yield* ProofUnavailable.make({});
+		return TokenDigest.make(Encoding.encodeBase64Url(yield* crypto.digest("SHA-256", encoder.encode(message)).pipe(Effect.mapError(() => ProofUnavailable.make({})))));
+	});
+	const fingerprint = Effect.fn("ProofCrypto.fingerprint")(function* (binding, delivery, supersedes) {
+		binding = yield* validateProofBinding(binding);
+		const message = yield* Schema.encodeEffect(FingerprintInput)([
+			"effect-auth/proof-request/v1",
+			moduleId,
+			purpose,
+			bindingTuple(binding),
+			delivery.channel,
+			delivery.vendor,
+			delivery.template,
+			delivery.locale,
+			supersedes ?? ""
+		]).pipe(Effect.mapError(() => ProofUnavailable.make({})));
+		if (encoder.encode(message).byteLength > 16384) return yield* ProofUnavailable.make({});
+		return TokenDigest.make(Encoding.encodeBase64Url(yield* crypto.digest("SHA-256", encoder.encode(message)).pipe(Effect.mapError(() => ProofUnavailable.make({})))));
+	});
+	return Object.freeze({
+		activeKeyId,
+		format: policy._tag === "Token" ? "token" : "numeric-code",
+		generate,
+		generateOpaque,
+		digest,
+		continuationDigest,
+		fingerprint
+	});
+});
+//#endregion
+export { ProofSecretPolicy, makeProofCrypto, validateProofBinding };
+
+//# sourceMappingURL=crypto.mjs.map

package/dist/proofs/crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.mjs","names":[],"sources":["../../src/proofs/crypto.ts"],"sourcesContent":["import { Crypto, Effect, Encoding, Redacted, Result, Schema } from \"effect\";\n\nimport { TokenDigest } from \"../Schema\";\nimport { SubtleCrypto } from \"../WebCrypto\";\nimport { ProofConfigurationError, ProofUnavailable } from \"./errors\";\nimport { ProofBinding, type ProofId, type ProofPurpose } from \"./models\";\nimport type { ProofDigest } from \"./ProofPersistence\";\n\nexport const ProofSecretPolicy = Schema.Union([\n  Schema.TaggedStruct(\"Token\", {}),\n  Schema.TaggedStruct(\"NumericCode\", {\n    digits: Schema.Int.check(Schema.isBetween({ minimum: 6, maximum: 10 })),\n  }),\n]);\n\nexport type ProofSecretPolicy = typeof ProofSecretPolicy.Type;\n\nexport interface ProofKeyring {\n  readonly activeKeyId: string;\n  readonly keys: ReadonlyArray<{\n    readonly id: string;\n    readonly material: Redacted.Redacted<string>;\n  }>;\n}\n\nconst KeyId = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{1,64}$/));\n\nconst Keyring = Schema.Struct({\n  activeKeyId: KeyId,\n  keys: Schema.Array(Schema.Struct({ id: KeyId, material: Schema.Redacted(Schema.String) })).check(\n    Schema.isMinLength(1),\n    Schema.isMaxLength(8),\n  ),\n});\n\nconst OpaqueSecret = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));\nconst encoder = new TextEncoder();\n\n/** Versioned fixed tuples: no dynamic object key ordering or delimiter ambiguity. */\nconst BindingTuple = Schema.Tuple([\n  Schema.String,\n  Schema.String,\n  Schema.String,\n  Schema.String,\n  Schema.String,\n  Schema.Array(Schema.Tuple([Schema.String, Schema.String])),\n  Schema.String,\n  Schema.String,\n]);\n\nconst DigestInput = Schema.fromJsonString(\n  Schema.Tuple([\n    Schema.Literal(\"effect-auth/proof/v1\"),\n    Schema.String,\n    Schema.String,\n    Schema.String,\n    BindingTuple,\n    Schema.String,\n    Schema.String,\n  ]),\n);\n\nconst FingerprintInput = Schema.fromJsonString(\n  Schema.Tuple([\n    Schema.Literal(\"effect-auth/proof-request/v1\"),\n    Schema.String,\n    Schema.String,\n    BindingTuple,\n    Schema.String,\n    Schema.String,\n    Schema.String,\n    Schema.String,\n    Schema.String,\n  ]),\n);\n\nconst bindingTuple = (binding: ProofBinding): typeof BindingTuple.Type => {\n  const revision = binding._tag === \"Identifier\" ? undefined : binding.revision;\n\n  return [\n    binding._tag,\n    binding.identifier.namespace,\n    binding.identifier.value,\n    revision?.subjectId ?? \"\",\n    revision?.securityRevision ?? \"\",\n    [...(revision?.credentials ?? [])]\n      .map((item) => [item.credentialId, item.revision] as const)\n      .sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0)),\n    binding.flowId,\n    binding.contextDigest,\n  ];\n};\n\nexport const validateProofBinding = Effect.fn(\"validateProofBinding\")(function* (\n  input: ProofBinding,\n) {\n  const binding = yield* Schema.decodeEffect(ProofBinding)(input).pipe(\n    Effect.mapError(() => ProofUnavailable.make({})),\n  );\n\n  if (binding._tag !== \"Identifier\") {\n    const ids = new Set<string>();\n\n    for (const credential of binding.revision.credentials) {\n      if (ids.has(credential.credentialId)) return yield* ProofUnavailable.make({});\n      ids.add(credential.credentialId);\n    }\n  }\n  const identifier = Object.freeze(binding.identifier);\n\n  return binding._tag === \"Identifier\"\n    ? Object.freeze({ ...binding, identifier })\n    : Object.freeze({\n        ...binding,\n        identifier,\n        revision: Object.freeze({\n          ...binding.revision,\n          credentials: Object.freeze(\n            [...binding.revision.credentials]\n              .sort((a, b) =>\n                a.credentialId < b.credentialId ? -1 : a.credentialId > b.credentialId ? 1 : 0,\n              )\n              .map((value) => Object.freeze({ ...value })),\n          ),\n        }),\n      });\n});\n\nexport const makeProofCrypto = Effect.fn(\"makeProofCrypto\")(function* (\n  moduleId: string,\n  purpose: ProofPurpose,\n  input: ProofSecretPolicy,\n  configuredKeys?: ProofKeyring,\n) {\n  const policy = yield* Schema.decodeEffect(ProofSecretPolicy)(input).pipe(\n    Effect.mapError(() => ProofConfigurationError.make({ reason: \"policy\" })),\n  );\n\n  const crypto = yield* Crypto.Crypto;\n  const subtle = yield* SubtleCrypto;\n  const keys = new Map<string, CryptoKey>();\n  let activeKeyId = \"token\";\n\n  if (policy._tag === \"NumericCode\") {\n    if (configuredKeys === undefined)\n      return yield* ProofConfigurationError.make({ reason: \"keyring\" });\n\n    const keyring = yield* Schema.decodeEffect(Keyring)(configuredKeys).pipe(\n      Effect.mapError(() => ProofConfigurationError.make({ reason: \"keyring\" })),\n    );\n\n    for (const entry of keyring.keys) {\n      const material = Result.getOrUndefined(\n        Encoding.decodeBase64Url(Redacted.value(entry.material)),\n      );\n\n      if (\n        entry.id === \"token\" ||\n        keys.has(entry.id) ||\n        material === undefined ||\n        material.length < 32\n      )\n        return yield* ProofConfigurationError.make({ reason: \"keyring\" });\n\n      const key = yield* Effect.tryPromise({\n        try: () =>\n          subtle.importKey(\n            \"raw\",\n            material as BufferSource,\n            { name: \"HMAC\", hash: \"SHA-256\" },\n            false,\n            [\"sign\"],\n          ),\n        catch: () => ProofConfigurationError.make({ reason: \"keyring\" }),\n      });\n\n      keys.set(entry.id, key);\n    }\n    activeKeyId = keyring.activeKeyId;\n    if (!keys.has(activeKeyId)) return yield* ProofConfigurationError.make({ reason: \"keyring\" });\n  }\n\n  const generateOpaque = Effect.fn(\"ProofCrypto.generateOpaque\")(function* () {\n    return Redacted.make(\n      Encoding.encodeBase64Url(\n        yield* crypto.randomBytes(32).pipe(Effect.mapError(() => ProofUnavailable.make({}))),\n      ),\n    );\n  });\n\n  const generate = Effect.fn(\"ProofCrypto.generate\")(function* () {\n    if (policy._tag === \"Token\") return yield* generateOpaque();\n    let code = \"\";\n\n    // Rejection sampling preserves leading zeroes and avoids modulo bias.\n    for (let batch = 0; batch < 8 && code.length < policy.digits; batch++)\n      for (const byte of yield* crypto\n        .randomBytes(policy.digits * 2)\n        .pipe(Effect.mapError(() => ProofUnavailable.make({}))))\n        if (byte < 250 && code.length < policy.digits) code += String(byte % 10);\n    if (code.length !== policy.digits) return yield* ProofUnavailable.make({});\n\n    return Redacted.make(code);\n  });\n\n  const digest = Effect.fn(\"ProofCrypto.digest\")(function* (\n    proofId: ProofId,\n    binding: ProofBinding,\n    secret: Redacted.Redacted<string>,\n    keyId: string,\n  ): Effect.fn.Return<ProofDigest | undefined, ProofUnavailable> {\n    binding = yield* validateProofBinding(binding);\n    const value = Redacted.value(secret);\n\n    const secretSchema =\n      policy._tag === \"Token\"\n        ? OpaqueSecret\n        : Schema.String.check(Schema.isPattern(new RegExp(`^[0-9]{${policy.digits}}$`)));\n\n    if (\n      !Schema.is(secretSchema)(value) ||\n      (policy._tag === \"Token\" ? keyId !== \"token\" : !keys.has(keyId))\n    )\n      return undefined;\n\n    const message = yield* Schema.encodeEffect(DigestInput)([\n      \"effect-auth/proof/v1\",\n      moduleId,\n      purpose,\n      proofId,\n      bindingTuple(binding),\n      keyId,\n      value,\n    ]).pipe(Effect.mapError(() => ProofUnavailable.make({})));\n\n    if (encoder.encode(message).byteLength > 16384) return yield* ProofUnavailable.make({});\n\n    const bytes =\n      policy._tag === \"Token\"\n        ? yield* crypto\n            .digest(\"SHA-256\", encoder.encode(message))\n            .pipe(Effect.mapError(() => ProofUnavailable.make({})))\n        : new Uint8Array(\n            yield* Effect.tryPromise({\n              try: () => subtle.sign(\"HMAC\", keys.get(keyId)!, encoder.encode(message)),\n              catch: () => ProofUnavailable.make({}),\n            }),\n          );\n\n    return { keyId, digest: TokenDigest.make(Encoding.encodeBase64Url(bytes)) };\n  });\n\n  const continuationDigest = Effect.fn(\"ProofCrypto.continuationDigest\")(function* (\n    id: string,\n    binding: ProofBinding,\n    secret: Redacted.Redacted<string>,\n  ) {\n    binding = yield* validateProofBinding(binding);\n    if (!Schema.is(OpaqueSecret)(Redacted.value(secret))) return undefined;\n\n    const message = yield* Schema.encodeEffect(DigestInput)([\n      \"effect-auth/proof/v1\",\n      moduleId,\n      purpose,\n      id,\n      bindingTuple(binding),\n      \"continuation\",\n      Redacted.value(secret),\n    ]).pipe(Effect.mapError(() => ProofUnavailable.make({})));\n\n    if (encoder.encode(message).byteLength > 16384) return yield* ProofUnavailable.make({});\n\n    return TokenDigest.make(\n      Encoding.encodeBase64Url(\n        yield* crypto\n          .digest(\"SHA-256\", encoder.encode(message))\n          .pipe(Effect.mapError(() => ProofUnavailable.make({}))),\n      ),\n    );\n  });\n\n  const fingerprint = Effect.fn(\"ProofCrypto.fingerprint\")(function* (\n    binding: ProofBinding,\n    delivery: {\n      readonly channel: string;\n      readonly vendor: string;\n      readonly template: string;\n      readonly locale: string;\n    },\n    supersedes?: ProofId,\n  ) {\n    binding = yield* validateProofBinding(binding);\n\n    const message = yield* Schema.encodeEffect(FingerprintInput)([\n      \"effect-auth/proof-request/v1\",\n      moduleId,\n      purpose,\n      bindingTuple(binding),\n      delivery.channel,\n      delivery.vendor,\n      delivery.template,\n      delivery.locale,\n      supersedes ?? \"\",\n    ]).pipe(Effect.mapError(() => ProofUnavailable.make({})));\n\n    if (encoder.encode(message).byteLength > 16384) return yield* ProofUnavailable.make({});\n\n    return TokenDigest.make(\n      Encoding.encodeBase64Url(\n        yield* crypto\n          .digest(\"SHA-256\", encoder.encode(message))\n          .pipe(Effect.mapError(() => ProofUnavailable.make({}))),\n      ),\n    );\n  });\n\n  return Object.freeze({\n    activeKeyId,\n    format: policy._tag === \"Token\" ? (\"token\" as const) : (\"numeric-code\" as const),\n    generate,\n    generateOpaque,\n    digest,\n    continuationDigest,\n    fingerprint,\n  });\n});\n"],"mappings":";;;;;;AAQA,MAAa,oBAAoB,OAAO,MAAM,CAC5C,OAAO,aAAa,SAAS,CAAC,CAAC,GAC/B,OAAO,aAAa,eAAe,EACjC,QAAQ,OAAO,IAAI,MAAM,OAAO,UAAU;CAAE,SAAS;CAAG,SAAS;AAAG,CAAC,CAAC,EACxE,CAAC,CACH,CAAC;AAYD,MAAM,QAAQ,OAAO,OAAO,MAAM,OAAO,UAAU,uBAAuB,CAAC;AAE3E,MAAM,UAAU,OAAO,OAAO;CAC5B,aAAa;CACb,MAAM,OAAO,MAAM,OAAO,OAAO;EAAE,IAAI;EAAO,UAAU,OAAO,SAAS,OAAO,MAAM;CAAE,CAAC,CAAC,CAAC,CAAC,MACzF,OAAO,YAAY,CAAC,GACpB,OAAO,YAAY,CAAC,CACtB;AACF,CAAC;AAED,MAAM,eAAe,OAAO,OAAO,MAAM,OAAO,UAAU,qBAAqB,CAAC;AAChF,MAAM,UAAU,IAAI,YAAY;;AAGhC,MAAM,eAAe,OAAO,MAAM;CAChC,OAAO;CACP,OAAO;CACP,OAAO;CACP,OAAO;CACP,OAAO;CACP,OAAO,MAAM,OAAO,MAAM,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC,CAAC;CACzD,OAAO;CACP,OAAO;AACT,CAAC;AAED,MAAM,cAAc,OAAO,eACzB,OAAO,MAAM;CACX,OAAO,QAAQ,sBAAsB;CACrC,OAAO;CACP,OAAO;CACP,OAAO;CACP;CACA,OAAO;CACP,OAAO;AACT,CAAC,CACH;AAEA,MAAM,mBAAmB,OAAO,eAC9B,OAAO,MAAM;CACX,OAAO,QAAQ,8BAA8B;CAC7C,OAAO;CACP,OAAO;CACP;CACA,OAAO;CACP,OAAO;CACP,OAAO;CACP,OAAO;CACP,OAAO;AACT,CAAC,CACH;AAEA,MAAM,gBAAgB,YAAoD;CACxE,MAAM,WAAW,QAAQ,SAAS,eAAe,KAAA,IAAY,QAAQ;CAErE,OAAO;EACL,QAAQ;EACR,QAAQ,WAAW;EACnB,QAAQ,WAAW;EACnB,UAAU,aAAa;EACvB,UAAU,oBAAoB;EAC9B,CAAC,GAAI,UAAU,eAAe,CAAC,CAAE,CAAC,CAC/B,KAAK,SAAS,CAAC,KAAK,cAAc,KAAK,QAAQ,CAAU,CAAC,CAC1D,MAAM,GAAG,MAAO,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,CAAE;EAC1D,QAAQ;EACR,QAAQ;CACV;AACF;AAEA,MAAa,uBAAuB,OAAO,GAAG,sBAAsB,CAAC,CAAC,WACpE,OACA;CACA,MAAM,UAAU,OAAO,OAAO,aAAa,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAC9D,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CACjD;CAEA,IAAI,QAAQ,SAAS,cAAc;EACjC,MAAM,sBAAM,IAAI,IAAY;EAE5B,KAAK,MAAM,cAAc,QAAQ,SAAS,aAAa;GACrD,IAAI,IAAI,IAAI,WAAW,YAAY,GAAG,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;GAC5E,IAAI,IAAI,WAAW,YAAY;EACjC;CACF;CACA,MAAM,aAAa,OAAO,OAAO,QAAQ,UAAU;CAEnD,OAAO,QAAQ,SAAS,eACpB,OAAO,OAAO;EAAE,GAAG;EAAS;CAAW,CAAC,IACxC,OAAO,OAAO;EACZ,GAAG;EACH;EACA,UAAU,OAAO,OAAO;GACtB,GAAG,QAAQ;GACX,aAAa,OAAO,OAClB,CAAC,GAAG,QAAQ,SAAS,WAAW,CAAC,CAC9B,MAAM,GAAG,MACR,EAAE,eAAe,EAAE,eAAe,KAAK,EAAE,eAAe,EAAE,eAAe,IAAI,CAC/E,CAAC,CACA,KAAK,UAAU,OAAO,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAC/C;EACF,CAAC;CACH,CAAC;AACP,CAAC;AAED,MAAa,kBAAkB,OAAO,GAAG,iBAAiB,CAAC,CAAC,WAC1D,UACA,SACA,OACA,gBACA;CACA,MAAM,SAAS,OAAO,OAAO,aAAa,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,KAClE,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,SAAS,CAAC,CAAC,CAC1E;CAEA,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,SAAS,OAAO;CACtB,MAAM,uBAAO,IAAI,IAAuB;CACxC,IAAI,cAAc;CAElB,IAAI,OAAO,SAAS,eAAe;EACjC,IAAI,mBAAmB,KAAA,GACrB,OAAO,OAAO,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;EAElE,MAAM,UAAU,OAAO,OAAO,aAAa,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,KAClE,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CAC3E;EAEA,KAAK,MAAM,SAAS,QAAQ,MAAM;GAChC,MAAM,WAAW,OAAO,eACtB,SAAS,gBAAgB,SAAS,MAAM,MAAM,QAAQ,CAAC,CACzD;GAEA,IACE,MAAM,OAAO,WACb,KAAK,IAAI,MAAM,EAAE,KACjB,aAAa,KAAA,KACb,SAAS,SAAS,IAElB,OAAO,OAAO,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;GAElE,MAAM,MAAM,OAAO,OAAO,WAAW;IACnC,WACE,OAAO,UACL,OACA,UACA;KAAE,MAAM;KAAQ,MAAM;IAAU,GAChC,OACA,CAAC,MAAM,CACT;IACF,aAAa,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;GACjE,CAAC;GAED,KAAK,IAAI,MAAM,IAAI,GAAG;EACxB;EACA,cAAc,QAAQ;EACtB,IAAI,CAAC,KAAK,IAAI,WAAW,GAAG,OAAO,OAAO,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;CAC9F;CAEA,MAAM,iBAAiB,OAAO,GAAG,4BAA4B,CAAC,CAAC,aAAa;EAC1E,OAAO,SAAS,KACd,SAAS,gBACP,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,CACrF,CACF;CACF,CAAC;CAED,MAAM,WAAW,OAAO,GAAG,sBAAsB,CAAC,CAAC,aAAa;EAC9D,IAAI,OAAO,SAAS,SAAS,OAAO,OAAO,eAAe;EAC1D,IAAI,OAAO;EAGX,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,KAAK,SAAS,OAAO,QAAQ,SAC5D,KAAK,MAAM,QAAQ,OAAO,OACvB,YAAY,OAAO,SAAS,CAAC,CAAC,CAC9B,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,GACtD,IAAI,OAAO,OAAO,KAAK,SAAS,OAAO,QAAQ,QAAQ,OAAO,OAAO,EAAE;EAC3E,IAAI,KAAK,WAAW,OAAO,QAAQ,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;EAEzE,OAAO,SAAS,KAAK,IAAI;CAC3B,CAAC;CAED,MAAM,SAAS,OAAO,GAAG,oBAAoB,CAAC,CAAC,WAC7C,SACA,SACA,QACA,OAC6D;EAC7D,UAAU,OAAO,qBAAqB,OAAO;EAC7C,MAAM,QAAQ,SAAS,MAAM,MAAM;EAEnC,MAAM,eACJ,OAAO,SAAS,UACZ,eACA,OAAO,OAAO,MAAM,OAAO,UAAU,IAAI,OAAO,UAAU,OAAO,OAAO,GAAG,CAAC,CAAC;EAEnF,IACE,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,KAAK,MAC7B,OAAO,SAAS,UAAU,UAAU,UAAU,CAAC,KAAK,IAAI,KAAK,IAE9D,OAAO,KAAA;EAET,MAAM,UAAU,OAAO,OAAO,aAAa,WAAW,CAAC,CAAC;GACtD;GACA;GACA;GACA;GACA,aAAa,OAAO;GACpB;GACA;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;EAExD,IAAI,QAAQ,OAAO,OAAO,CAAC,CAAC,aAAa,OAAO,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;EAEtF,MAAM,QACJ,OAAO,SAAS,UACZ,OAAO,OACJ,OAAO,WAAW,QAAQ,OAAO,OAAO,CAAC,CAAC,CAC1C,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,IACxD,IAAI,WACF,OAAO,OAAO,WAAW;GACvB,WAAW,OAAO,KAAK,QAAQ,KAAK,IAAI,KAAK,GAAI,QAAQ,OAAO,OAAO,CAAC;GACxE,aAAa,iBAAiB,KAAK,CAAC,CAAC;EACvC,CAAC,CACH;EAEN,OAAO;GAAE;GAAO,QAAQ,YAAY,KAAK,SAAS,gBAAgB,KAAK,CAAC;EAAE;CAC5E,CAAC;CAED,MAAM,qBAAqB,OAAO,GAAG,gCAAgC,CAAC,CAAC,WACrE,IACA,SACA,QACA;EACA,UAAU,OAAO,qBAAqB,OAAO;EAC7C,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,CAAC,GAAG,OAAO,KAAA;EAE7D,MAAM,UAAU,OAAO,OAAO,aAAa,WAAW,CAAC,CAAC;GACtD;GACA;GACA;GACA;GACA,aAAa,OAAO;GACpB;GACA,SAAS,MAAM,MAAM;EACvB,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;EAExD,IAAI,QAAQ,OAAO,OAAO,CAAC,CAAC,aAAa,OAAO,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;EAEtF,OAAO,YAAY,KACjB,SAAS,gBACP,OAAO,OACJ,OAAO,WAAW,QAAQ,OAAO,OAAO,CAAC,CAAC,CAC1C,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,CAC1D,CACF;CACF,CAAC;CAED,MAAM,cAAc,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACvD,SACA,UAMA,YACA;EACA,UAAU,OAAO,qBAAqB,OAAO;EAE7C,MAAM,UAAU,OAAO,OAAO,aAAa,gBAAgB,CAAC,CAAC;GAC3D;GACA;GACA;GACA,aAAa,OAAO;GACpB,SAAS;GACT,SAAS;GACT,SAAS;GACT,SAAS;GACT,cAAc;EAChB,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;EAExD,IAAI,QAAQ,OAAO,OAAO,CAAC,CAAC,aAAa,OAAO,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;EAEtF,OAAO,YAAY,KACjB,SAAS,gBACP,OAAO,OACJ,OAAO,WAAW,QAAQ,OAAO,OAAO,CAAC,CAAC,CAC1C,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,CAC1D,CACF;CACF,CAAC;CAED,OAAO,OAAO,OAAO;EACnB;EACA,QAAQ,OAAO,SAAS,UAAW,UAAqB;EACxD;EACA;EACA;EACA;EACA;CACF,CAAC;AACH,CAAC"}