@yielded/auth 0.1.0-beta.1

package/dist/proofs/module.mjs

@@ -0,0 +1,350 @@
+import { HookDenied, LifecycleEventId, lifecycleEvent, lifecycleSnapshot } from "../hooks/models.mjs";
+import { makeOperation, operationGroup } from "../operations/operation.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { hasCommitScope } from "../hooks/commit.mjs";
+import { ProofCapabilityUnsupported, ProofConfigurationError, ProofError, ProofInvalid, ProofUnavailable } from "./errors.mjs";
+import { ProofCleanupResult, ProofContinuation, ProofContinuationId, ProofDeliveryId, ProofId, ProofPurpose, ProofReference, ProofRequestId, ProofRequestReceipt, ProofVersion } from "./models.mjs";
+import { ProofPersistence } from "./ProofPersistence.mjs";
+import { EmailProofDelivery } from "./EmailProofDelivery.mjs";
+import { makeProofDispatch, readProofCommit } from "./dispatch.mjs";
+import { validateProofPolicy } from "./policy.mjs";
+import { makeProofCrypto, validateProofBinding } from "./crypto.mjs";
+import { SmsProofDelivery } from "./SmsProofDelivery.mjs";
+import { Context, DateTime, Effect, Layer, Redacted, Schema } from "effect";
+//#region src/proofs/module.ts
+const Locale = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(64));
+const Credential = Schema.RedactedFromValue(Schema.String.check(Schema.isMaxLength(4096)));
+const noAmbient = Effect.fn("Proofs.noAmbient")(function* () {
+	if (yield* hasCommitScope) return yield* ProofCapabilityUnsupported.make({});
+});
+/** Snapshot owned configuration data without evaluating application codecs or validating it. */
+const snapshotProofConfiguration = (input) => Object.freeze({
+	...input,
+	secret: Object.freeze({ ...input.secret }),
+	policy: Object.freeze({
+		...input.policy,
+		abuse: Object.freeze({
+			...input.policy?.abuse,
+			issues: Object.freeze({ ...input.policy?.abuse?.issues }),
+			attempts: Object.freeze({ ...input.policy?.abuse?.attempts }),
+			subjectIssues: Object.freeze({ ...input.policy?.abuse?.subjectIssues }),
+			subjectAttempts: Object.freeze({ ...input.policy?.abuse?.subjectAttempts }),
+			actionIssues: Object.freeze({ ...input.policy?.abuse?.actionIssues }),
+			actionAttempts: Object.freeze({ ...input.policy?.abuse?.actionAttempts })
+		})
+	}),
+	keys: input.keys === void 0 ? void 0 : Object.freeze({
+		...input.keys,
+		keys: Object.freeze((Array.isArray(input.keys?.keys) ? input.keys.keys : []).map((entry) => Object.freeze({ ...entry })))
+	})
+});
+/** Each module has one fixed purpose and a schema that makes required binding fields mandatory.
+* Consumer codec extensions are not implicit authority: bind every extra relevant
+* field into contextDigest. Canonical proof bytes include only the declared core binding.
+*/
+const makeProofModule = (moduleId, input) => {
+	const options = snapshotProofConfiguration(input);
+	const BindingCodec = options.binding;
+	const RequestInput = Schema.Struct({
+		requestId: ProofRequestId,
+		binding: BindingCodec,
+		locale: Locale,
+		eligible: Schema.Boolean
+	});
+	const ResendInput = Schema.Struct({
+		...RequestInput.fields,
+		supersedes: ProofId
+	});
+	const AttemptInput = Schema.Struct({
+		reference: ProofReference,
+		binding: BindingCodec,
+		credential: Credential
+	});
+	const CompleteInput = Schema.Struct({
+		continuationId: ProofContinuationId,
+		binding: BindingCodec,
+		credential: Credential
+	});
+	const Accepted = Schema.TaggedStruct("Accepted", { continuation: ProofContinuation });
+	const Proofs = Context.Service(`effect-auth/proofs/${moduleId}`);
+	const makeLayer = (deliveryKey, channel) => Layer.effect(Proofs, Effect.gen(function* () {
+		yield* Schema.decodeEffect(ProofPurpose)(options.purpose).pipe(Effect.mapError(() => ProofConfigurationError.make({ reason: "binding" })));
+		if (channel !== options.channel || !Schema.is(Schema.NonEmptyString.check(Schema.isMaxLength(256)))(moduleId) || !Schema.is(Schema.NonEmptyString.check(Schema.isMaxLength(128)))(options.template)) return yield* ProofConfigurationError.make({ reason: "delivery" });
+		const policy = yield* validateProofPolicy(options.policy);
+		const delivery = yield* deliveryKey;
+		if (policy.maximumDeliveryAttempts > 1 && delivery.vendor.idempotencyMillis < policy.lifetimeMillis) return yield* ProofConfigurationError.make({ reason: "delivery" });
+		const crypto = yield* makeProofCrypto(moduleId, options.purpose, options.secret, options.keys);
+		const store = yield* ProofPersistence;
+		const dispatchServices = Context.make(ProofPersistence, store).pipe(Context.add(deliveryKey, delivery));
+		const hooks = yield* LifecycleHooks;
+		const services = yield* Effect.context();
+		const bindingCodec = Schema.toCodecIso(BindingCodec);
+		const projectBinding = (value) => Schema.encodeEffect(bindingCodec)(value).pipe(Effect.flatMap(Schema.decodeEffect(bindingCodec)), Effect.provide(services), Effect.flatMap(validateProofBinding), Effect.mapError(() => ProofInvalid.make({})));
+		const eventFor = Effect.fn("Proofs.eventFor")(function* (action, binding) {
+			const snapshot = lifecycleSnapshot({
+				action,
+				operation: `${moduleId}/${action}`,
+				identifiers: [binding.identifier],
+				...binding._tag === "Identifier" ? {} : { subjectId: binding.revision.subjectId }
+			});
+			yield* hooks.before(snapshot);
+			return lifecycleEvent({
+				id: LifecycleEventId.make(Redacted.value(yield* crypto.generateOpaque())),
+				occurredAtMillis: DateTime.toEpochMillis(yield* DateTime.now),
+				snapshot
+			});
+		});
+		const planIssue = Effect.fn("Proofs.planIssue")(function* (request) {
+			const binding = yield* projectBinding(request.binding);
+			const eligible = yield* Schema.decodeEffect(Schema.Boolean)(request.eligible).pipe(Effect.mapError(() => ProofInvalid.make({})));
+			const supersedes = request.supersedes;
+			const locale = yield* Schema.decodeEffect(Locale)(request.locale).pipe(Effect.mapError(() => ProofInvalid.make({})));
+			const requestId = yield* Schema.decodeEffect(ProofRequestId)(request.requestId).pipe(Effect.mapError(() => ProofInvalid.make({})));
+			const fingerprint = yield* crypto.fingerprint(binding, {
+				channel: options.channel,
+				vendor: delivery.vendor.vendorId,
+				template: options.template,
+				locale
+			}, supersedes);
+			const proofId = ProofId.make(Redacted.value(yield* crypto.generateOpaque()));
+			const reference = {
+				proofId,
+				purpose: options.purpose,
+				keyId: crypto.activeKeyId
+			};
+			const before = yield* eventFor("proof-request", binding).pipe(Effect.result);
+			if (before._tag === "Failure" && (before.failure._tag !== "HookDenied" || before.failure.reason === "unavailable")) return yield* ProofUnavailable.make({});
+			const secret = yield* crypto.generate();
+			const verifier = yield* crypto.digest(proofId, binding, secret, crypto.activeKeyId);
+			if (verifier === void 0) return yield* ProofUnavailable.make({});
+			const issuedAtMillis = DateTime.toEpochMillis(yield* DateTime.now);
+			const record = {
+				moduleId,
+				purpose: options.purpose,
+				proofId,
+				requestId,
+				fingerprint,
+				deliveryId: ProofDeliveryId.make(proofId),
+				binding,
+				verifier,
+				issuedAtMillis,
+				expiresAtMillis: issuedAtMillis + policy.lifetimeMillis,
+				version: ProofVersion.make(Redacted.value(yield* crypto.generateOpaque()))
+			};
+			const message = {
+				deliveryId: record.deliveryId,
+				purpose: options.purpose,
+				reference,
+				recipient: binding.identifier,
+				secret,
+				format: crypto.format,
+				expiresAtMillis: record.expiresAtMillis,
+				template: options.template,
+				locale
+			};
+			return { commit: store.issue({
+				record,
+				policy,
+				eligible: eligible && before._tag === "Success",
+				supersedes
+			}, (decision, journal) => {
+				if (decision._tag !== "Issued") return journal.prepare({
+					receipt: decision.receipt,
+					dispatch: Effect.succeed("not-dispatched")
+				});
+				if (decision.record.proofId !== record.proofId || decision.record.verifier.digest !== record.verifier.digest || decision.record.verifier.keyId !== record.verifier.keyId || decision.record.version !== record.version || decision.record.fingerprint !== record.fingerprint) throw ProofUnavailable.make({});
+				if (before._tag !== "Success") throw ProofUnavailable.make({});
+				journal.stage(before.success);
+				const prepared = makeProofDispatch(deliveryKey, record, message, policy);
+				return journal.prepare(Object.freeze({
+					...prepared,
+					dispatch: prepared.dispatch.pipe(Effect.provide(dispatchServices))
+				}));
+			}) };
+		});
+		const planComplete = Effect.fn("Proofs.planComplete")(function* (request) {
+			const binding = yield* projectBinding(request.binding);
+			const event = yield* eventFor("proof-completion", binding);
+			const digest = yield* crypto.continuationDigest(request.continuationId, binding, request.credential);
+			if (digest === void 0) return yield* ProofInvalid.make({});
+			return Object.freeze({
+				input: Object.freeze({
+					moduleId,
+					purpose: options.purpose,
+					continuationId: request.continuationId,
+					continuationDigest: digest,
+					binding,
+					nowMillis: DateTime.toEpochMillis(yield* DateTime.now)
+				}),
+				prepare: (decision, journal, project) => {
+					const value = project(decision);
+					if (decision === "completed") journal.stage(event);
+					return journal.prepare(value);
+				}
+			});
+		});
+		return Proofs.of({
+			planIssue,
+			prepareIssue: (request) => planIssue(request).pipe(Effect.flatMap((plan) => plan.commit)),
+			prepareAttempt: Effect.fn("Proofs.prepareAttempt")(function* (request) {
+				const binding = yield* projectBinding(request.binding);
+				const event = yield* eventFor("proof-verification", binding);
+				const candidate = request.reference.purpose === options.purpose ? yield* crypto.digest(request.reference.proofId, binding, request.credential, request.reference.keyId) : void 0;
+				const credential = yield* crypto.generateOpaque();
+				const continuationId = ProofContinuationId.make(Redacted.value(yield* crypto.generateOpaque()));
+				const continuationDigest = yield* crypto.continuationDigest(continuationId, binding, credential);
+				if (continuationDigest === void 0) return yield* ProofUnavailable.make({});
+				return yield* store.attempt({
+					moduleId,
+					purpose: options.purpose,
+					proofId: request.reference.proofId,
+					binding,
+					candidate,
+					continuationId,
+					continuationDigest,
+					nowMillis: DateTime.toEpochMillis(yield* DateTime.now),
+					policy
+				}, (decision, journal) => {
+					if (decision._tag === "Rejected") return journal.prepare({
+						value: decision,
+						credentialCommands: []
+					});
+					if (decision.continuation.continuationId !== continuationId || decision.continuation.purpose !== options.purpose) throw ProofUnavailable.make({});
+					journal.stage(event);
+					return journal.prepare({
+						value: decision,
+						credentialCommands: [{
+							_tag: "Issue",
+							slot: "proof-continuation",
+							credential,
+							expiresAtMillis: decision.continuation.expiresAtMillis
+						}]
+					});
+				});
+			}),
+			planComplete,
+			prepareComplete: (request) => planComplete(request).pipe(Effect.flatMap((plan) => store.complete(plan.input, (decision, journal) => plan.prepare(decision, journal, (value) => value)))),
+			cancel: Effect.fn("Proofs.cancel")(function* (input) {
+				const binding = yield* projectBinding(input);
+				return yield* store.cancel({
+					moduleId,
+					purpose: options.purpose,
+					binding,
+					nowMillis: DateTime.toEpochMillis(yield* DateTime.now)
+				}, (_, journal) => journal.prepare(void 0));
+			}),
+			cleanup: Effect.fn("Proofs.cleanup")(function* (limit) {
+				yield* Schema.decodeEffect(Schema.Int.check(Schema.isBetween({
+					minimum: 1,
+					maximum: 1e3
+				})))(limit).pipe(Effect.mapError(() => ProofInvalid.make({})));
+				return yield* store.cleanup({
+					moduleId,
+					nowMillis: DateTime.toEpochMillis(yield* DateTime.now),
+					limit
+				}, (decision, journal) => journal.prepare(decision));
+			})
+		});
+	}));
+	const emailLayer = makeLayer(EmailProofDelivery, "email");
+	const smsLayer = makeLayer(SmsProofDelivery, "sms");
+	const errors = Schema.Union([ProofError, HookDenied]);
+	const Request = makeOperation(`${moduleId}/request`, {
+		payload: RequestInput,
+		success: ProofRequestReceipt,
+		error: errors,
+		access: "system",
+		replay: "idempotent"
+	});
+	const Resend = makeOperation(`${moduleId}/resend`, {
+		payload: ResendInput,
+		success: ProofRequestReceipt,
+		error: errors,
+		access: "system",
+		replay: "idempotent"
+	});
+	const Attempt = makeOperation(`${moduleId}/attempt`, {
+		payload: AttemptInput,
+		success: Accepted,
+		error: errors,
+		access: "system",
+		replay: "single-use",
+		credentials: true
+	});
+	const Complete = makeOperation(`${moduleId}/complete`, {
+		payload: CompleteInput,
+		success: Schema.Void,
+		error: errors,
+		access: "system",
+		replay: "single-use",
+		credentials: true
+	});
+	const Cancel = makeOperation(`${moduleId}/cancel`, {
+		payload: Schema.Struct({ binding: BindingCodec }),
+		success: Schema.Void,
+		error: errors,
+		access: "system",
+		replay: "idempotent"
+	});
+	const Cleanup = makeOperation(`${moduleId}/cleanup`, {
+		payload: Schema.Struct({ limit: Schema.Int.check(Schema.isBetween({
+			minimum: 1,
+			maximum: 1e3
+		})) }),
+		success: ProofCleanupResult,
+		error: errors,
+		access: "system",
+		replay: "idempotent"
+	});
+	const requestHandler = Effect.fn("ProofOperation.request")(function* (input) {
+		yield* noAmbient();
+		const dispatch = yield* readProofCommit(yield* (yield* Proofs).prepareIssue(input));
+		yield* dispatch.dispatch;
+		return dispatch.receipt;
+	});
+	const handlersLayer = Layer.mergeAll(Request.handlerLayer(requestHandler), Resend.handlerLayer(requestHandler), Attempt.credentialHandlerLayer(Effect.fn("ProofOperation.attempt")(function* (input) {
+		yield* noAmbient();
+		const result = yield* readProofCommit(yield* (yield* Proofs).prepareAttempt(input));
+		if (result.value._tag === "Rejected") return yield* ProofInvalid.make({});
+		return {
+			value: result.value,
+			credentialCommands: result.credentialCommands
+		};
+	})), Complete.credentialHandlerLayer(Effect.fn("ProofOperation.complete")(function* (input) {
+		yield* noAmbient();
+		if ((yield* readProofCommit(yield* (yield* Proofs).prepareComplete(input))) === "rejected") return yield* ProofInvalid.make({});
+		return {
+			value: void 0,
+			credentialCommands: [{
+				_tag: "Clear",
+				slot: "proof-continuation"
+			}]
+		};
+	})), Cancel.handlerLayer(Effect.fn("ProofOperation.cancel")(function* (input) {
+		yield* noAmbient();
+		return yield* readProofCommit(yield* (yield* Proofs).cancel(input.binding));
+	})), Cleanup.handlerLayer(Effect.fn("ProofOperation.cleanup")(function* (input) {
+		yield* noAmbient();
+		return yield* readProofCommit(yield* (yield* Proofs).cleanup(input.limit));
+	})));
+	const operations = {
+		Request,
+		Resend,
+		Attempt,
+		Complete,
+		Cancel,
+		Cleanup
+	};
+	return Object.freeze({
+		Proofs,
+		emailLayer,
+		smsLayer,
+		handlersLayer,
+		operations,
+		group: operationGroup(...Object.values(operations))
+	});
+};
+//#endregion
+export { makeProofModule, snapshotProofConfiguration };
+
+//# sourceMappingURL=module.mjs.map

package/dist/proofs/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":[],"sources":["../../src/proofs/module.ts"],"sourcesContent":["import { Context, DateTime, Effect, Layer, Redacted, Schema, type Types } from \"effect\";\n\nimport { hasCommitScope, type PreparedCommit } from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport {\n  HookDenied,\n  LifecycleEventId,\n  type LifecycleAction,\n  lifecycleEvent,\n  lifecycleSnapshot,\n} from \"../hooks/models\";\nimport type { AuthOperationResult } from \"../operations/credentials\";\nimport { makeOperation, operationGroup } from \"../operations/operation\";\nimport type { ProofCompletionPlan } from \"./completion\";\nimport {\n  makeProofCrypto,\n  type ProofKeyring,\n  type ProofSecretPolicy,\n  validateProofBinding,\n} from \"./crypto\";\nimport type { ProofDelivery } from \"./delivery\";\nimport {\n  type PreparedProofDispatch,\n  type ProofIssuePlan,\n  makeProofDispatch,\n  readProofCommit,\n} from \"./dispatch\";\nimport { EmailProofDelivery } from \"./EmailProofDelivery\";\nimport {\n  ProofCapabilityUnsupported,\n  ProofConfigurationError,\n  ProofError,\n  ProofInvalid,\n  ProofUnavailable,\n} from \"./errors\";\nimport {\n  type ProofCompletionDecision,\n  type ProofBinding,\n  ProofCleanupResult,\n  ProofContinuation,\n  ProofContinuationId,\n  ProofDeliveryId,\n  ProofId,\n  ProofPurpose,\n  ProofReference,\n  ProofRequestId,\n  ProofRequestReceipt,\n  ProofVersion,\n} from \"./models\";\nimport { type ProofPolicy, validateProofPolicy } from \"./policy\";\nimport { ProofPersistence, type ProofRecord } from \"./ProofPersistence\";\nimport { SmsProofDelivery } from \"./SmsProofDelivery\";\n\nexport interface ProofModule<Id extends string, Binding> {\n  readonly moduleId: Id;\n  readonly _tag: \"effect-auth/ProofModule\";\n  readonly binding: Types.Invariant<Binding>;\n}\n\nconst Locale = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(64));\nconst Credential = Schema.RedactedFromValue(Schema.String.check(Schema.isMaxLength(4096)));\n\nconst noAmbient = Effect.fn(\"Proofs.noAmbient\")(function* () {\n  if (yield* hasCommitScope) return yield* ProofCapabilityUnsupported.make({});\n});\n\n/** Snapshot owned configuration data without evaluating application codecs or validating it. */\nexport const snapshotProofConfiguration = <\n  Configuration extends {\n    readonly secret: ProofSecretPolicy;\n    readonly policy: ProofPolicy;\n    readonly keys?: ProofKeyring;\n  },\n>(\n  input: Configuration,\n) =>\n  Object.freeze({\n    ...input,\n    secret: Object.freeze({ ...input.secret }),\n    policy: Object.freeze({\n      ...input.policy,\n      abuse: Object.freeze({\n        ...input.policy?.abuse,\n        issues: Object.freeze({ ...input.policy?.abuse?.issues }),\n        attempts: Object.freeze({ ...input.policy?.abuse?.attempts }),\n        subjectIssues: Object.freeze({ ...input.policy?.abuse?.subjectIssues }),\n        subjectAttempts: Object.freeze({ ...input.policy?.abuse?.subjectAttempts }),\n        actionIssues: Object.freeze({ ...input.policy?.abuse?.actionIssues }),\n        actionAttempts: Object.freeze({ ...input.policy?.abuse?.actionAttempts }),\n      }),\n    }),\n    keys:\n      input.keys === undefined\n        ? undefined\n        : Object.freeze({\n            ...input.keys,\n            keys: Object.freeze(\n              (Array.isArray(input.keys?.keys) ? input.keys.keys : []).map((entry) =>\n                Object.freeze({ ...entry }),\n              ),\n            ),\n          }),\n  });\n\n/** Each module has one fixed purpose and a schema that makes required binding fields mandatory.\n * Consumer codec extensions are not implicit authority: bind every extra relevant\n * field into contextDigest. Canonical proof bytes include only the declared core binding.\n */\nexport const makeProofModule = <\n  const Id extends string,\n  Binding extends Schema.Codec<ProofBinding, unknown, unknown, unknown>,\n>(\n  moduleId: Id,\n  input: {\n    readonly purpose: ProofPurpose;\n    readonly binding: Binding;\n    readonly channel: \"email\" | \"sms\";\n    readonly template: string;\n    readonly secret: ProofSecretPolicy;\n    readonly policy: ProofPolicy;\n    readonly keys?: ProofKeyring;\n  },\n) => {\n  const options = snapshotProofConfiguration(input);\n\n  const BindingCodec: Schema.Codec<\n    Binding[\"Type\"],\n    Binding[\"Encoded\"],\n    Binding[\"DecodingServices\"],\n    Binding[\"EncodingServices\"]\n  > = options.binding;\n\n  type BindingValue = Binding[\"Type\"];\n\n  const RequestInput = Schema.Struct({\n    requestId: ProofRequestId,\n    binding: BindingCodec,\n    locale: Locale,\n    eligible: Schema.Boolean,\n  });\n\n  const ResendInput = Schema.Struct({ ...RequestInput.fields, supersedes: ProofId });\n\n  const AttemptInput = Schema.Struct({\n    reference: ProofReference,\n    binding: BindingCodec,\n    credential: Credential,\n  });\n\n  const CompleteInput = Schema.Struct({\n    continuationId: ProofContinuationId,\n    binding: BindingCodec,\n    credential: Credential,\n  });\n\n  const Accepted = Schema.TaggedStruct(\"Accepted\", { continuation: ProofContinuation });\n\n  type Accepted = typeof Accepted.Type;\n  type IssueInput = typeof RequestInput.Type & { readonly supersedes?: ProofId };\n  type PrivateAttempt =\n    | AuthOperationResult<Accepted>\n    | { readonly value: { readonly _tag: \"Rejected\" }; readonly credentialCommands: readonly [] };\n  type Failure = ProofError | HookDenied;\n  type Service = {\n    readonly planIssue: (input: IssueInput) => Effect.Effect<ProofIssuePlan, Failure>;\n    readonly prepareIssue: (\n      input: IssueInput,\n    ) => Effect.Effect<PreparedCommit<PreparedProofDispatch>, Failure>;\n    readonly prepareAttempt: (\n      input: typeof AttemptInput.Type,\n    ) => Effect.Effect<PreparedCommit<PrivateAttempt>, Failure>;\n    readonly planComplete: (\n      input: typeof CompleteInput.Type,\n    ) => Effect.Effect<ProofCompletionPlan, Failure>;\n    readonly prepareComplete: (\n      input: typeof CompleteInput.Type,\n    ) => Effect.Effect<PreparedCommit<ProofCompletionDecision>, Failure>;\n    readonly cancel: (binding: BindingValue) => Effect.Effect<PreparedCommit<void>, Failure>;\n    readonly cleanup: (limit: number) => Effect.Effect<PreparedCommit<ProofCleanupResult>, Failure>;\n  };\n\n  const Proofs = Context.Service<ProofModule<Id, BindingValue>, Service>(\n    `effect-auth/proofs/${moduleId}`,\n  );\n\n  const makeLayer = <DeliveryId>(\n    deliveryKey: Context.Key<DeliveryId, ProofDelivery>,\n    channel: \"email\" | \"sms\",\n  ) =>\n    Layer.effect(\n      Proofs,\n      Effect.gen(function* () {\n        yield* Schema.decodeEffect(ProofPurpose)(options.purpose).pipe(\n          Effect.mapError(() => ProofConfigurationError.make({ reason: \"binding\" })),\n        );\n        if (\n          channel !== options.channel ||\n          !Schema.is(Schema.NonEmptyString.check(Schema.isMaxLength(256)))(moduleId) ||\n          !Schema.is(Schema.NonEmptyString.check(Schema.isMaxLength(128)))(options.template)\n        )\n          return yield* ProofConfigurationError.make({ reason: \"delivery\" });\n        const policy = yield* validateProofPolicy(options.policy);\n        const delivery = yield* deliveryKey;\n\n        if (\n          policy.maximumDeliveryAttempts > 1 &&\n          delivery.vendor.idempotencyMillis < policy.lifetimeMillis\n        )\n          return yield* ProofConfigurationError.make({ reason: \"delivery\" });\n\n        const crypto = yield* makeProofCrypto(\n          moduleId,\n          options.purpose,\n          options.secret,\n          options.keys,\n        );\n\n        const store = yield* ProofPersistence;\n\n        // Bind only owned services; dispatch still observes its execution-time commit scope.\n        const dispatchServices = Context.make(ProofPersistence, store).pipe(\n          Context.add(deliveryKey, delivery),\n        );\n\n        const hooks = yield* LifecycleHooks;\n\n        const services = yield* Effect.context<\n          Binding[\"DecodingServices\"] | Binding[\"EncodingServices\"]\n        >();\n\n        const bindingCodec = Schema.toCodecIso(BindingCodec);\n\n        const projectBinding = (value: BindingValue) =>\n          Schema.encodeEffect(bindingCodec)(value).pipe(\n            Effect.flatMap(Schema.decodeEffect(bindingCodec)),\n            Effect.provide(services),\n            Effect.flatMap(validateProofBinding),\n            Effect.mapError(() => ProofInvalid.make({})),\n          );\n\n        const eventFor = Effect.fn(\"Proofs.eventFor\")(function* (\n          action: LifecycleAction,\n          binding: ProofBinding,\n        ) {\n          const snapshot = lifecycleSnapshot({\n            action,\n            operation: `${moduleId}/${action}`,\n            identifiers: [binding.identifier],\n            ...(binding._tag === \"Identifier\" ? {} : { subjectId: binding.revision.subjectId }),\n          });\n\n          yield* hooks.before(snapshot);\n\n          return lifecycleEvent({\n            id: LifecycleEventId.make(Redacted.value(yield* crypto.generateOpaque())),\n            occurredAtMillis: DateTime.toEpochMillis(yield* DateTime.now),\n            snapshot,\n          });\n        });\n\n        const planIssue = Effect.fn(\"Proofs.planIssue\")(function* (request: IssueInput) {\n          const binding = yield* projectBinding(request.binding);\n\n          const eligible = yield* Schema.decodeEffect(Schema.Boolean)(request.eligible).pipe(\n            Effect.mapError(() => ProofInvalid.make({})),\n          );\n\n          const supersedes = request.supersedes;\n\n          const locale = yield* Schema.decodeEffect(Locale)(request.locale).pipe(\n            Effect.mapError(() => ProofInvalid.make({})),\n          );\n\n          const requestId = yield* Schema.decodeEffect(ProofRequestId)(request.requestId).pipe(\n            Effect.mapError(() => ProofInvalid.make({})),\n          );\n\n          const fingerprint = yield* crypto.fingerprint(\n            binding,\n            {\n              channel: options.channel,\n              vendor: delivery.vendor.vendorId,\n              template: options.template,\n              locale,\n            },\n            supersedes,\n          );\n\n          const proofId = ProofId.make(Redacted.value(yield* crypto.generateOpaque()));\n          const reference = { proofId, purpose: options.purpose, keyId: crypto.activeKeyId };\n          const before = yield* eventFor(\"proof-request\", binding).pipe(Effect.result);\n\n          if (\n            before._tag === \"Failure\" &&\n            (before.failure._tag !== \"HookDenied\" || before.failure.reason === \"unavailable\")\n          )\n            return yield* ProofUnavailable.make({});\n          const secret = yield* crypto.generate();\n          const verifier = yield* crypto.digest(proofId, binding, secret, crypto.activeKeyId);\n\n          if (verifier === undefined) return yield* ProofUnavailable.make({});\n          const issuedAtMillis = DateTime.toEpochMillis(yield* DateTime.now);\n\n          const record: ProofRecord = {\n            moduleId,\n            purpose: options.purpose,\n            proofId,\n            requestId,\n            fingerprint,\n            deliveryId: ProofDeliveryId.make(proofId),\n            binding,\n            verifier,\n            issuedAtMillis,\n            expiresAtMillis: issuedAtMillis + policy.lifetimeMillis,\n            version: ProofVersion.make(Redacted.value(yield* crypto.generateOpaque())),\n          };\n\n          const message = {\n            deliveryId: record.deliveryId,\n            purpose: options.purpose,\n            reference,\n            recipient: binding.identifier,\n            secret,\n            format: crypto.format,\n            expiresAtMillis: record.expiresAtMillis,\n            template: options.template,\n            locale,\n          };\n\n          return {\n            commit: store.issue(\n              { record, policy, eligible: eligible && before._tag === \"Success\", supersedes },\n              (decision, journal) => {\n                if (decision._tag !== \"Issued\")\n                  return journal.prepare({\n                    receipt: decision.receipt,\n                    dispatch: Effect.succeed(\"not-dispatched\" as const),\n                  });\n                if (\n                  decision.record.proofId !== record.proofId ||\n                  decision.record.verifier.digest !== record.verifier.digest ||\n                  decision.record.verifier.keyId !== record.verifier.keyId ||\n                  decision.record.version !== record.version ||\n                  decision.record.fingerprint !== record.fingerprint\n                )\n                  throw ProofUnavailable.make({});\n                if (before._tag !== \"Success\") throw ProofUnavailable.make({});\n                journal.stage(before.success);\n\n                const prepared = makeProofDispatch(deliveryKey, record, message, policy);\n\n                return journal.prepare(\n                  Object.freeze({\n                    ...prepared,\n                    dispatch: prepared.dispatch.pipe(Effect.provide(dispatchServices)),\n                  }),\n                );\n              },\n            ),\n          };\n        });\n\n        const planComplete = Effect.fn(\"Proofs.planComplete\")(function* (\n          request: typeof CompleteInput.Type,\n        ): Effect.fn.Return<ProofCompletionPlan, Failure> {\n          const binding = yield* projectBinding(request.binding);\n          const event = yield* eventFor(\"proof-completion\", binding);\n\n          const digest = yield* crypto.continuationDigest(\n            request.continuationId,\n            binding,\n            request.credential,\n          );\n\n          if (digest === undefined) return yield* ProofInvalid.make({});\n\n          return Object.freeze({\n            input: Object.freeze({\n              moduleId,\n              purpose: options.purpose,\n              continuationId: request.continuationId,\n              continuationDigest: digest,\n              binding,\n              nowMillis: DateTime.toEpochMillis(yield* DateTime.now),\n            }),\n            prepare: <A>(\n              decision: ProofCompletionDecision,\n              journal: import(\"../hooks/commit\").CommitJournal,\n              project: (decision: ProofCompletionDecision) => A,\n            ) => {\n              const value = project(decision);\n\n              if (decision === \"completed\") journal.stage(event);\n\n              return journal.prepare(value);\n            },\n          });\n        });\n\n        return Proofs.of({\n          planIssue,\n          prepareIssue: (request) => planIssue(request).pipe(Effect.flatMap((plan) => plan.commit)),\n          prepareAttempt: Effect.fn(\"Proofs.prepareAttempt\")(function* (request) {\n            const binding = yield* projectBinding(request.binding);\n            const event = yield* eventFor(\"proof-verification\", binding);\n\n            const candidate =\n              request.reference.purpose === options.purpose\n                ? yield* crypto.digest(\n                    request.reference.proofId,\n                    binding,\n                    request.credential,\n                    request.reference.keyId,\n                  )\n                : undefined;\n\n            const credential = yield* crypto.generateOpaque();\n\n            const continuationId = ProofContinuationId.make(\n              Redacted.value(yield* crypto.generateOpaque()),\n            );\n\n            const continuationDigest = yield* crypto.continuationDigest(\n              continuationId,\n              binding,\n              credential,\n            );\n\n            if (continuationDigest === undefined) return yield* ProofUnavailable.make({});\n\n            return yield* store.attempt<PrivateAttempt>(\n              {\n                moduleId,\n                purpose: options.purpose,\n                proofId: request.reference.proofId,\n                binding,\n                candidate,\n                continuationId,\n                continuationDigest,\n                nowMillis: DateTime.toEpochMillis(yield* DateTime.now),\n                policy,\n              },\n              (decision, journal) => {\n                if (decision._tag === \"Rejected\")\n                  return journal.prepare({ value: decision, credentialCommands: [] });\n                if (\n                  decision.continuation.continuationId !== continuationId ||\n                  decision.continuation.purpose !== options.purpose\n                )\n                  throw ProofUnavailable.make({});\n                journal.stage(event);\n\n                return journal.prepare({\n                  value: decision,\n                  credentialCommands: [\n                    {\n                      _tag: \"Issue\" as const,\n                      slot: \"proof-continuation\" as const,\n                      credential,\n                      expiresAtMillis: decision.continuation.expiresAtMillis,\n                    },\n                  ],\n                });\n              },\n            );\n          }),\n          planComplete,\n          prepareComplete: (request) =>\n            planComplete(request).pipe(\n              Effect.flatMap((plan) =>\n                store.complete(plan.input, (decision, journal) =>\n                  plan.prepare(decision, journal, (value) => value),\n                ),\n              ),\n            ),\n          cancel: Effect.fn(\"Proofs.cancel\")(function* (input) {\n            const binding = yield* projectBinding(input);\n\n            return yield* store.cancel(\n              {\n                moduleId,\n                purpose: options.purpose,\n                binding,\n                nowMillis: DateTime.toEpochMillis(yield* DateTime.now),\n              },\n              (_, journal) => journal.prepare(undefined),\n            );\n          }),\n          cleanup: Effect.fn(\"Proofs.cleanup\")(function* (limit) {\n            yield* Schema.decodeEffect(\n              Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1000 })),\n            )(limit).pipe(Effect.mapError(() => ProofInvalid.make({})));\n\n            return yield* store.cleanup(\n              { moduleId, nowMillis: DateTime.toEpochMillis(yield* DateTime.now), limit },\n              (decision, journal) => journal.prepare(decision),\n            );\n          }),\n        });\n      }),\n    );\n\n  const emailLayer = makeLayer(EmailProofDelivery, \"email\");\n  const smsLayer = makeLayer(SmsProofDelivery, \"sms\");\n  const errors = Schema.Union([ProofError, HookDenied]);\n\n  const Request = makeOperation(`${moduleId}/request`, {\n    payload: RequestInput,\n    success: ProofRequestReceipt,\n    error: errors,\n    access: \"system\",\n    replay: \"idempotent\",\n  });\n\n  const Resend = makeOperation(`${moduleId}/resend`, {\n    payload: ResendInput,\n    success: ProofRequestReceipt,\n    error: errors,\n    access: \"system\",\n    replay: \"idempotent\",\n  });\n\n  const Attempt = makeOperation(`${moduleId}/attempt`, {\n    payload: AttemptInput,\n    success: Accepted,\n    error: errors,\n    access: \"system\",\n    replay: \"single-use\",\n    credentials: true,\n  });\n\n  const Complete = makeOperation(`${moduleId}/complete`, {\n    payload: CompleteInput,\n    success: Schema.Void,\n    error: errors,\n    access: \"system\",\n    replay: \"single-use\",\n    credentials: true,\n  });\n\n  const Cancel = makeOperation(`${moduleId}/cancel`, {\n    payload: Schema.Struct({ binding: BindingCodec }),\n    success: Schema.Void,\n    error: errors,\n    access: \"system\",\n    replay: \"idempotent\",\n  });\n\n  const Cleanup = makeOperation(`${moduleId}/cleanup`, {\n    payload: Schema.Struct({\n      limit: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1000 })),\n    }),\n    success: ProofCleanupResult,\n    error: errors,\n    access: \"system\",\n    replay: \"idempotent\",\n  });\n\n  const requestHandler = Effect.fn(\"ProofOperation.request\")(function* (input: IssueInput) {\n    yield* noAmbient();\n    const dispatch = yield* readProofCommit(yield* (yield* Proofs).prepareIssue(input));\n\n    yield* dispatch.dispatch;\n\n    return dispatch.receipt;\n  });\n\n  const handlersLayer = Layer.mergeAll(\n    Request.handlerLayer(requestHandler),\n    Resend.handlerLayer(requestHandler),\n    Attempt.credentialHandlerLayer(\n      Effect.fn(\"ProofOperation.attempt\")(function* (input) {\n        yield* noAmbient();\n        const result = yield* readProofCommit(yield* (yield* Proofs).prepareAttempt(input));\n\n        if (result.value._tag === \"Rejected\") return yield* ProofInvalid.make({});\n\n        return { value: result.value, credentialCommands: result.credentialCommands };\n      }),\n    ),\n    Complete.credentialHandlerLayer(\n      Effect.fn(\"ProofOperation.complete\")(function* (input) {\n        yield* noAmbient();\n        const result = yield* readProofCommit(yield* (yield* Proofs).prepareComplete(input));\n\n        if (result === \"rejected\") return yield* ProofInvalid.make({});\n\n        return {\n          value: undefined,\n          credentialCommands: [{ _tag: \"Clear\" as const, slot: \"proof-continuation\" as const }],\n        };\n      }),\n    ),\n    Cancel.handlerLayer(\n      Effect.fn(\"ProofOperation.cancel\")(function* (input) {\n        yield* noAmbient();\n\n        return yield* readProofCommit(yield* (yield* Proofs).cancel(input.binding));\n      }),\n    ),\n    Cleanup.handlerLayer(\n      Effect.fn(\"ProofOperation.cleanup\")(function* (input) {\n        yield* noAmbient();\n\n        return yield* readProofCommit(yield* (yield* Proofs).cleanup(input.limit));\n      }),\n    ),\n  );\n\n  const operations = { Request, Resend, Attempt, Complete, Cancel, Cleanup };\n\n  return Object.freeze({\n    Proofs,\n    emailLayer,\n    smsLayer,\n    handlersLayer,\n    operations,\n    group: operationGroup(...Object.values(operations)),\n  });\n};\n"],"mappings":";;;;;;;;;;;;;;AA2DA,MAAM,SAAS,OAAO,OAAO,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,EAAE,CAAC;AAChF,MAAM,aAAa,OAAO,kBAAkB,OAAO,OAAO,MAAM,OAAO,YAAY,IAAI,CAAC,CAAC;AAEzF,MAAM,YAAY,OAAO,GAAG,kBAAkB,CAAC,CAAC,aAAa;CAC3D,IAAI,OAAO,gBAAgB,OAAO,OAAO,2BAA2B,KAAK,CAAC,CAAC;AAC7E,CAAC;;AAGD,MAAa,8BAOX,UAEA,OAAO,OAAO;CACZ,GAAG;CACH,QAAQ,OAAO,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;CACzC,QAAQ,OAAO,OAAO;EACpB,GAAG,MAAM;EACT,OAAO,OAAO,OAAO;GACnB,GAAG,MAAM,QAAQ;GACjB,QAAQ,OAAO,OAAO,EAAE,GAAG,MAAM,QAAQ,OAAO,OAAO,CAAC;GACxD,UAAU,OAAO,OAAO,EAAE,GAAG,MAAM,QAAQ,OAAO,SAAS,CAAC;GAC5D,eAAe,OAAO,OAAO,EAAE,GAAG,MAAM,QAAQ,OAAO,cAAc,CAAC;GACtE,iBAAiB,OAAO,OAAO,EAAE,GAAG,MAAM,QAAQ,OAAO,gBAAgB,CAAC;GAC1E,cAAc,OAAO,OAAO,EAAE,GAAG,MAAM,QAAQ,OAAO,aAAa,CAAC;GACpE,gBAAgB,OAAO,OAAO,EAAE,GAAG,MAAM,QAAQ,OAAO,eAAe,CAAC;EAC1E,CAAC;CACH,CAAC;CACD,MACE,MAAM,SAAS,KAAA,IACX,KAAA,IACA,OAAO,OAAO;EACZ,GAAG,MAAM;EACT,MAAM,OAAO,QACV,MAAM,QAAQ,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,EAAA,CAAG,KAAK,UAC5D,OAAO,OAAO,EAAE,GAAG,MAAM,CAAC,CAC5B,CACF;CACF,CAAC;AACT,CAAC;;;;;AAMH,MAAa,mBAIX,UACA,UASG;CACH,MAAM,UAAU,2BAA2B,KAAK;CAEhD,MAAM,eAKF,QAAQ;CAIZ,MAAM,eAAe,OAAO,OAAO;EACjC,WAAW;EACX,SAAS;EACT,QAAQ;EACR,UAAU,OAAO;CACnB,CAAC;CAED,MAAM,cAAc,OAAO,OAAO;EAAE,GAAG,aAAa;EAAQ,YAAY;CAAQ,CAAC;CAEjF,MAAM,eAAe,OAAO,OAAO;EACjC,WAAW;EACX,SAAS;EACT,YAAY;CACd,CAAC;CAED,MAAM,gBAAgB,OAAO,OAAO;EAClC,gBAAgB;EAChB,SAAS;EACT,YAAY;CACd,CAAC;CAED,MAAM,WAAW,OAAO,aAAa,YAAY,EAAE,cAAc,kBAAkB,CAAC;CA0BpF,MAAM,SAAS,QAAQ,QACrB,sBAAsB,UACxB;CAEA,MAAM,aACJ,aACA,YAEA,MAAM,OACJ,QACA,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,aAAa,YAAY,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,KACxD,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CAC3E;EACA,IACE,YAAY,QAAQ,WACpB,CAAC,OAAO,GAAG,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KACzE,CAAC,OAAO,GAAG,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,QAAQ,GAEjF,OAAO,OAAO,wBAAwB,KAAK,EAAE,QAAQ,WAAW,CAAC;EACnE,MAAM,SAAS,OAAO,oBAAoB,QAAQ,MAAM;EACxD,MAAM,WAAW,OAAO;EAExB,IACE,OAAO,0BAA0B,KACjC,SAAS,OAAO,oBAAoB,OAAO,gBAE3C,OAAO,OAAO,wBAAwB,KAAK,EAAE,QAAQ,WAAW,CAAC;EAEnE,MAAM,SAAS,OAAO,gBACpB,UACA,QAAQ,SACR,QAAQ,QACR,QAAQ,IACV;EAEA,MAAM,QAAQ,OAAO;EAGrB,MAAM,mBAAmB,QAAQ,KAAK,kBAAkB,KAAK,CAAC,CAAC,KAC7D,QAAQ,IAAI,aAAa,QAAQ,CACnC;EAEA,MAAM,QAAQ,OAAO;EAErB,MAAM,WAAW,OAAO,OAAO,QAE7B;EAEF,MAAM,eAAe,OAAO,WAAW,YAAY;EAEnD,MAAM,kBAAkB,UACtB,OAAO,aAAa,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KACvC,OAAO,QAAQ,OAAO,aAAa,YAAY,CAAC,GAChD,OAAO,QAAQ,QAAQ,GACvB,OAAO,QAAQ,oBAAoB,GACnC,OAAO,eAAe,aAAa,KAAK,CAAC,CAAC,CAAC,CAC7C;EAEF,MAAM,WAAW,OAAO,GAAG,iBAAiB,CAAC,CAAC,WAC5C,QACA,SACA;GACA,MAAM,WAAW,kBAAkB;IACjC;IACA,WAAW,GAAG,SAAS,GAAG;IAC1B,aAAa,CAAC,QAAQ,UAAU;IAChC,GAAI,QAAQ,SAAS,eAAe,CAAC,IAAI,EAAE,WAAW,QAAQ,SAAS,UAAU;GACnF,CAAC;GAED,OAAO,MAAM,OAAO,QAAQ;GAE5B,OAAO,eAAe;IACpB,IAAI,iBAAiB,KAAK,SAAS,MAAM,OAAO,OAAO,eAAe,CAAC,CAAC;IACxE,kBAAkB,SAAS,cAAc,OAAO,SAAS,GAAG;IAC5D;GACF,CAAC;EACH,CAAC;EAED,MAAM,YAAY,OAAO,GAAG,kBAAkB,CAAC,CAAC,WAAW,SAAqB;GAC9E,MAAM,UAAU,OAAO,eAAe,QAAQ,OAAO;GAErD,MAAM,WAAW,OAAO,OAAO,aAAa,OAAO,OAAO,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,KAC5E,OAAO,eAAe,aAAa,KAAK,CAAC,CAAC,CAAC,CAC7C;GAEA,MAAM,aAAa,QAAQ;GAE3B,MAAM,SAAS,OAAO,OAAO,aAAa,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,KAChE,OAAO,eAAe,aAAa,KAAK,CAAC,CAAC,CAAC,CAC7C;GAEA,MAAM,YAAY,OAAO,OAAO,aAAa,cAAc,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,KAC9E,OAAO,eAAe,aAAa,KAAK,CAAC,CAAC,CAAC,CAC7C;GAEA,MAAM,cAAc,OAAO,OAAO,YAChC,SACA;IACE,SAAS,QAAQ;IACjB,QAAQ,SAAS,OAAO;IACxB,UAAU,QAAQ;IAClB;GACF,GACA,UACF;GAEA,MAAM,UAAU,QAAQ,KAAK,SAAS,MAAM,OAAO,OAAO,eAAe,CAAC,CAAC;GAC3E,MAAM,YAAY;IAAE;IAAS,SAAS,QAAQ;IAAS,OAAO,OAAO;GAAY;GACjF,MAAM,SAAS,OAAO,SAAS,iBAAiB,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM;GAE3E,IACE,OAAO,SAAS,cACf,OAAO,QAAQ,SAAS,gBAAgB,OAAO,QAAQ,WAAW,gBAEnE,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;GACxC,MAAM,SAAS,OAAO,OAAO,SAAS;GACtC,MAAM,WAAW,OAAO,OAAO,OAAO,SAAS,SAAS,QAAQ,OAAO,WAAW;GAElF,IAAI,aAAa,KAAA,GAAW,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;GAClE,MAAM,iBAAiB,SAAS,cAAc,OAAO,SAAS,GAAG;GAEjE,MAAM,SAAsB;IAC1B;IACA,SAAS,QAAQ;IACjB;IACA;IACA;IACA,YAAY,gBAAgB,KAAK,OAAO;IACxC;IACA;IACA;IACA,iBAAiB,iBAAiB,OAAO;IACzC,SAAS,aAAa,KAAK,SAAS,MAAM,OAAO,OAAO,eAAe,CAAC,CAAC;GAC3E;GAEA,MAAM,UAAU;IACd,YAAY,OAAO;IACnB,SAAS,QAAQ;IACjB;IACA,WAAW,QAAQ;IACnB;IACA,QAAQ,OAAO;IACf,iBAAiB,OAAO;IACxB,UAAU,QAAQ;IAClB;GACF;GAEA,OAAO,EACL,QAAQ,MAAM,MACZ;IAAE;IAAQ;IAAQ,UAAU,YAAY,OAAO,SAAS;IAAW;GAAW,IAC7E,UAAU,YAAY;IACrB,IAAI,SAAS,SAAS,UACpB,OAAO,QAAQ,QAAQ;KACrB,SAAS,SAAS;KAClB,UAAU,OAAO,QAAQ,gBAAyB;IACpD,CAAC;IACH,IACE,SAAS,OAAO,YAAY,OAAO,WACnC,SAAS,OAAO,SAAS,WAAW,OAAO,SAAS,UACpD,SAAS,OAAO,SAAS,UAAU,OAAO,SAAS,SACnD,SAAS,OAAO,YAAY,OAAO,WACnC,SAAS,OAAO,gBAAgB,OAAO,aAEvC,MAAM,iBAAiB,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,SAAS,WAAW,MAAM,iBAAiB,KAAK,CAAC,CAAC;IAC7D,QAAQ,MAAM,OAAO,OAAO;IAE5B,MAAM,WAAW,kBAAkB,aAAa,QAAQ,SAAS,MAAM;IAEvE,OAAO,QAAQ,QACb,OAAO,OAAO;KACZ,GAAG;KACH,UAAU,SAAS,SAAS,KAAK,OAAO,QAAQ,gBAAgB,CAAC;IACnE,CAAC,CACH;GACF,CACF,EACF;EACF,CAAC;EAED,MAAM,eAAe,OAAO,GAAG,qBAAqB,CAAC,CAAC,WACpD,SACgD;GAChD,MAAM,UAAU,OAAO,eAAe,QAAQ,OAAO;GACrD,MAAM,QAAQ,OAAO,SAAS,oBAAoB,OAAO;GAEzD,MAAM,SAAS,OAAO,OAAO,mBAC3B,QAAQ,gBACR,SACA,QAAQ,UACV;GAEA,IAAI,WAAW,KAAA,GAAW,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC;GAE5D,OAAO,OAAO,OAAO;IACnB,OAAO,OAAO,OAAO;KACnB;KACA,SAAS,QAAQ;KACjB,gBAAgB,QAAQ;KACxB,oBAAoB;KACpB;KACA,WAAW,SAAS,cAAc,OAAO,SAAS,GAAG;IACvD,CAAC;IACD,UACE,UACA,SACA,YACG;KACH,MAAM,QAAQ,QAAQ,QAAQ;KAE9B,IAAI,aAAa,aAAa,QAAQ,MAAM,KAAK;KAEjD,OAAO,QAAQ,QAAQ,KAAK;IAC9B;GACF,CAAC;EACH,CAAC;EAED,OAAO,OAAO,GAAG;GACf;GACA,eAAe,YAAY,UAAU,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,SAAS,KAAK,MAAM,CAAC;GACxF,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAAW,SAAS;IACrE,MAAM,UAAU,OAAO,eAAe,QAAQ,OAAO;IACrD,MAAM,QAAQ,OAAO,SAAS,sBAAsB,OAAO;IAE3D,MAAM,YACJ,QAAQ,UAAU,YAAY,QAAQ,UAClC,OAAO,OAAO,OACZ,QAAQ,UAAU,SAClB,SACA,QAAQ,YACR,QAAQ,UAAU,KACpB,IACA,KAAA;IAEN,MAAM,aAAa,OAAO,OAAO,eAAe;IAEhD,MAAM,iBAAiB,oBAAoB,KACzC,SAAS,MAAM,OAAO,OAAO,eAAe,CAAC,CAC/C;IAEA,MAAM,qBAAqB,OAAO,OAAO,mBACvC,gBACA,SACA,UACF;IAEA,IAAI,uBAAuB,KAAA,GAAW,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;IAE5E,OAAO,OAAO,MAAM,QAClB;KACE;KACA,SAAS,QAAQ;KACjB,SAAS,QAAQ,UAAU;KAC3B;KACA;KACA;KACA;KACA,WAAW,SAAS,cAAc,OAAO,SAAS,GAAG;KACrD;IACF,IACC,UAAU,YAAY;KACrB,IAAI,SAAS,SAAS,YACpB,OAAO,QAAQ,QAAQ;MAAE,OAAO;MAAU,oBAAoB,CAAC;KAAE,CAAC;KACpE,IACE,SAAS,aAAa,mBAAmB,kBACzC,SAAS,aAAa,YAAY,QAAQ,SAE1C,MAAM,iBAAiB,KAAK,CAAC,CAAC;KAChC,QAAQ,MAAM,KAAK;KAEnB,OAAO,QAAQ,QAAQ;MACrB,OAAO;MACP,oBAAoB,CAClB;OACE,MAAM;OACN,MAAM;OACN;OACA,iBAAiB,SAAS,aAAa;MACzC,CACF;KACF,CAAC;IACH,CACF;GACF,CAAC;GACD;GACA,kBAAkB,YAChB,aAAa,OAAO,CAAC,CAAC,KACpB,OAAO,SAAS,SACd,MAAM,SAAS,KAAK,QAAQ,UAAU,YACpC,KAAK,QAAQ,UAAU,UAAU,UAAU,KAAK,CAClD,CACF,CACF;GACF,QAAQ,OAAO,GAAG,eAAe,CAAC,CAAC,WAAW,OAAO;IACnD,MAAM,UAAU,OAAO,eAAe,KAAK;IAE3C,OAAO,OAAO,MAAM,OAClB;KACE;KACA,SAAS,QAAQ;KACjB;KACA,WAAW,SAAS,cAAc,OAAO,SAAS,GAAG;IACvD,IACC,GAAG,YAAY,QAAQ,QAAQ,KAAA,CAAS,CAC3C;GACF,CAAC;GACD,SAAS,OAAO,GAAG,gBAAgB,CAAC,CAAC,WAAW,OAAO;IACrD,OAAO,OAAO,aACZ,OAAO,IAAI,MAAM,OAAO,UAAU;KAAE,SAAS;KAAG,SAAS;IAAK,CAAC,CAAC,CAClE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC;IAE1D,OAAO,OAAO,MAAM,QAClB;KAAE;KAAU,WAAW,SAAS,cAAc,OAAO,SAAS,GAAG;KAAG;IAAM,IACzE,UAAU,YAAY,QAAQ,QAAQ,QAAQ,CACjD;GACF,CAAC;EACH,CAAC;CACH,CAAC,CACH;CAEF,MAAM,aAAa,UAAU,oBAAoB,OAAO;CACxD,MAAM,WAAW,UAAU,kBAAkB,KAAK;CAClD,MAAM,SAAS,OAAO,MAAM,CAAC,YAAY,UAAU,CAAC;CAEpD,MAAM,UAAU,cAAc,GAAG,SAAS,WAAW;EACnD,SAAS;EACT,SAAS;EACT,OAAO;EACP,QAAQ;EACR,QAAQ;CACV,CAAC;CAED,MAAM,SAAS,cAAc,GAAG,SAAS,UAAU;EACjD,SAAS;EACT,SAAS;EACT,OAAO;EACP,QAAQ;EACR,QAAQ;CACV,CAAC;CAED,MAAM,UAAU,cAAc,GAAG,SAAS,WAAW;EACnD,SAAS;EACT,SAAS;EACT,OAAO;EACP,QAAQ;EACR,QAAQ;EACR,aAAa;CACf,CAAC;CAED,MAAM,WAAW,cAAc,GAAG,SAAS,YAAY;EACrD,SAAS;EACT,SAAS,OAAO;EAChB,OAAO;EACP,QAAQ;EACR,QAAQ;EACR,aAAa;CACf,CAAC;CAED,MAAM,SAAS,cAAc,GAAG,SAAS,UAAU;EACjD,SAAS,OAAO,OAAO,EAAE,SAAS,aAAa,CAAC;EAChD,SAAS,OAAO;EAChB,OAAO;EACP,QAAQ;EACR,QAAQ;CACV,CAAC;CAED,MAAM,UAAU,cAAc,GAAG,SAAS,WAAW;EACnD,SAAS,OAAO,OAAO,EACrB,OAAO,OAAO,IAAI,MAAM,OAAO,UAAU;GAAE,SAAS;GAAG,SAAS;EAAK,CAAC,CAAC,EACzE,CAAC;EACD,SAAS;EACT,OAAO;EACP,QAAQ;EACR,QAAQ;CACV,CAAC;CAED,MAAM,iBAAiB,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAAW,OAAmB;EACvF,OAAO,UAAU;EACjB,MAAM,WAAW,OAAO,gBAAgB,QAAQ,OAAO,OAAA,CAAQ,aAAa,KAAK,CAAC;EAElF,OAAO,SAAS;EAEhB,OAAO,SAAS;CAClB,CAAC;CAED,MAAM,gBAAgB,MAAM,SAC1B,QAAQ,aAAa,cAAc,GACnC,OAAO,aAAa,cAAc,GAClC,QAAQ,uBACN,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAAW,OAAO;EACpD,OAAO,UAAU;EACjB,MAAM,SAAS,OAAO,gBAAgB,QAAQ,OAAO,OAAA,CAAQ,eAAe,KAAK,CAAC;EAElF,IAAI,OAAO,MAAM,SAAS,YAAY,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC;EAExE,OAAO;GAAE,OAAO,OAAO;GAAO,oBAAoB,OAAO;EAAmB;CAC9E,CAAC,CACH,GACA,SAAS,uBACP,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAAW,OAAO;EACrD,OAAO,UAAU;EAGjB,KAAI,OAFkB,gBAAgB,QAAQ,OAAO,OAAA,CAAQ,gBAAgB,KAAK,CAAC,OAEpE,YAAY,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC;EAE7D,OAAO;GACL,OAAO,KAAA;GACP,oBAAoB,CAAC;IAAE,MAAM;IAAkB,MAAM;GAA8B,CAAC;EACtF;CACF,CAAC,CACH,GACA,OAAO,aACL,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAAW,OAAO;EACnD,OAAO,UAAU;EAEjB,OAAO,OAAO,gBAAgB,QAAQ,OAAO,OAAA,CAAQ,OAAO,MAAM,OAAO,CAAC;CAC5E,CAAC,CACH,GACA,QAAQ,aACN,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAAW,OAAO;EACpD,OAAO,UAAU;EAEjB,OAAO,OAAO,gBAAgB,QAAQ,OAAO,OAAA,CAAQ,QAAQ,MAAM,KAAK,CAAC;CAC3E,CAAC,CACH,CACF;CAEA,MAAM,aAAa;EAAE;EAAS;EAAQ;EAAS;EAAU;EAAQ;CAAQ;CAEzE,OAAO,OAAO,OAAO;EACnB;EACA;EACA;EACA;EACA;EACA,OAAO,eAAe,GAAG,OAAO,OAAO,UAAU,CAAC;CACpD,CAAC;AACH"}

package/dist/proofs/policy.d.mts

@@ -0,0 +1,152 @@
+import { ProofConfigurationError } from "./errors.mjs";
+import { Effect, Schema } from "effect";
+//#region src/proofs/policy.d.ts
+declare const ProofBudget: Schema.Struct<{
+  readonly limit: Schema.Int;
+  readonly windowMillis: Schema.Int;
+}>;
+type ProofBudget = typeof ProofBudget.Type;
+declare const ProofAbusePolicy: Schema.Struct<{
+  readonly issues: Schema.Struct<{
+    readonly limit: Schema.Int;
+    readonly windowMillis: Schema.Int;
+  }>;
+  readonly attempts: Schema.Struct<{
+    readonly limit: Schema.Int;
+    readonly windowMillis: Schema.Int;
+  }>;
+  /** These windows survive consumption, failure, and every resend/flow/request ID. */
+  readonly subjectIssues: Schema.Struct<{
+    readonly limit: Schema.Int;
+    readonly windowMillis: Schema.Int;
+  }>;
+  readonly subjectAttempts: Schema.Struct<{
+    readonly limit: Schema.Int;
+    readonly windowMillis: Schema.Int;
+  }>;
+  /** Global action limits also cover unknown subjects and rotating identifiers. */
+  readonly actionIssues: Schema.Struct<{
+    readonly limit: Schema.Int;
+    readonly windowMillis: Schema.Int;
+  }>;
+  readonly actionAttempts: Schema.Struct<{
+    readonly limit: Schema.Int;
+    readonly windowMillis: Schema.Int;
+  }>;
+  readonly resendCooldownMillis: Schema.Natural;
+}>;
+type ProofAbusePolicy = typeof ProofAbusePolicy.Type;
+declare const ProofPolicy: Schema.Struct<{
+  readonly lifetimeMillis: Schema.Int;
+  readonly continuationLifetimeMillis: Schema.Int;
+  readonly maximumFailedAttempts: Schema.Int;
+  readonly maximumDeliveryAttempts: Schema.Int;
+  readonly deliveryClaimMillis: Schema.Int;
+  readonly deliveryRetryMillis: Schema.Int;
+  /** Retain request fingerprints and terminal generations through this retry horizon. */
+  readonly requestRetentionMillis: Schema.Int;
+  readonly abuse: Schema.Struct<{
+    readonly issues: Schema.Struct<{
+      readonly limit: Schema.Int;
+      readonly windowMillis: Schema.Int;
+    }>;
+    readonly attempts: Schema.Struct<{
+      readonly limit: Schema.Int;
+      readonly windowMillis: Schema.Int;
+    }>;
+    /** These windows survive consumption, failure, and every resend/flow/request ID. */
+    readonly subjectIssues: Schema.Struct<{
+      readonly limit: Schema.Int;
+      readonly windowMillis: Schema.Int;
+    }>;
+    readonly subjectAttempts: Schema.Struct<{
+      readonly limit: Schema.Int;
+      readonly windowMillis: Schema.Int;
+    }>;
+    /** Global action limits also cover unknown subjects and rotating identifiers. */
+    readonly actionIssues: Schema.Struct<{
+      readonly limit: Schema.Int;
+      readonly windowMillis: Schema.Int;
+    }>;
+    readonly actionAttempts: Schema.Struct<{
+      readonly limit: Schema.Int;
+      readonly windowMillis: Schema.Int;
+    }>;
+    readonly resendCooldownMillis: Schema.Natural;
+  }>;
+}>;
+type ProofPolicy = typeof ProofPolicy.Type;
+declare const validateProofPolicy: (input: {
+  readonly lifetimeMillis: number;
+  readonly continuationLifetimeMillis: number;
+  readonly maximumFailedAttempts: number;
+  readonly maximumDeliveryAttempts: number;
+  readonly deliveryClaimMillis: number;
+  readonly deliveryRetryMillis: number;
+  readonly requestRetentionMillis: number;
+  readonly abuse: {
+    readonly issues: {
+      readonly limit: number;
+      readonly windowMillis: number;
+    };
+    readonly attempts: {
+      readonly limit: number;
+      readonly windowMillis: number;
+    };
+    readonly subjectIssues: {
+      readonly limit: number;
+      readonly windowMillis: number;
+    };
+    readonly subjectAttempts: {
+      readonly limit: number;
+      readonly windowMillis: number;
+    };
+    readonly actionIssues: {
+      readonly limit: number;
+      readonly windowMillis: number;
+    };
+    readonly actionAttempts: {
+      readonly limit: number;
+      readonly windowMillis: number;
+    };
+    readonly resendCooldownMillis: number;
+  };
+}) => Effect.Effect<Readonly<{
+  lifetimeMillis: number;
+  continuationLifetimeMillis: number;
+  maximumFailedAttempts: number;
+  maximumDeliveryAttempts: number;
+  deliveryClaimMillis: number;
+  deliveryRetryMillis: number;
+  requestRetentionMillis: number;
+  abuse: Readonly<{
+    resendCooldownMillis: number;
+    issues: Readonly<{
+      readonly limit: number;
+      readonly windowMillis: number;
+    }>;
+    attempts: Readonly<{
+      readonly limit: number;
+      readonly windowMillis: number;
+    }>;
+    subjectIssues: Readonly<{
+      readonly limit: number;
+      readonly windowMillis: number;
+    }>;
+    subjectAttempts: Readonly<{
+      readonly limit: number;
+      readonly windowMillis: number;
+    }>;
+    actionIssues: Readonly<{
+      readonly limit: number;
+      readonly windowMillis: number;
+    }>;
+    actionAttempts: Readonly<{
+      readonly limit: number;
+      readonly windowMillis: number;
+    }>;
+  }>;
+}>, ProofConfigurationError, never>;
+//#endregion
+export { ProofAbusePolicy, ProofBudget, ProofPolicy, validateProofPolicy };
+//# sourceMappingURL=policy.d.mts.map

package/dist/proofs/policy.mjs

@@ -0,0 +1,51 @@
+import { ProofConfigurationError } from "./errors.mjs";
+import { Effect, Schema } from "effect";
+//#region src/proofs/policy.ts
+const Positive = Schema.Int.check(Schema.isGreaterThan(0));
+const Millis = Positive.check(Schema.isLessThanOrEqualTo(2592e6));
+const ProofBudget = Schema.Struct({
+	limit: Positive.check(Schema.isLessThanOrEqualTo(1e6)),
+	windowMillis: Millis
+});
+const ProofAbusePolicy = Schema.Struct({
+	issues: ProofBudget,
+	attempts: ProofBudget,
+	/** These windows survive consumption, failure, and every resend/flow/request ID. */
+	subjectIssues: ProofBudget,
+	subjectAttempts: ProofBudget,
+	/** Global action limits also cover unknown subjects and rotating identifiers. */
+	actionIssues: ProofBudget,
+	actionAttempts: ProofBudget,
+	resendCooldownMillis: Schema.Natural
+});
+const ProofPolicy = Schema.Struct({
+	lifetimeMillis: Millis,
+	continuationLifetimeMillis: Millis,
+	maximumFailedAttempts: Positive.check(Schema.isLessThanOrEqualTo(100)),
+	maximumDeliveryAttempts: Positive.check(Schema.isLessThanOrEqualTo(5)),
+	deliveryClaimMillis: Millis,
+	deliveryRetryMillis: Millis,
+	/** Retain request fingerprints and terminal generations through this retry horizon. */
+	requestRetentionMillis: Millis,
+	abuse: ProofAbusePolicy
+});
+const validateProofPolicy = Effect.fn("validateProofPolicy")(function* (input) {
+	const policy = yield* Schema.decodeEffect(ProofPolicy)(input).pipe(Effect.mapError(() => ProofConfigurationError.make({ reason: "policy" })));
+	if (policy.requestRetentionMillis < Math.max(policy.lifetimeMillis, policy.continuationLifetimeMillis, policy.abuse.issues.windowMillis, policy.abuse.attempts.windowMillis, policy.abuse.subjectIssues.windowMillis, policy.abuse.subjectAttempts.windowMillis, policy.abuse.actionIssues.windowMillis, policy.abuse.actionAttempts.windowMillis) || policy.deliveryClaimMillis >= policy.lifetimeMillis || policy.abuse.resendCooldownMillis >= policy.lifetimeMillis) return yield* ProofConfigurationError.make({ reason: "policy" });
+	return Object.freeze({
+		...policy,
+		abuse: Object.freeze({
+			...policy.abuse,
+			issues: Object.freeze(policy.abuse.issues),
+			attempts: Object.freeze(policy.abuse.attempts),
+			subjectIssues: Object.freeze(policy.abuse.subjectIssues),
+			subjectAttempts: Object.freeze(policy.abuse.subjectAttempts),
+			actionIssues: Object.freeze(policy.abuse.actionIssues),
+			actionAttempts: Object.freeze(policy.abuse.actionAttempts)
+		})
+	});
+});
+//#endregion
+export { ProofAbusePolicy, ProofBudget, ProofPolicy, validateProofPolicy };
+
+//# sourceMappingURL=policy.mjs.map

package/dist/proofs/policy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.mjs","names":[],"sources":["../../src/proofs/policy.ts"],"sourcesContent":["import { Effect, Schema } from \"effect\";\n\nimport { ProofConfigurationError } from \"./errors\";\n\nconst Positive = Schema.Int.check(Schema.isGreaterThan(0));\nconst Millis = Positive.check(Schema.isLessThanOrEqualTo(2592000000));\n\nexport const ProofBudget = Schema.Struct({\n  limit: Positive.check(Schema.isLessThanOrEqualTo(1000000)),\n  windowMillis: Millis,\n});\n\nexport type ProofBudget = typeof ProofBudget.Type;\n\nexport const ProofAbusePolicy = Schema.Struct({\n  issues: ProofBudget,\n  attempts: ProofBudget,\n  /** These windows survive consumption, failure, and every resend/flow/request ID. */\n  subjectIssues: ProofBudget,\n  subjectAttempts: ProofBudget,\n  /** Global action limits also cover unknown subjects and rotating identifiers. */\n  actionIssues: ProofBudget,\n  actionAttempts: ProofBudget,\n  resendCooldownMillis: Schema.Natural,\n});\n\nexport type ProofAbusePolicy = typeof ProofAbusePolicy.Type;\n\nexport const ProofPolicy = Schema.Struct({\n  lifetimeMillis: Millis,\n  continuationLifetimeMillis: Millis,\n  maximumFailedAttempts: Positive.check(Schema.isLessThanOrEqualTo(100)),\n  maximumDeliveryAttempts: Positive.check(Schema.isLessThanOrEqualTo(5)),\n  deliveryClaimMillis: Millis,\n  deliveryRetryMillis: Millis,\n  /** Retain request fingerprints and terminal generations through this retry horizon. */\n  requestRetentionMillis: Millis,\n  abuse: ProofAbusePolicy,\n});\n\nexport type ProofPolicy = typeof ProofPolicy.Type;\n\nexport const validateProofPolicy = Effect.fn(\"validateProofPolicy\")(function* (input: ProofPolicy) {\n  const policy = yield* Schema.decodeEffect(ProofPolicy)(input).pipe(\n    Effect.mapError(() => ProofConfigurationError.make({ reason: \"policy\" })),\n  );\n\n  if (\n    policy.requestRetentionMillis <\n      Math.max(\n        policy.lifetimeMillis,\n        policy.continuationLifetimeMillis,\n        policy.abuse.issues.windowMillis,\n        policy.abuse.attempts.windowMillis,\n        policy.abuse.subjectIssues.windowMillis,\n        policy.abuse.subjectAttempts.windowMillis,\n        policy.abuse.actionIssues.windowMillis,\n        policy.abuse.actionAttempts.windowMillis,\n      ) ||\n    policy.deliveryClaimMillis >= policy.lifetimeMillis ||\n    policy.abuse.resendCooldownMillis >= policy.lifetimeMillis\n  )\n    return yield* ProofConfigurationError.make({ reason: \"policy\" });\n\n  return Object.freeze({\n    ...policy,\n    abuse: Object.freeze({\n      ...policy.abuse,\n      issues: Object.freeze(policy.abuse.issues),\n      attempts: Object.freeze(policy.abuse.attempts),\n      subjectIssues: Object.freeze(policy.abuse.subjectIssues),\n      subjectAttempts: Object.freeze(policy.abuse.subjectAttempts),\n      actionIssues: Object.freeze(policy.abuse.actionIssues),\n      actionAttempts: Object.freeze(policy.abuse.actionAttempts),\n    }),\n  });\n});\n"],"mappings":";;;AAIA,MAAM,WAAW,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AACzD,MAAM,SAAS,SAAS,MAAM,OAAO,oBAAoB,MAAU,CAAC;AAEpE,MAAa,cAAc,OAAO,OAAO;CACvC,OAAO,SAAS,MAAM,OAAO,oBAAoB,GAAO,CAAC;CACzD,cAAc;AAChB,CAAC;AAID,MAAa,mBAAmB,OAAO,OAAO;CAC5C,QAAQ;CACR,UAAU;;CAEV,eAAe;CACf,iBAAiB;;CAEjB,cAAc;CACd,gBAAgB;CAChB,sBAAsB,OAAO;AAC/B,CAAC;AAID,MAAa,cAAc,OAAO,OAAO;CACvC,gBAAgB;CAChB,4BAA4B;CAC5B,uBAAuB,SAAS,MAAM,OAAO,oBAAoB,GAAG,CAAC;CACrE,yBAAyB,SAAS,MAAM,OAAO,oBAAoB,CAAC,CAAC;CACrE,qBAAqB;CACrB,qBAAqB;;CAErB,wBAAwB;CACxB,OAAO;AACT,CAAC;AAID,MAAa,sBAAsB,OAAO,GAAG,qBAAqB,CAAC,CAAC,WAAW,OAAoB;CACjG,MAAM,SAAS,OAAO,OAAO,aAAa,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAC5D,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,SAAS,CAAC,CAAC,CAC1E;CAEA,IACE,OAAO,yBACL,KAAK,IACH,OAAO,gBACP,OAAO,4BACP,OAAO,MAAM,OAAO,cACpB,OAAO,MAAM,SAAS,cACtB,OAAO,MAAM,cAAc,cAC3B,OAAO,MAAM,gBAAgB,cAC7B,OAAO,MAAM,aAAa,cAC1B,OAAO,MAAM,eAAe,YAC9B,KACF,OAAO,uBAAuB,OAAO,kBACrC,OAAO,MAAM,wBAAwB,OAAO,gBAE5C,OAAO,OAAO,wBAAwB,KAAK,EAAE,QAAQ,SAAS,CAAC;CAEjE,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,OAAO,OAAO,OAAO;GACnB,GAAG,OAAO;GACV,QAAQ,OAAO,OAAO,OAAO,MAAM,MAAM;GACzC,UAAU,OAAO,OAAO,OAAO,MAAM,QAAQ;GAC7C,eAAe,OAAO,OAAO,OAAO,MAAM,aAAa;GACvD,iBAAiB,OAAO,OAAO,OAAO,MAAM,eAAe;GAC3D,cAAc,OAAO,OAAO,OAAO,MAAM,YAAY;GACrD,gBAAgB,OAAO,OAAO,OAAO,MAAM,cAAc;EAC3D,CAAC;CACH,CAAC;AACH,CAAC"}

package/dist/sessions/AuthenticationAuthority.d.mts

@@ -0,0 +1,31 @@
+import { SubjectId } from "../Schema.mjs";
+import { AuthenticationEvidence, AuthenticationRequirement, AuthenticationRevision, PendingConsumption } from "./models.mjs";
+import { PreparedCommit } from "../hooks/commit.mjs";
+import { PrepareSessionCommit } from "./commit.mjs";
+import { PendingAuthenticationInvalid, SessionUnavailable, StaleAuthentication } from "./errors.mjs";
+import { Context, DateTime, Effect } from "effect";
+//#region src/sessions/AuthenticationAuthority.d.ts
+declare const AuthenticationAuthority_base: Context.ServiceClass<AuthenticationAuthority, "effect-auth/AuthenticationAuthority", {
+  /** Before verification, read active subject + these independently resolved credential IDs. */
+  readonly capture: (subjectId: SubjectId, credentialIds: ReadonlyArray<string>) => Effect.Effect<AuthenticationRevision, StaleAuthentication | SessionUnavailable>;
+  /** Reject unless the captured revision is still current; never refresh old evidence's revision. */
+  readonly requirements: (evidence: AuthenticationEvidence) => Effect.Effect<AuthenticationRequirement, StaleAuthentication | SessionUnavailable>;
+  /**
+   * Linearization point for fresh signed-session authentication. Check active
+   * subject, current factor policy/freshness, unexpired issuance, and exactly these revisions, consuming pending state in the same
+   * commit when provided. Re-read the clock at the conditional commit, never rely
+   * solely on the caller's pre-hook timestamp. Stateless verification and renewal never call this.
+   */
+  readonly approve: <A>(input: {
+    readonly evidence: AuthenticationEvidence;
+    readonly now: DateTime.Utc;
+    readonly expiresAt: DateTime.Utc;
+    readonly absoluteExpiresAt: DateTime.Utc;
+    readonly pending?: PendingConsumption;
+  }, prepare: PrepareSessionCommit<void, A>) => Effect.Effect<PreparedCommit<A>, StaleAuthentication | PendingAuthenticationInvalid | SessionUnavailable>;
+}>;
+/** Subject status, factor policy, and revision are owned by the consumer's identity authority. */
+declare class AuthenticationAuthority extends AuthenticationAuthority_base {}
+//#endregion
+export { AuthenticationAuthority };
+//# sourceMappingURL=AuthenticationAuthority.d.mts.map