@yielded/auth 0.1.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +18 -0
- package/dist/Atom.d.mts +5 -0
- package/dist/Atom.mjs +5 -0
- package/dist/Auth.d.mts +9 -0
- package/dist/Auth.mjs +7 -0
- package/dist/AuthContract.d.mts +4 -0
- package/dist/AuthContract.mjs +4 -0
- package/dist/AuthSession.d.mts +82 -0
- package/dist/AuthSession.mjs +138 -0
- package/dist/AuthSession.mjs.map +1 -0
- package/dist/AuthStore.d.mts +68 -0
- package/dist/AuthStore.mjs +194 -0
- package/dist/AuthStore.mjs.map +1 -0
- package/dist/AuthTokenCodec.d.mts +40 -0
- package/dist/AuthTokenCodec.mjs +104 -0
- package/dist/AuthTokenCodec.mjs.map +1 -0
- package/dist/Client.d.mts +2 -0
- package/dist/Client.mjs +2 -0
- package/dist/Cloudflare.d.mts +89 -0
- package/dist/Cloudflare.mjs +166 -0
- package/dist/Cloudflare.mjs.map +1 -0
- package/dist/Drizzle.d.mts +28 -0
- package/dist/Drizzle.mjs +27 -0
- package/dist/DrizzleD1.d.mts +935 -0
- package/dist/DrizzleD1.mjs +29 -0
- package/dist/DrizzleD1.mjs.map +1 -0
- package/dist/DrizzleLibsql.d.mts +2288 -0
- package/dist/DrizzleLibsql.mjs +85 -0
- package/dist/DrizzleLibsql.mjs.map +1 -0
- package/dist/DrizzleMysql2.d.mts +1809 -0
- package/dist/DrizzleMysql2.mjs +55 -0
- package/dist/DrizzleMysql2.mjs.map +1 -0
- package/dist/DrizzlePglite.d.mts +1808 -0
- package/dist/DrizzlePglite.mjs +45 -0
- package/dist/DrizzlePglite.mjs.map +1 -0
- package/dist/DrizzlePostgres.d.mts +1808 -0
- package/dist/DrizzlePostgres.mjs +45 -0
- package/dist/DrizzlePostgres.mjs.map +1 -0
- package/dist/DrizzleSqliteBun.d.mts +2287 -0
- package/dist/DrizzleSqliteBun.mjs +62 -0
- package/dist/DrizzleSqliteBun.mjs.map +1 -0
- package/dist/DrizzleSqliteDo.d.mts +2343 -0
- package/dist/DrizzleSqliteDo.mjs +105 -0
- package/dist/DrizzleSqliteDo.mjs.map +1 -0
- package/dist/DrizzleSqliteNode.d.mts +2287 -0
- package/dist/DrizzleSqliteNode.mjs +62 -0
- package/dist/DrizzleSqliteNode.mjs.map +1 -0
- package/dist/DrizzleSqliteWasm.d.mts +2287 -0
- package/dist/DrizzleSqliteWasm.mjs +62 -0
- package/dist/DrizzleSqliteWasm.mjs.map +1 -0
- package/dist/Email.d.mts +12 -0
- package/dist/Email.mjs +11 -0
- package/dist/EmailOtp.d.mts +42 -0
- package/dist/EmailOtp.mjs +120 -0
- package/dist/EmailOtp.mjs.map +1 -0
- package/dist/EmailOtpSender.d.mts +22 -0
- package/dist/EmailOtpSender.mjs +18 -0
- package/dist/EmailOtpSender.mjs.map +1 -0
- package/dist/Errors.d.mts +55 -0
- package/dist/Errors.mjs +31 -0
- package/dist/Errors.mjs.map +1 -0
- package/dist/GitHub.d.mts +5 -0
- package/dist/GitHub.mjs +4 -0
- package/dist/Hooks.d.mts +6 -0
- package/dist/Hooks.mjs +6 -0
- package/dist/Http.d.mts +12 -0
- package/dist/Http.mjs +12 -0
- package/dist/HttpServer.d.mts +103 -0
- package/dist/HttpServer.mjs +326 -0
- package/dist/HttpServer.mjs.map +1 -0
- package/dist/Identity.d.mts +9 -0
- package/dist/Identity.mjs +9 -0
- package/dist/IdentityResolver.d.mts +16 -0
- package/dist/IdentityResolver.mjs +12 -0
- package/dist/IdentityResolver.mjs.map +1 -0
- package/dist/OAuth.d.mts +36 -0
- package/dist/OAuth.mjs +35 -0
- package/dist/OpenIdClient.d.mts +3 -0
- package/dist/OpenIdClient.mjs +3 -0
- package/dist/OpenIdClientConnected.d.mts +4 -0
- package/dist/OpenIdClientConnected.mjs +3 -0
- package/dist/OperationHttp.d.mts +3 -0
- package/dist/OperationHttp.mjs +3 -0
- package/dist/OperationHttpClient.d.mts +2 -0
- package/dist/OperationHttpClient.mjs +2 -0
- package/dist/OperationHttpServer.d.mts +5 -0
- package/dist/OperationHttpServer.mjs +4 -0
- package/dist/Operations.d.mts +8 -0
- package/dist/Operations.mjs +8 -0
- package/dist/Passkey.d.mts +12 -0
- package/dist/Passkey.mjs +12 -0
- package/dist/PasskeyBrowser.d.mts +4 -0
- package/dist/PasskeyBrowser.mjs +4 -0
- package/dist/PasskeyContract.d.mts +641 -0
- package/dist/PasskeyContract.mjs +174 -0
- package/dist/PasskeyContract.mjs.map +1 -0
- package/dist/PasskeyPassword.d.mts +412 -0
- package/dist/PasskeyPassword.mjs +174 -0
- package/dist/PasskeyPassword.mjs.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.mts +3 -0
- package/dist/PasskeySimpleWebAuthn.mjs +3 -0
- package/dist/Password.d.mts +19 -0
- package/dist/Password.mjs +17 -0
- package/dist/PasswordAuth.d.mts +45 -0
- package/dist/PasswordAuth.mjs +79 -0
- package/dist/PasswordAuth.mjs.map +1 -0
- package/dist/PasswordCredentialStore.d.mts +46 -0
- package/dist/PasswordCredentialStore.mjs +62 -0
- package/dist/PasswordCredentialStore.mjs.map +1 -0
- package/dist/PasswordHasher.d.mts +31 -0
- package/dist/PasswordHasher.mjs +76 -0
- package/dist/PasswordHasher.mjs.map +1 -0
- package/dist/PhoneOtp.d.mts +11 -0
- package/dist/PhoneOtp.mjs +11 -0
- package/dist/Policy.d.mts +52 -0
- package/dist/Policy.mjs +36 -0
- package/dist/Policy.mjs.map +1 -0
- package/dist/Proofs.d.mts +14 -0
- package/dist/Proofs.mjs +13 -0
- package/dist/Rpc.d.mts +12 -0
- package/dist/Rpc.mjs +11 -0
- package/dist/Rpc.mjs.map +1 -0
- package/dist/Schema.d.mts +160 -0
- package/dist/Schema.mjs +141 -0
- package/dist/Schema.mjs.map +1 -0
- package/dist/SessionContract.d.mts +3 -0
- package/dist/SessionContract.mjs +3 -0
- package/dist/Sessions.d.mts +14 -0
- package/dist/Sessions.mjs +12 -0
- package/dist/Testing.d.mts +7 -0
- package/dist/Testing.mjs +7 -0
- package/dist/Totp.d.mts +8 -0
- package/dist/Totp.mjs +8 -0
- package/dist/TotpContract.d.mts +318 -0
- package/dist/TotpContract.mjs +119 -0
- package/dist/TotpContract.mjs.map +1 -0
- package/dist/WebCrypto.d.mts +28 -0
- package/dist/WebCrypto.mjs +42 -0
- package/dist/WebCrypto.mjs.map +1 -0
- package/dist/Workflows.d.mts +16 -0
- package/dist/Workflows.mjs +11 -0
- package/dist/Workflows.mjs.map +1 -0
- package/dist/atom/AuthAtomLifetime.d.mts +35 -0
- package/dist/atom/AuthAtomLifetime.mjs +50 -0
- package/dist/atom/AuthAtomLifetime.mjs.map +1 -0
- package/dist/atom/AuthAtomWorkflow.d.mts +17 -0
- package/dist/atom/AuthAtomWorkflow.mjs +9 -0
- package/dist/atom/AuthAtomWorkflow.mjs.map +1 -0
- package/dist/atom/client.d.mts +43 -0
- package/dist/atom/client.mjs +168 -0
- package/dist/atom/client.mjs.map +1 -0
- package/dist/atom/operations.d.mts +35 -0
- package/dist/atom/operations.mjs +58 -0
- package/dist/atom/operations.mjs.map +1 -0
- package/dist/atom/scoped-runtime.mjs +151 -0
- package/dist/atom/scoped-runtime.mjs.map +1 -0
- package/dist/auth/Auth.d.mts +7806 -0
- package/dist/auth/Auth.mjs +141 -0
- package/dist/auth/Auth.mjs.map +1 -0
- package/dist/auth/AuthConfigurationError.d.mts +10 -0
- package/dist/auth/AuthConfigurationError.mjs +14 -0
- package/dist/auth/AuthConfigurationError.mjs.map +1 -0
- package/dist/auth/AuthRequest.d.mts +21 -0
- package/dist/auth/AuthRequest.mjs +10 -0
- package/dist/auth/AuthRequest.mjs.map +1 -0
- package/dist/auth/AuthStrategy.d.mts +23 -0
- package/dist/auth/AuthStrategy.mjs +33 -0
- package/dist/auth/AuthStrategy.mjs.map +1 -0
- package/dist/auth/ConsumeDecision.d.mts +11 -0
- package/dist/auth/actions.d.mts +18 -0
- package/dist/auth/actions.mjs +70 -0
- package/dist/auth/actions.mjs.map +1 -0
- package/dist/auth/defaults.mjs +12 -0
- package/dist/auth/defaults.mjs.map +1 -0
- package/dist/auth/definition.d.mts +46 -0
- package/dist/auth/session.d.mts +27 -0
- package/dist/auth/session.mjs +56 -0
- package/dist/auth/session.mjs.map +1 -0
- package/dist/drizzle/D1BatchStatements.d.mts +11 -0
- package/dist/drizzle/D1BatchStatements.mjs +8 -0
- package/dist/drizzle/D1BatchStatements.mjs.map +1 -0
- package/dist/drizzle/PasswordPreparedPostconditions.mjs +12 -0
- package/dist/drizzle/PasswordPreparedPostconditions.mjs.map +1 -0
- package/dist/drizzle/SuppliedService.d.mts +10 -0
- package/dist/drizzle/d1-emails.d.mts +68 -0
- package/dist/drizzle/d1-emails.mjs +580 -0
- package/dist/drizzle/d1-emails.mjs.map +1 -0
- package/dist/drizzle/d1-generated-statement.mjs +79 -0
- package/dist/drizzle/d1-generated-statement.mjs.map +1 -0
- package/dist/drizzle/d1-identity.d.mts +33 -0
- package/dist/drizzle/d1-identity.mjs +120 -0
- package/dist/drizzle/d1-identity.mjs.map +1 -0
- package/dist/drizzle/d1-oauth.d.mts +316 -0
- package/dist/drizzle/d1-oauth.mjs +79 -0
- package/dist/drizzle/d1-oauth.mjs.map +1 -0
- package/dist/drizzle/d1-passkey.d.mts +52 -0
- package/dist/drizzle/d1-passkey.mjs +97 -0
- package/dist/drizzle/d1-passkey.mjs.map +1 -0
- package/dist/drizzle/d1-password-prepared.d.mts +27 -0
- package/dist/drizzle/d1-password-prepared.mjs +464 -0
- package/dist/drizzle/d1-password-prepared.mjs.map +1 -0
- package/dist/drizzle/d1-passwords.d.mts +96 -0
- package/dist/drizzle/d1-passwords.mjs +1008 -0
- package/dist/drizzle/d1-passwords.mjs.map +1 -0
- package/dist/drizzle/d1-phone.d.mts +29 -0
- package/dist/drizzle/d1-phone.mjs +33 -0
- package/dist/drizzle/d1-phone.mjs.map +1 -0
- package/dist/drizzle/d1-planning.d.mts +12 -0
- package/dist/drizzle/d1-planning.mjs +43 -0
- package/dist/drizzle/d1-planning.mjs.map +1 -0
- package/dist/drizzle/d1-proofs.d.mts +88 -0
- package/dist/drizzle/d1-proofs.mjs +833 -0
- package/dist/drizzle/d1-proofs.mjs.map +1 -0
- package/dist/drizzle/d1-sessions.d.mts +77 -0
- package/dist/drizzle/d1-sessions.mjs +970 -0
- package/dist/drizzle/d1-sessions.mjs.map +1 -0
- package/dist/drizzle/d1-totp.d.mts +27 -0
- package/dist/drizzle/d1-totp.mjs +28 -0
- package/dist/drizzle/d1-totp.mjs.map +1 -0
- package/dist/drizzle/email-model.d.mts +352 -0
- package/dist/drizzle/email-model.mjs +21 -0
- package/dist/drizzle/email-model.mjs.map +1 -0
- package/dist/drizzle/email-registration.d.mts +33 -0
- package/dist/drizzle/email-registration.mjs +238 -0
- package/dist/drizzle/email-registration.mjs.map +1 -0
- package/dist/drizzle/email-sql.d.mts +18 -0
- package/dist/drizzle/email-sql.mjs +473 -0
- package/dist/drizzle/email-sql.mjs.map +1 -0
- package/dist/drizzle/email-target.d.mts +28 -0
- package/dist/drizzle/email-target.mjs +75 -0
- package/dist/drizzle/email-target.mjs.map +1 -0
- package/dist/drizzle/model.d.mts +259 -0
- package/dist/drizzle/model.mjs +81 -0
- package/dist/drizzle/model.mjs.map +1 -0
- package/dist/drizzle/mysql-emails.d.mts +82 -0
- package/dist/drizzle/mysql-emails.mjs +38 -0
- package/dist/drizzle/mysql-emails.mjs.map +1 -0
- package/dist/drizzle/mysql-identity.d.mts +24 -0
- package/dist/drizzle/mysql-identity.mjs +95 -0
- package/dist/drizzle/mysql-identity.mjs.map +1 -0
- package/dist/drizzle/mysql-password-prepared.d.mts +32 -0
- package/dist/drizzle/mysql-password-prepared.mjs +16 -0
- package/dist/drizzle/mysql-password-prepared.mjs.map +1 -0
- package/dist/drizzle/mysql-passwords.d.mts +102 -0
- package/dist/drizzle/mysql-passwords.mjs +38 -0
- package/dist/drizzle/mysql-passwords.mjs.map +1 -0
- package/dist/drizzle/mysql-proofs.d.mts +83 -0
- package/dist/drizzle/mysql-proofs.mjs +23 -0
- package/dist/drizzle/mysql-proofs.mjs.map +1 -0
- package/dist/drizzle/mysql-sessions.d.mts +250 -0
- package/dist/drizzle/mysql-sessions.mjs +53 -0
- package/dist/drizzle/mysql-sessions.mjs.map +1 -0
- package/dist/drizzle/mysql.d.mts +73 -0
- package/dist/drizzle/mysql.mjs +221 -0
- package/dist/drizzle/mysql.mjs.map +1 -0
- package/dist/drizzle/oauth-accounts.mjs +361 -0
- package/dist/drizzle/oauth-accounts.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-access.mjs +210 -0
- package/dist/drizzle/oauth-connected-access.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-collection.mjs +202 -0
- package/dist/drizzle/oauth-connected-collection.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-custody.mjs +146 -0
- package/dist/drizzle/oauth-connected-custody.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-drivers.mjs +78 -0
- package/dist/drizzle/oauth-connected-drivers.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-flow.mjs +248 -0
- package/dist/drizzle/oauth-connected-flow.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-input.mjs +105 -0
- package/dist/drizzle/oauth-connected-input.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-maintenance.mjs +215 -0
- package/dist/drizzle/oauth-connected-maintenance.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-management.mjs +228 -0
- package/dist/drizzle/oauth-connected-management.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-model.d.mts +278 -0
- package/dist/drizzle/oauth-connected-model.mjs +22 -0
- package/dist/drizzle/oauth-connected-model.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-reference.d.mts +17 -0
- package/dist/drizzle/oauth-connected-reference.mjs +53 -0
- package/dist/drizzle/oauth-connected-reference.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-settlement.mjs +117 -0
- package/dist/drizzle/oauth-connected-settlement.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-state.d.mts +16 -0
- package/dist/drizzle/oauth-connected-state.mjs +422 -0
- package/dist/drizzle/oauth-connected-state.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-target.d.mts +114 -0
- package/dist/drizzle/oauth-connected-target.mjs +94 -0
- package/dist/drizzle/oauth-connected-target.mjs.map +1 -0
- package/dist/drizzle/oauth-drivers.mjs +53 -0
- package/dist/drizzle/oauth-drivers.mjs.map +1 -0
- package/dist/drizzle/oauth-flow.d.mts +7 -0
- package/dist/drizzle/oauth-flow.mjs +255 -0
- package/dist/drizzle/oauth-flow.mjs.map +1 -0
- package/dist/drizzle/oauth-input.mjs +130 -0
- package/dist/drizzle/oauth-input.mjs.map +1 -0
- package/dist/drizzle/oauth-model.d.mts +468 -0
- package/dist/drizzle/oauth-model.mjs +49 -0
- package/dist/drizzle/oauth-model.mjs.map +1 -0
- package/dist/drizzle/oauth-mysql.mjs +8 -0
- package/dist/drizzle/oauth-mysql.mjs.map +1 -0
- package/dist/drizzle/oauth-owner.d.mts +4 -0
- package/dist/drizzle/oauth-owner.mjs +10 -0
- package/dist/drizzle/oauth-owner.mjs.map +1 -0
- package/dist/drizzle/oauth-registration.d.mts +8 -0
- package/dist/drizzle/oauth-registration.mjs +375 -0
- package/dist/drizzle/oauth-registration.mjs.map +1 -0
- package/dist/drizzle/oauth-state.mjs +109 -0
- package/dist/drizzle/oauth-state.mjs.map +1 -0
- package/dist/drizzle/oauth-target.d.mts +125 -0
- package/dist/drizzle/oauth-target.mjs +252 -0
- package/dist/drizzle/oauth-target.mjs.map +1 -0
- package/dist/drizzle/passkey-admission.mjs +203 -0
- package/dist/drizzle/passkey-admission.mjs.map +1 -0
- package/dist/drizzle/passkey-credentials.mjs +239 -0
- package/dist/drizzle/passkey-credentials.mjs.map +1 -0
- package/dist/drizzle/passkey-drivers.mjs +34 -0
- package/dist/drizzle/passkey-drivers.mjs.map +1 -0
- package/dist/drizzle/passkey-enrollment.mjs +132 -0
- package/dist/drizzle/passkey-enrollment.mjs.map +1 -0
- package/dist/drizzle/passkey-flow.mjs +436 -0
- package/dist/drizzle/passkey-flow.mjs.map +1 -0
- package/dist/drizzle/passkey-management.mjs +225 -0
- package/dist/drizzle/passkey-management.mjs.map +1 -0
- package/dist/drizzle/passkey-model.d.mts +275 -0
- package/dist/drizzle/passkey-model.mjs +36 -0
- package/dist/drizzle/passkey-model.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-ceremony-model.d.mts +50 -0
- package/dist/drizzle/passkey-registration-ceremony-model.mjs +18 -0
- package/dist/drizzle/passkey-registration-ceremony-model.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-ceremony.mjs +124 -0
- package/dist/drizzle/passkey-registration-ceremony.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-custody.mjs +51 -0
- package/dist/drizzle/passkey-registration-custody.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-write.mjs +205 -0
- package/dist/drizzle/passkey-registration-write.mjs.map +1 -0
- package/dist/drizzle/passkey-state.d.mts +5 -0
- package/dist/drizzle/passkey-state.mjs +207 -0
- package/dist/drizzle/passkey-state.mjs.map +1 -0
- package/dist/drizzle/passkey-target.d.mts +16 -0
- package/dist/drizzle/passkey-target.mjs +174 -0
- package/dist/drizzle/passkey-target.mjs.map +1 -0
- package/dist/drizzle/passkey-write-drivers.mjs +33 -0
- package/dist/drizzle/passkey-write-drivers.mjs.map +1 -0
- package/dist/drizzle/passkey-write-model.d.mts +192 -0
- package/dist/drizzle/passkey-write-model.mjs +13 -0
- package/dist/drizzle/passkey-write-model.mjs.map +1 -0
- package/dist/drizzle/passkey-write-state.mjs +326 -0
- package/dist/drizzle/passkey-write-state.mjs.map +1 -0
- package/dist/drizzle/passkey-write-target.d.mts +14 -0
- package/dist/drizzle/passkey-write-target.mjs +185 -0
- package/dist/drizzle/passkey-write-target.mjs.map +1 -0
- package/dist/drizzle/password-model.d.mts +330 -0
- package/dist/drizzle/password-model.mjs +22 -0
- package/dist/drizzle/password-model.mjs.map +1 -0
- package/dist/drizzle/password-prepared-model.d.mts +93 -0
- package/dist/drizzle/password-prepared-model.mjs +11 -0
- package/dist/drizzle/password-prepared-model.mjs.map +1 -0
- package/dist/drizzle/password-prepared-sql.mjs +394 -0
- package/dist/drizzle/password-prepared-sql.mjs.map +1 -0
- package/dist/drizzle/password-prepared-state.mjs +107 -0
- package/dist/drizzle/password-prepared-state.mjs.map +1 -0
- package/dist/drizzle/password-prepared-target.d.mts +12 -0
- package/dist/drizzle/password-prepared-target.mjs +57 -0
- package/dist/drizzle/password-prepared-target.mjs.map +1 -0
- package/dist/drizzle/password-registration.d.mts +23 -0
- package/dist/drizzle/password-registration.mjs +136 -0
- package/dist/drizzle/password-registration.mjs.map +1 -0
- package/dist/drizzle/password-sql.d.mts +20 -0
- package/dist/drizzle/password-sql.mjs +702 -0
- package/dist/drizzle/password-sql.mjs.map +1 -0
- package/dist/drizzle/password-target.d.mts +25 -0
- package/dist/drizzle/password-target.mjs +63 -0
- package/dist/drizzle/password-target.mjs.map +1 -0
- package/dist/drizzle/pg-emails.d.mts +83 -0
- package/dist/drizzle/pg-emails.mjs +38 -0
- package/dist/drizzle/pg-emails.mjs.map +1 -0
- package/dist/drizzle/pg-password-prepared.d.mts +33 -0
- package/dist/drizzle/pg-password-prepared.mjs +16 -0
- package/dist/drizzle/pg-password-prepared.mjs.map +1 -0
- package/dist/drizzle/pg-passwords.d.mts +103 -0
- package/dist/drizzle/pg-passwords.mjs +38 -0
- package/dist/drizzle/pg-passwords.mjs.map +1 -0
- package/dist/drizzle/pg-proofs.d.mts +84 -0
- package/dist/drizzle/pg-proofs.mjs +22 -0
- package/dist/drizzle/pg-proofs.mjs.map +1 -0
- package/dist/drizzle/pg-sessions.d.mts +251 -0
- package/dist/drizzle/pg-sessions.mjs +53 -0
- package/dist/drizzle/pg-sessions.mjs.map +1 -0
- package/dist/drizzle/pg.d.mts +88 -0
- package/dist/drizzle/pg.mjs +294 -0
- package/dist/drizzle/pg.mjs.map +1 -0
- package/dist/drizzle/phone-model.d.mts +117 -0
- package/dist/drizzle/phone-model.mjs +39 -0
- package/dist/drizzle/phone-model.mjs.map +1 -0
- package/dist/drizzle/phone-state.mjs +426 -0
- package/dist/drizzle/phone-state.mjs.map +1 -0
- package/dist/drizzle/phone-target.d.mts +19 -0
- package/dist/drizzle/phone-target.mjs +171 -0
- package/dist/drizzle/phone-target.mjs.map +1 -0
- package/dist/drizzle/proof-model.d.mts +287 -0
- package/dist/drizzle/proof-model.mjs +17 -0
- package/dist/drizzle/proof-model.mjs.map +1 -0
- package/dist/drizzle/proof-sql.d.mts +16 -0
- package/dist/drizzle/proof-sql.mjs +618 -0
- package/dist/drizzle/proof-sql.mjs.map +1 -0
- package/dist/drizzle/proof-target.d.mts +17 -0
- package/dist/drizzle/proof-target.mjs +38 -0
- package/dist/drizzle/proof-target.mjs.map +1 -0
- package/dist/drizzle/session-model.d.mts +201 -0
- package/dist/drizzle/session-model.mjs +19 -0
- package/dist/drizzle/session-model.mjs.map +1 -0
- package/dist/drizzle/session-sql.mjs +732 -0
- package/dist/drizzle/session-sql.mjs.map +1 -0
- package/dist/drizzle/session-target.d.mts +37 -0
- package/dist/drizzle/session-target.mjs +47 -0
- package/dist/drizzle/session-target.mjs.map +1 -0
- package/dist/drizzle/sqlite-emails.mjs +45 -0
- package/dist/drizzle/sqlite-emails.mjs.map +1 -0
- package/dist/drizzle/sqlite-identity.mjs +92 -0
- package/dist/drizzle/sqlite-identity.mjs.map +1 -0
- package/dist/drizzle/sqlite-password-prepared.mjs +21 -0
- package/dist/drizzle/sqlite-password-prepared.mjs.map +1 -0
- package/dist/drizzle/sqlite-passwords.mjs +49 -0
- package/dist/drizzle/sqlite-passwords.mjs.map +1 -0
- package/dist/drizzle/sqlite-proofs.mjs +29 -0
- package/dist/drizzle/sqlite-proofs.mjs.map +1 -0
- package/dist/drizzle/sqlite-sessions.mjs +74 -0
- package/dist/drizzle/sqlite-sessions.mjs.map +1 -0
- package/dist/drizzle/sqlite.d.mts +81 -0
- package/dist/drizzle/sqlite.mjs +220 -0
- package/dist/drizzle/sqlite.mjs.map +1 -0
- package/dist/drizzle/standalone-guard.mjs +19 -0
- package/dist/drizzle/standalone-guard.mjs.map +1 -0
- package/dist/drizzle/step-up-model.d.mts +65 -0
- package/dist/drizzle/step-up-model.mjs +9 -0
- package/dist/drizzle/step-up-model.mjs.map +1 -0
- package/dist/drizzle/step-up-state.mjs +34 -0
- package/dist/drizzle/step-up-state.mjs.map +1 -0
- package/dist/drizzle/totp-model.d.mts +85 -0
- package/dist/drizzle/totp-model.mjs +13 -0
- package/dist/drizzle/totp-model.mjs.map +1 -0
- package/dist/drizzle/totp-state.d.mts +39 -0
- package/dist/drizzle/totp-state.mjs +288 -0
- package/dist/drizzle/totp-state.mjs.map +1 -0
- package/dist/drizzle/totp-target.d.mts +16 -0
- package/dist/drizzle/totp-target.mjs +83 -0
- package/dist/drizzle/totp-target.mjs.map +1 -0
- package/dist/drizzle/transaction-execution.d.mts +20 -0
- package/dist/drizzle/transaction-execution.mjs +111 -0
- package/dist/drizzle/transaction-execution.mjs.map +1 -0
- package/dist/drizzle/transaction-mysql.mjs +46 -0
- package/dist/drizzle/transaction-mysql.mjs.map +1 -0
- package/dist/drizzle/transaction-owner.d.mts +6 -0
- package/dist/drizzle/transaction-owner.mjs +252 -0
- package/dist/drizzle/transaction-owner.mjs.map +1 -0
- package/dist/email/EmailActionEvidence.d.mts +33 -0
- package/dist/email/EmailActionEvidence.mjs +15 -0
- package/dist/email/EmailActionEvidence.mjs.map +1 -0
- package/dist/email/EmailAddressPersistence.d.mts +63 -0
- package/dist/email/EmailAddressPersistence.mjs +19 -0
- package/dist/email/EmailAddressPersistence.mjs.map +1 -0
- package/dist/email/EmailIdentifierNotifier.d.mts +30 -0
- package/dist/email/EmailIdentifierNotifier.mjs +31 -0
- package/dist/email/EmailIdentifierNotifier.mjs.map +1 -0
- package/dist/email/EmailReturnTargets.d.mts +19 -0
- package/dist/email/EmailReturnTargets.mjs +29 -0
- package/dist/email/EmailReturnTargets.mjs.map +1 -0
- package/dist/email/EmailSignInTargets.d.mts +20 -0
- package/dist/email/EmailSignInTargets.mjs +12 -0
- package/dist/email/EmailSignInTargets.mjs.map +1 -0
- package/dist/email/addresses.d.mts +33 -0
- package/dist/email/addresses.mjs +404 -0
- package/dist/email/addresses.mjs.map +1 -0
- package/dist/email/definition.d.mts +10153 -0
- package/dist/email/definition.mjs +111 -0
- package/dist/email/definition.mjs.map +1 -0
- package/dist/email/errors.d.mts +15 -0
- package/dist/email/errors.mjs +11 -0
- package/dist/email/errors.mjs.map +1 -0
- package/dist/email/magicLink.d.mts +33 -0
- package/dist/email/magicLink.mjs +58 -0
- package/dist/email/magicLink.mjs.map +1 -0
- package/dist/email/models.d.mts +56 -0
- package/dist/email/models.mjs +31 -0
- package/dist/email/models.mjs.map +1 -0
- package/dist/email/module.d.mts +22296 -0
- package/dist/email/module.mjs +415 -0
- package/dist/email/module.mjs.map +1 -0
- package/dist/email/registration.d.mts +28 -0
- package/dist/email/registration.mjs +243 -0
- package/dist/email/registration.mjs.map +1 -0
- package/dist/email/snapshot.mjs +37 -0
- package/dist/email/snapshot.mjs.map +1 -0
- package/dist/hooks/LifecycleHooks.d.mts +34 -0
- package/dist/hooks/LifecycleHooks.mjs +74 -0
- package/dist/hooks/LifecycleHooks.mjs.map +1 -0
- package/dist/hooks/commit.d.mts +66 -0
- package/dist/hooks/commit.mjs +136 -0
- package/dist/hooks/commit.mjs.map +1 -0
- package/dist/hooks/models.d.mts +51 -0
- package/dist/hooks/models.mjs +87 -0
- package/dist/hooks/models.mjs.map +1 -0
- package/dist/hooks/plugins.d.mts +36 -0
- package/dist/hooks/plugins.mjs +60 -0
- package/dist/hooks/plugins.mjs.map +1 -0
- package/dist/hooks/transactions.d.mts +31 -0
- package/dist/hooks/transactions.mjs +38 -0
- package/dist/hooks/transactions.mjs.map +1 -0
- package/dist/http/auth-api.d.mts +9 -0
- package/dist/http/auth-api.mjs +13 -0
- package/dist/http/auth-api.mjs.map +1 -0
- package/dist/http/auth-contract.d.mts +84 -0
- package/dist/http/auth-contract.mjs +75 -0
- package/dist/http/auth-contract.mjs.map +1 -0
- package/dist/http/auth-http.d.mts +216 -0
- package/dist/http/auth-http.mjs +184 -0
- package/dist/http/auth-http.mjs.map +1 -0
- package/dist/http/endpoints/get-session.d.mts +8 -0
- package/dist/http/endpoints/get-session.mjs +12 -0
- package/dist/http/endpoints/get-session.mjs.map +1 -0
- package/dist/http/endpoints/password-sign-in.d.mts +8 -0
- package/dist/http/endpoints/password-sign-in.mjs +18 -0
- package/dist/http/endpoints/password-sign-in.mjs.map +1 -0
- package/dist/http/endpoints/request-email-otp.d.mts +8 -0
- package/dist/http/endpoints/request-email-otp.mjs +17 -0
- package/dist/http/endpoints/request-email-otp.mjs.map +1 -0
- package/dist/http/endpoints/set-password.d.mts +9 -0
- package/dist/http/endpoints/set-password.mjs +19 -0
- package/dist/http/endpoints/set-password.mjs.map +1 -0
- package/dist/http/endpoints/sign-out.d.mts +6 -0
- package/dist/http/endpoints/sign-out.mjs +7 -0
- package/dist/http/endpoints/sign-out.mjs.map +1 -0
- package/dist/http/endpoints/verify-email-otp.d.mts +9 -0
- package/dist/http/endpoints/verify-email-otp.mjs +18 -0
- package/dist/http/endpoints/verify-email-otp.mjs.map +1 -0
- package/dist/http/models.d.mts +49 -0
- package/dist/http/models.mjs +35 -0
- package/dist/http/models.mjs.map +1 -0
- package/dist/http/security.d.mts +91 -0
- package/dist/http/security.mjs +77 -0
- package/dist/http/security.mjs.map +1 -0
- package/dist/http/session-contract.d.mts +303 -0
- package/dist/http/session-contract.mjs +38 -0
- package/dist/http/session-contract.mjs.map +1 -0
- package/dist/http-operation/OperationHttpInvocation.d.mts +16 -0
- package/dist/http-operation/OperationHttpInvocation.mjs +11 -0
- package/dist/http-operation/OperationHttpInvocation.mjs.map +1 -0
- package/dist/http-operation/OperationHttpServerConfig.d.mts +18 -0
- package/dist/http-operation/OperationHttpServerConfig.mjs +72 -0
- package/dist/http-operation/OperationHttpServerConfig.mjs.map +1 -0
- package/dist/http-operation/auth-client.d.mts +75 -0
- package/dist/http-operation/auth-client.mjs +116 -0
- package/dist/http-operation/auth-client.mjs.map +1 -0
- package/dist/http-operation/client.d.mts +50 -0
- package/dist/http-operation/client.mjs +188 -0
- package/dist/http-operation/client.mjs.map +1 -0
- package/dist/http-operation/configuration-schema.mjs +19 -0
- package/dist/http-operation/configuration-schema.mjs.map +1 -0
- package/dist/http-operation/contract.d.mts +40 -0
- package/dist/http-operation/contract.mjs +37 -0
- package/dist/http-operation/contract.mjs.map +1 -0
- package/dist/http-operation/errors.d.mts +13 -0
- package/dist/http-operation/errors.mjs +31 -0
- package/dist/http-operation/errors.mjs.map +1 -0
- package/dist/http-operation/models.d.mts +32 -0
- package/dist/http-operation/models.mjs +14 -0
- package/dist/http-operation/models.mjs.map +1 -0
- package/dist/http-operation/private.mjs +35 -0
- package/dist/http-operation/private.mjs.map +1 -0
- package/dist/http-operation/security.mjs +58 -0
- package/dist/http-operation/security.mjs.map +1 -0
- package/dist/http-operation/server.d.mts +33 -0
- package/dist/http-operation/server.mjs +268 -0
- package/dist/http-operation/server.mjs.map +1 -0
- package/dist/identity/ExternalIdentityMutation.d.mts +15 -0
- package/dist/identity/ExternalIdentityMutation.mjs +11 -0
- package/dist/identity/ExternalIdentityMutation.mjs.map +1 -0
- package/dist/identity/IdentityMutation.d.mts +22 -0
- package/dist/identity/IdentityMutation.mjs +17 -0
- package/dist/identity/IdentityMutation.mjs.map +1 -0
- package/dist/identity/IdentityRepository.d.mts +20 -0
- package/dist/identity/IdentityRepository.mjs +11 -0
- package/dist/identity/IdentityRepository.mjs.map +1 -0
- package/dist/identity/SubjectLifecycle.d.mts +58 -0
- package/dist/identity/SubjectLifecycle.mjs +43 -0
- package/dist/identity/SubjectLifecycle.mjs.map +1 -0
- package/dist/identity/SubjectProvisioner.d.mts +37 -0
- package/dist/identity/SubjectProvisioner.mjs +20 -0
- package/dist/identity/SubjectProvisioner.mjs.map +1 -0
- package/dist/identity/codecs.d.mts +34 -0
- package/dist/identity/codecs.mjs +40 -0
- package/dist/identity/codecs.mjs.map +1 -0
- package/dist/identity/models.d.mts +62 -0
- package/dist/identity/models.mjs +51 -0
- package/dist/identity/models.mjs.map +1 -0
- package/dist/identity/operations.d.mts +118 -0
- package/dist/identity/operations.mjs +124 -0
- package/dist/identity/operations.mjs.map +1 -0
- package/dist/index.d.mts +23 -0
- package/dist/index.mjs +23 -0
- package/dist/internal/AuthStoreDecisions.d.mts +22 -0
- package/dist/internal/AuthStoreDecisions.mjs +8 -0
- package/dist/internal/AuthStoreDecisions.mjs.map +1 -0
- package/dist/internal/CurrentSession.d.mts +9 -0
- package/dist/internal/CurrentSession.mjs +8 -0
- package/dist/internal/CurrentSession.mjs.map +1 -0
- package/dist/internal/diagnostics.mjs +23 -0
- package/dist/internal/diagnostics.mjs.map +1 -0
- package/dist/oauth/GithubOAuthProvider.d.mts +43 -0
- package/dist/oauth/GithubOAuthProvider.mjs +66 -0
- package/dist/oauth/GithubOAuthProvider.mjs.map +1 -0
- package/dist/oauth/OAuth.d.mts +73 -0
- package/dist/oauth/OAuth.mjs +180 -0
- package/dist/oauth/OAuth.mjs.map +1 -0
- package/dist/oauth/OAuthAccountsPersistence.d.mts +109 -0
- package/dist/oauth/OAuthAccountsPersistence.mjs +12 -0
- package/dist/oauth/OAuthAccountsPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthActionEvidence.d.mts +28 -0
- package/dist/oauth/OAuthActionEvidence.mjs +15 -0
- package/dist/oauth/OAuthActionEvidence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedActionEvidence.d.mts +22 -0
- package/dist/oauth/OAuthConnectedActionEvidence.mjs +9 -0
- package/dist/oauth/OAuthConnectedActionEvidence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedPersistence.d.mts +129 -0
- package/dist/oauth/OAuthConnectedPersistence.mjs +12 -0
- package/dist/oauth/OAuthConnectedPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedProtocol.d.mts +41 -0
- package/dist/oauth/OAuthConnectedProtocol.mjs +13 -0
- package/dist/oauth/OAuthConnectedProtocol.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedRevocations.d.mts +167 -0
- package/dist/oauth/OAuthConnectedRevocations.mjs +21 -0
- package/dist/oauth/OAuthConnectedRevocations.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedTokenProtector.d.mts +24 -0
- package/dist/oauth/OAuthConnectedTokenProtector.mjs +153 -0
- package/dist/oauth/OAuthConnectedTokenProtector.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.d.mts +23 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.mjs +37 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedUseAuthority.d.mts +22 -0
- package/dist/oauth/OAuthConnectedUseAuthority.mjs +10 -0
- package/dist/oauth/OAuthConnectedUseAuthority.mjs.map +1 -0
- package/dist/oauth/OAuthConnectionStore.d.mts +33 -0
- package/dist/oauth/OAuthConnectionStore.mjs +38 -0
- package/dist/oauth/OAuthConnectionStore.mjs.map +1 -0
- package/dist/oauth/OAuthLinkTransactionProtector.d.mts +25 -0
- package/dist/oauth/OAuthLinkTransactionProtector.mjs +39 -0
- package/dist/oauth/OAuthLinkTransactionProtector.mjs.map +1 -0
- package/dist/oauth/OAuthProtocol.d.mts +33 -0
- package/dist/oauth/OAuthProtocol.mjs +16 -0
- package/dist/oauth/OAuthProtocol.mjs.map +1 -0
- package/dist/oauth/OAuthProvider.d.mts +70 -0
- package/dist/oauth/OAuthProvider.mjs +39 -0
- package/dist/oauth/OAuthProvider.mjs.map +1 -0
- package/dist/oauth/OAuthProviders.d.mts +27 -0
- package/dist/oauth/OAuthProviders.mjs +33 -0
- package/dist/oauth/OAuthProviders.mjs.map +1 -0
- package/dist/oauth/OAuthRegistrationIntents.d.mts +87 -0
- package/dist/oauth/OAuthRegistrationIntents.mjs +19 -0
- package/dist/oauth/OAuthRegistrationIntents.mjs.map +1 -0
- package/dist/oauth/OAuthReturnTargets.d.mts +15 -0
- package/dist/oauth/OAuthReturnTargets.mjs +24 -0
- package/dist/oauth/OAuthReturnTargets.mjs.map +1 -0
- package/dist/oauth/OAuthSignInPersistence.d.mts +68 -0
- package/dist/oauth/OAuthSignInPersistence.mjs +12 -0
- package/dist/oauth/OAuthSignInPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthStateDecisions.d.mts +14 -0
- package/dist/oauth/OAuthStateDecisions.mjs +8 -0
- package/dist/oauth/OAuthStateDecisions.mjs.map +1 -0
- package/dist/oauth/OAuthStateStore.d.mts +35 -0
- package/dist/oauth/OAuthStateStore.mjs +64 -0
- package/dist/oauth/OAuthStateStore.mjs.map +1 -0
- package/dist/oauth/OAuthTransactionProtector.d.mts +26 -0
- package/dist/oauth/OAuthTransactionProtector.mjs +78 -0
- package/dist/oauth/OAuthTransactionProtector.mjs.map +1 -0
- package/dist/oauth/accounts.d.mts +29 -0
- package/dist/oauth/accounts.mjs +515 -0
- package/dist/oauth/accounts.mjs.map +1 -0
- package/dist/oauth/accountsModels.d.mts +463 -0
- package/dist/oauth/accountsModels.mjs +155 -0
- package/dist/oauth/accountsModels.mjs.map +1 -0
- package/dist/oauth/connected.d.mts +442 -0
- package/dist/oauth/connected.mjs +526 -0
- package/dist/oauth/connected.mjs.map +1 -0
- package/dist/oauth/connectedAccess.d.mts +20 -0
- package/dist/oauth/connectedAccess.mjs +279 -0
- package/dist/oauth/connectedAccess.mjs.map +1 -0
- package/dist/oauth/connectedMaintenance.d.mts +19 -0
- package/dist/oauth/connectedMaintenance.mjs +133 -0
- package/dist/oauth/connectedMaintenance.mjs.map +1 -0
- package/dist/oauth/connectedModels.d.mts +2023 -0
- package/dist/oauth/connectedModels.mjs +375 -0
- package/dist/oauth/connectedModels.mjs.map +1 -0
- package/dist/oauth/definition.d.mts +4396 -0
- package/dist/oauth/definition.mjs +120 -0
- package/dist/oauth/definition.mjs.map +1 -0
- package/dist/oauth/errors.d.mts +49 -0
- package/dist/oauth/errors.mjs +42 -0
- package/dist/oauth/errors.mjs.map +1 -0
- package/dist/oauth/github/identity.d.mts +8 -0
- package/dist/oauth/github/identity.mjs +24 -0
- package/dist/oauth/github/identity.mjs.map +1 -0
- package/dist/oauth/github/models.d.mts +34 -0
- package/dist/oauth/github/protocol.d.mts +54 -0
- package/dist/oauth/github/protocol.mjs +204 -0
- package/dist/oauth/github/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/ProviderRevocation.d.mts +4 -0
- package/dist/oauth/openid-client/ProviderRevocation.mjs +11 -0
- package/dist/oauth/openid-client/ProviderRevocation.mjs.map +1 -0
- package/dist/oauth/openid-client/compatibility.d.mts +1 -0
- package/dist/oauth/openid-client/compatibility.mjs +6 -0
- package/dist/oauth/openid-client/compatibility.mjs.map +1 -0
- package/dist/oauth/openid-client/configuration.mjs +305 -0
- package/dist/oauth/openid-client/configuration.mjs.map +1 -0
- package/dist/oauth/openid-client/connected/configuration.mjs +338 -0
- package/dist/oauth/openid-client/connected/configuration.mjs.map +1 -0
- package/dist/oauth/openid-client/connected/models.d.mts +42 -0
- package/dist/oauth/openid-client/connected/protocol.d.mts +16 -0
- package/dist/oauth/openid-client/connected/protocol.mjs +402 -0
- package/dist/oauth/openid-client/connected/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/models.d.mts +67 -0
- package/dist/oauth/openid-client/models.mjs +16 -0
- package/dist/oauth/openid-client/models.mjs.map +1 -0
- package/dist/oauth/openid-client/protocol.d.mts +27 -0
- package/dist/oauth/openid-client/protocol.mjs +218 -0
- package/dist/oauth/openid-client/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/transport.mjs +59 -0
- package/dist/oauth/openid-client/transport.mjs.map +1 -0
- package/dist/oauth/policy.d.mts +18 -0
- package/dist/oauth/policy.mjs +16 -0
- package/dist/oauth/policy.mjs.map +1 -0
- package/dist/oauth/registration.d.mts +24 -0
- package/dist/oauth/registration.mjs +177 -0
- package/dist/oauth/registration.mjs.map +1 -0
- package/dist/oauth/registrationModels.d.mts +152 -0
- package/dist/oauth/registrationModels.mjs +93 -0
- package/dist/oauth/registrationModels.mjs.map +1 -0
- package/dist/oauth/registrationSecrets.mjs +70 -0
- package/dist/oauth/registrationSecrets.mjs.map +1 -0
- package/dist/oauth/schema.d.mts +86 -0
- package/dist/oauth/schema.mjs +81 -0
- package/dist/oauth/schema.mjs.map +1 -0
- package/dist/oauth/signInErrors.d.mts +17 -0
- package/dist/oauth/signInErrors.mjs +16 -0
- package/dist/oauth/signInErrors.mjs.map +1 -0
- package/dist/oauth/signInModels.d.mts +343 -0
- package/dist/oauth/signInModels.mjs +181 -0
- package/dist/oauth/signInModels.mjs.map +1 -0
- package/dist/oauth/signInModule.d.mts +1546 -0
- package/dist/oauth/signInModule.mjs +430 -0
- package/dist/oauth/signInModule.mjs.map +1 -0
- package/dist/oauth/signInSnapshot.mjs +29 -0
- package/dist/oauth/signInSnapshot.mjs.map +1 -0
- package/dist/oauth/transactionEncryption.d.mts +14 -0
- package/dist/oauth/transactionEncryption.mjs +129 -0
- package/dist/oauth/transactionEncryption.mjs.map +1 -0
- package/dist/operations/RequestBindingConfig.d.mts +11 -0
- package/dist/operations/RequestBindingConfig.mjs +10 -0
- package/dist/operations/RequestBindingConfig.mjs.map +1 -0
- package/dist/operations/actions.d.mts +947 -0
- package/dist/operations/actions.mjs +148 -0
- package/dist/operations/actions.mjs.map +1 -0
- package/dist/operations/context.d.mts +63 -0
- package/dist/operations/context.mjs +55 -0
- package/dist/operations/context.mjs.map +1 -0
- package/dist/operations/credentials.d.mts +39 -0
- package/dist/operations/credentials.mjs +60 -0
- package/dist/operations/credentials.mjs.map +1 -0
- package/dist/operations/errors.d.mts +24 -0
- package/dist/operations/errors.mjs +31 -0
- package/dist/operations/errors.mjs.map +1 -0
- package/dist/operations/operation.d.mts +124 -0
- package/dist/operations/operation.mjs +220 -0
- package/dist/operations/operation.mjs.map +1 -0
- package/dist/operations/requestBinding.d.mts +46 -0
- package/dist/operations/requestBinding.mjs +130 -0
- package/dist/operations/requestBinding.mjs.map +1 -0
- package/dist/operations/requestBindingModels.d.mts +13 -0
- package/dist/operations/requestBindingModels.mjs +12 -0
- package/dist/operations/requestBindingModels.mjs.map +1 -0
- package/dist/operations/reveals.d.mts +28 -0
- package/dist/operations/reveals.mjs +88 -0
- package/dist/operations/reveals.mjs.map +1 -0
- package/dist/passkey/PasskeyActionEvidence.d.mts +22 -0
- package/dist/passkey/PasskeyActionEvidence.mjs +9 -0
- package/dist/passkey/PasskeyActionEvidence.mjs.map +1 -0
- package/dist/passkey/PasskeyCredentials.d.mts +16 -0
- package/dist/passkey/PasskeyCredentials.mjs +9 -0
- package/dist/passkey/PasskeyCredentials.mjs.map +1 -0
- package/dist/passkey/PasskeyEnrollmentContext.d.mts +22 -0
- package/dist/passkey/PasskeyEnrollmentContext.mjs +9 -0
- package/dist/passkey/PasskeyEnrollmentContext.mjs.map +1 -0
- package/dist/passkey/PasskeyManagementPersistence.d.mts +106 -0
- package/dist/passkey/PasskeyManagementPersistence.mjs +9 -0
- package/dist/passkey/PasskeyManagementPersistence.mjs.map +1 -0
- package/dist/passkey/PasskeyPersistence.d.mts +63 -0
- package/dist/passkey/PasskeyPersistence.mjs +10 -0
- package/dist/passkey/PasskeyPersistence.mjs.map +1 -0
- package/dist/passkey/PasskeyProtocol.d.mts +38 -0
- package/dist/passkey/PasskeyProtocol.mjs +11 -0
- package/dist/passkey/PasskeyProtocol.mjs.map +1 -0
- package/dist/passkey/actions.d.mts +50 -0
- package/dist/passkey/actions.mjs +376 -0
- package/dist/passkey/actions.mjs.map +1 -0
- package/dist/passkey/browser/PasskeyBrowser.d.mts +18 -0
- package/dist/passkey/browser/PasskeyBrowser.mjs +9 -0
- package/dist/passkey/browser/PasskeyBrowser.mjs.map +1 -0
- package/dist/passkey/browser/models.d.mts +38 -0
- package/dist/passkey/browser/models.mjs +41 -0
- package/dist/passkey/browser/models.mjs.map +1 -0
- package/dist/passkey/browser/simplewebauthn.d.mts +17 -0
- package/dist/passkey/browser/simplewebauthn.mjs +411 -0
- package/dist/passkey/browser/simplewebauthn.mjs.map +1 -0
- package/dist/passkey/definition.d.mts +5626 -0
- package/dist/passkey/definition.mjs +114 -0
- package/dist/passkey/definition.mjs.map +1 -0
- package/dist/passkey/errors.d.mts +20 -0
- package/dist/passkey/errors.mjs +20 -0
- package/dist/passkey/errors.mjs.map +1 -0
- package/dist/passkey/management.mjs +276 -0
- package/dist/passkey/management.mjs.map +1 -0
- package/dist/passkey/models.d.mts +1245 -0
- package/dist/passkey/models.mjs +301 -0
- package/dist/passkey/models.mjs.map +1 -0
- package/dist/passkey/module.d.mts +2132 -0
- package/dist/passkey/module.mjs +174 -0
- package/dist/passkey/module.mjs.map +1 -0
- package/dist/passkey/pending.mjs +99 -0
- package/dist/passkey/pending.mjs.map +1 -0
- package/dist/passkey/policy.d.mts +48 -0
- package/dist/passkey/policy.mjs +77 -0
- package/dist/passkey/policy.mjs.map +1 -0
- package/dist/passkey/registration.mjs +107 -0
- package/dist/passkey/registration.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/configuration.mjs +45 -0
- package/dist/passkey/simplewebauthn/configuration.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/models.d.mts +21 -0
- package/dist/passkey/simplewebauthn/models.mjs +8 -0
- package/dist/passkey/simplewebauthn/models.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/protocol.d.mts +62 -0
- package/dist/passkey/simplewebauthn/protocol.mjs +402 -0
- package/dist/passkey/simplewebauthn/protocol.mjs.map +1 -0
- package/dist/passkey/snapshot.mjs +31 -0
- package/dist/passkey/snapshot.mjs.map +1 -0
- package/dist/passkey/stepUp.mjs +101 -0
- package/dist/passkey/stepUp.mjs.map +1 -0
- package/dist/password/CompromisedPasswords.d.mts +26 -0
- package/dist/password/CompromisedPasswords.mjs +23 -0
- package/dist/password/CompromisedPasswords.mjs.map +1 -0
- package/dist/password/NewPasswordCheck.d.mts +21 -0
- package/dist/password/NewPasswordCheck.mjs +39 -0
- package/dist/password/NewPasswordCheck.mjs.map +1 -0
- package/dist/password/PasswordHashing.d.mts +24 -0
- package/dist/password/PasswordHashing.mjs +96 -0
- package/dist/password/PasswordHashing.mjs.map +1 -0
- package/dist/password/PasswordKdfAdmission.d.mts +19 -0
- package/dist/password/PasswordKdfAdmission.mjs +25 -0
- package/dist/password/PasswordKdfAdmission.mjs.map +1 -0
- package/dist/password/configuration.d.mts +43 -0
- package/dist/password/configuration.mjs +64 -0
- package/dist/password/configuration.mjs.map +1 -0
- package/dist/password/defaults.mjs +13 -0
- package/dist/password/defaults.mjs.map +1 -0
- package/dist/password/encoding.mjs +64 -0
- package/dist/password/encoding.mjs.map +1 -0
- package/dist/password/errors.d.mts +28 -0
- package/dist/password/errors.mjs +25 -0
- package/dist/password/errors.mjs.map +1 -0
- package/dist/password/methods/PasswordActionEvidence.d.mts +38 -0
- package/dist/password/methods/PasswordActionEvidence.mjs +22 -0
- package/dist/password/methods/PasswordActionEvidence.mjs.map +1 -0
- package/dist/password/methods/PasswordPersistence.d.mts +102 -0
- package/dist/password/methods/PasswordPersistence.mjs +13 -0
- package/dist/password/methods/PasswordPersistence.mjs.map +1 -0
- package/dist/password/methods/PasswordPreparedPersistence.d.mts +111 -0
- package/dist/password/methods/contracts.d.mts +43 -0
- package/dist/password/methods/contracts.mjs +33 -0
- package/dist/password/methods/contracts.mjs.map +1 -0
- package/dist/password/methods/definition.d.mts +3813 -0
- package/dist/password/methods/definition.mjs +56 -0
- package/dist/password/methods/definition.mjs.map +1 -0
- package/dist/password/methods/errors.d.mts +15 -0
- package/dist/password/methods/errors.mjs +11 -0
- package/dist/password/methods/errors.mjs.map +1 -0
- package/dist/password/methods/models.d.mts +70 -0
- package/dist/password/methods/models.mjs +44 -0
- package/dist/password/methods/models.mjs.map +1 -0
- package/dist/password/methods/module.d.mts +3567 -0
- package/dist/password/methods/module.mjs +553 -0
- package/dist/password/methods/module.mjs.map +1 -0
- package/dist/password/methods/policy.d.mts +84 -0
- package/dist/password/methods/policy.mjs +80 -0
- package/dist/password/methods/policy.mjs.map +1 -0
- package/dist/password/methods/preparation.mjs +54 -0
- package/dist/password/methods/preparation.mjs.map +1 -0
- package/dist/password/methods/prepared.d.mts +53 -0
- package/dist/password/methods/prepared.mjs +610 -0
- package/dist/password/methods/prepared.mjs.map +1 -0
- package/dist/password/methods/preparedModels.d.mts +1295 -0
- package/dist/password/methods/preparedModels.mjs +278 -0
- package/dist/password/methods/preparedModels.mjs.map +1 -0
- package/dist/password/methods/signIn.d.mts +180 -0
- package/dist/password/methods/signIn.mjs +73 -0
- package/dist/password/methods/signIn.mjs.map +1 -0
- package/dist/password/methods/snapshot.mjs +38 -0
- package/dist/password/methods/snapshot.mjs.map +1 -0
- package/dist/password/methods/verification.mjs +138 -0
- package/dist/password/methods/verification.mjs.map +1 -0
- package/dist/password/models.d.mts +13 -0
- package/dist/password/models.mjs +12 -0
- package/dist/password/models.mjs.map +1 -0
- package/dist/password/policy.d.mts +33 -0
- package/dist/password/policy.mjs +37 -0
- package/dist/password/policy.mjs.map +1 -0
- package/dist/phone/PhoneActionEvidence.d.mts +23 -0
- package/dist/phone/PhoneActionEvidence.mjs +10 -0
- package/dist/phone/PhoneActionEvidence.mjs.map +1 -0
- package/dist/phone/PhoneAdmission.d.mts +29 -0
- package/dist/phone/PhoneAdmission.mjs +10 -0
- package/dist/phone/PhoneAdmission.mjs.map +1 -0
- package/dist/phone/PhoneDeliveryEligibility.d.mts +11 -0
- package/dist/phone/PhoneDeliveryEligibility.mjs +8 -0
- package/dist/phone/PhoneDeliveryEligibility.mjs.map +1 -0
- package/dist/phone/PhonePersistence.d.mts +33 -0
- package/dist/phone/PhonePersistence.mjs +10 -0
- package/dist/phone/PhonePersistence.mjs.map +1 -0
- package/dist/phone/PhoneRequestContext.d.mts +10 -0
- package/dist/phone/PhoneRequestContext.mjs +8 -0
- package/dist/phone/PhoneRequestContext.mjs.map +1 -0
- package/dist/phone/PhoneSignInTargets.d.mts +19 -0
- package/dist/phone/PhoneSignInTargets.mjs +13 -0
- package/dist/phone/PhoneSignInTargets.mjs.map +1 -0
- package/dist/phone/definition.d.mts +7190 -0
- package/dist/phone/definition.mjs +28 -0
- package/dist/phone/definition.mjs.map +1 -0
- package/dist/phone/failure.mjs +23 -0
- package/dist/phone/failure.mjs.map +1 -0
- package/dist/phone/lifecycle.mjs +427 -0
- package/dist/phone/lifecycle.mjs.map +1 -0
- package/dist/phone/lifecycleModels.d.mts +164 -0
- package/dist/phone/lifecycleModels.mjs +91 -0
- package/dist/phone/lifecycleModels.mjs.map +1 -0
- package/dist/phone/models.d.mts +41 -0
- package/dist/phone/models.mjs +29 -0
- package/dist/phone/models.mjs.map +1 -0
- package/dist/phone/module.d.mts +6027 -0
- package/dist/phone/module.mjs +293 -0
- package/dist/phone/module.mjs.map +1 -0
- package/dist/proofs/EmailProofDelivery.d.mts +13 -0
- package/dist/proofs/EmailProofDelivery.mjs +11 -0
- package/dist/proofs/EmailProofDelivery.mjs.map +1 -0
- package/dist/proofs/HostIngressLimiter.d.mts +20 -0
- package/dist/proofs/HostIngressLimiter.mjs +13 -0
- package/dist/proofs/HostIngressLimiter.mjs.map +1 -0
- package/dist/proofs/ProofPersistence.d.mts +140 -0
- package/dist/proofs/ProofPersistence.mjs +13 -0
- package/dist/proofs/ProofPersistence.mjs.map +1 -0
- package/dist/proofs/SmsProofDelivery.d.mts +13 -0
- package/dist/proofs/SmsProofDelivery.mjs +11 -0
- package/dist/proofs/SmsProofDelivery.mjs.map +1 -0
- package/dist/proofs/abuse.d.mts +15 -0
- package/dist/proofs/abuse.mjs +12 -0
- package/dist/proofs/abuse.mjs.map +1 -0
- package/dist/proofs/completion.d.mts +22 -0
- package/dist/proofs/crypto.d.mts +196 -0
- package/dist/proofs/crypto.mjs +189 -0
- package/dist/proofs/crypto.mjs.map +1 -0
- package/dist/proofs/definition.d.mts +335 -0
- package/dist/proofs/definition.mjs +10 -0
- package/dist/proofs/definition.mjs.map +1 -0
- package/dist/proofs/delivery.d.mts +30 -0
- package/dist/proofs/delivery.mjs +26 -0
- package/dist/proofs/delivery.mjs.map +1 -0
- package/dist/proofs/dispatch.d.mts +20 -0
- package/dist/proofs/dispatch.mjs +54 -0
- package/dist/proofs/dispatch.mjs.map +1 -0
- package/dist/proofs/errors.d.mts +21 -0
- package/dist/proofs/errors.mjs +25 -0
- package/dist/proofs/errors.mjs.map +1 -0
- package/dist/proofs/models.d.mts +141 -0
- package/dist/proofs/models.mjs +93 -0
- package/dist/proofs/models.mjs.map +1 -0
- package/dist/proofs/module.d.mts +344 -0
- package/dist/proofs/module.mjs +350 -0
- package/dist/proofs/module.mjs.map +1 -0
- package/dist/proofs/policy.d.mts +152 -0
- package/dist/proofs/policy.mjs +51 -0
- package/dist/proofs/policy.mjs.map +1 -0
- package/dist/sessions/AuthenticationAuthority.d.mts +31 -0
- package/dist/sessions/AuthenticationAuthority.mjs +8 -0
- package/dist/sessions/AuthenticationAuthority.mjs.map +1 -0
- package/dist/sessions/PendingAuthentication.d.mts +108 -0
- package/dist/sessions/PendingAuthentication.mjs +40 -0
- package/dist/sessions/PendingAuthentication.mjs.map +1 -0
- package/dist/sessions/SessionStepUpPersistence.d.mts +152 -0
- package/dist/sessions/SessionStepUpPersistence.mjs +63 -0
- package/dist/sessions/SessionStepUpPersistence.mjs.map +1 -0
- package/dist/sessions/assurance.d.mts +163 -0
- package/dist/sessions/assurance.mjs +95 -0
- package/dist/sessions/assurance.mjs.map +1 -0
- package/dist/sessions/commit.d.mts +13 -0
- package/dist/sessions/configuration.d.mts +46 -0
- package/dist/sessions/configuration.mjs +55 -0
- package/dist/sessions/configuration.mjs.map +1 -0
- package/dist/sessions/contract.d.mts +663 -0
- package/dist/sessions/contract.mjs +174 -0
- package/dist/sessions/contract.mjs.map +1 -0
- package/dist/sessions/crypto.d.mts +24 -0
- package/dist/sessions/crypto.mjs +106 -0
- package/dist/sessions/crypto.mjs.map +1 -0
- package/dist/sessions/definition.d.mts +11 -0
- package/dist/sessions/definition.mjs +10 -0
- package/dist/sessions/definition.mjs.map +1 -0
- package/dist/sessions/errors.d.mts +35 -0
- package/dist/sessions/errors.mjs +34 -0
- package/dist/sessions/errors.mjs.map +1 -0
- package/dist/sessions/invalidation.d.mts +23 -0
- package/dist/sessions/invalidation.mjs +33 -0
- package/dist/sessions/invalidation.mjs.map +1 -0
- package/dist/sessions/models.d.mts +143 -0
- package/dist/sessions/models.mjs +94 -0
- package/dist/sessions/models.mjs.map +1 -0
- package/dist/sessions/module.d.mts +1091 -0
- package/dist/sessions/module.mjs +943 -0
- package/dist/sessions/module.mjs.map +1 -0
- package/dist/sessions/persistence.d.mts +93 -0
- package/dist/sessions/policy.d.mts +80 -0
- package/dist/sessions/policy.mjs +66 -0
- package/dist/sessions/policy.mjs.map +1 -0
- package/dist/testing/conformance/AuthStore.d.mts +11 -0
- package/dist/testing/conformance/AuthStore.mjs +173 -0
- package/dist/testing/conformance/AuthStore.mjs.map +1 -0
- package/dist/testing/conformance/OAuthConnectionStore.d.mts +11 -0
- package/dist/testing/conformance/OAuthConnectionStore.mjs +102 -0
- package/dist/testing/conformance/OAuthConnectionStore.mjs.map +1 -0
- package/dist/testing/conformance/OAuthStateStore.d.mts +11 -0
- package/dist/testing/conformance/OAuthStateStore.mjs +45 -0
- package/dist/testing/conformance/OAuthStateStore.mjs.map +1 -0
- package/dist/testing/conformance/PasswordCredentialStore.d.mts +20 -0
- package/dist/testing/conformance/PasswordCredentialStore.mjs +103 -0
- package/dist/testing/conformance/PasswordCredentialStore.mjs.map +1 -0
- package/dist/testing/conformance/support.mjs +17 -0
- package/dist/testing/conformance/support.mjs.map +1 -0
- package/dist/testing/crypto.d.mts +11 -0
- package/dist/testing/crypto.mjs +41 -0
- package/dist/testing/crypto.mjs.map +1 -0
- package/dist/testing/keyring.d.mts +9 -0
- package/dist/testing/keyring.mjs +17 -0
- package/dist/testing/keyring.mjs.map +1 -0
- package/dist/totp/TotpActionEvidence.d.mts +18 -0
- package/dist/totp/TotpActionEvidence.mjs +8 -0
- package/dist/totp/TotpActionEvidence.mjs.map +1 -0
- package/dist/totp/TotpPersistence.d.mts +19 -0
- package/dist/totp/TotpPersistence.mjs +8 -0
- package/dist/totp/TotpPersistence.mjs.map +1 -0
- package/dist/totp/TotpSecretKeys.d.mts +15 -0
- package/dist/totp/TotpSecretKeys.mjs +8 -0
- package/dist/totp/TotpSecretKeys.mjs.map +1 -0
- package/dist/totp/crypto.mjs +96 -0
- package/dist/totp/crypto.mjs.map +1 -0
- package/dist/totp/definition.d.mts +764 -0
- package/dist/totp/definition.mjs +24 -0
- package/dist/totp/definition.mjs.map +1 -0
- package/dist/totp/errors.d.mts +16 -0
- package/dist/totp/errors.mjs +18 -0
- package/dist/totp/errors.mjs.map +1 -0
- package/dist/totp/models.d.mts +377 -0
- package/dist/totp/models.mjs +137 -0
- package/dist/totp/models.mjs.map +1 -0
- package/dist/totp/module.d.mts +737 -0
- package/dist/totp/module.mjs +355 -0
- package/dist/totp/module.mjs.map +1 -0
- package/package.json +1 -0
- package/src/Atom.ts +4 -0
- package/src/Auth.ts +16 -0
- package/src/AuthContract.ts +17 -0
- package/src/AuthSession.ts +298 -0
- package/src/AuthStore.ts +367 -0
- package/src/AuthTokenCodec.ts +226 -0
- package/src/Client.ts +9 -0
- package/src/Cloudflare.ts +345 -0
- package/src/Drizzle.ts +378 -0
- package/src/DrizzleD1.ts +136 -0
- package/src/DrizzleLibsql.ts +288 -0
- package/src/DrizzleMysql2.ts +184 -0
- package/src/DrizzlePglite.ts +160 -0
- package/src/DrizzlePostgres.ts +160 -0
- package/src/DrizzleSqliteBun.ts +244 -0
- package/src/DrizzleSqliteDo.ts +473 -0
- package/src/DrizzleSqliteNode.ts +245 -0
- package/src/DrizzleSqliteWasm.ts +245 -0
- package/src/Email.ts +55 -0
- package/src/EmailOtp.ts +250 -0
- package/src/EmailOtpSender.ts +28 -0
- package/src/Errors.ts +103 -0
- package/src/GitHub.ts +16 -0
- package/src/Hooks.ts +50 -0
- package/src/Http.ts +47 -0
- package/src/HttpServer.ts +742 -0
- package/src/Identity.ts +53 -0
- package/src/IdentityResolver.ts +18 -0
- package/src/OAuth.ts +242 -0
- package/src/OpenIdClient.ts +13 -0
- package/src/OpenIdClientConnected.ts +18 -0
- package/src/OperationHttp.ts +14 -0
- package/src/OperationHttpClient.ts +6 -0
- package/src/OperationHttpServer.ts +15 -0
- package/src/Operations.ts +69 -0
- package/src/Passkey.ts +81 -0
- package/src/PasskeyBrowser.ts +19 -0
- package/src/PasskeyContract.ts +212 -0
- package/src/PasskeyPassword.ts +319 -0
- package/src/PasskeySimpleWebAuthn.ts +6 -0
- package/src/Password.ts +113 -0
- package/src/PasswordAuth.ts +197 -0
- package/src/PasswordCredentialStore.ts +140 -0
- package/src/PasswordHasher.ts +147 -0
- package/src/PhoneOtp.ts +32 -0
- package/src/Policy.ts +95 -0
- package/src/Proofs.ts +71 -0
- package/src/Rpc.ts +15 -0
- package/src/Schema.ts +235 -0
- package/src/SessionContract.ts +2 -0
- package/src/Sessions.ts +105 -0
- package/src/Testing.ts +24 -0
- package/src/Totp.ts +28 -0
- package/src/TotpContract.ts +147 -0
- package/src/WebCrypto.ts +61 -0
- package/src/Workflows.ts +12 -0
- package/src/atom/AuthAtomLifetime.ts +87 -0
- package/src/atom/AuthAtomWorkflow.ts +27 -0
- package/src/atom/client.ts +364 -0
- package/src/atom/operations.ts +183 -0
- package/src/atom/scoped-runtime.ts +249 -0
- package/src/auth/Auth.ts +482 -0
- package/src/auth/AuthConfigurationError.ts +9 -0
- package/src/auth/AuthRequest.ts +21 -0
- package/src/auth/AuthStrategy.ts +116 -0
- package/src/auth/ConsumeDecision.ts +4 -0
- package/src/auth/actions.ts +220 -0
- package/src/auth/defaults.ts +23 -0
- package/src/auth/definition.ts +88 -0
- package/src/auth/session.ts +146 -0
- package/src/drizzle/D1BatchStatements.ts +10 -0
- package/src/drizzle/PasswordPreparedPostconditions.ts +30 -0
- package/src/drizzle/SuppliedService.ts +10 -0
- package/src/drizzle/d1-emails.ts +1808 -0
- package/src/drizzle/d1-generated-statement.ts +129 -0
- package/src/drizzle/d1-identity.ts +374 -0
- package/src/drizzle/d1-oauth.ts +338 -0
- package/src/drizzle/d1-passkey.ts +371 -0
- package/src/drizzle/d1-password-prepared.ts +1273 -0
- package/src/drizzle/d1-passwords.ts +2661 -0
- package/src/drizzle/d1-phone.ts +94 -0
- package/src/drizzle/d1-planning.ts +105 -0
- package/src/drizzle/d1-proofs.ts +2305 -0
- package/src/drizzle/d1-sessions.ts +2867 -0
- package/src/drizzle/d1-totp.ts +79 -0
- package/src/drizzle/email-model.ts +512 -0
- package/src/drizzle/email-registration.ts +696 -0
- package/src/drizzle/email-sql.ts +1468 -0
- package/src/drizzle/email-target.ts +243 -0
- package/src/drizzle/model.ts +492 -0
- package/src/drizzle/mysql-emails.ts +323 -0
- package/src/drizzle/mysql-identity.ts +323 -0
- package/src/drizzle/mysql-password-prepared.ts +206 -0
- package/src/drizzle/mysql-passwords.ts +341 -0
- package/src/drizzle/mysql-proofs.ts +183 -0
- package/src/drizzle/mysql-sessions.ts +742 -0
- package/src/drizzle/mysql.ts +686 -0
- package/src/drizzle/oauth-accounts.ts +801 -0
- package/src/drizzle/oauth-connected-access.ts +354 -0
- package/src/drizzle/oauth-connected-collection.ts +324 -0
- package/src/drizzle/oauth-connected-custody.ts +277 -0
- package/src/drizzle/oauth-connected-drivers.ts +463 -0
- package/src/drizzle/oauth-connected-flow.ts +439 -0
- package/src/drizzle/oauth-connected-input.ts +128 -0
- package/src/drizzle/oauth-connected-maintenance.ts +345 -0
- package/src/drizzle/oauth-connected-management.ts +365 -0
- package/src/drizzle/oauth-connected-model.ts +347 -0
- package/src/drizzle/oauth-connected-reference.ts +112 -0
- package/src/drizzle/oauth-connected-settlement.ts +226 -0
- package/src/drizzle/oauth-connected-state.ts +846 -0
- package/src/drizzle/oauth-connected-target.ts +264 -0
- package/src/drizzle/oauth-drivers.ts +567 -0
- package/src/drizzle/oauth-flow.ts +461 -0
- package/src/drizzle/oauth-input.ts +205 -0
- package/src/drizzle/oauth-model.ts +610 -0
- package/src/drizzle/oauth-mysql.ts +10 -0
- package/src/drizzle/oauth-owner.ts +29 -0
- package/src/drizzle/oauth-registration.ts +638 -0
- package/src/drizzle/oauth-state.ts +213 -0
- package/src/drizzle/oauth-target.ts +751 -0
- package/src/drizzle/passkey-admission.ts +333 -0
- package/src/drizzle/passkey-credentials.ts +465 -0
- package/src/drizzle/passkey-drivers.ts +385 -0
- package/src/drizzle/passkey-enrollment.ts +280 -0
- package/src/drizzle/passkey-flow.ts +983 -0
- package/src/drizzle/passkey-management.ts +369 -0
- package/src/drizzle/passkey-model.ts +350 -0
- package/src/drizzle/passkey-registration-ceremony-model.ts +69 -0
- package/src/drizzle/passkey-registration-ceremony.ts +254 -0
- package/src/drizzle/passkey-registration-custody.ts +82 -0
- package/src/drizzle/passkey-registration-write.ts +378 -0
- package/src/drizzle/passkey-state.ts +307 -0
- package/src/drizzle/passkey-target.ts +528 -0
- package/src/drizzle/passkey-write-drivers.ts +396 -0
- package/src/drizzle/passkey-write-model.ts +265 -0
- package/src/drizzle/passkey-write-state.ts +627 -0
- package/src/drizzle/passkey-write-target.ts +406 -0
- package/src/drizzle/password-model.ts +491 -0
- package/src/drizzle/password-prepared-model.ts +259 -0
- package/src/drizzle/password-prepared-sql.ts +1198 -0
- package/src/drizzle/password-prepared-state.ts +232 -0
- package/src/drizzle/password-prepared-target.ts +158 -0
- package/src/drizzle/password-registration.ts +372 -0
- package/src/drizzle/password-sql.ts +2082 -0
- package/src/drizzle/password-target.ts +223 -0
- package/src/drizzle/pg-emails.ts +323 -0
- package/src/drizzle/pg-password-prepared.ts +207 -0
- package/src/drizzle/pg-passwords.ts +340 -0
- package/src/drizzle/pg-proofs.ts +193 -0
- package/src/drizzle/pg-sessions.ts +751 -0
- package/src/drizzle/pg.ts +982 -0
- package/src/drizzle/phone-model.ts +185 -0
- package/src/drizzle/phone-state.ts +802 -0
- package/src/drizzle/phone-target.ts +471 -0
- package/src/drizzle/proof-model.ts +398 -0
- package/src/drizzle/proof-sql.ts +1912 -0
- package/src/drizzle/proof-target.ts +120 -0
- package/src/drizzle/session-model.ts +368 -0
- package/src/drizzle/session-sql.ts +2152 -0
- package/src/drizzle/session-target.ts +335 -0
- package/src/drizzle/sqlite-emails.ts +368 -0
- package/src/drizzle/sqlite-identity.ts +343 -0
- package/src/drizzle/sqlite-password-prepared.ts +262 -0
- package/src/drizzle/sqlite-passwords.ts +499 -0
- package/src/drizzle/sqlite-proofs.ts +204 -0
- package/src/drizzle/sqlite-sessions.ts +972 -0
- package/src/drizzle/sqlite.ts +704 -0
- package/src/drizzle/standalone-guard.ts +38 -0
- package/src/drizzle/step-up-model.ts +129 -0
- package/src/drizzle/step-up-state.ts +141 -0
- package/src/drizzle/totp-model.ts +91 -0
- package/src/drizzle/totp-state.ts +520 -0
- package/src/drizzle/totp-target.ts +304 -0
- package/src/drizzle/transaction-execution.ts +290 -0
- package/src/drizzle/transaction-mysql.ts +104 -0
- package/src/drizzle/transaction-owner.ts +570 -0
- package/src/email/EmailActionEvidence.ts +37 -0
- package/src/email/EmailAddressPersistence.ts +71 -0
- package/src/email/EmailIdentifierNotifier.ts +48 -0
- package/src/email/EmailReturnTargets.ts +50 -0
- package/src/email/EmailSignInTargets.ts +20 -0
- package/src/email/addresses.ts +630 -0
- package/src/email/definition.ts +309 -0
- package/src/email/errors.ts +23 -0
- package/src/email/magicLink.ts +84 -0
- package/src/email/models.ts +50 -0
- package/src/email/module.ts +664 -0
- package/src/email/registration.ts +415 -0
- package/src/email/snapshot.ts +51 -0
- package/src/hooks/LifecycleHooks.ts +136 -0
- package/src/hooks/commit.ts +271 -0
- package/src/hooks/models.ts +111 -0
- package/src/hooks/plugins.ts +87 -0
- package/src/hooks/transactions.ts +51 -0
- package/src/http/auth-api.ts +17 -0
- package/src/http/auth-contract.ts +148 -0
- package/src/http/auth-http.ts +467 -0
- package/src/http/endpoints/get-session.ts +9 -0
- package/src/http/endpoints/password-sign-in.ts +19 -0
- package/src/http/endpoints/request-email-otp.ts +10 -0
- package/src/http/endpoints/set-password.ts +18 -0
- package/src/http/endpoints/sign-out.ts +5 -0
- package/src/http/endpoints/verify-email-otp.ts +15 -0
- package/src/http/models.ts +80 -0
- package/src/http/security.ts +102 -0
- package/src/http/session-contract.ts +92 -0
- package/src/http-operation/OperationHttpInvocation.ts +39 -0
- package/src/http-operation/OperationHttpServerConfig.ts +124 -0
- package/src/http-operation/auth-client.ts +273 -0
- package/src/http-operation/client.ts +453 -0
- package/src/http-operation/configuration-schema.ts +19 -0
- package/src/http-operation/contract.ts +116 -0
- package/src/http-operation/errors.ts +38 -0
- package/src/http-operation/models.ts +42 -0
- package/src/http-operation/private.ts +50 -0
- package/src/http-operation/security.ts +93 -0
- package/src/http-operation/server.ts +544 -0
- package/src/identity/ExternalIdentityMutation.ts +18 -0
- package/src/identity/IdentityMutation.ts +41 -0
- package/src/identity/IdentityRepository.ts +37 -0
- package/src/identity/SubjectLifecycle.ts +80 -0
- package/src/identity/SubjectProvisioner.ts +40 -0
- package/src/identity/codecs.ts +54 -0
- package/src/identity/models.ts +82 -0
- package/src/identity/operations.ts +182 -0
- package/src/index.ts +23 -0
- package/src/internal/AuthStoreDecisions.ts +23 -0
- package/src/internal/CurrentSession.ts +8 -0
- package/src/internal/diagnostics.ts +71 -0
- package/src/oauth/GithubOAuthProvider.ts +106 -0
- package/src/oauth/OAuth.ts +436 -0
- package/src/oauth/OAuthAccountsPersistence.ts +142 -0
- package/src/oauth/OAuthActionEvidence.ts +31 -0
- package/src/oauth/OAuthConnectedActionEvidence.ts +28 -0
- package/src/oauth/OAuthConnectedPersistence.ts +163 -0
- package/src/oauth/OAuthConnectedProtocol.ts +54 -0
- package/src/oauth/OAuthConnectedRevocations.ts +48 -0
- package/src/oauth/OAuthConnectedTokenProtector.ts +240 -0
- package/src/oauth/OAuthConnectedTransactionProtector.ts +56 -0
- package/src/oauth/OAuthConnectedUseAuthority.ts +26 -0
- package/src/oauth/OAuthConnectionStore.ts +59 -0
- package/src/oauth/OAuthLinkTransactionProtector.ts +58 -0
- package/src/oauth/OAuthProtocol.ts +39 -0
- package/src/oauth/OAuthProvider.ts +126 -0
- package/src/oauth/OAuthProviders.ts +53 -0
- package/src/oauth/OAuthRegistrationIntents.ts +42 -0
- package/src/oauth/OAuthReturnTargets.ts +44 -0
- package/src/oauth/OAuthSignInPersistence.ts +91 -0
- package/src/oauth/OAuthStateDecisions.ts +16 -0
- package/src/oauth/OAuthStateStore.ts +102 -0
- package/src/oauth/OAuthTransactionProtector.ts +103 -0
- package/src/oauth/accounts.ts +987 -0
- package/src/oauth/accountsModels.ts +214 -0
- package/src/oauth/connected.ts +995 -0
- package/src/oauth/connectedAccess.ts +644 -0
- package/src/oauth/connectedMaintenance.ts +248 -0
- package/src/oauth/connectedModels.ts +495 -0
- package/src/oauth/definition.ts +414 -0
- package/src/oauth/errors.ts +78 -0
- package/src/oauth/github/identity.ts +26 -0
- package/src/oauth/github/models.ts +37 -0
- package/src/oauth/github/protocol.ts +329 -0
- package/src/oauth/openid-client/ProviderRevocation.ts +22 -0
- package/src/oauth/openid-client/compatibility.ts +47 -0
- package/src/oauth/openid-client/configuration.ts +472 -0
- package/src/oauth/openid-client/connected/configuration.ts +565 -0
- package/src/oauth/openid-client/connected/models.ts +58 -0
- package/src/oauth/openid-client/connected/protocol.ts +866 -0
- package/src/oauth/openid-client/models.ts +78 -0
- package/src/oauth/openid-client/protocol.ts +437 -0
- package/src/oauth/openid-client/transport.ts +67 -0
- package/src/oauth/policy.ts +26 -0
- package/src/oauth/registration.ts +410 -0
- package/src/oauth/registrationModels.ts +115 -0
- package/src/oauth/registrationSecrets.ts +127 -0
- package/src/oauth/schema.ts +102 -0
- package/src/oauth/signInErrors.ts +23 -0
- package/src/oauth/signInModels.ts +266 -0
- package/src/oauth/signInModule.ts +875 -0
- package/src/oauth/signInSnapshot.ts +37 -0
- package/src/oauth/transactionEncryption.ts +198 -0
- package/src/operations/RequestBindingConfig.ts +12 -0
- package/src/operations/actions.ts +342 -0
- package/src/operations/context.ts +130 -0
- package/src/operations/credentials.ts +121 -0
- package/src/operations/errors.ts +53 -0
- package/src/operations/operation.ts +740 -0
- package/src/operations/requestBinding.ts +237 -0
- package/src/operations/requestBindingModels.ts +18 -0
- package/src/operations/reveals.ts +147 -0
- package/src/passkey/PasskeyActionEvidence.ts +25 -0
- package/src/passkey/PasskeyCredentials.ts +16 -0
- package/src/passkey/PasskeyEnrollmentContext.ts +26 -0
- package/src/passkey/PasskeyManagementPersistence.ts +124 -0
- package/src/passkey/PasskeyPersistence.ts +85 -0
- package/src/passkey/PasskeyProtocol.ts +48 -0
- package/src/passkey/actions.ts +905 -0
- package/src/passkey/browser/PasskeyBrowser.ts +26 -0
- package/src/passkey/browser/models.ts +67 -0
- package/src/passkey/browser/simplewebauthn.ts +621 -0
- package/src/passkey/definition.ts +386 -0
- package/src/passkey/errors.ts +39 -0
- package/src/passkey/management.ts +552 -0
- package/src/passkey/models.ts +414 -0
- package/src/passkey/module.ts +367 -0
- package/src/passkey/pending.ts +203 -0
- package/src/passkey/policy.ts +88 -0
- package/src/passkey/registration.ts +251 -0
- package/src/passkey/simplewebauthn/configuration.ts +97 -0
- package/src/passkey/simplewebauthn/models.ts +9 -0
- package/src/passkey/simplewebauthn/protocol.ts +729 -0
- package/src/passkey/snapshot.ts +48 -0
- package/src/passkey/stepUp.ts +212 -0
- package/src/password/CompromisedPasswords.ts +36 -0
- package/src/password/NewPasswordCheck.ts +89 -0
- package/src/password/PasswordHashing.ts +209 -0
- package/src/password/PasswordKdfAdmission.ts +44 -0
- package/src/password/configuration.ts +52 -0
- package/src/password/defaults.ts +15 -0
- package/src/password/encoding.ts +137 -0
- package/src/password/errors.ts +43 -0
- package/src/password/methods/PasswordActionEvidence.ts +41 -0
- package/src/password/methods/PasswordPersistence.ts +128 -0
- package/src/password/methods/PasswordPreparedPersistence.ts +123 -0
- package/src/password/methods/contracts.ts +47 -0
- package/src/password/methods/definition.ts +199 -0
- package/src/password/methods/errors.ts +26 -0
- package/src/password/methods/models.ts +80 -0
- package/src/password/methods/module.ts +986 -0
- package/src/password/methods/policy.ts +68 -0
- package/src/password/methods/preparation.ts +73 -0
- package/src/password/methods/prepared.ts +1199 -0
- package/src/password/methods/preparedModels.ts +496 -0
- package/src/password/methods/signIn.ts +136 -0
- package/src/password/methods/snapshot.ts +53 -0
- package/src/password/methods/verification.ts +266 -0
- package/src/password/models.ts +15 -0
- package/src/password/policy.ts +41 -0
- package/src/phone/PhoneActionEvidence.ts +26 -0
- package/src/phone/PhoneAdmission.ts +29 -0
- package/src/phone/PhoneDeliveryEligibility.ts +9 -0
- package/src/phone/PhonePersistence.ts +43 -0
- package/src/phone/PhoneRequestContext.ts +7 -0
- package/src/phone/PhoneSignInTargets.ts +19 -0
- package/src/phone/definition.ts +87 -0
- package/src/phone/failure.ts +40 -0
- package/src/phone/lifecycle.ts +662 -0
- package/src/phone/lifecycleModels.ts +108 -0
- package/src/phone/models.ts +41 -0
- package/src/phone/module.ts +433 -0
- package/src/proofs/EmailProofDelivery.ts +19 -0
- package/src/proofs/HostIngressLimiter.ts +20 -0
- package/src/proofs/ProofPersistence.ts +172 -0
- package/src/proofs/SmsProofDelivery.ts +19 -0
- package/src/proofs/abuse.ts +23 -0
- package/src/proofs/completion.ts +23 -0
- package/src/proofs/crypto.ts +326 -0
- package/src/proofs/definition.ts +39 -0
- package/src/proofs/delivery.ts +73 -0
- package/src/proofs/dispatch.ts +99 -0
- package/src/proofs/errors.ts +46 -0
- package/src/proofs/models.ts +131 -0
- package/src/proofs/module.ts +620 -0
- package/src/proofs/policy.ts +77 -0
- package/src/sessions/AuthenticationAuthority.ts +51 -0
- package/src/sessions/PendingAuthentication.ts +121 -0
- package/src/sessions/SessionStepUpPersistence.ts +164 -0
- package/src/sessions/assurance.ts +192 -0
- package/src/sessions/commit.ts +13 -0
- package/src/sessions/configuration.ts +133 -0
- package/src/sessions/contract.ts +203 -0
- package/src/sessions/crypto.ts +181 -0
- package/src/sessions/definition.ts +25 -0
- package/src/sessions/errors.ts +68 -0
- package/src/sessions/invalidation.ts +46 -0
- package/src/sessions/models.ts +138 -0
- package/src/sessions/module.ts +1991 -0
- package/src/sessions/persistence.ts +135 -0
- package/src/sessions/policy.ts +103 -0
- package/src/testing/conformance/AuthStore.ts +314 -0
- package/src/testing/conformance/OAuthConnectionStore.ts +167 -0
- package/src/testing/conformance/OAuthStateStore.ts +105 -0
- package/src/testing/conformance/PasswordCredentialStore.ts +205 -0
- package/src/testing/conformance/support.ts +38 -0
- package/src/testing/crypto.ts +55 -0
- package/src/testing/keyring.ts +17 -0
- package/src/totp/TotpActionEvidence.ts +18 -0
- package/src/totp/TotpPersistence.ts +26 -0
- package/src/totp/TotpSecretKeys.ts +15 -0
- package/src/totp/crypto.ts +160 -0
- package/src/totp/definition.ts +78 -0
- package/src/totp/errors.ts +25 -0
- package/src/totp/models.ts +164 -0
- package/src/totp/module.ts +717 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"d1-emails.mjs","names":[],"sources":["../../src/drizzle/d1-emails.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- D1 batches bridge consumer-owned Drizzle tables. */\nimport type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport { and, eq, inArray, lte, sql, type AnyRelations, type SQL, type Table } from \"drizzle-orm\";\nimport type { EffectDrizzleQueryError } from \"drizzle-orm/effect-core\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Schema, Cause, DateTime, Effect, Option, Context } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport { EmailAddressPersistence } from \"../email/EmailAddressPersistence\";\nimport { EmailSignInTargets } from \"../email/EmailSignInTargets\";\nimport { EmailUnavailable } from \"../email/errors\";\nimport type { EmailAction, EmailAddressDecision, EmailRegistrationDecision } from \"../email/models\";\nimport {\n coordinateCommit,\n CurrentCommitJournal,\n hasCommitScope,\n type CommitJournal,\n type PreparedCommit,\n} from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport { HookConfigurationError } from \"../hooks/models\";\nimport type { LoginIdentifier } from \"../identity/models\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport type { ProofCompletionPlan } from \"../proofs/completion\";\nimport { ProofUnavailable } from \"../proofs/errors\";\nimport type { ProofCompletionInput } from \"../proofs/ProofPersistence\";\nimport type { TokenDigest } from \"../Schema\";\nimport { assessAuthentication } from \"../sessions/assurance\";\nimport type { AuthenticationRequirement, SecurityRevision } from \"../sessions/models\";\nimport { CurrentD1PlanningDatabase, makeD1Owner } from \"./d1-planning\";\nimport { compileD1ProofCompletionPlan } from \"./d1-proofs\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport {\n requiredEmailAddressConstraints,\n requiredEmailRegistrationConstraints,\n type D1EmailAddressMapping,\n type D1EmailRegistrationMapping,\n type EmailRegistrationMapping,\n type EmailSignInMapping,\n} from \"./email-model\";\nimport type { EmailRegistrationAuthority } from \"./email-registration\";\nimport {\n CurrentEmailSql,\n currentAddress,\n decodeEmailSnapshot,\n emailLookupQuery,\n sameEmailRevision,\n snapshotEmailMutation,\n validEmailSignInConstraints,\n validateEmailAuthority,\n type CurrentAddress,\n type EmailSqlDatabase,\n} from \"./email-sql\";\nimport { column, isMappedConstraintConflict, DrizzleMappingError, updateValues } from \"./model\";\nimport type { D1ProofPersistenceMapping } from \"./proof-model\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype PlanPrepare<Method extends (...args: any[]) => any, A> = (\n value: Parameters<Parameters<Method>[1]>[0],\n journal: CommitJournal,\n) => PreparedCommit<A>;\n\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype AddressMapping = D1EmailAddressMapping<Table, Table, Table, Table, Table, unknown>;\ntype RegistrationMapping<Registration> = EmailRegistrationMapping<\n Registration,\n Table,\n Table,\n Table,\n Table,\n Table,\n unknown\n>;\ntype ProofMapping = D1ProofPersistenceMapping<\n any,\n any,\n any,\n any,\n any,\n any,\n any,\n any,\n any,\n any,\n any,\n any\n>;\n\nconst emailLookupRows = Effect.fn(\"DrizzleD1.emailLookupRows\")(function* (\n mapping: EmailSignInMapping<Table, Table, Table, unknown>,\n moduleId: string,\n identifier: LoginIdentifier,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n const query = emailLookupQuery(mapping, moduleId, identifier);\n\n return yield* database\n .select(query.fields)\n .from(query.from)\n .innerJoin(query.subjectTable, query.subjectJoin)\n .innerJoin(query.credentialTable, query.credentialJoin)\n .where(query.predicate)\n .limit(query.limit);\n});\n\nconst unavailable = () => EmailUnavailable.make({});\n\nconst everyFailureMatches = (\n cause: Cause.Cause<unknown>,\n classify: ((cause: unknown) => boolean) | undefined,\n): boolean =>\n classify !== undefined &&\n cause.reasons.length > 0 &&\n cause.reasons.every((reason) => Cause.isFailReason(reason) && classify(Cause.fail(reason.error)));\n\ninterface Planned<A> {\n readonly receipt: A;\n readonly statements: ReadonlyArray<Statement<any>>;\n readonly retryable?: (cause: unknown) => boolean;\n readonly journalGuard?: PreparedCommit<void>;\n}\n\nconst statement = Effect.fn(function* (query: {\n readonly toSQL: () => { readonly sql: string; readonly params: unknown[] };\n}) {\n const database = yield* CurrentD1PlanningDatabase;\n const rendered = query.toSQL();\n\n return database.$client.unsafe(rendered.sql, rendered.params);\n});\n\nconst containsFailure = (failure: unknown, predicate: (value: unknown) => boolean): boolean => {\n const pending: unknown[] = [failure];\n const seen = new Set<unknown>();\n\n for (let index = 0; index < 32 && pending.length > 0; index++) {\n const value = pending.shift();\n\n if (value === null || value === undefined || seen.has(value)) continue;\n seen.add(value);\n if (predicate(value)) return true;\n if (Cause.isCause(value)) {\n for (const reason of value.reasons) {\n if (Cause.isFailReason(reason)) pending.push(reason.error);\n else if (Cause.isDieReason(reason)) pending.push(reason.defect);\n }\n } else if (typeof value === \"object\") {\n const wrapped = value as {\n readonly cause?: unknown;\n readonly reason?: unknown;\n readonly message?: unknown;\n };\n\n if (wrapped.cause !== undefined) pending.push(wrapped.cause);\n if (wrapped.reason !== undefined) pending.push(wrapped.reason);\n if (wrapped.message !== undefined) pending.push(wrapped.message);\n }\n }\n\n return false;\n};\n\nconst guardFailure = (cause: unknown, marker: string) => {\n const path = `$[${marker.replaceAll(\"'\", \"''\")}]`;\n const native = `bad JSON path: '${path}': SQLITE_ERROR`;\n\n return containsFailure(cause, (value) => value === native || value === `D1_ERROR: ${native}`);\n};\n\nconst assertion = Effect.fn(function* (condition: SQL, marker: string) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* statement(\n database\n .select({\n ok: sql`case when ${condition} then 1 else json_extract('[]', ${`$[${marker}]`}) end`.as(\n \"ok\",\n ),\n })\n .from(sql`(select 1)`),\n );\n});\n\nconst existsSql = (query: SQL) => sql`exists(${query})`;\nconst notExistsSql = (query: SQL) => sql`not exists(${query})`;\n\nconst readEngineNowMillis = Effect.fn(\"Drizzle.readEngineNowMillis\")(function* (\n clock: AddressMapping[\"d1\"],\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* awaitRows(\n database\n .select({\n value: sql<number>`${clock.engineNowMillis}`.mapWith(Number),\n })\n .from(sql`(select 1)`),\n ).pipe(\n Effect.flatMap((rows) =>\n typeof rows[0]?.value === \"number\" && Number.isFinite(rows[0].value)\n ? Effect.succeed(rows[0].value)\n : Effect.fail(unavailable()),\n ),\n );\n});\n\nconst driverValues = (values: object, entries: ReadonlyArray<readonly [string, unknown]>) => ({\n ...values,\n ...Object.fromEntries(entries),\n});\n\nconst allocate = <A>(\n asynchronous: Effect.Effect<A, DrizzleMappingError> | undefined,\n synchronous: (() => A) | undefined,\n) =>\n asynchronous !== undefined\n ? asynchronous\n : synchronous === undefined\n ? Effect.fail(unavailable())\n : Effect.try({\n try: synchronous,\n catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n });\n\nconst validAddress = (mapping: AddressMapping) =>\n Object.entries(requiredEmailAddressConstraints).every(\n ([key, value]) =>\n mapping.constraints[key as keyof typeof requiredEmailAddressConstraints] === value,\n );\n\nconst evidenceCondition = (\n mapping: AddressMapping,\n evidence: Parameters<typeof assessAuthentication>[0],\n requirement: AuthenticationRequirement,\n) => {\n const fresh = (proof: (typeof evidence.proofs)[number]) => {\n const verified = DateTime.toEpochMillis(proof.verifiedAt);\n\n return sql`${mapping.d1.engineNowMillis} >= ${verified} and ${mapping.d1.engineNowMillis} - ${verified} < ${requirement.maximumAgeMillis}`;\n };\n\n const alternatives = requirement.alternatives.flatMap((alternative) => {\n const byCredential = new Map<string, SQL[]>();\n\n for (const proof of evidence.proofs)\n byCredential.set(proof.credentialId, [\n ...(byCredential.get(proof.credentialId) ?? []),\n fresh(proof),\n ]);\n\n const credentials = [...byCredential.values()].map(\n (conditions) => sql`(${sql.join(conditions, sql` or `)})`,\n );\n\n const factors = alternative.factors.map((factor) => {\n const matches = evidence.proofs.filter((proof) => proof.factors.includes(factor)).map(fresh);\n\n return matches.length === 0 ? sql`false` : sql`(${sql.join(matches, sql` or `)})`;\n });\n\n const assurance = evidence.proofs\n .filter(\n (proof) =>\n (!alternative.userVerified || proof.userVerified) &&\n (!alternative.phishingResistant || proof.phishingResistant),\n )\n .map(fresh);\n\n if (assurance.length === 0 || credentials.length < alternative.minimumCredentials) return [];\n\n const minimum =\n alternative.minimumCredentials === 0\n ? sql`true`\n : sql`(${sql.join(\n credentials.map((condition) => sql`case when ${condition} then 1 else 0 end`),\n sql` + `,\n )}) >= ${alternative.minimumCredentials}`;\n\n return [and(...factors, sql`(${sql.join(assurance, sql` or `)})`, minimum)!];\n });\n\n const noFuture = evidence.proofs.map(\n (proof) => sql`${mapping.d1.engineNowMillis} >= ${DateTime.toEpochMillis(proof.verifiedAt)}`,\n );\n\n return alternatives.length === 0\n ? sql`false`\n : and(...noFuture, sql`(${sql.join(alternatives, sql` or `)})`)!;\n};\n\nconst subjectCondition = (\n mapping: AddressMapping,\n current: CurrentAddress,\n revision: SecurityRevision,\n) => {\n const id = column(mapping.subject.table, mapping.subject.id);\n const status = column(mapping.subject.table, mapping.subject.status);\n const security = column(mapping.subject.table, mapping.subject.securityRevision);\n\n return existsSql(\n sql`select 1 from ${mapping.subject.table} where ${id}=${sql.param(current.nativeSubjectId, id)} and ${status}=${sql.param(mapping.subject.d1ActiveStatusValue, status)} and ${security}=${sql.param(revision, security)}`,\n );\n};\n\nconst authorityRevisionCondition = (mapping: AddressMapping, current: CurrentAddress) => {\n const a = mapping.authorityCredential;\n const subject = column(a.table, a.subjectId);\n const credential = column(a.table, a.credentialId);\n const revision = column(a.table, a.revision);\n const status = column(a.table, a.status);\n const expected = current.revision.credentials;\n\n const matches = expected.map((item) =>\n existsSql(\n sql`select 1 from ${a.table} where ${subject}=${sql.param(current.nativeSubjectId, subject)} and ${credential}=${sql.param(item.credentialId, credential)} and ${revision}=${sql.param(item.revision, revision)} and ${status}=${sql.param(a.d1ActiveStatusValue, status)}`,\n ),\n );\n\n return and(\n ...matches,\n sql`(select count(*) from ${a.table} where ${subject}=${sql.param(current.nativeSubjectId, subject)} and ${status}=${sql.param(a.d1ActiveStatusValue, status)})=${expected.length}`,\n )!;\n};\n\nconst mutationPlan = Effect.fn(\"Drizzle.mutationPlan\")(function* <A>(\n mapping: AddressMapping,\n proofMapping: ProofMapping,\n uncaptured: Parameters<EmailAddressPersistence[\"Service\"][\"verifyWithProof\"]>[0],\n action: EmailAction,\n prepare: (value: EmailAddressDecision, journal: CommitJournal) => PreparedCommit<A>,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const journal = yield* CurrentCommitJournal;\n\n if (!validAddress(mapping)) return yield* unavailable();\n const input = yield* snapshotEmailMutation(uncaptured).pipe(Effect.mapError(unavailable));\n\n const current = yield* validateEmailAuthority(\n mapping,\n { mode: \"interactive\", locking: false, standaloneGuard: Effect.void },\n input,\n action,\n );\n\n if (current === undefined) return { receipt: prepare(\"rejected\", journal), statements: [] };\n\n const existingCommand = awaitRows(\n database\n .select()\n .from(mapping.command.table)\n .where(\n and(\n eq(column(mapping.command.table, mapping.command.moduleId), input.moduleId),\n eq(column(mapping.command.table, mapping.command.commandId), input.commandId),\n ),\n )\n .limit(1),\n );\n\n if ((yield* existingCommand).length > 0)\n return { receipt: prepare(\"rejected\", journal), statements: [] };\n const requirement = yield* mapping.subject.decodeActionRequirement(current.subject, action);\n\n const original = yield* assessAuthentication(\n input.authorization.evidence,\n input.authorization.requirement,\n ).pipe(Effect.mapError(unavailable));\n\n const configured = yield* assessAuthentication(input.authorization.evidence, requirement).pipe(\n Effect.mapError(unavailable),\n );\n\n if (!original.satisfied || !configured.satisfied)\n return { receipt: prepare(\"rejected\", journal), statements: [] };\n const transitionMillis = yield* readEngineNowMillis(mapping.d1);\n const transitionInstant = mapping.encodeInstant(transitionMillis);\n\n const targetCredentialId =\n current.targetCredential?.[mapping.credential.credentialId] ??\n (yield* allocate(mapping.allocateCredentialId, mapping.allocateCredentialIdSync));\n\n const targetIdentifierRevision = yield* allocate(\n mapping.allocateRevision,\n mapping.allocateRevisionSync,\n );\n\n const targetCredentialRevision = yield* allocate(\n mapping.allocateRevision,\n mapping.allocateRevisionSync,\n );\n\n const sourceIdentifierRevision = yield* allocate(\n mapping.allocateRevision,\n mapping.allocateRevisionSync,\n );\n\n const sourceCredentialRevision = yield* allocate(\n mapping.allocateRevision,\n mapping.allocateRevisionSync,\n );\n\n const nextRevision = yield* allocate(\n mapping.subject.nextSecurityRevision?.(input.captured.revision.securityRevision) ??\n mapping.allocateRevision,\n mapping.subject.nextSecurityRevisionSync === undefined\n ? mapping.allocateRevisionSync\n : () => mapping.subject.nextSecurityRevisionSync!(input.captured.revision.securityRevision),\n );\n\n if (\n nextRevision === input.captured.revision.securityRevision ||\n (current.targetIdentifier !== undefined &&\n targetIdentifierRevision === current.targetIdentifier[mapping.identifier.bindingRevision]) ||\n (current.targetCredential !== undefined &&\n targetCredentialRevision ===\n current.targetCredential[mapping.credential.credentialRevision]) ||\n (current.source !== undefined &&\n (sourceIdentifierRevision === current.source.snapshot.identifierRevision ||\n sourceCredentialRevision === current.source.snapshot.credentialRevision))\n )\n return yield* unavailable();\n const statements: Statement<any>[] = [];\n const i = mapping.identifier;\n const c = mapping.credential;\n const a = mapping.authorityCredential;\n const sc = current.source;\n const authorityMarker = `effect-auth-email-guard:authority:${input.commandId}`;\n\n const targetIdentifierPrecondition =\n current.targetIdentifier === undefined\n ? notExistsSql(\n sql`select 1 from ${i.table} where ${column(i.table, i.namespace)}=${sql.param(input.target.namespace, column(i.table, i.namespace))} and ${column(i.table, i.value)}=${sql.param(input.target.value, column(i.table, i.value))}`,\n )\n : existsSql(\n sql`select 1 from ${i.table} where ${i.d1MutableTargetCondition({\n identifier: input.target,\n nativeSubjectId: current.nativeSubjectId,\n })}`,\n );\n\n const targetCredentialPrecondition =\n current.targetCredential === undefined\n ? notExistsSql(\n sql`select 1 from ${c.table} where ${column(c.table, c.moduleId)}=${sql.param(input.moduleId, column(c.table, c.moduleId))} and ${column(c.table, c.identifierNamespace)}=${sql.param(input.target.namespace, column(c.table, c.identifierNamespace))} and ${column(c.table, c.identifierValue)}=${sql.param(input.target.value, column(c.table, c.identifierValue))}`,\n )\n : existsSql(\n sql`select 1 from ${c.table} where ${column(c.table, c.moduleId)}=${sql.param(input.moduleId, column(c.table, c.moduleId))} and ${column(c.table, c.credentialId)}=${sql.param(current.targetCredential[c.credentialId], column(c.table, c.credentialId))} and ${column(c.table, c.subjectId)}=${sql.param(current.nativeSubjectId, column(c.table, c.subjectId))} and ${column(c.table, c.credentialRevision)}=${sql.param(current.targetCredential[c.credentialRevision], column(c.table, c.credentialRevision))} and ${column(c.table, c.status)}<>${sql.param(c.d1ActiveStatusValue, column(c.table, c.status))}`,\n );\n\n const sourcePrecondition =\n action === \"verify-address\"\n ? sql`true`\n : and(\n existsSql(\n sql`select 1 from ${i.table} where ${i.d1CurrentCondition({\n identifier: sc!.snapshot.identifier,\n nativeSubjectId: current.nativeSubjectId,\n bindingRevision: sc!.snapshot.identifierRevision,\n })}`,\n ),\n existsSql(\n sql`select 1 from ${c.table} where ${column(c.table, c.moduleId)}=${sql.param(input.moduleId, column(c.table, c.moduleId))} and ${column(c.table, c.credentialId)}=${sql.param(sc!.snapshot.credentialId, column(c.table, c.credentialId))} and ${column(c.table, c.subjectId)}=${sql.param(current.nativeSubjectId, column(c.table, c.subjectId))} and ${column(c.table, c.credentialRevision)}=${sql.param(sc!.snapshot.credentialRevision, column(c.table, c.credentialRevision))} and ${column(c.table, c.status)}=${sql.param(c.d1ActiveStatusValue, column(c.table, c.status))}`,\n ),\n )!;\n\n statements.push(\n yield* assertion(\n and(\n subjectCondition(mapping, current, input.captured.revision.securityRevision),\n authorityRevisionCondition(mapping, current),\n targetIdentifierPrecondition,\n targetCredentialPrecondition,\n sourcePrecondition,\n evidenceCondition(mapping, input.authorization.evidence, input.authorization.requirement),\n evidenceCondition(mapping, input.authorization.evidence, requirement),\n )!,\n authorityMarker,\n ),\n );\n\n if (action === \"change-address\") {\n statements.push(\n yield* statement(\n database\n .update(i.table)\n .set(\n i.encodeRetirement({\n source: sc!.snapshot.identifier,\n bindingRevision: sourceIdentifierRevision,\n }),\n )\n .where(\n and(\n eq(column(i.table, i.namespace), sc!.snapshot.identifier.namespace),\n eq(column(i.table, i.value), sc!.snapshot.identifier.value),\n eq(column(i.table, i.subjectId), current.nativeSubjectId),\n eq(column(i.table, i.bindingRevision), sc!.snapshot.identifierRevision),\n ),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database\n .update(c.table)\n .set(\n c.encodeRetirement({\n source: sc!.snapshot.identifier,\n credentialRevision: sourceCredentialRevision,\n }),\n )\n .where(\n and(\n eq(column(c.table, c.moduleId), input.moduleId),\n eq(column(c.table, c.credentialId), sc!.snapshot.credentialId),\n eq(column(c.table, c.subjectId), current.nativeSubjectId),\n eq(column(c.table, c.credentialRevision), sc!.snapshot.credentialRevision),\n ),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database\n .update(a.table)\n .set(a.encodeRetirement(sourceCredentialRevision))\n .where(\n and(\n eq(column(a.table, a.subjectId), current.nativeSubjectId),\n eq(column(a.table, a.credentialId), sc!.snapshot.credentialId),\n eq(column(a.table, a.revision), sc!.snapshot.credentialRevision),\n ),\n ),\n ),\n );\n }\n if (current.targetIdentifier === undefined)\n statements.push(\n yield* statement(\n database.insert(i.table).values(\n driverValues(\n i.encodeVerifiedInsert({\n identifier: input.target,\n subjectId: current.nativeSubjectId,\n verifiedAtMillis: transitionMillis,\n bindingRevision: targetIdentifierRevision,\n }),\n [[i.verifiedAt, transitionInstant]],\n ),\n ),\n ),\n );\n else\n statements.push(\n yield* statement(\n database\n .update(i.table)\n .set(\n driverValues(\n i.encodeVerification({\n verifiedAtMillis: transitionMillis,\n bindingRevision: targetIdentifierRevision,\n }),\n [[i.verifiedAt, transitionInstant]],\n ),\n )\n .where(\n and(\n eq(column(i.table, i.namespace), input.target.namespace),\n eq(column(i.table, i.value), input.target.value),\n eq(column(i.table, i.subjectId), current.nativeSubjectId),\n eq(column(i.table, i.bindingRevision), current.targetIdentifier![i.bindingRevision]),\n ),\n ),\n ),\n );\n if (current.targetCredential === undefined) {\n statements.push(\n yield* statement(\n database.insert(c.table).values(\n c.encodeVerifiedInsert({\n moduleId: input.moduleId,\n subjectId: current.nativeSubjectId,\n credentialId: targetCredentialId,\n identifier: input.target,\n credentialRevision: targetCredentialRevision,\n }),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database.insert(a.table).values(\n a.encodeInsert({\n subjectId: current.nativeSubjectId,\n credentialId: targetCredentialId,\n revision: targetCredentialRevision,\n }),\n ),\n ),\n );\n } else {\n const oldRevision = current.targetCredential[c.credentialRevision];\n\n statements.push(\n yield* statement(\n database\n .update(c.table)\n .set(\n c.encodeActivation({\n identifier: input.target,\n credentialRevision: targetCredentialRevision,\n }),\n )\n .where(\n and(\n eq(column(c.table, c.moduleId), input.moduleId),\n eq(column(c.table, c.credentialId), targetCredentialId),\n eq(column(c.table, c.subjectId), current.nativeSubjectId),\n eq(column(c.table, c.credentialRevision), oldRevision),\n ),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database\n .update(a.table)\n .set(a.encodeActivation(targetCredentialRevision))\n .where(\n and(\n eq(column(a.table, a.subjectId), current.nativeSubjectId),\n eq(column(a.table, a.credentialId), targetCredentialId),\n eq(column(a.table, a.revision), oldRevision),\n ),\n ),\n ),\n );\n }\n statements.push(\n yield* statement(\n database\n .update(mapping.subject.table)\n .set(updateValues<any>([[mapping.subject.securityRevision, nextRevision]]))\n .where(\n and(\n eq(column(mapping.subject.table, mapping.subject.id), current.nativeSubjectId),\n eq(\n column(mapping.subject.table, mapping.subject.securityRevision),\n input.captured.revision.securityRevision,\n ),\n ),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database.insert(mapping.command.table).values(\n driverValues(\n mapping.command.encodeInsert({\n moduleId: input.moduleId,\n commandId: input.commandId,\n action,\n bindingDigest: input.authorization.challenge.bindingDigest,\n retentionUntilMillis: transitionMillis + mapping.commandRetentionMillis,\n }),\n [\n [\n mapping.command.retentionUntil,\n mapping.encodeInstant(transitionMillis + mapping.commandRetentionMillis),\n ],\n ],\n ),\n ),\n ),\n );\n\n const targetExists = existsSql(\n sql`select 1 from ${i.table} where ${column(i.table, i.bindingRevision)}=${sql.param(targetIdentifierRevision, column(i.table, i.bindingRevision))} and ${column(i.table, i.verifiedAt)}=${sql.param(transitionInstant, column(i.table, i.verifiedAt))} and ${i.d1CurrentCondition({ identifier: input.target, nativeSubjectId: current.nativeSubjectId, bindingRevision: targetIdentifierRevision })}`,\n );\n\n const credentialExists = existsSql(\n sql`select 1 from ${c.table} where ${column(c.table, c.moduleId)}=${sql.param(input.moduleId, column(c.table, c.moduleId))} and ${column(c.table, c.credentialId)}=${sql.param(targetCredentialId, column(c.table, c.credentialId))} and ${column(c.table, c.subjectId)}=${sql.param(current.nativeSubjectId, column(c.table, c.subjectId))} and ${column(c.table, c.identifierNamespace)}=${sql.param(input.target.namespace, column(c.table, c.identifierNamespace))} and ${column(c.table, c.identifierValue)}=${sql.param(input.target.value, column(c.table, c.identifierValue))} and ${column(c.table, c.credentialRevision)}=${sql.param(targetCredentialRevision, column(c.table, c.credentialRevision))} and ${column(c.table, c.status)}=${sql.param(c.d1ActiveStatusValue, column(c.table, c.status))}`,\n );\n\n const authorityExists = existsSql(\n sql`select 1 from ${a.table} where ${column(a.table, a.subjectId)}=${sql.param(current.nativeSubjectId, column(a.table, a.subjectId))} and ${column(a.table, a.credentialId)}=${sql.param(targetCredentialId, column(a.table, a.credentialId))} and ${column(a.table, a.revision)}=${sql.param(targetCredentialRevision, column(a.table, a.revision))} and ${column(a.table, a.status)}=${sql.param(a.d1ActiveStatusValue, column(a.table, a.status))}`,\n );\n\n const commandExists = existsSql(\n sql`select 1 from ${mapping.command.table} where ${column(mapping.command.table, mapping.command.moduleId)}=${sql.param(input.moduleId, column(mapping.command.table, mapping.command.moduleId))} and ${column(mapping.command.table, mapping.command.commandId)}=${sql.param(input.commandId, column(mapping.command.table, mapping.command.commandId))} and ${column(mapping.command.table, mapping.command.action)}=${sql.param(action, column(mapping.command.table, mapping.command.action))} and ${column(mapping.command.table, mapping.command.bindingDigest)}=${sql.param(input.authorization.challenge.bindingDigest, column(mapping.command.table, mapping.command.bindingDigest))} and ${column(mapping.command.table, mapping.command.retentionUntil)}=${sql.param(mapping.encodeInstant(transitionMillis + mapping.commandRetentionMillis), column(mapping.command.table, mapping.command.retentionUntil))}`,\n );\n\n const sourceRetired =\n action === \"verify-address\"\n ? sql`true`\n : and(\n existsSql(\n sql`select 1 from ${i.table} where ${column(i.table, i.namespace)}=${sql.param(sc!.snapshot.identifier.namespace, column(i.table, i.namespace))} and ${column(i.table, i.value)}=${sql.param(sc!.snapshot.identifier.value, column(i.table, i.value))} and ${column(i.table, i.subjectId)}=${sql.param(current.nativeSubjectId, column(i.table, i.subjectId))} and ${column(i.table, i.bindingRevision)}=${sql.param(sourceIdentifierRevision, column(i.table, i.bindingRevision))} and not (${i.d1CurrentCondition({ identifier: sc!.snapshot.identifier, nativeSubjectId: current.nativeSubjectId, bindingRevision: sourceIdentifierRevision })})`,\n ),\n existsSql(\n sql`select 1 from ${c.table} where ${column(c.table, c.moduleId)}=${sql.param(input.moduleId, column(c.table, c.moduleId))} and ${column(c.table, c.credentialId)}=${sql.param(sc!.snapshot.credentialId, column(c.table, c.credentialId))} and ${column(c.table, c.subjectId)}=${sql.param(current.nativeSubjectId, column(c.table, c.subjectId))} and ${column(c.table, c.identifierNamespace)}=${sql.param(sc!.snapshot.identifier.namespace, column(c.table, c.identifierNamespace))} and ${column(c.table, c.identifierValue)}=${sql.param(sc!.snapshot.identifier.value, column(c.table, c.identifierValue))} and ${column(c.table, c.credentialRevision)}=${sql.param(sourceCredentialRevision, column(c.table, c.credentialRevision))} and ${column(c.table, c.status)}<>${sql.param(c.d1ActiveStatusValue, column(c.table, c.status))}`,\n ),\n existsSql(\n sql`select 1 from ${a.table} where ${column(a.table, a.subjectId)}=${sql.param(current.nativeSubjectId, column(a.table, a.subjectId))} and ${column(a.table, a.credentialId)}=${sql.param(sc!.snapshot.credentialId, column(a.table, a.credentialId))} and ${column(a.table, a.revision)}=${sql.param(sourceCredentialRevision, column(a.table, a.revision))} and ${column(a.table, a.status)}<>${sql.param(a.d1ActiveStatusValue, column(a.table, a.status))}`,\n ),\n )!;\n\n const applied = and(\n subjectCondition(mapping, current, nextRevision),\n targetExists,\n credentialExists,\n authorityExists,\n commandExists,\n sourceRetired,\n evidenceCondition(mapping, input.authorization.evidence, input.authorization.requirement),\n evidenceCondition(mapping, input.authorization.evidence, requirement),\n )!;\n\n const compiled = yield* compileD1ProofCompletionPlan(\n proofMapping,\n input.completion,\n { statements, appliedCondition: applied },\n (decision) => decision,\n );\n\n const marker = `effect-auth-proof-guard:protected:${input.completion.input.continuationId}`;\n\n return {\n receipt: prepare(compiled.statements.length === 0 ? \"rejected\" : \"changed\", journal),\n statements: compiled.statements,\n retryable: (cause: unknown) =>\n guardFailure(cause, marker) ||\n guardFailure(cause, authorityMarker) ||\n isMappedConstraintConflict(mapping.isCommandConflict, cause) ||\n isMappedConstraintConflict(mapping.isIdentifierConflict, cause) ||\n isMappedConstraintConflict(mapping.isCredentialConflict, cause),\n };\n});\n\nconst awaitRows = <A>(effect: Effect.Effect<A, DrizzleMappingError | EffectDrizzleQueryError>) =>\n effect;\n\nconst probeCompletion = Effect.fn(\"DrizzleD1.probeCompletion\")(function* (\n proofMapping: ProofMapping,\n input: ProofCompletionInput,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const plan: ProofCompletionPlan = {\n input,\n prepare: (decision, journal, project) => journal.prepare(project(decision)),\n };\n\n const marker = `effect-auth-proof-guard:protected:${input.continuationId}`;\n\n const once = coordinateCommit(\n () =>\n Effect.gen(function* () {\n const compiled = yield* compileD1ProofCompletionPlan(\n proofMapping,\n plan,\n { statements: [], appliedCondition: sql`false` },\n () => false,\n );\n\n if (compiled.statements.length === 0) return false;\n yield* database.$client.batch(compiled.statements);\n\n return false;\n }),\n { mode: \"batch\" },\n );\n\n return yield* once.pipe(\n Effect.as(false),\n Effect.catchCause((cause) =>\n guardFailure(cause, marker) ? Effect.succeed(true) : Effect.failCause(cause),\n ),\n );\n});\n\nconst makeAddressPlans = (mapping: AddressMapping, proofMapping: ProofMapping) => ({\n target: (input: Parameters<EmailAddressPersistence[\"Service\"][\"target\"]>[0]) =>\n currentAddress(mapping, input, false).pipe(\n Effect.flatMap((current) =>\n current === undefined\n ? Effect.fail(unavailable())\n : Effect.succeed({\n revision: current.revision,\n eligible: current.eligible,\n ...(current.source === undefined ? {} : { source: current.source.snapshot }),\n }),\n ),\n ),\n checkCompletion: (\n input: Parameters<EmailAddressPersistence[\"Service\"][\"checkCompletion\"]>[0],\n ) => {\n if (input.binding._tag !== \"IdentifierChange\") return Effect.succeed(false);\n const binding = input.binding;\n\n const action: EmailAction | undefined =\n input.moduleId.endsWith(\"/verify-address\") && input.purpose === \"email-address-verification\"\n ? \"verify-address\"\n : input.moduleId.endsWith(\"/change-address\") && input.purpose === \"email-address-change\"\n ? \"change-address\"\n : undefined;\n\n if (action === undefined) return Effect.succeed(false);\n const moduleId = input.moduleId.slice(0, -`/${action}`.length);\n\n return currentAddress(\n mapping,\n {\n moduleId,\n subjectId: binding.revision.subjectId,\n target: binding.identifier,\n },\n false,\n ).pipe(\n Effect.flatMap((current) =>\n current !== undefined && sameEmailRevision(current.revision, binding.revision)\n ? probeCompletion(proofMapping, input)\n : Effect.succeed(false),\n ),\n );\n },\n verifyWithProof: <A>(\n input: Parameters<EmailAddressPersistence[\"Service\"][\"verifyWithProof\"]>[0],\n prepare: PlanPrepare<EmailAddressPersistence[\"Service\"][\"verifyWithProof\"], A>,\n ) => mutationPlan(mapping, proofMapping, input, \"verify-address\", prepare),\n changeWithProof: <A>(\n input: Parameters<EmailAddressPersistence[\"Service\"][\"changeWithProof\"]>[0],\n prepare: PlanPrepare<EmailAddressPersistence[\"Service\"][\"changeWithProof\"], A>,\n ) => mutationPlan(mapping, proofMapping, input, \"change-address\", prepare),\n cleanup: <A>(\n input: Parameters<EmailAddressPersistence[\"Service\"][\"cleanup\"]>[0],\n prepare: PlanPrepare<EmailAddressPersistence[\"Service\"][\"cleanup\"], A>,\n ) =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n\n const journal = yield* CurrentCommitJournal;\n\n const module = column(mapping.command.table, mapping.command.moduleId);\n const id = column(mapping.command.table, mapping.command.commandId);\n const retention = column(mapping.command.table, mapping.command.retentionUntil);\n\n const rows = yield* awaitRows(\n database\n .select({ commandId: id })\n .from(mapping.command.table)\n .where(and(eq(module, input.moduleId), lte(retention, mapping.d1.engineNow)))\n .limit(input.limit + 1),\n );\n\n const selected = rows.slice(0, input.limit);\n const marker = `effect-auth-email-guard:cleanup:${input.moduleId}`;\n const selectedIds = selected.map((row: any) => row.commandId);\n\n const selectedWhere = and(\n eq(module, input.moduleId),\n inArray(id, selectedIds),\n lte(retention, mapping.d1.engineNow),\n );\n\n const statements =\n selected.length === 0\n ? []\n : [\n yield* assertion(\n sql`(select count(*) from ${mapping.command.table} where ${selectedWhere})=${selected.length}`,\n marker,\n ),\n yield* statement(database.delete(mapping.command.table).where(selectedWhere)),\n ];\n\n return {\n receipt: prepare({ removed: selected.length, hasMore: rows.length > input.limit }, journal),\n statements,\n retryable: (cause: unknown) => guardFailure(cause, marker),\n };\n }),\n});\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n mapping: RegistrationMapping<Registration>,\n moduleId: string,\n commandId: string,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* awaitRows(\n database\n .select()\n .from(mapping.registration.table)\n .where(\n and(\n eq(column(mapping.registration.table, mapping.registration.moduleId), moduleId),\n eq(column(mapping.registration.table, mapping.registration.commandId), commandId),\n ),\n )\n .limit(1),\n );\n});\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n left.namespace === right.namespace && left.value === right.value;\n\nconst registrationCompletionMatches = <Registration>(\n mapping: RegistrationMapping<Registration>,\n input: {\n readonly moduleId: string;\n readonly identifier: LoginIdentifier;\n readonly completion: ProofCompletionPlan;\n },\n) =>\n input.completion.input.moduleId === `${input.moduleId}/registration` &&\n input.completion.input.purpose === \"email-code-registration\" &&\n input.completion.input.binding._tag === \"Identifier\" &&\n sameIdentifier(input.completion.input.binding.identifier, input.identifier) &&\n mapping.constraints.request === requiredEmailRegistrationConstraints.request &&\n mapping.constraints.pendingReference === requiredEmailRegistrationConstraints.pendingReference &&\n (mapping.mode === \"pending\" ||\n Object.entries(requiredEmailRegistrationConstraints).every(\n ([key, value]) =>\n mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n ));\n\nconst registrationPlan = Effect.fn(\"Drizzle.registrationPlan\")(function* <Registration, A>(\n mapping: RegistrationMapping<Registration> & { readonly d1: AddressMapping[\"d1\"] },\n proofMapping: ProofMapping,\n input: {\n readonly moduleId: string;\n readonly commandId: string;\n readonly identifier: LoginIdentifier;\n readonly registration: Registration;\n readonly fingerprint: TokenDigest;\n readonly completion: ProofCompletionPlan;\n },\n inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n allocated: {\n readonly credentialId?: string;\n readonly securityRevision?: SecurityRevision;\n readonly identifierRevision?: SecurityRevision;\n readonly credentialRevision?: SecurityRevision;\n readonly nativeSubjectId?: unknown;\n readonly pendingReference?: string;\n },\n prepare: (value: EmailRegistrationDecision, journal: CommitJournal) => PreparedCommit<A>,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const journal = yield* CurrentCommitJournal;\n\n const existing = (yield* registrationRows(mapping, input.moduleId, input.commandId))[0];\n\n if (existing !== undefined) {\n const decision =\n existing[mapping.registration.fingerprint] !== input.fingerprint\n ? ({ _tag: \"Rejected\" } as const)\n : yield* mapping.registration.decodeReplay(existing);\n\n return { receipt: prepare(decision, journal), statements: [] };\n }\n if (\n !registrationCompletionMatches(mapping, input) ||\n !inspected.eligible ||\n inspected.fingerprint !== input.fingerprint ||\n (mapping.mode === \"atomic\" &&\n (mapping.provisioning.idMode === \"generated\" ||\n mapping.subject.d1ActiveStatusValue === undefined ||\n mapping.identifier.d1CurrentCondition === undefined ||\n mapping.credential.d1ActiveStatusValue === undefined ||\n mapping.authorityCredential.d1ActiveStatusValue === undefined))\n )\n return { receipt: prepare({ _tag: \"Rejected\" }, journal), statements: [] };\n\n const intent = {\n moduleId: input.moduleId,\n commandId: input.commandId,\n identifier: input.identifier,\n registration: input.registration,\n fingerprint: input.fingerprint,\n completion: {\n moduleId: input.completion.input.moduleId,\n purpose: input.completion.input.purpose,\n continuationId: input.completion.input.continuationId,\n binding: input.completion.input.binding,\n },\n };\n\n const transitionMillis = yield* readEngineNowMillis(mapping.d1);\n const retentionInstant = mapping.encodeInstant(transitionMillis + mapping.retentionMillis);\n const statements: Statement<any>[] = [];\n let applied: SQL;\n let desired: EmailRegistrationDecision;\n const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n const registrationFingerprint = column(\n mapping.registration.table,\n mapping.registration.fingerprint,\n );\n\n const registrationState = column(mapping.registration.table, mapping.registration.state);\n\n if (mapping.mode === \"pending\") {\n if (allocated.pendingReference === undefined)\n return { receipt: prepare({ _tag: \"Rejected\" }, journal), statements: [] };\n desired = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n statements.push(\n yield* statement(\n database.insert(mapping.registration.table).values(\n driverValues(\n mapping.registration.encodeInsert(intent, {\n state: \"pending\",\n pendingReference: allocated.pendingReference,\n retentionUntilMillis: transitionMillis + mapping.retentionMillis,\n }),\n [[mapping.registration.retentionUntil, retentionInstant]],\n ),\n ),\n ),\n );\n applied = existsSql(\n sql`select 1 from ${mapping.registration.table} where ${registrationModule}=${sql.param(input.moduleId, registrationModule)} and ${registrationCommand}=${sql.param(input.commandId, registrationCommand)} and ${registrationFingerprint}=${sql.param(input.fingerprint, registrationFingerprint)} and ${registrationState}='pending' and ${column(mapping.registration.table, mapping.registration.pendingReference)}=${sql.param(allocated.pendingReference, column(mapping.registration.table, mapping.registration.pendingReference))} and ${column(mapping.registration.table, mapping.registration.subjectId)} is null and ${column(mapping.registration.table, mapping.registration.retentionUntil)}=${sql.param(retentionInstant, column(mapping.registration.table, mapping.registration.retentionUntil))}`,\n );\n } else {\n if (\n allocated.nativeSubjectId === undefined ||\n allocated.credentialId === undefined ||\n allocated.securityRevision === undefined ||\n allocated.identifierRevision === undefined ||\n allocated.credentialRevision === undefined\n )\n return { receipt: prepare({ _tag: \"Rejected\" }, journal), statements: [] };\n const nativeSubjectId = allocated.nativeSubjectId;\n\n desired = { _tag: \"Registered\" };\n statements.push(\n yield* statement(\n database.insert(mapping.subject.table).values(\n mapping.provisioning.encodeSubjectInsert(intent, {\n nativeSubjectId,\n securityRevision: allocated.securityRevision,\n }),\n ),\n ),\n yield* statement(\n database.insert(mapping.identifier.table).values(\n driverValues(\n mapping.identifier.encodeVerifiedInsert({\n identifier: input.identifier,\n subjectId: nativeSubjectId,\n verifiedAtMillis: transitionMillis,\n bindingRevision: allocated.identifierRevision,\n }),\n [[mapping.identifier.verifiedAt, mapping.encodeInstant(transitionMillis)]],\n ),\n ),\n ),\n yield* statement(\n database.insert(mapping.credential.table).values(\n mapping.credential.encodeVerifiedInsert({\n moduleId: input.moduleId,\n subjectId: nativeSubjectId,\n credentialId: allocated.credentialId,\n identifier: input.identifier,\n credentialRevision: allocated.credentialRevision,\n }),\n ),\n ),\n yield* statement(\n database.insert(mapping.authorityCredential.table).values(\n mapping.authorityCredential.encodeInsert({\n subjectId: nativeSubjectId,\n credentialId: allocated.credentialId,\n revision: allocated.credentialRevision,\n }),\n ),\n ),\n yield* statement(\n database.insert(mapping.registration.table).values(\n driverValues(\n mapping.registration.encodeInsert(intent, {\n state: \"registered\",\n nativeSubjectId,\n retentionUntilMillis: transitionMillis + mapping.retentionMillis,\n }),\n [[mapping.registration.retentionUntil, retentionInstant]],\n ),\n ),\n ),\n );\n const sId = column(mapping.subject.table, mapping.subject.id);\n const sStatus = column(mapping.subject.table, mapping.subject.status);\n const sRevision = column(mapping.subject.table, mapping.subject.securityRevision);\n const iNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n const iValue = column(mapping.identifier.table, mapping.identifier.value);\n const iSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n const iVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n const iRevision = column(mapping.identifier.table, mapping.identifier.bindingRevision);\n const cModule = column(mapping.credential.table, mapping.credential.moduleId);\n const cSubject = column(mapping.credential.table, mapping.credential.subjectId);\n const cId = column(mapping.credential.table, mapping.credential.credentialId);\n const cNamespace = column(mapping.credential.table, mapping.credential.identifierNamespace);\n const cValue = column(mapping.credential.table, mapping.credential.identifierValue);\n const cRevision = column(mapping.credential.table, mapping.credential.credentialRevision);\n\n const aSubject = column(\n mapping.authorityCredential.table,\n mapping.authorityCredential.subjectId,\n );\n\n const aId = column(mapping.authorityCredential.table, mapping.authorityCredential.credentialId);\n\n const aRevision = column(\n mapping.authorityCredential.table,\n mapping.authorityCredential.revision,\n );\n\n applied = and(\n existsSql(\n sql`select 1 from ${mapping.subject.table} where ${sId}=${sql.param(nativeSubjectId, sId)} and ${sStatus}=${sql.param(mapping.subject.d1ActiveStatusValue, sStatus)} and ${sRevision}=${sql.param(allocated.securityRevision, sRevision)}`,\n ),\n existsSql(\n sql`select 1 from ${mapping.identifier.table} where ${iNamespace}=${sql.param(input.identifier.namespace, iNamespace)} and ${iValue}=${sql.param(input.identifier.value, iValue)} and ${iSubject}=${sql.param(nativeSubjectId, iSubject)} and ${iVerifiedAt}=${sql.param(mapping.encodeInstant(transitionMillis), iVerifiedAt)} and ${iRevision}=${sql.param(allocated.identifierRevision, iRevision)} and ${mapping.identifier.d1CurrentCondition!({ identifier: input.identifier, nativeSubjectId, bindingRevision: allocated.identifierRevision })}`,\n ),\n existsSql(\n sql`select 1 from ${mapping.credential.table} where ${cModule}=${sql.param(input.moduleId, cModule)} and ${cSubject}=${sql.param(nativeSubjectId, cSubject)} and ${cId}=${sql.param(allocated.credentialId, cId)} and ${cNamespace}=${sql.param(input.identifier.namespace, cNamespace)} and ${cValue}=${sql.param(input.identifier.value, cValue)} and ${cRevision}=${sql.param(allocated.credentialRevision, cRevision)} and ${column(mapping.credential.table, mapping.credential.status)}=${sql.param(mapping.credential.d1ActiveStatusValue, column(mapping.credential.table, mapping.credential.status))}`,\n ),\n existsSql(\n sql`select 1 from ${mapping.authorityCredential.table} where ${aSubject}=${sql.param(nativeSubjectId, aSubject)} and ${aId}=${sql.param(allocated.credentialId, aId)} and ${aRevision}=${sql.param(allocated.credentialRevision, aRevision)} and ${column(mapping.authorityCredential.table, mapping.authorityCredential.status)}=${sql.param(mapping.authorityCredential.d1ActiveStatusValue, column(mapping.authorityCredential.table, mapping.authorityCredential.status))}`,\n ),\n existsSql(\n sql`select 1 from ${mapping.registration.table} where ${registrationModule}=${sql.param(input.moduleId, registrationModule)} and ${registrationCommand}=${sql.param(input.commandId, registrationCommand)} and ${registrationFingerprint}=${sql.param(input.fingerprint, registrationFingerprint)} and ${registrationState}='registered' and ${column(mapping.registration.table, mapping.registration.subjectId)}=${sql.param(nativeSubjectId, column(mapping.registration.table, mapping.registration.subjectId))} and ${column(mapping.registration.table, mapping.registration.pendingReference)} is null and ${column(mapping.registration.table, mapping.registration.retentionUntil)}=${sql.param(retentionInstant, column(mapping.registration.table, mapping.registration.retentionUntil))}`,\n ),\n )!;\n }\n let receipt: PreparedCommit<A> | undefined;\n\n const compiled = yield* compileD1ProofCompletionPlan(\n proofMapping,\n input.completion,\n { statements, appliedCondition: applied },\n (completion) => {\n receipt = prepare(completion === \"completed\" ? desired : { _tag: \"Rejected\" }, journal);\n\n return completion;\n },\n );\n\n const marker = `effect-auth-proof-guard:protected:${input.completion.input.continuationId}`;\n\n return {\n receipt: receipt ?? prepare({ _tag: \"Rejected\" }, journal),\n statements: compiled.statements,\n retryable: (cause: unknown) =>\n guardFailure(cause, marker) ||\n isMappedConstraintConflict(mapping.isRequestConflict, cause) ||\n (mapping.mode === \"atomic\" &&\n (isMappedConstraintConflict(mapping.isIdentifierConflict, cause) ||\n isMappedConstraintConflict(mapping.isCredentialConflict, cause))),\n };\n});\n\nconst makeRegistrationPlans = <Registration>(\n mapping: RegistrationMapping<Registration> & { readonly d1: AddressMapping[\"d1\"] },\n proofMapping: ProofMapping,\n) => ({\n inspect: (input: Parameters<EmailRegistrationAuthority<Registration>[\"inspect\"]>[0]) =>\n mapping.inspect(input),\n registerWithProof: <A>(\n uncaptured: Parameters<EmailRegistrationAuthority<Registration>[\"registerWithProof\"]>[0],\n prepare: PlanPrepare<EmailRegistrationAuthority<Registration>[\"registerWithProof\"], A>,\n ) =>\n Effect.gen(function* () {\n const registration = yield* mapping.snapshotRegistration(uncaptured.registration);\n const inspectionRegistration = yield* mapping.snapshotRegistration(uncaptured.registration);\n\n const input = Object.freeze({\n ...uncaptured,\n identifier: Object.freeze({ ...uncaptured.identifier }),\n registration,\n });\n\n const inspected = yield* mapping.inspect({\n identifier: input.identifier,\n registration: inspectionRegistration,\n });\n\n const atomic = mapping.mode === \"atomic\";\n\n const credentialId = atomic\n ? yield* allocate(mapping.allocateCredentialId, mapping.allocateCredentialIdSync)\n : undefined;\n\n const securityRevision = atomic\n ? yield* allocate(mapping.allocateRevision, mapping.allocateRevisionSync)\n : undefined;\n\n const identifierRevision = atomic\n ? yield* allocate(mapping.allocateRevision, mapping.allocateRevisionSync)\n : undefined;\n\n const credentialRevision = atomic\n ? yield* allocate(mapping.allocateRevision, mapping.allocateRevisionSync)\n : undefined;\n\n const nativeSubjectId =\n atomic && mapping.provisioning.idMode !== \"generated\"\n ? yield* allocate(\n mapping.provisioning.allocateSubjectId,\n mapping.provisioning.allocateSubjectIdSync,\n )\n : undefined;\n\n const pendingReference =\n mapping.mode === \"pending\"\n ? yield* allocate(mapping.allocatePendingReference, mapping.allocatePendingReferenceSync)\n : undefined;\n\n return yield* registrationPlan(\n mapping,\n proofMapping,\n input,\n inspected,\n {\n ...(credentialId === undefined ? {} : { credentialId }),\n ...(securityRevision === undefined ? {} : { securityRevision }),\n ...(identifierRevision === undefined ? {} : { identifierRevision }),\n ...(credentialRevision === undefined ? {} : { credentialRevision }),\n ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n ...(pendingReference === undefined ? {} : { pendingReference }),\n },\n prepare,\n );\n }),\n});\n\nexport const makeD1EmailSignInServices = <\n S extends AnySQLiteTable,\n I extends AnySQLiteTable,\n C extends AnySQLiteTable,\n NativeId,\n>(\n database: Database,\n mapping: EmailSignInMapping<S, I, C, NativeId>,\n) =>\n Effect.succeed({\n emailSignInTargets: EmailSignInTargets.of({\n lookup: (input) => {\n if (!validEmailSignInConstraints(mapping as any)) return Effect.fail(unavailable());\n\n return emailLookupRows(mapping as any, input.moduleId, input.identifier).pipe(\n Effect.flatMap((rows) => {\n const row = rows[0];\n\n if (row === undefined) return Effect.succeed(Option.none());\n\n return decodeEmailSnapshot(mapping as any, input.moduleId, input.identifier, row).pipe(\n Effect.map((snapshot) =>\n snapshot === undefined ? Option.none() : Option.some(snapshot),\n ),\n );\n }),\n Effect.provideService(CurrentD1PlanningDatabase, database),\n translateFailure,\n );\n },\n }),\n });\n\nexport const makeD1EmailAddressServices = <\n S extends AnySQLiteTable,\n I extends AnySQLiteTable,\n C extends AnySQLiteTable,\n AC extends AnySQLiteTable,\n M extends AnySQLiteTable,\n NativeId,\n PRq extends AnySQLiteTable,\n PS extends AnySQLiteTable,\n PG extends AnySQLiteTable,\n PCn extends AnySQLiteTable,\n PRs extends AnySQLiteTable,\n PAev extends AnySQLiteTable,\n PF extends AnySQLiteTable,\n PC extends AnySQLiteTable,\n PSub extends AnySQLiteTable,\n PI extends AnySQLiteTable,\n PCr extends AnySQLiteTable,\n PNativeId,\n>(\n database: Database,\n mapping: D1EmailAddressMapping<S, I, C, AC, M, NativeId>,\n proofMapping: D1ProofPersistenceMapping<\n PRq,\n PS,\n PG,\n PCn,\n PRs,\n PAev,\n PF,\n PC,\n PSub,\n PI,\n PCr,\n PNativeId\n >,\n) =>\n Effect.gen(function* () {\n const hooks = yield* LifecycleHooks;\n\n const plans = makeAddressPlans(\n mapping as unknown as AddressMapping,\n proofMapping as unknown as ProofMapping,\n );\n\n const run = <Out, Err, Env>(plan: Effect.Effect<Planned<Out>, Err, Env>) =>\n Effect.gen(function* () {\n if (yield* hasCommitScope) return yield* unavailable();\n\n return yield* executeStandalone(plan, 2);\n }).pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n );\n\n const service: EmailAddressPersistence[\"Service\"] = {\n target: (input) =>\n plans\n .target(input)\n .pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n translateFailure,\n ),\n checkCompletion: (input) =>\n plans\n .checkCompletion(input)\n .pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n translateFailure,\n ),\n verifyWithProof: (input, prepare) =>\n run(plans.verifyWithProof(input, prepare)).pipe(translateFailure),\n changeWithProof: (input, prepare) =>\n run(plans.changeWithProof(input, prepare)).pipe(translateFailure),\n cleanup: (input, prepare) => run(plans.cleanup(input, prepare)).pipe(translateFailure),\n };\n\n return { emailAddressPersistence: service };\n });\n\nexport const makeD1EmailRegistrationServices = <\n Registration,\n S extends AnySQLiteTable,\n I extends AnySQLiteTable,\n C extends AnySQLiteTable,\n AC extends AnySQLiteTable,\n Rq extends AnySQLiteTable,\n NativeId,\n PRq extends AnySQLiteTable,\n PS extends AnySQLiteTable,\n PG extends AnySQLiteTable,\n PCn extends AnySQLiteTable,\n PRs extends AnySQLiteTable,\n PAev extends AnySQLiteTable,\n PF extends AnySQLiteTable,\n PC extends AnySQLiteTable,\n PSub extends AnySQLiteTable,\n PI extends AnySQLiteTable,\n PCr extends AnySQLiteTable,\n PNativeId,\n>(\n database: Database,\n mapping: D1EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n proofMapping: D1ProofPersistenceMapping<\n PRq,\n PS,\n PG,\n PCn,\n PRs,\n PAev,\n PF,\n PC,\n PSub,\n PI,\n PCr,\n PNativeId\n >,\n) =>\n Effect.gen(function* () {\n const hooks = yield* LifecycleHooks;\n\n const plans = makeRegistrationPlans(\n mapping as unknown as RegistrationMapping<Registration> & {\n readonly d1: AddressMapping[\"d1\"];\n },\n proofMapping as unknown as ProofMapping,\n );\n\n const run = <Out, Err, Env>(plan: Effect.Effect<Planned<Out>, Err, Env>) =>\n Effect.gen(function* () {\n if (yield* hasCommitScope) return yield* unavailable();\n\n return yield* executeStandalone(plan, 2);\n }).pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n );\n\n const service: EmailRegistrationAuthority<Registration> = {\n inspect: (input) =>\n plans\n .inspect(input)\n .pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n translateFailure,\n ),\n registerWithProof: (input, prepare) =>\n run(plans.registerWithProof(input, prepare)).pipe(translateFailure),\n };\n\n return { registrationAuthority: service };\n });\n\ntype CoordinatorError<E> = E | EmailUnavailable | HookConfigurationError;\n\nexport function coordinateD1EmailAddress<\n S extends AnySQLiteTable,\n I extends AnySQLiteTable,\n C extends AnySQLiteTable,\n AC extends AnySQLiteTable,\n M extends AnySQLiteTable,\n NativeId,\n PRq extends AnySQLiteTable,\n PS extends AnySQLiteTable,\n PG extends AnySQLiteTable,\n PCn extends AnySQLiteTable,\n PRs extends AnySQLiteTable,\n PAev extends AnySQLiteTable,\n PF extends AnySQLiteTable,\n PC extends AnySQLiteTable,\n PSub extends AnySQLiteTable,\n PI extends AnySQLiteTable,\n PCr extends AnySQLiteTable,\n PNativeId,\n A,\n E,\n R,\n DatabaseError,\n DatabaseRequirements,\n>(\n acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n options: {\n readonly mapping: D1EmailAddressMapping<S, I, C, AC, M, NativeId>;\n readonly proofMapping: D1ProofPersistenceMapping<\n PRq,\n PS,\n PG,\n PCn,\n PRs,\n PAev,\n PF,\n PC,\n PSub,\n PI,\n PCr,\n PNativeId\n >;\n },\n body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n A,\n CoordinatorError<E> | DatabaseError,\n Exclude<R, EmailAddressPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n return Effect.flatMap(acquire, (database) =>\n Effect.gen(function* () {\n const hooks = yield* LifecycleHooks;\n\n if (yield* hasCommitScope) return yield* unavailable();\n\n const result = yield* coordinateCommit(\n () =>\n Effect.gen(function* () {\n const statements: Statement<any>[] = [];\n let mutation: Planned<any> | undefined;\n\n const nativeCollector = D1BatchStatements.of({\n append: (statement) => Effect.sync(() => statements.push(statement)),\n });\n\n const owner = yield* makeD1Owner(unavailable()).pipe(\n Effect.provideService(D1BatchStatements, nativeCollector),\n );\n\n const plans = makeAddressPlans(\n options.mapping as unknown as AddressMapping,\n options.proofMapping as unknown as ProofMapping,\n );\n\n const run = <Out, Err, Env>(plan: Effect.Effect<Planned<Out>, Err, Env>) =>\n coordinateCommit(\n () =>\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n const planned = yield* plan;\n\n yield* owner.check;\n if (mutation !== undefined) return yield* unavailable();\n const guarded = { ...planned, journalGuard: journal.prepare(undefined) };\n\n mutation = guarded;\n statements.push(...guarded.statements);\n\n return guarded.receipt;\n }),\n { mode: \"batch\" },\n ).pipe(\n Effect.map((result) => result.value),\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n );\n\n const service: EmailAddressPersistence[\"Service\"] = {\n target: (input) =>\n owner.run(\n plans\n .target(input)\n .pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(\n CurrentEmailSql,\n database as unknown as EmailSqlDatabase,\n ),\n Effect.provideService(LifecycleHooks, hooks),\n translateFailure,\n ),\n ),\n checkCompletion: (input) =>\n owner.run(\n plans\n .checkCompletion(input)\n .pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(\n CurrentEmailSql,\n database as unknown as EmailSqlDatabase,\n ),\n Effect.provideService(LifecycleHooks, hooks),\n translateFailure,\n ),\n ),\n verifyWithProof: (input, prepare) =>\n owner.run(run(plans.verifyWithProof(input, prepare)).pipe(translateFailure)),\n changeWithProof: (input, prepare) =>\n owner.run(run(plans.changeWithProof(input, prepare)).pipe(translateFailure)),\n cleanup: (input, prepare) =>\n owner.run(run(plans.cleanup(input, prepare)).pipe(translateFailure)),\n };\n\n const provided = Context.make(EmailAddressPersistence, service).pipe(\n Context.add(D1BatchStatements, owner.collector),\n );\n\n const value = yield* owner.close(Effect.provideContext(body, provided));\n\n if (mutation?.journalGuard !== undefined) {\n const status = yield* Effect.result(mutation.journalGuard.read);\n\n if (status._tag === \"Success\" || status.failure._tag !== \"CommitPending\")\n return yield* unavailable();\n }\n yield* database.$client.batch(statements).pipe(\n Effect.catchCause((cause) =>\n Effect.failCause(\n Cause.map(cause, (error) =>\n everyFailureMatches(cause, mutation?.retryable) ? unavailable() : error,\n ),\n ),\n ),\n translateFailure,\n );\n\n return value;\n }),\n { mode: \"batch\" },\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n return result.value;\n }),\n );\n}\n\nexport function coordinateD1EmailRegistration<\n TargetId,\n Registration,\n S extends AnySQLiteTable,\n I extends AnySQLiteTable,\n C extends AnySQLiteTable,\n AC extends AnySQLiteTable,\n Rq extends AnySQLiteTable,\n NativeId,\n PRq extends AnySQLiteTable,\n PS extends AnySQLiteTable,\n PG extends AnySQLiteTable,\n PCn extends AnySQLiteTable,\n PRs extends AnySQLiteTable,\n PAev extends AnySQLiteTable,\n PF extends AnySQLiteTable,\n PC extends AnySQLiteTable,\n PSub extends AnySQLiteTable,\n PI extends AnySQLiteTable,\n PCr extends AnySQLiteTable,\n PNativeId,\n A,\n E,\n R,\n DatabaseError,\n DatabaseRequirements,\n>(\n acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n options: {\n readonly mapping: D1EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n readonly proofMapping: D1ProofPersistenceMapping<\n PRq,\n PS,\n PG,\n PCn,\n PRs,\n PAev,\n PF,\n PC,\n PSub,\n PI,\n PCr,\n PNativeId\n >;\n readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n },\n body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n A,\n CoordinatorError<E> | DatabaseError,\n Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n return Effect.flatMap(acquire, (database) =>\n Effect.gen(function* () {\n const hooks = yield* LifecycleHooks;\n\n if (yield* hasCommitScope) return yield* unavailable();\n\n const result = yield* coordinateCommit(\n () =>\n Effect.gen(function* () {\n const statements: Statement<any>[] = [];\n let mutation: Planned<any> | undefined;\n\n const nativeCollector = D1BatchStatements.of({\n append: (statement) => Effect.sync(() => statements.push(statement)),\n });\n\n const owner = yield* makeD1Owner(unavailable()).pipe(\n Effect.provideService(D1BatchStatements, nativeCollector),\n );\n\n const plans = makeRegistrationPlans(\n options.mapping as unknown as RegistrationMapping<Registration> & {\n readonly d1: AddressMapping[\"d1\"];\n },\n options.proofMapping as unknown as ProofMapping,\n );\n\n const run = <Out, Err, Env>(plan: Effect.Effect<Planned<Out>, Err, Env>) =>\n coordinateCommit(\n () =>\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n const planned = yield* plan;\n\n yield* owner.check;\n if (mutation !== undefined) return yield* unavailable();\n const guarded = { ...planned, journalGuard: journal.prepare(undefined) };\n\n mutation = guarded;\n statements.push(...guarded.statements);\n\n return guarded.receipt;\n }),\n { mode: \"batch\" },\n ).pipe(\n Effect.map((result) => result.value),\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(CurrentEmailSql, database as unknown as EmailSqlDatabase),\n Effect.provideService(LifecycleHooks, hooks),\n );\n\n const service: EmailRegistrationAuthority<Registration> = {\n inspect: (input) =>\n owner.run(\n plans\n .inspect(input)\n .pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(\n CurrentEmailSql,\n database as unknown as EmailSqlDatabase,\n ),\n Effect.provideService(LifecycleHooks, hooks),\n translateFailure,\n ),\n ),\n registerWithProof: (input, prepare) =>\n owner.run(run(plans.registerWithProof(input, prepare)).pipe(translateFailure)),\n };\n\n const provided = Context.make(options.target, service).pipe(\n Context.add(D1BatchStatements, owner.collector),\n );\n\n const value = yield* owner.close(Effect.provideContext(body, provided));\n\n if (mutation?.journalGuard !== undefined) {\n const status = yield* Effect.result(mutation.journalGuard.read);\n\n if (status._tag === \"Success\" || status.failure._tag !== \"CommitPending\")\n return yield* unavailable();\n }\n yield* database.$client.batch(statements).pipe(\n Effect.catchCause((cause) =>\n Effect.failCause(\n Cause.map(cause, (error) =>\n everyFailureMatches(cause, mutation?.retryable) ? unavailable() : error,\n ),\n ),\n ),\n translateFailure,\n );\n\n return value;\n }),\n { mode: \"batch\" },\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n return result.value;\n }),\n );\n}\n\nconst translateFailure = <A, E, R>(\n effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n reportPersistenceFailure(\n effect,\n (error) =>\n Schema.is(EmailUnavailable)(error) ||\n Schema.is(ProofUnavailable)(error) ||\n Schema.is(HookConfigurationError)(error),\n ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst executeStandalone = <A, E, R>(\n plan: Effect.Effect<Planned<A>, E, R>,\n retries = 2,\n): Effect.Effect<\n A,\n | E\n | import(\"../hooks/models\").HookConfigurationError\n | import(\"effect/unstable/sql/SqlError\").SqlError,\n Exclude<R, CurrentCommitJournal> | CurrentD1PlanningDatabase | LifecycleHooks\n> =>\n Effect.suspend(() => {\n let retryable: ((cause: unknown) => boolean) | undefined;\n\n const once = coordinateCommit(\n () =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n const planned = yield* plan;\n\n retryable = planned.retryable;\n yield* database.$client.batch(planned.statements);\n\n return planned.receipt;\n }),\n { mode: \"batch\" },\n ).pipe(Effect.map((result) => result.value));\n\n return once.pipe(\n Effect.catchCause((cause) =>\n retries > 0 && everyFailureMatches(cause, retryable)\n ? executeStandalone(plan, retries - 1)\n : Effect.failCause(cause),\n ),\n );\n });\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyFA,MAAM,kBAAkB,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC7D,SACA,UACA,YACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,QAAQ,iBAAiB,SAAS,UAAU,UAAU;CAE5D,OAAO,OAAO,SACX,OAAO,MAAM,MAAM,CAAC,CACpB,KAAK,MAAM,IAAI,CAAC,CAChB,UAAU,MAAM,cAAc,MAAM,WAAW,CAAC,CAChD,UAAU,MAAM,iBAAiB,MAAM,cAAc,CAAC,CACtD,MAAM,MAAM,SAAS,CAAC,CACtB,MAAM,MAAM,KAAK;AACtB,CAAC;AAED,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,uBACJ,OACA,aAEA,aAAa,KAAA,KACb,MAAM,QAAQ,SAAS,KACvB,MAAM,QAAQ,OAAO,WAAW,MAAM,aAAa,MAAM,KAAK,SAAS,MAAM,KAAK,OAAO,KAAK,CAAC,CAAC;AASlG,MAAM,YAAY,OAAO,GAAG,WAAW,OAEpC;CACD,MAAM,WAAW,OAAO;CACxB,MAAM,WAAW,MAAM,MAAM;CAE7B,OAAO,SAAS,QAAQ,OAAO,SAAS,KAAK,SAAS,MAAM;AAC9D,CAAC;AAED,MAAM,mBAAmB,SAAkB,cAAoD;CAC7F,MAAM,UAAqB,CAAC,OAAO;CACnC,MAAM,uBAAO,IAAI,IAAa;CAE9B,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG,SAAS;EAC7D,MAAM,QAAQ,QAAQ,MAAM;EAE5B,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,KAAK,IAAI,KAAK,GAAG;EAC9D,KAAK,IAAI,KAAK;EACd,IAAI,UAAU,KAAK,GAAG,OAAO;EAC7B,IAAI,MAAM,QAAQ,KAAK,GAChB;QAAA,MAAM,UAAU,MAAM,SACzB,IAAI,MAAM,aAAa,MAAM,GAAG,QAAQ,KAAK,OAAO,KAAK;QACpD,IAAI,MAAM,YAAY,MAAM,GAAG,QAAQ,KAAK,OAAO,MAAM;EAAA,OAE3D,IAAI,OAAO,UAAU,UAAU;GACpC,MAAM,UAAU;GAMhB,IAAI,QAAQ,UAAU,KAAA,GAAW,QAAQ,KAAK,QAAQ,KAAK;GAC3D,IAAI,QAAQ,WAAW,KAAA,GAAW,QAAQ,KAAK,QAAQ,MAAM;GAC7D,IAAI,QAAQ,YAAY,KAAA,GAAW,QAAQ,KAAK,QAAQ,OAAO;EACjE;CACF;CAEA,OAAO;AACT;AAEA,MAAM,gBAAgB,OAAgB,WAAmB;CAEvD,MAAM,SAAS,mBAAmB,KADhB,OAAO,WAAW,KAAK,IAAI,EAAE,GACR;CAEvC,OAAO,gBAAgB,QAAQ,UAAU,UAAU,UAAU,UAAU,aAAa,QAAQ;AAC9F;AAEA,MAAM,YAAY,OAAO,GAAG,WAAW,WAAgB,QAAgB;CACrE,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,UACZ,SACG,OAAO,EACN,IAAI,GAAG,aAAa,UAAU,kCAAkC,KAAK,OAAO,GAAG,OAAO,GACpF,IACF,EACF,CAAC,CAAC,CACD,KAAK,GAAG,YAAY,CACzB;AACF,CAAC;AAED,MAAM,aAAa,UAAe,GAAG,UAAU,MAAM;AACrD,MAAM,gBAAgB,UAAe,GAAG,cAAc,MAAM;AAE5D,MAAM,sBAAsB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WACnE,OACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,UACZ,SACG,OAAO,EACN,OAAO,GAAW,GAAG,MAAM,kBAAkB,QAAQ,MAAM,EAC7D,CAAC,CAAC,CACD,KAAK,GAAG,YAAY,CACzB,CAAC,CAAC,KACA,OAAO,SAAS,SACd,OAAO,KAAK,EAAE,EAAE,UAAU,YAAY,OAAO,SAAS,KAAK,EAAE,CAAC,KAAK,IAC/D,OAAO,QAAQ,KAAK,EAAE,CAAC,KAAK,IAC5B,OAAO,KAAK,YAAY,CAAC,CAC/B,CACF;AACF,CAAC;AAED,MAAM,gBAAgB,QAAgB,aAAwD;CAC5F,GAAG;CACH,GAAG,OAAO,YAAY,OAAO;AAC/B;AAEA,MAAM,YACJ,cACA,gBAEA,iBAAiB,KAAA,IACb,eACA,gBAAgB,KAAA,IACd,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;CACT,KAAK;CACL,QAAQ,UAAU,IAAI,oBAAoB;EAAE,WAAW;EAAW;CAAM,CAAC;AAC3E,CAAC;AAET,MAAM,gBAAgB,YACpB,OAAO,QAAQ,+BAA+B,CAAC,CAAC,OAC7C,CAAC,KAAK,WACL,QAAQ,YAAY,SAAyD,KACjF;AAEF,MAAM,qBACJ,SACA,UACA,gBACG;CACH,MAAM,SAAS,UAA4C;EACzD,MAAM,WAAW,SAAS,cAAc,MAAM,UAAU;EAExD,OAAO,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,SAAS,OAAO,QAAQ,GAAG,gBAAgB,KAAK,SAAS,KAAK,YAAY;CAC1H;CAEA,MAAM,eAAe,YAAY,aAAa,SAAS,gBAAgB;EACrE,MAAM,+BAAe,IAAI,IAAmB;EAE5C,KAAK,MAAM,SAAS,SAAS,QAC3B,aAAa,IAAI,MAAM,cAAc,CACnC,GAAI,aAAa,IAAI,MAAM,YAAY,KAAK,CAAC,GAC7C,MAAM,KAAK,CACb,CAAC;EAEH,MAAM,cAAc,CAAC,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,KAC5C,eAAe,GAAG,IAAI,IAAI,KAAK,YAAY,GAAG,MAAM,EAAE,EACzD;EAEA,MAAM,UAAU,YAAY,QAAQ,KAAK,WAAW;GAClD,MAAM,UAAU,SAAS,OAAO,QAAQ,UAAU,MAAM,QAAQ,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK;GAE3F,OAAO,QAAQ,WAAW,IAAI,GAAG,UAAU,GAAG,IAAI,IAAI,KAAK,SAAS,GAAG,MAAM,EAAE;EACjF,CAAC;EAED,MAAM,YAAY,SAAS,OACxB,QACE,WACE,CAAC,YAAY,gBAAgB,MAAM,kBACnC,CAAC,YAAY,qBAAqB,MAAM,kBAC7C,CAAC,CACA,IAAI,KAAK;EAEZ,IAAI,UAAU,WAAW,KAAK,YAAY,SAAS,YAAY,oBAAoB,OAAO,CAAC;EAE3F,MAAM,UACJ,YAAY,uBAAuB,IAC/B,GAAG,SACH,GAAG,IAAI,IAAI,KACT,YAAY,KAAK,cAAc,GAAG,aAAa,UAAU,mBAAmB,GAC5E,GAAG,KACL,EAAE,OAAO,YAAY;EAE3B,OAAO,CAAC,IAAI,GAAG,SAAS,GAAG,IAAI,IAAI,KAAK,WAAW,GAAG,MAAM,EAAE,IAAI,OAAO,CAAE;CAC7E,CAAC;CAED,MAAM,WAAW,SAAS,OAAO,KAC9B,UAAU,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,SAAS,cAAc,MAAM,UAAU,GAC3F;CAEA,OAAO,aAAa,WAAW,IAC3B,GAAG,UACH,IAAI,GAAG,UAAU,GAAG,IAAI,IAAI,KAAK,cAAc,GAAG,MAAM,EAAE,EAAE;AAClE;AAEA,MAAM,oBACJ,SACA,SACA,aACG;CACH,MAAM,KAAK,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CAC3D,MAAM,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CACnE,MAAM,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB;CAE/E,OAAO,UACL,GAAG,iBAAiB,QAAQ,QAAQ,MAAM,SAAS,GAAG,GAAG,IAAI,MAAM,QAAQ,iBAAiB,EAAE,EAAE,OAAO,OAAO,GAAG,IAAI,MAAM,QAAQ,QAAQ,qBAAqB,MAAM,EAAE,OAAO,SAAS,GAAG,IAAI,MAAM,UAAU,QAAQ,GACzN;AACF;AAEA,MAAM,8BAA8B,SAAyB,YAA4B;CACvF,MAAM,IAAI,QAAQ;CAClB,MAAM,UAAU,OAAO,EAAE,OAAO,EAAE,SAAS;CAC3C,MAAM,aAAa,OAAO,EAAE,OAAO,EAAE,YAAY;CACjD,MAAM,WAAW,OAAO,EAAE,OAAO,EAAE,QAAQ;CAC3C,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,MAAM;CACvC,MAAM,WAAW,QAAQ,SAAS;CAElC,MAAM,UAAU,SAAS,KAAK,SAC5B,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,QAAQ,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,WAAW,GAAG,IAAI,MAAM,KAAK,cAAc,UAAU,EAAE,OAAO,SAAS,GAAG,IAAI,MAAM,KAAK,UAAU,QAAQ,EAAE,OAAO,OAAO,GAAG,IAAI,MAAM,EAAE,qBAAqB,MAAM,GAC1Q,CACF;CAEA,OAAO,IACL,GAAG,SACH,GAAG,yBAAyB,EAAE,MAAM,SAAS,QAAQ,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,OAAO,GAAG,IAAI,MAAM,EAAE,qBAAqB,MAAM,EAAE,IAAI,SAAS,QAC7K;AACF;AAEA,MAAM,eAAe,OAAO,GAAG,sBAAsB,CAAC,CAAC,WACrD,SACA,cACA,YACA,QACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,UAAU,OAAO;CAEvB,IAAI,CAAC,aAAa,OAAO,GAAG,OAAO,OAAO,YAAY;CACtD,MAAM,QAAQ,OAAO,sBAAsB,UAAU,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CAExF,MAAM,UAAU,OAAO,uBACrB,SACA;EAAE,MAAM;EAAe,SAAS;EAAO,iBAAiB,OAAO;CAAK,GACpE,OACA,MACF;CAEA,IAAI,YAAY,KAAA,GAAW,OAAO;EAAE,SAAS,QAAQ,YAAY,OAAO;EAAG,YAAY,CAAC;CAAE;CAe1F,KAAK,OAbmB,UACtB,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,GAAG,MAAM,QAAQ,GAC1E,GAAG,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS,GAAG,MAAM,SAAS,CAC9E,CACF,CAAC,CACA,MAAM,CAAC,CAGc,EAAA,CAAG,SAAS,GACpC,OAAO;EAAE,SAAS,QAAQ,YAAY,OAAO;EAAG,YAAY,CAAC;CAAE;CACjE,MAAM,cAAc,OAAO,QAAQ,QAAQ,wBAAwB,QAAQ,SAAS,MAAM;CAE1F,MAAM,WAAW,OAAO,qBACtB,MAAM,cAAc,UACpB,MAAM,cAAc,WACtB,CAAC,CAAC,KAAK,OAAO,SAAS,WAAW,CAAC;CAEnC,MAAM,aAAa,OAAO,qBAAqB,MAAM,cAAc,UAAU,WAAW,CAAC,CAAC,KACxF,OAAO,SAAS,WAAW,CAC7B;CAEA,IAAI,CAAC,SAAS,aAAa,CAAC,WAAW,WACrC,OAAO;EAAE,SAAS,QAAQ,YAAY,OAAO;EAAG,YAAY,CAAC;CAAE;CACjE,MAAM,mBAAmB,OAAO,oBAAoB,QAAQ,EAAE;CAC9D,MAAM,oBAAoB,QAAQ,cAAc,gBAAgB;CAEhE,MAAM,qBACJ,QAAQ,mBAAmB,QAAQ,WAAW,kBAC7C,OAAO,SAAS,QAAQ,sBAAsB,QAAQ,wBAAwB;CAEjF,MAAM,2BAA2B,OAAO,SACtC,QAAQ,kBACR,QAAQ,oBACV;CAEA,MAAM,2BAA2B,OAAO,SACtC,QAAQ,kBACR,QAAQ,oBACV;CAEA,MAAM,2BAA2B,OAAO,SACtC,QAAQ,kBACR,QAAQ,oBACV;CAEA,MAAM,2BAA2B,OAAO,SACtC,QAAQ,kBACR,QAAQ,oBACV;CAEA,MAAM,eAAe,OAAO,SAC1B,QAAQ,QAAQ,uBAAuB,MAAM,SAAS,SAAS,gBAAgB,KAC7E,QAAQ,kBACV,QAAQ,QAAQ,6BAA6B,KAAA,IACzC,QAAQ,6BACF,QAAQ,QAAQ,yBAA0B,MAAM,SAAS,SAAS,gBAAgB,CAC9F;CAEA,IACE,iBAAiB,MAAM,SAAS,SAAS,oBACxC,QAAQ,qBAAqB,KAAA,KAC5B,6BAA6B,QAAQ,iBAAiB,QAAQ,WAAW,oBAC1E,QAAQ,qBAAqB,KAAA,KAC5B,6BACE,QAAQ,iBAAiB,QAAQ,WAAW,uBAC/C,QAAQ,WAAW,KAAA,MACjB,6BAA6B,QAAQ,OAAO,SAAS,sBACpD,6BAA6B,QAAQ,OAAO,SAAS,qBAEzD,OAAO,OAAO,YAAY;CAC5B,MAAM,aAA+B,CAAC;CACtC,MAAM,IAAI,QAAQ;CAClB,MAAM,IAAI,QAAQ;CAClB,MAAM,IAAI,QAAQ;CAClB,MAAM,KAAK,QAAQ;CACnB,MAAM,kBAAkB,qCAAqC,MAAM;CAEnE,MAAM,+BACJ,QAAQ,qBAAqB,KAAA,IACzB,aACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,MAAM,OAAO,WAAW,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,MAAM,MAAM,OAAO,OAAO,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,GAChO,IACA,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,EAAE,yBAAyB;EAC9D,YAAY,MAAM;EAClB,iBAAiB,QAAQ;CAC3B,CAAC,GACH;CAEN,MAAM,+BACJ,QAAQ,qBAAqB,KAAA,IACzB,aACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,IAAI,MAAM,MAAM,OAAO,WAAW,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,MAAM,MAAM,OAAO,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,GACrW,IACA,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,EAAE,eAAe,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GACplB;CAEN,MAAM,qBACJ,WAAW,mBACP,GAAG,SACH,IACE,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,EAAE,mBAAmB;EACxD,YAAY,GAAI,SAAS;EACzB,iBAAiB,QAAQ;EACzB,iBAAiB,GAAI,SAAS;CAChC,CAAC,GACH,GACA,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,cAAc,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,oBAAoB,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GACrjB,CACF;CAEN,WAAW,KACT,OAAO,UACL,IACE,iBAAiB,SAAS,SAAS,MAAM,SAAS,SAAS,gBAAgB,GAC3E,2BAA2B,SAAS,OAAO,GAC3C,8BACA,8BACA,oBACA,kBAAkB,SAAS,MAAM,cAAc,UAAU,MAAM,cAAc,WAAW,GACxF,kBAAkB,SAAS,MAAM,cAAc,UAAU,WAAW,CACtE,GACA,eACF,CACF;CAEA,IAAI,WAAW,kBAAkB;EAC/B,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,IACC,EAAE,iBAAiB;GACjB,QAAQ,GAAI,SAAS;GACrB,iBAAiB;EACnB,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,GAAI,SAAS,WAAW,SAAS,GAClE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,GAAI,SAAS,WAAW,KAAK,GAC1D,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,QAAQ,eAAe,GACxD,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,GAAI,SAAS,kBAAkB,CACxE,CACF,CACJ,CACF;EACA,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,IACC,EAAE,iBAAiB;GACjB,QAAQ,GAAI,SAAS;GACrB,oBAAoB;EACtB,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC9C,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,GAAI,SAAS,YAAY,GAC7D,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,QAAQ,eAAe,GACxD,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,GAAG,GAAI,SAAS,kBAAkB,CAC3E,CACF,CACJ,CACF;EACA,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,IAAI,EAAE,iBAAiB,wBAAwB,CAAC,CAAC,CACjD,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,QAAQ,eAAe,GACxD,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,GAAI,SAAS,YAAY,GAC7D,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAG,GAAI,SAAS,kBAAkB,CACjE,CACF,CACJ,CACF;CACF;CACA,IAAI,QAAQ,qBAAqB,KAAA,GAC/B,WAAW,KACT,OAAO,UACL,SAAS,OAAO,EAAE,KAAK,CAAC,CAAC,OACvB,aACE,EAAE,qBAAqB;EACrB,YAAY,MAAM;EAClB,WAAW,QAAQ;EACnB,kBAAkB;EAClB,iBAAiB;CACnB,CAAC,GACD,CAAC,CAAC,EAAE,YAAY,iBAAiB,CAAC,CACpC,CACF,CACF,CACF;MAEA,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,IACC,aACE,EAAE,mBAAmB;EACnB,kBAAkB;EAClB,iBAAiB;CACnB,CAAC,GACD,CAAC,CAAC,EAAE,YAAY,iBAAiB,CAAC,CACpC,CACF,CAAC,CACA,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,MAAM,OAAO,SAAS,GACvD,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,MAAM,OAAO,KAAK,GAC/C,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,QAAQ,eAAe,GACxD,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,QAAQ,iBAAkB,EAAE,gBAAgB,CACrF,CACF,CACJ,CACF;CACF,IAAI,QAAQ,qBAAqB,KAAA,GAAW;EAC1C,WAAW,KACT,OAAO,UACL,SAAS,OAAO,EAAE,KAAK,CAAC,CAAC,OACvB,EAAE,qBAAqB;GACrB,UAAU,MAAM;GAChB,WAAW,QAAQ;GACnB,cAAc;GACd,YAAY,MAAM;GAClB,oBAAoB;EACtB,CAAC,CACH,CACF,CACF;EACA,WAAW,KACT,OAAO,UACL,SAAS,OAAO,EAAE,KAAK,CAAC,CAAC,OACvB,EAAE,aAAa;GACb,WAAW,QAAQ;GACnB,cAAc;GACd,UAAU;EACZ,CAAC,CACH,CACF,CACF;CACF,OAAO;EACL,MAAM,cAAc,QAAQ,iBAAiB,EAAE;EAE/C,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,IACC,EAAE,iBAAiB;GACjB,YAAY,MAAM;GAClB,oBAAoB;EACtB,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,QAAQ,GAC9C,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,kBAAkB,GACtD,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,QAAQ,eAAe,GACxD,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,GAAG,WAAW,CACvD,CACF,CACJ,CACF;EACA,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,IAAI,EAAE,iBAAiB,wBAAwB,CAAC,CAAC,CACjD,MACC,IACE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,QAAQ,eAAe,GACxD,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,kBAAkB,GACtD,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAG,WAAW,CAC7C,CACF,CACJ,CACF;CACF;CACA,WAAW,KACT,OAAO,UACL,SACG,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAkB,CAAC,CAAC,QAAQ,QAAQ,kBAAkB,YAAY,CAAC,CAAC,CAAC,CAAC,CAC1E,MACC,IACE,GAAG,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE,GAAG,QAAQ,eAAe,GAC7E,GACE,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB,GAC9D,MAAM,SAAS,SAAS,gBAC1B,CACF,CACF,CACJ,CACF;CACA,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACrC,aACE,QAAQ,QAAQ,aAAa;EAC3B,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB;EACA,eAAe,MAAM,cAAc,UAAU;EAC7C,sBAAsB,mBAAmB,QAAQ;CACnD,CAAC,GACD,CACE,CACE,QAAQ,QAAQ,gBAChB,QAAQ,cAAc,mBAAmB,QAAQ,sBAAsB,CACzE,CACF,CACF,CACF,CACF,CACF;CAEA,MAAM,eAAe,UACnB,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,MAAM,0BAA0B,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,MAAM,mBAAmB,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,mBAAmB;EAAE,YAAY,MAAM;EAAQ,iBAAiB,QAAQ;EAAiB,iBAAiB;CAAyB,CAAC,GACtY;CAEA,MAAM,mBAAmB,UACvB,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,oBAAoB,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,IAAI,MAAM,MAAM,OAAO,WAAW,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,MAAM,MAAM,OAAO,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,IAAI,MAAM,0BAA0B,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GACjxB;CAEA,MAAM,kBAAkB,UACtB,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,oBAAoB,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,0BAA0B,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GACtb;CAEA,MAAM,gBAAgB,UACpB,GAAG,iBAAiB,QAAQ,QAAQ,MAAM,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS,EAAE,GAAG,IAAI,MAAM,MAAM,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM,EAAE,GAAG,IAAI,MAAM,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,aAAa,EAAE,GAAG,IAAI,MAAM,MAAM,cAAc,UAAU,eAAe,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,aAAa,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc,EAAE,GAAG,IAAI,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,sBAAsB,GAAG,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc,CAAC,GACz3B;CAEA,MAAM,gBACJ,WAAW,mBACP,GAAG,SACH,IACE,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,WAAW,WAAW,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,WAAW,OAAO,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,MAAM,0BAA0B,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,YAAY,EAAE,mBAAmB;EAAE,YAAY,GAAI,SAAS;EAAY,iBAAiB,QAAQ;EAAiB,iBAAiB;CAAyB,CAAC,EAAE,EACpnB,GACA,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,cAAc,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,WAAW,WAAW,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,WAAW,OAAO,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,IAAI,MAAM,0BAA0B,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAC/yB,GACA,UACE,GAAG,iBAAiB,EAAE,MAAM,SAAS,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,QAAQ,iBAAiB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,GAAI,SAAS,cAAc,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,0BAA0B,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,qBAAqB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAC9b,CACF;CAEN,MAAM,UAAU,IACd,iBAAiB,SAAS,SAAS,YAAY,GAC/C,cACA,kBACA,iBACA,eACA,eACA,kBAAkB,SAAS,MAAM,cAAc,UAAU,MAAM,cAAc,WAAW,GACxF,kBAAkB,SAAS,MAAM,cAAc,UAAU,WAAW,CACtE;CAEA,MAAM,WAAW,OAAO,6BACtB,cACA,MAAM,YACN;EAAE;EAAY,kBAAkB;CAAQ,IACvC,aAAa,QAChB;CAEA,MAAM,SAAS,qCAAqC,MAAM,WAAW,MAAM;CAE3E,OAAO;EACL,SAAS,QAAQ,SAAS,WAAW,WAAW,IAAI,aAAa,WAAW,OAAO;EACnF,YAAY,SAAS;EACrB,YAAY,UACV,aAAa,OAAO,MAAM,KAC1B,aAAa,OAAO,eAAe,KACnC,2BAA2B,QAAQ,mBAAmB,KAAK,KAC3D,2BAA2B,QAAQ,sBAAsB,KAAK,KAC9D,2BAA2B,QAAQ,sBAAsB,KAAK;CAClE;AACF,CAAC;AAED,MAAM,aAAgB,WACpB;AAEF,MAAM,kBAAkB,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC7D,cACA,OACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,OAA4B;EAChC;EACA,UAAU,UAAU,SAAS,YAAY,QAAQ,QAAQ,QAAQ,QAAQ,CAAC;CAC5E;CAEA,MAAM,SAAS,qCAAqC,MAAM;CAoB1D,OAAO,OAlBM,uBAET,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO,6BACtB,cACA,MACA;GAAE,YAAY,CAAC;GAAG,kBAAkB,GAAG;EAAQ,SACzC,KACR;EAEA,IAAI,SAAS,WAAW,WAAW,GAAG,OAAO;EAC7C,OAAO,SAAS,QAAQ,MAAM,SAAS,UAAU;EAEjD,OAAO;CACT,CAAC,GACH,EAAE,MAAM,QAAQ,CAGD,CAAC,CAAC,KACjB,OAAO,GAAG,KAAK,GACf,OAAO,YAAY,UACjB,aAAa,OAAO,MAAM,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,UAAU,KAAK,CAC7E,CACF;AACF,CAAC;AAED,MAAM,oBAAoB,SAAyB,kBAAgC;CACjF,SAAS,UACP,eAAe,SAAS,OAAO,KAAK,CAAC,CAAC,KACpC,OAAO,SAAS,YACd,YAAY,KAAA,IACR,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,QAAQ;EACb,UAAU,QAAQ;EAClB,UAAU,QAAQ;EAClB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO,SAAS;CAC5E,CAAC,CACP,CACF;CACF,kBACE,UACG;EACH,IAAI,MAAM,QAAQ,SAAS,oBAAoB,OAAO,OAAO,QAAQ,KAAK;EAC1E,MAAM,UAAU,MAAM;EAEtB,MAAM,SACJ,MAAM,SAAS,SAAS,iBAAiB,KAAK,MAAM,YAAY,+BAC5D,mBACA,MAAM,SAAS,SAAS,iBAAiB,KAAK,MAAM,YAAY,yBAC9D,mBACA,KAAA;EAER,IAAI,WAAW,KAAA,GAAW,OAAO,OAAO,QAAQ,KAAK;EACrD,MAAM,WAAW,MAAM,SAAS,MAAM,GAAG,CAAC,IAAI,SAAS,MAAM;EAE7D,OAAO,eACL,SACA;GACE;GACA,WAAW,QAAQ,SAAS;GAC5B,QAAQ,QAAQ;EAClB,GACA,KACF,CAAC,CAAC,KACA,OAAO,SAAS,YACd,YAAY,KAAA,KAAa,kBAAkB,QAAQ,UAAU,QAAQ,QAAQ,IACzE,gBAAgB,cAAc,KAAK,IACnC,OAAO,QAAQ,KAAK,CAC1B,CACF;CACF;CACA,kBACE,OACA,YACG,aAAa,SAAS,cAAc,OAAO,kBAAkB,OAAO;CACzE,kBACE,OACA,YACG,aAAa,SAAS,cAAc,OAAO,kBAAkB,OAAO;CACzE,UACE,OACA,YAEA,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO;EAExB,MAAM,UAAU,OAAO;EAEvB,MAAM,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;EACrE,MAAM,KAAK,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;EAClE,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;EAE9E,MAAM,OAAO,OAAO,UAClB,SACG,OAAO,EAAE,WAAW,GAAG,CAAC,CAAC,CACzB,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,QAAQ,MAAM,QAAQ,GAAG,IAAI,WAAW,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAC5E,MAAM,MAAM,QAAQ,CAAC,CAC1B;EAEA,MAAM,WAAW,KAAK,MAAM,GAAG,MAAM,KAAK;EAC1C,MAAM,SAAS,mCAAmC,MAAM;EACxD,MAAM,cAAc,SAAS,KAAK,QAAa,IAAI,SAAS;EAE5D,MAAM,gBAAgB,IACpB,GAAG,QAAQ,MAAM,QAAQ,GACzB,QAAQ,IAAI,WAAW,GACvB,IAAI,WAAW,QAAQ,GAAG,SAAS,CACrC;EAEA,MAAM,aACJ,SAAS,WAAW,IAChB,CAAC,IACD,CACE,OAAO,UACL,GAAG,yBAAyB,QAAQ,QAAQ,MAAM,SAAS,cAAc,IAAI,SAAS,UACtF,MACF,GACA,OAAO,UAAU,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,aAAa,CAAC,CAC9E;EAEN,OAAO;GACL,SAAS,QAAQ;IAAE,SAAS,SAAS;IAAQ,SAAS,KAAK,SAAS,MAAM;GAAM,GAAG,OAAO;GAC1F;GACA,YAAY,UAAmB,aAAa,OAAO,MAAM;EAC3D;CACF,CAAC;AACL;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,UACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ,GAAG,QAAQ,GAC9E,GAAG,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS,GAAG,SAAS,CAClF,CACF,CAAC,CACA,MAAM,CAAC,CACZ;AACF,CAAC;AAED,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,iCACJ,SACA,UAMA,MAAM,WAAW,MAAM,aAAa,GAAG,MAAM,SAAS,kBACtD,MAAM,WAAW,MAAM,YAAY,6BACnC,MAAM,WAAW,MAAM,QAAQ,SAAS,gBACxC,eAAe,MAAM,WAAW,MAAM,QAAQ,YAAY,MAAM,UAAU,KAC1E,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,qBAC7E,QAAQ,SAAS,aAChB,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OAClD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AAEJ,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,cACA,OAQA,WACA,WAQA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,SAAS,EAAA,CAAG;CAErF,IAAI,aAAa,KAAA,GAMf,OAAO;EAAE,SAAS,QAJhB,SAAS,QAAQ,aAAa,iBAAiB,MAAM,cAChD,EAAE,MAAM,WAAW,IACpB,OAAO,QAAQ,aAAa,aAAa,QAAQ,GAEnB,OAAO;EAAG,YAAY,CAAC;CAAE;CAE/D,IACE,CAAC,8BAA8B,SAAS,KAAK,KAC7C,CAAC,UAAU,YACX,UAAU,gBAAgB,MAAM,eAC/B,QAAQ,SAAS,aACf,QAAQ,aAAa,WAAW,eAC/B,QAAQ,QAAQ,wBAAwB,KAAA,KACxC,QAAQ,WAAW,uBAAuB,KAAA,KAC1C,QAAQ,WAAW,wBAAwB,KAAA,KAC3C,QAAQ,oBAAoB,wBAAwB,KAAA,IAExD,OAAO;EAAE,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;EAAG,YAAY,CAAC;CAAE;CAE3E,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY;GACV,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC;CACF;CAEA,MAAM,mBAAmB,OAAO,oBAAoB,QAAQ,EAAE;CAC9D,MAAM,mBAAmB,QAAQ,cAAc,mBAAmB,QAAQ,eAAe;CACzF,MAAM,aAA+B,CAAC;CACtC,IAAI;CACJ,IAAI;CACJ,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;CAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;CAEvF,IAAI,QAAQ,SAAS,WAAW;EAC9B,IAAI,UAAU,qBAAqB,KAAA,GACjC,OAAO;GAAE,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;GAAG,YAAY,CAAC;EAAE;EAC3E,UAAU;GAAE,MAAM;GAAuB,WAAW,UAAU;EAAiB;EAC/E,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OAC1C,aACE,QAAQ,aAAa,aAAa,QAAQ;GACxC,OAAO;GACP,kBAAkB,UAAU;GAC5B,sBAAsB,mBAAmB,QAAQ;EACnD,CAAC,GACD,CAAC,CAAC,QAAQ,aAAa,gBAAgB,gBAAgB,CAAC,CAC1D,CACF,CACF,CACF;EACA,UAAU,UACR,GAAG,iBAAiB,QAAQ,aAAa,MAAM,SAAS,mBAAmB,GAAG,IAAI,MAAM,MAAM,UAAU,kBAAkB,EAAE,OAAO,oBAAoB,GAAG,IAAI,MAAM,MAAM,WAAW,mBAAmB,EAAE,OAAO,wBAAwB,GAAG,IAAI,MAAM,MAAM,aAAa,uBAAuB,EAAE,OAAO,kBAAkB,iBAAiB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,gBAAgB,EAAE,GAAG,IAAI,MAAM,UAAU,kBAAkB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,gBAAgB,CAAC,EAAE,OAAO,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS,EAAE,eAAe,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc,EAAE,GAAG,IAAI,MAAM,kBAAkB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc,CAAC,GACnxB;CACF,OAAO;EACL,IACE,UAAU,oBAAoB,KAAA,KAC9B,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAAE,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;GAAG,YAAY,CAAC;EAAE;EAC3E,MAAM,kBAAkB,UAAU;EAElC,UAAU,EAAE,MAAM,aAAa;EAC/B,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACrC,QAAQ,aAAa,oBAAoB,QAAQ;GAC/C;GACA,kBAAkB,UAAU;EAC9B,CAAC,CACH,CACF,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OACxC,aACE,QAAQ,WAAW,qBAAqB;GACtC,YAAY,MAAM;GAClB,WAAW;GACX,kBAAkB;GAClB,iBAAiB,UAAU;EAC7B,CAAC,GACD,CAAC,CAAC,QAAQ,WAAW,YAAY,QAAQ,cAAc,gBAAgB,CAAC,CAAC,CAC3E,CACF,CACF,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OACxC,QAAQ,WAAW,qBAAqB;GACtC,UAAU,MAAM;GAChB,WAAW;GACX,cAAc,UAAU;GACxB,YAAY,MAAM;GAClB,oBAAoB,UAAU;EAChC,CAAC,CACH,CACF,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OACjD,QAAQ,oBAAoB,aAAa;GACvC,WAAW;GACX,cAAc,UAAU;GACxB,UAAU,UAAU;EACtB,CAAC,CACH,CACF,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OAC1C,aACE,QAAQ,aAAa,aAAa,QAAQ;GACxC,OAAO;GACP;GACA,sBAAsB,mBAAmB,QAAQ;EACnD,CAAC,GACD,CAAC,CAAC,QAAQ,aAAa,gBAAgB,gBAAgB,CAAC,CAC1D,CACF,CACF,CACF;EACA,MAAM,MAAM,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;EAC5D,MAAM,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;EACpE,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB;EAChF,MAAM,aAAa,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EAChF,MAAM,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;EACxE,MAAM,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EAC9E,MAAM,cAAc,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;EAClF,MAAM,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;EACrF,MAAM,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;EAC5E,MAAM,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;EAC9E,MAAM,MAAM,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;EAC5E,MAAM,aAAa,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,mBAAmB;EAC1F,MAAM,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;EAClF,MAAM,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,kBAAkB;EAExF,MAAM,WAAW,OACf,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;EAEA,MAAM,MAAM,OAAO,QAAQ,oBAAoB,OAAO,QAAQ,oBAAoB,YAAY;EAE9F,MAAM,YAAY,OAChB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,QAC9B;EAEA,UAAU,IACR,UACE,GAAG,iBAAiB,QAAQ,QAAQ,MAAM,SAAS,IAAI,GAAG,IAAI,MAAM,iBAAiB,GAAG,EAAE,OAAO,QAAQ,GAAG,IAAI,MAAM,QAAQ,QAAQ,qBAAqB,OAAO,EAAE,OAAO,UAAU,GAAG,IAAI,MAAM,UAAU,kBAAkB,SAAS,GACzO,GACA,UACE,GAAG,iBAAiB,QAAQ,WAAW,MAAM,SAAS,WAAW,GAAG,IAAI,MAAM,MAAM,WAAW,WAAW,UAAU,EAAE,OAAO,OAAO,GAAG,IAAI,MAAM,MAAM,WAAW,OAAO,MAAM,EAAE,OAAO,SAAS,GAAG,IAAI,MAAM,iBAAiB,QAAQ,EAAE,OAAO,YAAY,GAAG,IAAI,MAAM,QAAQ,cAAc,gBAAgB,GAAG,WAAW,EAAE,OAAO,UAAU,GAAG,IAAI,MAAM,UAAU,oBAAoB,SAAS,EAAE,OAAO,QAAQ,WAAW,mBAAoB;GAAE,YAAY,MAAM;GAAY;GAAiB,iBAAiB,UAAU;EAAmB,CAAC,GACthB,GACA,UACE,GAAG,iBAAiB,QAAQ,WAAW,MAAM,SAAS,QAAQ,GAAG,IAAI,MAAM,MAAM,UAAU,OAAO,EAAE,OAAO,SAAS,GAAG,IAAI,MAAM,iBAAiB,QAAQ,EAAE,OAAO,IAAI,GAAG,IAAI,MAAM,UAAU,cAAc,GAAG,EAAE,OAAO,WAAW,GAAG,IAAI,MAAM,MAAM,WAAW,WAAW,UAAU,EAAE,OAAO,OAAO,GAAG,IAAI,MAAM,MAAM,WAAW,OAAO,MAAM,EAAE,OAAO,UAAU,GAAG,IAAI,MAAM,UAAU,oBAAoB,SAAS,EAAE,OAAO,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,MAAM,EAAE,GAAG,IAAI,MAAM,QAAQ,WAAW,qBAAqB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,MAAM,CAAC,GAC/kB,GACA,UACE,GAAG,iBAAiB,QAAQ,oBAAoB,MAAM,SAAS,SAAS,GAAG,IAAI,MAAM,iBAAiB,QAAQ,EAAE,OAAO,IAAI,GAAG,IAAI,MAAM,UAAU,cAAc,GAAG,EAAE,OAAO,UAAU,GAAG,IAAI,MAAM,UAAU,oBAAoB,SAAS,EAAE,OAAO,OAAO,QAAQ,oBAAoB,OAAO,QAAQ,oBAAoB,MAAM,EAAE,GAAG,IAAI,MAAM,QAAQ,oBAAoB,qBAAqB,OAAO,QAAQ,oBAAoB,OAAO,QAAQ,oBAAoB,MAAM,CAAC,GAC9c,GACA,UACE,GAAG,iBAAiB,QAAQ,aAAa,MAAM,SAAS,mBAAmB,GAAG,IAAI,MAAM,MAAM,UAAU,kBAAkB,EAAE,OAAO,oBAAoB,GAAG,IAAI,MAAM,MAAM,WAAW,mBAAmB,EAAE,OAAO,wBAAwB,GAAG,IAAI,MAAM,MAAM,aAAa,uBAAuB,EAAE,OAAO,kBAAkB,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS,EAAE,GAAG,IAAI,MAAM,iBAAiB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS,CAAC,EAAE,OAAO,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,gBAAgB,EAAE,eAAe,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc,EAAE,GAAG,IAAI,MAAM,kBAAkB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc,CAAC,GACpwB,CACF;CACF;CACA,IAAI;CAEJ,MAAM,WAAW,OAAO,6BACtB,cACA,MAAM,YACN;EAAE;EAAY,kBAAkB;CAAQ,IACvC,eAAe;EACd,UAAU,QAAQ,eAAe,cAAc,UAAU,EAAE,MAAM,WAAW,GAAG,OAAO;EAEtF,OAAO;CACT,CACF;CAEA,MAAM,SAAS,qCAAqC,MAAM,WAAW,MAAM;CAE3E,OAAO;EACL,SAAS,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;EACzD,YAAY,SAAS;EACrB,YAAY,UACV,aAAa,OAAO,MAAM,KAC1B,2BAA2B,QAAQ,mBAAmB,KAAK,KAC1D,QAAQ,SAAS,aACf,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,2BAA2B,QAAQ,sBAAsB,KAAK;CACtE;AACF,CAAC;AAED,MAAM,yBACJ,SACA,kBACI;CACJ,UAAU,UACR,QAAQ,QAAQ,KAAK;CACvB,oBACE,YACA,YAEA,OAAO,IAAI,aAAa;EACtB,MAAM,eAAe,OAAO,QAAQ,qBAAqB,WAAW,YAAY;EAChF,MAAM,yBAAyB,OAAO,QAAQ,qBAAqB,WAAW,YAAY;EAE1F,MAAM,QAAQ,OAAO,OAAO;GAC1B,GAAG;GACH,YAAY,OAAO,OAAO,EAAE,GAAG,WAAW,WAAW,CAAC;GACtD;EACF,CAAC;EAED,MAAM,YAAY,OAAO,QAAQ,QAAQ;GACvC,YAAY,MAAM;GAClB,cAAc;EAChB,CAAC;EAED,MAAM,SAAS,QAAQ,SAAS;EAEhC,MAAM,eAAe,SACjB,OAAO,SAAS,QAAQ,sBAAsB,QAAQ,wBAAwB,IAC9E,KAAA;EAEJ,MAAM,mBAAmB,SACrB,OAAO,SAAS,QAAQ,kBAAkB,QAAQ,oBAAoB,IACtE,KAAA;EAEJ,MAAM,qBAAqB,SACvB,OAAO,SAAS,QAAQ,kBAAkB,QAAQ,oBAAoB,IACtE,KAAA;EAEJ,MAAM,qBAAqB,SACvB,OAAO,SAAS,QAAQ,kBAAkB,QAAQ,oBAAoB,IACtE,KAAA;EAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;EAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SAAS,QAAQ,0BAA0B,QAAQ,4BAA4B,IACtF,KAAA;EAEN,OAAO,OAAO,iBACZ,SACA,cACA,OACA,WACA;GACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;GACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;GAC7D,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;GACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;GACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;GAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;EAC/D,GACA,OACF;CACF,CAAC;AACL;AAEA,MAAa,6BAMX,UACA,YAEA,OAAO,QAAQ,EACb,oBAAoB,mBAAmB,GAAG,EACxC,SAAS,UAAU;CACjB,IAAI,CAAC,4BAA4B,OAAc,GAAG,OAAO,OAAO,KAAK,YAAY,CAAC;CAElF,OAAO,gBAAgB,SAAgB,MAAM,UAAU,MAAM,UAAU,CAAC,CAAC,KACvE,OAAO,SAAS,SAAS;EACvB,MAAM,MAAM,KAAK;EAEjB,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,QAAQ,OAAO,KAAK,CAAC;EAE1D,OAAO,oBAAoB,SAAgB,MAAM,UAAU,MAAM,YAAY,GAAG,CAAC,CAAC,KAChF,OAAO,KAAK,aACV,aAAa,KAAA,IAAY,OAAO,KAAK,IAAI,OAAO,KAAK,QAAQ,CAC/D,CACF;CACF,CAAC,GACD,OAAO,eAAe,2BAA2B,QAAQ,GACzD,gBACF;AACF,EACF,CAAC,EACH,CAAC;AAEH,MAAa,8BAoBX,UACA,SACA,iBAeA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAErB,MAAM,QAAQ,iBACZ,SACA,YACF;CAEA,MAAM,OAAsB,SAC1B,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EAErD,OAAO,OAAO,kBAAkB,MAAM,CAAC;CACzC,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,CAC7C;CA4BF,OAAO,EAAE,yBAAyB;EAzBhC,SAAS,UACP,MACG,OAAO,KAAK,CAAC,CACb,KACC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,kBAAkB,UAChB,MACG,gBAAgB,KAAK,CAAC,CACtB,KACC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,kBAAkB,OAAO,YACvB,IAAI,MAAM,gBAAgB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EAClE,kBAAkB,OAAO,YACvB,IAAI,MAAM,gBAAgB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EAClE,UAAU,OAAO,YAAY,IAAI,MAAM,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;CAG/C,EAAE;AAC5C,CAAC;AAEH,MAAa,mCAqBX,UACA,SACA,iBAeA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAErB,MAAM,QAAQ,sBACZ,SAGA,YACF;CAEA,MAAM,OAAsB,SAC1B,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EAErD,OAAO,OAAO,kBAAkB,MAAM,CAAC;CACzC,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,CAC7C;CAgBF,OAAO,EAAE,uBAAuB;EAb9B,UAAU,UACR,MACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,IAAI,MAAM,kBAAkB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;CAGhC,EAAE;AAC1C,CAAC;AAIH,SAAgB,yBAyBd,SACA,SAiBA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EA8GrD,QAAO,OA5Ge,uBAElB,OAAO,IAAI,aAAa;GACtB,MAAM,aAA+B,CAAC;GACtC,IAAI;GAEJ,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,WAAW,KAAK,SAAS,CAAC,EACrE,CAAC;GAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;GAEA,MAAM,QAAQ,iBACZ,QAAQ,SACR,QAAQ,YACV;GAEA,MAAM,OAAsB,SAC1B,uBAEI,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IACvB,MAAM,UAAU,OAAO;IAEvB,OAAO,MAAM;IACb,IAAI,aAAa,KAAA,GAAW,OAAO,OAAO,YAAY;IACtD,MAAM,UAAU;KAAE,GAAG;KAAS,cAAc,QAAQ,QAAQ,KAAA,CAAS;IAAE;IAEvE,WAAW;IACX,WAAW,KAAK,GAAG,QAAQ,UAAU;IAErC,OAAO,QAAQ;GACjB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KACA,OAAO,KAAK,WAAW,OAAO,KAAK,GACnC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,CAC7C;GAuCF,MAAM,WAAW,QAAQ,KAAK,yBAAyB;IApCrD,SAAS,UACP,MAAM,IACJ,MACG,OAAO,KAAK,CAAC,CACb,KACC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eACL,iBACA,QACF,GACA,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF,CACJ;IACF,kBAAkB,UAChB,MAAM,IACJ,MACG,gBAAgB,KAAK,CAAC,CACtB,KACC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eACL,iBACA,QACF,GACA,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF,CACJ;IACF,kBAAkB,OAAO,YACvB,MAAM,IAAI,IAAI,MAAM,gBAAgB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IAC7E,kBAAkB,OAAO,YACvB,MAAM,IAAI,IAAI,MAAM,gBAAgB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IAC7E,UAAU,OAAO,YACf,MAAM,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;GAGV,CAAC,CAAC,CAAC,KAC9D,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;GAEA,MAAM,QAAQ,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;GAEtE,IAAI,UAAU,iBAAiB,KAAA,GAAW;IACxC,MAAM,SAAS,OAAO,OAAO,OAAO,SAAS,aAAa,IAAI;IAE9D,IAAI,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,iBACvD,OAAO,OAAO,YAAY;GAC9B;GACA,OAAO,SAAS,QAAQ,MAAM,UAAU,CAAC,CAAC,KACxC,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAChB,oBAAoB,OAAO,UAAU,SAAS,IAAI,YAAY,IAAI,KACpE,CACF,CACF,GACA,gBACF;GAEA,OAAO;EACT,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;CAChB,CAAC,CACH;AACF;AAEA,SAAgB,8BA2Bd,SACA,SAkBA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EA8FrD,QAAO,OA5Fe,uBAElB,OAAO,IAAI,aAAa;GACtB,MAAM,aAA+B,CAAC;GACtC,IAAI;GAEJ,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,WAAW,KAAK,SAAS,CAAC,EACrE,CAAC;GAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;GAEA,MAAM,QAAQ,sBACZ,QAAQ,SAGR,QAAQ,YACV;GAEA,MAAM,OAAsB,SAC1B,uBAEI,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IACvB,MAAM,UAAU,OAAO;IAEvB,OAAO,MAAM;IACb,IAAI,aAAa,KAAA,GAAW,OAAO,OAAO,YAAY;IACtD,MAAM,UAAU;KAAE,GAAG;KAAS,cAAc,QAAQ,QAAQ,KAAA,CAAS;IAAE;IAEvE,WAAW;IACX,WAAW,KAAK,GAAG,QAAQ,UAAU;IAErC,OAAO,QAAQ;GACjB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KACA,OAAO,KAAK,WAAW,OAAO,KAAK,GACnC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,iBAAiB,QAAuC,GAC9E,OAAO,eAAe,gBAAgB,KAAK,CAC7C;GAqBF,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ;IAlB5C,UAAU,UACR,MAAM,IACJ,MACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eACL,iBACA,QACF,GACA,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF,CACJ;IACF,oBAAoB,OAAO,YACzB,MAAM,IAAI,IAAI,MAAM,kBAAkB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;GAG7B,CAAC,CAAC,CAAC,KACrD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;GAEA,MAAM,QAAQ,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;GAEtE,IAAI,UAAU,iBAAiB,KAAA,GAAW;IACxC,MAAM,SAAS,OAAO,OAAO,OAAO,SAAS,aAAa,IAAI;IAE9D,IAAI,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,iBACvD,OAAO,OAAO,YAAY;GAC9B;GACA,OAAO,SAAS,QAAQ,MAAM,UAAU,CAAC,CAAC,KACxC,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAChB,oBAAoB,OAAO,UAAU,SAAS,IAAI,YAAY,IAAI,KACpE,CACF,CACF,GACA,gBACF;GAEA,OAAO;EACT,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;CAChB,CAAC,CACH;AACF;AAEA,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,qBACJ,MACA,UAAU,MAQV,OAAO,cAAc;CACnB,IAAI;CAgBJ,OAda,uBAET,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO;EACxB,MAAM,UAAU,OAAO;EAEvB,YAAY,QAAQ;EACpB,OAAO,SAAS,QAAQ,MAAM,QAAQ,UAAU;EAEhD,OAAO,QAAQ;CACjB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAEhC,CAAC,CAAC,KACV,OAAO,YAAY,UACjB,UAAU,KAAK,oBAAoB,OAAO,SAAS,IAC/C,kBAAkB,MAAM,UAAU,CAAC,IACnC,OAAO,UAAU,KAAK,CAC5B,CACF;AACF,CAAC"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
import { Schema } from "effect";
|
|
2
|
+
import { sql } from "drizzle-orm";
|
|
3
|
+
//#region src/drizzle/d1-generated-statement.ts
|
|
4
|
+
const valuesJson = Schema.encodeUnknownSync(Schema.fromJsonString(Schema.Array(Schema.Union([
|
|
5
|
+
Schema.String,
|
|
6
|
+
Schema.Finite,
|
|
7
|
+
Schema.Boolean,
|
|
8
|
+
Schema.Null
|
|
9
|
+
]))));
|
|
10
|
+
const hex = Schema.encodeSync(Schema.Uint8ArrayFromHex);
|
|
11
|
+
const viewElements = Schema.decodeUnknownSync(Schema.Array(Schema.Finite));
|
|
12
|
+
const byteElements = Schema.decodeUnknownSync(Schema.Array(Schema.Finite.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThan(256))));
|
|
13
|
+
/** Private compiler boundary for generated statements only. SQLite numbered
|
|
14
|
+
* parameters let every JSON lookup share one binding without a CTE name. */
|
|
15
|
+
const compactD1GeneratedStatement = (client, statement, invalid) => {
|
|
16
|
+
const [source, parameters] = statement.compile();
|
|
17
|
+
if (parameters.length <= 100 && new TextEncoder().encode(source).length <= 1e5) return statement;
|
|
18
|
+
const blobs = /* @__PURE__ */ new Set();
|
|
19
|
+
const numbers = /* @__PURE__ */ new Set();
|
|
20
|
+
const values = parameters.map((value, index) => {
|
|
21
|
+
if (typeof value === "number" || typeof value === "boolean") numbers.add(index);
|
|
22
|
+
const bytes = value instanceof ArrayBuffer ? new Uint8Array(value) : ArrayBuffer.isView(value) ? Uint8Array.from(viewElements(Array.from(value))) : Array.isArray(value) ? Uint8Array.from(byteElements(value)) : void 0;
|
|
23
|
+
if (bytes === void 0) return value;
|
|
24
|
+
blobs.add(index);
|
|
25
|
+
return hex(bytes);
|
|
26
|
+
});
|
|
27
|
+
const encoded = valuesJson(values);
|
|
28
|
+
let index = 0, result = "";
|
|
29
|
+
let quote;
|
|
30
|
+
let comment;
|
|
31
|
+
for (let offset = 0; offset < source.length; offset++) {
|
|
32
|
+
const char = source[offset], next = source[offset + 1];
|
|
33
|
+
if (comment !== void 0) {
|
|
34
|
+
result += char;
|
|
35
|
+
if (comment === "line" && char === "\n") comment = void 0;
|
|
36
|
+
else if (comment === "block" && char === "*" && next === "/") {
|
|
37
|
+
result += next;
|
|
38
|
+
offset++;
|
|
39
|
+
comment = void 0;
|
|
40
|
+
}
|
|
41
|
+
} else if (quote !== void 0) {
|
|
42
|
+
result += char;
|
|
43
|
+
if (char === quote) {
|
|
44
|
+
if (next === quote && quote !== "]") {
|
|
45
|
+
result += next;
|
|
46
|
+
offset++;
|
|
47
|
+
} else quote = void 0;
|
|
48
|
+
}
|
|
49
|
+
} else if (char === "'" || char === "\"" || char === "`" || char === "[") {
|
|
50
|
+
quote = char === "[" ? "]" : char;
|
|
51
|
+
result += char;
|
|
52
|
+
} else if (char === "-" && next === "-" || char === "/" && next === "*") {
|
|
53
|
+
comment = char === "-" ? "line" : "block";
|
|
54
|
+
result += char + next;
|
|
55
|
+
offset++;
|
|
56
|
+
} else if (char === "?") {
|
|
57
|
+
if (next !== void 0 && next >= "0" && next <= "9") throw invalid();
|
|
58
|
+
const lookup = `json_extract(?1, '$[${index}]')`;
|
|
59
|
+
result += blobs.has(index) ? `unhex(${lookup})` : numbers.has(index) ? `cast(${lookup} as real)` : lookup;
|
|
60
|
+
index++;
|
|
61
|
+
} else result += char;
|
|
62
|
+
}
|
|
63
|
+
if (index !== parameters.length || quote !== void 0 || comment === "block" || new TextEncoder().encode(result).length > 1e5) throw invalid();
|
|
64
|
+
return client.unsafe(result, [encoded]);
|
|
65
|
+
};
|
|
66
|
+
/** Keep bounded credential vectors below D1's expression-tree depth ceiling. */
|
|
67
|
+
const balancedD1And = (...conditions) => {
|
|
68
|
+
const parts = conditions.filter((condition) => condition !== void 0);
|
|
69
|
+
const join = (start, end) => {
|
|
70
|
+
if (end - start === 1) return sql`(${parts[start]})`;
|
|
71
|
+
const middle = start + Math.floor((end - start) / 2);
|
|
72
|
+
return sql`(${join(start, middle)} and ${join(middle, end)})`;
|
|
73
|
+
};
|
|
74
|
+
return parts.length === 0 ? void 0 : join(0, parts.length);
|
|
75
|
+
};
|
|
76
|
+
//#endregion
|
|
77
|
+
export { balancedD1And, compactD1GeneratedStatement };
|
|
78
|
+
|
|
79
|
+
//# sourceMappingURL=d1-generated-statement.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"d1-generated-statement.mjs","names":[],"sources":["../../src/drizzle/d1-generated-statement.ts"],"sourcesContent":["import { sql, type SQL } from \"drizzle-orm\";\nimport { Schema } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\n// oxlint-disable-next-line no-restricted-properties -- Statement.compile exposes untyped native SQL parameters.\nconst valuesJson = Schema.encodeUnknownSync(\n Schema.fromJsonString(\n Schema.Array(Schema.Union([Schema.String, Schema.Finite, Schema.Boolean, Schema.Null])),\n ),\n);\n\nconst hex = Schema.encodeSync(Schema.Uint8ArrayFromHex);\n// oxlint-disable-next-line no-restricted-properties -- D1 binding parameters are untyped native views.\nconst viewElements = Schema.decodeUnknownSync(Schema.Array(Schema.Finite));\n\n// oxlint-disable-next-line no-restricted-properties -- D1 also accepts untyped byte-array parameters.\nconst byteElements = Schema.decodeUnknownSync(\n Schema.Array(Schema.Finite.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThan(256))),\n);\n\n/** Private compiler boundary for generated statements only. SQLite numbered\n * parameters let every JSON lookup share one binding without a CTE name. */\nexport const compactD1GeneratedStatement = <A extends object>(\n client: {\n readonly unsafe: <Row extends object>(\n sql: string,\n params?: ReadonlyArray<unknown>,\n ) => Statement<Row>;\n },\n statement: Statement<A>,\n invalid: () => unknown,\n): Statement<A> => {\n const [source, parameters] = statement.compile();\n\n if (parameters.length <= 100 && new TextEncoder().encode(source).length <= 100_000)\n return statement;\n const blobs = new Set<number>();\n const numbers = new Set<number>();\n\n const values = parameters.map((value, index) => {\n if (typeof value === \"number\" || typeof value === \"boolean\") numbers.add(index);\n\n const bytes =\n value instanceof ArrayBuffer\n ? new Uint8Array(value)\n : ArrayBuffer.isView(value)\n ? // Match D1's Array.from(view) conversion, including empty DataView.\n Uint8Array.from(viewElements(Array.from(value as unknown as ArrayLike<unknown>)))\n : Array.isArray(value)\n ? Uint8Array.from(byteElements(value))\n : undefined;\n\n if (bytes === undefined) return value;\n blobs.add(index);\n\n return hex(bytes);\n });\n\n const encoded = valuesJson(values);\n\n let index = 0,\n result = \"\";\n\n let quote: \"'\" | '\"' | \"`\" | \"]\" | undefined;\n let comment: \"line\" | \"block\" | undefined;\n\n for (let offset = 0; offset < source.length; offset++) {\n const char = source[offset]!,\n next = source[offset + 1];\n\n if (comment !== undefined) {\n result += char;\n if (comment === \"line\" && char === \"\\n\") comment = undefined;\n else if (comment === \"block\" && char === \"*\" && next === \"/\") {\n result += next;\n offset++;\n comment = undefined;\n }\n } else if (quote !== undefined) {\n result += char;\n if (char === quote) {\n if (next === quote && quote !== \"]\") {\n result += next;\n offset++;\n } else quote = undefined;\n }\n } else if (char === \"'\" || char === '\"' || char === \"`\" || char === \"[\") {\n quote = char === \"[\" ? \"]\" : char;\n result += char;\n } else if ((char === \"-\" && next === \"-\") || (char === \"/\" && next === \"*\")) {\n comment = char === \"-\" ? \"line\" : \"block\";\n result += char + next;\n offset++;\n } else if (char === \"?\") {\n if (next !== undefined && next >= \"0\" && next <= \"9\") throw invalid();\n const lookup = `json_extract(?1, '$[${index}]')`;\n\n result += blobs.has(index)\n ? `unhex(${lookup})`\n : numbers.has(index)\n ? `cast(${lookup} as real)`\n : lookup;\n index++;\n } else result += char;\n }\n if (\n index !== parameters.length ||\n quote !== undefined ||\n comment === \"block\" ||\n new TextEncoder().encode(result).length > 100_000\n )\n throw invalid();\n\n return client.unsafe<A>(result, [encoded]);\n};\n\n/** Keep bounded credential vectors below D1's expression-tree depth ceiling. */\nexport const balancedD1And = (...conditions: ReadonlyArray<SQL | undefined>): SQL | undefined => {\n const parts = conditions.filter((condition) => condition !== undefined);\n\n const join = (start: number, end: number): SQL => {\n if (end - start === 1) return sql`(${parts[start]!})`;\n const middle = start + Math.floor((end - start) / 2);\n\n return sql`(${join(start, middle)} and ${join(middle, end)})`;\n };\n\n return parts.length === 0 ? undefined : join(0, parts.length);\n};\n"],"mappings":";;;AAKA,MAAM,aAAa,OAAO,kBACxB,OAAO,eACL,OAAO,MAAM,OAAO,MAAM;CAAC,OAAO;CAAQ,OAAO;CAAQ,OAAO;CAAS,OAAO;AAAI,CAAC,CAAC,CACxF,CACF;AAEA,MAAM,MAAM,OAAO,WAAW,OAAO,iBAAiB;AAEtD,MAAM,eAAe,OAAO,kBAAkB,OAAO,MAAM,OAAO,MAAM,CAAC;AAGzE,MAAM,eAAe,OAAO,kBAC1B,OAAO,MAAM,OAAO,OAAO,MAAM,OAAO,uBAAuB,CAAC,GAAG,OAAO,WAAW,GAAG,CAAC,CAAC,CAC5F;;;AAIA,MAAa,+BACX,QAMA,WACA,YACiB;CACjB,MAAM,CAAC,QAAQ,cAAc,UAAU,QAAQ;CAE/C,IAAI,WAAW,UAAU,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU,KACzE,OAAO;CACT,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,0BAAU,IAAI,IAAY;CAEhC,MAAM,SAAS,WAAW,KAAK,OAAO,UAAU;EAC9C,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,QAAQ,IAAI,KAAK;EAE9E,MAAM,QACJ,iBAAiB,cACb,IAAI,WAAW,KAAK,IACpB,YAAY,OAAO,KAAK,IAEtB,WAAW,KAAK,aAAa,MAAM,KAAK,KAAsC,CAAC,CAAC,IAChF,MAAM,QAAQ,KAAK,IACjB,WAAW,KAAK,aAAa,KAAK,CAAC,IACnC,KAAA;EAEV,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,MAAM,IAAI,KAAK;EAEf,OAAO,IAAI,KAAK;CAClB,CAAC;CAED,MAAM,UAAU,WAAW,MAAM;CAEjC,IAAI,QAAQ,GACV,SAAS;CAEX,IAAI;CACJ,IAAI;CAEJ,KAAK,IAAI,SAAS,GAAG,SAAS,OAAO,QAAQ,UAAU;EACrD,MAAM,OAAO,OAAO,SAClB,OAAO,OAAO,SAAS;EAEzB,IAAI,YAAY,KAAA,GAAW;GACzB,UAAU;GACV,IAAI,YAAY,UAAU,SAAS,MAAM,UAAU,KAAA;QAC9C,IAAI,YAAY,WAAW,SAAS,OAAO,SAAS,KAAK;IAC5D,UAAU;IACV;IACA,UAAU,KAAA;GACZ;EACF,OAAO,IAAI,UAAU,KAAA,GAAW;GAC9B,UAAU;GACV,IAAI,SAAS,OAAO;IAClB,IAAI,SAAS,SAAS,UAAU,KAAK;KACnC,UAAU;KACV;IACF,OAAO,QAAQ,KAAA;GACjB;EACF,OAAO,IAAI,SAAS,OAAO,SAAS,QAAO,SAAS,OAAO,SAAS,KAAK;GACvE,QAAQ,SAAS,MAAM,MAAM;GAC7B,UAAU;EACZ,OAAO,IAAK,SAAS,OAAO,SAAS,OAAS,SAAS,OAAO,SAAS,KAAM;GAC3E,UAAU,SAAS,MAAM,SAAS;GAClC,UAAU,OAAO;GACjB;EACF,OAAO,IAAI,SAAS,KAAK;GACvB,IAAI,SAAS,KAAA,KAAa,QAAQ,OAAO,QAAQ,KAAK,MAAM,QAAQ;GACpE,MAAM,SAAS,uBAAuB,MAAM;GAE5C,UAAU,MAAM,IAAI,KAAK,IACrB,SAAS,OAAO,KAChB,QAAQ,IAAI,KAAK,IACf,QAAQ,OAAO,aACf;GACN;EACF,OAAO,UAAU;CACnB;CACA,IACE,UAAU,WAAW,UACrB,UAAU,KAAA,KACV,YAAY,WACZ,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,SAAS,KAE1C,MAAM,QAAQ;CAEhB,OAAO,OAAO,OAAU,QAAQ,CAAC,OAAO,CAAC;AAC3C;;AAGA,MAAa,iBAAiB,GAAG,eAAgE;CAC/F,MAAM,QAAQ,WAAW,QAAQ,cAAc,cAAc,KAAA,CAAS;CAEtE,MAAM,QAAQ,OAAe,QAAqB;EAChD,IAAI,MAAM,UAAU,GAAG,OAAO,GAAG,IAAI,MAAM,OAAQ;EACnD,MAAM,SAAS,QAAQ,KAAK,OAAO,MAAM,SAAS,CAAC;EAEnD,OAAO,GAAG,IAAI,KAAK,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,EAAE;CAC7D;CAEA,OAAO,MAAM,WAAW,IAAI,KAAA,IAAY,KAAK,GAAG,MAAM,MAAM;AAC9D"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { SubjectId } from "../Schema.mjs";
|
|
2
|
+
import { ExternalIdentity, IdentityConflict, IdentityUnavailable, ProvisioningResult } from "../identity/models.mjs";
|
|
3
|
+
import { SubjectProvisioningInput } from "../identity/SubjectProvisioner.mjs";
|
|
4
|
+
import { D1ExternalIdentityMapping, D1SubjectProvisioningMapping } from "./model.mjs";
|
|
5
|
+
import "../Identity.mjs";
|
|
6
|
+
import { Effect } from "effect";
|
|
7
|
+
import { AnyRelations } from "drizzle-orm";
|
|
8
|
+
import { D1Client } from "@effect/sql-d1/D1Client";
|
|
9
|
+
import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
|
|
10
|
+
import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
|
|
11
|
+
//#region src/drizzle/d1-identity.d.ts
|
|
12
|
+
/**
|
|
13
|
+
* D1 provisioning is an ordered atomic batch. The receipt captures the
|
|
14
|
+
* database-generated subject id from the first insert via last_insert_rowid;
|
|
15
|
+
* the optional identifier then reads that stable id from the receipt.
|
|
16
|
+
*/
|
|
17
|
+
declare const makeD1SubjectProvisioningServices: <Subject extends AnySQLiteTable, Identifier extends AnySQLiteTable, Request extends AnySQLiteTable, NativeId>(database: EffectSQLiteD1Database<AnyRelations> & {
|
|
18
|
+
readonly $client: D1Client;
|
|
19
|
+
}, mapping: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>) => {
|
|
20
|
+
readonly subjectProvisioner: {
|
|
21
|
+
readonly provision: (input: SubjectProvisioningInput) => Effect.Effect<ProvisioningResult, IdentityConflict | IdentityUnavailable>;
|
|
22
|
+
};
|
|
23
|
+
};
|
|
24
|
+
declare const makeD1ExternalIdentityServices: <Subject extends AnySQLiteTable, External extends AnySQLiteTable, NativeId>(database: EffectSQLiteD1Database<AnyRelations> & {
|
|
25
|
+
readonly $client: D1Client;
|
|
26
|
+
}, mapping: D1ExternalIdentityMapping<Subject, External, NativeId>) => {
|
|
27
|
+
readonly externalIdentityMutation: {
|
|
28
|
+
readonly bind: (subjectId: SubjectId, identity: ExternalIdentity) => Effect.Effect<void, IdentityConflict | IdentityUnavailable>;
|
|
29
|
+
};
|
|
30
|
+
};
|
|
31
|
+
//#endregion
|
|
32
|
+
export { makeD1ExternalIdentityServices, makeD1SubjectProvisioningServices };
|
|
33
|
+
//# sourceMappingURL=d1-identity.d.mts.map
|
|
@@ -0,0 +1,120 @@
|
|
|
1
|
+
import { IdentityConflict, IdentityUnavailable, SubjectProvisioned } from "../identity/models.mjs";
|
|
2
|
+
import { reportPersistenceFailure } from "../internal/diagnostics.mjs";
|
|
3
|
+
import { ExternalIdentityMutation } from "../identity/ExternalIdentityMutation.mjs";
|
|
4
|
+
import { SubjectProvisioner } from "../identity/SubjectProvisioner.mjs";
|
|
5
|
+
import { column, isMappedConstraintConflict, provisioningFingerprint } from "./model.mjs";
|
|
6
|
+
import { Cause, Effect, Schema } from "effect";
|
|
7
|
+
import { SQL, and, eq, getTableColumns, is, sql } from "drizzle-orm";
|
|
8
|
+
//#region src/drizzle/d1-identity.ts
|
|
9
|
+
const unavailable = () => IdentityUnavailable.make();
|
|
10
|
+
const isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));
|
|
11
|
+
const mapUnavailable = (effect) => reportPersistenceFailure(effect, isIdentityFailure).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, (error) => isIdentityFailure(error) ? error : unavailable()))));
|
|
12
|
+
const selectFields = (table, values) => {
|
|
13
|
+
const columns = getTableColumns(table);
|
|
14
|
+
const fields = Object.fromEntries(Object.entries(values).filter(([, value]) => value !== void 0).map(([key, value]) => [key, is(value, SQL) ? value : sql`${sql.param(value, columns[key])}`]));
|
|
15
|
+
for (const [key, mapped] of Object.entries(columns)) {
|
|
16
|
+
if (fields[key] !== void 0 || mapped.shouldDisableInsert()) continue;
|
|
17
|
+
if (mapped.default !== null && mapped.default !== void 0) continue;
|
|
18
|
+
const value = mapped.defaultFn !== void 0 ? mapped.defaultFn() : !mapped.default && mapped.onUpdateFn !== void 0 ? mapped.onUpdateFn() : void 0;
|
|
19
|
+
if (value !== void 0 || mapped.defaultFn !== void 0 || mapped.onUpdateFn !== void 0) fields[key] = is(value, SQL) ? value : sql`${sql.param(value, mapped)}`;
|
|
20
|
+
}
|
|
21
|
+
return fields;
|
|
22
|
+
};
|
|
23
|
+
/**
|
|
24
|
+
* D1 provisioning is an ordered atomic batch. The receipt captures the
|
|
25
|
+
* database-generated subject id from the first insert via last_insert_rowid;
|
|
26
|
+
* the optional identifier then reads that stable id from the receipt.
|
|
27
|
+
*/
|
|
28
|
+
const makeD1SubjectProvisioningServices = (database, mapping) => {
|
|
29
|
+
const db = database;
|
|
30
|
+
const requestTable = mapping.provisioningRequest.table;
|
|
31
|
+
const requestIdColumn = column(requestTable, mapping.provisioningRequest.requestId);
|
|
32
|
+
const requestFingerprintColumn = column(requestTable, mapping.provisioningRequest.fingerprint);
|
|
33
|
+
const requestSubjectColumn = column(requestTable, mapping.provisioningRequest.subjectId);
|
|
34
|
+
const findReceipt = Effect.fn("DrizzleD1Identity.findReceipt")(function* (requestId) {
|
|
35
|
+
return (yield* db.select({
|
|
36
|
+
fingerprint: requestFingerprintColumn,
|
|
37
|
+
subjectId: requestSubjectColumn
|
|
38
|
+
}).from(requestTable).where(eq(requestIdColumn, requestId)).limit(1))[0];
|
|
39
|
+
});
|
|
40
|
+
const provision = Effect.fn("DrizzleD1Identity.provision")(function* (input) {
|
|
41
|
+
const fingerprint = provisioningFingerprint(input);
|
|
42
|
+
const existing = yield* findReceipt(input.requestId);
|
|
43
|
+
if (existing !== void 0) {
|
|
44
|
+
if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();
|
|
45
|
+
const subjectId = yield* mapping.subjectId.toSubject(existing.subjectId);
|
|
46
|
+
return SubjectProvisioned.make({ subjectId });
|
|
47
|
+
}
|
|
48
|
+
const allocated = mapping.subject.allocateId === void 0 ? mapping.subject.allocateIdSync?.() : yield* mapping.subject.allocateId;
|
|
49
|
+
const subjectQuery = db.insert(mapping.subject.table).values(mapping.subject.encodeInsert(input, allocated)).toSQL();
|
|
50
|
+
const statements = [db.$client.unsafe(subjectQuery.sql, subjectQuery.params)];
|
|
51
|
+
if (allocated !== void 0) {
|
|
52
|
+
const requestQuery = db.insert(requestTable).values(mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, allocated)).toSQL();
|
|
53
|
+
statements.push(db.$client.unsafe(requestQuery.sql, requestQuery.params));
|
|
54
|
+
if (input.identifier !== void 0) {
|
|
55
|
+
const identifierQuery = db.insert(mapping.identifier.table).values(mapping.identifier.encodeInsert(input.identifier, allocated, input.verifiedAt)).toSQL();
|
|
56
|
+
statements.push(db.$client.unsafe(identifierQuery.sql, identifierQuery.params));
|
|
57
|
+
}
|
|
58
|
+
} else {
|
|
59
|
+
if (mapping.d1.generatedRowIdAlias === void 0) return yield* unavailable();
|
|
60
|
+
if (Object.values(getTableColumns(mapping.subject.table)).map((value) => value.name.toLowerCase()).includes(mapping.d1.generatedRowIdAlias.toLowerCase())) return yield* unavailable();
|
|
61
|
+
const subjectIdColumn = column(mapping.subject.table, mapping.subject.id);
|
|
62
|
+
const rowId = sql.identifier(mapping.d1.generatedRowIdAlias);
|
|
63
|
+
const requestQuery = db.insert(requestTable).values({
|
|
64
|
+
...mapping.d1.requestInsertWithoutSubject(input.requestId, fingerprint),
|
|
65
|
+
[mapping.provisioningRequest.subjectId]: sql`(select ${subjectIdColumn} from ${mapping.subject.table} where ${rowId} = last_insert_rowid())`
|
|
66
|
+
}).toSQL();
|
|
67
|
+
statements.push(db.$client.unsafe(requestQuery.sql, requestQuery.params));
|
|
68
|
+
}
|
|
69
|
+
if (allocated === void 0 && input.identifier !== void 0) {
|
|
70
|
+
const requestIdParam = sql.param(input.requestId, requestIdColumn);
|
|
71
|
+
const identifierQuery = db.insert(mapping.identifier.table).values({
|
|
72
|
+
...mapping.d1.identifierInsertWithoutSubject(input.identifier, input.verifiedAt),
|
|
73
|
+
[mapping.identifier.subjectId]: sql`(select ${requestSubjectColumn} from ${requestTable} where ${requestIdColumn} = ${requestIdParam})`
|
|
74
|
+
}).toSQL();
|
|
75
|
+
statements.push(db.$client.unsafe(identifierQuery.sql, identifierQuery.params));
|
|
76
|
+
}
|
|
77
|
+
yield* db.$client.batch(statements).pipe(Effect.catchCause((cause) => {
|
|
78
|
+
if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
|
|
79
|
+
return findReceipt(input.requestId).pipe(Effect.flatMap((receipt) => receipt !== void 0 && receipt.fingerprint === fingerprint ? Effect.void : IdentityConflict.make()));
|
|
80
|
+
}));
|
|
81
|
+
const receipt = yield* findReceipt(input.requestId);
|
|
82
|
+
if (receipt === void 0 || receipt.fingerprint !== fingerprint) return yield* IdentityConflict.make();
|
|
83
|
+
const subjectId = yield* mapping.subjectId.toSubject(receipt.subjectId);
|
|
84
|
+
return SubjectProvisioned.make({ subjectId });
|
|
85
|
+
}, mapUnavailable);
|
|
86
|
+
return { subjectProvisioner: SubjectProvisioner.of({ provision }) };
|
|
87
|
+
};
|
|
88
|
+
const makeD1ExternalIdentityServices = (database, mapping) => {
|
|
89
|
+
const db = database;
|
|
90
|
+
const externalTable = mapping.externalIdentity.table;
|
|
91
|
+
const externalSubjectIdColumn = column(externalTable, mapping.externalIdentity.subjectId);
|
|
92
|
+
const externalProviderColumn = column(externalTable, mapping.externalIdentity.provider);
|
|
93
|
+
const externalIssuerColumn = column(externalTable, mapping.externalIdentity.issuer);
|
|
94
|
+
const externalSubjectColumn = column(externalTable, mapping.externalIdentity.subject);
|
|
95
|
+
const bind = Effect.fn("DrizzleD1Identity.bindExternalIdentity")(function* (subjectId, identity) {
|
|
96
|
+
const nativeId = yield* mapping.subjectId.toNative(subjectId);
|
|
97
|
+
const subjectIdColumn = column(mapping.subject.table, mapping.subject.id);
|
|
98
|
+
const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status);
|
|
99
|
+
const nativeIdParam = sql.param(nativeId, subjectIdColumn);
|
|
100
|
+
const activeStatusParam = sql.param(mapping.d1.activeStatusValue, subjectStatusColumn);
|
|
101
|
+
const selection = selectFields(externalTable, mapping.externalIdentity.encodeInsert(identity, nativeId));
|
|
102
|
+
selection[mapping.externalIdentity.subjectId] = subjectIdColumn;
|
|
103
|
+
const row = (yield* db.insert(externalTable).select(db.select(selection).from(mapping.subject.table).where(and(eq(subjectIdColumn, nativeIdParam), eq(subjectStatusColumn, activeStatusParam)))).returning({ subjectId: externalSubjectIdColumn }).pipe(Effect.catchCause((cause) => {
|
|
104
|
+
if (cause.reasons.length === 0 || !cause.reasons.every((reason) => Cause.isFailReason(reason) && isMappedConstraintConflict(mapping.isConstraintConflict, reason.error))) return Effect.failCause(cause);
|
|
105
|
+
return db.select({ subjectId: externalSubjectIdColumn }).from(externalTable).innerJoin(mapping.subject.table, and(eq(externalSubjectIdColumn, subjectIdColumn), eq(subjectStatusColumn, mapping.d1.activeStatusValue))).where(and(eq(externalProviderColumn, identity.provider), eq(externalIssuerColumn, identity.issuer), eq(externalSubjectColumn, identity.subject), eq(externalSubjectIdColumn, nativeId))).limit(1);
|
|
106
|
+
})))[0];
|
|
107
|
+
if (row === void 0) return yield* IdentityConflict.make();
|
|
108
|
+
const linked = row.subjectId;
|
|
109
|
+
if (!mapping.subjectId.equals(linked, nativeId)) return yield* IdentityConflict.make();
|
|
110
|
+
}, mapUnavailable);
|
|
111
|
+
return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) };
|
|
112
|
+
};
|
|
113
|
+
const makeD1IdentityServices = (database, mapping) => ({
|
|
114
|
+
...makeD1SubjectProvisioningServices(database, mapping),
|
|
115
|
+
...makeD1ExternalIdentityServices(database, mapping)
|
|
116
|
+
});
|
|
117
|
+
//#endregion
|
|
118
|
+
export { makeD1ExternalIdentityServices, makeD1IdentityServices, makeD1SubjectProvisioningServices };
|
|
119
|
+
|
|
120
|
+
//# sourceMappingURL=d1-identity.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"d1-identity.mjs","names":[],"sources":["../../src/drizzle/d1-identity.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\n/* oxlint-disable no-explicit-any -- D1 batch bridges Drizzle SQL objects to Effect SQL Statements at this adapter boundary. */\nimport {\n and,\n eq,\n getTableColumns,\n is,\n sql,\n SQL,\n type AnyRelations,\n type InferInsertModel,\n type Table,\n} from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable, SQLiteColumn } from \"drizzle-orm/sqlite-core\";\nimport { Cause, Effect, Schema } from \"effect\";\n\nimport { ExternalIdentityMutation } from \"../identity/ExternalIdentityMutation\";\nimport {\n type ExternalIdentity,\n IdentityConflict,\n IdentityUnavailable,\n SubjectProvisioned,\n} from \"../identity/models\";\nimport { SubjectProvisioner, type SubjectProvisioningInput } from \"../identity/SubjectProvisioner\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport type { SubjectId } from \"../Schema\";\nimport {\n column,\n isMappedConstraintConflict,\n provisioningFingerprint,\n type D1ExternalIdentityMapping,\n type D1GeneratedIdentityMapping,\n type D1SubjectProvisioningMapping,\n} from \"./model\";\n\ntype RuntimeDatabase = EffectSQLiteD1Database<any> & { readonly $client: D1Client };\nconst unavailable = () => IdentityUnavailable.make();\nconst isIdentityFailure = Schema.is(Schema.Union([IdentityConflict, IdentityUnavailable]));\n\nconst mapUnavailable = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n reportPersistenceFailure(effect, isIdentityFailure).pipe(\n Effect.catchCause((cause) =>\n Effect.failCause(\n Cause.map(cause, (error) => (isIdentityFailure(error) ? error : unavailable())),\n ),\n ),\n );\n\nconst selectFields = <T extends Table>(\n table: T,\n values: InferInsertModel<T>,\n): Record<string, unknown> => {\n const columns = getTableColumns(table) as Record<string, SQLiteColumn>;\n\n const fields = Object.fromEntries(\n Object.entries(values)\n .filter(([, value]) => value !== undefined)\n .map(([key, value]) => [\n key,\n is(value, SQL) ? value : sql`${sql.param(value, columns[key] as SQLiteColumn)}`,\n ]),\n );\n\n for (const [key, mapped] of Object.entries(columns)) {\n if (\n fields[key] !== undefined ||\n (\n mapped as SQLiteColumn & { readonly shouldDisableInsert: () => boolean }\n ).shouldDisableInsert()\n )\n continue;\n if (mapped.default !== null && mapped.default !== undefined) continue;\n\n const value =\n mapped.defaultFn !== undefined\n ? mapped.defaultFn()\n : !mapped.default && mapped.onUpdateFn !== undefined\n ? mapped.onUpdateFn()\n : undefined;\n\n if (value !== undefined || mapped.defaultFn !== undefined || mapped.onUpdateFn !== undefined)\n fields[key] = is(value, SQL) ? value : sql`${sql.param(value, mapped)}`;\n }\n\n return fields;\n};\n\n/**\n * D1 provisioning is an ordered atomic batch. The receipt captures the\n * database-generated subject id from the first insert via last_insert_rowid;\n * the optional identifier then reads that stable id from the receipt.\n */\nexport const makeD1SubjectProvisioningServices = <\n Subject extends AnySQLiteTable,\n Identifier extends AnySQLiteTable,\n Request extends AnySQLiteTable,\n NativeId,\n>(\n database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n mapping: D1SubjectProvisioningMapping<Subject, Identifier, Request, NativeId>,\n) => {\n const db = database as RuntimeDatabase;\n const requestTable = mapping.provisioningRequest.table;\n\n const requestIdColumn = column(\n requestTable,\n mapping.provisioningRequest.requestId,\n ) as SQLiteColumn;\n\n const requestFingerprintColumn = column(\n requestTable,\n mapping.provisioningRequest.fingerprint,\n ) as SQLiteColumn;\n\n const requestSubjectColumn = column(\n requestTable,\n mapping.provisioningRequest.subjectId,\n ) as SQLiteColumn;\n\n const findReceipt = Effect.fn(\"DrizzleD1Identity.findReceipt\")(function* (requestId: string) {\n const rows = yield* db\n .select({ fingerprint: requestFingerprintColumn, subjectId: requestSubjectColumn })\n .from(requestTable as any)\n .where(eq(requestIdColumn, requestId))\n .limit(1);\n\n return rows[0];\n });\n\n const provision = Effect.fn(\"DrizzleD1Identity.provision\")(function* (\n input: SubjectProvisioningInput,\n ) {\n const fingerprint = provisioningFingerprint(input);\n const existing = yield* findReceipt(input.requestId);\n\n if (existing !== undefined) {\n if (existing.fingerprint !== fingerprint) return yield* IdentityConflict.make();\n const subjectId = yield* mapping.subjectId.toSubject(existing.subjectId as NativeId);\n\n return SubjectProvisioned.make({ subjectId });\n }\n\n const allocated =\n mapping.subject.allocateId === undefined\n ? mapping.subject.allocateIdSync?.()\n : yield* mapping.subject.allocateId;\n\n const subjectQuery = db\n .insert(mapping.subject.table as any)\n .values(mapping.subject.encodeInsert(input, allocated) as any)\n .toSQL();\n\n const statements = [db.$client.unsafe(subjectQuery.sql, subjectQuery.params)];\n\n if (allocated !== undefined) {\n const requestQuery = db\n .insert(requestTable as any)\n .values(\n mapping.provisioningRequest.encodeInsert(input.requestId, fingerprint, allocated) as any,\n )\n .toSQL();\n\n statements.push(db.$client.unsafe(requestQuery.sql, requestQuery.params));\n\n if (input.identifier !== undefined) {\n const identifierQuery = db\n .insert(mapping.identifier.table as any)\n .values(\n mapping.identifier.encodeInsert(input.identifier, allocated, input.verifiedAt) as any,\n )\n .toSQL();\n\n statements.push(db.$client.unsafe(identifierQuery.sql, identifierQuery.params));\n }\n } else {\n if (mapping.d1.generatedRowIdAlias === undefined) return yield* unavailable();\n\n const mappedColumnNames = Object.values(getTableColumns(mapping.subject.table)).map((value) =>\n value.name.toLowerCase(),\n );\n\n if (mappedColumnNames.includes(mapping.d1.generatedRowIdAlias.toLowerCase()))\n return yield* unavailable();\n const subjectIdColumn = column(mapping.subject.table, mapping.subject.id);\n const rowId = sql.identifier(mapping.d1.generatedRowIdAlias);\n\n const requestQuery = db\n .insert(requestTable as any)\n .values({\n ...mapping.d1.requestInsertWithoutSubject(input.requestId, fingerprint),\n [mapping.provisioningRequest.subjectId]:\n sql`(select ${subjectIdColumn} from ${mapping.subject.table} where ${rowId} = last_insert_rowid())`,\n } as any)\n .toSQL();\n\n statements.push(db.$client.unsafe(requestQuery.sql, requestQuery.params));\n }\n\n if (allocated === undefined && input.identifier !== undefined) {\n const requestIdParam = sql.param(input.requestId, requestIdColumn);\n\n const identifierQuery = db\n .insert(mapping.identifier.table as any)\n .values({\n ...mapping.d1.identifierInsertWithoutSubject(input.identifier, input.verifiedAt),\n [mapping.identifier.subjectId]:\n sql`(select ${requestSubjectColumn} from ${requestTable} where ${requestIdColumn} = ${requestIdParam})`,\n } as any)\n .toSQL();\n\n statements.push(db.$client.unsafe(identifierQuery.sql, identifierQuery.params));\n }\n const attempt = db.$client.batch(statements);\n\n yield* attempt.pipe(\n Effect.catchCause(\n (\n cause,\n ): Effect.Effect<\n void,\n | Effect.Error<typeof attempt>\n | Effect.Error<ReturnType<typeof findReceipt>>\n | IdentityConflict\n > => {\n if (\n cause.reasons.length === 0 ||\n !cause.reasons.every(\n (reason) =>\n Cause.isFailReason(reason) &&\n isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n )\n )\n return Effect.failCause(cause);\n\n return findReceipt(input.requestId).pipe(\n Effect.flatMap((receipt) =>\n receipt !== undefined && receipt.fingerprint === fingerprint\n ? Effect.void\n : IdentityConflict.make(),\n ),\n );\n },\n ),\n );\n const receipt = yield* findReceipt(input.requestId);\n\n if (receipt === undefined || receipt.fingerprint !== fingerprint)\n return yield* IdentityConflict.make();\n const subjectId = yield* mapping.subjectId.toSubject(receipt.subjectId as NativeId);\n\n return SubjectProvisioned.make({ subjectId });\n }, mapUnavailable);\n\n return { subjectProvisioner: SubjectProvisioner.of({ provision }) } as const;\n};\n\nexport const makeD1ExternalIdentityServices = <\n Subject extends AnySQLiteTable,\n External extends AnySQLiteTable,\n NativeId,\n>(\n database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n mapping: D1ExternalIdentityMapping<Subject, External, NativeId>,\n) => {\n const db = database as RuntimeDatabase;\n const externalTable = mapping.externalIdentity.table;\n\n const externalSubjectIdColumn = column(\n externalTable,\n mapping.externalIdentity.subjectId,\n ) as SQLiteColumn;\n\n const externalProviderColumn = column(\n externalTable,\n mapping.externalIdentity.provider,\n ) as SQLiteColumn;\n\n const externalIssuerColumn = column(\n externalTable,\n mapping.externalIdentity.issuer,\n ) as SQLiteColumn;\n\n const externalSubjectColumn = column(\n externalTable,\n mapping.externalIdentity.subject,\n ) as SQLiteColumn;\n\n const bind = Effect.fn(\"DrizzleD1Identity.bindExternalIdentity\")(function* (\n subjectId: SubjectId,\n identity: ExternalIdentity,\n ) {\n const nativeId = yield* mapping.subjectId.toNative(subjectId);\n const subjectIdColumn = column(mapping.subject.table, mapping.subject.id);\n const subjectStatusColumn = column(mapping.subject.table, mapping.subject.status);\n const nativeIdParam = sql.param(nativeId, subjectIdColumn);\n const activeStatusParam = sql.param(mapping.d1.activeStatusValue, subjectStatusColumn);\n\n const selection = selectFields(\n externalTable,\n mapping.externalIdentity.encodeInsert(identity, nativeId),\n );\n\n selection[mapping.externalIdentity.subjectId] = subjectIdColumn;\n\n const inserted = yield* db\n .insert(externalTable as any)\n .select(\n db\n .select(selection as any)\n .from(mapping.subject.table as any)\n .where(\n and(eq(subjectIdColumn, nativeIdParam), eq(subjectStatusColumn, activeStatusParam)),\n ) as any,\n )\n .returning({ subjectId: externalSubjectIdColumn })\n .pipe(\n Effect.catchCause((cause) => {\n if (\n cause.reasons.length === 0 ||\n !cause.reasons.every(\n (reason) =>\n Cause.isFailReason(reason) &&\n isMappedConstraintConflict(mapping.isConstraintConflict, reason.error),\n )\n )\n return Effect.failCause(cause);\n\n return db\n .select({ subjectId: externalSubjectIdColumn })\n .from(externalTable as any)\n .innerJoin(\n mapping.subject.table as any,\n and(\n eq(externalSubjectIdColumn, subjectIdColumn),\n eq(subjectStatusColumn, mapping.d1.activeStatusValue),\n ),\n )\n .where(\n and(\n eq(externalProviderColumn, identity.provider),\n eq(externalIssuerColumn, identity.issuer),\n eq(externalSubjectColumn, identity.subject),\n eq(externalSubjectIdColumn, nativeId),\n ),\n )\n .limit(1);\n }),\n );\n\n const row = inserted[0];\n\n if (row === undefined) return yield* IdentityConflict.make();\n const linked = row.subjectId as NativeId;\n\n if (!mapping.subjectId.equals(linked, nativeId)) return yield* IdentityConflict.make();\n }, mapUnavailable);\n\n return { externalIdentityMutation: ExternalIdentityMutation.of({ bind }) } as const;\n};\n\nexport const makeD1IdentityServices = <\n Subject extends AnySQLiteTable,\n Identifier extends AnySQLiteTable,\n External extends AnySQLiteTable,\n Request extends AnySQLiteTable,\n NativeId,\n>(\n database: EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client },\n mapping: D1GeneratedIdentityMapping<Subject, Identifier, External, Request, NativeId>,\n) => ({\n ...makeD1SubjectProvisioningServices(database, mapping),\n ...makeD1ExternalIdentityServices(database, mapping),\n});\n"],"mappings":";;;;;;;;AAqCA,MAAM,oBAAoB,oBAAoB,KAAK;AACnD,MAAM,oBAAoB,OAAO,GAAG,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,CAAC,CAAC;AAEzF,MAAM,kBAA2B,WAC/B,yBAAyB,QAAQ,iBAAiB,CAAC,CAAC,KAClD,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAAW,kBAAkB,KAAK,IAAI,QAAQ,YAAY,CAAE,CAChF,CACF,CACF;AAEF,MAAM,gBACJ,OACA,WAC4B;CAC5B,MAAM,UAAU,gBAAgB,KAAK;CAErC,MAAM,SAAS,OAAO,YACpB,OAAO,QAAQ,MAAM,CAAC,CACnB,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAAC,CAC1C,KAAK,CAAC,KAAK,WAAW,CACrB,KACA,GAAG,OAAO,GAAG,IAAI,QAAQ,GAAG,GAAG,IAAI,MAAM,OAAO,QAAQ,IAAoB,GAC9E,CAAC,CACL;CAEA,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,OAAO,GAAG;EACnD,IACE,OAAO,SAAS,KAAA,KAEd,OACA,oBAAoB,GAEtB;EACF,IAAI,OAAO,YAAY,QAAQ,OAAO,YAAY,KAAA,GAAW;EAE7D,MAAM,QACJ,OAAO,cAAc,KAAA,IACjB,OAAO,UAAU,IACjB,CAAC,OAAO,WAAW,OAAO,eAAe,KAAA,IACvC,OAAO,WAAW,IAClB,KAAA;EAER,IAAI,UAAU,KAAA,KAAa,OAAO,cAAc,KAAA,KAAa,OAAO,eAAe,KAAA,GACjF,OAAO,OAAO,GAAG,OAAO,GAAG,IAAI,QAAQ,GAAG,GAAG,IAAI,MAAM,OAAO,MAAM;CACxE;CAEA,OAAO;AACT;;;;;;AAOA,MAAa,qCAMX,UACA,YACG;CACH,MAAM,KAAK;CACX,MAAM,eAAe,QAAQ,oBAAoB;CAEjD,MAAM,kBAAkB,OACtB,cACA,QAAQ,oBAAoB,SAC9B;CAEA,MAAM,2BAA2B,OAC/B,cACA,QAAQ,oBAAoB,WAC9B;CAEA,MAAM,uBAAuB,OAC3B,cACA,QAAQ,oBAAoB,SAC9B;CAEA,MAAM,cAAc,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAAW,WAAmB;EAO3F,QAAO,OANa,GACjB,OAAO;GAAE,aAAa;GAA0B,WAAW;EAAqB,CAAC,CAAC,CAClF,KAAK,YAAmB,CAAC,CACzB,MAAM,GAAG,iBAAiB,SAAS,CAAC,CAAC,CACrC,MAAM,CAAC,EAAA,CAEE;CACd,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,6BAA6B,CAAC,CAAC,WACzD,OACA;EACA,MAAM,cAAc,wBAAwB,KAAK;EACjD,MAAM,WAAW,OAAO,YAAY,MAAM,SAAS;EAEnD,IAAI,aAAa,KAAA,GAAW;GAC1B,IAAI,SAAS,gBAAgB,aAAa,OAAO,OAAO,iBAAiB,KAAK;GAC9E,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,SAAS,SAAqB;GAEnF,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;EAC9C;EAEA,MAAM,YACJ,QAAQ,QAAQ,eAAe,KAAA,IAC3B,QAAQ,QAAQ,iBAAiB,IACjC,OAAO,QAAQ,QAAQ;EAE7B,MAAM,eAAe,GAClB,OAAO,QAAQ,QAAQ,KAAY,CAAC,CACpC,OAAO,QAAQ,QAAQ,aAAa,OAAO,SAAS,CAAQ,CAAC,CAC7D,MAAM;EAET,MAAM,aAAa,CAAC,GAAG,QAAQ,OAAO,aAAa,KAAK,aAAa,MAAM,CAAC;EAE5E,IAAI,cAAc,KAAA,GAAW;GAC3B,MAAM,eAAe,GAClB,OAAO,YAAmB,CAAC,CAC3B,OACC,QAAQ,oBAAoB,aAAa,MAAM,WAAW,aAAa,SAAS,CAClF,CAAC,CACA,MAAM;GAET,WAAW,KAAK,GAAG,QAAQ,OAAO,aAAa,KAAK,aAAa,MAAM,CAAC;GAExE,IAAI,MAAM,eAAe,KAAA,GAAW;IAClC,MAAM,kBAAkB,GACrB,OAAO,QAAQ,WAAW,KAAY,CAAC,CACvC,OACC,QAAQ,WAAW,aAAa,MAAM,YAAY,WAAW,MAAM,UAAU,CAC/E,CAAC,CACA,MAAM;IAET,WAAW,KAAK,GAAG,QAAQ,OAAO,gBAAgB,KAAK,gBAAgB,MAAM,CAAC;GAChF;EACF,OAAO;GACL,IAAI,QAAQ,GAAG,wBAAwB,KAAA,GAAW,OAAO,OAAO,YAAY;GAM5E,IAJ0B,OAAO,OAAO,gBAAgB,QAAQ,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,UACnF,MAAM,KAAK,YAAY,CAGL,CAAC,CAAC,SAAS,QAAQ,GAAG,oBAAoB,YAAY,CAAC,GACzE,OAAO,OAAO,YAAY;GAC5B,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GACxE,MAAM,QAAQ,IAAI,WAAW,QAAQ,GAAG,mBAAmB;GAE3D,MAAM,eAAe,GAClB,OAAO,YAAmB,CAAC,CAC3B,OAAO;IACN,GAAG,QAAQ,GAAG,4BAA4B,MAAM,WAAW,WAAW;KACrE,QAAQ,oBAAoB,YAC3B,GAAG,WAAW,gBAAgB,QAAQ,QAAQ,QAAQ,MAAM,SAAS,MAAM;GAC/E,CAAQ,CAAC,CACR,MAAM;GAET,WAAW,KAAK,GAAG,QAAQ,OAAO,aAAa,KAAK,aAAa,MAAM,CAAC;EAC1E;EAEA,IAAI,cAAc,KAAA,KAAa,MAAM,eAAe,KAAA,GAAW;GAC7D,MAAM,iBAAiB,IAAI,MAAM,MAAM,WAAW,eAAe;GAEjE,MAAM,kBAAkB,GACrB,OAAO,QAAQ,WAAW,KAAY,CAAC,CACvC,OAAO;IACN,GAAG,QAAQ,GAAG,+BAA+B,MAAM,YAAY,MAAM,UAAU;KAC9E,QAAQ,WAAW,YAClB,GAAG,WAAW,qBAAqB,QAAQ,aAAa,SAAS,gBAAgB,KAAK,eAAe;GACzG,CAAQ,CAAC,CACR,MAAM;GAET,WAAW,KAAK,GAAG,QAAQ,OAAO,gBAAgB,KAAK,gBAAgB,MAAM,CAAC;EAChF;EAGA,OAFgB,GAAG,QAAQ,MAAM,UAEpB,CAAC,CAAC,KACb,OAAO,YAEH,UAMG;GACH,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,YAAY,MAAM,SAAS,CAAC,CAAC,KAClC,OAAO,SAAS,YACd,YAAY,KAAA,KAAa,QAAQ,gBAAgB,cAC7C,OAAO,OACP,iBAAiB,KAAK,CAC5B,CACF;EACF,CACF,CACF;EACA,MAAM,UAAU,OAAO,YAAY,MAAM,SAAS;EAElD,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,aACnD,OAAO,OAAO,iBAAiB,KAAK;EACtC,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,QAAQ,SAAqB;EAElF,OAAO,mBAAmB,KAAK,EAAE,UAAU,CAAC;CAC9C,GAAG,cAAc;CAEjB,OAAO,EAAE,oBAAoB,mBAAmB,GAAG,EAAE,UAAU,CAAC,EAAE;AACpE;AAEA,MAAa,kCAKX,UACA,YACG;CACH,MAAM,KAAK;CACX,MAAM,gBAAgB,QAAQ,iBAAiB;CAE/C,MAAM,0BAA0B,OAC9B,eACA,QAAQ,iBAAiB,SAC3B;CAEA,MAAM,yBAAyB,OAC7B,eACA,QAAQ,iBAAiB,QAC3B;CAEA,MAAM,uBAAuB,OAC3B,eACA,QAAQ,iBAAiB,MAC3B;CAEA,MAAM,wBAAwB,OAC5B,eACA,QAAQ,iBAAiB,OAC3B;CAEA,MAAM,OAAO,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAC/D,WACA,UACA;EACA,MAAM,WAAW,OAAO,QAAQ,UAAU,SAAS,SAAS;EAC5D,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;EACxE,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;EAChF,MAAM,gBAAgB,IAAI,MAAM,UAAU,eAAe;EACzD,MAAM,oBAAoB,IAAI,MAAM,QAAQ,GAAG,mBAAmB,mBAAmB;EAErF,MAAM,YAAY,aAChB,eACA,QAAQ,iBAAiB,aAAa,UAAU,QAAQ,CAC1D;EAEA,UAAU,QAAQ,iBAAiB,aAAa;EA+ChD,MAAM,OAAM,OA7CY,GACrB,OAAO,aAAoB,CAAC,CAC5B,OACC,GACG,OAAO,SAAgB,CAAC,CACxB,KAAK,QAAQ,QAAQ,KAAY,CAAC,CAClC,MACC,IAAI,GAAG,iBAAiB,aAAa,GAAG,GAAG,qBAAqB,iBAAiB,CAAC,CACpF,CACJ,CAAC,CACA,UAAU,EAAE,WAAW,wBAAwB,CAAC,CAAC,CACjD,KACC,OAAO,YAAY,UAAU;GAC3B,IACE,MAAM,QAAQ,WAAW,KACzB,CAAC,MAAM,QAAQ,OACZ,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,QAAQ,sBAAsB,OAAO,KAAK,CACzE,GAEA,OAAO,OAAO,UAAU,KAAK;GAE/B,OAAO,GACJ,OAAO,EAAE,WAAW,wBAAwB,CAAC,CAAC,CAC9C,KAAK,aAAoB,CAAC,CAC1B,UACC,QAAQ,QAAQ,OAChB,IACE,GAAG,yBAAyB,eAAe,GAC3C,GAAG,qBAAqB,QAAQ,GAAG,iBAAiB,CACtD,CACF,CAAC,CACA,MACC,IACE,GAAG,wBAAwB,SAAS,QAAQ,GAC5C,GAAG,sBAAsB,SAAS,MAAM,GACxC,GAAG,uBAAuB,SAAS,OAAO,GAC1C,GAAG,yBAAyB,QAAQ,CACtC,CACF,CAAC,CACA,MAAM,CAAC;EACZ,CAAC,CACH,EAAA,CAEmB;EAErB,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,iBAAiB,KAAK;EAC3D,MAAM,SAAS,IAAI;EAEnB,IAAI,CAAC,QAAQ,UAAU,OAAO,QAAQ,QAAQ,GAAG,OAAO,OAAO,iBAAiB,KAAK;CACvF,GAAG,cAAc;CAEjB,OAAO,EAAE,0BAA0B,yBAAyB,GAAG,EAAE,KAAK,CAAC,EAAE;AAC3E;AAEA,MAAa,0BAOX,UACA,aACI;CACJ,GAAG,kCAAkC,UAAU,OAAO;CACtD,GAAG,+BAA+B,UAAU,OAAO;AACrD"}
|