@yielded/auth 0.1.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +18 -0
- package/dist/Atom.d.mts +5 -0
- package/dist/Atom.mjs +5 -0
- package/dist/Auth.d.mts +9 -0
- package/dist/Auth.mjs +7 -0
- package/dist/AuthContract.d.mts +4 -0
- package/dist/AuthContract.mjs +4 -0
- package/dist/AuthSession.d.mts +82 -0
- package/dist/AuthSession.mjs +138 -0
- package/dist/AuthSession.mjs.map +1 -0
- package/dist/AuthStore.d.mts +68 -0
- package/dist/AuthStore.mjs +194 -0
- package/dist/AuthStore.mjs.map +1 -0
- package/dist/AuthTokenCodec.d.mts +40 -0
- package/dist/AuthTokenCodec.mjs +104 -0
- package/dist/AuthTokenCodec.mjs.map +1 -0
- package/dist/Client.d.mts +2 -0
- package/dist/Client.mjs +2 -0
- package/dist/Cloudflare.d.mts +89 -0
- package/dist/Cloudflare.mjs +166 -0
- package/dist/Cloudflare.mjs.map +1 -0
- package/dist/Drizzle.d.mts +28 -0
- package/dist/Drizzle.mjs +27 -0
- package/dist/DrizzleD1.d.mts +935 -0
- package/dist/DrizzleD1.mjs +29 -0
- package/dist/DrizzleD1.mjs.map +1 -0
- package/dist/DrizzleLibsql.d.mts +2288 -0
- package/dist/DrizzleLibsql.mjs +85 -0
- package/dist/DrizzleLibsql.mjs.map +1 -0
- package/dist/DrizzleMysql2.d.mts +1809 -0
- package/dist/DrizzleMysql2.mjs +55 -0
- package/dist/DrizzleMysql2.mjs.map +1 -0
- package/dist/DrizzlePglite.d.mts +1808 -0
- package/dist/DrizzlePglite.mjs +45 -0
- package/dist/DrizzlePglite.mjs.map +1 -0
- package/dist/DrizzlePostgres.d.mts +1808 -0
- package/dist/DrizzlePostgres.mjs +45 -0
- package/dist/DrizzlePostgres.mjs.map +1 -0
- package/dist/DrizzleSqliteBun.d.mts +2287 -0
- package/dist/DrizzleSqliteBun.mjs +62 -0
- package/dist/DrizzleSqliteBun.mjs.map +1 -0
- package/dist/DrizzleSqliteDo.d.mts +2343 -0
- package/dist/DrizzleSqliteDo.mjs +105 -0
- package/dist/DrizzleSqliteDo.mjs.map +1 -0
- package/dist/DrizzleSqliteNode.d.mts +2287 -0
- package/dist/DrizzleSqliteNode.mjs +62 -0
- package/dist/DrizzleSqliteNode.mjs.map +1 -0
- package/dist/DrizzleSqliteWasm.d.mts +2287 -0
- package/dist/DrizzleSqliteWasm.mjs +62 -0
- package/dist/DrizzleSqliteWasm.mjs.map +1 -0
- package/dist/Email.d.mts +12 -0
- package/dist/Email.mjs +11 -0
- package/dist/EmailOtp.d.mts +42 -0
- package/dist/EmailOtp.mjs +120 -0
- package/dist/EmailOtp.mjs.map +1 -0
- package/dist/EmailOtpSender.d.mts +22 -0
- package/dist/EmailOtpSender.mjs +18 -0
- package/dist/EmailOtpSender.mjs.map +1 -0
- package/dist/Errors.d.mts +55 -0
- package/dist/Errors.mjs +31 -0
- package/dist/Errors.mjs.map +1 -0
- package/dist/GitHub.d.mts +5 -0
- package/dist/GitHub.mjs +4 -0
- package/dist/Hooks.d.mts +6 -0
- package/dist/Hooks.mjs +6 -0
- package/dist/Http.d.mts +12 -0
- package/dist/Http.mjs +12 -0
- package/dist/HttpServer.d.mts +103 -0
- package/dist/HttpServer.mjs +326 -0
- package/dist/HttpServer.mjs.map +1 -0
- package/dist/Identity.d.mts +9 -0
- package/dist/Identity.mjs +9 -0
- package/dist/IdentityResolver.d.mts +16 -0
- package/dist/IdentityResolver.mjs +12 -0
- package/dist/IdentityResolver.mjs.map +1 -0
- package/dist/OAuth.d.mts +36 -0
- package/dist/OAuth.mjs +35 -0
- package/dist/OpenIdClient.d.mts +3 -0
- package/dist/OpenIdClient.mjs +3 -0
- package/dist/OpenIdClientConnected.d.mts +4 -0
- package/dist/OpenIdClientConnected.mjs +3 -0
- package/dist/OperationHttp.d.mts +3 -0
- package/dist/OperationHttp.mjs +3 -0
- package/dist/OperationHttpClient.d.mts +2 -0
- package/dist/OperationHttpClient.mjs +2 -0
- package/dist/OperationHttpServer.d.mts +5 -0
- package/dist/OperationHttpServer.mjs +4 -0
- package/dist/Operations.d.mts +8 -0
- package/dist/Operations.mjs +8 -0
- package/dist/Passkey.d.mts +12 -0
- package/dist/Passkey.mjs +12 -0
- package/dist/PasskeyBrowser.d.mts +4 -0
- package/dist/PasskeyBrowser.mjs +4 -0
- package/dist/PasskeyContract.d.mts +641 -0
- package/dist/PasskeyContract.mjs +174 -0
- package/dist/PasskeyContract.mjs.map +1 -0
- package/dist/PasskeyPassword.d.mts +412 -0
- package/dist/PasskeyPassword.mjs +174 -0
- package/dist/PasskeyPassword.mjs.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.mts +3 -0
- package/dist/PasskeySimpleWebAuthn.mjs +3 -0
- package/dist/Password.d.mts +19 -0
- package/dist/Password.mjs +17 -0
- package/dist/PasswordAuth.d.mts +45 -0
- package/dist/PasswordAuth.mjs +79 -0
- package/dist/PasswordAuth.mjs.map +1 -0
- package/dist/PasswordCredentialStore.d.mts +46 -0
- package/dist/PasswordCredentialStore.mjs +62 -0
- package/dist/PasswordCredentialStore.mjs.map +1 -0
- package/dist/PasswordHasher.d.mts +31 -0
- package/dist/PasswordHasher.mjs +76 -0
- package/dist/PasswordHasher.mjs.map +1 -0
- package/dist/PhoneOtp.d.mts +11 -0
- package/dist/PhoneOtp.mjs +11 -0
- package/dist/Policy.d.mts +52 -0
- package/dist/Policy.mjs +36 -0
- package/dist/Policy.mjs.map +1 -0
- package/dist/Proofs.d.mts +14 -0
- package/dist/Proofs.mjs +13 -0
- package/dist/Rpc.d.mts +12 -0
- package/dist/Rpc.mjs +11 -0
- package/dist/Rpc.mjs.map +1 -0
- package/dist/Schema.d.mts +160 -0
- package/dist/Schema.mjs +141 -0
- package/dist/Schema.mjs.map +1 -0
- package/dist/SessionContract.d.mts +3 -0
- package/dist/SessionContract.mjs +3 -0
- package/dist/Sessions.d.mts +14 -0
- package/dist/Sessions.mjs +12 -0
- package/dist/Testing.d.mts +7 -0
- package/dist/Testing.mjs +7 -0
- package/dist/Totp.d.mts +8 -0
- package/dist/Totp.mjs +8 -0
- package/dist/TotpContract.d.mts +318 -0
- package/dist/TotpContract.mjs +119 -0
- package/dist/TotpContract.mjs.map +1 -0
- package/dist/WebCrypto.d.mts +28 -0
- package/dist/WebCrypto.mjs +42 -0
- package/dist/WebCrypto.mjs.map +1 -0
- package/dist/Workflows.d.mts +16 -0
- package/dist/Workflows.mjs +11 -0
- package/dist/Workflows.mjs.map +1 -0
- package/dist/atom/AuthAtomLifetime.d.mts +35 -0
- package/dist/atom/AuthAtomLifetime.mjs +50 -0
- package/dist/atom/AuthAtomLifetime.mjs.map +1 -0
- package/dist/atom/AuthAtomWorkflow.d.mts +17 -0
- package/dist/atom/AuthAtomWorkflow.mjs +9 -0
- package/dist/atom/AuthAtomWorkflow.mjs.map +1 -0
- package/dist/atom/client.d.mts +43 -0
- package/dist/atom/client.mjs +168 -0
- package/dist/atom/client.mjs.map +1 -0
- package/dist/atom/operations.d.mts +35 -0
- package/dist/atom/operations.mjs +58 -0
- package/dist/atom/operations.mjs.map +1 -0
- package/dist/atom/scoped-runtime.mjs +151 -0
- package/dist/atom/scoped-runtime.mjs.map +1 -0
- package/dist/auth/Auth.d.mts +7806 -0
- package/dist/auth/Auth.mjs +141 -0
- package/dist/auth/Auth.mjs.map +1 -0
- package/dist/auth/AuthConfigurationError.d.mts +10 -0
- package/dist/auth/AuthConfigurationError.mjs +14 -0
- package/dist/auth/AuthConfigurationError.mjs.map +1 -0
- package/dist/auth/AuthRequest.d.mts +21 -0
- package/dist/auth/AuthRequest.mjs +10 -0
- package/dist/auth/AuthRequest.mjs.map +1 -0
- package/dist/auth/AuthStrategy.d.mts +23 -0
- package/dist/auth/AuthStrategy.mjs +33 -0
- package/dist/auth/AuthStrategy.mjs.map +1 -0
- package/dist/auth/ConsumeDecision.d.mts +11 -0
- package/dist/auth/actions.d.mts +18 -0
- package/dist/auth/actions.mjs +70 -0
- package/dist/auth/actions.mjs.map +1 -0
- package/dist/auth/defaults.mjs +12 -0
- package/dist/auth/defaults.mjs.map +1 -0
- package/dist/auth/definition.d.mts +46 -0
- package/dist/auth/session.d.mts +27 -0
- package/dist/auth/session.mjs +56 -0
- package/dist/auth/session.mjs.map +1 -0
- package/dist/drizzle/D1BatchStatements.d.mts +11 -0
- package/dist/drizzle/D1BatchStatements.mjs +8 -0
- package/dist/drizzle/D1BatchStatements.mjs.map +1 -0
- package/dist/drizzle/PasswordPreparedPostconditions.mjs +12 -0
- package/dist/drizzle/PasswordPreparedPostconditions.mjs.map +1 -0
- package/dist/drizzle/SuppliedService.d.mts +10 -0
- package/dist/drizzle/d1-emails.d.mts +68 -0
- package/dist/drizzle/d1-emails.mjs +580 -0
- package/dist/drizzle/d1-emails.mjs.map +1 -0
- package/dist/drizzle/d1-generated-statement.mjs +79 -0
- package/dist/drizzle/d1-generated-statement.mjs.map +1 -0
- package/dist/drizzle/d1-identity.d.mts +33 -0
- package/dist/drizzle/d1-identity.mjs +120 -0
- package/dist/drizzle/d1-identity.mjs.map +1 -0
- package/dist/drizzle/d1-oauth.d.mts +316 -0
- package/dist/drizzle/d1-oauth.mjs +79 -0
- package/dist/drizzle/d1-oauth.mjs.map +1 -0
- package/dist/drizzle/d1-passkey.d.mts +52 -0
- package/dist/drizzle/d1-passkey.mjs +97 -0
- package/dist/drizzle/d1-passkey.mjs.map +1 -0
- package/dist/drizzle/d1-password-prepared.d.mts +27 -0
- package/dist/drizzle/d1-password-prepared.mjs +464 -0
- package/dist/drizzle/d1-password-prepared.mjs.map +1 -0
- package/dist/drizzle/d1-passwords.d.mts +96 -0
- package/dist/drizzle/d1-passwords.mjs +1008 -0
- package/dist/drizzle/d1-passwords.mjs.map +1 -0
- package/dist/drizzle/d1-phone.d.mts +29 -0
- package/dist/drizzle/d1-phone.mjs +33 -0
- package/dist/drizzle/d1-phone.mjs.map +1 -0
- package/dist/drizzle/d1-planning.d.mts +12 -0
- package/dist/drizzle/d1-planning.mjs +43 -0
- package/dist/drizzle/d1-planning.mjs.map +1 -0
- package/dist/drizzle/d1-proofs.d.mts +88 -0
- package/dist/drizzle/d1-proofs.mjs +833 -0
- package/dist/drizzle/d1-proofs.mjs.map +1 -0
- package/dist/drizzle/d1-sessions.d.mts +77 -0
- package/dist/drizzle/d1-sessions.mjs +970 -0
- package/dist/drizzle/d1-sessions.mjs.map +1 -0
- package/dist/drizzle/d1-totp.d.mts +27 -0
- package/dist/drizzle/d1-totp.mjs +28 -0
- package/dist/drizzle/d1-totp.mjs.map +1 -0
- package/dist/drizzle/email-model.d.mts +352 -0
- package/dist/drizzle/email-model.mjs +21 -0
- package/dist/drizzle/email-model.mjs.map +1 -0
- package/dist/drizzle/email-registration.d.mts +33 -0
- package/dist/drizzle/email-registration.mjs +238 -0
- package/dist/drizzle/email-registration.mjs.map +1 -0
- package/dist/drizzle/email-sql.d.mts +18 -0
- package/dist/drizzle/email-sql.mjs +473 -0
- package/dist/drizzle/email-sql.mjs.map +1 -0
- package/dist/drizzle/email-target.d.mts +28 -0
- package/dist/drizzle/email-target.mjs +75 -0
- package/dist/drizzle/email-target.mjs.map +1 -0
- package/dist/drizzle/model.d.mts +259 -0
- package/dist/drizzle/model.mjs +81 -0
- package/dist/drizzle/model.mjs.map +1 -0
- package/dist/drizzle/mysql-emails.d.mts +82 -0
- package/dist/drizzle/mysql-emails.mjs +38 -0
- package/dist/drizzle/mysql-emails.mjs.map +1 -0
- package/dist/drizzle/mysql-identity.d.mts +24 -0
- package/dist/drizzle/mysql-identity.mjs +95 -0
- package/dist/drizzle/mysql-identity.mjs.map +1 -0
- package/dist/drizzle/mysql-password-prepared.d.mts +32 -0
- package/dist/drizzle/mysql-password-prepared.mjs +16 -0
- package/dist/drizzle/mysql-password-prepared.mjs.map +1 -0
- package/dist/drizzle/mysql-passwords.d.mts +102 -0
- package/dist/drizzle/mysql-passwords.mjs +38 -0
- package/dist/drizzle/mysql-passwords.mjs.map +1 -0
- package/dist/drizzle/mysql-proofs.d.mts +83 -0
- package/dist/drizzle/mysql-proofs.mjs +23 -0
- package/dist/drizzle/mysql-proofs.mjs.map +1 -0
- package/dist/drizzle/mysql-sessions.d.mts +250 -0
- package/dist/drizzle/mysql-sessions.mjs +53 -0
- package/dist/drizzle/mysql-sessions.mjs.map +1 -0
- package/dist/drizzle/mysql.d.mts +73 -0
- package/dist/drizzle/mysql.mjs +221 -0
- package/dist/drizzle/mysql.mjs.map +1 -0
- package/dist/drizzle/oauth-accounts.mjs +361 -0
- package/dist/drizzle/oauth-accounts.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-access.mjs +210 -0
- package/dist/drizzle/oauth-connected-access.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-collection.mjs +202 -0
- package/dist/drizzle/oauth-connected-collection.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-custody.mjs +146 -0
- package/dist/drizzle/oauth-connected-custody.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-drivers.mjs +78 -0
- package/dist/drizzle/oauth-connected-drivers.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-flow.mjs +248 -0
- package/dist/drizzle/oauth-connected-flow.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-input.mjs +105 -0
- package/dist/drizzle/oauth-connected-input.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-maintenance.mjs +215 -0
- package/dist/drizzle/oauth-connected-maintenance.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-management.mjs +228 -0
- package/dist/drizzle/oauth-connected-management.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-model.d.mts +278 -0
- package/dist/drizzle/oauth-connected-model.mjs +22 -0
- package/dist/drizzle/oauth-connected-model.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-reference.d.mts +17 -0
- package/dist/drizzle/oauth-connected-reference.mjs +53 -0
- package/dist/drizzle/oauth-connected-reference.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-settlement.mjs +117 -0
- package/dist/drizzle/oauth-connected-settlement.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-state.d.mts +16 -0
- package/dist/drizzle/oauth-connected-state.mjs +422 -0
- package/dist/drizzle/oauth-connected-state.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-target.d.mts +114 -0
- package/dist/drizzle/oauth-connected-target.mjs +94 -0
- package/dist/drizzle/oauth-connected-target.mjs.map +1 -0
- package/dist/drizzle/oauth-drivers.mjs +53 -0
- package/dist/drizzle/oauth-drivers.mjs.map +1 -0
- package/dist/drizzle/oauth-flow.d.mts +7 -0
- package/dist/drizzle/oauth-flow.mjs +255 -0
- package/dist/drizzle/oauth-flow.mjs.map +1 -0
- package/dist/drizzle/oauth-input.mjs +130 -0
- package/dist/drizzle/oauth-input.mjs.map +1 -0
- package/dist/drizzle/oauth-model.d.mts +468 -0
- package/dist/drizzle/oauth-model.mjs +49 -0
- package/dist/drizzle/oauth-model.mjs.map +1 -0
- package/dist/drizzle/oauth-mysql.mjs +8 -0
- package/dist/drizzle/oauth-mysql.mjs.map +1 -0
- package/dist/drizzle/oauth-owner.d.mts +4 -0
- package/dist/drizzle/oauth-owner.mjs +10 -0
- package/dist/drizzle/oauth-owner.mjs.map +1 -0
- package/dist/drizzle/oauth-registration.d.mts +8 -0
- package/dist/drizzle/oauth-registration.mjs +375 -0
- package/dist/drizzle/oauth-registration.mjs.map +1 -0
- package/dist/drizzle/oauth-state.mjs +109 -0
- package/dist/drizzle/oauth-state.mjs.map +1 -0
- package/dist/drizzle/oauth-target.d.mts +125 -0
- package/dist/drizzle/oauth-target.mjs +252 -0
- package/dist/drizzle/oauth-target.mjs.map +1 -0
- package/dist/drizzle/passkey-admission.mjs +203 -0
- package/dist/drizzle/passkey-admission.mjs.map +1 -0
- package/dist/drizzle/passkey-credentials.mjs +239 -0
- package/dist/drizzle/passkey-credentials.mjs.map +1 -0
- package/dist/drizzle/passkey-drivers.mjs +34 -0
- package/dist/drizzle/passkey-drivers.mjs.map +1 -0
- package/dist/drizzle/passkey-enrollment.mjs +132 -0
- package/dist/drizzle/passkey-enrollment.mjs.map +1 -0
- package/dist/drizzle/passkey-flow.mjs +436 -0
- package/dist/drizzle/passkey-flow.mjs.map +1 -0
- package/dist/drizzle/passkey-management.mjs +225 -0
- package/dist/drizzle/passkey-management.mjs.map +1 -0
- package/dist/drizzle/passkey-model.d.mts +275 -0
- package/dist/drizzle/passkey-model.mjs +36 -0
- package/dist/drizzle/passkey-model.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-ceremony-model.d.mts +50 -0
- package/dist/drizzle/passkey-registration-ceremony-model.mjs +18 -0
- package/dist/drizzle/passkey-registration-ceremony-model.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-ceremony.mjs +124 -0
- package/dist/drizzle/passkey-registration-ceremony.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-custody.mjs +51 -0
- package/dist/drizzle/passkey-registration-custody.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-write.mjs +205 -0
- package/dist/drizzle/passkey-registration-write.mjs.map +1 -0
- package/dist/drizzle/passkey-state.d.mts +5 -0
- package/dist/drizzle/passkey-state.mjs +207 -0
- package/dist/drizzle/passkey-state.mjs.map +1 -0
- package/dist/drizzle/passkey-target.d.mts +16 -0
- package/dist/drizzle/passkey-target.mjs +174 -0
- package/dist/drizzle/passkey-target.mjs.map +1 -0
- package/dist/drizzle/passkey-write-drivers.mjs +33 -0
- package/dist/drizzle/passkey-write-drivers.mjs.map +1 -0
- package/dist/drizzle/passkey-write-model.d.mts +192 -0
- package/dist/drizzle/passkey-write-model.mjs +13 -0
- package/dist/drizzle/passkey-write-model.mjs.map +1 -0
- package/dist/drizzle/passkey-write-state.mjs +326 -0
- package/dist/drizzle/passkey-write-state.mjs.map +1 -0
- package/dist/drizzle/passkey-write-target.d.mts +14 -0
- package/dist/drizzle/passkey-write-target.mjs +185 -0
- package/dist/drizzle/passkey-write-target.mjs.map +1 -0
- package/dist/drizzle/password-model.d.mts +330 -0
- package/dist/drizzle/password-model.mjs +22 -0
- package/dist/drizzle/password-model.mjs.map +1 -0
- package/dist/drizzle/password-prepared-model.d.mts +93 -0
- package/dist/drizzle/password-prepared-model.mjs +11 -0
- package/dist/drizzle/password-prepared-model.mjs.map +1 -0
- package/dist/drizzle/password-prepared-sql.mjs +394 -0
- package/dist/drizzle/password-prepared-sql.mjs.map +1 -0
- package/dist/drizzle/password-prepared-state.mjs +107 -0
- package/dist/drizzle/password-prepared-state.mjs.map +1 -0
- package/dist/drizzle/password-prepared-target.d.mts +12 -0
- package/dist/drizzle/password-prepared-target.mjs +57 -0
- package/dist/drizzle/password-prepared-target.mjs.map +1 -0
- package/dist/drizzle/password-registration.d.mts +23 -0
- package/dist/drizzle/password-registration.mjs +136 -0
- package/dist/drizzle/password-registration.mjs.map +1 -0
- package/dist/drizzle/password-sql.d.mts +20 -0
- package/dist/drizzle/password-sql.mjs +702 -0
- package/dist/drizzle/password-sql.mjs.map +1 -0
- package/dist/drizzle/password-target.d.mts +25 -0
- package/dist/drizzle/password-target.mjs +63 -0
- package/dist/drizzle/password-target.mjs.map +1 -0
- package/dist/drizzle/pg-emails.d.mts +83 -0
- package/dist/drizzle/pg-emails.mjs +38 -0
- package/dist/drizzle/pg-emails.mjs.map +1 -0
- package/dist/drizzle/pg-password-prepared.d.mts +33 -0
- package/dist/drizzle/pg-password-prepared.mjs +16 -0
- package/dist/drizzle/pg-password-prepared.mjs.map +1 -0
- package/dist/drizzle/pg-passwords.d.mts +103 -0
- package/dist/drizzle/pg-passwords.mjs +38 -0
- package/dist/drizzle/pg-passwords.mjs.map +1 -0
- package/dist/drizzle/pg-proofs.d.mts +84 -0
- package/dist/drizzle/pg-proofs.mjs +22 -0
- package/dist/drizzle/pg-proofs.mjs.map +1 -0
- package/dist/drizzle/pg-sessions.d.mts +251 -0
- package/dist/drizzle/pg-sessions.mjs +53 -0
- package/dist/drizzle/pg-sessions.mjs.map +1 -0
- package/dist/drizzle/pg.d.mts +88 -0
- package/dist/drizzle/pg.mjs +294 -0
- package/dist/drizzle/pg.mjs.map +1 -0
- package/dist/drizzle/phone-model.d.mts +117 -0
- package/dist/drizzle/phone-model.mjs +39 -0
- package/dist/drizzle/phone-model.mjs.map +1 -0
- package/dist/drizzle/phone-state.mjs +426 -0
- package/dist/drizzle/phone-state.mjs.map +1 -0
- package/dist/drizzle/phone-target.d.mts +19 -0
- package/dist/drizzle/phone-target.mjs +171 -0
- package/dist/drizzle/phone-target.mjs.map +1 -0
- package/dist/drizzle/proof-model.d.mts +287 -0
- package/dist/drizzle/proof-model.mjs +17 -0
- package/dist/drizzle/proof-model.mjs.map +1 -0
- package/dist/drizzle/proof-sql.d.mts +16 -0
- package/dist/drizzle/proof-sql.mjs +618 -0
- package/dist/drizzle/proof-sql.mjs.map +1 -0
- package/dist/drizzle/proof-target.d.mts +17 -0
- package/dist/drizzle/proof-target.mjs +38 -0
- package/dist/drizzle/proof-target.mjs.map +1 -0
- package/dist/drizzle/session-model.d.mts +201 -0
- package/dist/drizzle/session-model.mjs +19 -0
- package/dist/drizzle/session-model.mjs.map +1 -0
- package/dist/drizzle/session-sql.mjs +732 -0
- package/dist/drizzle/session-sql.mjs.map +1 -0
- package/dist/drizzle/session-target.d.mts +37 -0
- package/dist/drizzle/session-target.mjs +47 -0
- package/dist/drizzle/session-target.mjs.map +1 -0
- package/dist/drizzle/sqlite-emails.mjs +45 -0
- package/dist/drizzle/sqlite-emails.mjs.map +1 -0
- package/dist/drizzle/sqlite-identity.mjs +92 -0
- package/dist/drizzle/sqlite-identity.mjs.map +1 -0
- package/dist/drizzle/sqlite-password-prepared.mjs +21 -0
- package/dist/drizzle/sqlite-password-prepared.mjs.map +1 -0
- package/dist/drizzle/sqlite-passwords.mjs +49 -0
- package/dist/drizzle/sqlite-passwords.mjs.map +1 -0
- package/dist/drizzle/sqlite-proofs.mjs +29 -0
- package/dist/drizzle/sqlite-proofs.mjs.map +1 -0
- package/dist/drizzle/sqlite-sessions.mjs +74 -0
- package/dist/drizzle/sqlite-sessions.mjs.map +1 -0
- package/dist/drizzle/sqlite.d.mts +81 -0
- package/dist/drizzle/sqlite.mjs +220 -0
- package/dist/drizzle/sqlite.mjs.map +1 -0
- package/dist/drizzle/standalone-guard.mjs +19 -0
- package/dist/drizzle/standalone-guard.mjs.map +1 -0
- package/dist/drizzle/step-up-model.d.mts +65 -0
- package/dist/drizzle/step-up-model.mjs +9 -0
- package/dist/drizzle/step-up-model.mjs.map +1 -0
- package/dist/drizzle/step-up-state.mjs +34 -0
- package/dist/drizzle/step-up-state.mjs.map +1 -0
- package/dist/drizzle/totp-model.d.mts +85 -0
- package/dist/drizzle/totp-model.mjs +13 -0
- package/dist/drizzle/totp-model.mjs.map +1 -0
- package/dist/drizzle/totp-state.d.mts +39 -0
- package/dist/drizzle/totp-state.mjs +288 -0
- package/dist/drizzle/totp-state.mjs.map +1 -0
- package/dist/drizzle/totp-target.d.mts +16 -0
- package/dist/drizzle/totp-target.mjs +83 -0
- package/dist/drizzle/totp-target.mjs.map +1 -0
- package/dist/drizzle/transaction-execution.d.mts +20 -0
- package/dist/drizzle/transaction-execution.mjs +111 -0
- package/dist/drizzle/transaction-execution.mjs.map +1 -0
- package/dist/drizzle/transaction-mysql.mjs +46 -0
- package/dist/drizzle/transaction-mysql.mjs.map +1 -0
- package/dist/drizzle/transaction-owner.d.mts +6 -0
- package/dist/drizzle/transaction-owner.mjs +252 -0
- package/dist/drizzle/transaction-owner.mjs.map +1 -0
- package/dist/email/EmailActionEvidence.d.mts +33 -0
- package/dist/email/EmailActionEvidence.mjs +15 -0
- package/dist/email/EmailActionEvidence.mjs.map +1 -0
- package/dist/email/EmailAddressPersistence.d.mts +63 -0
- package/dist/email/EmailAddressPersistence.mjs +19 -0
- package/dist/email/EmailAddressPersistence.mjs.map +1 -0
- package/dist/email/EmailIdentifierNotifier.d.mts +30 -0
- package/dist/email/EmailIdentifierNotifier.mjs +31 -0
- package/dist/email/EmailIdentifierNotifier.mjs.map +1 -0
- package/dist/email/EmailReturnTargets.d.mts +19 -0
- package/dist/email/EmailReturnTargets.mjs +29 -0
- package/dist/email/EmailReturnTargets.mjs.map +1 -0
- package/dist/email/EmailSignInTargets.d.mts +20 -0
- package/dist/email/EmailSignInTargets.mjs +12 -0
- package/dist/email/EmailSignInTargets.mjs.map +1 -0
- package/dist/email/addresses.d.mts +33 -0
- package/dist/email/addresses.mjs +404 -0
- package/dist/email/addresses.mjs.map +1 -0
- package/dist/email/definition.d.mts +10153 -0
- package/dist/email/definition.mjs +111 -0
- package/dist/email/definition.mjs.map +1 -0
- package/dist/email/errors.d.mts +15 -0
- package/dist/email/errors.mjs +11 -0
- package/dist/email/errors.mjs.map +1 -0
- package/dist/email/magicLink.d.mts +33 -0
- package/dist/email/magicLink.mjs +58 -0
- package/dist/email/magicLink.mjs.map +1 -0
- package/dist/email/models.d.mts +56 -0
- package/dist/email/models.mjs +31 -0
- package/dist/email/models.mjs.map +1 -0
- package/dist/email/module.d.mts +22296 -0
- package/dist/email/module.mjs +415 -0
- package/dist/email/module.mjs.map +1 -0
- package/dist/email/registration.d.mts +28 -0
- package/dist/email/registration.mjs +243 -0
- package/dist/email/registration.mjs.map +1 -0
- package/dist/email/snapshot.mjs +37 -0
- package/dist/email/snapshot.mjs.map +1 -0
- package/dist/hooks/LifecycleHooks.d.mts +34 -0
- package/dist/hooks/LifecycleHooks.mjs +74 -0
- package/dist/hooks/LifecycleHooks.mjs.map +1 -0
- package/dist/hooks/commit.d.mts +66 -0
- package/dist/hooks/commit.mjs +136 -0
- package/dist/hooks/commit.mjs.map +1 -0
- package/dist/hooks/models.d.mts +51 -0
- package/dist/hooks/models.mjs +87 -0
- package/dist/hooks/models.mjs.map +1 -0
- package/dist/hooks/plugins.d.mts +36 -0
- package/dist/hooks/plugins.mjs +60 -0
- package/dist/hooks/plugins.mjs.map +1 -0
- package/dist/hooks/transactions.d.mts +31 -0
- package/dist/hooks/transactions.mjs +38 -0
- package/dist/hooks/transactions.mjs.map +1 -0
- package/dist/http/auth-api.d.mts +9 -0
- package/dist/http/auth-api.mjs +13 -0
- package/dist/http/auth-api.mjs.map +1 -0
- package/dist/http/auth-contract.d.mts +84 -0
- package/dist/http/auth-contract.mjs +75 -0
- package/dist/http/auth-contract.mjs.map +1 -0
- package/dist/http/auth-http.d.mts +216 -0
- package/dist/http/auth-http.mjs +184 -0
- package/dist/http/auth-http.mjs.map +1 -0
- package/dist/http/endpoints/get-session.d.mts +8 -0
- package/dist/http/endpoints/get-session.mjs +12 -0
- package/dist/http/endpoints/get-session.mjs.map +1 -0
- package/dist/http/endpoints/password-sign-in.d.mts +8 -0
- package/dist/http/endpoints/password-sign-in.mjs +18 -0
- package/dist/http/endpoints/password-sign-in.mjs.map +1 -0
- package/dist/http/endpoints/request-email-otp.d.mts +8 -0
- package/dist/http/endpoints/request-email-otp.mjs +17 -0
- package/dist/http/endpoints/request-email-otp.mjs.map +1 -0
- package/dist/http/endpoints/set-password.d.mts +9 -0
- package/dist/http/endpoints/set-password.mjs +19 -0
- package/dist/http/endpoints/set-password.mjs.map +1 -0
- package/dist/http/endpoints/sign-out.d.mts +6 -0
- package/dist/http/endpoints/sign-out.mjs +7 -0
- package/dist/http/endpoints/sign-out.mjs.map +1 -0
- package/dist/http/endpoints/verify-email-otp.d.mts +9 -0
- package/dist/http/endpoints/verify-email-otp.mjs +18 -0
- package/dist/http/endpoints/verify-email-otp.mjs.map +1 -0
- package/dist/http/models.d.mts +49 -0
- package/dist/http/models.mjs +35 -0
- package/dist/http/models.mjs.map +1 -0
- package/dist/http/security.d.mts +91 -0
- package/dist/http/security.mjs +77 -0
- package/dist/http/security.mjs.map +1 -0
- package/dist/http/session-contract.d.mts +303 -0
- package/dist/http/session-contract.mjs +38 -0
- package/dist/http/session-contract.mjs.map +1 -0
- package/dist/http-operation/OperationHttpInvocation.d.mts +16 -0
- package/dist/http-operation/OperationHttpInvocation.mjs +11 -0
- package/dist/http-operation/OperationHttpInvocation.mjs.map +1 -0
- package/dist/http-operation/OperationHttpServerConfig.d.mts +18 -0
- package/dist/http-operation/OperationHttpServerConfig.mjs +72 -0
- package/dist/http-operation/OperationHttpServerConfig.mjs.map +1 -0
- package/dist/http-operation/auth-client.d.mts +75 -0
- package/dist/http-operation/auth-client.mjs +116 -0
- package/dist/http-operation/auth-client.mjs.map +1 -0
- package/dist/http-operation/client.d.mts +50 -0
- package/dist/http-operation/client.mjs +188 -0
- package/dist/http-operation/client.mjs.map +1 -0
- package/dist/http-operation/configuration-schema.mjs +19 -0
- package/dist/http-operation/configuration-schema.mjs.map +1 -0
- package/dist/http-operation/contract.d.mts +40 -0
- package/dist/http-operation/contract.mjs +37 -0
- package/dist/http-operation/contract.mjs.map +1 -0
- package/dist/http-operation/errors.d.mts +13 -0
- package/dist/http-operation/errors.mjs +31 -0
- package/dist/http-operation/errors.mjs.map +1 -0
- package/dist/http-operation/models.d.mts +32 -0
- package/dist/http-operation/models.mjs +14 -0
- package/dist/http-operation/models.mjs.map +1 -0
- package/dist/http-operation/private.mjs +35 -0
- package/dist/http-operation/private.mjs.map +1 -0
- package/dist/http-operation/security.mjs +58 -0
- package/dist/http-operation/security.mjs.map +1 -0
- package/dist/http-operation/server.d.mts +33 -0
- package/dist/http-operation/server.mjs +268 -0
- package/dist/http-operation/server.mjs.map +1 -0
- package/dist/identity/ExternalIdentityMutation.d.mts +15 -0
- package/dist/identity/ExternalIdentityMutation.mjs +11 -0
- package/dist/identity/ExternalIdentityMutation.mjs.map +1 -0
- package/dist/identity/IdentityMutation.d.mts +22 -0
- package/dist/identity/IdentityMutation.mjs +17 -0
- package/dist/identity/IdentityMutation.mjs.map +1 -0
- package/dist/identity/IdentityRepository.d.mts +20 -0
- package/dist/identity/IdentityRepository.mjs +11 -0
- package/dist/identity/IdentityRepository.mjs.map +1 -0
- package/dist/identity/SubjectLifecycle.d.mts +58 -0
- package/dist/identity/SubjectLifecycle.mjs +43 -0
- package/dist/identity/SubjectLifecycle.mjs.map +1 -0
- package/dist/identity/SubjectProvisioner.d.mts +37 -0
- package/dist/identity/SubjectProvisioner.mjs +20 -0
- package/dist/identity/SubjectProvisioner.mjs.map +1 -0
- package/dist/identity/codecs.d.mts +34 -0
- package/dist/identity/codecs.mjs +40 -0
- package/dist/identity/codecs.mjs.map +1 -0
- package/dist/identity/models.d.mts +62 -0
- package/dist/identity/models.mjs +51 -0
- package/dist/identity/models.mjs.map +1 -0
- package/dist/identity/operations.d.mts +118 -0
- package/dist/identity/operations.mjs +124 -0
- package/dist/identity/operations.mjs.map +1 -0
- package/dist/index.d.mts +23 -0
- package/dist/index.mjs +23 -0
- package/dist/internal/AuthStoreDecisions.d.mts +22 -0
- package/dist/internal/AuthStoreDecisions.mjs +8 -0
- package/dist/internal/AuthStoreDecisions.mjs.map +1 -0
- package/dist/internal/CurrentSession.d.mts +9 -0
- package/dist/internal/CurrentSession.mjs +8 -0
- package/dist/internal/CurrentSession.mjs.map +1 -0
- package/dist/internal/diagnostics.mjs +23 -0
- package/dist/internal/diagnostics.mjs.map +1 -0
- package/dist/oauth/GithubOAuthProvider.d.mts +43 -0
- package/dist/oauth/GithubOAuthProvider.mjs +66 -0
- package/dist/oauth/GithubOAuthProvider.mjs.map +1 -0
- package/dist/oauth/OAuth.d.mts +73 -0
- package/dist/oauth/OAuth.mjs +180 -0
- package/dist/oauth/OAuth.mjs.map +1 -0
- package/dist/oauth/OAuthAccountsPersistence.d.mts +109 -0
- package/dist/oauth/OAuthAccountsPersistence.mjs +12 -0
- package/dist/oauth/OAuthAccountsPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthActionEvidence.d.mts +28 -0
- package/dist/oauth/OAuthActionEvidence.mjs +15 -0
- package/dist/oauth/OAuthActionEvidence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedActionEvidence.d.mts +22 -0
- package/dist/oauth/OAuthConnectedActionEvidence.mjs +9 -0
- package/dist/oauth/OAuthConnectedActionEvidence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedPersistence.d.mts +129 -0
- package/dist/oauth/OAuthConnectedPersistence.mjs +12 -0
- package/dist/oauth/OAuthConnectedPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedProtocol.d.mts +41 -0
- package/dist/oauth/OAuthConnectedProtocol.mjs +13 -0
- package/dist/oauth/OAuthConnectedProtocol.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedRevocations.d.mts +167 -0
- package/dist/oauth/OAuthConnectedRevocations.mjs +21 -0
- package/dist/oauth/OAuthConnectedRevocations.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedTokenProtector.d.mts +24 -0
- package/dist/oauth/OAuthConnectedTokenProtector.mjs +153 -0
- package/dist/oauth/OAuthConnectedTokenProtector.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.d.mts +23 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.mjs +37 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedUseAuthority.d.mts +22 -0
- package/dist/oauth/OAuthConnectedUseAuthority.mjs +10 -0
- package/dist/oauth/OAuthConnectedUseAuthority.mjs.map +1 -0
- package/dist/oauth/OAuthConnectionStore.d.mts +33 -0
- package/dist/oauth/OAuthConnectionStore.mjs +38 -0
- package/dist/oauth/OAuthConnectionStore.mjs.map +1 -0
- package/dist/oauth/OAuthLinkTransactionProtector.d.mts +25 -0
- package/dist/oauth/OAuthLinkTransactionProtector.mjs +39 -0
- package/dist/oauth/OAuthLinkTransactionProtector.mjs.map +1 -0
- package/dist/oauth/OAuthProtocol.d.mts +33 -0
- package/dist/oauth/OAuthProtocol.mjs +16 -0
- package/dist/oauth/OAuthProtocol.mjs.map +1 -0
- package/dist/oauth/OAuthProvider.d.mts +70 -0
- package/dist/oauth/OAuthProvider.mjs +39 -0
- package/dist/oauth/OAuthProvider.mjs.map +1 -0
- package/dist/oauth/OAuthProviders.d.mts +27 -0
- package/dist/oauth/OAuthProviders.mjs +33 -0
- package/dist/oauth/OAuthProviders.mjs.map +1 -0
- package/dist/oauth/OAuthRegistrationIntents.d.mts +87 -0
- package/dist/oauth/OAuthRegistrationIntents.mjs +19 -0
- package/dist/oauth/OAuthRegistrationIntents.mjs.map +1 -0
- package/dist/oauth/OAuthReturnTargets.d.mts +15 -0
- package/dist/oauth/OAuthReturnTargets.mjs +24 -0
- package/dist/oauth/OAuthReturnTargets.mjs.map +1 -0
- package/dist/oauth/OAuthSignInPersistence.d.mts +68 -0
- package/dist/oauth/OAuthSignInPersistence.mjs +12 -0
- package/dist/oauth/OAuthSignInPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthStateDecisions.d.mts +14 -0
- package/dist/oauth/OAuthStateDecisions.mjs +8 -0
- package/dist/oauth/OAuthStateDecisions.mjs.map +1 -0
- package/dist/oauth/OAuthStateStore.d.mts +35 -0
- package/dist/oauth/OAuthStateStore.mjs +64 -0
- package/dist/oauth/OAuthStateStore.mjs.map +1 -0
- package/dist/oauth/OAuthTransactionProtector.d.mts +26 -0
- package/dist/oauth/OAuthTransactionProtector.mjs +78 -0
- package/dist/oauth/OAuthTransactionProtector.mjs.map +1 -0
- package/dist/oauth/accounts.d.mts +29 -0
- package/dist/oauth/accounts.mjs +515 -0
- package/dist/oauth/accounts.mjs.map +1 -0
- package/dist/oauth/accountsModels.d.mts +463 -0
- package/dist/oauth/accountsModels.mjs +155 -0
- package/dist/oauth/accountsModels.mjs.map +1 -0
- package/dist/oauth/connected.d.mts +442 -0
- package/dist/oauth/connected.mjs +526 -0
- package/dist/oauth/connected.mjs.map +1 -0
- package/dist/oauth/connectedAccess.d.mts +20 -0
- package/dist/oauth/connectedAccess.mjs +279 -0
- package/dist/oauth/connectedAccess.mjs.map +1 -0
- package/dist/oauth/connectedMaintenance.d.mts +19 -0
- package/dist/oauth/connectedMaintenance.mjs +133 -0
- package/dist/oauth/connectedMaintenance.mjs.map +1 -0
- package/dist/oauth/connectedModels.d.mts +2023 -0
- package/dist/oauth/connectedModels.mjs +375 -0
- package/dist/oauth/connectedModels.mjs.map +1 -0
- package/dist/oauth/definition.d.mts +4396 -0
- package/dist/oauth/definition.mjs +120 -0
- package/dist/oauth/definition.mjs.map +1 -0
- package/dist/oauth/errors.d.mts +49 -0
- package/dist/oauth/errors.mjs +42 -0
- package/dist/oauth/errors.mjs.map +1 -0
- package/dist/oauth/github/identity.d.mts +8 -0
- package/dist/oauth/github/identity.mjs +24 -0
- package/dist/oauth/github/identity.mjs.map +1 -0
- package/dist/oauth/github/models.d.mts +34 -0
- package/dist/oauth/github/protocol.d.mts +54 -0
- package/dist/oauth/github/protocol.mjs +204 -0
- package/dist/oauth/github/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/ProviderRevocation.d.mts +4 -0
- package/dist/oauth/openid-client/ProviderRevocation.mjs +11 -0
- package/dist/oauth/openid-client/ProviderRevocation.mjs.map +1 -0
- package/dist/oauth/openid-client/compatibility.d.mts +1 -0
- package/dist/oauth/openid-client/compatibility.mjs +6 -0
- package/dist/oauth/openid-client/compatibility.mjs.map +1 -0
- package/dist/oauth/openid-client/configuration.mjs +305 -0
- package/dist/oauth/openid-client/configuration.mjs.map +1 -0
- package/dist/oauth/openid-client/connected/configuration.mjs +338 -0
- package/dist/oauth/openid-client/connected/configuration.mjs.map +1 -0
- package/dist/oauth/openid-client/connected/models.d.mts +42 -0
- package/dist/oauth/openid-client/connected/protocol.d.mts +16 -0
- package/dist/oauth/openid-client/connected/protocol.mjs +402 -0
- package/dist/oauth/openid-client/connected/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/models.d.mts +67 -0
- package/dist/oauth/openid-client/models.mjs +16 -0
- package/dist/oauth/openid-client/models.mjs.map +1 -0
- package/dist/oauth/openid-client/protocol.d.mts +27 -0
- package/dist/oauth/openid-client/protocol.mjs +218 -0
- package/dist/oauth/openid-client/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/transport.mjs +59 -0
- package/dist/oauth/openid-client/transport.mjs.map +1 -0
- package/dist/oauth/policy.d.mts +18 -0
- package/dist/oauth/policy.mjs +16 -0
- package/dist/oauth/policy.mjs.map +1 -0
- package/dist/oauth/registration.d.mts +24 -0
- package/dist/oauth/registration.mjs +177 -0
- package/dist/oauth/registration.mjs.map +1 -0
- package/dist/oauth/registrationModels.d.mts +152 -0
- package/dist/oauth/registrationModels.mjs +93 -0
- package/dist/oauth/registrationModels.mjs.map +1 -0
- package/dist/oauth/registrationSecrets.mjs +70 -0
- package/dist/oauth/registrationSecrets.mjs.map +1 -0
- package/dist/oauth/schema.d.mts +86 -0
- package/dist/oauth/schema.mjs +81 -0
- package/dist/oauth/schema.mjs.map +1 -0
- package/dist/oauth/signInErrors.d.mts +17 -0
- package/dist/oauth/signInErrors.mjs +16 -0
- package/dist/oauth/signInErrors.mjs.map +1 -0
- package/dist/oauth/signInModels.d.mts +343 -0
- package/dist/oauth/signInModels.mjs +181 -0
- package/dist/oauth/signInModels.mjs.map +1 -0
- package/dist/oauth/signInModule.d.mts +1546 -0
- package/dist/oauth/signInModule.mjs +430 -0
- package/dist/oauth/signInModule.mjs.map +1 -0
- package/dist/oauth/signInSnapshot.mjs +29 -0
- package/dist/oauth/signInSnapshot.mjs.map +1 -0
- package/dist/oauth/transactionEncryption.d.mts +14 -0
- package/dist/oauth/transactionEncryption.mjs +129 -0
- package/dist/oauth/transactionEncryption.mjs.map +1 -0
- package/dist/operations/RequestBindingConfig.d.mts +11 -0
- package/dist/operations/RequestBindingConfig.mjs +10 -0
- package/dist/operations/RequestBindingConfig.mjs.map +1 -0
- package/dist/operations/actions.d.mts +947 -0
- package/dist/operations/actions.mjs +148 -0
- package/dist/operations/actions.mjs.map +1 -0
- package/dist/operations/context.d.mts +63 -0
- package/dist/operations/context.mjs +55 -0
- package/dist/operations/context.mjs.map +1 -0
- package/dist/operations/credentials.d.mts +39 -0
- package/dist/operations/credentials.mjs +60 -0
- package/dist/operations/credentials.mjs.map +1 -0
- package/dist/operations/errors.d.mts +24 -0
- package/dist/operations/errors.mjs +31 -0
- package/dist/operations/errors.mjs.map +1 -0
- package/dist/operations/operation.d.mts +124 -0
- package/dist/operations/operation.mjs +220 -0
- package/dist/operations/operation.mjs.map +1 -0
- package/dist/operations/requestBinding.d.mts +46 -0
- package/dist/operations/requestBinding.mjs +130 -0
- package/dist/operations/requestBinding.mjs.map +1 -0
- package/dist/operations/requestBindingModels.d.mts +13 -0
- package/dist/operations/requestBindingModels.mjs +12 -0
- package/dist/operations/requestBindingModels.mjs.map +1 -0
- package/dist/operations/reveals.d.mts +28 -0
- package/dist/operations/reveals.mjs +88 -0
- package/dist/operations/reveals.mjs.map +1 -0
- package/dist/passkey/PasskeyActionEvidence.d.mts +22 -0
- package/dist/passkey/PasskeyActionEvidence.mjs +9 -0
- package/dist/passkey/PasskeyActionEvidence.mjs.map +1 -0
- package/dist/passkey/PasskeyCredentials.d.mts +16 -0
- package/dist/passkey/PasskeyCredentials.mjs +9 -0
- package/dist/passkey/PasskeyCredentials.mjs.map +1 -0
- package/dist/passkey/PasskeyEnrollmentContext.d.mts +22 -0
- package/dist/passkey/PasskeyEnrollmentContext.mjs +9 -0
- package/dist/passkey/PasskeyEnrollmentContext.mjs.map +1 -0
- package/dist/passkey/PasskeyManagementPersistence.d.mts +106 -0
- package/dist/passkey/PasskeyManagementPersistence.mjs +9 -0
- package/dist/passkey/PasskeyManagementPersistence.mjs.map +1 -0
- package/dist/passkey/PasskeyPersistence.d.mts +63 -0
- package/dist/passkey/PasskeyPersistence.mjs +10 -0
- package/dist/passkey/PasskeyPersistence.mjs.map +1 -0
- package/dist/passkey/PasskeyProtocol.d.mts +38 -0
- package/dist/passkey/PasskeyProtocol.mjs +11 -0
- package/dist/passkey/PasskeyProtocol.mjs.map +1 -0
- package/dist/passkey/actions.d.mts +50 -0
- package/dist/passkey/actions.mjs +376 -0
- package/dist/passkey/actions.mjs.map +1 -0
- package/dist/passkey/browser/PasskeyBrowser.d.mts +18 -0
- package/dist/passkey/browser/PasskeyBrowser.mjs +9 -0
- package/dist/passkey/browser/PasskeyBrowser.mjs.map +1 -0
- package/dist/passkey/browser/models.d.mts +38 -0
- package/dist/passkey/browser/models.mjs +41 -0
- package/dist/passkey/browser/models.mjs.map +1 -0
- package/dist/passkey/browser/simplewebauthn.d.mts +17 -0
- package/dist/passkey/browser/simplewebauthn.mjs +411 -0
- package/dist/passkey/browser/simplewebauthn.mjs.map +1 -0
- package/dist/passkey/definition.d.mts +5626 -0
- package/dist/passkey/definition.mjs +114 -0
- package/dist/passkey/definition.mjs.map +1 -0
- package/dist/passkey/errors.d.mts +20 -0
- package/dist/passkey/errors.mjs +20 -0
- package/dist/passkey/errors.mjs.map +1 -0
- package/dist/passkey/management.mjs +276 -0
- package/dist/passkey/management.mjs.map +1 -0
- package/dist/passkey/models.d.mts +1245 -0
- package/dist/passkey/models.mjs +301 -0
- package/dist/passkey/models.mjs.map +1 -0
- package/dist/passkey/module.d.mts +2132 -0
- package/dist/passkey/module.mjs +174 -0
- package/dist/passkey/module.mjs.map +1 -0
- package/dist/passkey/pending.mjs +99 -0
- package/dist/passkey/pending.mjs.map +1 -0
- package/dist/passkey/policy.d.mts +48 -0
- package/dist/passkey/policy.mjs +77 -0
- package/dist/passkey/policy.mjs.map +1 -0
- package/dist/passkey/registration.mjs +107 -0
- package/dist/passkey/registration.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/configuration.mjs +45 -0
- package/dist/passkey/simplewebauthn/configuration.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/models.d.mts +21 -0
- package/dist/passkey/simplewebauthn/models.mjs +8 -0
- package/dist/passkey/simplewebauthn/models.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/protocol.d.mts +62 -0
- package/dist/passkey/simplewebauthn/protocol.mjs +402 -0
- package/dist/passkey/simplewebauthn/protocol.mjs.map +1 -0
- package/dist/passkey/snapshot.mjs +31 -0
- package/dist/passkey/snapshot.mjs.map +1 -0
- package/dist/passkey/stepUp.mjs +101 -0
- package/dist/passkey/stepUp.mjs.map +1 -0
- package/dist/password/CompromisedPasswords.d.mts +26 -0
- package/dist/password/CompromisedPasswords.mjs +23 -0
- package/dist/password/CompromisedPasswords.mjs.map +1 -0
- package/dist/password/NewPasswordCheck.d.mts +21 -0
- package/dist/password/NewPasswordCheck.mjs +39 -0
- package/dist/password/NewPasswordCheck.mjs.map +1 -0
- package/dist/password/PasswordHashing.d.mts +24 -0
- package/dist/password/PasswordHashing.mjs +96 -0
- package/dist/password/PasswordHashing.mjs.map +1 -0
- package/dist/password/PasswordKdfAdmission.d.mts +19 -0
- package/dist/password/PasswordKdfAdmission.mjs +25 -0
- package/dist/password/PasswordKdfAdmission.mjs.map +1 -0
- package/dist/password/configuration.d.mts +43 -0
- package/dist/password/configuration.mjs +64 -0
- package/dist/password/configuration.mjs.map +1 -0
- package/dist/password/defaults.mjs +13 -0
- package/dist/password/defaults.mjs.map +1 -0
- package/dist/password/encoding.mjs +64 -0
- package/dist/password/encoding.mjs.map +1 -0
- package/dist/password/errors.d.mts +28 -0
- package/dist/password/errors.mjs +25 -0
- package/dist/password/errors.mjs.map +1 -0
- package/dist/password/methods/PasswordActionEvidence.d.mts +38 -0
- package/dist/password/methods/PasswordActionEvidence.mjs +22 -0
- package/dist/password/methods/PasswordActionEvidence.mjs.map +1 -0
- package/dist/password/methods/PasswordPersistence.d.mts +102 -0
- package/dist/password/methods/PasswordPersistence.mjs +13 -0
- package/dist/password/methods/PasswordPersistence.mjs.map +1 -0
- package/dist/password/methods/PasswordPreparedPersistence.d.mts +111 -0
- package/dist/password/methods/contracts.d.mts +43 -0
- package/dist/password/methods/contracts.mjs +33 -0
- package/dist/password/methods/contracts.mjs.map +1 -0
- package/dist/password/methods/definition.d.mts +3813 -0
- package/dist/password/methods/definition.mjs +56 -0
- package/dist/password/methods/definition.mjs.map +1 -0
- package/dist/password/methods/errors.d.mts +15 -0
- package/dist/password/methods/errors.mjs +11 -0
- package/dist/password/methods/errors.mjs.map +1 -0
- package/dist/password/methods/models.d.mts +70 -0
- package/dist/password/methods/models.mjs +44 -0
- package/dist/password/methods/models.mjs.map +1 -0
- package/dist/password/methods/module.d.mts +3567 -0
- package/dist/password/methods/module.mjs +553 -0
- package/dist/password/methods/module.mjs.map +1 -0
- package/dist/password/methods/policy.d.mts +84 -0
- package/dist/password/methods/policy.mjs +80 -0
- package/dist/password/methods/policy.mjs.map +1 -0
- package/dist/password/methods/preparation.mjs +54 -0
- package/dist/password/methods/preparation.mjs.map +1 -0
- package/dist/password/methods/prepared.d.mts +53 -0
- package/dist/password/methods/prepared.mjs +610 -0
- package/dist/password/methods/prepared.mjs.map +1 -0
- package/dist/password/methods/preparedModels.d.mts +1295 -0
- package/dist/password/methods/preparedModels.mjs +278 -0
- package/dist/password/methods/preparedModels.mjs.map +1 -0
- package/dist/password/methods/signIn.d.mts +180 -0
- package/dist/password/methods/signIn.mjs +73 -0
- package/dist/password/methods/signIn.mjs.map +1 -0
- package/dist/password/methods/snapshot.mjs +38 -0
- package/dist/password/methods/snapshot.mjs.map +1 -0
- package/dist/password/methods/verification.mjs +138 -0
- package/dist/password/methods/verification.mjs.map +1 -0
- package/dist/password/models.d.mts +13 -0
- package/dist/password/models.mjs +12 -0
- package/dist/password/models.mjs.map +1 -0
- package/dist/password/policy.d.mts +33 -0
- package/dist/password/policy.mjs +37 -0
- package/dist/password/policy.mjs.map +1 -0
- package/dist/phone/PhoneActionEvidence.d.mts +23 -0
- package/dist/phone/PhoneActionEvidence.mjs +10 -0
- package/dist/phone/PhoneActionEvidence.mjs.map +1 -0
- package/dist/phone/PhoneAdmission.d.mts +29 -0
- package/dist/phone/PhoneAdmission.mjs +10 -0
- package/dist/phone/PhoneAdmission.mjs.map +1 -0
- package/dist/phone/PhoneDeliveryEligibility.d.mts +11 -0
- package/dist/phone/PhoneDeliveryEligibility.mjs +8 -0
- package/dist/phone/PhoneDeliveryEligibility.mjs.map +1 -0
- package/dist/phone/PhonePersistence.d.mts +33 -0
- package/dist/phone/PhonePersistence.mjs +10 -0
- package/dist/phone/PhonePersistence.mjs.map +1 -0
- package/dist/phone/PhoneRequestContext.d.mts +10 -0
- package/dist/phone/PhoneRequestContext.mjs +8 -0
- package/dist/phone/PhoneRequestContext.mjs.map +1 -0
- package/dist/phone/PhoneSignInTargets.d.mts +19 -0
- package/dist/phone/PhoneSignInTargets.mjs +13 -0
- package/dist/phone/PhoneSignInTargets.mjs.map +1 -0
- package/dist/phone/definition.d.mts +7190 -0
- package/dist/phone/definition.mjs +28 -0
- package/dist/phone/definition.mjs.map +1 -0
- package/dist/phone/failure.mjs +23 -0
- package/dist/phone/failure.mjs.map +1 -0
- package/dist/phone/lifecycle.mjs +427 -0
- package/dist/phone/lifecycle.mjs.map +1 -0
- package/dist/phone/lifecycleModels.d.mts +164 -0
- package/dist/phone/lifecycleModels.mjs +91 -0
- package/dist/phone/lifecycleModels.mjs.map +1 -0
- package/dist/phone/models.d.mts +41 -0
- package/dist/phone/models.mjs +29 -0
- package/dist/phone/models.mjs.map +1 -0
- package/dist/phone/module.d.mts +6027 -0
- package/dist/phone/module.mjs +293 -0
- package/dist/phone/module.mjs.map +1 -0
- package/dist/proofs/EmailProofDelivery.d.mts +13 -0
- package/dist/proofs/EmailProofDelivery.mjs +11 -0
- package/dist/proofs/EmailProofDelivery.mjs.map +1 -0
- package/dist/proofs/HostIngressLimiter.d.mts +20 -0
- package/dist/proofs/HostIngressLimiter.mjs +13 -0
- package/dist/proofs/HostIngressLimiter.mjs.map +1 -0
- package/dist/proofs/ProofPersistence.d.mts +140 -0
- package/dist/proofs/ProofPersistence.mjs +13 -0
- package/dist/proofs/ProofPersistence.mjs.map +1 -0
- package/dist/proofs/SmsProofDelivery.d.mts +13 -0
- package/dist/proofs/SmsProofDelivery.mjs +11 -0
- package/dist/proofs/SmsProofDelivery.mjs.map +1 -0
- package/dist/proofs/abuse.d.mts +15 -0
- package/dist/proofs/abuse.mjs +12 -0
- package/dist/proofs/abuse.mjs.map +1 -0
- package/dist/proofs/completion.d.mts +22 -0
- package/dist/proofs/crypto.d.mts +196 -0
- package/dist/proofs/crypto.mjs +189 -0
- package/dist/proofs/crypto.mjs.map +1 -0
- package/dist/proofs/definition.d.mts +335 -0
- package/dist/proofs/definition.mjs +10 -0
- package/dist/proofs/definition.mjs.map +1 -0
- package/dist/proofs/delivery.d.mts +30 -0
- package/dist/proofs/delivery.mjs +26 -0
- package/dist/proofs/delivery.mjs.map +1 -0
- package/dist/proofs/dispatch.d.mts +20 -0
- package/dist/proofs/dispatch.mjs +54 -0
- package/dist/proofs/dispatch.mjs.map +1 -0
- package/dist/proofs/errors.d.mts +21 -0
- package/dist/proofs/errors.mjs +25 -0
- package/dist/proofs/errors.mjs.map +1 -0
- package/dist/proofs/models.d.mts +141 -0
- package/dist/proofs/models.mjs +93 -0
- package/dist/proofs/models.mjs.map +1 -0
- package/dist/proofs/module.d.mts +344 -0
- package/dist/proofs/module.mjs +350 -0
- package/dist/proofs/module.mjs.map +1 -0
- package/dist/proofs/policy.d.mts +152 -0
- package/dist/proofs/policy.mjs +51 -0
- package/dist/proofs/policy.mjs.map +1 -0
- package/dist/sessions/AuthenticationAuthority.d.mts +31 -0
- package/dist/sessions/AuthenticationAuthority.mjs +8 -0
- package/dist/sessions/AuthenticationAuthority.mjs.map +1 -0
- package/dist/sessions/PendingAuthentication.d.mts +108 -0
- package/dist/sessions/PendingAuthentication.mjs +40 -0
- package/dist/sessions/PendingAuthentication.mjs.map +1 -0
- package/dist/sessions/SessionStepUpPersistence.d.mts +152 -0
- package/dist/sessions/SessionStepUpPersistence.mjs +63 -0
- package/dist/sessions/SessionStepUpPersistence.mjs.map +1 -0
- package/dist/sessions/assurance.d.mts +163 -0
- package/dist/sessions/assurance.mjs +95 -0
- package/dist/sessions/assurance.mjs.map +1 -0
- package/dist/sessions/commit.d.mts +13 -0
- package/dist/sessions/configuration.d.mts +46 -0
- package/dist/sessions/configuration.mjs +55 -0
- package/dist/sessions/configuration.mjs.map +1 -0
- package/dist/sessions/contract.d.mts +663 -0
- package/dist/sessions/contract.mjs +174 -0
- package/dist/sessions/contract.mjs.map +1 -0
- package/dist/sessions/crypto.d.mts +24 -0
- package/dist/sessions/crypto.mjs +106 -0
- package/dist/sessions/crypto.mjs.map +1 -0
- package/dist/sessions/definition.d.mts +11 -0
- package/dist/sessions/definition.mjs +10 -0
- package/dist/sessions/definition.mjs.map +1 -0
- package/dist/sessions/errors.d.mts +35 -0
- package/dist/sessions/errors.mjs +34 -0
- package/dist/sessions/errors.mjs.map +1 -0
- package/dist/sessions/invalidation.d.mts +23 -0
- package/dist/sessions/invalidation.mjs +33 -0
- package/dist/sessions/invalidation.mjs.map +1 -0
- package/dist/sessions/models.d.mts +143 -0
- package/dist/sessions/models.mjs +94 -0
- package/dist/sessions/models.mjs.map +1 -0
- package/dist/sessions/module.d.mts +1091 -0
- package/dist/sessions/module.mjs +943 -0
- package/dist/sessions/module.mjs.map +1 -0
- package/dist/sessions/persistence.d.mts +93 -0
- package/dist/sessions/policy.d.mts +80 -0
- package/dist/sessions/policy.mjs +66 -0
- package/dist/sessions/policy.mjs.map +1 -0
- package/dist/testing/conformance/AuthStore.d.mts +11 -0
- package/dist/testing/conformance/AuthStore.mjs +173 -0
- package/dist/testing/conformance/AuthStore.mjs.map +1 -0
- package/dist/testing/conformance/OAuthConnectionStore.d.mts +11 -0
- package/dist/testing/conformance/OAuthConnectionStore.mjs +102 -0
- package/dist/testing/conformance/OAuthConnectionStore.mjs.map +1 -0
- package/dist/testing/conformance/OAuthStateStore.d.mts +11 -0
- package/dist/testing/conformance/OAuthStateStore.mjs +45 -0
- package/dist/testing/conformance/OAuthStateStore.mjs.map +1 -0
- package/dist/testing/conformance/PasswordCredentialStore.d.mts +20 -0
- package/dist/testing/conformance/PasswordCredentialStore.mjs +103 -0
- package/dist/testing/conformance/PasswordCredentialStore.mjs.map +1 -0
- package/dist/testing/conformance/support.mjs +17 -0
- package/dist/testing/conformance/support.mjs.map +1 -0
- package/dist/testing/crypto.d.mts +11 -0
- package/dist/testing/crypto.mjs +41 -0
- package/dist/testing/crypto.mjs.map +1 -0
- package/dist/testing/keyring.d.mts +9 -0
- package/dist/testing/keyring.mjs +17 -0
- package/dist/testing/keyring.mjs.map +1 -0
- package/dist/totp/TotpActionEvidence.d.mts +18 -0
- package/dist/totp/TotpActionEvidence.mjs +8 -0
- package/dist/totp/TotpActionEvidence.mjs.map +1 -0
- package/dist/totp/TotpPersistence.d.mts +19 -0
- package/dist/totp/TotpPersistence.mjs +8 -0
- package/dist/totp/TotpPersistence.mjs.map +1 -0
- package/dist/totp/TotpSecretKeys.d.mts +15 -0
- package/dist/totp/TotpSecretKeys.mjs +8 -0
- package/dist/totp/TotpSecretKeys.mjs.map +1 -0
- package/dist/totp/crypto.mjs +96 -0
- package/dist/totp/crypto.mjs.map +1 -0
- package/dist/totp/definition.d.mts +764 -0
- package/dist/totp/definition.mjs +24 -0
- package/dist/totp/definition.mjs.map +1 -0
- package/dist/totp/errors.d.mts +16 -0
- package/dist/totp/errors.mjs +18 -0
- package/dist/totp/errors.mjs.map +1 -0
- package/dist/totp/models.d.mts +377 -0
- package/dist/totp/models.mjs +137 -0
- package/dist/totp/models.mjs.map +1 -0
- package/dist/totp/module.d.mts +737 -0
- package/dist/totp/module.mjs +355 -0
- package/dist/totp/module.mjs.map +1 -0
- package/package.json +1 -0
- package/src/Atom.ts +4 -0
- package/src/Auth.ts +16 -0
- package/src/AuthContract.ts +17 -0
- package/src/AuthSession.ts +298 -0
- package/src/AuthStore.ts +367 -0
- package/src/AuthTokenCodec.ts +226 -0
- package/src/Client.ts +9 -0
- package/src/Cloudflare.ts +345 -0
- package/src/Drizzle.ts +378 -0
- package/src/DrizzleD1.ts +136 -0
- package/src/DrizzleLibsql.ts +288 -0
- package/src/DrizzleMysql2.ts +184 -0
- package/src/DrizzlePglite.ts +160 -0
- package/src/DrizzlePostgres.ts +160 -0
- package/src/DrizzleSqliteBun.ts +244 -0
- package/src/DrizzleSqliteDo.ts +473 -0
- package/src/DrizzleSqliteNode.ts +245 -0
- package/src/DrizzleSqliteWasm.ts +245 -0
- package/src/Email.ts +55 -0
- package/src/EmailOtp.ts +250 -0
- package/src/EmailOtpSender.ts +28 -0
- package/src/Errors.ts +103 -0
- package/src/GitHub.ts +16 -0
- package/src/Hooks.ts +50 -0
- package/src/Http.ts +47 -0
- package/src/HttpServer.ts +742 -0
- package/src/Identity.ts +53 -0
- package/src/IdentityResolver.ts +18 -0
- package/src/OAuth.ts +242 -0
- package/src/OpenIdClient.ts +13 -0
- package/src/OpenIdClientConnected.ts +18 -0
- package/src/OperationHttp.ts +14 -0
- package/src/OperationHttpClient.ts +6 -0
- package/src/OperationHttpServer.ts +15 -0
- package/src/Operations.ts +69 -0
- package/src/Passkey.ts +81 -0
- package/src/PasskeyBrowser.ts +19 -0
- package/src/PasskeyContract.ts +212 -0
- package/src/PasskeyPassword.ts +319 -0
- package/src/PasskeySimpleWebAuthn.ts +6 -0
- package/src/Password.ts +113 -0
- package/src/PasswordAuth.ts +197 -0
- package/src/PasswordCredentialStore.ts +140 -0
- package/src/PasswordHasher.ts +147 -0
- package/src/PhoneOtp.ts +32 -0
- package/src/Policy.ts +95 -0
- package/src/Proofs.ts +71 -0
- package/src/Rpc.ts +15 -0
- package/src/Schema.ts +235 -0
- package/src/SessionContract.ts +2 -0
- package/src/Sessions.ts +105 -0
- package/src/Testing.ts +24 -0
- package/src/Totp.ts +28 -0
- package/src/TotpContract.ts +147 -0
- package/src/WebCrypto.ts +61 -0
- package/src/Workflows.ts +12 -0
- package/src/atom/AuthAtomLifetime.ts +87 -0
- package/src/atom/AuthAtomWorkflow.ts +27 -0
- package/src/atom/client.ts +364 -0
- package/src/atom/operations.ts +183 -0
- package/src/atom/scoped-runtime.ts +249 -0
- package/src/auth/Auth.ts +482 -0
- package/src/auth/AuthConfigurationError.ts +9 -0
- package/src/auth/AuthRequest.ts +21 -0
- package/src/auth/AuthStrategy.ts +116 -0
- package/src/auth/ConsumeDecision.ts +4 -0
- package/src/auth/actions.ts +220 -0
- package/src/auth/defaults.ts +23 -0
- package/src/auth/definition.ts +88 -0
- package/src/auth/session.ts +146 -0
- package/src/drizzle/D1BatchStatements.ts +10 -0
- package/src/drizzle/PasswordPreparedPostconditions.ts +30 -0
- package/src/drizzle/SuppliedService.ts +10 -0
- package/src/drizzle/d1-emails.ts +1808 -0
- package/src/drizzle/d1-generated-statement.ts +129 -0
- package/src/drizzle/d1-identity.ts +374 -0
- package/src/drizzle/d1-oauth.ts +338 -0
- package/src/drizzle/d1-passkey.ts +371 -0
- package/src/drizzle/d1-password-prepared.ts +1273 -0
- package/src/drizzle/d1-passwords.ts +2661 -0
- package/src/drizzle/d1-phone.ts +94 -0
- package/src/drizzle/d1-planning.ts +105 -0
- package/src/drizzle/d1-proofs.ts +2305 -0
- package/src/drizzle/d1-sessions.ts +2867 -0
- package/src/drizzle/d1-totp.ts +79 -0
- package/src/drizzle/email-model.ts +512 -0
- package/src/drizzle/email-registration.ts +696 -0
- package/src/drizzle/email-sql.ts +1468 -0
- package/src/drizzle/email-target.ts +243 -0
- package/src/drizzle/model.ts +492 -0
- package/src/drizzle/mysql-emails.ts +323 -0
- package/src/drizzle/mysql-identity.ts +323 -0
- package/src/drizzle/mysql-password-prepared.ts +206 -0
- package/src/drizzle/mysql-passwords.ts +341 -0
- package/src/drizzle/mysql-proofs.ts +183 -0
- package/src/drizzle/mysql-sessions.ts +742 -0
- package/src/drizzle/mysql.ts +686 -0
- package/src/drizzle/oauth-accounts.ts +801 -0
- package/src/drizzle/oauth-connected-access.ts +354 -0
- package/src/drizzle/oauth-connected-collection.ts +324 -0
- package/src/drizzle/oauth-connected-custody.ts +277 -0
- package/src/drizzle/oauth-connected-drivers.ts +463 -0
- package/src/drizzle/oauth-connected-flow.ts +439 -0
- package/src/drizzle/oauth-connected-input.ts +128 -0
- package/src/drizzle/oauth-connected-maintenance.ts +345 -0
- package/src/drizzle/oauth-connected-management.ts +365 -0
- package/src/drizzle/oauth-connected-model.ts +347 -0
- package/src/drizzle/oauth-connected-reference.ts +112 -0
- package/src/drizzle/oauth-connected-settlement.ts +226 -0
- package/src/drizzle/oauth-connected-state.ts +846 -0
- package/src/drizzle/oauth-connected-target.ts +264 -0
- package/src/drizzle/oauth-drivers.ts +567 -0
- package/src/drizzle/oauth-flow.ts +461 -0
- package/src/drizzle/oauth-input.ts +205 -0
- package/src/drizzle/oauth-model.ts +610 -0
- package/src/drizzle/oauth-mysql.ts +10 -0
- package/src/drizzle/oauth-owner.ts +29 -0
- package/src/drizzle/oauth-registration.ts +638 -0
- package/src/drizzle/oauth-state.ts +213 -0
- package/src/drizzle/oauth-target.ts +751 -0
- package/src/drizzle/passkey-admission.ts +333 -0
- package/src/drizzle/passkey-credentials.ts +465 -0
- package/src/drizzle/passkey-drivers.ts +385 -0
- package/src/drizzle/passkey-enrollment.ts +280 -0
- package/src/drizzle/passkey-flow.ts +983 -0
- package/src/drizzle/passkey-management.ts +369 -0
- package/src/drizzle/passkey-model.ts +350 -0
- package/src/drizzle/passkey-registration-ceremony-model.ts +69 -0
- package/src/drizzle/passkey-registration-ceremony.ts +254 -0
- package/src/drizzle/passkey-registration-custody.ts +82 -0
- package/src/drizzle/passkey-registration-write.ts +378 -0
- package/src/drizzle/passkey-state.ts +307 -0
- package/src/drizzle/passkey-target.ts +528 -0
- package/src/drizzle/passkey-write-drivers.ts +396 -0
- package/src/drizzle/passkey-write-model.ts +265 -0
- package/src/drizzle/passkey-write-state.ts +627 -0
- package/src/drizzle/passkey-write-target.ts +406 -0
- package/src/drizzle/password-model.ts +491 -0
- package/src/drizzle/password-prepared-model.ts +259 -0
- package/src/drizzle/password-prepared-sql.ts +1198 -0
- package/src/drizzle/password-prepared-state.ts +232 -0
- package/src/drizzle/password-prepared-target.ts +158 -0
- package/src/drizzle/password-registration.ts +372 -0
- package/src/drizzle/password-sql.ts +2082 -0
- package/src/drizzle/password-target.ts +223 -0
- package/src/drizzle/pg-emails.ts +323 -0
- package/src/drizzle/pg-password-prepared.ts +207 -0
- package/src/drizzle/pg-passwords.ts +340 -0
- package/src/drizzle/pg-proofs.ts +193 -0
- package/src/drizzle/pg-sessions.ts +751 -0
- package/src/drizzle/pg.ts +982 -0
- package/src/drizzle/phone-model.ts +185 -0
- package/src/drizzle/phone-state.ts +802 -0
- package/src/drizzle/phone-target.ts +471 -0
- package/src/drizzle/proof-model.ts +398 -0
- package/src/drizzle/proof-sql.ts +1912 -0
- package/src/drizzle/proof-target.ts +120 -0
- package/src/drizzle/session-model.ts +368 -0
- package/src/drizzle/session-sql.ts +2152 -0
- package/src/drizzle/session-target.ts +335 -0
- package/src/drizzle/sqlite-emails.ts +368 -0
- package/src/drizzle/sqlite-identity.ts +343 -0
- package/src/drizzle/sqlite-password-prepared.ts +262 -0
- package/src/drizzle/sqlite-passwords.ts +499 -0
- package/src/drizzle/sqlite-proofs.ts +204 -0
- package/src/drizzle/sqlite-sessions.ts +972 -0
- package/src/drizzle/sqlite.ts +704 -0
- package/src/drizzle/standalone-guard.ts +38 -0
- package/src/drizzle/step-up-model.ts +129 -0
- package/src/drizzle/step-up-state.ts +141 -0
- package/src/drizzle/totp-model.ts +91 -0
- package/src/drizzle/totp-state.ts +520 -0
- package/src/drizzle/totp-target.ts +304 -0
- package/src/drizzle/transaction-execution.ts +290 -0
- package/src/drizzle/transaction-mysql.ts +104 -0
- package/src/drizzle/transaction-owner.ts +570 -0
- package/src/email/EmailActionEvidence.ts +37 -0
- package/src/email/EmailAddressPersistence.ts +71 -0
- package/src/email/EmailIdentifierNotifier.ts +48 -0
- package/src/email/EmailReturnTargets.ts +50 -0
- package/src/email/EmailSignInTargets.ts +20 -0
- package/src/email/addresses.ts +630 -0
- package/src/email/definition.ts +309 -0
- package/src/email/errors.ts +23 -0
- package/src/email/magicLink.ts +84 -0
- package/src/email/models.ts +50 -0
- package/src/email/module.ts +664 -0
- package/src/email/registration.ts +415 -0
- package/src/email/snapshot.ts +51 -0
- package/src/hooks/LifecycleHooks.ts +136 -0
- package/src/hooks/commit.ts +271 -0
- package/src/hooks/models.ts +111 -0
- package/src/hooks/plugins.ts +87 -0
- package/src/hooks/transactions.ts +51 -0
- package/src/http/auth-api.ts +17 -0
- package/src/http/auth-contract.ts +148 -0
- package/src/http/auth-http.ts +467 -0
- package/src/http/endpoints/get-session.ts +9 -0
- package/src/http/endpoints/password-sign-in.ts +19 -0
- package/src/http/endpoints/request-email-otp.ts +10 -0
- package/src/http/endpoints/set-password.ts +18 -0
- package/src/http/endpoints/sign-out.ts +5 -0
- package/src/http/endpoints/verify-email-otp.ts +15 -0
- package/src/http/models.ts +80 -0
- package/src/http/security.ts +102 -0
- package/src/http/session-contract.ts +92 -0
- package/src/http-operation/OperationHttpInvocation.ts +39 -0
- package/src/http-operation/OperationHttpServerConfig.ts +124 -0
- package/src/http-operation/auth-client.ts +273 -0
- package/src/http-operation/client.ts +453 -0
- package/src/http-operation/configuration-schema.ts +19 -0
- package/src/http-operation/contract.ts +116 -0
- package/src/http-operation/errors.ts +38 -0
- package/src/http-operation/models.ts +42 -0
- package/src/http-operation/private.ts +50 -0
- package/src/http-operation/security.ts +93 -0
- package/src/http-operation/server.ts +544 -0
- package/src/identity/ExternalIdentityMutation.ts +18 -0
- package/src/identity/IdentityMutation.ts +41 -0
- package/src/identity/IdentityRepository.ts +37 -0
- package/src/identity/SubjectLifecycle.ts +80 -0
- package/src/identity/SubjectProvisioner.ts +40 -0
- package/src/identity/codecs.ts +54 -0
- package/src/identity/models.ts +82 -0
- package/src/identity/operations.ts +182 -0
- package/src/index.ts +23 -0
- package/src/internal/AuthStoreDecisions.ts +23 -0
- package/src/internal/CurrentSession.ts +8 -0
- package/src/internal/diagnostics.ts +71 -0
- package/src/oauth/GithubOAuthProvider.ts +106 -0
- package/src/oauth/OAuth.ts +436 -0
- package/src/oauth/OAuthAccountsPersistence.ts +142 -0
- package/src/oauth/OAuthActionEvidence.ts +31 -0
- package/src/oauth/OAuthConnectedActionEvidence.ts +28 -0
- package/src/oauth/OAuthConnectedPersistence.ts +163 -0
- package/src/oauth/OAuthConnectedProtocol.ts +54 -0
- package/src/oauth/OAuthConnectedRevocations.ts +48 -0
- package/src/oauth/OAuthConnectedTokenProtector.ts +240 -0
- package/src/oauth/OAuthConnectedTransactionProtector.ts +56 -0
- package/src/oauth/OAuthConnectedUseAuthority.ts +26 -0
- package/src/oauth/OAuthConnectionStore.ts +59 -0
- package/src/oauth/OAuthLinkTransactionProtector.ts +58 -0
- package/src/oauth/OAuthProtocol.ts +39 -0
- package/src/oauth/OAuthProvider.ts +126 -0
- package/src/oauth/OAuthProviders.ts +53 -0
- package/src/oauth/OAuthRegistrationIntents.ts +42 -0
- package/src/oauth/OAuthReturnTargets.ts +44 -0
- package/src/oauth/OAuthSignInPersistence.ts +91 -0
- package/src/oauth/OAuthStateDecisions.ts +16 -0
- package/src/oauth/OAuthStateStore.ts +102 -0
- package/src/oauth/OAuthTransactionProtector.ts +103 -0
- package/src/oauth/accounts.ts +987 -0
- package/src/oauth/accountsModels.ts +214 -0
- package/src/oauth/connected.ts +995 -0
- package/src/oauth/connectedAccess.ts +644 -0
- package/src/oauth/connectedMaintenance.ts +248 -0
- package/src/oauth/connectedModels.ts +495 -0
- package/src/oauth/definition.ts +414 -0
- package/src/oauth/errors.ts +78 -0
- package/src/oauth/github/identity.ts +26 -0
- package/src/oauth/github/models.ts +37 -0
- package/src/oauth/github/protocol.ts +329 -0
- package/src/oauth/openid-client/ProviderRevocation.ts +22 -0
- package/src/oauth/openid-client/compatibility.ts +47 -0
- package/src/oauth/openid-client/configuration.ts +472 -0
- package/src/oauth/openid-client/connected/configuration.ts +565 -0
- package/src/oauth/openid-client/connected/models.ts +58 -0
- package/src/oauth/openid-client/connected/protocol.ts +866 -0
- package/src/oauth/openid-client/models.ts +78 -0
- package/src/oauth/openid-client/protocol.ts +437 -0
- package/src/oauth/openid-client/transport.ts +67 -0
- package/src/oauth/policy.ts +26 -0
- package/src/oauth/registration.ts +410 -0
- package/src/oauth/registrationModels.ts +115 -0
- package/src/oauth/registrationSecrets.ts +127 -0
- package/src/oauth/schema.ts +102 -0
- package/src/oauth/signInErrors.ts +23 -0
- package/src/oauth/signInModels.ts +266 -0
- package/src/oauth/signInModule.ts +875 -0
- package/src/oauth/signInSnapshot.ts +37 -0
- package/src/oauth/transactionEncryption.ts +198 -0
- package/src/operations/RequestBindingConfig.ts +12 -0
- package/src/operations/actions.ts +342 -0
- package/src/operations/context.ts +130 -0
- package/src/operations/credentials.ts +121 -0
- package/src/operations/errors.ts +53 -0
- package/src/operations/operation.ts +740 -0
- package/src/operations/requestBinding.ts +237 -0
- package/src/operations/requestBindingModels.ts +18 -0
- package/src/operations/reveals.ts +147 -0
- package/src/passkey/PasskeyActionEvidence.ts +25 -0
- package/src/passkey/PasskeyCredentials.ts +16 -0
- package/src/passkey/PasskeyEnrollmentContext.ts +26 -0
- package/src/passkey/PasskeyManagementPersistence.ts +124 -0
- package/src/passkey/PasskeyPersistence.ts +85 -0
- package/src/passkey/PasskeyProtocol.ts +48 -0
- package/src/passkey/actions.ts +905 -0
- package/src/passkey/browser/PasskeyBrowser.ts +26 -0
- package/src/passkey/browser/models.ts +67 -0
- package/src/passkey/browser/simplewebauthn.ts +621 -0
- package/src/passkey/definition.ts +386 -0
- package/src/passkey/errors.ts +39 -0
- package/src/passkey/management.ts +552 -0
- package/src/passkey/models.ts +414 -0
- package/src/passkey/module.ts +367 -0
- package/src/passkey/pending.ts +203 -0
- package/src/passkey/policy.ts +88 -0
- package/src/passkey/registration.ts +251 -0
- package/src/passkey/simplewebauthn/configuration.ts +97 -0
- package/src/passkey/simplewebauthn/models.ts +9 -0
- package/src/passkey/simplewebauthn/protocol.ts +729 -0
- package/src/passkey/snapshot.ts +48 -0
- package/src/passkey/stepUp.ts +212 -0
- package/src/password/CompromisedPasswords.ts +36 -0
- package/src/password/NewPasswordCheck.ts +89 -0
- package/src/password/PasswordHashing.ts +209 -0
- package/src/password/PasswordKdfAdmission.ts +44 -0
- package/src/password/configuration.ts +52 -0
- package/src/password/defaults.ts +15 -0
- package/src/password/encoding.ts +137 -0
- package/src/password/errors.ts +43 -0
- package/src/password/methods/PasswordActionEvidence.ts +41 -0
- package/src/password/methods/PasswordPersistence.ts +128 -0
- package/src/password/methods/PasswordPreparedPersistence.ts +123 -0
- package/src/password/methods/contracts.ts +47 -0
- package/src/password/methods/definition.ts +199 -0
- package/src/password/methods/errors.ts +26 -0
- package/src/password/methods/models.ts +80 -0
- package/src/password/methods/module.ts +986 -0
- package/src/password/methods/policy.ts +68 -0
- package/src/password/methods/preparation.ts +73 -0
- package/src/password/methods/prepared.ts +1199 -0
- package/src/password/methods/preparedModels.ts +496 -0
- package/src/password/methods/signIn.ts +136 -0
- package/src/password/methods/snapshot.ts +53 -0
- package/src/password/methods/verification.ts +266 -0
- package/src/password/models.ts +15 -0
- package/src/password/policy.ts +41 -0
- package/src/phone/PhoneActionEvidence.ts +26 -0
- package/src/phone/PhoneAdmission.ts +29 -0
- package/src/phone/PhoneDeliveryEligibility.ts +9 -0
- package/src/phone/PhonePersistence.ts +43 -0
- package/src/phone/PhoneRequestContext.ts +7 -0
- package/src/phone/PhoneSignInTargets.ts +19 -0
- package/src/phone/definition.ts +87 -0
- package/src/phone/failure.ts +40 -0
- package/src/phone/lifecycle.ts +662 -0
- package/src/phone/lifecycleModels.ts +108 -0
- package/src/phone/models.ts +41 -0
- package/src/phone/module.ts +433 -0
- package/src/proofs/EmailProofDelivery.ts +19 -0
- package/src/proofs/HostIngressLimiter.ts +20 -0
- package/src/proofs/ProofPersistence.ts +172 -0
- package/src/proofs/SmsProofDelivery.ts +19 -0
- package/src/proofs/abuse.ts +23 -0
- package/src/proofs/completion.ts +23 -0
- package/src/proofs/crypto.ts +326 -0
- package/src/proofs/definition.ts +39 -0
- package/src/proofs/delivery.ts +73 -0
- package/src/proofs/dispatch.ts +99 -0
- package/src/proofs/errors.ts +46 -0
- package/src/proofs/models.ts +131 -0
- package/src/proofs/module.ts +620 -0
- package/src/proofs/policy.ts +77 -0
- package/src/sessions/AuthenticationAuthority.ts +51 -0
- package/src/sessions/PendingAuthentication.ts +121 -0
- package/src/sessions/SessionStepUpPersistence.ts +164 -0
- package/src/sessions/assurance.ts +192 -0
- package/src/sessions/commit.ts +13 -0
- package/src/sessions/configuration.ts +133 -0
- package/src/sessions/contract.ts +203 -0
- package/src/sessions/crypto.ts +181 -0
- package/src/sessions/definition.ts +25 -0
- package/src/sessions/errors.ts +68 -0
- package/src/sessions/invalidation.ts +46 -0
- package/src/sessions/models.ts +138 -0
- package/src/sessions/module.ts +1991 -0
- package/src/sessions/persistence.ts +135 -0
- package/src/sessions/policy.ts +103 -0
- package/src/testing/conformance/AuthStore.ts +314 -0
- package/src/testing/conformance/OAuthConnectionStore.ts +167 -0
- package/src/testing/conformance/OAuthStateStore.ts +105 -0
- package/src/testing/conformance/PasswordCredentialStore.ts +205 -0
- package/src/testing/conformance/support.ts +38 -0
- package/src/testing/crypto.ts +55 -0
- package/src/testing/keyring.ts +17 -0
- package/src/totp/TotpActionEvidence.ts +18 -0
- package/src/totp/TotpPersistence.ts +26 -0
- package/src/totp/TotpSecretKeys.ts +15 -0
- package/src/totp/crypto.ts +160 -0
- package/src/totp/definition.ts +78 -0
- package/src/totp/errors.ts +25 -0
- package/src/totp/models.ts +164 -0
- package/src/totp/module.ts +717 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"d1-proofs.mjs","names":[],"sources":["../../src/drizzle/d1-proofs.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- D1 planning bridges consumer Drizzle tables to Effect SQL statements. */\nimport type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport {\n and,\n count,\n eq,\n gte,\n inArray,\n isNull,\n lte,\n notExists,\n or,\n sql,\n type AnyRelations,\n type SQL,\n type Table,\n} from \"drizzle-orm\";\nimport type { EffectDrizzleQueryError } from \"drizzle-orm/effect-core\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Cause, Effect, Schema, Context } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport {\n coordinateCommit,\n CurrentCommitJournal,\n hasCommitScope,\n type CommitJournal,\n type PreparedCommit,\n} from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport { HookConfigurationError } from \"../hooks/models\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport type { ProofCompletionPlan } from \"../proofs/completion\";\nimport { ProofRequestConflict, ProofUnavailable } from \"../proofs/errors\";\nimport {\n ProofBinding,\n type ProofAttemptDecision,\n type ProofCleanupResult,\n type ProofCompletionDecision,\n type ProofDeliveryOutcome,\n type ProofVersion,\n} from \"../proofs/models\";\nimport type { ProofBudget, ProofPolicy } from \"../proofs/policy\";\nimport {\n ProofPersistence,\n type PrepareProofCommit,\n type ProofDeliveryClaim,\n} from \"../proofs/ProofPersistence\";\nimport { balancedD1And } from \"./d1-generated-statement\";\nimport { CurrentD1PlanningDatabase, makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport { column, DrizzleMappingError, isMappedConstraintConflict, updateValues } from \"./model\";\nimport {\n type D1ProofPersistenceMapping,\n requiredProofConstraints,\n type ProofAction,\n type ProofAuthorityInput,\n type ProofCommandDecision,\n type ProofContinuationRecord,\n type ProofPersistenceMapping,\n type ProofScopeKeys,\n type ProofScopeKind,\n} from \"./proof-model\";\n\ntype PlanPrepare<Method extends (...args: any[]) => any, A> = (\n value: Parameters<Parameters<Method>[1]>[0],\n journal: CommitJournal,\n) => PreparedCommit<A>;\n\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype Mapping = D1ProofPersistenceMapping<\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n unknown\n>;\ninterface Planned<A> {\n readonly receipt: A;\n readonly statements: ReadonlyArray<Statement<any>>;\n readonly retryable?: (cause: unknown) => boolean;\n readonly journalGuard?: PreparedCommit<void>;\n readonly postconditions?: ReadonlyArray<Statement<any>>;\n}\n\nconst unavailable = () => ProofUnavailable.make({});\n\nconst everyFailureMatches = (\n cause: Cause.Cause<unknown>,\n classify: ((cause: unknown) => boolean) | undefined,\n): boolean =>\n classify !== undefined &&\n cause.reasons.length > 0 &&\n cause.reasons.every((reason) => Cause.isFailReason(reason) && classify(Cause.fail(reason.error)));\n\nconst conflict = () => ProofRequestConflict.make({});\n\nconst validConstraints = (mapping: Mapping) =>\n Object.entries(requiredProofConstraints).every(\n ([key, value]) => mapping.constraints[key as keyof typeof requiredProofConstraints] === value,\n );\n\nconst canonicalBinding = Schema.encodeSync(Schema.fromJsonString(ProofBinding));\n\nconst sameBinding = (left: ProofBinding, right: ProofBinding) =>\n canonicalBinding(left) === canonicalBinding(right);\n\nconst containsFailure = (failure: unknown, predicate: (value: unknown) => boolean): boolean => {\n const seen = new Set<unknown>();\n const pending: Array<unknown> = [failure];\n\n for (let inspected = 0; inspected < 32 && pending.length > 0; inspected++) {\n const current = pending.shift();\n\n if (current === undefined || current === null || seen.has(current)) continue;\n seen.add(current);\n if (predicate(current)) return true;\n if (Cause.isCause(current)) {\n for (const reason of current.reasons) {\n if (Cause.isFailReason(reason)) pending.push(reason.error);\n else if (Cause.isDieReason(reason)) pending.push(reason.defect);\n }\n continue;\n }\n if (typeof current !== \"object\") continue;\n\n const wrapped = current as {\n readonly cause?: unknown;\n readonly reason?: unknown;\n readonly message?: unknown;\n };\n\n if (wrapped.cause !== undefined) pending.push(wrapped.cause);\n if (wrapped.reason !== undefined) pending.push(wrapped.reason);\n if (wrapped.message !== undefined) pending.push(wrapped.message);\n }\n\n return false;\n};\n\n// Match only the native workerd/D1 SQLite diagnostic. Query wrappers may echo\n// marker parameters, which is not evidence that the guard ran and rolled back.\nconst isGuardFailure = (cause: unknown, marker: string) => {\n const path = `$[${marker.replaceAll(\"'\", \"''\")}]`;\n const nativeMessage = `bad JSON path: '${path}': SQLITE_ERROR`;\n\n return containsFailure(\n cause,\n (value) => value === nativeMessage || value === `D1_ERROR: ${nativeMessage}`,\n );\n};\n\ntype AdapterFailure = DrizzleMappingError | EffectDrizzleQueryError;\n\nconst statement = Effect.fn(function* (query: {\n readonly toSQL: () => { readonly sql: string; readonly params: unknown[] };\n}) {\n const database = yield* CurrentD1PlanningDatabase;\n const rendered = query.toSQL();\n\n return database.$client.unsafe(rendered.sql, rendered.params);\n});\n\nconst readEngineNowMillis = Effect.fn(\"Drizzle.readEngineNowMillis\")(function* (mapping: Mapping) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* database\n .select({ value: mapping.d1.engineNowMillis.as(\"engine_now_millis\") })\n .from(sql`(select 1)`)\n .pipe(\n Effect.flatMap((rows) => {\n const value = Number(rows[0]?.value);\n\n return Number.isFinite(value) ? Effect.succeed(value) : Effect.fail(unavailable());\n }),\n );\n});\n\nconst driverValues = (values: object, entries: ReadonlyArray<readonly [string, unknown]>) => ({\n ...values,\n ...Object.fromEntries(entries),\n});\n\nconst assertion = Effect.fn(function* (condition: SQL, marker: string) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* statement(\n database\n .select({\n ok: sql`case when ${condition} then 1 else json_extract('[]', ${`$[${marker}]`}) end`.as(\n \"ok\",\n ),\n })\n .from(sql`(select 1)`),\n );\n});\n\nconst allocateVersion = (\n mapping: Mapping,\n): Effect.Effect<ProofVersion, ProofUnavailable | DrizzleMappingError> =>\n mapping.allocateVersion !== undefined\n ? mapping.allocateVersion\n : mapping.allocateVersionSync === undefined\n ? Effect.fail(unavailable())\n : Effect.try({\n try: mapping.allocateVersionSync,\n catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n });\n\nconst requestColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.request.table, mapping.request.moduleId),\n requestId: column(mapping.request.table, mapping.request.requestId),\n fingerprint: column(mapping.request.table, mapping.request.fingerprint),\n proofId: column(mapping.request.table, mapping.request.proofId),\n retentionUntil: column(mapping.request.table, mapping.request.retentionUntil),\n});\n\nconst seriesColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.series.table, mapping.series.moduleId),\n purpose: column(mapping.series.table, mapping.series.purpose),\n scopeKey: column(mapping.series.table, mapping.series.scopeKey),\n activeProofId: column(mapping.series.table, mapping.series.activeProofId),\n lastIssueAt: column(mapping.series.table, mapping.series.lastIssueAt),\n version: column(mapping.series.table, mapping.series.version),\n});\n\nconst generationColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.generation.table, mapping.generation.moduleId),\n purpose: column(mapping.generation.table, mapping.generation.purpose),\n proofId: column(mapping.generation.table, mapping.generation.proofId),\n seriesKey: column(mapping.generation.table, mapping.generation.seriesKey),\n deliveryId: column(mapping.generation.table, mapping.generation.deliveryId),\n verifierKeyId: column(mapping.generation.table, mapping.generation.verifierKeyId),\n verifierDigest: column(mapping.generation.table, mapping.generation.verifierDigest),\n expiresAt: column(mapping.generation.table, mapping.generation.expiresAt),\n version: column(mapping.generation.table, mapping.generation.version),\n state: column(mapping.generation.table, mapping.generation.state),\n sendCount: column(mapping.generation.table, mapping.generation.sendCount),\n deliveryState: column(mapping.generation.table, mapping.generation.deliveryState),\n claimVersion: column(mapping.generation.table, mapping.generation.claimVersion),\n claimDeadline: column(mapping.generation.table, mapping.generation.claimDeadline),\n retryAt: column(mapping.generation.table, mapping.generation.retryAt),\n deliveryRetryMillis: column(mapping.generation.table, mapping.generation.deliveryRetryMillis),\n retentionUntil: column(mapping.generation.table, mapping.generation.retentionUntil),\n});\n\nconst continuationColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.continuation.table, mapping.continuation.moduleId),\n continuationId: column(mapping.continuation.table, mapping.continuation.continuationId),\n digest: column(mapping.continuation.table, mapping.continuation.digest),\n consumed: column(mapping.continuation.table, mapping.continuation.consumed),\n retentionUntil: column(mapping.continuation.table, mapping.continuation.retentionUntil),\n});\n\nconst scopeColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.rateScope.table, mapping.rateScope.moduleId),\n purpose: column(mapping.rateScope.table, mapping.rateScope.purpose),\n action: column(mapping.rateScope.table, mapping.rateScope.action),\n scopeKind: column(mapping.rateScope.table, mapping.rateScope.scopeKind),\n scopeKey: column(mapping.rateScope.table, mapping.rateScope.scopeKey),\n});\n\nconst abuseColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.abuseEvent.table, mapping.abuseEvent.moduleId),\n purpose: column(mapping.abuseEvent.table, mapping.abuseEvent.purpose),\n action: column(mapping.abuseEvent.table, mapping.abuseEvent.action),\n scopeKind: column(mapping.abuseEvent.table, mapping.abuseEvent.scopeKind),\n scopeKey: column(mapping.abuseEvent.table, mapping.abuseEvent.scopeKey),\n commandId: column(mapping.abuseEvent.table, mapping.abuseEvent.commandId),\n occurredAt: column(mapping.abuseEvent.table, mapping.abuseEvent.occurredAt),\n retentionUntil: column(mapping.abuseEvent.table, mapping.abuseEvent.retentionUntil),\n});\n\nconst failureColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.failureEvent.table, mapping.failureEvent.moduleId),\n purpose: column(mapping.failureEvent.table, mapping.failureEvent.purpose),\n seriesKey: column(mapping.failureEvent.table, mapping.failureEvent.seriesKey),\n commandId: column(mapping.failureEvent.table, mapping.failureEvent.commandId),\n occurredAt: column(mapping.failureEvent.table, mapping.failureEvent.occurredAt),\n retentionUntil: column(mapping.failureEvent.table, mapping.failureEvent.retentionUntil),\n});\n\nconst commandColumns = (mapping: Mapping) => ({\n moduleId: column(mapping.command.table, mapping.command.moduleId),\n commandId: column(mapping.command.table, mapping.command.commandId),\n decision: column(mapping.command.table, mapping.command.decision),\n retentionUntil: column(mapping.command.table, mapping.command.retentionUntil),\n});\n\ninterface ScopeEntry {\n readonly kind: ProofScopeKind;\n readonly key: string;\n readonly budget: ProofBudget;\n}\n\nconst scopeEntries = (\n keys: ProofScopeKeys,\n binding: ProofBinding,\n action: ProofAction,\n policy: ProofPolicy,\n) => {\n const suffix = action === \"issue\" ? \"Issues\" : \"Attempts\";\n const simple = action === \"issue\" ? \"issues\" : \"attempts\";\n\n const entries: ScopeEntry[] = [\n { kind: \"action\", key: \"*\", budget: policy.abuse[`action${suffix}`] },\n { kind: \"identifier\", key: keys.identifier, budget: policy.abuse[simple] },\n ];\n\n if (binding._tag !== \"Identifier\")\n entries.push({ kind: \"subject\", key: keys.subject, budget: policy.abuse[`subject${suffix}`] });\n\n return entries;\n};\n\nconst scopeCondition = (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n action: ProofAction,\n entry: ScopeEntry,\n) => {\n const c = abuseColumns(mapping);\n\n return sql`(select count(*) from ${mapping.abuseEvent.table} where ${c.moduleId} = ${sql.param(moduleId, c.moduleId)} and ${c.purpose} = ${sql.param(purpose, c.purpose)} and ${c.action} = ${sql.param(action, c.action)} and ${c.scopeKind} = ${sql.param(entry.kind, c.scopeKind)} and ${c.scopeKey} = ${sql.param(entry.key, c.scopeKey)} and ${c.occurredAt} >= ${mapping.d1.engineInstantMinus(entry.budget.windowMillis)}) < ${entry.budget.limit}`;\n};\n\nconst failureCondition = (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n seriesKey: string,\n policy: ProofPolicy,\n) => {\n const c = failureColumns(mapping);\n\n return sql`(select count(*) from ${mapping.failureEvent.table} where ${c.moduleId} = ${sql.param(moduleId, c.moduleId)} and ${c.purpose} = ${sql.param(purpose, c.purpose)} and ${c.seriesKey} = ${sql.param(seriesKey, c.seriesKey)} and ${c.occurredAt} >= ${mapping.d1.engineInstantMinus(policy.abuse.attempts.windowMillis)}) < ${policy.maximumFailedAttempts}`;\n};\n\nconst readScopeAdmission = Effect.fn(\"DrizzleD1Proof.readScopeAdmission\")(function* (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n action: ProofAction,\n entries: ReadonlyArray<ScopeEntry>,\n now: number,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const c = abuseColumns(mapping);\n const admitted: ScopeEntry[] = [];\n\n for (const entry of entries) {\n const rows = yield* database\n .select({ total: count() })\n .from(mapping.abuseEvent.table)\n .where(\n and(\n eq(c.moduleId, moduleId),\n eq(c.purpose, purpose),\n eq(c.action, action),\n eq(c.scopeKind, entry.kind),\n eq(c.scopeKey, entry.key),\n gte(c.occurredAt, mapping.encodeInstant(now - entry.budget.windowMillis)),\n ),\n );\n\n if (Number(rows[0]?.total ?? 0) < entry.budget.limit) admitted.push(entry);\n }\n\n return admitted;\n});\n\nconst authority = Effect.fn(\"DrizzleD1Proof.authority\")(function* (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n binding: ProofBinding,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n let nativeSubjectId: unknown | undefined;\n let subjectCurrent = true;\n const parts: SQL[] = [];\n\n if (binding._tag !== \"Identifier\") {\n if (\n mapping.authority.subject === undefined ||\n mapping.authority.credential === undefined ||\n mapping.authority.subjectId === undefined\n )\n return yield* unavailable();\n nativeSubjectId = yield* mapping.authority.subjectId.toNative(binding.revision.subjectId);\n const subject = mapping.authority.subject;\n const id = column(subject.table, subject.id);\n const status = column(subject.table, subject.status);\n const revision = column(subject.table, subject.securityRevision);\n\n const subjectRows = yield* database\n .select()\n .from(subject.table)\n .where(eq(id, nativeSubjectId))\n .limit(1);\n\n const subjectRow = subjectRows[0];\n\n subjectCurrent =\n subjectRow !== undefined &&\n subject.isActiveStatus(subjectRow[subject.status]) &&\n subjectRow[subject.securityRevision] === binding.revision.securityRevision;\n parts.push(\n sql`exists(select 1 from ${subject.table} where ${id} = ${sql.param(nativeSubjectId, id)} and ${status} = ${sql.param(subject.d1ActiveStatusValue, status)} and ${revision} = ${sql.param(binding.revision.securityRevision, revision)})`,\n );\n }\n const identifier = mapping.authority.identifier;\n const namespace = column(identifier.table, identifier.namespace);\n const value = column(identifier.table, identifier.value);\n\n const identifierRows = yield* database\n .select()\n .from(identifier.table)\n .where(and(eq(namespace, binding.identifier.namespace), eq(value, binding.identifier.value)));\n\n const input: ProofAuthorityInput<unknown> = {\n moduleId,\n purpose,\n binding,\n ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n };\n\n const identifierCurrent = identifier.isCurrent(input, identifierRows);\n\n parts.push(identifier.d1CurrentCondition(input));\n let credentialsCurrent = true;\n\n if (binding._tag !== \"Identifier\") {\n const credential = mapping.authority.credential!;\n const owner = column(credential.table, credential.subjectId);\n const id = column(credential.table, credential.credentialId);\n const revision = column(credential.table, credential.revision);\n\n const status =\n credential.status === undefined ? undefined : column(credential.table, credential.status);\n\n const expected = [...binding.revision.credentials].sort((a, b) =>\n a.credentialId.localeCompare(b.credentialId),\n );\n\n const rows =\n expected.length === 0\n ? []\n : yield* database\n .select()\n .from(credential.table)\n .where(\n and(\n eq(owner, nativeSubjectId),\n inArray(\n id,\n expected.map((item) => item.credentialId),\n ),\n ),\n );\n\n const actual = rows\n .map((row: any) => ({\n id: row[credential.credentialId],\n revision: row[credential.revision],\n active:\n credential.status === undefined ||\n credential.isActiveStatus?.(row[credential.status]) === true,\n }))\n .sort((a: any, b: any) => String(a.id).localeCompare(String(b.id)));\n\n credentialsCurrent =\n actual.length === expected.length &&\n actual.every(\n (row: any, index: number) =>\n row.active &&\n row.id === expected[index]?.credentialId &&\n row.revision === expected[index]?.revision,\n );\n for (const expectedCredential of expected)\n parts.push(\n sql`exists(select 1 from ${credential.table} where ${owner} = ${sql.param(nativeSubjectId, owner)} and ${id} = ${sql.param(expectedCredential.credentialId, id)} and ${revision} = ${sql.param(expectedCredential.revision, revision)}${status === undefined ? sql`` : sql` and ${status} = ${sql.param(credential.d1ActiveStatusValue, status)}`})`,\n );\n }\n\n return {\n current: subjectCurrent && identifierCurrent && credentialsCurrent,\n condition: balancedD1And(...parts) ?? sql`1 = 1`,\n };\n});\n\nconst anchorStatements = Effect.fn(function* (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n action: ProofAction,\n entries: ReadonlyArray<ScopeEntry>,\n seriesKey: string,\n seriesVersion: ProofVersion,\n includeSeries: boolean,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return [\n ...(yield* Effect.forEach(\n entries,\n Effect.fn(function* (entry) {\n return yield* statement(\n database\n .insert(mapping.rateScope.table)\n .values(\n mapping.rateScope.encodeInsert({\n moduleId,\n purpose,\n action,\n scopeKind: entry.kind,\n scopeKey: entry.key,\n }),\n )\n .onConflictDoNothing(),\n );\n }),\n )),\n ...(includeSeries\n ? [\n yield* statement(\n database\n .insert(mapping.series.table)\n .values(\n mapping.series.encodeInsert({\n moduleId,\n purpose,\n scopeKey: seriesKey,\n version: seriesVersion,\n }),\n )\n .onConflictDoNothing(),\n ),\n ]\n : []),\n ];\n});\n\nconst insertScopeStatements = Effect.fn(function* (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n action: ProofAction,\n commandId: string,\n entries: ReadonlyArray<ScopeEntry>,\n now: number,\n retentionUntil: number,\n marker: string,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return (yield* Effect.forEach(\n entries,\n Effect.fn(function* (entry) {\n return [\n yield* assertion(scopeCondition(mapping, moduleId, purpose, action, entry), marker),\n yield* statement(\n database.insert(mapping.abuseEvent.table).values(\n driverValues(\n mapping.abuseEvent.encodeInsert({\n moduleId,\n purpose,\n action,\n scopeKind: entry.kind,\n scopeKey: entry.key,\n commandId,\n occurredAtMillis: now,\n retentionUntilMillis: retentionUntil,\n }),\n [\n [mapping.abuseEvent.occurredAt, mapping.d1.engineNow],\n [\n mapping.abuseEvent.retentionUntil,\n mapping.d1.engineInstantPlus(retentionUntil - now),\n ],\n ],\n ),\n ),\n ),\n ];\n }),\n )).flat();\n});\n\nconst readSeries = Effect.fn(\"Drizzle.readSeries\")(function* (\n mapping: Mapping,\n moduleId: string,\n purpose: any,\n key: string,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const c = seriesColumns(mapping);\n\n return yield* database\n .select()\n .from(mapping.series.table)\n .where(and(eq(c.moduleId, moduleId), eq(c.purpose, purpose), eq(c.scopeKey, key)))\n .limit(1);\n});\n\nconst readGeneration = Effect.fn(\"Drizzle.readGeneration\")(function* (\n mapping: Mapping,\n moduleId: string,\n proofId: string,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const c = generationColumns(mapping);\n\n return yield* database\n .select()\n .from(mapping.generation.table)\n .where(and(eq(c.moduleId, moduleId), eq(c.proofId, proofId)))\n .limit(1);\n});\n\nconst commandInsert = Effect.fn(function* (\n mapping: Mapping,\n moduleId: string,\n commandId: string,\n kind: \"attempt\" | \"complete\",\n decision: ProofCommandDecision,\n retentionUntil: number,\n nativeRetention?: SQL,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* statement(\n database.insert(mapping.command.table).values(\n driverValues(\n mapping.command.encodeInsert({\n moduleId,\n commandId,\n kind,\n decision,\n retentionUntilMillis: retentionUntil,\n }),\n nativeRetention === undefined ? [] : [[mapping.command.retentionUntil, nativeRetention]],\n ),\n ),\n );\n});\n\nconst issuePlan = Effect.fn(\"Drizzle.issuePlan\")(function* <A>(\n mapping: Mapping,\n input: Parameters<ProofPersistence[\"Service\"][\"issue\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"issue\"], A>,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n const journal = yield* CurrentCommitJournal;\n\n const keys = mapping.scopeKeys({\n moduleId: input.record.moduleId,\n purpose: input.record.purpose,\n binding: input.record.binding,\n });\n\n const current = yield* authority(\n mapping,\n input.record.moduleId,\n input.record.purpose,\n input.record.binding,\n );\n\n const now = yield* readEngineNowMillis(mapping);\n const retentionUntil = now + input.policy.requestRetentionMillis;\n const rc = requestColumns(mapping);\n\n const existingRequest = (yield* database\n .select()\n .from(mapping.request.table)\n .where(and(eq(rc.moduleId, input.record.moduleId), eq(rc.requestId, input.record.requestId)))\n .limit(1))[0];\n\n if (existingRequest !== undefined) {\n const retained = yield* mapping.decodeInstant(existingRequest[mapping.request.retentionUntil]);\n\n if (retained > now) {\n if (existingRequest[mapping.request.fingerprint] !== input.record.fingerprint)\n return yield* conflict();\n const receipt = yield* mapping.request.decodeReceipt(existingRequest);\n\n return {\n receipt: prepare({ _tag: \"Existing\", receipt }, journal) as PreparedCommit<A>,\n statements: [],\n };\n }\n }\n const scopes = scopeEntries(keys, input.record.binding, \"issue\", input.policy);\n\n const initiallyAdmitted = yield* readScopeAdmission(\n mapping,\n input.record.moduleId,\n input.record.purpose,\n \"issue\",\n scopes,\n now,\n );\n\n const actionOpen = initiallyAdmitted.some((entry) => entry.kind === \"action\");\n const admitted = actionOpen ? initiallyAdmitted : [];\n\n const existingSeries = actionOpen\n ? (yield* readSeries(mapping, input.record.moduleId, input.record.purpose, keys.series))[0]\n : undefined;\n\n const seriesVersion = yield* allocateVersion(mapping);\n const active = existingSeries?.[mapping.series.activeProofId] as string | null | undefined;\n\n const lastIssue =\n existingSeries?.[mapping.series.lastIssueAt] === null ||\n existingSeries?.[mapping.series.lastIssueAt] === undefined\n ? undefined\n : yield* mapping.decodeInstant(existingSeries[mapping.series.lastIssueAt]);\n\n const allowed =\n current.current &&\n input.eligible &&\n admitted.length === scopes.length &&\n input.record.issuedAtMillis <= now &&\n input.record.expiresAtMillis > now &&\n (input.supersedes === undefined || input.supersedes === active) &&\n (lastIssue === undefined || now - lastIssue >= input.policy.abuse.resendCooldownMillis);\n\n const receipt = {\n requestId: input.record.requestId,\n reference: {\n proofId: input.record.proofId,\n purpose: input.record.purpose,\n keyId: input.record.verifier.keyId,\n },\n };\n\n const prepared = prepare(\n allowed ? { _tag: \"Issued\", record: input.record } : { _tag: \"Suppressed\", receipt },\n journal,\n );\n\n const statements: Statement<any>[] = [];\n const marker = `effect-auth-proof-guard:issue:${input.record.requestId}`;\n\n if (existingRequest !== undefined)\n statements.push(\n yield* statement(\n database\n .delete(mapping.request.table)\n .where(\n and(\n eq(rc.moduleId, input.record.moduleId),\n eq(rc.requestId, input.record.requestId),\n lte(rc.retentionUntil, mapping.d1.engineNow),\n ),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database.insert(mapping.request.table).values(\n driverValues(\n mapping.request.encodeInsert({\n record: input.record,\n createdAtMillis: now,\n retentionUntilMillis: retentionUntil,\n }),\n [\n [mapping.request.createdAt, mapping.d1.engineNow],\n [\n mapping.request.retentionUntil,\n mapping.d1.engineInstantPlus(input.policy.requestRetentionMillis),\n ],\n ],\n ),\n ),\n ),\n ...(yield* anchorStatements(\n mapping,\n input.record.moduleId,\n input.record.purpose,\n \"issue\",\n actionOpen ? scopes : scopes.slice(0, 1),\n keys.series,\n seriesVersion,\n actionOpen,\n )),\n ...(yield* insertScopeStatements(\n mapping,\n input.record.moduleId,\n input.record.purpose,\n \"issue\",\n input.record.requestId,\n admitted,\n now,\n retentionUntil,\n marker,\n )),\n );\n if (allowed) {\n const sc = seriesColumns(mapping);\n\n const seriesCondition = and(\n eq(sc.moduleId, input.record.moduleId),\n eq(sc.purpose, input.record.purpose),\n eq(sc.scopeKey, keys.series),\n active === null || active === undefined\n ? or(eq(sc.activeProofId, null), sql`${sc.activeProofId} is null`)\n : eq(sc.activeProofId, active),\n lastIssue === undefined\n ? sql`1 = 1`\n : lte(\n sc.lastIssueAt,\n mapping.d1.engineInstantMinus(input.policy.abuse.resendCooldownMillis),\n ),\n );\n\n statements.push(\n yield* assertion(\n and(\n current.condition,\n sql`${mapping.d1.engineNowMillis} >= ${input.record.issuedAtMillis}`,\n sql`${mapping.d1.engineNow} < ${sql.param(mapping.encodeInstant(input.record.expiresAtMillis), generationColumns(mapping).expiresAt)}`,\n sql`exists(select 1 from ${mapping.series.table} where ${seriesCondition})`,\n )!,\n marker,\n ),\n );\n if (active !== null && active !== undefined)\n statements.push(\n yield* statement(\n database\n .update(mapping.generation.table)\n .set(updateValues([[mapping.generation.state, \"superseded\"]]))\n .where(\n and(\n eq(generationColumns(mapping).moduleId, input.record.moduleId),\n eq(generationColumns(mapping).proofId, active),\n eq(generationColumns(mapping).state, \"active\"),\n ),\n ),\n ),\n );\n statements.push(\n yield* statement(\n database.insert(mapping.generation.table).values(\n driverValues(\n mapping.generation.encodeInsert({\n record: input.record,\n seriesKey: keys.series,\n retentionUntilMillis: retentionUntil,\n state: \"active\",\n deliveryState: \"new\",\n policy: input.policy,\n }),\n [\n [\n mapping.generation.retentionUntil,\n mapping.d1.engineInstantPlus(input.policy.requestRetentionMillis),\n ],\n ],\n ),\n ),\n ),\n yield* statement(\n database\n .update(mapping.series.table)\n .set(\n updateValues([\n [mapping.series.activeProofId, input.record.proofId],\n [mapping.series.lastIssueAt, mapping.d1.engineNow],\n [mapping.series.version, seriesVersion],\n ]),\n )\n .where(\n and(\n eq(sc.moduleId, input.record.moduleId),\n eq(sc.purpose, input.record.purpose),\n eq(sc.scopeKey, keys.series),\n ),\n ),\n ),\n );\n }\n\n return {\n receipt: prepared as PreparedCommit<A>,\n statements,\n retryable: (cause: unknown) =>\n isMappedConstraintConflict(mapping.isRequestConflict, cause) ||\n isMappedConstraintConflict(mapping.isSeriesConflict, cause) ||\n isGuardFailure(cause, marker),\n };\n});\n\nconst attemptPlan = Effect.fn(\"Drizzle.attemptPlan\")(function* <A>(\n mapping: Mapping,\n input: Parameters<ProofPersistence[\"Service\"][\"attempt\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"attempt\"], A>,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n const journal = yield* CurrentCommitJournal;\n\n const keys = mapping.scopeKeys({\n moduleId: input.moduleId,\n purpose: input.purpose,\n binding: input.binding,\n });\n\n const current = yield* authority(mapping, input.moduleId, input.purpose, input.binding);\n const command = commandColumns(mapping);\n\n const existingCommand = (yield* database\n .select()\n .from(mapping.command.table)\n .where(and(eq(command.moduleId, input.moduleId), eq(command.commandId, input.continuationId)))\n .limit(1))[0];\n\n if (existingCommand !== undefined) {\n if (existingCommand[mapping.command.decision] === \"rejected\")\n return {\n receipt: prepare({ _tag: \"Rejected\" }, journal) as PreparedCommit<A>,\n statements: [],\n };\n\n return yield* unavailable();\n }\n const now = yield* readEngineNowMillis(mapping);\n const scopes = scopeEntries(keys, input.binding, \"attempt\", input.policy);\n\n const initiallyAdmitted = yield* readScopeAdmission(\n mapping,\n input.moduleId,\n input.purpose,\n \"attempt\",\n scopes,\n now,\n );\n\n const actionOpen = initiallyAdmitted.some((entry) => entry.kind === \"action\");\n const admitted = actionOpen ? initiallyAdmitted : [];\n\n const series = actionOpen\n ? (yield* readSeries(mapping, input.moduleId, input.purpose, keys.series))[0]\n : undefined;\n\n const generation = (yield* readGeneration(mapping, input.moduleId, input.proofId))[0];\n const fc = failureColumns(mapping);\n\n const failureRows = yield* database\n .select({ total: count() })\n .from(mapping.failureEvent.table)\n .where(\n and(\n eq(fc.moduleId, input.moduleId),\n eq(fc.purpose, input.purpose),\n eq(fc.seriesKey, keys.series),\n gte(fc.occurredAt, mapping.encodeInstant(now - input.policy.abuse.attempts.windowMillis)),\n ),\n );\n\n const failures = Number(failureRows[0]?.total ?? 0);\n\n const storedBinding =\n generation === undefined ? undefined : yield* mapping.generation.decodeBinding(generation);\n\n const expires =\n generation === undefined\n ? undefined\n : yield* mapping.decodeInstant(generation[mapping.generation.expiresAt]);\n\n const currentGeneration =\n generation !== undefined &&\n generation[mapping.generation.purpose] === input.purpose &&\n generation[mapping.generation.state] === \"active\" &&\n series?.[mapping.series.activeProofId] === input.proofId &&\n storedBinding !== undefined &&\n sameBinding(storedBinding, input.binding) &&\n expires !== undefined &&\n expires > now;\n\n const candidateMatches =\n generation !== undefined &&\n input.candidate !== undefined &&\n generation[mapping.generation.verifierKeyId] === input.candidate.keyId &&\n generation[mapping.generation.verifierDigest] === input.candidate.digest;\n\n const accepted =\n current.current &&\n currentGeneration &&\n candidateMatches &&\n admitted.length === scopes.length &&\n failures < input.policy.maximumFailedAttempts;\n\n const retentionUntil = now + input.policy.requestRetentionMillis;\n const seriesVersion = yield* allocateVersion(mapping);\n\n const statements: Statement<any>[] = [\n ...(yield* anchorStatements(\n mapping,\n input.moduleId,\n input.purpose,\n \"attempt\",\n actionOpen ? scopes : scopes.slice(0, 1),\n keys.series,\n seriesVersion,\n actionOpen,\n )),\n ...(yield* insertScopeStatements(\n mapping,\n input.moduleId,\n input.purpose,\n \"attempt\",\n input.continuationId,\n admitted,\n now,\n retentionUntil,\n `effect-auth-proof-guard:attempt:${input.continuationId}`,\n )),\n ];\n\n const marker = `effect-auth-proof-guard:attempt:${input.continuationId}`;\n\n if (!accepted) {\n const prepared = prepare({ _tag: \"Rejected\" }, journal) as PreparedCommit<A>;\n\n if (\n admitted.length === scopes.length &&\n current.current &&\n currentGeneration &&\n !candidateMatches &&\n failures < input.policy.maximumFailedAttempts\n ) {\n const gc = generationColumns(mapping);\n const sc = seriesColumns(mapping);\n\n statements.push(\n yield* assertion(\n and(\n current.condition,\n sql`exists(select 1 from ${mapping.series.table} where ${sc.moduleId} = ${sql.param(input.moduleId, sc.moduleId)} and ${sc.purpose} = ${sql.param(input.purpose, sc.purpose)} and ${sc.scopeKey} = ${sql.param(keys.series, sc.scopeKey)} and ${sc.activeProofId} = ${sql.param(input.proofId, sc.activeProofId)})`,\n sql`exists(select 1 from ${mapping.generation.table} where ${gc.moduleId} = ${sql.param(input.moduleId, gc.moduleId)} and ${gc.proofId} = ${sql.param(input.proofId, gc.proofId)} and ${gc.state} = 'active' and ${gc.expiresAt} > ${mapping.d1.engineNow})`,\n failureCondition(mapping, input.moduleId, input.purpose, keys.series, input.policy),\n )!,\n marker,\n ),\n yield* statement(\n database.insert(mapping.failureEvent.table).values(\n driverValues(\n mapping.failureEvent.encodeInsert({\n moduleId: input.moduleId,\n purpose: input.purpose,\n seriesKey: keys.series,\n commandId: input.continuationId,\n occurredAtMillis: now,\n retentionUntilMillis: retentionUntil,\n }),\n [\n [mapping.failureEvent.occurredAt, mapping.d1.engineNow],\n [\n mapping.failureEvent.retentionUntil,\n mapping.d1.engineInstantPlus(input.policy.requestRetentionMillis),\n ],\n ],\n ),\n ),\n ),\n );\n }\n statements.push(\n yield* commandInsert(\n mapping,\n input.moduleId,\n input.continuationId,\n \"attempt\",\n \"rejected\",\n retentionUntil,\n mapping.d1.engineInstantPlus(input.policy.requestRetentionMillis),\n ),\n );\n\n return {\n receipt: prepared,\n statements,\n retryable: (cause: unknown) =>\n isMappedConstraintConflict(mapping.isCommandConflict, cause) ||\n isMappedConstraintConflict(mapping.isSeriesConflict, cause) ||\n isGuardFailure(cause, marker),\n };\n }\n const version = yield* allocateVersion(mapping);\n const continuationExpires = Math.min(expires!, now + input.policy.continuationLifetimeMillis);\n\n const continuation: ProofContinuationRecord = {\n moduleId: input.moduleId,\n purpose: input.purpose,\n continuationId: input.continuationId,\n digest: input.continuationDigest,\n proofId: input.proofId,\n seriesKey: keys.series,\n binding: input.binding,\n expiresAtMillis: continuationExpires,\n version,\n };\n\n const decision: ProofAttemptDecision = {\n _tag: \"Accepted\",\n continuation: {\n continuationId: input.continuationId,\n purpose: input.purpose,\n expiresAtMillis: continuationExpires,\n },\n };\n\n const prepared = prepare(decision, journal) as PreparedCommit<A>;\n const gc = generationColumns(mapping);\n const sc = seriesColumns(mapping);\n\n statements.push(\n yield* assertion(\n and(\n current.condition,\n failureCondition(mapping, input.moduleId, input.purpose, keys.series, input.policy),\n sql`exists(select 1 from ${mapping.series.table} where ${sc.moduleId} = ${sql.param(input.moduleId, sc.moduleId)} and ${sc.purpose} = ${sql.param(input.purpose, sc.purpose)} and ${sc.scopeKey} = ${sql.param(keys.series, sc.scopeKey)} and ${sc.activeProofId} = ${sql.param(input.proofId, sc.activeProofId)})`,\n sql`exists(select 1 from ${mapping.generation.table} where ${gc.moduleId} = ${sql.param(input.moduleId, gc.moduleId)} and ${gc.proofId} = ${sql.param(input.proofId, gc.proofId)} and ${gc.purpose} = ${sql.param(input.purpose, gc.purpose)} and ${gc.state} = 'active' and ${gc.verifierKeyId} = ${sql.param(input.candidate!.keyId, gc.verifierKeyId)} and ${gc.verifierDigest} = ${sql.param(input.candidate!.digest, gc.verifierDigest)} and ${gc.expiresAt} > ${mapping.d1.engineNow})`,\n )!,\n marker,\n ),\n yield* commandInsert(\n mapping,\n input.moduleId,\n input.continuationId,\n \"attempt\",\n \"accepted\",\n retentionUntil,\n mapping.d1.engineInstantPlus(input.policy.requestRetentionMillis),\n ),\n yield* statement(\n database\n .update(mapping.generation.table)\n .set(updateValues([[mapping.generation.state, \"consumed\"]]))\n .where(\n and(\n eq(gc.moduleId, input.moduleId),\n eq(gc.proofId, input.proofId),\n eq(gc.state, \"active\"),\n ),\n ),\n ),\n yield* statement(\n database.insert(mapping.continuation.table).values(\n driverValues(\n mapping.continuation.encodeInsert({\n ...continuation,\n retentionUntilMillis: retentionUntil,\n }),\n [\n [\n mapping.continuation.retentionUntil,\n mapping.d1.engineInstantPlus(input.policy.requestRetentionMillis),\n ],\n ],\n ),\n ),\n ),\n );\n\n return {\n receipt: prepared,\n statements,\n retryable: (cause: unknown) =>\n isMappedConstraintConflict(mapping.isCommandConflict, cause) ||\n isMappedConstraintConflict(mapping.isSeriesConflict, cause) ||\n isGuardFailure(cause, marker),\n };\n});\n\nconst inspectD1Completion = Effect.fn(\"DrizzleD1Proof.inspectCompletion\")(function* (\n mapping: Mapping,\n input: ProofCompletionPlan[\"input\"],\n) {\n const database = yield* CurrentD1PlanningDatabase;\n\n const keys = mapping.scopeKeys({\n moduleId: input.moduleId,\n purpose: input.purpose,\n binding: input.binding,\n });\n\n const current = yield* authority(mapping, input.moduleId, input.purpose, input.binding);\n const c = continuationColumns(mapping);\n\n const row = (yield* database\n .select()\n .from(mapping.continuation.table)\n .where(and(eq(c.moduleId, input.moduleId), eq(c.continuationId, input.continuationId)))\n .limit(1))[0];\n\n const now = yield* readEngineNowMillis(mapping);\n const record = row === undefined ? undefined : yield* mapping.continuation.decode(row);\n\n const accepted =\n current.current &&\n record !== undefined &&\n record.moduleId === input.moduleId &&\n record.continuationId === input.continuationId &&\n record.purpose === input.purpose &&\n record.digest === input.continuationDigest &&\n record.seriesKey === keys.series &&\n sameBinding(record.binding, input.binding) &&\n row[mapping.continuation.consumed] === false &&\n record.expiresAtMillis > now;\n\n const immutable = [\n mapping.continuation.moduleId,\n mapping.continuation.purpose,\n mapping.continuation.continuationId,\n mapping.continuation.digest,\n mapping.continuation.proofId,\n mapping.continuation.seriesKey,\n mapping.continuation.binding,\n mapping.continuation.expiresAt,\n mapping.continuation.version,\n mapping.continuation.retentionUntil,\n ];\n\n const exact =\n row === undefined\n ? sql`false`\n : and(...immutable.map((key) => eq(column(mapping.continuation.table, key), row[key])))!;\n\n return {\n accepted,\n record,\n row,\n columns: c,\n condition: and(\n current.condition,\n sql`exists(select 1 from ${mapping.continuation.table} where ${exact} and ${c.consumed} = ${sql.param(false, c.consumed)} and ${column(mapping.continuation.table, mapping.continuation.expiresAt)} > ${mapping.d1.engineNow})`,\n )!,\n appliedCondition:\n row === undefined\n ? sql`false`\n : sql`exists(select 1 from ${mapping.continuation.table} where ${exact} and ${c.consumed} = ${sql.param(true, c.consumed)} and ${column(mapping.continuation.table, mapping.continuation.expiresAt)} > ${mapping.d1.engineNow})`,\n };\n});\n\n/** Read-only preflight plus its exact final-engine-time batch predicate. */\nexport const checkD1ProofCompletion = Effect.fn(\"Drizzle.checkD1ProofCompletion\")(function* (\n mapping: Mapping,\n input: ProofCompletionPlan[\"input\"],\n) {\n return yield* inspectD1Completion(mapping, input);\n});\n\nconst completionPlan = Effect.fn(\"Drizzle.completionPlan\")(function* <A>(\n mapping: Mapping,\n input: Parameters<ProofPersistence[\"Service\"][\"complete\"]>[0],\n prepare: PrepareProofCommit<ProofCompletionDecision, A>,\n) {\n const database = yield* CurrentD1PlanningDatabase;\n const journal = yield* CurrentCommitJournal;\n\n const inspected = yield* inspectD1Completion(mapping, input);\n const { accepted, record, columns: c } = inspected;\n const decision: ProofCompletionDecision = accepted ? \"completed\" : \"rejected\";\n const receipt = prepare(decision, journal) as PreparedCommit<A>;\n\n if (!accepted) return { receipt, statements: [] };\n\n const postconditions = [\n yield* assertion(\n and(\n inspected.appliedCondition,\n sql`exists(select 1 from ${mapping.command.table} where ${column(mapping.command.table, mapping.command.moduleId)} = ${sql.param(input.moduleId, column(mapping.command.table, mapping.command.moduleId))} and ${column(mapping.command.table, mapping.command.commandId)} = ${sql.param(input.continuationDigest, column(mapping.command.table, mapping.command.commandId))} and ${column(mapping.command.table, mapping.command.kind)} = ${sql.param(\"complete\", column(mapping.command.table, mapping.command.kind))} and ${column(mapping.command.table, mapping.command.decision)} = ${sql.param(\"completed\", column(mapping.command.table, mapping.command.decision))} and ${column(mapping.command.table, mapping.command.retentionUntil)} = ${sql.param(mapping.encodeInstant(record!.expiresAtMillis), column(mapping.command.table, mapping.command.retentionUntil))})`,\n )!,\n `effect-auth-proof-guard:complete:${input.continuationId}`,\n ),\n ];\n\n const statements = [\n yield* assertion(\n inspected.condition,\n `effect-auth-proof-guard:complete:${input.continuationId}`,\n ),\n yield* statement(\n database\n .update(mapping.continuation.table)\n .set(updateValues([[mapping.continuation.consumed, true]]))\n .where(\n and(\n eq(c.moduleId, input.moduleId),\n eq(c.continuationId, input.continuationId),\n eq(c.digest, input.continuationDigest),\n eq(c.consumed, false),\n ),\n ),\n ),\n yield* commandInsert(\n mapping,\n input.moduleId,\n input.continuationDigest,\n \"complete\",\n \"completed\",\n record!.expiresAtMillis,\n ),\n ...postconditions,\n ];\n\n return {\n receipt,\n statements,\n postconditions,\n retryable: (cause: unknown) =>\n isMappedConstraintConflict(mapping.isCommandConflict, cause) ||\n isGuardFailure(cause, `effect-auth-proof-guard:complete:${input.continuationId}`),\n };\n});\n\nconst makeProofPlans = (mapping: Mapping) => {\n const run = <A, E, R>(plan: Effect.Effect<Planned<A>, E, R>) =>\n Effect.gen(function* () {\n if (!validConstraints(mapping)) return yield* unavailable();\n\n return yield* plan;\n });\n\n return {\n issue: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"issue\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"issue\"], A>,\n ) =>\n run(\n Effect.gen(function* () {\n return yield* issuePlan(mapping, input, prepare);\n }),\n ),\n attempt: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"attempt\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"attempt\"], A>,\n ) =>\n run(\n Effect.gen(function* () {\n return yield* attemptPlan(mapping, input, prepare);\n }),\n ),\n complete: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"complete\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"complete\"], A>,\n ) =>\n run(\n Effect.gen(function* () {\n return yield* completionPlan(mapping, input, prepare);\n }),\n ),\n claimDelivery: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"claimDelivery\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"claimDelivery\"], A>,\n ) =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* run(\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n\n const row = (yield* readGeneration(mapping, input.moduleId, input.proofId))[0];\n const now = yield* readEngineNowMillis(mapping);\n const c = generationColumns(mapping);\n\n if (row === undefined)\n return { receipt: prepare({ _tag: \"Declined\" }, journal), statements: [] };\n const expires = yield* mapping.decodeInstant(row[mapping.generation.expiresAt]);\n\n const claimDeadline =\n row[mapping.generation.claimDeadline] === null ||\n row[mapping.generation.claimDeadline] === undefined\n ? undefined\n : yield* mapping.decodeInstant(row[mapping.generation.claimDeadline]);\n\n const retryAt =\n row[mapping.generation.retryAt] === null ||\n row[mapping.generation.retryAt] === undefined\n ? undefined\n : yield* mapping.decodeInstant(row[mapping.generation.retryAt]);\n\n const state = row[mapping.generation.deliveryState] as string;\n\n const expiredClaim =\n state === \"claimed\" && claimDeadline !== undefined && claimDeadline <= now;\n\n const effectiveState = expiredClaim ? \"ambiguous\" : state;\n\n const canClaim =\n row[mapping.generation.version] === input.version &&\n row[mapping.generation.deliveryId] === input.deliveryId &&\n row[mapping.generation.state] === \"active\" &&\n expires > now &&\n Number(row[mapping.generation.sendCount]) < input.policy.maximumDeliveryAttempts &&\n (effectiveState === \"new\" ||\n (effectiveState === \"ambiguous\" &&\n input.allowAmbiguousRetry &&\n (retryAt === undefined || retryAt <= now)));\n\n if (!canClaim) {\n const statements = expiredClaim\n ? [\n yield* statement(\n database\n .update(mapping.generation.table)\n .set(updateValues([[mapping.generation.deliveryState, \"ambiguous\"]]))\n .where(\n and(\n eq(c.moduleId, input.moduleId),\n eq(c.proofId, input.proofId),\n eq(c.deliveryState, \"claimed\"),\n lte(c.claimDeadline, mapping.d1.engineNow),\n ),\n ),\n ),\n ]\n : [];\n\n return { receipt: prepare({ _tag: \"Declined\" }, journal), statements };\n }\n const claimVersion = yield* allocateVersion(mapping);\n const decision: ProofDeliveryClaim = { _tag: \"Claimed\", claimVersion };\n\n const condition = and(\n eq(c.moduleId, input.moduleId),\n eq(c.proofId, input.proofId),\n eq(c.version, input.version),\n eq(c.deliveryId, input.deliveryId),\n eq(c.state, \"active\"),\n sql`${c.expiresAt} > ${mapping.d1.engineNow}`,\n sql`${c.sendCount} < ${input.policy.maximumDeliveryAttempts}`,\n effectiveState === \"new\"\n ? eq(c.deliveryState, \"new\")\n : and(\n eq(c.deliveryState, \"ambiguous\"),\n or(sql`${c.retryAt} is null`, lte(c.retryAt, mapping.d1.engineNow)),\n ),\n )!;\n\n return {\n receipt: prepare(decision, journal),\n statements: [\n yield* assertion(\n sql`exists(select 1 from ${mapping.generation.table} where ${condition})`,\n `effect-auth-proof-guard:claim:${input.proofId}`,\n ),\n yield* statement(\n database\n .update(mapping.generation.table)\n .set(\n updateValues([\n [\n mapping.generation.sendCount,\n Number(row[mapping.generation.sendCount]) + 1,\n ],\n [mapping.generation.deliveryState, \"claimed\"],\n [mapping.generation.claimVersion, claimVersion],\n [\n mapping.generation.claimDeadline,\n mapping.d1.engineInstantPlus(input.policy.deliveryClaimMillis),\n ],\n [\n mapping.generation.retryAt,\n mapping.d1.engineInstantPlus(input.policy.deliveryRetryMillis),\n ],\n ]),\n )\n .where(condition),\n ),\n ],\n retryable: (cause: unknown) =>\n isGuardFailure(cause, `effect-auth-proof-guard:claim:${input.proofId}`),\n };\n }),\n );\n }),\n settleDelivery: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"settleDelivery\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"settleDelivery\"], A>,\n ) =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* run(\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n\n const row = (yield* readGeneration(mapping, input.moduleId, input.proofId))[0];\n const receipt = prepare(undefined, journal);\n\n if (\n row === undefined ||\n row[mapping.generation.version] !== input.version ||\n row[mapping.generation.deliveryId] !== input.deliveryId ||\n row[mapping.generation.claimVersion] !== input.claimVersion ||\n row[mapping.generation.deliveryState] !== \"claimed\"\n )\n return { receipt, statements: [] };\n const c = generationColumns(mapping);\n const outcome: ProofDeliveryOutcome = input.outcome;\n\n const state =\n outcome._tag === \"Accepted\"\n ? \"accepted\"\n : outcome._tag === \"DefiniteFailure\"\n ? \"failed\"\n : \"ambiguous\";\n\n const values: Array<readonly [string, unknown]> = [\n [mapping.generation.deliveryState, state],\n [mapping.generation.claimDeadline, null],\n ];\n\n if (outcome._tag === \"Ambiguous\")\n values.push([\n mapping.generation.retryAt,\n mapping.d1.engineInstantPlus(Number(row[mapping.generation.deliveryRetryMillis])),\n ]);\n if (outcome._tag === \"DefiniteFailure\")\n values.push([mapping.generation.state, \"cancelled\"]);\n\n const condition = and(\n eq(c.moduleId, input.moduleId),\n eq(c.proofId, input.proofId),\n eq(c.version, input.version),\n eq(c.deliveryId, input.deliveryId),\n eq(c.claimVersion, input.claimVersion),\n eq(c.deliveryState, \"claimed\"),\n );\n\n const statements: Statement<any>[] = [\n yield* statement(\n database\n .update(mapping.generation.table)\n .set(updateValues(values))\n .where(condition),\n ),\n ];\n\n if (outcome._tag === \"DefiniteFailure\") {\n const sc = seriesColumns(mapping);\n\n statements.push(\n yield* statement(\n database\n .update(mapping.series.table)\n .set(updateValues([[mapping.series.activeProofId, null]]))\n .where(\n and(\n eq(sc.moduleId, input.moduleId),\n eq(sc.purpose, row[mapping.generation.purpose]),\n eq(sc.scopeKey, row[mapping.generation.seriesKey]),\n eq(sc.activeProofId, input.proofId),\n sql`exists(select 1 from ${mapping.generation.table} where ${c.moduleId} = ${sql.param(input.moduleId, c.moduleId)} and ${c.proofId} = ${sql.param(input.proofId, c.proofId)} and ${c.version} = ${sql.param(input.version, c.version)} and ${c.deliveryId} = ${sql.param(input.deliveryId, c.deliveryId)} and ${c.claimVersion} = ${sql.param(input.claimVersion, c.claimVersion)} and ${c.deliveryState} = 'failed' and ${c.state} = 'cancelled')`,\n ),\n ),\n ),\n );\n }\n\n return { receipt, statements };\n }),\n );\n }),\n cancel: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"cancel\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"cancel\"], A>,\n ) =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* run(\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n\n const keys = mapping.scopeKeys({\n moduleId: input.moduleId,\n purpose: input.purpose,\n binding: input.binding,\n });\n\n const current = yield* authority(mapping, input.moduleId, input.purpose, input.binding);\n\n const series = (yield* readSeries(\n mapping,\n input.moduleId,\n input.purpose,\n keys.series,\n ))[0];\n\n const receipt = prepare(undefined, journal);\n const active = series?.[mapping.series.activeProofId] as string | null | undefined;\n\n if (!current.current || active === null || active === undefined)\n return { receipt, statements: [] };\n const generation = (yield* readGeneration(mapping, input.moduleId, active))[0];\n\n const storedBinding =\n generation === undefined\n ? undefined\n : yield* mapping.generation.decodeBinding(generation);\n\n if (storedBinding === undefined || !sameBinding(storedBinding, input.binding))\n return { receipt, statements: [] };\n const gc = generationColumns(mapping);\n const sc = seriesColumns(mapping);\n const marker = `effect-auth-proof-guard:cancel:${active}`;\n\n return {\n receipt,\n statements: [\n yield* assertion(\n and(\n current.condition,\n sql`exists(select 1 from ${mapping.series.table} where ${sc.moduleId} = ${sql.param(input.moduleId, sc.moduleId)} and ${sc.purpose} = ${sql.param(input.purpose, sc.purpose)} and ${sc.scopeKey} = ${sql.param(keys.series, sc.scopeKey)} and ${sc.activeProofId} = ${sql.param(active, sc.activeProofId)})`,\n sql`exists(select 1 from ${mapping.generation.table} where ${gc.moduleId} = ${sql.param(input.moduleId, gc.moduleId)} and ${gc.proofId} = ${sql.param(active, gc.proofId)} and ${gc.state} = 'active')`,\n )!,\n marker,\n ),\n yield* statement(\n database\n .update(mapping.generation.table)\n .set(updateValues([[mapping.generation.state, \"cancelled\"]]))\n .where(\n and(\n eq(gc.moduleId, input.moduleId),\n eq(gc.proofId, active),\n eq(gc.state, \"active\"),\n ),\n ),\n ),\n yield* statement(\n database\n .update(mapping.series.table)\n .set(updateValues([[mapping.series.activeProofId, null]]))\n .where(\n and(\n eq(sc.moduleId, input.moduleId),\n eq(sc.purpose, input.purpose),\n eq(sc.scopeKey, keys.series),\n eq(sc.activeProofId, active),\n ),\n ),\n ),\n ],\n retryable: (cause: unknown) => isGuardFailure(cause, marker),\n };\n }),\n );\n }),\n cleanup: <A>(\n input: Parameters<ProofPersistence[\"Service\"][\"cleanup\"]>[0],\n prepare: PlanPrepare<ProofPersistence[\"Service\"][\"cleanup\"], A>,\n ) =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n\n return yield* run(\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n\n const now = yield* readEngineNowMillis(mapping);\n const nativeNow = mapping.encodeInstant(now);\n const gc = generationColumns(mapping);\n const cc = continuationColumns(mapping);\n const rc = requestColumns(mapping);\n const ac = abuseColumns(mapping);\n const fc = failureColumns(mapping);\n const mc = commandColumns(mapping);\n const sc = seriesColumns(mapping);\n const rsc = scopeColumns(mapping);\n let remaining = input.limit;\n let hasMore = false;\n\n const take = <A>(effect: Effect.Effect<ReadonlyArray<A>, AdapterFailure>) =>\n effect.pipe(\n Effect.map((rows) => {\n if (rows.length > remaining) hasMore = true;\n const selected = rows.slice(0, remaining);\n\n remaining -= selected.length;\n\n return selected;\n }),\n );\n\n const continuations = yield* take(\n database\n .select({ continuationId: cc.continuationId })\n .from(mapping.continuation.table)\n .where(and(eq(cc.moduleId, input.moduleId), lte(cc.retentionUntil, nativeNow)))\n .limit(remaining + 1),\n );\n\n const generations = yield* take(\n database\n .select({ proofId: gc.proofId })\n .from(mapping.generation.table)\n .where(and(eq(gc.moduleId, input.moduleId), lte(gc.retentionUntil, nativeNow)))\n .limit(remaining + 1),\n );\n\n const requests = yield* take(\n database\n .select({ requestId: rc.requestId })\n .from(mapping.request.table)\n .where(and(eq(rc.moduleId, input.moduleId), lte(rc.retentionUntil, nativeNow)))\n .limit(remaining + 1),\n );\n\n const abuse = yield* take(\n database\n .select({\n action: ac.action,\n scopeKind: ac.scopeKind,\n scopeKey: ac.scopeKey,\n commandId: ac.commandId,\n })\n .from(mapping.abuseEvent.table)\n .where(and(eq(ac.moduleId, input.moduleId), lte(ac.retentionUntil, nativeNow)))\n .limit(remaining + 1),\n );\n\n const failures = yield* take(\n database\n .select({ seriesKey: fc.seriesKey, commandId: fc.commandId })\n .from(mapping.failureEvent.table)\n .where(and(eq(fc.moduleId, input.moduleId), lte(fc.retentionUntil, nativeNow)))\n .limit(remaining + 1),\n );\n\n const commands = yield* take(\n database\n .select({ commandId: mc.commandId })\n .from(mapping.command.table)\n .where(and(eq(mc.moduleId, input.moduleId), lte(mc.retentionUntil, nativeNow)))\n .limit(remaining + 1),\n );\n\n const series = yield* take(\n database\n .select({ purpose: sc.purpose, scopeKey: sc.scopeKey })\n .from(mapping.series.table)\n .where(\n and(\n eq(sc.moduleId, input.moduleId),\n isNull(sc.activeProofId),\n notExists(\n database\n .select({ one: sql`1` })\n .from(mapping.generation.table)\n .where(\n and(\n eq(gc.moduleId, sc.moduleId),\n eq(gc.purpose, sc.purpose),\n eq(gc.seriesKey, sc.scopeKey),\n ),\n ),\n ),\n notExists(\n database\n .select({ one: sql`1` })\n .from(mapping.failureEvent.table)\n .where(\n and(\n eq(fc.moduleId, sc.moduleId),\n eq(fc.purpose, sc.purpose),\n eq(fc.seriesKey, sc.scopeKey),\n ),\n ),\n ),\n ),\n )\n .limit(remaining + 1),\n );\n\n const rateScopes = yield* take(\n database\n .select({\n purpose: rsc.purpose,\n action: rsc.action,\n scopeKind: rsc.scopeKind,\n scopeKey: rsc.scopeKey,\n })\n .from(mapping.rateScope.table)\n .where(\n and(\n eq(rsc.moduleId, input.moduleId),\n notExists(\n database\n .select({ one: sql`1` })\n .from(mapping.abuseEvent.table)\n .where(\n and(\n eq(ac.moduleId, rsc.moduleId),\n eq(ac.purpose, rsc.purpose),\n eq(ac.action, rsc.action),\n eq(ac.scopeKind, rsc.scopeKind),\n eq(ac.scopeKey, rsc.scopeKey),\n ),\n ),\n ),\n ),\n )\n .limit(remaining + 1),\n );\n\n const marker = `effect-auth-proof-guard:cleanup:${input.moduleId}:${now}`;\n const statements: Statement<any>[] = [];\n\n const guardedDelete = Effect.fn(function* (\n condition: SQL,\n query: { readonly toSQL: () => { sql: string; params: unknown[] } },\n ) {\n statements.push(yield* assertion(condition, marker), yield* statement(query));\n });\n\n for (const row of continuations) {\n const condition = and(\n eq(cc.moduleId, input.moduleId),\n eq(cc.continuationId, row.continuationId),\n lte(cc.retentionUntil, mapping.d1.engineNow),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.continuation.table} where ${condition})`,\n database.delete(mapping.continuation.table).where(condition),\n );\n }\n for (const row of generations) {\n const condition = and(\n eq(gc.moduleId, input.moduleId),\n eq(gc.proofId, row.proofId),\n lte(gc.retentionUntil, mapping.d1.engineNow),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.generation.table} where ${condition})`,\n database\n .update(mapping.series.table)\n .set(updateValues([[mapping.series.activeProofId, null]]))\n .where(and(eq(sc.moduleId, input.moduleId), eq(sc.activeProofId, row.proofId))),\n );\n statements.push(\n yield* statement(database.delete(mapping.generation.table).where(condition)),\n );\n }\n for (const row of requests) {\n const condition = and(\n eq(rc.moduleId, input.moduleId),\n eq(rc.requestId, row.requestId),\n lte(rc.retentionUntil, mapping.d1.engineNow),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.request.table} where ${condition})`,\n database.delete(mapping.request.table).where(condition),\n );\n }\n for (const row of abuse) {\n const condition = and(\n eq(ac.moduleId, input.moduleId),\n eq(ac.action, row.action),\n eq(ac.scopeKind, row.scopeKind),\n eq(ac.scopeKey, row.scopeKey),\n eq(ac.commandId, row.commandId),\n lte(ac.retentionUntil, mapping.d1.engineNow),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.abuseEvent.table} where ${condition})`,\n database.delete(mapping.abuseEvent.table).where(condition),\n );\n }\n for (const row of failures) {\n const condition = and(\n eq(fc.moduleId, input.moduleId),\n eq(fc.seriesKey, row.seriesKey),\n eq(fc.commandId, row.commandId),\n lte(fc.retentionUntil, mapping.d1.engineNow),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.failureEvent.table} where ${condition})`,\n database.delete(mapping.failureEvent.table).where(condition),\n );\n }\n for (const row of commands) {\n const condition = and(\n eq(mc.moduleId, input.moduleId),\n eq(mc.commandId, row.commandId),\n lte(mc.retentionUntil, mapping.d1.engineNow),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.command.table} where ${condition})`,\n database.delete(mapping.command.table).where(condition),\n );\n }\n for (const row of series) {\n const condition = and(\n eq(sc.moduleId, input.moduleId),\n eq(sc.purpose, row.purpose),\n eq(sc.scopeKey, row.scopeKey),\n isNull(sc.activeProofId),\n notExists(\n database\n .select({ one: sql`1` })\n .from(mapping.generation.table)\n .where(\n and(\n eq(gc.moduleId, sc.moduleId),\n eq(gc.purpose, sc.purpose),\n eq(gc.seriesKey, sc.scopeKey),\n ),\n ),\n ),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.series.table} where ${condition})`,\n database.delete(mapping.series.table).where(condition),\n );\n }\n for (const row of rateScopes) {\n const condition = and(\n eq(rsc.moduleId, input.moduleId),\n eq(rsc.purpose, row.purpose),\n eq(rsc.action, row.action),\n eq(rsc.scopeKind, row.scopeKind),\n eq(rsc.scopeKey, row.scopeKey),\n notExists(\n database\n .select({ one: sql`1` })\n .from(mapping.abuseEvent.table)\n .where(\n and(\n eq(ac.moduleId, rsc.moduleId),\n eq(ac.purpose, rsc.purpose),\n eq(ac.action, rsc.action),\n eq(ac.scopeKind, rsc.scopeKind),\n eq(ac.scopeKey, rsc.scopeKey),\n ),\n ),\n ),\n )!;\n\n yield* guardedDelete(\n sql`exists(select 1 from ${mapping.rateScope.table} where ${condition})`,\n database.delete(mapping.rateScope.table).where(condition),\n );\n }\n // Removing the final history row can make an anchor eligible only after this\n // transaction/batch commits. One extra page lets the caller reclaim it.\n hasMore ||= generations.length > 0 || failures.length > 0 || abuse.length > 0;\n const result: ProofCleanupResult = { removed: input.limit - remaining, hasMore };\n\n return {\n receipt: prepare(result, journal),\n statements,\n retryable: (cause: unknown) => isGuardFailure(cause, marker),\n };\n }),\n );\n }),\n };\n};\n\nexport const makeD1ProofPersistenceServices = <\n Rq extends AnySQLiteTable,\n S extends AnySQLiteTable,\n G extends AnySQLiteTable,\n Cn extends AnySQLiteTable,\n Rs extends AnySQLiteTable,\n A extends AnySQLiteTable,\n F extends AnySQLiteTable,\n C extends AnySQLiteTable,\n Sub extends AnySQLiteTable,\n I extends AnySQLiteTable,\n Cr extends AnySQLiteTable,\n NativeId,\n>(\n database: Database,\n mapping: D1ProofPersistenceMapping<Rq, S, G, Cn, Rs, A, F, C, Sub, I, Cr, NativeId>,\n) =>\n Effect.gen(function* () {\n const hooks = yield* LifecycleHooks;\n const plans = makeProofPlans(mapping as unknown as Mapping);\n\n const run = <Out, Err, Env>(plan: Effect.Effect<Planned<Out>, Err, Env>) =>\n Effect.gen(function* () {\n if (yield* hasCommitScope) return yield* unavailable();\n\n return yield* executeStandalone(plan, 2);\n }).pipe(\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(LifecycleHooks, hooks),\n );\n\n const service: ProofPersistence[\"Service\"] = {\n issue: (input, prepare) => run(plans.issue(input, prepare)).pipe(translateIssueFailure),\n attempt: (input, prepare) => run(plans.attempt(input, prepare)).pipe(translateFailure),\n complete: (input, prepare) => run(plans.complete(input, prepare)).pipe(translateFailure),\n claimDelivery: (input, prepare) =>\n run(plans.claimDelivery(input, prepare)).pipe(translateFailure),\n settleDelivery: (input, prepare) =>\n run(plans.settleDelivery(input, prepare)).pipe(translateFailure),\n cancel: (input, prepare) => run(plans.cancel(input, prepare)).pipe(translateFailure),\n cleanup: (input, prepare) => run(plans.cleanup(input, prepare)).pipe(translateFailure),\n };\n\n return { proofPersistence: service };\n });\n\ntype CoordinatorError<E> = E | ProofUnavailable | HookConfigurationError;\n\n/**\n * Owns one proof transition plus application statements in one D1 batch. It\n * never replays the owner effect. A reserved guard or named race becomes\n * ProofUnavailable so the caller can retry the entire command with fresh secrets.\n */\nexport function coordinateD1ProofPersistence<\n Rq extends AnySQLiteTable,\n S extends AnySQLiteTable,\n G extends AnySQLiteTable,\n Cn extends AnySQLiteTable,\n Rs extends AnySQLiteTable,\n Aev extends AnySQLiteTable,\n F extends AnySQLiteTable,\n C extends AnySQLiteTable,\n Sub extends AnySQLiteTable,\n I extends AnySQLiteTable,\n Cr extends AnySQLiteTable,\n NativeId,\n A,\n E,\n R,\n DatabaseError,\n DatabaseRequirements,\n>(\n acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n options: {\n readonly mapping: D1ProofPersistenceMapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>;\n },\n body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n A,\n CoordinatorError<E> | DatabaseError,\n Exclude<R, ProofPersistence | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n return Effect.flatMap(acquire, (database) =>\n Effect.gen(function* () {\n const hooks = yield* LifecycleHooks;\n\n if (yield* hasCommitScope) return yield* unavailable();\n\n const result = yield* coordinateCommit(\n () =>\n Effect.gen(function* () {\n const statements: Statement<any>[] = [];\n let mutation: Planned<any> | undefined;\n\n const nativeCollector = D1BatchStatements.of({\n append: (statement) => Effect.sync(() => statements.push(statement)),\n });\n\n const owner = yield* makeD1Owner(unavailable()).pipe(\n Effect.provideService(D1BatchStatements, nativeCollector),\n );\n\n const plans = makeProofPlans(options.mapping as unknown as Mapping);\n\n const run = <Out, Err, Env>(plan: Effect.Effect<Planned<Out>, Err, Env>) =>\n coordinateCommit(\n () =>\n Effect.gen(function* () {\n const journal = yield* CurrentCommitJournal;\n const planned = yield* plan;\n\n yield* owner.check;\n if (mutation !== undefined) return yield* unavailable();\n const guarded = { ...planned, journalGuard: journal.prepare(undefined) };\n\n mutation = guarded;\n statements.push(...guarded.statements);\n\n return guarded.receipt;\n }),\n { mode: \"batch\" },\n ).pipe(\n Effect.map((result) => result.value),\n Effect.provideService(CurrentD1PlanningDatabase, database),\n Effect.provideService(LifecycleHooks, hooks),\n );\n\n const service: ProofPersistence[\"Service\"] = {\n issue: (input, prepare) =>\n owner.run(run(plans.issue(input, prepare)).pipe(translateIssueFailure)),\n attempt: (input, prepare) =>\n owner.run(run(plans.attempt(input, prepare)).pipe(translateFailure)),\n complete: (input, prepare) =>\n owner.run(run(plans.complete(input, prepare)).pipe(translateFailure)),\n claimDelivery: (input, prepare) =>\n owner.run(run(plans.claimDelivery(input, prepare)).pipe(translateFailure)),\n settleDelivery: (input, prepare) =>\n owner.run(run(plans.settleDelivery(input, prepare)).pipe(translateFailure)),\n cancel: (input, prepare) =>\n owner.run(run(plans.cancel(input, prepare)).pipe(translateFailure)),\n cleanup: (input, prepare) =>\n owner.run(run(plans.cleanup(input, prepare)).pipe(translateFailure)),\n };\n\n const provided = Context.make(ProofPersistence, service).pipe(\n Context.add(D1BatchStatements, owner.collector),\n );\n\n const value = yield* owner.close(Effect.provideContext(body, provided));\n\n if (mutation?.journalGuard !== undefined) {\n const status = yield* Effect.result(mutation.journalGuard.read);\n\n if (status._tag === \"Success\" || status.failure._tag !== \"CommitPending\")\n return yield* unavailable();\n }\n yield* database.$client.batch(statements).pipe(\n Effect.catchCause((cause) =>\n Effect.failCause(\n Cause.map(cause, (error) =>\n everyFailureMatches(cause, mutation?.retryable) ? unavailable() : error,\n ),\n ),\n ),\n translateFailure,\n );\n\n return value;\n }),\n { mode: \"batch\" },\n ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n return result.value;\n }),\n );\n}\n\nexport interface D1ProtectedProofMutation {\n /** Conditional statements compiled by the owning method adapter. */\n readonly statements: ReadonlyArray<Statement<any>>;\n /** Postcondition proving the protected CAS and its invalidations all applied. */\n readonly appliedCondition: SQL;\n}\n\nexport interface D1CompiledProofCompletion<A> {\n readonly receipt: PreparedCommit<A>;\n readonly statements: ReadonlyArray<Statement<any>>;\n readonly postconditions?: ReadonlyArray<Statement<any>>;\n}\n\n/** Private compiler seam for a future same-owner D1 password-reset batch. */\nexport const compileD1ProofCompletionPlan = Effect.fn(\"Drizzle.compileD1ProofCompletionPlan\")(\n function* <\n Rq extends AnySQLiteTable,\n S extends AnySQLiteTable,\n G extends AnySQLiteTable,\n Cn extends AnySQLiteTable,\n Rs extends AnySQLiteTable,\n Aev extends AnySQLiteTable,\n F extends AnySQLiteTable,\n C extends AnySQLiteTable,\n Sub extends AnySQLiteTable,\n I extends AnySQLiteTable,\n Cr extends AnySQLiteTable,\n NativeId,\n A,\n >(\n mapping: D1ProofPersistenceMapping<Rq, S, G, Cn, Rs, Aev, F, C, Sub, I, Cr, NativeId>,\n plan: ProofCompletionPlan,\n protectedMutation: D1ProtectedProofMutation,\n project: (decision: ProofCompletionDecision) => A,\n ) {\n const planned = yield* completionPlan<A>(\n mapping as unknown as Mapping,\n plan.input,\n (decision, activeJournal) => plan.prepare(decision, activeJournal, project),\n );\n\n // A rejected completion has no protected mutation. For a predicted success,\n // preserve the fresh continuation/authority guard first, then prove the\n // method CAS before consuming the continuation and inserting its marker.\n if (planned.statements.length === 0) return planned;\n const [freshGuard, ...completionStatements] = planned.statements;\n const marker = `effect-auth-proof-guard:protected:${plan.input.continuationId}`;\n\n return {\n receipt: planned.receipt,\n statements: [\n freshGuard!,\n ...protectedMutation.statements,\n yield* assertion(protectedMutation.appliedCondition, marker),\n ...completionStatements,\n ],\n postconditions: [\n yield* assertion(protectedMutation.appliedCondition, marker),\n ...(planned.postconditions ?? []),\n ],\n };\n },\n);\n\nexport type AnyD1ProofMapping = ProofPersistenceMapping<\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n Table,\n unknown\n>;\n\nconst translateFailure = <A, E, R>(\n effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, ProofUnavailable, R> =>\n reportPersistenceFailure(\n effect,\n (error) => Schema.is(ProofUnavailable)(error) || Schema.is(HookConfigurationError)(error),\n ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst translateIssueFailure = <A, E, R>(\n effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, ProofUnavailable | ProofRequestConflict, R> =>\n reportPersistenceFailure(\n effect,\n (error) =>\n Schema.is(ProofUnavailable)(error) ||\n Schema.is(ProofRequestConflict)(error) ||\n Schema.is(HookConfigurationError)(error),\n ).pipe(\n Effect.catchCause((cause) =>\n Effect.failCause(\n Cause.map(cause, (error) =>\n Schema.is(ProofRequestConflict)(error) ? error : unavailable(),\n ),\n ),\n ),\n );\n\nconst executeStandalone = <A, E, R>(\n plan: Effect.Effect<Planned<A>, E, R>,\n retries = 2,\n): Effect.Effect<\n A,\n | E\n | import(\"../hooks/models\").HookConfigurationError\n | import(\"effect/unstable/sql/SqlError\").SqlError,\n Exclude<R, CurrentCommitJournal> | CurrentD1PlanningDatabase | LifecycleHooks\n> =>\n Effect.suspend(() => {\n let retryable: ((cause: unknown) => boolean) | undefined;\n\n const once = coordinateCommit(\n () =>\n Effect.gen(function* () {\n const database = yield* CurrentD1PlanningDatabase;\n const planned = yield* plan;\n\n retryable = planned.retryable;\n yield* database.$client.batch(planned.statements);\n\n return planned.receipt;\n }),\n { mode: \"batch\" },\n ).pipe(Effect.map((result) => result.value));\n\n return once.pipe(\n Effect.catchCause((cause) =>\n retries > 0 && everyFailureMatches(cause, retryable)\n ? executeStandalone(plan, retries - 1)\n : Effect.failCause(cause),\n ),\n );\n });\n"],"mappings":";;;;;;;;;;;;;;;AA6FA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,uBACJ,OACA,aAEA,aAAa,KAAA,KACb,MAAM,QAAQ,SAAS,KACvB,MAAM,QAAQ,OAAO,WAAW,MAAM,aAAa,MAAM,KAAK,SAAS,MAAM,KAAK,OAAO,KAAK,CAAC,CAAC;AAElG,MAAM,iBAAiB,qBAAqB,KAAK,CAAC,CAAC;AAEnD,MAAM,oBAAoB,YACxB,OAAO,QAAQ,wBAAwB,CAAC,CAAC,OACtC,CAAC,KAAK,WAAW,QAAQ,YAAY,SAAkD,KAC1F;AAEF,MAAM,mBAAmB,OAAO,WAAW,OAAO,eAAe,YAAY,CAAC;AAE9E,MAAM,eAAe,MAAoB,UACvC,iBAAiB,IAAI,MAAM,iBAAiB,KAAK;AAEnD,MAAM,mBAAmB,SAAkB,cAAoD;CAC7F,MAAM,uBAAO,IAAI,IAAa;CAC9B,MAAM,UAA0B,CAAC,OAAO;CAExC,KAAK,IAAI,YAAY,GAAG,YAAY,MAAM,QAAQ,SAAS,GAAG,aAAa;EACzE,MAAM,UAAU,QAAQ,MAAM;EAE9B,IAAI,YAAY,KAAA,KAAa,YAAY,QAAQ,KAAK,IAAI,OAAO,GAAG;EACpE,KAAK,IAAI,OAAO;EAChB,IAAI,UAAU,OAAO,GAAG,OAAO;EAC/B,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,KAAK,MAAM,UAAU,QAAQ,SAC3B,IAAI,MAAM,aAAa,MAAM,GAAG,QAAQ,KAAK,OAAO,KAAK;QACpD,IAAI,MAAM,YAAY,MAAM,GAAG,QAAQ,KAAK,OAAO,MAAM;GAEhE;EACF;EACA,IAAI,OAAO,YAAY,UAAU;EAEjC,MAAM,UAAU;EAMhB,IAAI,QAAQ,UAAU,KAAA,GAAW,QAAQ,KAAK,QAAQ,KAAK;EAC3D,IAAI,QAAQ,WAAW,KAAA,GAAW,QAAQ,KAAK,QAAQ,MAAM;EAC7D,IAAI,QAAQ,YAAY,KAAA,GAAW,QAAQ,KAAK,QAAQ,OAAO;CACjE;CAEA,OAAO;AACT;AAIA,MAAM,kBAAkB,OAAgB,WAAmB;CAEzD,MAAM,gBAAgB,mBAAmB,KADvB,OAAO,WAAW,KAAK,IAAI,EAAE,GACD;CAE9C,OAAO,gBACL,QACC,UAAU,UAAU,iBAAiB,UAAU,aAAa,eAC/D;AACF;AAIA,MAAM,YAAY,OAAO,GAAG,WAAW,OAEpC;CACD,MAAM,WAAW,OAAO;CACxB,MAAM,WAAW,MAAM,MAAM;CAE7B,OAAO,SAAS,QAAQ,OAAO,SAAS,KAAK,SAAS,MAAM;AAC9D,CAAC;AAED,MAAM,sBAAsB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAAW,SAAkB;CAGhG,OAAO,QAAO,OAFU,0BAAA,CAGrB,OAAO,EAAE,OAAO,QAAQ,GAAG,gBAAgB,GAAG,mBAAmB,EAAE,CAAC,CAAC,CACrE,KAAK,GAAG,YAAY,CAAC,CACrB,KACC,OAAO,SAAS,SAAS;EACvB,MAAM,QAAQ,OAAO,KAAK,EAAE,EAAE,KAAK;EAEnC,OAAO,OAAO,SAAS,KAAK,IAAI,OAAO,QAAQ,KAAK,IAAI,OAAO,KAAK,YAAY,CAAC;CACnF,CAAC,CACH;AACJ,CAAC;AAED,MAAM,gBAAgB,QAAgB,aAAwD;CAC5F,GAAG;CACH,GAAG,OAAO,YAAY,OAAO;AAC/B;AAEA,MAAM,YAAY,OAAO,GAAG,WAAW,WAAgB,QAAgB;CACrE,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,UACZ,SACG,OAAO,EACN,IAAI,GAAG,aAAa,UAAU,kCAAkC,KAAK,OAAO,GAAG,OAAO,GACpF,IACF,EACF,CAAC,CAAC,CACD,KAAK,GAAG,YAAY,CACzB;AACF,CAAC;AAED,MAAM,mBACJ,YAEA,QAAQ,oBAAoB,KAAA,IACxB,QAAQ,kBACR,QAAQ,wBAAwB,KAAA,IAC9B,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;CACT,KAAK,QAAQ;CACb,QAAQ,UAAU,IAAI,oBAAoB;EAAE,WAAW;EAAW;CAAM,CAAC;AAC3E,CAAC;AAET,MAAM,kBAAkB,aAAsB;CAC5C,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,aAAa,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,WAAW;CACtE,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,OAAO;CAC9D,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;AAC9E;AAEA,MAAM,iBAAiB,aAAsB;CAC3C,UAAU,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,QAAQ;CAC9D,SAAS,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,OAAO;CAC5D,UAAU,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,QAAQ;CAC9D,eAAe,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,aAAa;CACxE,aAAa,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,WAAW;CACpE,SAAS,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,OAAO;AAC9D;AAEA,MAAM,qBAAqB,aAAsB;CAC/C,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;CACtE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;CACpE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;CACpE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;CAC1E,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;CAChF,gBAAgB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,cAAc;CAClF,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;CACpE,OAAO,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;CAChE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;CAChF,cAAc,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;CAC9E,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;CAChF,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;CACpE,qBAAqB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,mBAAmB;CAC5F,gBAAgB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,cAAc;AACpF;AAEA,MAAM,uBAAuB,aAAsB;CACjD,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC1E,gBAAgB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc;CACtF,QAAQ,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,MAAM;CACtE,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC1E,gBAAgB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc;AACxF;AAEA,MAAM,gBAAgB,aAAsB;CAC1C,UAAU,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,QAAQ;CACpE,SAAS,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,OAAO;CAClE,QAAQ,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,MAAM;CAChE,WAAW,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,SAAS;CACtE,UAAU,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,QAAQ;AACtE;AAEA,MAAM,gBAAgB,aAAsB;CAC1C,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;CACtE,SAAS,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,OAAO;CACpE,QAAQ,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,MAAM;CAClE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;CACtE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;CAC1E,gBAAgB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,cAAc;AACpF;AAEA,MAAM,kBAAkB,aAAsB;CAC5C,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC1E,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,OAAO;CACxE,WAAW,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAC5E,WAAW,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAC5E,YAAY,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,UAAU;CAC9E,gBAAgB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,cAAc;AACxF;AAEA,MAAM,kBAAkB,aAAsB;CAC5C,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;AAC9E;AAQA,MAAM,gBACJ,MACA,SACA,QACA,WACG;CACH,MAAM,SAAS,WAAW,UAAU,WAAW;CAC/C,MAAM,SAAS,WAAW,UAAU,WAAW;CAE/C,MAAM,UAAwB,CAC5B;EAAE,MAAM;EAAU,KAAK;EAAK,QAAQ,OAAO,MAAM,SAAS;CAAU,GACpE;EAAE,MAAM;EAAc,KAAK,KAAK;EAAY,QAAQ,OAAO,MAAM;CAAQ,CAC3E;CAEA,IAAI,QAAQ,SAAS,cACnB,QAAQ,KAAK;EAAE,MAAM;EAAW,KAAK,KAAK;EAAS,QAAQ,OAAO,MAAM,UAAU;CAAU,CAAC;CAE/F,OAAO;AACT;AAEA,MAAM,kBACJ,SACA,UACA,SACA,QACA,UACG;CACH,MAAM,IAAI,aAAa,OAAO;CAE9B,OAAO,GAAG,yBAAyB,QAAQ,WAAW,MAAM,SAAS,EAAE,SAAS,KAAK,IAAI,MAAM,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,MAAM,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI,MAAM,MAAM,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,KAAK,IAAI,MAAM,MAAM,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,MAAM,QAAQ,GAAG,mBAAmB,MAAM,OAAO,YAAY,EAAE,MAAM,MAAM,OAAO;AACrb;AAEA,MAAM,oBACJ,SACA,UACA,SACA,WACA,WACG;CACH,MAAM,IAAI,eAAe,OAAO;CAEhC,OAAO,GAAG,yBAAyB,QAAQ,aAAa,MAAM,SAAS,EAAE,SAAS,KAAK,IAAI,MAAM,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI,MAAM,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,MAAM,QAAQ,GAAG,mBAAmB,OAAO,MAAM,SAAS,YAAY,EAAE,MAAM,OAAO;AAChV;AAEA,MAAM,qBAAqB,OAAO,GAAG,mCAAmC,CAAC,CAAC,WACxE,SACA,UACA,SACA,QACA,SACA,KACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,aAAa,OAAO;CAC9B,MAAM,WAAyB,CAAC;CAEhC,KAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,OAAO,OAAO,SACjB,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC,CAAC,CAC1B,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,SAAS,OAAO,GACrB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,WAAW,MAAM,IAAI,GAC1B,GAAG,EAAE,UAAU,MAAM,GAAG,GACxB,IAAI,EAAE,YAAY,QAAQ,cAAc,MAAM,MAAM,OAAO,YAAY,CAAC,CAC1E,CACF;EAEF,IAAI,OAAO,KAAK,EAAE,EAAE,SAAS,CAAC,IAAI,MAAM,OAAO,OAAO,SAAS,KAAK,KAAK;CAC3E;CAEA,OAAO;AACT,CAAC;AAED,MAAM,YAAY,OAAO,GAAG,0BAA0B,CAAC,CAAC,WACtD,SACA,UACA,SACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,IAAI;CACJ,IAAI,iBAAiB;CACrB,MAAM,QAAe,CAAC;CAEtB,IAAI,QAAQ,SAAS,cAAc;EACjC,IACE,QAAQ,UAAU,YAAY,KAAA,KAC9B,QAAQ,UAAU,eAAe,KAAA,KACjC,QAAQ,UAAU,cAAc,KAAA,GAEhC,OAAO,OAAO,YAAY;EAC5B,kBAAkB,OAAO,QAAQ,UAAU,UAAU,SAAS,QAAQ,SAAS,SAAS;EACxF,MAAM,UAAU,QAAQ,UAAU;EAClC,MAAM,KAAK,OAAO,QAAQ,OAAO,QAAQ,EAAE;EAC3C,MAAM,SAAS,OAAO,QAAQ,OAAO,QAAQ,MAAM;EACnD,MAAM,WAAW,OAAO,QAAQ,OAAO,QAAQ,gBAAgB;EAQ/D,MAAM,cAAa,OANQ,SACxB,OAAO,CAAC,CACR,KAAK,QAAQ,KAAK,CAAC,CACnB,MAAM,GAAG,IAAI,eAAe,CAAC,CAAC,CAC9B,MAAM,CAAC,EAAA,CAEqB;EAE/B,iBACE,eAAe,KAAA,KACf,QAAQ,eAAe,WAAW,QAAQ,OAAO,KACjD,WAAW,QAAQ,sBAAsB,QAAQ,SAAS;EAC5D,MAAM,KACJ,GAAG,wBAAwB,QAAQ,MAAM,SAAS,GAAG,KAAK,IAAI,MAAM,iBAAiB,EAAE,EAAE,OAAO,OAAO,KAAK,IAAI,MAAM,QAAQ,qBAAqB,MAAM,EAAE,OAAO,SAAS,KAAK,IAAI,MAAM,QAAQ,SAAS,kBAAkB,QAAQ,EAAE,EACzO;CACF;CACA,MAAM,aAAa,QAAQ,UAAU;CACrC,MAAM,YAAY,OAAO,WAAW,OAAO,WAAW,SAAS;CAC/D,MAAM,QAAQ,OAAO,WAAW,OAAO,WAAW,KAAK;CAEvD,MAAM,iBAAiB,OAAO,SAC3B,OAAO,CAAC,CACR,KAAK,WAAW,KAAK,CAAC,CACtB,MAAM,IAAI,GAAG,WAAW,QAAQ,WAAW,SAAS,GAAG,GAAG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC;CAE9F,MAAM,QAAsC;EAC1C;EACA;EACA;EACA,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;CAC7D;CAEA,MAAM,oBAAoB,WAAW,UAAU,OAAO,cAAc;CAEpE,MAAM,KAAK,WAAW,mBAAmB,KAAK,CAAC;CAC/C,IAAI,qBAAqB;CAEzB,IAAI,QAAQ,SAAS,cAAc;EACjC,MAAM,aAAa,QAAQ,UAAU;EACrC,MAAM,QAAQ,OAAO,WAAW,OAAO,WAAW,SAAS;EAC3D,MAAM,KAAK,OAAO,WAAW,OAAO,WAAW,YAAY;EAC3D,MAAM,WAAW,OAAO,WAAW,OAAO,WAAW,QAAQ;EAE7D,MAAM,SACJ,WAAW,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,WAAW,OAAO,WAAW,MAAM;EAE1F,MAAM,WAAW,CAAC,GAAG,QAAQ,SAAS,WAAW,CAAC,CAAC,MAAM,GAAG,MAC1D,EAAE,aAAa,cAAc,EAAE,YAAY,CAC7C;EAkBA,MAAM,UAfJ,SAAS,WAAW,IAChB,CAAC,IACD,OAAO,SACJ,OAAO,CAAC,CACR,KAAK,WAAW,KAAK,CAAC,CACtB,MACC,IACE,GAAG,OAAO,eAAe,GACzB,QACE,IACA,SAAS,KAAK,SAAS,KAAK,YAAY,CAC1C,CACF,CACF,EAAA,CAGL,KAAK,SAAc;GAClB,IAAI,IAAI,WAAW;GACnB,UAAU,IAAI,WAAW;GACzB,QACE,WAAW,WAAW,KAAA,KACtB,WAAW,iBAAiB,IAAI,WAAW,OAAO,MAAM;EAC5D,EAAE,CAAC,CACF,MAAM,GAAQ,MAAW,OAAO,EAAE,EAAE,CAAC,CAAC,cAAc,OAAO,EAAE,EAAE,CAAC,CAAC;EAEpE,qBACE,OAAO,WAAW,SAAS,UAC3B,OAAO,OACJ,KAAU,UACT,IAAI,UACJ,IAAI,OAAO,SAAS,MAAM,EAAE,gBAC5B,IAAI,aAAa,SAAS,MAAM,EAAE,QACtC;EACF,KAAK,MAAM,sBAAsB,UAC/B,MAAM,KACJ,GAAG,wBAAwB,WAAW,MAAM,SAAS,MAAM,KAAK,IAAI,MAAM,iBAAiB,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,mBAAmB,cAAc,EAAE,EAAE,OAAO,SAAS,KAAK,IAAI,MAAM,mBAAmB,UAAU,QAAQ,IAAI,WAAW,KAAA,IAAY,GAAG,KAAK,GAAG,QAAQ,OAAO,KAAK,IAAI,MAAM,WAAW,qBAAqB,MAAM,IAAI,EACpV;CACJ;CAEA,OAAO;EACL,SAAS,kBAAkB,qBAAqB;EAChD,WAAW,cAAc,GAAG,KAAK,KAAK,GAAG;CAC3C;AACF,CAAC;AAED,MAAM,mBAAmB,OAAO,GAAG,WACjC,SACA,UACA,SACA,QACA,SACA,WACA,eACA,eACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,CACL,GAAI,OAAO,OAAO,QAChB,SACA,OAAO,GAAG,WAAW,OAAO;EAC1B,OAAO,OAAO,UACZ,SACG,OAAO,QAAQ,UAAU,KAAK,CAAC,CAC/B,OACC,QAAQ,UAAU,aAAa;GAC7B;GACA;GACA;GACA,WAAW,MAAM;GACjB,UAAU,MAAM;EAClB,CAAC,CACH,CAAC,CACA,oBAAoB,CACzB;CACF,CAAC,CACH,GACA,GAAI,gBACA,CACE,OAAO,UACL,SACG,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,OACC,QAAQ,OAAO,aAAa;EAC1B;EACA;EACA,UAAU;EACV,SAAS;CACX,CAAC,CACH,CAAC,CACA,oBAAoB,CACzB,CACF,IACA,CAAC,CACP;AACF,CAAC;AAED,MAAM,wBAAwB,OAAO,GAAG,WACtC,SACA,UACA,SACA,QACA,WACA,SACA,KACA,gBACA,QACA;CACA,MAAM,WAAW,OAAO;CAExB,QAAQ,OAAO,OAAO,QACpB,SACA,OAAO,GAAG,WAAW,OAAO;EAC1B,OAAO,CACL,OAAO,UAAU,eAAe,SAAS,UAAU,SAAS,QAAQ,KAAK,GAAG,MAAM,GAClF,OAAO,UACL,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OACxC,aACE,QAAQ,WAAW,aAAa;GAC9B;GACA;GACA;GACA,WAAW,MAAM;GACjB,UAAU,MAAM;GAChB;GACA,kBAAkB;GAClB,sBAAsB;EACxB,CAAC,GACD,CACE,CAAC,QAAQ,WAAW,YAAY,QAAQ,GAAG,SAAS,GACpD,CACE,QAAQ,WAAW,gBACnB,QAAQ,GAAG,kBAAkB,iBAAiB,GAAG,CACnD,CACF,CACF,CACF,CACF,CACF;CACF,CAAC,CACH,EAAA,CAAG,KAAK;AACV,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,oBAAoB,CAAC,CAAC,WACjD,SACA,UACA,SACA,KACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,cAAc,OAAO;CAE/B,OAAO,OAAO,SACX,OAAO,CAAC,CACR,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,SAAS,OAAO,GAAG,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CACjF,MAAM,CAAC;AACZ,CAAC;AAED,MAAM,iBAAiB,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACzD,SACA,UACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,kBAAkB,OAAO;CAEnC,OAAO,OAAO,SACX,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,CAC5D,MAAM,CAAC;AACZ,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,WAC9B,SACA,UACA,WACA,MACA,UACA,gBACA,iBACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,UACZ,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACrC,aACE,QAAQ,QAAQ,aAAa;EAC3B;EACA;EACA;EACA;EACA,sBAAsB;CACxB,CAAC,GACD,oBAAoB,KAAA,IAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,eAAe,CAAC,CACzF,CACF,CACF;AACF,CAAC;AAED,MAAM,YAAY,OAAO,GAAG,mBAAmB,CAAC,CAAC,WAC/C,SACA,OACA,SACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,UAAU,OAAO;CAEvB,MAAM,OAAO,QAAQ,UAAU;EAC7B,UAAU,MAAM,OAAO;EACvB,SAAS,MAAM,OAAO;EACtB,SAAS,MAAM,OAAO;CACxB,CAAC;CAED,MAAM,UAAU,OAAO,UACrB,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,MAAM,OAAO,OACf;CAEA,MAAM,MAAM,OAAO,oBAAoB,OAAO;CAC9C,MAAM,iBAAiB,MAAM,MAAM,OAAO;CAC1C,MAAM,KAAK,eAAe,OAAO;CAEjC,MAAM,mBAAmB,OAAO,SAC7B,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GAAG,GAAG,GAAG,WAAW,MAAM,OAAO,SAAS,CAAC,CAAC,CAAC,CAC5F,MAAM,CAAC,EAAA,CAAG;CAEb,IAAI,oBAAoB,KAAA,GAGlB;OAAA,OAFoB,QAAQ,cAAc,gBAAgB,QAAQ,QAAQ,eAAe,KAE9E,KAAK;GAClB,IAAI,gBAAgB,QAAQ,QAAQ,iBAAiB,MAAM,OAAO,aAChE,OAAO,OAAO,SAAS;GAGzB,OAAO;IACL,SAAS,QAAQ;KAAE,MAAM;KAAY,SAAA,OAHhB,QAAQ,QAAQ,cAAc,eAAe;IAGrB,GAAG,OAAO;IACvD,YAAY,CAAC;GACf;EACF;;CAEF,MAAM,SAAS,aAAa,MAAM,MAAM,OAAO,SAAS,SAAS,MAAM,MAAM;CAE7E,MAAM,oBAAoB,OAAO,mBAC/B,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,QACA,GACF;CAEA,MAAM,aAAa,kBAAkB,MAAM,UAAU,MAAM,SAAS,QAAQ;CAC5E,MAAM,WAAW,aAAa,oBAAoB,CAAC;CAEnD,MAAM,iBAAiB,cAClB,OAAO,WAAW,SAAS,MAAM,OAAO,UAAU,MAAM,OAAO,SAAS,KAAK,MAAM,EAAA,CAAG,KACvF,KAAA;CAEJ,MAAM,gBAAgB,OAAO,gBAAgB,OAAO;CACpD,MAAM,SAAS,iBAAiB,QAAQ,OAAO;CAE/C,MAAM,YACJ,iBAAiB,QAAQ,OAAO,iBAAiB,QACjD,iBAAiB,QAAQ,OAAO,iBAAiB,KAAA,IAC7C,KAAA,IACA,OAAO,QAAQ,cAAc,eAAe,QAAQ,OAAO,YAAY;CAE7E,MAAM,UACJ,QAAQ,WACR,MAAM,YACN,SAAS,WAAW,OAAO,UAC3B,MAAM,OAAO,kBAAkB,OAC/B,MAAM,OAAO,kBAAkB,QAC9B,MAAM,eAAe,KAAA,KAAa,MAAM,eAAe,YACvD,cAAc,KAAA,KAAa,MAAM,aAAa,MAAM,OAAO,MAAM;CAEpE,MAAM,UAAU;EACd,WAAW,MAAM,OAAO;EACxB,WAAW;GACT,SAAS,MAAM,OAAO;GACtB,SAAS,MAAM,OAAO;GACtB,OAAO,MAAM,OAAO,SAAS;EAC/B;CACF;CAEA,MAAM,WAAW,QACf,UAAU;EAAE,MAAM;EAAU,QAAQ,MAAM;CAAO,IAAI;EAAE,MAAM;EAAc;CAAQ,GACnF,OACF;CAEA,MAAM,aAA+B,CAAC;CACtC,MAAM,SAAS,iCAAiC,MAAM,OAAO;CAE7D,IAAI,oBAAoB,KAAA,GACtB,WAAW,KACT,OAAO,UACL,SACG,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,WAAW,MAAM,OAAO,SAAS,GACvC,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C,CACF,CACJ,CACF;CACF,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACrC,aACE,QAAQ,QAAQ,aAAa;EAC3B,QAAQ,MAAM;EACd,iBAAiB;EACjB,sBAAsB;CACxB,CAAC,GACD,CACE,CAAC,QAAQ,QAAQ,WAAW,QAAQ,GAAG,SAAS,GAChD,CACE,QAAQ,QAAQ,gBAChB,QAAQ,GAAG,kBAAkB,MAAM,OAAO,sBAAsB,CAClE,CACF,CACF,CACF,CACF,GACA,GAAI,OAAO,iBACT,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,aAAa,SAAS,OAAO,MAAM,GAAG,CAAC,GACvC,KAAK,QACL,eACA,UACF,GACA,GAAI,OAAO,sBACT,SACA,MAAM,OAAO,UACb,MAAM,OAAO,SACb,SACA,MAAM,OAAO,WACb,UACA,KACA,gBACA,MACF,CACF;CACA,IAAI,SAAS;EACX,MAAM,KAAK,cAAc,OAAO;EAEhC,MAAM,kBAAkB,IACtB,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,SAAS,MAAM,OAAO,OAAO,GACnC,GAAG,GAAG,UAAU,KAAK,MAAM,GAC3B,WAAW,QAAQ,WAAW,KAAA,IAC1B,GAAG,GAAG,GAAG,eAAe,IAAI,GAAG,GAAG,GAAG,GAAG,cAAc,SAAS,IAC/D,GAAG,GAAG,eAAe,MAAM,GAC/B,cAAc,KAAA,IACV,GAAG,UACH,IACE,GAAG,aACH,QAAQ,GAAG,mBAAmB,MAAM,OAAO,MAAM,oBAAoB,CACvE,CACN;EAEA,WAAW,KACT,OAAO,UACL,IACE,QAAQ,WACR,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,MAAM,OAAO,kBACpD,GAAG,GAAG,QAAQ,GAAG,UAAU,KAAK,IAAI,MAAM,QAAQ,cAAc,MAAM,OAAO,eAAe,GAAG,kBAAkB,OAAO,CAAC,CAAC,SAAS,KACnI,GAAG,wBAAwB,QAAQ,OAAO,MAAM,SAAS,gBAAgB,EAC3E,GACA,MACF,CACF;EACA,IAAI,WAAW,QAAQ,WAAW,KAAA,GAChC,WAAW,KACT,OAAO,UACL,SACG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAC7D,MACC,IACE,GAAG,kBAAkB,OAAO,CAAC,CAAC,UAAU,MAAM,OAAO,QAAQ,GAC7D,GAAG,kBAAkB,OAAO,CAAC,CAAC,SAAS,MAAM,GAC7C,GAAG,kBAAkB,OAAO,CAAC,CAAC,OAAO,QAAQ,CAC/C,CACF,CACJ,CACF;EACF,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OACxC,aACE,QAAQ,WAAW,aAAa;GAC9B,QAAQ,MAAM;GACd,WAAW,KAAK;GAChB,sBAAsB;GACtB,OAAO;GACP,eAAe;GACf,QAAQ,MAAM;EAChB,CAAC,GACD,CACE,CACE,QAAQ,WAAW,gBACnB,QAAQ,GAAG,kBAAkB,MAAM,OAAO,sBAAsB,CAClE,CACF,CACF,CACF,CACF,GACA,OAAO,UACL,SACG,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IACC,aAAa;GACX,CAAC,QAAQ,OAAO,eAAe,MAAM,OAAO,OAAO;GACnD,CAAC,QAAQ,OAAO,aAAa,QAAQ,GAAG,SAAS;GACjD,CAAC,QAAQ,OAAO,SAAS,aAAa;EACxC,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,GAAG,UAAU,MAAM,OAAO,QAAQ,GACrC,GAAG,GAAG,SAAS,MAAM,OAAO,OAAO,GACnC,GAAG,GAAG,UAAU,KAAK,MAAM,CAC7B,CACF,CACJ,CACF;CACF;CAEA,OAAO;EACL,SAAS;EACT;EACA,YAAY,UACV,2BAA2B,QAAQ,mBAAmB,KAAK,KAC3D,2BAA2B,QAAQ,kBAAkB,KAAK,KAC1D,eAAe,OAAO,MAAM;CAChC;AACF,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,qBAAqB,CAAC,CAAC,WACnD,SACA,OACA,SACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,UAAU,OAAO;CAEvB,MAAM,OAAO,QAAQ,UAAU;EAC7B,UAAU,MAAM;EAChB,SAAS,MAAM;EACf,SAAS,MAAM;CACjB,CAAC;CAED,MAAM,UAAU,OAAO,UAAU,SAAS,MAAM,UAAU,MAAM,SAAS,MAAM,OAAO;CACtF,MAAM,UAAU,eAAe,OAAO;CAEtC,MAAM,mBAAmB,OAAO,SAC7B,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,QAAQ,UAAU,MAAM,QAAQ,GAAG,GAAG,QAAQ,WAAW,MAAM,cAAc,CAAC,CAAC,CAAC,CAC7F,MAAM,CAAC,EAAA,CAAG;CAEb,IAAI,oBAAoB,KAAA,GAAW;EACjC,IAAI,gBAAgB,QAAQ,QAAQ,cAAc,YAChD,OAAO;GACL,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;GAC9C,YAAY,CAAC;EACf;EAEF,OAAO,OAAO,YAAY;CAC5B;CACA,MAAM,MAAM,OAAO,oBAAoB,OAAO;CAC9C,MAAM,SAAS,aAAa,MAAM,MAAM,SAAS,WAAW,MAAM,MAAM;CAExE,MAAM,oBAAoB,OAAO,mBAC/B,SACA,MAAM,UACN,MAAM,SACN,WACA,QACA,GACF;CAEA,MAAM,aAAa,kBAAkB,MAAM,UAAU,MAAM,SAAS,QAAQ;CAC5E,MAAM,WAAW,aAAa,oBAAoB,CAAC;CAEnD,MAAM,SAAS,cACV,OAAO,WAAW,SAAS,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM,EAAA,CAAG,KACzE,KAAA;CAEJ,MAAM,cAAc,OAAO,eAAe,SAAS,MAAM,UAAU,MAAM,OAAO,EAAA,CAAG;CACnF,MAAM,KAAK,eAAe,OAAO;CAEjC,MAAM,cAAc,OAAO,SACxB,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC,CAAC,CAC1B,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,MAAM,OAAO,GAC5B,GAAG,GAAG,WAAW,KAAK,MAAM,GAC5B,IAAI,GAAG,YAAY,QAAQ,cAAc,MAAM,MAAM,OAAO,MAAM,SAAS,YAAY,CAAC,CAC1F,CACF;CAEF,MAAM,WAAW,OAAO,YAAY,EAAE,EAAE,SAAS,CAAC;CAElD,MAAM,gBACJ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,WAAW,cAAc,UAAU;CAE3F,MAAM,UACJ,eAAe,KAAA,IACX,KAAA,IACA,OAAO,QAAQ,cAAc,WAAW,QAAQ,WAAW,UAAU;CAE3E,MAAM,oBACJ,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,aAAa,MAAM,WACjD,WAAW,QAAQ,WAAW,WAAW,YACzC,SAAS,QAAQ,OAAO,mBAAmB,MAAM,WACjD,kBAAkB,KAAA,KAClB,YAAY,eAAe,MAAM,OAAO,KACxC,YAAY,KAAA,KACZ,UAAU;CAEZ,MAAM,mBACJ,eAAe,KAAA,KACf,MAAM,cAAc,KAAA,KACpB,WAAW,QAAQ,WAAW,mBAAmB,MAAM,UAAU,SACjE,WAAW,QAAQ,WAAW,oBAAoB,MAAM,UAAU;CAEpE,MAAM,WACJ,QAAQ,WACR,qBACA,oBACA,SAAS,WAAW,OAAO,UAC3B,WAAW,MAAM,OAAO;CAE1B,MAAM,iBAAiB,MAAM,MAAM,OAAO;CAC1C,MAAM,gBAAgB,OAAO,gBAAgB,OAAO;CAEpD,MAAM,aAA+B,CACnC,GAAI,OAAO,iBACT,SACA,MAAM,UACN,MAAM,SACN,WACA,aAAa,SAAS,OAAO,MAAM,GAAG,CAAC,GACvC,KAAK,QACL,eACA,UACF,GACA,GAAI,OAAO,sBACT,SACA,MAAM,UACN,MAAM,SACN,WACA,MAAM,gBACN,UACA,KACA,gBACA,mCAAmC,MAAM,gBAC3C,CACF;CAEA,MAAM,SAAS,mCAAmC,MAAM;CAExD,IAAI,CAAC,UAAU;EACb,MAAM,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;EAEtD,IACE,SAAS,WAAW,OAAO,UAC3B,QAAQ,WACR,qBACA,CAAC,oBACD,WAAW,MAAM,OAAO,uBACxB;GACA,MAAM,KAAK,kBAAkB,OAAO;GACpC,MAAM,KAAK,cAAc,OAAO;GAEhC,WAAW,KACT,OAAO,UACL,IACE,QAAQ,WACR,GAAG,wBAAwB,QAAQ,OAAO,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,KAAK,QAAQ,GAAG,QAAQ,EAAE,OAAO,GAAG,cAAc,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,aAAa,EAAE,IACjT,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,MAAM,kBAAkB,GAAG,UAAU,KAAK,QAAQ,GAAG,UAAU,IAC1P,iBAAiB,SAAS,MAAM,UAAU,MAAM,SAAS,KAAK,QAAQ,MAAM,MAAM,CACpF,GACA,MACF,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OAC1C,aACE,QAAQ,aAAa,aAAa;IAChC,UAAU,MAAM;IAChB,SAAS,MAAM;IACf,WAAW,KAAK;IAChB,WAAW,MAAM;IACjB,kBAAkB;IAClB,sBAAsB;GACxB,CAAC,GACD,CACE,CAAC,QAAQ,aAAa,YAAY,QAAQ,GAAG,SAAS,GACtD,CACE,QAAQ,aAAa,gBACrB,QAAQ,GAAG,kBAAkB,MAAM,OAAO,sBAAsB,CAClE,CACF,CACF,CACF,CACF,CACF;EACF;EACA,WAAW,KACT,OAAO,cACL,SACA,MAAM,UACN,MAAM,gBACN,WACA,YACA,gBACA,QAAQ,GAAG,kBAAkB,MAAM,OAAO,sBAAsB,CAClE,CACF;EAEA,OAAO;GACL,SAAS;GACT;GACA,YAAY,UACV,2BAA2B,QAAQ,mBAAmB,KAAK,KAC3D,2BAA2B,QAAQ,kBAAkB,KAAK,KAC1D,eAAe,OAAO,MAAM;EAChC;CACF;CACA,MAAM,UAAU,OAAO,gBAAgB,OAAO;CAC9C,MAAM,sBAAsB,KAAK,IAAI,SAAU,MAAM,MAAM,OAAO,0BAA0B;CAE5F,MAAM,eAAwC;EAC5C,UAAU,MAAM;EAChB,SAAS,MAAM;EACf,gBAAgB,MAAM;EACtB,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,WAAW,KAAK;EAChB,SAAS,MAAM;EACf,iBAAiB;EACjB;CACF;CAWA,MAAM,WAAW,QAAQ;EARvB,MAAM;EACN,cAAc;GACZ,gBAAgB,MAAM;GACtB,SAAS,MAAM;GACf,iBAAiB;EACnB;CAG8B,GAAG,OAAO;CAC1C,MAAM,KAAK,kBAAkB,OAAO;CACpC,MAAM,KAAK,cAAc,OAAO;CAEhC,WAAW,KACT,OAAO,UACL,IACE,QAAQ,WACR,iBAAiB,SAAS,MAAM,UAAU,MAAM,SAAS,KAAK,QAAQ,MAAM,MAAM,GAClF,GAAG,wBAAwB,QAAQ,OAAO,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,KAAK,QAAQ,GAAG,QAAQ,EAAE,OAAO,GAAG,cAAc,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,aAAa,EAAE,IACjT,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,MAAM,kBAAkB,GAAG,cAAc,KAAK,IAAI,MAAM,MAAM,UAAW,OAAO,GAAG,aAAa,EAAE,OAAO,GAAG,eAAe,KAAK,IAAI,MAAM,MAAM,UAAW,QAAQ,GAAG,cAAc,EAAE,OAAO,GAAG,UAAU,KAAK,QAAQ,GAAG,UAAU,EAC7d,GACA,MACF,GACA,OAAO,cACL,SACA,MAAM,UACN,MAAM,gBACN,WACA,YACA,gBACA,QAAQ,GAAG,kBAAkB,MAAM,OAAO,sBAAsB,CAClE,GACA,OAAO,UACL,SACG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAC3D,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,MAAM,OAAO,GAC5B,GAAG,GAAG,OAAO,QAAQ,CACvB,CACF,CACJ,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OAC1C,aACE,QAAQ,aAAa,aAAa;EAChC,GAAG;EACH,sBAAsB;CACxB,CAAC,GACD,CACE,CACE,QAAQ,aAAa,gBACrB,QAAQ,GAAG,kBAAkB,MAAM,OAAO,sBAAsB,CAClE,CACF,CACF,CACF,CACF,CACF;CAEA,OAAO;EACL,SAAS;EACT;EACA,YAAY,UACV,2BAA2B,QAAQ,mBAAmB,KAAK,KAC3D,2BAA2B,QAAQ,kBAAkB,KAAK,KAC1D,eAAe,OAAO,MAAM;CAChC;AACF,CAAC;AAED,MAAM,sBAAsB,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACxE,SACA,OACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,OAAO,QAAQ,UAAU;EAC7B,UAAU,MAAM;EAChB,SAAS,MAAM;EACf,SAAS,MAAM;CACjB,CAAC;CAED,MAAM,UAAU,OAAO,UAAU,SAAS,MAAM,UAAU,MAAM,SAAS,MAAM,OAAO;CACtF,MAAM,IAAI,oBAAoB,OAAO;CAErC,MAAM,OAAO,OAAO,SACjB,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,gBAAgB,MAAM,cAAc,CAAC,CAAC,CAAC,CACtF,MAAM,CAAC,EAAA,CAAG;CAEb,MAAM,MAAM,OAAO,oBAAoB,OAAO;CAC9C,MAAM,SAAS,QAAQ,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,aAAa,OAAO,GAAG;CAErF,MAAM,WACJ,QAAQ,WACR,WAAW,KAAA,KACX,OAAO,aAAa,MAAM,YAC1B,OAAO,mBAAmB,MAAM,kBAChC,OAAO,YAAY,MAAM,WACzB,OAAO,WAAW,MAAM,sBACxB,OAAO,cAAc,KAAK,UAC1B,YAAY,OAAO,SAAS,MAAM,OAAO,KACzC,IAAI,QAAQ,aAAa,cAAc,SACvC,OAAO,kBAAkB;CAE3B,MAAM,YAAY;EAChB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;EACrB,QAAQ,aAAa;CACvB;CAEA,MAAM,QACJ,QAAQ,KAAA,IACJ,GAAG,UACH,IAAI,GAAG,UAAU,KAAK,QAAQ,GAAG,OAAO,QAAQ,aAAa,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;CAE1F,OAAO;EACL;EACA;EACA;EACA,SAAS;EACT,WAAW,IACT,QAAQ,WACR,GAAG,wBAAwB,QAAQ,aAAa,MAAM,SAAS,MAAM,OAAO,EAAE,SAAS,KAAK,IAAI,MAAM,OAAO,EAAE,QAAQ,EAAE,OAAO,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS,EAAE,KAAK,QAAQ,GAAG,UAAU,EAC/N;EACA,kBACE,QAAQ,KAAA,IACJ,GAAG,UACH,GAAG,wBAAwB,QAAQ,aAAa,MAAM,SAAS,MAAM,OAAO,EAAE,SAAS,KAAK,IAAI,MAAM,MAAM,EAAE,QAAQ,EAAE,OAAO,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS,EAAE,KAAK,QAAQ,GAAG,UAAU;CACpO;AACF,CAAC;;AAGD,MAAa,yBAAyB,OAAO,GAAG,gCAAgC,CAAC,CAAC,WAChF,SACA,OACA;CACA,OAAO,OAAO,oBAAoB,SAAS,KAAK;AAClD,CAAC;AAED,MAAM,iBAAiB,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACzD,SACA,OACA,SACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,oBAAoB,SAAS,KAAK;CAC3D,MAAM,EAAE,UAAU,QAAQ,SAAS,MAAM;CAEzC,MAAM,UAAU,QAD0B,WAAW,cAAc,YACjC,OAAO;CAEzC,IAAI,CAAC,UAAU,OAAO;EAAE;EAAS,YAAY,CAAC;CAAE;CAEhD,MAAM,iBAAiB,CACrB,OAAO,UACL,IACE,UAAU,kBACV,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE,KAAK,IAAI,MAAM,MAAM,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS,EAAE,KAAK,IAAI,MAAM,MAAM,oBAAoB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,IAAI,EAAE,KAAK,IAAI,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,IAAI,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE,KAAK,IAAI,MAAM,aAAa,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,CAAC,EAAE,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc,EAAE,KAAK,IAAI,MAAM,QAAQ,cAAc,OAAQ,eAAe,GAAG,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc,CAAC,EAAE,EACj1B,GACA,oCAAoC,MAAM,gBAC5C,CACF;CA+BA,OAAO;EACL;EACA,YAAA;GA9BA,OAAO,UACL,UAAU,WACV,oCAAoC,MAAM,gBAC5C;GACA,OAAO,UACL,SACG,OAAO,QAAQ,aAAa,KAAK,CAAC,CAClC,IAAI,aAAa,CAAC,CAAC,QAAQ,aAAa,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAC1D,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,gBAAgB,MAAM,cAAc,GACzC,GAAG,EAAE,QAAQ,MAAM,kBAAkB,GACrC,GAAG,EAAE,UAAU,KAAK,CACtB,CACF,CACJ;GACA,OAAO,cACL,SACA,MAAM,UACN,MAAM,oBACN,YACA,aACA,OAAQ,eACV;GACA,GAAG;EAKM;EACT;EACA,YAAY,UACV,2BAA2B,QAAQ,mBAAmB,KAAK,KAC3D,eAAe,OAAO,oCAAoC,MAAM,gBAAgB;CACpF;AACF,CAAC;AAED,MAAM,kBAAkB,YAAqB;CAC3C,MAAM,OAAgB,SACpB,OAAO,IAAI,aAAa;EACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;EAE1D,OAAO,OAAO;CAChB,CAAC;CAEH,OAAO;EACL,QACE,OACA,YAEA,IACE,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,UAAU,SAAS,OAAO,OAAO;EACjD,CAAC,CACH;EACF,UACE,OACA,YAEA,IACE,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,YAAY,SAAS,OAAO,OAAO;EACnD,CAAC,CACH;EACF,WACE,OACA,YAEA,IACE,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO,eAAe,SAAS,OAAO,OAAO;EACtD,CAAC,CACH;EACF,gBACE,OACA,YAEA,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GAExB,OAAO,OAAO,IACZ,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IAEvB,MAAM,OAAO,OAAO,eAAe,SAAS,MAAM,UAAU,MAAM,OAAO,EAAA,CAAG;IAC5E,MAAM,MAAM,OAAO,oBAAoB,OAAO;IAC9C,MAAM,IAAI,kBAAkB,OAAO;IAEnC,IAAI,QAAQ,KAAA,GACV,OAAO;KAAE,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;KAAG,YAAY,CAAC;IAAE;IAC3E,MAAM,UAAU,OAAO,QAAQ,cAAc,IAAI,QAAQ,WAAW,UAAU;IAE9E,MAAM,gBACJ,IAAI,QAAQ,WAAW,mBAAmB,QAC1C,IAAI,QAAQ,WAAW,mBAAmB,KAAA,IACtC,KAAA,IACA,OAAO,QAAQ,cAAc,IAAI,QAAQ,WAAW,cAAc;IAExE,MAAM,UACJ,IAAI,QAAQ,WAAW,aAAa,QACpC,IAAI,QAAQ,WAAW,aAAa,KAAA,IAChC,KAAA,IACA,OAAO,QAAQ,cAAc,IAAI,QAAQ,WAAW,QAAQ;IAElE,MAAM,QAAQ,IAAI,QAAQ,WAAW;IAErC,MAAM,eACJ,UAAU,aAAa,kBAAkB,KAAA,KAAa,iBAAiB;IAEzE,MAAM,iBAAiB,eAAe,cAAc;IAapD,IAAI,EAVF,IAAI,QAAQ,WAAW,aAAa,MAAM,WAC1C,IAAI,QAAQ,WAAW,gBAAgB,MAAM,cAC7C,IAAI,QAAQ,WAAW,WAAW,YAClC,UAAU,OACV,OAAO,IAAI,QAAQ,WAAW,UAAU,IAAI,MAAM,OAAO,4BACxD,mBAAmB,SACjB,mBAAmB,eAClB,MAAM,wBACL,YAAY,KAAA,KAAa,WAAW,QAE5B;KACb,MAAM,aAAa,eACf,CACE,OAAO,UACL,SACG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,eAAe,WAAW,CAAC,CAAC,CAAC,CAAC,CACpE,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,SAAS,MAAM,OAAO,GAC3B,GAAG,EAAE,eAAe,SAAS,GAC7B,IAAI,EAAE,eAAe,QAAQ,GAAG,SAAS,CAC3C,CACF,CACJ,CACF,IACA,CAAC;KAEL,OAAO;MAAE,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;MAAG;KAAW;IACvE;IACA,MAAM,eAAe,OAAO,gBAAgB,OAAO;IACnD,MAAM,WAA+B;KAAE,MAAM;KAAW;IAAa;IAErE,MAAM,YAAY,IAChB,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,SAAS,MAAM,OAAO,GAC3B,GAAG,EAAE,SAAS,MAAM,OAAO,GAC3B,GAAG,EAAE,YAAY,MAAM,UAAU,GACjC,GAAG,EAAE,OAAO,QAAQ,GACpB,GAAG,GAAG,EAAE,UAAU,KAAK,QAAQ,GAAG,aAClC,GAAG,GAAG,EAAE,UAAU,KAAK,MAAM,OAAO,2BACpC,mBAAmB,QACf,GAAG,EAAE,eAAe,KAAK,IACzB,IACE,GAAG,EAAE,eAAe,WAAW,GAC/B,GAAG,GAAG,GAAG,EAAE,QAAQ,WAAW,IAAI,EAAE,SAAS,QAAQ,GAAG,SAAS,CAAC,CACpE,CACN;IAEA,OAAO;KACL,SAAS,QAAQ,UAAU,OAAO;KAClC,YAAY,CACV,OAAO,UACL,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,UAAU,IACvE,iCAAiC,MAAM,SACzC,GACA,OAAO,UACL,SACG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IACC,aAAa;MACX,CACE,QAAQ,WAAW,WACnB,OAAO,IAAI,QAAQ,WAAW,UAAU,IAAI,CAC9C;MACA,CAAC,QAAQ,WAAW,eAAe,SAAS;MAC5C,CAAC,QAAQ,WAAW,cAAc,YAAY;MAC9C,CACE,QAAQ,WAAW,eACnB,QAAQ,GAAG,kBAAkB,MAAM,OAAO,mBAAmB,CAC/D;MACA,CACE,QAAQ,WAAW,SACnB,QAAQ,GAAG,kBAAkB,MAAM,OAAO,mBAAmB,CAC/D;KACF,CAAC,CACH,CAAC,CACA,MAAM,SAAS,CACpB,CACF;KACA,YAAY,UACV,eAAe,OAAO,iCAAiC,MAAM,SAAS;IAC1E;GACF,CAAC,CACH;EACF,CAAC;EACH,iBACE,OACA,YAEA,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GAExB,OAAO,OAAO,IACZ,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IAEvB,MAAM,OAAO,OAAO,eAAe,SAAS,MAAM,UAAU,MAAM,OAAO,EAAA,CAAG;IAC5E,MAAM,UAAU,QAAQ,KAAA,GAAW,OAAO;IAE1C,IACE,QAAQ,KAAA,KACR,IAAI,QAAQ,WAAW,aAAa,MAAM,WAC1C,IAAI,QAAQ,WAAW,gBAAgB,MAAM,cAC7C,IAAI,QAAQ,WAAW,kBAAkB,MAAM,gBAC/C,IAAI,QAAQ,WAAW,mBAAmB,WAE1C,OAAO;KAAE;KAAS,YAAY,CAAC;IAAE;IACnC,MAAM,IAAI,kBAAkB,OAAO;IACnC,MAAM,UAAgC,MAAM;IAE5C,MAAM,QACJ,QAAQ,SAAS,aACb,aACA,QAAQ,SAAS,oBACf,WACA;IAER,MAAM,SAA4C,CAChD,CAAC,QAAQ,WAAW,eAAe,KAAK,GACxC,CAAC,QAAQ,WAAW,eAAe,IAAI,CACzC;IAEA,IAAI,QAAQ,SAAS,aACnB,OAAO,KAAK,CACV,QAAQ,WAAW,SACnB,QAAQ,GAAG,kBAAkB,OAAO,IAAI,QAAQ,WAAW,oBAAoB,CAAC,CAClF,CAAC;IACH,IAAI,QAAQ,SAAS,mBACnB,OAAO,KAAK,CAAC,QAAQ,WAAW,OAAO,WAAW,CAAC;IAErD,MAAM,YAAY,IAChB,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,SAAS,MAAM,OAAO,GAC3B,GAAG,EAAE,SAAS,MAAM,OAAO,GAC3B,GAAG,EAAE,YAAY,MAAM,UAAU,GACjC,GAAG,EAAE,cAAc,MAAM,YAAY,GACrC,GAAG,EAAE,eAAe,SAAS,CAC/B;IAEA,MAAM,aAA+B,CACnC,OAAO,UACL,SACG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,MAAM,CAAC,CAAC,CACzB,MAAM,SAAS,CACpB,CACF;IAEA,IAAI,QAAQ,SAAS,mBAAmB;KACtC,MAAM,KAAK,cAAc,OAAO;KAEhC,WAAW,KACT,OAAO,UACL,SACG,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IAAI,aAAa,CAAC,CAAC,QAAQ,OAAO,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC,CACzD,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,IAAI,QAAQ,WAAW,QAAQ,GAC9C,GAAG,GAAG,UAAU,IAAI,QAAQ,WAAW,UAAU,GACjD,GAAG,GAAG,eAAe,MAAM,OAAO,GAClC,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,EAAE,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,MAAM,MAAM,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,KAAK,IAAI,MAAM,MAAM,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,kBAAkB,EAAE,MAAM,gBACta,CACF,CACJ,CACF;IACF;IAEA,OAAO;KAAE;KAAS;IAAW;GAC/B,CAAC,CACH;EACF,CAAC;EACH,SACE,OACA,YAEA,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GAExB,OAAO,OAAO,IACZ,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IAEvB,MAAM,OAAO,QAAQ,UAAU;KAC7B,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,SAAS,MAAM;IACjB,CAAC;IAED,MAAM,UAAU,OAAO,UAAU,SAAS,MAAM,UAAU,MAAM,SAAS,MAAM,OAAO;IAEtF,MAAM,UAAU,OAAO,WACrB,SACA,MAAM,UACN,MAAM,SACN,KAAK,MACP,EAAA,CAAG;IAEH,MAAM,UAAU,QAAQ,KAAA,GAAW,OAAO;IAC1C,MAAM,SAAS,SAAS,QAAQ,OAAO;IAEvC,IAAI,CAAC,QAAQ,WAAW,WAAW,QAAQ,WAAW,KAAA,GACpD,OAAO;KAAE;KAAS,YAAY,CAAC;IAAE;IACnC,MAAM,cAAc,OAAO,eAAe,SAAS,MAAM,UAAU,MAAM,EAAA,CAAG;IAE5E,MAAM,gBACJ,eAAe,KAAA,IACX,KAAA,IACA,OAAO,QAAQ,WAAW,cAAc,UAAU;IAExD,IAAI,kBAAkB,KAAA,KAAa,CAAC,YAAY,eAAe,MAAM,OAAO,GAC1E,OAAO;KAAE;KAAS,YAAY,CAAC;IAAE;IACnC,MAAM,KAAK,kBAAkB,OAAO;IACpC,MAAM,KAAK,cAAc,OAAO;IAChC,MAAM,SAAS,kCAAkC;IAEjD,OAAO;KACL;KACA,YAAY;MACV,OAAO,UACL,IACE,QAAQ,WACR,GAAG,wBAAwB,QAAQ,OAAO,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,KAAK,QAAQ,GAAG,QAAQ,EAAE,OAAO,GAAG,cAAc,KAAK,IAAI,MAAM,QAAQ,GAAG,aAAa,EAAE,IAC1S,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,GAAG,QAAQ,KAAK,IAAI,MAAM,QAAQ,GAAG,OAAO,EAAE,OAAO,GAAG,MAAM,aAC5L,GACA,MACF;MACA,OAAO,UACL,SACG,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,aAAa,CAAC,CAAC,QAAQ,WAAW,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAC5D,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,MAAM,GACrB,GAAG,GAAG,OAAO,QAAQ,CACvB,CACF,CACJ;MACA,OAAO,UACL,SACG,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IAAI,aAAa,CAAC,CAAC,QAAQ,OAAO,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC,CACzD,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,MAAM,OAAO,GAC5B,GAAG,GAAG,UAAU,KAAK,MAAM,GAC3B,GAAG,GAAG,eAAe,MAAM,CAC7B,CACF,CACJ;KACF;KACA,YAAY,UAAmB,eAAe,OAAO,MAAM;IAC7D;GACF,CAAC,CACH;EACF,CAAC;EACH,UACE,OACA,YAEA,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GAExB,OAAO,OAAO,IACZ,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IAEvB,MAAM,MAAM,OAAO,oBAAoB,OAAO;IAC9C,MAAM,YAAY,QAAQ,cAAc,GAAG;IAC3C,MAAM,KAAK,kBAAkB,OAAO;IACpC,MAAM,KAAK,oBAAoB,OAAO;IACtC,MAAM,KAAK,eAAe,OAAO;IACjC,MAAM,KAAK,aAAa,OAAO;IAC/B,MAAM,KAAK,eAAe,OAAO;IACjC,MAAM,KAAK,eAAe,OAAO;IACjC,MAAM,KAAK,cAAc,OAAO;IAChC,MAAM,MAAM,aAAa,OAAO;IAChC,IAAI,YAAY,MAAM;IACtB,IAAI,UAAU;IAEd,MAAM,QAAW,WACf,OAAO,KACL,OAAO,KAAK,SAAS;KACnB,IAAI,KAAK,SAAS,WAAW,UAAU;KACvC,MAAM,WAAW,KAAK,MAAM,GAAG,SAAS;KAExC,aAAa,SAAS;KAEtB,OAAO;IACT,CAAC,CACH;IAEF,MAAM,gBAAgB,OAAO,KAC3B,SACG,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAAC,CAAC,CAC7C,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,cAAc,OAAO,KACzB,SACG,OAAO,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC,CAC/B,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,WAAW,OAAO,KACtB,SACG,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC,CAAC,CACnC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,QAAQ,OAAO,KACnB,SACG,OAAO;KACN,QAAQ,GAAG;KACX,WAAW,GAAG;KACd,UAAU,GAAG;KACb,WAAW,GAAG;IAChB,CAAC,CAAC,CACD,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,WAAW,OAAO,KACtB,SACG,OAAO;KAAE,WAAW,GAAG;KAAW,WAAW,GAAG;IAAU,CAAC,CAAC,CAC5D,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,WAAW,OAAO,KACtB,SACG,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC,CAAC,CACnC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,IAAI,GAAG,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC9E,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,SAAS,OAAO,KACpB,SACG,OAAO;KAAE,SAAS,GAAG;KAAS,UAAU,GAAG;IAAS,CAAC,CAAC,CACtD,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,OAAO,GAAG,aAAa,GACvB,UACE,SACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,GAAG,QAAQ,GAC3B,GAAG,GAAG,SAAS,GAAG,OAAO,GACzB,GAAG,GAAG,WAAW,GAAG,QAAQ,CAC9B,CACF,CACJ,GACA,UACE,SACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,GAAG,UAAU,GAAG,QAAQ,GAC3B,GAAG,GAAG,SAAS,GAAG,OAAO,GACzB,GAAG,GAAG,WAAW,GAAG,QAAQ,CAC9B,CACF,CACJ,CACF,CACF,CAAC,CACA,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,aAAa,OAAO,KACxB,SACG,OAAO;KACN,SAAS,IAAI;KACb,QAAQ,IAAI;KACZ,WAAW,IAAI;KACf,UAAU,IAAI;IAChB,CAAC,CAAC,CACD,KAAK,QAAQ,UAAU,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,IAAI,UAAU,MAAM,QAAQ,GAC/B,UACE,SACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,CAC9B,CACF,CACJ,CACF,CACF,CAAC,CACA,MAAM,YAAY,CAAC,CACxB;IAEA,MAAM,SAAS,mCAAmC,MAAM,SAAS,GAAG;IACpE,MAAM,aAA+B,CAAC;IAEtC,MAAM,gBAAgB,OAAO,GAAG,WAC9B,WACA,OACA;KACA,WAAW,KAAK,OAAO,UAAU,WAAW,MAAM,GAAG,OAAO,UAAU,KAAK,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,OAAO,eAAe;KAC/B,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,gBAAgB,IAAI,cAAc,GACxC,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,aAAa,MAAM,SAAS,UAAU,IACzE,SAAS,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,MAAM,SAAS,CAC7D;IACF;IACA,KAAK,MAAM,OAAO,aAAa;KAC7B,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,UAAU,IACvE,SACG,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,IAAI,aAAa,CAAC,CAAC,QAAQ,OAAO,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC,CACzD,MAAM,IAAI,GAAG,GAAG,UAAU,MAAM,QAAQ,GAAG,GAAG,GAAG,eAAe,IAAI,OAAO,CAAC,CAAC,CAClF;KACA,WAAW,KACT,OAAO,UAAU,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,CAC7E;IACF;IACA,KAAK,MAAM,OAAO,UAAU;KAC1B,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,UAAU,IACpE,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,SAAS,CACxD;IACF;IACA,KAAK,MAAM,OAAO,OAAO;KACvB,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,UAAU,IACvE,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,MAAM,SAAS,CAC3D;IACF;IACA,KAAK,MAAM,OAAO,UAAU;KAC1B,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,aAAa,MAAM,SAAS,UAAU,IACzE,SAAS,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,MAAM,SAAS,CAC7D;IACF;IACA,KAAK,MAAM,OAAO,UAAU;KAC1B,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,IAAI,GAAG,gBAAgB,QAAQ,GAAG,SAAS,CAC7C;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,UAAU,IACpE,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,SAAS,CACxD;IACF;IACA,KAAK,MAAM,OAAO,QAAQ;KACxB,MAAM,YAAY,IAChB,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,OAAO,GAAG,aAAa,GACvB,UACE,SACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,GAAG,QAAQ,GAC3B,GAAG,GAAG,SAAS,GAAG,OAAO,GACzB,GAAG,GAAG,WAAW,GAAG,QAAQ,CAC9B,CACF,CACJ,CACF;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,OAAO,MAAM,SAAS,UAAU,IACnE,SAAS,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,MAAM,SAAS,CACvD;IACF;IACA,KAAK,MAAM,OAAO,YAAY;KAC5B,MAAM,YAAY,IAChB,GAAG,IAAI,UAAU,MAAM,QAAQ,GAC/B,GAAG,IAAI,SAAS,IAAI,OAAO,GAC3B,GAAG,IAAI,QAAQ,IAAI,MAAM,GACzB,GAAG,IAAI,WAAW,IAAI,SAAS,GAC/B,GAAG,IAAI,UAAU,IAAI,QAAQ,GAC7B,UACE,SACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,GAAG,GAAG,SAAS,IAAI,OAAO,GAC1B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,CAC9B,CACF,CACJ,CACF;KAEA,OAAO,cACL,GAAG,wBAAwB,QAAQ,UAAU,MAAM,SAAS,UAAU,IACtE,SAAS,OAAO,QAAQ,UAAU,KAAK,CAAC,CAAC,MAAM,SAAS,CAC1D;IACF;IAGA,YAAY,YAAY,SAAS,KAAK,SAAS,SAAS,KAAK,MAAM,SAAS;IAG5E,OAAO;KACL,SAAS,QAAQ;MAHkB,SAAS,MAAM,QAAQ;MAAW;KAG/C,GAAG,OAAO;KAChC;KACA,YAAY,UAAmB,eAAe,OAAO,MAAM;IAC7D;GACF,CAAC,CACH;EACF,CAAC;CACL;AACF;AAEA,MAAa,kCAcX,UACA,YAEA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,QAAQ,eAAe,OAA6B;CAE1D,MAAM,OAAsB,SAC1B,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EAErD,OAAO,OAAO,kBAAkB,MAAM,CAAC;CACzC,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;CAcF,OAAO,EAAE,kBAAkB;EAXzB,QAAQ,OAAO,YAAY,IAAI,MAAM,MAAM,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACtF,UAAU,OAAO,YAAY,IAAI,MAAM,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EACrF,WAAW,OAAO,YAAY,IAAI,MAAM,SAAS,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EACvF,gBAAgB,OAAO,YACrB,IAAI,MAAM,cAAc,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EAChE,iBAAiB,OAAO,YACtB,IAAI,MAAM,eAAe,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EACjE,SAAS,OAAO,YAAY,IAAI,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;EACnF,UAAU,OAAO,YAAY,IAAI,MAAM,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB;CAGtD,EAAE;AACrC,CAAC;;;;;;AASH,SAAgB,6BAmBd,SACA,SAGA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EAsFrD,QAAO,OApFe,uBAElB,OAAO,IAAI,aAAa;GACtB,MAAM,aAA+B,CAAC;GACtC,IAAI;GAEJ,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,WAAW,KAAK,SAAS,CAAC,EACrE,CAAC;GAED,MAAM,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAC9C,OAAO,eAAe,mBAAmB,eAAe,CAC1D;GAEA,MAAM,QAAQ,eAAe,QAAQ,OAA6B;GAElE,MAAM,OAAsB,SAC1B,uBAEI,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IACvB,MAAM,UAAU,OAAO;IAEvB,OAAO,MAAM;IACb,IAAI,aAAa,KAAA,GAAW,OAAO,OAAO,YAAY;IACtD,MAAM,UAAU;KAAE,GAAG;KAAS,cAAc,QAAQ,QAAQ,KAAA,CAAS;IAAE;IAEvE,WAAW;IACX,WAAW,KAAK,GAAG,QAAQ,UAAU;IAErC,OAAO,QAAQ;GACjB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KACA,OAAO,KAAK,WAAW,OAAO,KAAK,GACnC,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;GAmBF,MAAM,WAAW,QAAQ,KAAK,kBAAkB;IAhB9C,QAAQ,OAAO,YACb,MAAM,IAAI,IAAI,MAAM,MAAM,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC;IACxE,UAAU,OAAO,YACf,MAAM,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IACrE,WAAW,OAAO,YAChB,MAAM,IAAI,IAAI,MAAM,SAAS,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IACtE,gBAAgB,OAAO,YACrB,MAAM,IAAI,IAAI,MAAM,cAAc,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IAC3E,iBAAiB,OAAO,YACtB,MAAM,IAAI,IAAI,MAAM,eAAe,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IAC5E,SAAS,OAAO,YACd,MAAM,IAAI,IAAI,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;IACpE,UAAU,OAAO,YACf,MAAM,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;GAGjB,CAAC,CAAC,CAAC,KACvD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;GAEA,MAAM,QAAQ,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;GAEtE,IAAI,UAAU,iBAAiB,KAAA,GAAW;IACxC,MAAM,SAAS,OAAO,OAAO,OAAO,SAAS,aAAa,IAAI;IAE9D,IAAI,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,iBACvD,OAAO,OAAO,YAAY;GAC9B;GACA,OAAO,SAAS,QAAQ,MAAM,UAAU,CAAC,CAAC,KACxC,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAChB,oBAAoB,OAAO,UAAU,SAAS,IAAI,YAAY,IAAI,KACpE,CACF,CACF,GACA,gBACF;GAEA,OAAO;EACT,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;CAChB,CAAC,CACH;AACF;;AAgBA,MAAa,+BAA+B,OAAO,GAAG,sCAAsC,CAAC,CAC3F,WAeE,SACA,MACA,mBACA,SACA;CACA,MAAM,UAAU,OAAO,eACrB,SACA,KAAK,QACJ,UAAU,kBAAkB,KAAK,QAAQ,UAAU,eAAe,OAAO,CAC5E;CAKA,IAAI,QAAQ,WAAW,WAAW,GAAG,OAAO;CAC5C,MAAM,CAAC,YAAY,GAAG,wBAAwB,QAAQ;CACtD,MAAM,SAAS,qCAAqC,KAAK,MAAM;CAE/D,OAAO;EACL,SAAS,QAAQ;EACjB,YAAY;GACV;GACA,GAAG,kBAAkB;GACrB,OAAO,UAAU,kBAAkB,kBAAkB,MAAM;GAC3D,GAAG;EACL;EACA,gBAAgB,CACd,OAAO,UAAU,kBAAkB,kBAAkB,MAAM,GAC3D,GAAI,QAAQ,kBAAkB,CAAC,CACjC;CACF;AACF,CACF;AAiBA,MAAM,oBACJ,WAEA,yBACE,SACC,UAAU,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KAAK,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC1F,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,yBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,oBAAoB,CAAC,CAAC,KAAK,KACrC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KACA,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAChB,OAAO,GAAG,oBAAoB,CAAC,CAAC,KAAK,IAAI,QAAQ,YAAY,CAC/D,CACF,CACF,CACF;AAEF,MAAM,qBACJ,MACA,UAAU,MAQV,OAAO,cAAc;CACnB,IAAI;CAgBJ,OAda,uBAET,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO;EACxB,MAAM,UAAU,OAAO;EAEvB,YAAY,QAAQ;EACpB,OAAO,SAAS,QAAQ,MAAM,QAAQ,UAAU;EAEhD,OAAO,QAAQ;CACjB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAEhC,CAAC,CAAC,KACV,OAAO,YAAY,UACjB,UAAU,KAAK,oBAAoB,OAAO,SAAS,IAC/C,kBAAkB,MAAM,UAAU,CAAC,IACnC,OAAO,UAAU,KAAK,CAC5B,CACF;AACF,CAAC"}
|
|
@@ -0,0 +1,77 @@
|
|
|
1
|
+
import { SubjectId } from "../Schema.mjs";
|
|
2
|
+
import { AuthenticationEvidence, AuthenticationRequirement, AuthenticationRevision, PendingConsumption } from "../sessions/models.mjs";
|
|
3
|
+
import { HookConfigurationError } from "../hooks/models.mjs";
|
|
4
|
+
import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
|
|
5
|
+
import { PreparedCommit } from "../hooks/commit.mjs";
|
|
6
|
+
import { PrepareSessionCommit } from "../sessions/commit.mjs";
|
|
7
|
+
import { PendingAuthenticationInvalid, SessionConflict, SessionInvalid, SessionStepUpInvalid, SessionUnavailable, StaleAuthentication } from "../sessions/errors.mjs";
|
|
8
|
+
import { AuthenticationAuthority } from "../sessions/AuthenticationAuthority.mjs";
|
|
9
|
+
import { PendingAuthentication } from "../sessions/PendingAuthentication.mjs";
|
|
10
|
+
import "../Operations.mjs";
|
|
11
|
+
import { SessionRepository, SignedSessionValidity, StatefulSessionPersistence } from "../sessions/persistence.mjs";
|
|
12
|
+
import { SessionStepUpPersistence } from "../sessions/SessionStepUpPersistence.mjs";
|
|
13
|
+
import "../Sessions.mjs";
|
|
14
|
+
import "./model.mjs";
|
|
15
|
+
import { D1AuthenticationAuthorityMapping, D1PendingAuthenticationMapping, D1SignedSessionValidityMapping, D1StatefulSessionMapping } from "./session-model.mjs";
|
|
16
|
+
import { D1SessionStepUpMapping } from "./step-up-model.mjs";
|
|
17
|
+
import { D1BatchStatements } from "./D1BatchStatements.mjs";
|
|
18
|
+
import { SuppliedService } from "./SuppliedService.mjs";
|
|
19
|
+
import { D1PlanningDatabase } from "./d1-planning.mjs";
|
|
20
|
+
import { Context, DateTime, Effect, Schema } from "effect";
|
|
21
|
+
import "effect/unstable/sql/SqlError";
|
|
22
|
+
import "drizzle-orm/effect-core";
|
|
23
|
+
import { Statement } from "effect/unstable/sql/Statement";
|
|
24
|
+
import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
|
|
25
|
+
//#region src/drizzle/d1-sessions.d.ts
|
|
26
|
+
type Database = D1PlanningDatabase;
|
|
27
|
+
type D1DomainError = SessionStepUpInvalid | PendingAuthenticationInvalid | SessionConflict | SessionInvalid | SessionUnavailable | StaleAuthentication;
|
|
28
|
+
type D1CoordinatorError<E> = E | D1DomainError | HookConfigurationError;
|
|
29
|
+
declare const makeD1AuthenticationAuthorityServices: <Claims, Subject extends AnySQLiteTable, Credential extends AnySQLiteTable, Flow extends AnySQLiteTable, Pending extends AnySQLiteTable, NativeSubjectId>(database: Database, mapping: D1AuthenticationAuthorityMapping<Claims, Subject, Credential, Flow, Pending, NativeSubjectId>) => Effect.Effect<{
|
|
30
|
+
authenticationAuthority: {
|
|
31
|
+
readonly capture: (subjectId: SubjectId, credentialIds: ReadonlyArray<string>) => Effect.Effect<AuthenticationRevision, StaleAuthentication | SessionUnavailable>;
|
|
32
|
+
readonly requirements: (evidence: AuthenticationEvidence) => Effect.Effect<AuthenticationRequirement, StaleAuthentication | SessionUnavailable>;
|
|
33
|
+
readonly approve: <A>(input: {
|
|
34
|
+
readonly evidence: AuthenticationEvidence;
|
|
35
|
+
readonly now: DateTime.Utc;
|
|
36
|
+
readonly expiresAt: DateTime.Utc;
|
|
37
|
+
readonly absoluteExpiresAt: DateTime.Utc;
|
|
38
|
+
readonly pending?: PendingConsumption;
|
|
39
|
+
}, prepare: PrepareSessionCommit<void, A>) => Effect.Effect<PreparedCommit<A>, StaleAuthentication | PendingAuthenticationInvalid | SessionUnavailable>;
|
|
40
|
+
};
|
|
41
|
+
}, never, LifecycleHooks>;
|
|
42
|
+
declare const makeD1PendingAuthenticationServices: <Claims, Subject extends AnySQLiteTable, Credential extends AnySQLiteTable, Pending extends AnySQLiteTable, Flow extends AnySQLiteTable, NativeSubjectId>(database: Database, mapping: D1PendingAuthenticationMapping<Claims, Subject, Credential, Pending, Flow, NativeSubjectId>) => Effect.Effect<{
|
|
43
|
+
pendingAuthentication: PendingAuthentication<Claims>;
|
|
44
|
+
}, never, LifecycleHooks>;
|
|
45
|
+
declare const makeD1StatefulSessionServices: <Claims, Subject extends AnySQLiteTable, Credential extends AnySQLiteTable, Session extends AnySQLiteTable, Flow extends AnySQLiteTable, Pending extends AnySQLiteTable, NativeSubjectId, NativeSessionId>(database: Database, mapping: D1StatefulSessionMapping<Claims, Subject, Credential, Session, Flow, Pending, NativeSubjectId, NativeSessionId>) => Effect.Effect<{
|
|
46
|
+
statefulSessionPersistence: StatefulSessionPersistence<Claims>;
|
|
47
|
+
sessionRepository: SessionRepository;
|
|
48
|
+
}, never, LifecycleHooks>;
|
|
49
|
+
declare const makeD1SignedSessionValidityServices: <Subject extends AnySQLiteTable, Tombstone extends AnySQLiteTable, NativeSubjectId, NativeSessionId>(database: Database, mapping: D1SignedSessionValidityMapping<Subject, Tombstone, NativeSubjectId, NativeSessionId>) => Effect.Effect<{
|
|
50
|
+
signedSessionValidity: SignedSessionValidity;
|
|
51
|
+
}, never, LifecycleHooks>;
|
|
52
|
+
declare function coordinateD1AuthenticationAuthority<Claims, Subject extends AnySQLiteTable, Credential extends AnySQLiteTable, Flow extends AnySQLiteTable, Pending extends AnySQLiteTable, NativeSubjectId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
|
|
53
|
+
readonly mapping: D1AuthenticationAuthorityMapping<Claims, Subject, Credential, Flow, Pending, NativeSubjectId>;
|
|
54
|
+
}, body: Effect.Effect<A, E, R>): Effect.Effect<A, D1CoordinatorError<E> | DatabaseError, Exclude<R, AuthenticationAuthority | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
|
|
55
|
+
declare function coordinateD1PendingAuthentication<TargetId, Claims, Subject extends AnySQLiteTable, Credential extends AnySQLiteTable, Pending extends AnySQLiteTable, Flow extends AnySQLiteTable, NativeSubjectId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
|
|
56
|
+
readonly mapping: D1PendingAuthenticationMapping<NoInfer<Claims>, Subject, Credential, Pending, Flow, NativeSubjectId>;
|
|
57
|
+
readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;
|
|
58
|
+
}, body: Effect.Effect<A, E, R>): Effect.Effect<A, D1CoordinatorError<E> | DatabaseError, Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
|
|
59
|
+
declare function coordinateD1StatefulSessions<PersistenceId, RepositoryId, Claims, Subject extends AnySQLiteTable, Credential extends AnySQLiteTable, Session extends AnySQLiteTable, Flow extends AnySQLiteTable, Pending extends AnySQLiteTable, NativeSubjectId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
|
|
60
|
+
readonly mapping: D1StatefulSessionMapping<NoInfer<Claims>, Subject, Credential, Session, Flow, Pending, NativeSubjectId, NativeSessionId>;
|
|
61
|
+
readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;
|
|
62
|
+
readonly repository: SuppliedService<RepositoryId, SessionRepository>;
|
|
63
|
+
}, body: Effect.Effect<A, E, R>): Effect.Effect<A, D1CoordinatorError<E> | DatabaseError, Exclude<R, PersistenceId | RepositoryId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
|
|
64
|
+
declare function coordinateD1SignedSessionValidity<TargetId, Subject extends AnySQLiteTable, Tombstone extends AnySQLiteTable, NativeSubjectId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
|
|
65
|
+
readonly mapping: D1SignedSessionValidityMapping<Subject, Tombstone, NativeSubjectId, NativeSessionId>;
|
|
66
|
+
readonly target: SuppliedService<TargetId, SignedSessionValidity>;
|
|
67
|
+
}, body: Effect.Effect<A, E, R>): Effect.Effect<A, D1CoordinatorError<E> | DatabaseError, Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
|
|
68
|
+
declare const makeD1SessionStepUpServices: <Claims, Id, S extends AnySQLiteTable, C extends AnySQLiteTable, I extends AnySQLiteTable, Session extends AnySQLiteTable, T extends AnySQLiteTable, NativeId, NativeSessionId>(database: Database, mapping: D1SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>, target: Context.Service<Id, SessionStepUpPersistence<Claims>>) => Effect.Effect<{
|
|
69
|
+
sessionStepUpPersistence: SessionStepUpPersistence<Claims>;
|
|
70
|
+
}, never, LifecycleHooks>;
|
|
71
|
+
declare function coordinateD1SessionStepUp<Claims, Id, S extends AnySQLiteTable, C extends AnySQLiteTable, I extends AnySQLiteTable, Session extends AnySQLiteTable, T extends AnySQLiteTable, NativeId, NativeSessionId, A, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>, options: {
|
|
72
|
+
readonly mapping: D1SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>;
|
|
73
|
+
readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;
|
|
74
|
+
}, body: Effect.Effect<A, E, R>): Effect.Effect<A, D1CoordinatorError<E> | DatabaseError, Exclude<R, Id | D1BatchStatements> | LifecycleHooks | DatabaseRequirements>;
|
|
75
|
+
//#endregion
|
|
76
|
+
export { coordinateD1AuthenticationAuthority, coordinateD1PendingAuthentication, coordinateD1SessionStepUp, coordinateD1SignedSessionValidity, coordinateD1StatefulSessions, makeD1AuthenticationAuthorityServices, makeD1PendingAuthenticationServices, makeD1SessionStepUpServices, makeD1SignedSessionValidityServices, makeD1StatefulSessionServices };
|
|
77
|
+
//# sourceMappingURL=d1-sessions.d.mts.map
|