@yielded/auth 0.1.0-beta.1

package/dist/drizzle/d1-sessions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-sessions.mjs","names":[],"sources":["../../src/drizzle/d1-sessions.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- D1 batch planning bridges dynamic consumer Drizzle tables to Effect SQL statements. */\nimport { and, eq, getTableColumns, gt, inArray, not, or, sql, type SQL } from \"drizzle-orm\";\nimport type { EffectDrizzleQueryError } from \"drizzle-orm/effect-core\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Cause, Context, Data, DateTime, Effect, Schema } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n} from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport type { SubjectId, TokenDigest } from \"../Schema\";\nimport {\n  assessAuthentication,\n  snapshotSessionAuthenticationProvenance,\n} from \"../sessions/assurance\";\nimport { AuthenticationAuthority } from \"../sessions/AuthenticationAuthority\";\nimport type { PrepareSessionCommit } from \"../sessions/commit\";\nimport {\n  PendingAuthenticationInvalid,\n  SessionConflict,\n  type SessionConfigurationError,\n  SessionInvalid,\n  SessionStepUpInvalid,\n  SessionUnavailable,\n  StaleAuthentication,\n} from \"../sessions/errors\";\nimport {\n  SessionMetadata,\n  type AuthenticationEvidence,\n  type AuthenticationRequirement,\n  type AuthenticationRevision,\n  type PendingConsumption,\n  type SecurityRevision,\n} from \"../sessions/models\";\nimport {\n  pendingAuthenticationContext,\n  snapshotPendingAuthenticationContext,\n  type PendingAuthentication,\n  type PendingAuthenticationRecord,\n  type PendingAuthenticationState,\n} from \"../sessions/PendingAuthentication\";\nimport type {\n  SessionRepository,\n  SignedSessionValidity,\n  StatefulSessionPersistence,\n} from \"../sessions/persistence\";\nimport type {\n  SessionStepUpIntent,\n  SessionStepUpCompletionPlan,\n  SessionStepUpPersistence,\n} from \"../sessions/SessionStepUpPersistence\";\nimport { compactD1GeneratedStatement } from \"./d1-generated-statement\";\nimport {\n  CurrentD1PlanningDatabase,\n  makeD1Owner,\n  type D1Owner,\n  type D1PlanningDatabase,\n} from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport { column, DrizzleMappingError, isMappedConstraintConflict, updateValues } from \"./model\";\nimport type {\n  D1AuthenticationAuthorityMapping,\n  D1PendingAuthenticationMapping,\n  D1SignedSessionValidityMapping,\n  D1StatefulSessionMapping,\n} from \"./session-model\";\nimport type { D1SessionStepUpMapping } from \"./step-up-model\";\nimport {\n  decodeStepUpIntent,\n  encodeStepUpIntent,\n  stepUpIntentLive,\n  validateStepUpPlan,\n} from \"./step-up-state\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = D1PlanningDatabase;\ntype AnyD1StepUpMapping = D1SessionStepUpMapping<any, any, any, any, any, any, any, any>;\ntype D1DomainError =\n  | SessionStepUpInvalid\n  | PendingAuthenticationInvalid\n  | SessionConflict\n  | SessionInvalid\n  | SessionUnavailable\n  | StaleAuthentication;\ntype D1PlanError =\n  | D1DomainError\n  | SessionConfigurationError\n  | DrizzleMappingError\n  | EffectDrizzleQueryError\n  | Schema.SchemaError;\ntype D1AdapterFailure = DrizzleMappingError | EffectDrizzleQueryError | Schema.SchemaError;\ntype NormalizedD1Error<E> = Extract<E, D1DomainError> | SessionUnavailable;\ntype PreparedValue<Method extends (...args: any[]) => any> =\n  Parameters<Method>[1] extends PrepareSessionCommit<infer Value, any> ? Value : never;\ninterface Planned<A> {\n  readonly receipt: A;\n  readonly statements: ReadonlyArray<Statement<any>>;\n  readonly isConstraintConflict?: (cause: unknown) => boolean;\n  readonly recoverGuard?: Effect.Effect<never, D1PlanError, CurrentD1PlanningDatabase>;\n  readonly journalGuard?: PreparedCommit<void>;\n}\ninterface D1SessionBatch {\n  readonly owner: D1Owner<SessionUnavailable>;\n  readonly append: (planned: Planned<any>) => Effect.Effect<void, SessionUnavailable>;\n}\nclass CurrentD1SessionBatch extends Context.Service<CurrentD1SessionBatch, D1SessionBatch>()(\n  \"effect-auth/drizzle/CurrentD1SessionBatch\",\n) {}\nclass D1BatchFailure extends Data.TaggedError(\"D1BatchFailure\")<{\n  readonly cause: Cause.Cause<SqlError.SqlError>;\n  readonly mutation?: Planned<any>;\n}> {}\n\nconst unavailable = () => SessionUnavailable.make({});\nconst stale = () => StaleAuthentication.make({});\nconst invalidPending = () => PendingAuthenticationInvalid.make({});\nconst invalidSession = () => SessionInvalid.make({});\n\nconst mapFailureCause = <A, E, R, E2>(\n  effect: Effect.Effect<A, E, R>,\n  map: (error: E) => E2,\n): Effect.Effect<A, E2, R> =>\n  Effect.catchCause(effect, (cause) => Effect.failCause(Cause.map(cause, map)));\n\nconst isD1DomainError = (error: unknown): error is D1DomainError => {\n  const tag = typeof error === \"object\" && error !== null ? Reflect.get(error, \"_tag\") : undefined;\n\n  return (\n    tag === \"SessionStepUpInvalid\" ||\n    tag === \"PendingAuthenticationInvalid\" ||\n    tag === \"SessionConflict\" ||\n    tag === \"SessionInvalid\" ||\n    tag === \"SessionUnavailable\" ||\n    tag === \"StaleAuthentication\"\n  );\n};\n\nconst normalizeD1Failure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n  isExpected: (error: E) => boolean,\n): Effect.Effect<A, NormalizedD1Error<E>, R> =>\n  reportPersistenceFailure(effect, isExpected).pipe(\n    Effect.catchCause((cause) =>\n      Effect.failCause(\n        Cause.map(cause, (error): NormalizedD1Error<E> =>\n          isD1DomainError(error) ? (error as Extract<E, D1DomainError>) : unavailable(),\n        ),\n      ),\n    ),\n  );\n\nconst terminalD1 = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n  normalizeD1Failure(effect, isD1DomainError);\n\nconst containsFailure = (failure: unknown, predicate: (value: unknown) => boolean): boolean => {\n  const seen = new Set<unknown>();\n  const pending: Array<unknown> = [failure];\n\n  for (let inspected = 0; inspected < 24 && pending.length > 0; inspected++) {\n    const current = pending.shift();\n\n    if (current === undefined || current === null || seen.has(current)) continue;\n    seen.add(current);\n    if (predicate(current)) return true;\n    if (Cause.isCause(current)) {\n      for (const reason of current.reasons) {\n        if (Cause.isFailReason(reason)) pending.push(reason.error);\n        else if (Cause.isDieReason(reason)) pending.push(reason.defect);\n      }\n      continue;\n    }\n    if (typeof current !== \"object\") continue;\n\n    const wrapped = current as {\n      readonly cause?: unknown;\n      readonly reason?: unknown;\n      readonly message?: unknown;\n    };\n\n    if (wrapped.cause !== undefined) pending.push(wrapped.cause);\n    if (wrapped.reason !== undefined) pending.push(wrapped.reason);\n    if (wrapped.message !== undefined) pending.push(wrapped.message);\n  }\n\n  return false;\n};\n\nconst isGuardFailure = (failure: unknown): boolean =>\n  containsFailure(\n    failure,\n    (value) => typeof value === \"string\" && value.includes(\"effect-auth-session-guard\"),\n  );\n\nconst recoverBatchFailure = (\n  failure: D1BatchFailure,\n): Effect.Effect<never, D1PlanError | SqlError.SqlError, CurrentD1PlanningDatabase> => {\n  const { cause, mutation } = failure;\n  const onlyFailures = cause.reasons.length > 0 && cause.reasons.every(Cause.isFailReason);\n\n  if (mutation === undefined) return Effect.failCause(cause);\n  if (\n    onlyFailures &&\n    mutation.isConstraintConflict !== undefined &&\n    cause.reasons.every(\n      (reason) =>\n        Cause.isFailReason(reason) &&\n        isMappedConstraintConflict(mutation.isConstraintConflict!, reason.error),\n    )\n  )\n    return Effect.fail(SessionConflict.make({}));\n  if (\n    onlyFailures &&\n    mutation.recoverGuard !== undefined &&\n    cause.reasons.every((reason) => Cause.isFailReason(reason) && isGuardFailure(reason.error))\n  )\n    return mutation.recoverGuard;\n\n  return Effect.failCause(cause);\n};\n\nconst splitD1BatchFailure = <E>(cause: Cause.Cause<E | D1BatchFailure>) => {\n  const marker = cause.reasons.find(\n    (reason) => Cause.isFailReason(reason) && reason.error instanceof D1BatchFailure,\n  );\n\n  if (marker === undefined || !Cause.isFailReason(marker)) return undefined;\n  const remaining = Cause.fromReasons(cause.reasons.filter((reason) => reason !== marker));\n\n  return {\n    failure: marker.error as D1BatchFailure,\n    // The private marker is removed by identity; every retained reason belongs to E.\n    remaining: remaining as Cause.Cause<E>,\n  };\n};\n\nconst recoverD1BatchCause = <E>(\n  cause: Cause.Cause<E | D1BatchFailure>,\n): Effect.Effect<never, E | D1PlanError | SqlError.SqlError, CurrentD1PlanningDatabase> => {\n  const split = splitD1BatchFailure(cause);\n\n  if (split === undefined) {\n    // No private marker remains, so this is the original E Cause.\n    return Effect.failCause(cause as Cause.Cause<E>);\n  }\n\n  return recoverBatchFailure(split.failure).pipe(\n    Effect.catchCause((recovered) => Effect.failCause(Cause.combine(recovered, split.remaining))),\n  );\n};\n\nconst recoverCoordinatedD1BatchCause = <E>(\n  cause: Cause.Cause<E | D1BatchFailure>,\n): Effect.Effect<never, E | D1DomainError, CurrentD1PlanningDatabase> => {\n  const split = splitD1BatchFailure(cause);\n\n  if (split === undefined) {\n    // No private marker remains, so this is the original E Cause.\n    return Effect.failCause(cause as Cause.Cause<E>);\n  }\n\n  return terminalD1(recoverBatchFailure(split.failure)).pipe(\n    Effect.catchCause((recovered) => Effect.failCause(Cause.combine(recovered, split.remaining))),\n  );\n};\n\nconst statement = (query: { readonly toSQL: () => { sql: string; params: unknown[] } }) =>\n  Effect.map(CurrentD1PlanningDatabase, (database) => {\n    const rendered = query.toSQL();\n\n    return compactD1GeneratedStatement(\n      database.$client,\n      database.$client.unsafe(rendered.sql, rendered.params),\n      unavailable,\n    );\n  });\n\nconst assertion = (\n  condition: SQL,\n): Effect.Effect<Statement<any>, never, CurrentD1PlanningDatabase> =>\n  Effect.gen(function* () {\n    const database = yield* CurrentD1PlanningDatabase;\n\n    return yield* statement(\n      database\n        .select({\n          ok: sql`case when ${condition} then 1 else json_extract('[]', '$[effect-auth-session-guard]') end`.as(\n            \"ok\",\n          ),\n        })\n        .from(sql`(select 1)`),\n    );\n  });\n\nconst conditionMatches = (condition: SQL) =>\n  Effect.flatMap(CurrentD1PlanningDatabase, (database) =>\n    database\n      .select({ ok: sql<number>`1` })\n      .from(sql`(select 1)`)\n      .where(condition)\n      .limit(1)\n      .pipe(Effect.map((rows) => rows.length > 0)),\n  );\n\nfunction runPlanned<A, E>(\n  plan: Effect.Effect<Planned<A>, E, CurrentD1PlanningDatabase | CurrentCommitJournal>,\n): Effect.Effect<\n  A,\n  NormalizedD1Error<E | HookConfigurationError | SqlError.SqlError>,\n  CurrentD1PlanningDatabase | LifecycleHooks\n>;\nfunction runPlanned<A, E>(\n  plan: Effect.Effect<Planned<A>, E, CurrentD1PlanningDatabase | CurrentCommitJournal>,\n  isConstraintConflict: (cause: unknown) => boolean,\n): Effect.Effect<\n  A,\n  NormalizedD1Error<E | SessionConflict | HookConfigurationError | SqlError.SqlError>,\n  CurrentD1PlanningDatabase | LifecycleHooks\n>;\nfunction runPlanned<A, E, GuardE extends D1PlanError>(\n  plan: Effect.Effect<Planned<A>, E, CurrentD1PlanningDatabase | CurrentCommitJournal>,\n  isConstraintConflict: undefined,\n  recoverGuard: Effect.Effect<never, GuardE, CurrentD1PlanningDatabase>,\n): Effect.Effect<\n  A,\n  NormalizedD1Error<E | GuardE | HookConfigurationError | SqlError.SqlError>,\n  CurrentD1PlanningDatabase | LifecycleHooks\n>;\nfunction runPlanned<A, E, GuardE extends D1PlanError>(\n  plan: Effect.Effect<Planned<A>, E, CurrentD1PlanningDatabase | CurrentCommitJournal>,\n  isConstraintConflict: (cause: unknown) => boolean,\n  recoverGuard: Effect.Effect<never, GuardE, CurrentD1PlanningDatabase>,\n): Effect.Effect<\n  A,\n  NormalizedD1Error<E | GuardE | SessionConflict | HookConfigurationError | SqlError.SqlError>,\n  CurrentD1PlanningDatabase | LifecycleHooks\n>;\nfunction runPlanned<A, E, GuardE extends D1PlanError = never>(\n  plan: Effect.Effect<Planned<A>, E, CurrentD1PlanningDatabase | CurrentCommitJournal>,\n  isConstraintConflict?: (cause: unknown) => boolean,\n  recoverGuard?: Effect.Effect<never, GuardE, CurrentD1PlanningDatabase>,\n) {\n  const planned = plan.pipe(\n    Effect.map((value) => ({ ...value, isConstraintConflict, recoverGuard })),\n  );\n\n  const execution = Effect.gen(function* () {\n    const batch = yield* Effect.serviceOption(CurrentD1SessionBatch);\n\n    if (batch._tag === \"Some\") {\n      const owned = batch.value;\n\n      const result = yield* coordinateCommit(\n        () =>\n          Effect.gen(function* () {\n            yield* owned.owner.check;\n            const journal = yield* CurrentCommitJournal;\n            const value = yield* planned;\n\n            yield* owned.owner.check;\n            const guarded = { ...value, journalGuard: journal.prepare(undefined) };\n\n            yield* owned.append(guarded);\n\n            return guarded.receipt;\n          }),\n        { mode: \"batch\" },\n      );\n\n      return result.value;\n    }\n\n    const database = yield* CurrentD1PlanningDatabase;\n\n    const result = yield* coordinateCommit(\n      () =>\n        Effect.gen(function* () {\n          const prepared = yield* planned;\n\n          yield* database.$client\n            .batch(prepared.statements)\n            .pipe(\n              Effect.catchCause((cause) =>\n                Effect.fail(new D1BatchFailure({ cause, mutation: prepared })),\n              ),\n            );\n\n          return prepared.receipt;\n        }),\n      { mode: \"batch\" },\n    );\n\n    return result.value;\n  });\n\n  return normalizeD1Failure(\n    execution.pipe(Effect.catchCause(recoverD1BatchCause)),\n    isD1DomainError,\n  );\n}\n\nconst subjectColumns = (mapping: any) => ({\n  id: column(mapping.subject.table, mapping.subject.id),\n  status: column(mapping.subject.table, mapping.subject.status),\n  revision: column(mapping.subject.table, mapping.subject.securityRevision),\n});\n\nconst credentialColumns = (mapping: any) => ({\n  subjectId: column(mapping.credential.table, mapping.credential.subjectId),\n  id: column(mapping.credential.table, mapping.credential.credentialId),\n  revision: column(mapping.credential.table, mapping.credential.revision),\n  ...(mapping.credential.status === undefined\n    ? {}\n    : { status: column(mapping.credential.table, mapping.credential.status) }),\n});\n\nconst flowColumns = (mapping: any) => ({\n  flowId: column(mapping.flow.table, mapping.flow.flowId),\n  subjectId: column(mapping.flow.table, mapping.flow.subjectId),\n  state: column(mapping.flow.table, mapping.flow.state),\n  pendingDigest: column(mapping.flow.table, mapping.flow.pendingDigest),\n  dedupUntil: column(mapping.flow.table, mapping.flow.dedupUntil),\n});\n\nconst hasActiveFlow = Effect.fn(\"D1Session.hasActiveFlow\")(function* (\n  mapping: any,\n  flowId: string,\n) {\n  const database = yield* CurrentD1PlanningDatabase;\n  const f = flowColumns(mapping);\n\n  return yield* database\n    .select({ flowId: f.flowId })\n    .from(mapping.flow.table)\n    .where(and(eq(f.flowId, flowId), gt(f.dedupUntil, mapping.d1.engineNow)))\n    .limit(1)\n    .pipe(Effect.map((rows) => rows.length > 0));\n});\n\nconst recoverFlowOrStale = (\n  mapping: any,\n  flowId: string,\n): Effect.Effect<\n  never,\n  SessionConflict | StaleAuthentication | D1AdapterFailure,\n  CurrentD1PlanningDatabase\n> =>\n  hasActiveFlow(mapping, flowId).pipe(\n    Effect.flatMap((active) =>\n      Effect.fail(active ? SessionConflict.make({}) : StaleAuthentication.make({})),\n    ),\n  );\n\nconst pendingColumns = (mapping: any) => ({\n  digest: column(mapping.pending.table, mapping.pending.digest),\n  version: column(mapping.pending.table, mapping.pending.version),\n  flowId: column(mapping.pending.table, mapping.pending.flowId),\n  subjectId: column(mapping.pending.table, mapping.pending.subjectId),\n  bindingDigest: column(mapping.pending.table, mapping.pending.bindingDigest),\n  expiresAt: column(mapping.pending.table, mapping.pending.expiresAt),\n  attemptLimit: column(mapping.pending.table, mapping.pending.attemptLimit),\n  failedAttempts: column(mapping.pending.table, mapping.pending.failedAttempts),\n  consumed: column(mapping.pending.table, mapping.pending.consumed),\n});\n\nconst sessionColumns = (mapping: any) => ({\n  sessionId: column(mapping.session.table, mapping.session.sessionId),\n  subjectId: column(mapping.session.table, mapping.session.subjectId),\n  digest: column(mapping.session.table, mapping.session.digest),\n  version: column(mapping.session.table, mapping.session.version),\n  securityRevision: column(mapping.session.table, mapping.session.securityRevision),\n  issuedAt: column(mapping.session.table, mapping.session.issuedAt),\n  expiresAt: column(mapping.session.table, mapping.session.expiresAt),\n  absoluteExpiresAt: column(mapping.session.table, mapping.session.absoluteExpiresAt),\n});\n\nconst captureDetails = Effect.fn(\"DrizzleD1Session.captureDetails\")(function* (\n  mapping: any,\n  subjectId: SubjectId,\n  credentialIds: ReadonlyArray<string>,\n): Effect.fn.Return<\n  { readonly subject: any; readonly revision: AuthenticationRevision },\n  StaleAuthentication | D1AdapterFailure,\n  CurrentD1PlanningDatabase\n> {\n  const database = yield* CurrentD1PlanningDatabase;\n  const requested = [...new Set(credentialIds)].sort();\n\n  if (requested.length !== credentialIds.length) return yield* stale();\n  const nativeSubjectId = yield* mapping.subjectId.toNative(subjectId);\n  const sc = subjectColumns(mapping);\n  const cc = credentialColumns(mapping);\n\n  const rows: any[] = yield* requested.length === 0\n    ? database\n        .select({ subject: getTableColumns(mapping.subject.table) })\n        .from(mapping.subject.table)\n        .where(eq(sc.id, nativeSubjectId))\n        .limit(1)\n        .pipe(\n          Effect.map((selected: any[]) =>\n            selected.map((row: any) => ({ subject: row.subject, credential: undefined })),\n          ),\n        )\n    : database\n        .select({\n          subject: getTableColumns(mapping.subject.table),\n          credential: getTableColumns(mapping.credential.table),\n        })\n        .from(mapping.subject.table)\n        .innerJoin(\n          mapping.credential.table,\n          and(eq(cc.subjectId, sc.id), inArray(cc.id, requested)),\n        )\n        .where(eq(sc.id, nativeSubjectId));\n\n  const subject = rows[0]?.subject;\n\n  if (subject === undefined || !mapping.subject.isActiveStatus(subject[mapping.subject.status]))\n    return yield* stale();\n\n  const credentials = rows.flatMap((row: any) =>\n    row.credential === undefined || row.credential === null ? [] : [row.credential],\n  );\n\n  if (\n    credentials.length !== requested.length ||\n    credentials.some(\n      (row: any) =>\n        mapping.credential.status !== undefined &&\n        mapping.credential.isActiveStatus?.(row[mapping.credential.status]) !== true,\n    )\n  )\n    return yield* stale();\n\n  return {\n    subject,\n    revision: {\n      subjectId,\n      securityRevision: subject[mapping.subject.securityRevision],\n      credentials: credentials\n        .map((row: any) => ({\n          credentialId: row[mapping.credential.credentialId],\n          revision: row[mapping.credential.revision],\n        }))\n        .sort((a: any, b: any) => a.credentialId.localeCompare(b.credentialId)),\n    } satisfies AuthenticationRevision,\n  };\n});\n\nconst capture = Effect.fn(\"DrizzleD1Session.capture\")(function* (\n  mapping: any,\n  subjectId: SubjectId,\n  credentialIds: ReadonlyArray<string>,\n): Effect.fn.Return<\n  AuthenticationRevision,\n  StaleAuthentication | D1AdapterFailure,\n  CurrentD1PlanningDatabase\n> {\n  const details = yield* captureDetails(mapping, subjectId, credentialIds);\n\n  return details.revision;\n});\n\nconst requirement = Effect.fn(\"DrizzleD1Session.requirement\")(function* (\n  mapping: any,\n  evidence: AuthenticationEvidence,\n): Effect.fn.Return<\n  AuthenticationRequirement,\n  StaleAuthentication | D1AdapterFailure,\n  CurrentD1PlanningDatabase\n> {\n  const current = yield* captureDetails(\n    mapping,\n    evidence.revision.subjectId,\n    evidence.revision.credentials.map((item) => item.credentialId),\n  );\n\n  const expected = new Map(\n    evidence.revision.credentials.map((item) => [item.credentialId, item.revision]),\n  );\n\n  if (\n    current.revision.securityRevision !== evidence.revision.securityRevision ||\n    current.revision.credentials.some((item) => expected.get(item.credentialId) !== item.revision)\n  )\n    return yield* stale();\n\n  return yield* mapping.subject.decodeRequirement(current.subject);\n});\n\nconst authorityCondition = (\n  mapping: any,\n  nativeSubjectId: unknown,\n  evidence: Pick<AuthenticationEvidence, \"revision\">,\n): SQL => {\n  const sc = subjectColumns(mapping);\n  const cc = credentialColumns(mapping);\n  const subject = sql`exists(select 1 from ${mapping.subject.table} where ${sc.id} = ${sql.param(nativeSubjectId, sc.id)} and ${sc.status} = ${sql.param(mapping.d1.activeSubjectStatusValue, sc.status)} and ${sc.revision} = ${sql.param(evidence.revision.securityRevision, sc.revision)})`;\n\n  const credentials = evidence.revision.credentials.map(\n    (item) =>\n      sql`exists(select 1 from ${mapping.credential.table} where ${cc.subjectId} = ${sql.param(nativeSubjectId, cc.subjectId)} and ${cc.id} = ${sql.param(item.credentialId, cc.id)} and ${cc.revision} = ${sql.param(item.revision, cc.revision)}${\n        mapping.credential.status === undefined\n          ? sql``\n          : sql` and ${cc.status} = ${sql.param(mapping.d1.activeCredentialStatusValue, cc.status)}`\n      })`,\n  );\n\n  return and(subject, ...credentials)!;\n};\n\nconst subjectRevisionCondition = (\n  mapping: any,\n  nativeSubjectId: unknown,\n  revision: SecurityRevision,\n) => {\n  const sc = subjectColumns(mapping);\n\n  return sql`exists(select 1 from ${mapping.subject.table} where ${sc.id} = ${sql.param(nativeSubjectId, sc.id)} and ${sc.status} = ${sql.param(mapping.d1.activeSubjectStatusValue, sc.status)} and ${sc.revision} = ${sql.param(revision, sc.revision)})`;\n};\n\n/** Engine-time counterpart of assessAuthentication. Complete transitions must\n * satisfy an entire alternative; incomplete pending flows need one eligible proof. */\nconst freshnessCondition = (\n  mapping: any,\n  evidence: AuthenticationEvidence,\n  requirement: AuthenticationRequirement,\n  complete: boolean,\n): SQL => {\n  const fresh = evidence.proofs.map((proof) => {\n    const verified = DateTime.toEpochMillis(proof.verifiedAt);\n\n    return and(\n      sql`${mapping.d1.engineNowMillis} >= ${verified}`,\n      sql`${mapping.d1.engineNowMillis} - ${verified} < ${requirement.maximumAgeMillis}`,\n    )!;\n  });\n\n  const any = (conditions: ReadonlyArray<SQL>): SQL =>\n    conditions.length === 0 ? sql`false` : or(...conditions)!;\n\n  const notFuture = evidence.proofs.map(\n    (proof) => sql`${mapping.d1.engineNowMillis} >= ${DateTime.toEpochMillis(proof.verifiedAt)}`,\n  );\n\n  if (!complete) return and(...notFuture, any(fresh))!;\n  const byCredential = new Map<string, SQL[]>();\n\n  evidence.proofs.forEach((proof, index) => {\n    const previous = byCredential.get(proof.credentialId) ?? [];\n\n    previous.push(fresh[index]);\n    byCredential.set(proof.credentialId, previous);\n  });\n\n  const credentialCount = sql.join(\n    [...byCredential.values()].map((proofs) => sql`case when ${any(proofs)} then 1 else 0 end`),\n    sql` + `,\n  );\n\n  const alternatives = requirement.alternatives.map((alternative) =>\n    and(\n      ...alternative.factors.map((factor) =>\n        any(fresh.filter((_, index) => evidence.proofs[index].factors.includes(factor))),\n      ),\n      sql`(${credentialCount}) >= ${alternative.minimumCredentials}`,\n      any(\n        fresh.filter(\n          (_, index) =>\n            (!alternative.userVerified || evidence.proofs[index].userVerified) &&\n            (!alternative.phishingResistant || evidence.proofs[index].phishingResistant),\n        ),\n      ),\n    )!,\n  );\n\n  return and(...notFuture, any(alternatives))!;\n};\n\nconst allocate = <A>(\n  asynchronous: Effect.Effect<A, DrizzleMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n): Effect.Effect<A, D1AdapterFailure | SessionUnavailable> =>\n  asynchronous !== undefined\n    ? asynchronous\n    : synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => DrizzleMappingError.make({ operation: \"allocate\", cause }),\n        });\n\nconst sameOriginalRevision = (\n  completed: AuthenticationEvidence,\n  original: AuthenticationEvidence,\n) => {\n  const current = new Map(\n    completed.revision.credentials.map((item) => [item.credentialId, item.revision]),\n  );\n\n  return (\n    completed.flowId === original.flowId &&\n    completed.bindingDigest === original.bindingDigest &&\n    completed.revision.subjectId === original.revision.subjectId &&\n    completed.revision.securityRevision === original.revision.securityRevision &&\n    original.revision.credentials.every(\n      (item) => current.get(item.credentialId) === item.revision,\n    ) &&\n    original.proofs.every((expected) =>\n      completed.proofs.some(\n        (proof) =>\n          proof.method === expected.method &&\n          proof.credentialId === expected.credentialId &&\n          proof.userVerified === expected.userVerified &&\n          proof.phishingResistant === expected.phishingResistant &&\n          DateTime.toEpochMillis(proof.verifiedAt) ===\n            DateTime.toEpochMillis(expected.verifiedAt) &&\n          proof.factors.length === expected.factors.length &&\n          proof.factors.every((factor, index) => factor === expected.factors[index]),\n      ),\n    )\n  );\n};\n\ntype PendingProjection = \"record\" | \"context\";\n\nconst readPendingWith = Effect.fn(\"D1Session.readPendingWith\")(function* <\n  Record extends PendingAuthenticationState,\n>(\n  mapping: any,\n  digest: TokenDigest,\n  projection: PendingProjection,\n): Effect.fn.Return<Record | undefined, D1AdapterFailure, CurrentD1PlanningDatabase> {\n  const database = yield* CurrentD1PlanningDatabase;\n\n  const row = (yield* database\n    .select()\n    .from(mapping.pending.table)\n    .where(eq(pendingColumns(mapping).digest, digest))\n    .limit(1))[0];\n\n  if (row === undefined) return undefined;\n\n  const decode: (row: any) => Effect.Effect<Record, DrizzleMappingError> =\n    projection === \"context\" ? mapping.pending.decodeContext : mapping.pending.decode;\n\n  return yield* decode(row);\n});\n\nconst readPending = <Claims>(mapping: any, digest: TokenDigest) =>\n  readPendingWith<PendingAuthenticationRecord<Claims>>(mapping, digest, \"record\");\n\nconst pendingCondition = (\n  mapping: any,\n  input: PendingConsumption,\n  nativeSubjectId: unknown,\n): SQL => {\n  const p = pendingColumns(mapping);\n  const f = flowColumns(mapping);\n\n  return and(\n    sql`exists(select 1 from ${mapping.pending.table} where ${p.digest} = ${sql.param(input.digest, p.digest)} and ${p.version} = ${sql.param(input.version, p.version)} and ${p.flowId} = ${sql.param(input.flowId, p.flowId)} and ${p.subjectId} = ${sql.param(nativeSubjectId, p.subjectId)} and ${p.bindingDigest} = ${sql.param(input.bindingDigest, p.bindingDigest)} and ${p.consumed} = ${sql.param(false, p.consumed)} and ${p.failedAttempts} < ${p.attemptLimit} and ${p.expiresAt} > ${mapping.d1.engineNow})`,\n    sql`exists(select 1 from ${mapping.flow.table} where ${f.flowId} = ${sql.param(input.flowId, f.flowId)} and ${f.subjectId} = ${sql.param(nativeSubjectId, f.subjectId)} and ${f.state} = ${sql.param(mapping.flow.pendingStateValue, f.state)} and ${f.pendingDigest} = ${sql.param(input.digest, f.pendingDigest)} and ${f.dedupUntil} > ${mapping.d1.engineNow})`,\n  )!;\n};\n\nconst recoverPendingOrStale = (\n  mapping: any,\n  input: PendingConsumption,\n  subjectId: SubjectId,\n): Effect.Effect<\n  never,\n  PendingAuthenticationInvalid | StaleAuthentication | D1AdapterFailure,\n  CurrentD1PlanningDatabase\n> =>\n  mapping.subjectId.toNative(subjectId).pipe(\n    Effect.flatMap((nativeSubjectId: unknown) =>\n      conditionMatches(pendingCondition(mapping, input, nativeSubjectId)),\n    ),\n    Effect.flatMap((pendingIsCurrent) =>\n      Effect.fail(\n        pendingIsCurrent ? StaleAuthentication.make({}) : PendingAuthenticationInvalid.make({}),\n      ),\n    ),\n  );\n\nconst consumePendingStatements = Effect.fn(\"D1Session.consumePendingStatements\")(function* (\n  mapping: any,\n  input: PendingConsumption,\n  absoluteExpiresAt: DateTime.Utc,\n): Effect.fn.Return<ReadonlyArray<Statement<any>>, never, CurrentD1PlanningDatabase> {\n  const database = yield* CurrentD1PlanningDatabase;\n\n  return [\n    yield* statement(\n      database\n        .update(mapping.pending.table)\n        .set(updateValues<any>([[mapping.pending.consumed, true]]))\n        .where(\n          and(\n            eq(pendingColumns(mapping).digest, input.digest),\n            eq(pendingColumns(mapping).version, input.version),\n          ),\n        ),\n    ),\n    yield* statement(\n      database\n        .update(mapping.flow.table)\n        .set(\n          updateValues<any>([\n            [mapping.flow.state, mapping.flow.establishedStateValue],\n            [mapping.flow.pendingDigest, null],\n            [mapping.flow.dedupUntil, mapping.flow.encodeInstant(absoluteExpiresAt)],\n          ]),\n        )\n        .where(eq(flowColumns(mapping).flowId, input.flowId)),\n    ),\n  ];\n});\n\nexport const makeD1AuthenticationAuthority = <Claims>(\n  mapping: D1AuthenticationAuthorityMapping<Claims, any, any, any, any, any>,\n) => ({\n  capture: (\n    subjectId: Parameters<AuthenticationAuthority[\"Service\"][\"capture\"]>[0],\n    credentialIds: Parameters<AuthenticationAuthority[\"Service\"][\"capture\"]>[1],\n  ) => capture(mapping, subjectId, credentialIds).pipe(terminalD1),\n  requirements: (evidence: AuthenticationEvidence) =>\n    requirement(mapping, evidence).pipe(terminalD1),\n  approve: <A>(\n    input: Parameters<AuthenticationAuthority[\"Service\"][\"approve\"]>[0],\n    prepare: PrepareSessionCommit<void, A>,\n  ) =>\n    runPlanned(\n      Effect.gen(function* () {\n        const journal = yield* CurrentCommitJournal;\n        const policy = yield* requirement(mapping, input.evidence);\n        const assessed = yield* assessAuthentication(input.evidence, policy);\n\n        if (!assessed.satisfied) return yield* stale();\n\n        const nativeSubjectId = yield* mapping.subjectId.toNative(\n          input.evidence.revision.subjectId,\n        );\n\n        let condition = and(\n          authorityCondition(mapping, nativeSubjectId, input.evidence),\n          freshnessCondition(mapping, input.evidence, policy, true),\n          sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(input.expiresAt)}`,\n          sql`${DateTime.toEpochMillis(input.expiresAt)} <= ${DateTime.toEpochMillis(input.absoluteExpiresAt)}`,\n        )!;\n\n        const statements: Statement<any>[] = [];\n\n        if (input.pending !== undefined) {\n          if (mapping.pending === undefined) return yield* invalidPending();\n          const pendingMapping = { ...mapping, ...mapping.pending };\n          const stored = yield* readPending(pendingMapping, input.pending.digest);\n\n          if (stored === undefined || !sameOriginalRevision(input.evidence, stored.evidence))\n            return yield* invalidPending();\n          condition = and(\n            condition,\n            pendingCondition(pendingMapping, input.pending, nativeSubjectId),\n          )!;\n          statements.push(\n            ...(yield* consumePendingStatements(\n              pendingMapping,\n              input.pending,\n              input.absoluteExpiresAt,\n            )),\n          );\n        }\n        const receipt = prepare(undefined, journal);\n\n        return { receipt, statements: [yield* assertion(condition), ...statements] };\n      }),\n      undefined,\n      Effect.suspend(() =>\n        input.pending === undefined || mapping.pending === undefined\n          ? Effect.fail(stale())\n          : recoverPendingOrStale(\n              { ...mapping, ...mapping.pending },\n              input.pending,\n              input.evidence.revision.subjectId,\n            ),\n      ),\n    ),\n});\n\n/** D1's last authoritative statement checks the original record version and\n * security state together. A later race is still rejected by final consumption. */\nconst readAuthenticatedPending = Effect.fn(\"D1Session.readAuthenticatedPending\")(function* <\n  Record extends PendingAuthenticationState,\n>(\n  mapping: any,\n  input: { readonly digest: TokenDigest; readonly bindingDigest?: TokenDigest },\n  projection: PendingProjection,\n): Effect.fn.Return<\n  Record,\n  PendingAuthenticationInvalid | D1AdapterFailure,\n  CurrentD1PlanningDatabase\n> {\n  const record = yield* readPendingWith<Record>(mapping, input.digest, projection);\n\n  if (\n    record === undefined ||\n    (input.bindingDigest !== undefined && record.evidence.bindingDigest !== input.bindingDigest)\n  )\n    return yield* invalidPending();\n\n  const policy = yield* mapFailureCause(requirement(mapping, record.evidence), (error) =>\n    error._tag === \"StaleAuthentication\" ? invalidPending() : error,\n  );\n\n  yield* assessAuthentication(record.evidence, policy).pipe(\n    Effect.mapError(() => invalidPending()),\n  );\n  const nativeSubjectId = yield* mapping.subjectId.toNative(record.evidence.revision.subjectId);\n\n  const current = yield* conditionMatches(\n    and(\n      authorityCondition(mapping, nativeSubjectId, record.evidence),\n      freshnessCondition(mapping, record.evidence, policy, false),\n      pendingCondition(\n        mapping,\n        {\n          digest: input.digest,\n          bindingDigest: record.evidence.bindingDigest,\n          flowId: record.evidence.flowId,\n          version: record.version,\n        },\n        nativeSubjectId,\n      ),\n    )!,\n  );\n\n  if (!current) return yield* invalidPending();\n\n  return record;\n});\n\nexport const makeD1PendingAuthentication = <Claims>(\n  mapping: D1PendingAuthenticationMapping<Claims, any, any, any, any, any>,\n) => ({\n  create: <A>(\n    input: Parameters<PendingAuthentication<Claims>[\"create\"]>[0],\n    _now: DateTime.Utc,\n    prepare: PrepareSessionCommit<PendingAuthenticationRecord<Claims>, A>,\n  ) =>\n    runPlanned(\n      Effect.gen(function* () {\n        const database = yield* CurrentD1PlanningDatabase;\n        const journal = yield* CurrentCommitJournal;\n        const policy = yield* requirement(mapping, input.evidence);\n\n        yield* assessAuthentication(input.evidence, policy);\n\n        const nativeSubjectId = yield* mapping.subjectId.toNative(\n          input.evidence.revision.subjectId,\n        );\n\n        if (yield* hasActiveFlow(mapping, input.evidence.flowId))\n          return yield* SessionConflict.make({});\n\n        const version = yield* allocate(\n          mapping.pending.allocateVersion,\n          mapping.pending.allocateVersionSync,\n        );\n\n        const record = { ...input, version };\n        const f = flowColumns(mapping);\n\n        const condition = and(\n          authorityCondition(mapping, nativeSubjectId, input.evidence),\n          freshnessCondition(mapping, input.evidence, policy, false),\n          sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(input.expiresAt)}`,\n          not(\n            sql`exists(select 1 from ${mapping.flow.table} where ${f.flowId} = ${sql.param(input.evidence.flowId, f.flowId)} and ${f.dedupUntil} > ${mapping.d1.engineNow})`,\n          ),\n        )!;\n\n        const cleanupPending = database\n          .delete(mapping.pending.table)\n          .where(\n            sql`${pendingColumns(mapping).flowId} in (select ${f.flowId} from ${mapping.flow.table} where ${f.flowId} = ${sql.param(input.evidence.flowId, f.flowId)} and ${f.dedupUntil} <= ${mapping.d1.engineNow})`,\n          );\n\n        const cleanupFlow = database\n          .delete(mapping.flow.table)\n          .where(\n            and(\n              eq(f.flowId, input.evidence.flowId),\n              sql`${f.dedupUntil} <= ${mapping.d1.engineNow}`,\n            ),\n          );\n\n        const insertFlow = database.insert(mapping.flow.table).values(\n          mapping.flow.encodePendingInsert({\n            evidence: input.evidence,\n            subjectId: nativeSubjectId,\n            pendingDigest: input.digest,\n            dedupUntil: input.expiresAt,\n          }),\n        );\n\n        const insertPending = database.insert(mapping.pending.table).values(\n          mapping.pending.encodeInsert(record, {\n            subjectId: nativeSubjectId,\n            failedAttempts: 0,\n            consumed: false,\n          }),\n        );\n\n        const receipt = prepare(record, journal);\n\n        return {\n          receipt,\n          statements: [\n            yield* assertion(condition),\n            yield* statement(cleanupPending),\n            yield* statement(cleanupFlow),\n            yield* statement(insertFlow),\n            yield* statement(insertPending),\n          ],\n        };\n      }),\n      mapping.isConstraintConflict,\n      recoverFlowOrStale(mapping, input.evidence.flowId),\n    ),\n  context: (input: Parameters<PendingAuthentication<Claims>[\"context\"]>[0]) =>\n    readAuthenticatedPending<PendingAuthenticationState>(mapping, input, \"context\").pipe(\n      Effect.flatMap(pendingAuthenticationContext),\n      terminalD1,\n    ),\n  read: (input: Parameters<PendingAuthentication<Claims>[\"read\"]>[0]) =>\n    readAuthenticatedPending<PendingAuthenticationRecord<Claims>>(mapping, input, \"record\").pipe(\n      terminalD1,\n    ),\n  reject: <A>(\n    input: Parameters<PendingAuthentication<Claims>[\"reject\"]>[0],\n    prepare: PrepareSessionCommit<{ readonly _tag: \"Rejected\" }, A>,\n  ) =>\n    runPlanned(\n      Effect.gen(function* () {\n        const database = yield* CurrentD1PlanningDatabase;\n        const journal = yield* CurrentCommitJournal;\n\n        const record = yield* readPendingWith<PendingAuthenticationState>(\n          mapping,\n          input.digest,\n          \"context\",\n        );\n\n        if (record === undefined)\n          return {\n            receipt: prepare({ _tag: \"Rejected\" }, journal),\n            statements: [yield* assertion(sql`true`)],\n          };\n\n        const nativeSubjectId = yield* mapping.subjectId.toNative(\n          record.evidence.revision.subjectId,\n        );\n\n        const p = pendingColumns(mapping);\n\n        const condition = and(\n          authorityCondition(mapping, nativeSubjectId, record.evidence),\n          eq(p.digest, input.digest),\n          eq(p.bindingDigest, input.bindingDigest),\n          eq(p.consumed, false),\n          gt(p.expiresAt, mapping.d1.engineNow),\n        )!;\n\n        const update = database\n          .update(mapping.pending.table)\n          .set(\n            updateValues<any>([\n              [\n                mapping.pending.failedAttempts,\n                sql`case when ${p.failedAttempts} < ${p.attemptLimit} then ${p.failedAttempts} + 1 else ${p.failedAttempts} end`,\n              ],\n            ]),\n          )\n          .where(condition);\n\n        const receipt = prepare({ _tag: \"Rejected\" }, journal);\n\n        return { receipt, statements: [yield* statement(update)] };\n      }),\n    ),\n});\n\nexport const makeD1StatefulSessions = <Claims>(\n  mapping: D1StatefulSessionMapping<Claims, any, any, any, any, any, any, any>,\n) => {\n  const s = sessionColumns(mapping);\n\n  const persistence = {\n    establish: <A>(\n      input: Parameters<StatefulSessionPersistence<Claims>[\"establish\"]>[0],\n      prepare: PrepareSessionCommit<\n        PreparedValue<StatefulSessionPersistence<Claims>[\"establish\"]>,\n        A\n      >,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n          const policy = yield* requirement(mapping, input.evidence);\n          const assessed = yield* assessAuthentication(input.evidence, policy);\n\n          if (!assessed.satisfied) return yield* stale();\n\n          const nativeSubjectId = yield* mapping.subjectId.toNative(\n            input.evidence.revision.subjectId,\n          );\n\n          if (input.pending === undefined && (yield* hasActiveFlow(mapping, input.evidence.flowId)))\n            return yield* SessionConflict.make({});\n\n          const nativeSessionId = yield* allocate(\n            mapping.session.allocateId,\n            mapping.session.allocateIdSync,\n          );\n\n          const sessionId = yield* mapping.sessionId.toSession(nativeSessionId);\n\n          const version = yield* allocate(\n            mapping.session.allocateVersion,\n            mapping.session.allocateVersionSync,\n          );\n\n          const record = {\n            ...input.session,\n            sessionId,\n            version,\n            subjectId: input.evidence.revision.subjectId,\n            securityRevision: input.evidence.revision.securityRevision,\n            assurance: assessed.assurance,\n            provenance: yield* snapshotSessionAuthenticationProvenance({\n              evidence: input.evidence,\n            }),\n            // Ordered D1 batches cannot expose the engine timestamp to the\n            // prepare callback. Persist the core's trusted planned time and\n            // guard it against the engine clock in the final batch.\n            issuedAt: DateTime.makeUnsafe(DateTime.toEpochMillis(input.session.issuedAt)),\n          };\n\n          let condition = and(\n            authorityCondition(mapping, nativeSubjectId, input.evidence),\n            freshnessCondition(mapping, input.evidence, policy, true),\n            sql`${DateTime.toEpochMillis(record.issuedAt)} <= ${mapping.d1.engineNowMillis}`,\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(record.expiresAt)}`,\n            sql`${DateTime.toEpochMillis(record.expiresAt)} <= ${DateTime.toEpochMillis(record.absoluteExpiresAt)}`,\n          )!;\n\n          const statements: Statement<any>[] = [];\n\n          if (input.pending === undefined) {\n            const f = flowColumns(mapping);\n\n            condition = and(\n              condition,\n              not(\n                sql`exists(select 1 from ${mapping.flow.table} where ${f.flowId} = ${sql.param(input.evidence.flowId, f.flowId)} and ${f.dedupUntil} > ${mapping.d1.engineNow})`,\n              ),\n            )!;\n            if (mapping.pending !== undefined)\n              statements.push(\n                yield* statement(\n                  database\n                    .delete(mapping.pending.table)\n                    .where(\n                      eq(\n                        column(mapping.pending.table, mapping.pending.flowId),\n                        input.evidence.flowId,\n                      ),\n                    ),\n                ),\n              );\n            statements.push(\n              yield* statement(\n                database.delete(mapping.flow.table).where(eq(f.flowId, input.evidence.flowId)),\n              ),\n              yield* statement(\n                database.insert(mapping.flow.table).values(\n                  mapping.flow.encodeEstablishedInsert({\n                    evidence: input.evidence,\n                    subjectId: nativeSubjectId,\n                    dedupUntil: record.absoluteExpiresAt,\n                  }),\n                ),\n              ),\n            );\n          } else {\n            if (mapping.pending === undefined) return yield* invalidPending();\n            const stored = yield* readPending(mapping, input.pending.digest);\n\n            if (stored === undefined || !sameOriginalRevision(input.evidence, stored.evidence))\n              return yield* invalidPending();\n            condition = and(condition, pendingCondition(mapping, input.pending, nativeSubjectId))!;\n            statements.push(\n              ...(yield* consumePendingStatements(\n                mapping,\n                input.pending,\n                record.absoluteExpiresAt,\n              )),\n            );\n          }\n          statements.push(\n            yield* statement(\n              database.insert(mapping.session.table).values(\n                mapping.session.encodeInsert(record, {\n                  subjectId: nativeSubjectId,\n                  sessionId: nativeSessionId,\n                }),\n              ),\n            ),\n          );\n          const receipt = prepare(record, journal);\n\n          return { receipt, statements: [yield* assertion(condition), ...statements] };\n        }),\n        mapping.isConstraintConflict,\n        Effect.suspend<\n          never,\n          SessionConflict | PendingAuthenticationInvalid | StaleAuthentication | D1AdapterFailure,\n          CurrentD1PlanningDatabase\n        >(() =>\n          input.pending === undefined\n            ? recoverFlowOrStale(mapping, input.evidence.flowId)\n            : recoverPendingOrStale(mapping, input.pending, input.evidence.revision.subjectId),\n        ),\n      ),\n    verify: (input: Parameters<StatefulSessionPersistence<Claims>[\"verify\"]>[0]) =>\n      Effect.gen(function* () {\n        const database = yield* CurrentD1PlanningDatabase;\n\n        const rows = yield* database\n          .select({ ...getTableColumns(mapping.session.table) })\n          .from(mapping.session.table)\n          .innerJoin(\n            mapping.subject.table,\n            and(\n              eq(s.subjectId, subjectColumns(mapping).id),\n              eq(s.securityRevision, subjectColumns(mapping).revision),\n              eq(subjectColumns(mapping).status, mapping.d1.activeSubjectStatusValue),\n            ),\n          )\n          .where(\n            and(\n              eq(s.digest, input.digest),\n              gt(s.expiresAt, mapping.d1.engineNow),\n              gt(s.absoluteExpiresAt, mapping.d1.engineNow),\n            ),\n          )\n          .limit(1);\n\n        if (rows[0] === undefined) return yield* invalidSession();\n\n        return yield* mapping.session.decode(rows[0]);\n      }).pipe(terminalD1),\n    rotate: <A>(\n      input: Parameters<StatefulSessionPersistence<Claims>[\"rotate\"]>[0],\n      prepare: PrepareSessionCommit<PreparedValue<StatefulSessionPersistence<Claims>[\"rotate\"]>, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n          const nativeSessionId = yield* mapping.sessionId.toNative(input.sessionId);\n\n          const row = (yield* database\n            .select()\n            .from(mapping.session.table)\n            .where(eq(s.sessionId, nativeSessionId))\n            .limit(1))[0];\n\n          if (row === undefined) return yield* SessionConflict.make({});\n          const current = yield* mapping.session.decode(row);\n          const nativeSubjectId = yield* mapping.subjectId.toNative(current.subjectId);\n\n          const version = yield* allocate(\n            mapping.session.allocateVersion,\n            mapping.session.allocateVersionSync,\n          );\n\n          const next = {\n            ...current,\n            digest: input.nextDigest,\n            credentialVersion: input.nextCredentialVersion,\n            version,\n            issuedAt: DateTime.makeUnsafe(DateTime.toEpochMillis(input.now)),\n            expiresAt: input.nextExpiresAt,\n          };\n\n          const sessionCondition = and(\n            eq(s.sessionId, nativeSessionId),\n            eq(s.digest, input.expectedDigest),\n            eq(s.version, input.expectedVersion),\n            eq(s.securityRevision, input.expectedSecurityRevision),\n            gt(s.expiresAt, mapping.d1.engineNow),\n            gt(s.absoluteExpiresAt, mapping.d1.engineNow),\n          )!;\n\n          const timeCondition = and(\n            sql`${DateTime.toEpochMillis(next.issuedAt)} <= ${mapping.d1.engineNowMillis}`,\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(input.nextExpiresAt)}`,\n            sql`${DateTime.toEpochMillis(input.nextExpiresAt)} <= ${DateTime.toEpochMillis(current.absoluteExpiresAt)}`,\n          )!;\n\n          const authority = subjectRevisionCondition(\n            mapping,\n            nativeSubjectId,\n            input.expectedSecurityRevision,\n          );\n\n          const assertionCondition = and(\n            authority,\n            sql`exists(select 1 from ${mapping.session.table} where ${sessionCondition})`,\n            timeCondition,\n          )!;\n\n          const update = database\n            .update(mapping.session.table)\n            .set(mapping.session.encodeRotation(next))\n            .where(and(authority, sessionCondition, timeCondition));\n\n          const receipt = prepare(next, journal);\n\n          return {\n            receipt,\n            statements: [yield* assertion(assertionCondition), yield* statement(update)],\n          };\n        }),\n        undefined,\n        Effect.fail(SessionConflict.make({})),\n      ),\n    revokeDigest: <A>(\n      digest: Parameters<StatefulSessionPersistence<Claims>[\"revokeDigest\"]>[0],\n      prepare: PrepareSessionCommit<boolean, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n\n          const row = (yield* database\n            .select()\n            .from(mapping.session.table)\n            .where(eq(s.digest, digest))\n            .limit(1))[0];\n\n          const statements =\n            row === undefined\n              ? [yield* assertion(sql`true`)]\n              : [\n                  yield* statement(\n                    database.delete(mapping.session.table).where(eq(s.digest, digest)),\n                  ),\n                ];\n\n          return { receipt: prepare(row !== undefined, journal), statements };\n        }),\n      ),\n    revoke: <A>(\n      input: Parameters<StatefulSessionPersistence<Claims>[\"revoke\"]>[0],\n      prepare: PrepareSessionCommit<void, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n          const nativeSubjectId = yield* mapping.subjectId.toNative(input.subjectId);\n          const nativeSessionId = yield* mapping.sessionId.toNative(input.sessionId);\n\n          const condition = subjectRevisionCondition(\n            mapping,\n            nativeSubjectId,\n            input.expectedSecurityRevision,\n          );\n\n          const remove = database\n            .delete(mapping.session.table)\n            .where(and(eq(s.subjectId, nativeSubjectId), eq(s.sessionId, nativeSessionId)));\n\n          const receipt = prepare(undefined, journal);\n\n          return {\n            receipt,\n            statements: [yield* assertion(condition), yield* statement(remove)],\n          };\n        }),\n        undefined,\n        Effect.fail(stale()),\n      ),\n    revokeAll: <A>(\n      input: Parameters<StatefulSessionPersistence<Claims>[\"revokeAll\"]>[0],\n      prepare: PrepareSessionCommit<void, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n          const nativeSubjectId = yield* mapping.subjectId.toNative(input.subjectId);\n\n          const next = yield* allocate(\n            mapping.subject.nextSecurityRevision?.(input.expectedSecurityRevision),\n            mapping.subject.nextSecurityRevisionSync === undefined\n              ? undefined\n              : () => mapping.subject.nextSecurityRevisionSync!(input.expectedSecurityRevision),\n          );\n\n          const sc = subjectColumns(mapping);\n\n          const condition = and(\n            eq(sc.id, nativeSubjectId),\n            eq(sc.status, mapping.d1.activeSubjectStatusValue),\n            eq(sc.revision, input.expectedSecurityRevision),\n          )!;\n\n          const updateSubject = database\n            .update(mapping.subject.table)\n            .set(updateValues<any>([[mapping.subject.securityRevision, next]]))\n            .where(condition);\n\n          const removeSessions = database\n            .delete(mapping.session.table)\n            .where(eq(s.subjectId, nativeSubjectId));\n\n          const receipt = prepare(undefined, journal);\n\n          return {\n            receipt,\n            statements: [\n              yield* assertion(\n                sql`exists(select 1 from ${mapping.subject.table} where ${condition})`,\n              ),\n              yield* statement(updateSubject),\n              yield* statement(removeSessions),\n            ],\n          };\n        }),\n        undefined,\n        Effect.fail(stale()),\n      ),\n  };\n\n  const repository = {\n    list: (input: Parameters<SessionRepository[\"list\"]>[0]) =>\n      Effect.gen(function* () {\n        const database = yield* CurrentD1PlanningDatabase;\n        const nativeSubjectId = yield* mapping.subjectId.toNative(input.subjectId);\n\n        const cursor =\n          input.cursor === undefined\n            ? undefined\n            : yield* mapping.sessionId.toNative(input.cursor as any);\n\n        const rows = yield* database\n          .select({ ...getTableColumns(mapping.session.table) })\n          .from(mapping.session.table)\n          .innerJoin(\n            mapping.subject.table,\n            and(\n              eq(s.subjectId, subjectColumns(mapping).id),\n              eq(s.securityRevision, subjectColumns(mapping).revision),\n              eq(subjectColumns(mapping).status, mapping.d1.activeSubjectStatusValue),\n            ),\n          )\n          .where(\n            and(\n              eq(s.subjectId, nativeSubjectId),\n              gt(s.expiresAt, mapping.d1.engineNow),\n              gt(s.absoluteExpiresAt, mapping.d1.engineNow),\n              cursor === undefined ? undefined : gt(s.sessionId, cursor),\n            ),\n          )\n          .orderBy(s.sessionId)\n          .limit(input.limit + 1);\n\n        const decoded = yield* Effect.forEach(rows, (row) => mapping.session.decode(row));\n        const codec = Schema.toCodecJson(Schema.toType(SessionMetadata));\n\n        const sessions = yield* Effect.forEach(decoded.slice(0, input.limit), (record) =>\n          Schema.encodeEffect(codec)(record).pipe(Effect.flatMap(Schema.decodeEffect(codec))),\n        );\n\n        return {\n          sessions,\n          ...(decoded.length <= input.limit ? {} : { nextCursor: sessions.at(-1)?.sessionId }),\n        };\n      }).pipe(terminalD1),\n  };\n\n  return { persistence, repository };\n};\n\nexport const makeD1SignedValidity = (\n  mapping: D1SignedSessionValidityMapping<any, any, any, any>,\n) => {\n  const sc = subjectColumns(mapping);\n\n  const t = {\n    subjectId: column(mapping.tombstone.table, mapping.tombstone.subjectId),\n    sessionId: column(mapping.tombstone.table, mapping.tombstone.sessionId),\n    absoluteExpiresAt: column(mapping.tombstone.table, mapping.tombstone.absoluteExpiresAt),\n  };\n\n  return {\n    verify: (session: Parameters<SignedSessionValidity[\"verify\"]>[0], _now: DateTime.Utc) =>\n      Effect.gen(function* () {\n        const database = yield* CurrentD1PlanningDatabase;\n        const nativeSubjectId = yield* mapping.subjectId.toNative(session.subjectId);\n        const nativeSessionId = yield* mapping.sessionId.toNative(session.sessionId);\n\n        const rows = yield* database\n          .select({ subjectId: sc.id })\n          .from(mapping.subject.table)\n          .where(\n            and(\n              eq(sc.id, nativeSubjectId),\n              eq(sc.status, mapping.d1.activeSubjectStatusValue),\n              eq(sc.revision, session.securityRevision),\n              sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(session.expiresAt)}`,\n              sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(session.absoluteExpiresAt)}`,\n              not(\n                sql`exists(select 1 from ${mapping.tombstone.table} where ${t.subjectId} = ${sql.param(nativeSubjectId, t.subjectId)} and ${t.sessionId} = ${sql.param(nativeSessionId, t.sessionId)} and ${t.absoluteExpiresAt} > ${mapping.d1.engineNow})`,\n              ),\n            ),\n          )\n          .limit(1);\n\n        if (rows.length === 0) return yield* invalidSession();\n      }).pipe(terminalD1),\n    revoke: <A>(\n      input: Parameters<SignedSessionValidity[\"revoke\"]>[0],\n      prepare: PrepareSessionCommit<void, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n          const nativeSubjectId = yield* mapping.subjectId.toNative(input.subjectId);\n          const nativeSessionId = yield* mapping.sessionId.toNative(input.sessionId);\n          const condition = sql`exists(select 1 from ${mapping.subject.table} where ${sc.id} = ${sql.param(nativeSubjectId, sc.id)} and ${sc.status} = ${sql.param(mapping.d1.activeSubjectStatusValue, sc.status)} and ${sc.revision} = ${sql.param(input.expectedSecurityRevision, sc.revision)})`;\n          const encodedExpiry = mapping.tombstone.encodeInstant(input.absoluteExpiresAt);\n          const desiredExpiry = sql.param(encodedExpiry, t.absoluteExpiresAt);\n\n          const write = database\n            .insert(mapping.tombstone.table)\n            .values(\n              mapping.tombstone.encodeInsert({\n                subjectId: nativeSubjectId,\n                sessionId: nativeSessionId,\n                absoluteExpiresAt: input.absoluteExpiresAt,\n              }),\n            )\n            .onConflictDoUpdate({\n              target: [t.subjectId, t.sessionId],\n              set: updateValues<any>([\n                [\n                  mapping.tombstone.absoluteExpiresAt,\n                  sql`case when ${t.absoluteExpiresAt} < ${desiredExpiry} then ${desiredExpiry} else ${t.absoluteExpiresAt} end`,\n                ],\n              ]),\n            });\n\n          const receipt = prepare(undefined, journal);\n\n          return {\n            receipt,\n            statements: [yield* assertion(condition), yield* statement(write)],\n          };\n        }),\n        undefined,\n        Effect.fail(stale()),\n      ),\n    revokeAll: <A>(\n      input: Parameters<SignedSessionValidity[\"revokeAll\"]>[0],\n      prepare: PrepareSessionCommit<void, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n          const nativeSubjectId = yield* mapping.subjectId.toNative(input.subjectId);\n\n          const next = yield* allocate(\n            mapping.subject.nextSecurityRevision?.(input.expectedSecurityRevision),\n            mapping.subject.nextSecurityRevisionSync === undefined\n              ? undefined\n              : () => mapping.subject.nextSecurityRevisionSync!(input.expectedSecurityRevision),\n          );\n\n          const condition = and(\n            eq(sc.id, nativeSubjectId),\n            eq(sc.status, mapping.d1.activeSubjectStatusValue),\n            eq(sc.revision, input.expectedSecurityRevision),\n          )!;\n\n          const updateSubject = database\n            .update(mapping.subject.table)\n            .set(updateValues<any>([[mapping.subject.securityRevision, next]]))\n            .where(condition);\n\n          const receipt = prepare(undefined, journal);\n\n          return {\n            receipt,\n            statements: [\n              yield* assertion(\n                sql`exists(select 1 from ${mapping.subject.table} where ${condition})`,\n              ),\n              yield* statement(updateSubject),\n            ],\n          };\n        }),\n        undefined,\n        Effect.fail(stale()),\n      ),\n  };\n};\n\nexport const makeD1SessionServiceEffects = {\n  authority: <Claims>(database: Database, mapping: any) =>\n    Effect.gen(function* () {\n      const hooks = yield* LifecycleHooks;\n      const raw = makeD1AuthenticationAuthority<Claims>(mapping);\n\n      const run = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n        Effect.gen(function* () {\n          if (\n            (yield* Effect.serviceOption(CurrentD1SessionBatch))._tag === \"Some\" ||\n            (yield* hasCommitScope)\n          )\n            return yield* unavailable();\n\n          return yield* effect.pipe(\n            Effect.provideService(CurrentD1PlanningDatabase, database),\n            Effect.provideService(LifecycleHooks, hooks),\n          );\n        });\n\n      const authenticationAuthority: AuthenticationAuthority[\"Service\"] = {\n        capture: (subjectId, credentialIds) => run(raw.capture(subjectId, credentialIds)),\n        requirements: (evidence) => run(raw.requirements(evidence)),\n        approve: (input, prepare) => run(raw.approve(input, prepare)),\n      };\n\n      return { authenticationAuthority };\n    }),\n  pending: <Claims>(database: Database, mapping: any) =>\n    Effect.gen(function* () {\n      const hooks = yield* LifecycleHooks;\n      const raw = makeD1PendingAuthentication<Claims>(mapping);\n\n      const run = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n        Effect.gen(function* () {\n          if (\n            (yield* Effect.serviceOption(CurrentD1SessionBatch))._tag === \"Some\" ||\n            (yield* hasCommitScope)\n          )\n            return yield* unavailable();\n\n          return yield* effect.pipe(\n            Effect.provideService(CurrentD1PlanningDatabase, database),\n            Effect.provideService(LifecycleHooks, hooks),\n          );\n        });\n\n      const pendingAuthentication: PendingAuthentication<Claims> = {\n        create: (input, now, prepare) => run(raw.create(input, now, prepare)),\n        context: (input) => run(raw.context(input)),\n        read: (input) => run(raw.read(input)),\n        reject: (input, prepare) => run(raw.reject(input, prepare)),\n      };\n\n      return { pendingAuthentication };\n    }),\n  stateful: <Claims>(database: Database, mapping: any) =>\n    Effect.gen(function* () {\n      const hooks = yield* LifecycleHooks;\n      const raw = makeD1StatefulSessions<Claims>(mapping);\n\n      const run = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n        Effect.gen(function* () {\n          if (\n            (yield* Effect.serviceOption(CurrentD1SessionBatch))._tag === \"Some\" ||\n            (yield* hasCommitScope)\n          )\n            return yield* unavailable();\n\n          return yield* effect.pipe(\n            Effect.provideService(CurrentD1PlanningDatabase, database),\n            Effect.provideService(LifecycleHooks, hooks),\n          );\n        });\n\n      const statefulSessionPersistence: StatefulSessionPersistence<Claims> = {\n        establish: (input, prepare) => run(raw.persistence.establish(input, prepare)),\n        verify: (input) => run(raw.persistence.verify(input)),\n        rotate: (input, prepare) => run(raw.persistence.rotate(input, prepare)),\n        revokeDigest: (digest, prepare) => run(raw.persistence.revokeDigest(digest, prepare)),\n        revoke: (input, prepare) => run(raw.persistence.revoke(input, prepare)),\n        revokeAll: (input, prepare) => run(raw.persistence.revokeAll(input, prepare)),\n      };\n\n      const sessionRepository: SessionRepository = {\n        list: (input) => run(raw.repository.list(input)),\n      };\n\n      return { statefulSessionPersistence, sessionRepository };\n    }),\n  validity: (database: Database, mapping: any) =>\n    Effect.gen(function* () {\n      const hooks = yield* LifecycleHooks;\n      const raw = makeD1SignedValidity(mapping);\n\n      const run = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n        Effect.gen(function* () {\n          if (\n            (yield* Effect.serviceOption(CurrentD1SessionBatch))._tag === \"Some\" ||\n            (yield* hasCommitScope)\n          )\n            return yield* unavailable();\n\n          return yield* effect.pipe(\n            Effect.provideService(CurrentD1PlanningDatabase, database),\n            Effect.provideService(LifecycleHooks, hooks),\n          );\n        });\n\n      const signedSessionValidity: SignedSessionValidity = {\n        verify: (session, now) => run(raw.verify(session, now)),\n        revoke: (input, prepare) => run(raw.revoke(input, prepare)),\n        revokeAll: (input, prepare) => run(raw.revokeAll(input, prepare)),\n      };\n\n      return { signedSessionValidity };\n    }),\n};\n\ntype D1CoordinatorError<E> = E | D1DomainError | HookConfigurationError;\n\n/**\n * Owns one atomic D1 persistence transition together with any number of\n * application statements appended by `owner`. Keeping one persistence\n * transition makes a failed batch's domain guard recoverable without exposing\n * a prepared value. Compose additional transitions in later root batches.\n * Interruption or owner failure before `$client.batch` discards the journal;\n * the adapter performs no hidden retry and a retry must re-plan the whole owner.\n * Caller failures remain in the error channel. D1 batch/transport failures that\n * cannot be tied to this adapter's reserved guard become `SessionUnavailable`.\n */\nexport const coordinateD1SessionBatch = <Services, A, E, R>(\n  database: Database,\n  make: (batch: D1SessionBatch) => Effect.Effect<Services, never, LifecycleHooks>,\n  owner: (services: Services, batch: D1SessionBatch) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, D1CoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, D1CoordinatorError<E>, R | LifecycleHooks> {\n    if (yield* hasCommitScope) return yield* unavailable();\n\n    const result = yield* coordinateCommit(\n      () =>\n        Effect.gen(function* () {\n          const statements: Statement<any>[] = [];\n          let mutation: Planned<any> | undefined;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => statements.push(statement)),\n          });\n\n          const d1Owner = yield* makeD1Owner(unavailable()).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          let batch!: D1SessionBatch;\n\n          const appendMutation = (input: Planned<any>) =>\n            d1Owner.run(\n              Effect.suspend(() => {\n                // Guard recovery is unambiguous only for one persistence transition.\n                // The owner may append any number of application statements around it.\n                if (mutation !== undefined) return Effect.fail(unavailable());\n                mutation = input;\n                statements.push(...input.statements);\n\n                return Effect.void;\n              }),\n            );\n\n          batch = { owner: d1Owner, append: appendMutation };\n          const services = yield* make(batch);\n\n          const value = yield* d1Owner.close(\n            Effect.provideService(owner(services, batch), D1BatchStatements, d1Owner.collector),\n          );\n\n          if (mutation?.journalGuard !== undefined) {\n            const status = yield* Effect.result(mutation.journalGuard.read);\n\n            if (status._tag === \"Success\" || status.failure._tag !== \"CommitPending\")\n              return yield* unavailable();\n          }\n\n          yield* database.$client\n            .batch(statements)\n            .pipe(\n              Effect.catchCause((cause) =>\n                Effect.fail(\n                  new D1BatchFailure({ cause, ...(mutation === undefined ? {} : { mutation }) }),\n                ),\n              ),\n            );\n\n          return value;\n        }),\n      { mode: \"batch\" },\n    ).pipe(\n      Effect.catchCause(recoverCoordinatedD1BatchCause),\n      Effect.provideService(CurrentD1PlanningDatabase, database),\n    );\n\n    return result.value;\n  });\n\nexport const makeD1AuthenticationAuthorityServices = <\n  Claims,\n  Subject extends AnySQLiteTable,\n  Credential extends AnySQLiteTable,\n  Flow extends AnySQLiteTable,\n  Pending extends AnySQLiteTable,\n  NativeSubjectId,\n>(\n  database: Database,\n  mapping: D1AuthenticationAuthorityMapping<\n    Claims,\n    Subject,\n    Credential,\n    Flow,\n    Pending,\n    NativeSubjectId\n  >,\n) => makeD1SessionServiceEffects.authority<Claims>(database, mapping as any);\n\nexport const makeD1PendingAuthenticationServices = <\n  Claims,\n  Subject extends AnySQLiteTable,\n  Credential extends AnySQLiteTable,\n  Pending extends AnySQLiteTable,\n  Flow extends AnySQLiteTable,\n  NativeSubjectId,\n>(\n  database: Database,\n  mapping: D1PendingAuthenticationMapping<\n    Claims,\n    Subject,\n    Credential,\n    Pending,\n    Flow,\n    NativeSubjectId\n  >,\n) => makeD1SessionServiceEffects.pending<Claims>(database, mapping as any);\n\nexport const makeD1StatefulSessionServices = <\n  Claims,\n  Subject extends AnySQLiteTable,\n  Credential extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  Flow extends AnySQLiteTable,\n  Pending extends AnySQLiteTable,\n  NativeSubjectId,\n  NativeSessionId,\n>(\n  database: Database,\n  mapping: D1StatefulSessionMapping<\n    Claims,\n    Subject,\n    Credential,\n    Session,\n    Flow,\n    Pending,\n    NativeSubjectId,\n    NativeSessionId\n  >,\n) => makeD1SessionServiceEffects.stateful<Claims>(database, mapping as any);\n\nexport const makeD1SignedSessionValidityServices = <\n  Subject extends AnySQLiteTable,\n  Tombstone extends AnySQLiteTable,\n  NativeSubjectId,\n  NativeSessionId,\n>(\n  database: Database,\n  mapping: D1SignedSessionValidityMapping<Subject, Tombstone, NativeSubjectId, NativeSessionId>,\n) => makeD1SessionServiceEffects.validity(database, mapping as any);\n\nexport function coordinateD1AuthenticationAuthority<\n  Claims,\n  Subject extends AnySQLiteTable,\n  Credential extends AnySQLiteTable,\n  Flow extends AnySQLiteTable,\n  Pending extends AnySQLiteTable,\n  NativeSubjectId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: D1AuthenticationAuthorityMapping<\n      Claims,\n      Subject,\n      Credential,\n      Flow,\n      Pending,\n      NativeSubjectId\n    >;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  D1CoordinatorError<E> | DatabaseError,\n  Exclude<R, AuthenticationAuthority | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateD1SessionBatch(\n      database,\n      (batch) =>\n        Effect.gen(function* () {\n          const hooks = yield* LifecycleHooks;\n          const raw = makeD1AuthenticationAuthority<Claims>(options.mapping as any);\n\n          const run = <Out, Failure, Requirements>(\n            effect: Effect.Effect<Out, Failure, Requirements>,\n          ) =>\n            batch.owner.run(\n              effect.pipe(\n                Effect.provideService(CurrentD1PlanningDatabase, database),\n                Effect.provideService(LifecycleHooks, hooks),\n                Effect.provideService(CurrentD1SessionBatch, batch),\n              ),\n            );\n\n          const authenticationAuthority: AuthenticationAuthority[\"Service\"] = {\n            capture: (subjectId, credentialIds) => run(raw.capture(subjectId, credentialIds)),\n            requirements: (evidence) => run(raw.requirements(evidence)),\n            approve: (input, prepare) => run(raw.approve(input, prepare)),\n          };\n\n          return { authenticationAuthority };\n        }),\n      (\n        ownedServices: { readonly authenticationAuthority: AuthenticationAuthority[\"Service\"] },\n        batch,\n      ) => {\n        const provided = Context.make(\n          AuthenticationAuthority,\n          ownedServices.authenticationAuthority,\n        ).pipe(Context.add(D1BatchStatements, batch.owner.collector));\n\n        return Effect.provideContext(body, provided);\n      },\n    ),\n  );\n}\n\nexport function coordinateD1PendingAuthentication<\n  TargetId,\n  Claims,\n  Subject extends AnySQLiteTable,\n  Credential extends AnySQLiteTable,\n  Pending extends AnySQLiteTable,\n  Flow extends AnySQLiteTable,\n  NativeSubjectId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: D1PendingAuthenticationMapping<\n      NoInfer<Claims>,\n      Subject,\n      Credential,\n      Pending,\n      Flow,\n      NativeSubjectId\n    >;\n    readonly target: SuppliedService<TargetId, PendingAuthentication<Claims>>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  D1CoordinatorError<E> | DatabaseError,\n  Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateD1SessionBatch(\n      database,\n      (batch) =>\n        Effect.gen(function* () {\n          const hooks = yield* LifecycleHooks;\n          const raw = makeD1PendingAuthentication<Claims>(options.mapping as any);\n\n          const run = <Out, Failure, Requirements>(\n            effect: Effect.Effect<Out, Failure, Requirements>,\n          ) =>\n            batch.owner.run(\n              effect.pipe(\n                Effect.provideService(CurrentD1PlanningDatabase, database),\n                Effect.provideService(LifecycleHooks, hooks),\n                Effect.provideService(CurrentD1SessionBatch, batch),\n              ),\n            );\n\n          const pendingAuthentication: PendingAuthentication<Claims> = {\n            create: (input, now, prepare) => run(raw.create(input, now, prepare)),\n            context: (input) => run(raw.context(input)),\n            read: (input) => run(raw.read(input)),\n            reject: (input, prepare) => run(raw.reject(input, prepare)),\n          };\n\n          return { pendingAuthentication };\n        }),\n      (ownedServices: { readonly pendingAuthentication: PendingAuthentication<Claims> }, batch) => {\n        const provided = Context.make(options.target, ownedServices.pendingAuthentication).pipe(\n          Context.add(D1BatchStatements, batch.owner.collector),\n        );\n\n        return Effect.provideContext(body, provided);\n      },\n    ),\n  );\n}\n\nexport function coordinateD1StatefulSessions<\n  PersistenceId,\n  RepositoryId,\n  Claims,\n  Subject extends AnySQLiteTable,\n  Credential extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  Flow extends AnySQLiteTable,\n  Pending extends AnySQLiteTable,\n  NativeSubjectId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: D1StatefulSessionMapping<\n      NoInfer<Claims>,\n      Subject,\n      Credential,\n      Session,\n      Flow,\n      Pending,\n      NativeSubjectId,\n      NativeSessionId\n    >;\n    readonly persistence: SuppliedService<PersistenceId, StatefulSessionPersistence<Claims>>;\n    readonly repository: SuppliedService<RepositoryId, SessionRepository>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  D1CoordinatorError<E> | DatabaseError,\n  | Exclude<R, PersistenceId | RepositoryId | D1BatchStatements>\n  | LifecycleHooks\n  | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateD1SessionBatch(\n      database,\n      (batch) =>\n        Effect.gen(function* () {\n          const hooks = yield* LifecycleHooks;\n          const raw = makeD1StatefulSessions<Claims>(options.mapping as any);\n\n          const run = <Out, Failure, Requirements>(\n            effect: Effect.Effect<Out, Failure, Requirements>,\n          ) =>\n            batch.owner.run(\n              effect.pipe(\n                Effect.provideService(CurrentD1PlanningDatabase, database),\n                Effect.provideService(LifecycleHooks, hooks),\n                Effect.provideService(CurrentD1SessionBatch, batch),\n              ),\n            );\n\n          const statefulSessionPersistence: StatefulSessionPersistence<Claims> = {\n            establish: (input, prepare) => run(raw.persistence.establish(input, prepare)),\n            verify: (input) => run(raw.persistence.verify(input)),\n            rotate: (input, prepare) => run(raw.persistence.rotate(input, prepare)),\n            revokeDigest: (digest, prepare) => run(raw.persistence.revokeDigest(digest, prepare)),\n            revoke: (input, prepare) => run(raw.persistence.revoke(input, prepare)),\n            revokeAll: (input, prepare) => run(raw.persistence.revokeAll(input, prepare)),\n          };\n\n          const sessionRepository: SessionRepository = {\n            list: (input) => run(raw.repository.list(input)),\n          };\n\n          return { statefulSessionPersistence, sessionRepository };\n        }),\n      (\n        ownedServices: {\n          readonly statefulSessionPersistence: StatefulSessionPersistence<Claims>;\n          readonly sessionRepository: SessionRepository;\n        },\n        batch,\n      ) => {\n        const provided = Context.make(\n          options.persistence,\n          ownedServices.statefulSessionPersistence,\n        ).pipe(\n          Context.add(options.repository, ownedServices.sessionRepository),\n          Context.add(D1BatchStatements, batch.owner.collector),\n        );\n\n        return Effect.provideContext(body, provided);\n      },\n    ),\n  );\n}\n\nexport function coordinateD1SignedSessionValidity<\n  TargetId,\n  Subject extends AnySQLiteTable,\n  Tombstone extends AnySQLiteTable,\n  NativeSubjectId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: D1SignedSessionValidityMapping<\n      Subject,\n      Tombstone,\n      NativeSubjectId,\n      NativeSessionId\n    >;\n    readonly target: SuppliedService<TargetId, SignedSessionValidity>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  D1CoordinatorError<E> | DatabaseError,\n  Exclude<R, TargetId | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateD1SessionBatch(\n      database,\n      (batch) =>\n        Effect.gen(function* () {\n          const hooks = yield* LifecycleHooks;\n          const raw = makeD1SignedValidity(options.mapping as any);\n\n          const run = <Out, Failure, Requirements>(\n            effect: Effect.Effect<Out, Failure, Requirements>,\n          ) =>\n            batch.owner.run(\n              effect.pipe(\n                Effect.provideService(CurrentD1PlanningDatabase, database),\n                Effect.provideService(LifecycleHooks, hooks),\n                Effect.provideService(CurrentD1SessionBatch, batch),\n              ),\n            );\n\n          const signedSessionValidity: SignedSessionValidity = {\n            verify: (session, now) => run(raw.verify(session, now)),\n            revoke: (input, prepare) => run(raw.revoke(input, prepare)),\n            revokeAll: (input, prepare) => run(raw.revokeAll(input, prepare)),\n          };\n\n          return { signedSessionValidity };\n        }),\n      (ownedServices: { readonly signedSessionValidity: SignedSessionValidity }, batch) => {\n        const provided = Context.make(options.target, ownedServices.signedSessionValidity).pipe(\n          Context.add(D1BatchStatements, batch.owner.collector),\n        );\n\n        return Effect.provideContext(body, provided);\n      },\n    ),\n  );\n}\n\nconst stepUpColumns = (mapping: any) =>\n  Object.fromEntries(\n    [\n      \"digest\",\n      \"version\",\n      \"flowId\",\n      \"subjectId\",\n      \"bindingDigest\",\n      \"snapshot\",\n      \"expiresAt\",\n      \"attemptLimit\",\n      \"failedAttempts\",\n      \"consumed\",\n    ].map((key) => [key, column(mapping.intent.table, mapping.intent[key])]),\n  );\n\nconst stepUpSourceCondition = (\n  mapping: any,\n  intent: SessionStepUpIntent,\n  nativeSubjectId: unknown,\n  nativeSessionId: unknown,\n  plan?: SessionStepUpCompletionPlan<unknown>,\n): SQL => {\n  const source = mapping.source;\n\n  if (source.kind !== intent.sourceKind) return sql`false`;\n\n  const time = and(\n    sql`${mapping.d1.engineNowMillis} >= ${DateTime.toEpochMillis(intent.sourceAuthenticatedAt)}`,\n    sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(intent.sourceExpiresAt)}`,\n    sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(intent.sourceAbsoluteExpiresAt)}`,\n  )!;\n\n  if (source.kind === \"StatelessSigned\") return time;\n  if (source.kind === \"StateAssistedSigned\") {\n    const t = source.tombstone,\n      owner = column(t.table, t.subjectId),\n      id = column(t.table, t.sessionId),\n      expiry = column(t.table, t.absoluteExpiresAt);\n\n    return and(\n      time,\n      not(\n        sql`exists(select 1 from ${t.table} where ${owner}=${sql.param(nativeSubjectId, owner)} and ${id}=${sql.param(nativeSessionId, id)} and ${expiry}>${mapping.d1.engineNow})`,\n      ),\n    )!;\n  }\n\n  const s = source.session,\n    c = sessionColumns(source);\n\n  const condition = and(\n    eq(c.sessionId, nativeSessionId),\n    eq(c.subjectId, nativeSubjectId),\n    eq(c.securityRevision, intent.revision.securityRevision),\n    eq(column(s.table, s.credentialVersion), intent.sourceCredentialVersion),\n    eq(column(s.table, s.authenticatedAt), s.encodeInstant(intent.sourceAuthenticatedAt)),\n    eq(c.expiresAt, s.encodeInstant(intent.sourceExpiresAt)),\n    eq(c.absoluteExpiresAt, s.encodeInstant(intent.sourceAbsoluteExpiresAt)),\n    gt(c.expiresAt, mapping.d1.engineNow),\n    gt(c.absoluteExpiresAt, mapping.d1.engineNow),\n    plan?.replacement._tag === \"Stateful\"\n      ? eq(c.digest, plan.replacement.expectedDigest)\n      : undefined,\n    plan?.replacement._tag === \"Stateful\"\n      ? eq(c.version, plan.replacement.expectedRowVersion)\n      : undefined,\n  )!;\n\n  return and(time, sql`exists(select 1 from ${s.table} where ${condition})`)!;\n};\n\nconst stepUpRowCondition = (\n  mapping: any,\n  row: any,\n  intent: SessionStepUpIntent,\n  nativeSubjectId: unknown,\n): SQL => {\n  const c = stepUpColumns(mapping),\n    m = mapping.intent;\n\n  return and(\n    eq(c.digest, intent.digest),\n    eq(c.version, intent.version),\n    eq(c.flowId, intent.flowId),\n    eq(c.subjectId, nativeSubjectId),\n    eq(c.bindingDigest, intent.bindingDigest),\n    eq(c.snapshot, row[m.snapshot]),\n    eq(c.expiresAt, m.encodeInstant(intent.expiresAt)),\n    eq(c.attemptLimit, intent.attemptLimit),\n    eq(c.consumed, false),\n    eq(c.failedAttempts, row[m.failedAttempts]),\n    sql`${c.failedAttempts} >= 0`,\n    sql`${c.failedAttempts} < ${c.attemptLimit}`,\n    gt(c.expiresAt, mapping.d1.engineNow),\n  )!;\n};\n\nconst readD1StepUp = Effect.fn(\"DrizzleD1StepUp.read\")(function* (\n  mapping: AnyD1StepUpMapping,\n  digest: TokenDigest,\n) {\n  const database = yield* CurrentD1PlanningDatabase;\n\n  const m = mapping.intent,\n    c = stepUpColumns(mapping);\n\n  const row = (yield* database.select().from(m.table).where(eq(c.digest, digest)).limit(1))[0];\n\n  if (row === undefined) return yield* SessionStepUpInvalid.make({});\n  const intent = yield* decodeStepUpIntent(row[m.snapshot]);\n\n  if (\n    intent.digest !== digest ||\n    !stepUpIntentLive(intent, mapping.source.kind, yield* DateTime.now) ||\n    !Schema.is(Schema.Natural)(row[m.failedAttempts])\n  )\n    return yield* SessionStepUpInvalid.make({});\n  const nativeSubjectId = yield* mapping.subjectId.toNative(intent.revision.subjectId);\n\n  const nativeSessionId =\n    mapping.source.kind === \"StatelessSigned\"\n      ? undefined\n      : yield* mapping.source.sessionId.toNative(intent.sourceSessionId);\n\n  const condition = and(\n    authorityCondition(mapping, nativeSubjectId, intent),\n    stepUpSourceCondition(mapping, intent, nativeSubjectId, nativeSessionId),\n    sql`exists(select 1 from ${m.table} where ${stepUpRowCondition(mapping, row, intent, nativeSubjectId)})`,\n    sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(intent.expiresAt)}`,\n  )!;\n\n  if (!(yield* conditionMatches(condition))) return yield* SessionStepUpInvalid.make({});\n\n  return { row, intent, nativeSubjectId, nativeSessionId };\n});\n\nconst isD1StepUpRejectAbsence = (error: unknown): error is SessionStepUpInvalid =>\n  typeof error === \"object\" &&\n  error !== null &&\n  Reflect.get(error, \"_tag\") === \"SessionStepUpInvalid\";\n\ntype D1StepUpReadFailure = D1AdapterFailure | SessionStepUpInvalid | SessionUnavailable;\n\nconst recoverD1StepUpRejectAbsence = <A, B, R>(\n  effect: Effect.Effect<A, D1StepUpReadFailure, R>,\n  rejected: B,\n): Effect.Effect<A | B, D1AdapterFailure | SessionUnavailable, R> =>\n  effect.pipe(\n    Effect.catchCause((cause) => {\n      if (\n        cause.reasons.length > 0 &&\n        cause.reasons.every(\n          (reason) => Cause.isFailReason(reason) && isD1StepUpRejectAbsence(reason.error),\n        )\n      )\n        return Effect.succeed(rejected);\n\n      return Effect.failCause(\n        Cause.map(cause, (error) =>\n          isD1StepUpRejectAbsence(error) ? SessionUnavailable.make({}) : error,\n        ),\n      );\n    }),\n  );\n\nexport const makeD1SessionStepUp = <Claims>(\n  mapping: D1SessionStepUpMapping<Claims, any, any, any, any, any, any, any>,\n) => {\n  const m = mapping.intent,\n    c = stepUpColumns(mapping);\n\n  const recover = Effect.fail(SessionStepUpInvalid.make({}));\n\n  return {\n    create: <A>(\n      input: Parameters<SessionStepUpPersistence<Claims>[\"create\"]>[0],\n      _now: DateTime.Utc,\n      prepare: PrepareSessionCommit<SessionStepUpIntent, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n\n          const version = yield* allocate(m.allocateVersion, m.allocateVersionSync),\n            record: SessionStepUpIntent = { ...input, version };\n\n          if (!stepUpIntentLive(record, mapping.source.kind, yield* DateTime.now))\n            return yield* stale();\n          const nativeSubjectId = yield* mapping.subjectId.toNative(input.revision.subjectId);\n\n          const nativeSessionId =\n            mapping.source.kind === \"StatelessSigned\"\n              ? undefined\n              : yield* mapping.source.sessionId.toNative(input.sourceSessionId);\n\n          const existing = yield* database\n            .select()\n            .from(m.table)\n            .where(or(eq(c.digest, input.digest), eq(c.flowId, input.flowId)))\n            .limit(1);\n\n          if (existing.length > 0) return yield* SessionConflict.make({});\n\n          const condition = and(\n            authorityCondition(mapping, nativeSubjectId, record),\n            stepUpSourceCondition(mapping, record, nativeSubjectId, nativeSessionId),\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(input.expiresAt)}`,\n          )!;\n\n          if (!(yield* conditionMatches(condition))) return yield* stale();\n          const snapshot = yield* encodeStepUpIntent(record);\n\n          const values = {\n            ...m.encodeInsert(record, { subjectId: nativeSubjectId }),\n            ...updateValues<any>([\n              [m.digest, record.digest],\n              [m.version, version],\n              [m.flowId, record.flowId],\n              [m.subjectId, nativeSubjectId],\n              [m.bindingDigest, record.bindingDigest],\n              [m.snapshot, snapshot],\n              [m.expiresAt, m.encodeInstant(record.expiresAt)],\n              [m.attemptLimit, record.attemptLimit],\n              [m.failedAttempts, 0],\n              [m.consumed, false],\n            ]),\n          };\n\n          const receipt = prepare(record, journal);\n\n          const exact = and(\n            eq(c.digest, record.digest),\n            eq(c.version, version),\n            eq(c.flowId, record.flowId),\n            eq(c.subjectId, nativeSubjectId),\n            eq(c.bindingDigest, record.bindingDigest),\n            eq(c.snapshot, snapshot),\n            eq(c.expiresAt, m.encodeInstant(record.expiresAt)),\n            eq(c.attemptLimit, record.attemptLimit),\n            eq(c.failedAttempts, 0),\n            eq(c.consumed, false),\n          )!;\n\n          return {\n            receipt,\n            statements: [\n              yield* assertion(condition),\n              yield* statement(database.insert(m.table).values(values)),\n              yield* assertion(sql`changes() = 1`),\n              yield* assertion(\n                and(condition, sql`exists(select 1 from ${m.table} where ${exact})`)!,\n              ),\n            ],\n          };\n        }),\n        mapping.isConstraintConflict,\n        Effect.fail(stale()),\n      ),\n    context: (input: Parameters<SessionStepUpPersistence<Claims>[\"context\"]>[0]) =>\n      mapFailureCause(\n        readD1StepUp(mapping, input.digest).pipe(\n          Effect.flatMap(({ intent }) =>\n            snapshotPendingAuthenticationContext({\n              flowId: intent.flowId,\n              bindingDigest: intent.bindingDigest,\n              revision: intent.revision,\n              expiresAtMillis: DateTime.toEpochMillis(intent.expiresAt),\n            }),\n          ),\n        ),\n        (error) => (error._tag === \"PendingAuthenticationInvalid\" ? unavailable() : error),\n      ).pipe(terminalD1),\n    read: (input: Parameters<SessionStepUpPersistence<Claims>[\"read\"]>[0]) =>\n      readD1StepUp(mapping, input.digest).pipe(\n        Effect.flatMap(({ intent }) =>\n          intent.bindingDigest === input.bindingDigest\n            ? Effect.succeed(intent)\n            : Effect.fail(SessionStepUpInvalid.make({})),\n        ),\n        terminalD1,\n      ),\n    reject: <A>(\n      input: Parameters<SessionStepUpPersistence<Claims>[\"reject\"]>[0],\n      prepare: PrepareSessionCommit<{ readonly _tag: \"Rejected\" }, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n\n          const selected = yield* recoverD1StepUpRejectAbsence(\n            readD1StepUp(mapping, input.digest).pipe(\n              Effect.map((value) => ({ _tag: \"Found\" as const, value })),\n            ),\n            { _tag: \"Rejected\" as const },\n          );\n\n          if (selected._tag === \"Rejected\")\n            return { receipt: prepare({ _tag: \"Rejected\" }, journal), statements: [] };\n          const { row, intent, nativeSubjectId, nativeSessionId } = selected.value;\n\n          // Rejection does not replace immutable intent identity. Concurrent contenders\n          // increment the authoritative counter under the same cap; completion pins it.\n          const condition = and(\n            eq(c.digest, intent.digest),\n            eq(c.version, intent.version),\n            eq(c.snapshot, row[m.snapshot]),\n            eq(c.subjectId, nativeSubjectId),\n            eq(c.bindingDigest, intent.bindingDigest),\n            eq(c.flowId, intent.flowId),\n            eq(c.expiresAt, m.encodeInstant(intent.expiresAt)),\n            eq(c.attemptLimit, intent.attemptLimit),\n            eq(c.consumed, false),\n            sql`${c.failedAttempts} >= 0`,\n            sql`${c.failedAttempts} < ${c.attemptLimit}`,\n            gt(c.expiresAt, mapping.d1.engineNow),\n            authorityCondition(mapping, nativeSubjectId, intent),\n            stepUpSourceCondition(mapping, intent, nativeSubjectId, nativeSessionId),\n          )!;\n\n          const write = database\n            .update(m.table)\n            .set(updateValues<any>([[m.failedAttempts, sql`${c.failedAttempts} + 1`]]))\n            .where(condition);\n\n          // A valid still-chargeable row cannot survive a zero-write trigger. A row\n          // consumed/expired/exhausted while queued legitimately returns Rejected.\n          const settled = sql`changes() = 1 or not exists(select 1 from ${m.table} where ${condition})`;\n\n          return {\n            receipt: prepare({ _tag: \"Rejected\" }, journal),\n            statements: [yield* statement(write), yield* assertion(settled)],\n          };\n        }),\n        undefined,\n        Effect.fail(unavailable()),\n      ),\n    complete: <A>(\n      plan: SessionStepUpCompletionPlan<Claims>,\n      prepare: PrepareSessionCommit<PreparedValue<SessionStepUpPersistence<Claims>[\"complete\"]>, A>,\n    ) =>\n      runPlanned(\n        Effect.gen(function* () {\n          const database = yield* CurrentD1PlanningDatabase;\n          const journal = yield* CurrentCommitJournal;\n\n          yield* validateStepUpPlan(plan);\n          const stored = yield* readD1StepUp(mapping, plan.intent.digest);\n\n          if (\n            (yield* encodeStepUpIntent(stored.intent)) !== (yield* encodeStepUpIntent(plan.intent))\n          )\n            return yield* SessionStepUpInvalid.make({});\n          const base = yield* requirement(mapping, plan.evidence);\n\n          if (\n            !(yield* assessAuthentication(plan.evidence, base)).satisfied ||\n            !(yield* assessAuthentication(plan.evidence, stored.intent.requirement)).satisfied\n          )\n            return yield* stale();\n\n          const { row, intent, nativeSubjectId, nativeSessionId } = stored,\n            replacement = plan.replacement;\n\n          const target = replacement.inspection.session;\n\n          if (\n            DateTime.toEpochMillis(target.expiresAt) >\n            DateTime.toEpochMillis(intent.sourceAbsoluteExpiresAt)\n          )\n            return yield* SessionStepUpInvalid.make({});\n\n          const live = and(\n            authorityCondition(mapping, nativeSubjectId, plan.evidence),\n            freshnessCondition(mapping, plan.evidence, base, true),\n            freshnessCondition(mapping, plan.evidence, intent.requirement, true),\n            sql`${mapping.d1.engineNowMillis} >= ${DateTime.toEpochMillis(intent.sourceAuthenticatedAt)}`,\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(intent.expiresAt)}`,\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(intent.sourceExpiresAt)}`,\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(intent.sourceAbsoluteExpiresAt)}`,\n            sql`${mapping.d1.engineNowMillis} >= ${DateTime.toEpochMillis(target.issuedAt)}`,\n            sql`${mapping.d1.engineNowMillis} < ${DateTime.toEpochMillis(target.expiresAt)}`,\n          )!;\n\n          const source = stepUpSourceCondition(\n            mapping,\n            intent,\n            nativeSubjectId,\n            nativeSessionId,\n            plan,\n          );\n\n          const version = yield* allocate(m.allocateVersion, m.allocateVersionSync);\n\n          if (version === intent.version) return yield* unavailable();\n          const snapshot = yield* encodeStepUpIntent({ ...intent, version });\n\n          const consume = database\n            .update(m.table)\n            .set(\n              updateValues<any>([\n                [m.consumed, true],\n                [m.version, version],\n                [m.snapshot, snapshot],\n              ]),\n            )\n            .where(and(stepUpRowCondition(mapping, row, intent, nativeSubjectId), live, source));\n\n          const marker = sql`exists(select 1 from ${m.table} where ${c.digest}=${sql.param(intent.digest, c.digest)} and ${c.version}=${sql.param(version, c.version)} and ${c.snapshot}=${sql.param(snapshot, c.snapshot)} and ${c.consumed}=${sql.param(true, c.consumed)} and ${c.failedAttempts}=${row[m.failedAttempts]})`;\n\n          const statements: Statement<any>[] = [\n            yield* statement(consume),\n            yield* assertion(sql`changes() = 1`),\n          ];\n\n          let post: SQL = sql`true`;\n\n          if (replacement._tag === \"Stateful\") {\n            if (mapping.source.kind !== \"Stateful\") return yield* SessionStepUpInvalid.make({});\n\n            const s = mapping.source.session,\n              sc = sessionColumns(mapping.source);\n\n            const rowVersion = yield* allocate(s.allocateVersion, s.allocateVersionSync);\n\n            const next = {\n              ...target,\n              provenance: replacement.inspection.provenance,\n              credentialVersion: replacement.inspection.credentialVersion,\n              digest: replacement.nextDigest,\n              version: rowVersion,\n            };\n\n            const rotation = {\n              ...s.encodeRotation(next),\n              ...updateValues<any>([\n                [s.version, rowVersion],\n                [s.digest, next.digest],\n                [s.credentialVersion, next.credentialVersion],\n                [s.authenticatedAt, s.encodeInstant(target.assurance.authenticatedAt)],\n                [s.issuedAt, s.encodeInstant(target.issuedAt)],\n                [s.expiresAt, s.encodeInstant(target.expiresAt)],\n                [s.absoluteExpiresAt, s.encodeInstant(target.absoluteExpiresAt)],\n              ]),\n            };\n\n            const write = database\n              .update(s.table)\n              .set(rotation)\n              .where(\n                and(\n                  eq(sc.sessionId, nativeSessionId),\n                  eq(sc.digest, replacement.expectedDigest),\n                  eq(sc.version, replacement.expectedRowVersion),\n                  marker,\n                  source,\n                  live,\n                ),\n              );\n\n            statements.push(yield* statement(write), yield* assertion(sql`changes() = 1`));\n\n            const exact = and(\n              eq(sc.sessionId, nativeSessionId),\n              eq(sc.subjectId, nativeSubjectId),\n              eq(sc.version, rowVersion),\n              eq(sc.digest, next.digest),\n              eq(sc.securityRevision, target.securityRevision),\n              eq(column(s.table, s.credentialVersion), next.credentialVersion),\n              eq(\n                column(s.table, s.authenticatedAt),\n                s.encodeInstant(target.assurance.authenticatedAt),\n              ),\n              eq(sc.issuedAt, s.encodeInstant(target.issuedAt)),\n              eq(sc.expiresAt, s.encodeInstant(target.expiresAt)),\n              eq(sc.absoluteExpiresAt, s.encodeInstant(target.absoluteExpiresAt)),\n            )!;\n\n            post = sql`exists(select 1 from ${s.table} where ${exact})`;\n          } else if (replacement._tag === \"StateAssistedSigned\") {\n            if (mapping.source.kind !== \"StateAssistedSigned\")\n              return yield* SessionStepUpInvalid.make({});\n\n            const t = mapping.source.tombstone,\n              owner = column(t.table, t.subjectId),\n              id = column(t.table, t.sessionId),\n              expiry = column(t.table, t.absoluteExpiresAt);\n\n            statements.push(\n              yield* statement(\n                database\n                  .delete(t.table)\n                  .where(\n                    and(\n                      eq(owner, nativeSubjectId),\n                      eq(id, nativeSessionId),\n                      sql`${expiry} <= ${mapping.d1.engineNow}`,\n                      marker,\n                    ),\n                  ),\n              ),\n            );\n\n            const values = t.encodeInsert({\n              subjectId: nativeSubjectId,\n              sessionId: nativeSessionId,\n              absoluteExpiresAt: replacement.tombstoneUntil,\n            });\n\n            statements.push(\n              yield* statement(database.insert(t.table).values(values)),\n              yield* assertion(sql`changes() = 1`),\n            );\n\n            const exact = and(\n              eq(owner, nativeSubjectId),\n              eq(id, nativeSessionId),\n              eq(expiry, t.encodeInstant(replacement.tombstoneUntil)),\n            )!;\n\n            post = sql`exists(select 1 from ${t.table} where ${exact})`;\n          }\n          statements.push(yield* assertion(and(marker, post, live)!));\n\n          return { receipt: prepare(replacement.inspection, journal), statements };\n        }),\n        mapping.isConstraintConflict,\n        recover,\n      ),\n  };\n};\n\nexport const makeD1SessionStepUpServices = <\n  Claims,\n  Id,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  T extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n>(\n  database: Database,\n  mapping: D1SessionStepUpMapping<NoInfer<Claims>, S, C, I, Session, T, NativeId, NativeSessionId>,\n  target: Context.Service<Id, SessionStepUpPersistence<Claims>>,\n) =>\n  Effect.gen(function* () {\n    const hooks = yield* LifecycleHooks;\n    const raw = makeD1SessionStepUp<Claims>(mapping as any);\n\n    const run = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n      Effect.gen(function* () {\n        if (\n          (yield* Effect.serviceOption(CurrentD1SessionBatch))._tag === \"Some\" ||\n          (yield* hasCommitScope)\n        )\n          return yield* unavailable();\n\n        return yield* effect.pipe(\n          Effect.provideService(CurrentD1PlanningDatabase, database),\n          Effect.provideService(LifecycleHooks, hooks),\n        );\n      });\n\n    const sessionStepUpPersistence = target.of({\n      create: (input, now, prepare) => run(raw.create(input, now, prepare)),\n      context: (input) => run(raw.context(input)),\n      read: (input) => run(raw.read(input)),\n      reject: (input, prepare) => run(raw.reject(input, prepare)),\n      complete: (plan, prepare) => run(raw.complete(plan, prepare)),\n    });\n\n    return { sessionStepUpPersistence };\n  });\n\nexport function coordinateD1SessionStepUp<\n  Claims,\n  Id,\n  S extends AnySQLiteTable,\n  C extends AnySQLiteTable,\n  I extends AnySQLiteTable,\n  Session extends AnySQLiteTable,\n  T extends AnySQLiteTable,\n  NativeId,\n  NativeSessionId,\n  A,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: D1SessionStepUpMapping<\n      NoInfer<Claims>,\n      S,\n      C,\n      I,\n      Session,\n      T,\n      NativeId,\n      NativeSessionId\n    >;\n    readonly target: SuppliedService<Id, SessionStepUpPersistence<Claims>>;\n  },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  D1CoordinatorError<E> | DatabaseError,\n  Exclude<R, Id | D1BatchStatements> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateD1SessionBatch(\n      database,\n      (batch) =>\n        Effect.gen(function* () {\n          const hooks = yield* LifecycleHooks;\n          const raw = makeD1SessionStepUp<Claims>(options.mapping as any);\n\n          const run = <Out, Failure, Requirements>(\n            effect: Effect.Effect<Out, Failure, Requirements>,\n          ) =>\n            batch.owner.run(\n              effect.pipe(\n                Effect.provideService(CurrentD1PlanningDatabase, database),\n                Effect.provideService(LifecycleHooks, hooks),\n                Effect.provideService(CurrentD1SessionBatch, batch),\n              ),\n            );\n\n          const sessionStepUpPersistence = options.target.of({\n            create: (input, now, prepare) => run(raw.create(input, now, prepare)),\n            context: (input) => run(raw.context(input)),\n            read: (input) => run(raw.read(input)),\n            reject: (input, prepare) => run(raw.reject(input, prepare)),\n            complete: (plan, prepare) => run(raw.complete(plan, prepare)),\n          });\n\n          return { sessionStepUpPersistence };\n        }),\n      (\n        ownedServices: { readonly sessionStepUpPersistence: SessionStepUpPersistence<Claims> },\n        batch,\n      ) => {\n        const provided = Context.make(options.target, ownedServices.sessionStepUpPersistence).pipe(\n          Context.add(D1BatchStatements, batch.owner.collector),\n        );\n\n        return Effect.provideContext(body, provided);\n      },\n    ),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgHA,IAAM,wBAAN,cAAoC,QAAQ,QAA+C,CAAC,CAC1F,2CACF,CAAC,CAAC,CAAC;AACH,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,CAAC,CAG5D,CAAC;AAEJ,MAAM,oBAAoB,mBAAmB,KAAK,CAAC,CAAC;AACpD,MAAM,cAAc,oBAAoB,KAAK,CAAC,CAAC;AAC/C,MAAM,uBAAuB,6BAA6B,KAAK,CAAC,CAAC;AACjE,MAAM,uBAAuB,eAAe,KAAK,CAAC,CAAC;AAEnD,MAAM,mBACJ,QACA,QAEA,OAAO,WAAW,SAAS,UAAU,OAAO,UAAU,MAAM,IAAI,OAAO,GAAG,CAAC,CAAC;AAE9E,MAAM,mBAAmB,UAA2C;CAClE,MAAM,MAAM,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,IAAI,OAAO,MAAM,IAAI,KAAA;CAEvF,OACE,QAAQ,0BACR,QAAQ,kCACR,QAAQ,qBACR,QAAQ,oBACR,QAAQ,wBACR,QAAQ;AAEZ;AAEA,MAAM,sBACJ,QACA,eAEA,yBAAyB,QAAQ,UAAU,CAAC,CAAC,KAC3C,OAAO,YAAY,UACjB,OAAO,UACL,MAAM,IAAI,QAAQ,UAChB,gBAAgB,KAAK,IAAK,QAAsC,YAAY,CAC9E,CACF,CACF,CACF;AAEF,MAAM,cAAuB,WAC3B,mBAAmB,QAAQ,eAAe;AAE5C,MAAM,mBAAmB,SAAkB,cAAoD;CAC7F,MAAM,uBAAO,IAAI,IAAa;CAC9B,MAAM,UAA0B,CAAC,OAAO;CAExC,KAAK,IAAI,YAAY,GAAG,YAAY,MAAM,QAAQ,SAAS,GAAG,aAAa;EACzE,MAAM,UAAU,QAAQ,MAAM;EAE9B,IAAI,YAAY,KAAA,KAAa,YAAY,QAAQ,KAAK,IAAI,OAAO,GAAG;EACpE,KAAK,IAAI,OAAO;EAChB,IAAI,UAAU,OAAO,GAAG,OAAO;EAC/B,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,KAAK,MAAM,UAAU,QAAQ,SAC3B,IAAI,MAAM,aAAa,MAAM,GAAG,QAAQ,KAAK,OAAO,KAAK;QACpD,IAAI,MAAM,YAAY,MAAM,GAAG,QAAQ,KAAK,OAAO,MAAM;GAEhE;EACF;EACA,IAAI,OAAO,YAAY,UAAU;EAEjC,MAAM,UAAU;EAMhB,IAAI,QAAQ,UAAU,KAAA,GAAW,QAAQ,KAAK,QAAQ,KAAK;EAC3D,IAAI,QAAQ,WAAW,KAAA,GAAW,QAAQ,KAAK,QAAQ,MAAM;EAC7D,IAAI,QAAQ,YAAY,KAAA,GAAW,QAAQ,KAAK,QAAQ,OAAO;CACjE;CAEA,OAAO;AACT;AAEA,MAAM,kBAAkB,YACtB,gBACE,UACC,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,2BAA2B,CACpF;AAEF,MAAM,uBACJ,YACqF;CACrF,MAAM,EAAE,OAAO,aAAa;CAC5B,MAAM,eAAe,MAAM,QAAQ,SAAS,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY;CAEvF,IAAI,aAAa,KAAA,GAAW,OAAO,OAAO,UAAU,KAAK;CACzD,IACE,gBACA,SAAS,yBAAyB,KAAA,KAClC,MAAM,QAAQ,OACX,WACC,MAAM,aAAa,MAAM,KACzB,2BAA2B,SAAS,sBAAuB,OAAO,KAAK,CAC3E,GAEA,OAAO,OAAO,KAAK,gBAAgB,KAAK,CAAC,CAAC,CAAC;CAC7C,IACE,gBACA,SAAS,iBAAiB,KAAA,KAC1B,MAAM,QAAQ,OAAO,WAAW,MAAM,aAAa,MAAM,KAAK,eAAe,OAAO,KAAK,CAAC,GAE1F,OAAO,SAAS;CAElB,OAAO,OAAO,UAAU,KAAK;AAC/B;AAEA,MAAM,uBAA0B,UAA2C;CACzE,MAAM,SAAS,MAAM,QAAQ,MAC1B,WAAW,MAAM,aAAa,MAAM,KAAK,OAAO,iBAAiB,cACpE;CAEA,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,aAAa,MAAM,GAAG,OAAO,KAAA;CAChE,MAAM,YAAY,MAAM,YAAY,MAAM,QAAQ,QAAQ,WAAW,WAAW,MAAM,CAAC;CAEvF,OAAO;EACL,SAAS,OAAO;EAEL;CACb;AACF;AAEA,MAAM,uBACJ,UACyF;CACzF,MAAM,QAAQ,oBAAoB,KAAK;CAEvC,IAAI,UAAU,KAAA,GAEZ,OAAO,OAAO,UAAU,KAAuB;CAGjD,OAAO,oBAAoB,MAAM,OAAO,CAAC,CAAC,KACxC,OAAO,YAAY,cAAc,OAAO,UAAU,MAAM,QAAQ,WAAW,MAAM,SAAS,CAAC,CAAC,CAC9F;AACF;AAEA,MAAM,kCACJ,UACuE;CACvE,MAAM,QAAQ,oBAAoB,KAAK;CAEvC,IAAI,UAAU,KAAA,GAEZ,OAAO,OAAO,UAAU,KAAuB;CAGjD,OAAO,WAAW,oBAAoB,MAAM,OAAO,CAAC,CAAC,CAAC,KACpD,OAAO,YAAY,cAAc,OAAO,UAAU,MAAM,QAAQ,WAAW,MAAM,SAAS,CAAC,CAAC,CAC9F;AACF;AAEA,MAAM,aAAa,UACjB,OAAO,IAAI,4BAA4B,aAAa;CAClD,MAAM,WAAW,MAAM,MAAM;CAE7B,OAAO,4BACL,SAAS,SACT,SAAS,QAAQ,OAAO,SAAS,KAAK,SAAS,MAAM,GACrD,WACF;AACF,CAAC;AAEH,MAAM,aACJ,cAEA,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,UACZ,SACG,OAAO,EACN,IAAI,GAAG,aAAa,UAAU,qEAAqE,GACjG,IACF,EACF,CAAC,CAAC,CACD,KAAK,GAAG,YAAY,CACzB;AACF,CAAC;AAEH,MAAM,oBAAoB,cACxB,OAAO,QAAQ,4BAA4B,aACzC,SACG,OAAO,EAAE,IAAI,GAAW,IAAI,CAAC,CAAC,CAC9B,KAAK,GAAG,YAAY,CAAC,CACrB,MAAM,SAAS,CAAC,CAChB,MAAM,CAAC,CAAC,CACR,KAAK,OAAO,KAAK,SAAS,KAAK,SAAS,CAAC,CAAC,CAC/C;AAmCF,SAAS,WACP,MACA,sBACA,cACA;CACA,MAAM,UAAU,KAAK,KACnB,OAAO,KAAK,WAAW;EAAE,GAAG;EAAO;EAAsB;CAAa,EAAE,CAC1E;CAEA,MAAM,YAAY,OAAO,IAAI,aAAa;EACxC,MAAM,QAAQ,OAAO,OAAO,cAAc,qBAAqB;EAE/D,IAAI,MAAM,SAAS,QAAQ;GACzB,MAAM,QAAQ,MAAM;GAmBpB,QAAO,OAjBe,uBAElB,OAAO,IAAI,aAAa;IACtB,OAAO,MAAM,MAAM;IACnB,MAAM,UAAU,OAAO;IACvB,MAAM,QAAQ,OAAO;IAErB,OAAO,MAAM,MAAM;IACnB,MAAM,UAAU;KAAE,GAAG;KAAO,cAAc,QAAQ,QAAQ,KAAA,CAAS;IAAE;IAErE,OAAO,MAAM,OAAO,OAAO;IAE3B,OAAO,QAAQ;GACjB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,EAAA,CAEc;EAChB;EAEA,MAAM,WAAW,OAAO;EAoBxB,QAAO,OAlBe,uBAElB,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GAExB,OAAO,SAAS,QACb,MAAM,SAAS,UAAU,CAAC,CAC1B,KACC,OAAO,YAAY,UACjB,OAAO,KAAK,IAAI,eAAe;IAAE;IAAO,UAAU;GAAS,CAAC,CAAC,CAC/D,CACF;GAEF,OAAO,SAAS;EAClB,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,EAAA,CAEc;CAChB,CAAC;CAED,OAAO,mBACL,UAAU,KAAK,OAAO,WAAW,mBAAmB,CAAC,GACrD,eACF;AACF;AAEA,MAAM,kBAAkB,aAAkB;CACxC,IAAI,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CACpD,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB;AAC1E;AAEA,MAAM,qBAAqB,aAAkB;CAC3C,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,IAAI,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;CACpE,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;CACtE,GAAI,QAAQ,WAAW,WAAW,KAAA,IAC9B,CAAC,IACD,EAAE,QAAQ,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,MAAM,EAAE;AAC5E;AAEA,MAAM,eAAe,aAAkB;CACrC,QAAQ,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,MAAM;CACtD,WAAW,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,SAAS;CAC5D,OAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,KAAK;CACpD,eAAe,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,aAAa;CACpE,YAAY,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,UAAU;AAChE;AAEA,MAAM,gBAAgB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACzD,SACA,QACA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,IAAI,YAAY,OAAO;CAE7B,OAAO,OAAO,SACX,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAC5B,KAAK,QAAQ,KAAK,KAAK,CAAC,CACxB,MAAM,IAAI,GAAG,EAAE,QAAQ,MAAM,GAAG,GAAG,EAAE,YAAY,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CACxE,MAAM,CAAC,CAAC,CACR,KAAK,OAAO,KAAK,SAAS,KAAK,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,sBACJ,SACA,WAMA,cAAc,SAAS,MAAM,CAAC,CAAC,KAC7B,OAAO,SAAS,WACd,OAAO,KAAK,SAAS,gBAAgB,KAAK,CAAC,CAAC,IAAI,oBAAoB,KAAK,CAAC,CAAC,CAAC,CAC9E,CACF;AAEF,MAAM,kBAAkB,aAAkB;CACxC,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,OAAO;CAC9D,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,eAAe,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,aAAa;CAC1E,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,cAAc,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,YAAY;CACxE,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;CAC5E,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;AAClE;AAEA,MAAM,kBAAkB,aAAkB;CACxC,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,SAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,OAAO;CAC9D,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB;CAChF,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,mBAAmB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,iBAAiB;AACpF;AAEA,MAAM,iBAAiB,OAAO,GAAG,iCAAiC,CAAC,CAAC,WAClE,SACA,WACA,eAKA;CACA,MAAM,WAAW,OAAO;CACxB,MAAM,YAAY,CAAC,GAAG,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK;CAEnD,IAAI,UAAU,WAAW,cAAc,QAAQ,OAAO,OAAO,MAAM;CACnE,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,SAAS;CACnE,MAAM,KAAK,eAAe,OAAO;CACjC,MAAM,KAAK,kBAAkB,OAAO;CAEpC,MAAM,OAAc,OAAO,UAAU,WAAW,IAC5C,SACG,OAAO,EAAE,SAAS,gBAAgB,QAAQ,QAAQ,KAAK,EAAE,CAAC,CAAC,CAC3D,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,CAAC,CACjC,MAAM,CAAC,CAAC,CACR,KACC,OAAO,KAAK,aACV,SAAS,KAAK,SAAc;EAAE,SAAS,IAAI;EAAS,YAAY,KAAA;CAAU,EAAE,CAC9E,CACF,IACF,SACG,OAAO;EACN,SAAS,gBAAgB,QAAQ,QAAQ,KAAK;EAC9C,YAAY,gBAAgB,QAAQ,WAAW,KAAK;CACtD,CAAC,CAAC,CACD,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,UACC,QAAQ,WAAW,OACnB,IAAI,GAAG,GAAG,WAAW,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,SAAS,CAAC,CACxD,CAAC,CACA,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;CAEvC,MAAM,UAAU,KAAK,EAAE,EAAE;CAEzB,IAAI,YAAY,KAAA,KAAa,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,GAC1F,OAAO,OAAO,MAAM;CAEtB,MAAM,cAAc,KAAK,SAAS,QAChC,IAAI,eAAe,KAAA,KAAa,IAAI,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAChF;CAEA,IACE,YAAY,WAAW,UAAU,UACjC,YAAY,MACT,QACC,QAAQ,WAAW,WAAW,KAAA,KAC9B,QAAQ,WAAW,iBAAiB,IAAI,QAAQ,WAAW,OAAO,MAAM,IAC5E,GAEA,OAAO,OAAO,MAAM;CAEtB,OAAO;EACL;EACA,UAAU;GACR;GACA,kBAAkB,QAAQ,QAAQ,QAAQ;GAC1C,aAAa,YACV,KAAK,SAAc;IAClB,cAAc,IAAI,QAAQ,WAAW;IACrC,UAAU,IAAI,QAAQ,WAAW;GACnC,EAAE,CAAC,CACF,MAAM,GAAQ,MAAW,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC;EAC1E;CACF;AACF,CAAC;AAED,MAAM,UAAU,OAAO,GAAG,0BAA0B,CAAC,CAAC,WACpD,SACA,WACA,eAKA;CAGA,QAAO,OAFgB,eAAe,SAAS,WAAW,aAAa,EAAA,CAExD;AACjB,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAC5D,SACA,UAKA;CACA,MAAM,UAAU,OAAO,eACrB,SACA,SAAS,SAAS,WAClB,SAAS,SAAS,YAAY,KAAK,SAAS,KAAK,YAAY,CAC/D;CAEA,MAAM,WAAW,IAAI,IACnB,SAAS,SAAS,YAAY,KAAK,SAAS,CAAC,KAAK,cAAc,KAAK,QAAQ,CAAC,CAChF;CAEA,IACE,QAAQ,SAAS,qBAAqB,SAAS,SAAS,oBACxD,QAAQ,SAAS,YAAY,MAAM,SAAS,SAAS,IAAI,KAAK,YAAY,MAAM,KAAK,QAAQ,GAE7F,OAAO,OAAO,MAAM;CAEtB,OAAO,OAAO,QAAQ,QAAQ,kBAAkB,QAAQ,OAAO;AACjE,CAAC;AAED,MAAM,sBACJ,SACA,iBACA,aACQ;CACR,MAAM,KAAK,eAAe,OAAO;CACjC,MAAM,KAAK,kBAAkB,OAAO;CACpC,MAAM,UAAU,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,MAAM,iBAAiB,GAAG,EAAE,EAAE,OAAO,GAAG,OAAO,KAAK,IAAI,MAAM,QAAQ,GAAG,0BAA0B,GAAG,MAAM,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,SAAS,SAAS,kBAAkB,GAAG,QAAQ,EAAE;CAE1R,MAAM,cAAc,SAAS,SAAS,YAAY,KAC/C,SACC,GAAG,wBAAwB,QAAQ,WAAW,MAAM,SAAS,GAAG,UAAU,KAAK,IAAI,MAAM,iBAAiB,GAAG,SAAS,EAAE,OAAO,GAAG,GAAG,KAAK,IAAI,MAAM,KAAK,cAAc,GAAG,EAAE,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,KAAK,UAAU,GAAG,QAAQ,IACxO,QAAQ,WAAW,WAAW,KAAA,IAC1B,GAAG,KACH,GAAG,QAAQ,GAAG,OAAO,KAAK,IAAI,MAAM,QAAQ,GAAG,6BAA6B,GAAG,MAAM,IAC1F,EACL;CAEA,OAAO,IAAI,SAAS,GAAG,WAAW;AACpC;AAEA,MAAM,4BACJ,SACA,iBACA,aACG;CACH,MAAM,KAAK,eAAe,OAAO;CAEjC,OAAO,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,MAAM,iBAAiB,GAAG,EAAE,EAAE,OAAO,GAAG,OAAO,KAAK,IAAI,MAAM,QAAQ,GAAG,0BAA0B,GAAG,MAAM,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,UAAU,GAAG,QAAQ,EAAE;AACzP;;;AAIA,MAAM,sBACJ,SACA,UACA,aACA,aACQ;CACR,MAAM,QAAQ,SAAS,OAAO,KAAK,UAAU;EAC3C,MAAM,WAAW,SAAS,cAAc,MAAM,UAAU;EAExD,OAAO,IACL,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,YACvC,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,KAAK,YAAY,kBAClE;CACF,CAAC;CAED,MAAM,OAAO,eACX,WAAW,WAAW,IAAI,GAAG,UAAU,GAAG,GAAG,UAAU;CAEzD,MAAM,YAAY,SAAS,OAAO,KAC/B,UAAU,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,SAAS,cAAc,MAAM,UAAU,GAC3F;CAEA,IAAI,CAAC,UAAU,OAAO,IAAI,GAAG,WAAW,IAAI,KAAK,CAAC;CAClD,MAAM,+BAAe,IAAI,IAAmB;CAE5C,SAAS,OAAO,SAAS,OAAO,UAAU;EACxC,MAAM,WAAW,aAAa,IAAI,MAAM,YAAY,KAAK,CAAC;EAE1D,SAAS,KAAK,MAAM,MAAM;EAC1B,aAAa,IAAI,MAAM,cAAc,QAAQ;CAC/C,CAAC;CAED,MAAM,kBAAkB,IAAI,KAC1B,CAAC,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,aAAa,IAAI,MAAM,EAAE,mBAAmB,GAC1F,GAAG,KACL;CAEA,MAAM,eAAe,YAAY,aAAa,KAAK,gBACjD,IACE,GAAG,YAAY,QAAQ,KAAK,WAC1B,IAAI,MAAM,QAAQ,GAAG,UAAU,SAAS,OAAO,MAAM,CAAC,QAAQ,SAAS,MAAM,CAAC,CAAC,CACjF,GACA,GAAG,IAAI,gBAAgB,OAAO,YAAY,sBAC1C,IACE,MAAM,QACH,GAAG,WACD,CAAC,YAAY,gBAAgB,SAAS,OAAO,MAAM,CAAC,kBACpD,CAAC,YAAY,qBAAqB,SAAS,OAAO,MAAM,CAAC,kBAC9D,CACF,CACF,CACF;CAEA,OAAO,IAAI,GAAG,WAAW,IAAI,YAAY,CAAC;AAC5C;AAEA,MAAM,YACJ,cACA,gBAEA,iBAAiB,KAAA,IACb,eACA,gBAAgB,KAAA,IACd,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;CACT,KAAK;CACL,QAAQ,UAAU,oBAAoB,KAAK;EAAE,WAAW;EAAY;CAAM,CAAC;AAC7E,CAAC;AAET,MAAM,wBACJ,WACA,aACG;CACH,MAAM,UAAU,IAAI,IAClB,UAAU,SAAS,YAAY,KAAK,SAAS,CAAC,KAAK,cAAc,KAAK,QAAQ,CAAC,CACjF;CAEA,OACE,UAAU,WAAW,SAAS,UAC9B,UAAU,kBAAkB,SAAS,iBACrC,UAAU,SAAS,cAAc,SAAS,SAAS,aACnD,UAAU,SAAS,qBAAqB,SAAS,SAAS,oBAC1D,SAAS,SAAS,YAAY,OAC3B,SAAS,QAAQ,IAAI,KAAK,YAAY,MAAM,KAAK,QACpD,KACA,SAAS,OAAO,OAAO,aACrB,UAAU,OAAO,MACd,UACC,MAAM,WAAW,SAAS,UAC1B,MAAM,iBAAiB,SAAS,gBAChC,MAAM,iBAAiB,SAAS,gBAChC,MAAM,sBAAsB,SAAS,qBACrC,SAAS,cAAc,MAAM,UAAU,MACrC,SAAS,cAAc,SAAS,UAAU,KAC5C,MAAM,QAAQ,WAAW,SAAS,QAAQ,UAC1C,MAAM,QAAQ,OAAO,QAAQ,UAAU,WAAW,SAAS,QAAQ,MAAM,CAC7E,CACF;AAEJ;AAIA,MAAM,kBAAkB,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAG7D,SACA,QACA,YACmF;CAGnF,MAAM,OAAO,QAAO,OAFI,0BAAA,CAGrB,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,eAAe,OAAO,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,CACjD,MAAM,CAAC,EAAA,CAAG;CAEb,IAAI,QAAQ,KAAA,GAAW,OAAO,KAAA;CAK9B,OAAO,QAFL,eAAe,YAAY,QAAQ,QAAQ,gBAAgB,QAAQ,QAAQ,OAAA,CAExD,GAAG;AAC1B,CAAC;AAED,MAAM,eAAuB,SAAc,WACzC,gBAAqD,SAAS,QAAQ,QAAQ;AAEhF,MAAM,oBACJ,SACA,OACA,oBACQ;CACR,MAAM,IAAI,eAAe,OAAO;CAChC,MAAM,IAAI,YAAY,OAAO;CAE7B,OAAO,IACL,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,EAAE,OAAO,KAAK,IAAI,MAAM,MAAM,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,KAAK,IAAI,MAAM,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,MAAM,MAAM,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI,MAAM,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,MAAM,MAAM,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,KAAK,IAAI,MAAM,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,KAAK,EAAE,aAAa,OAAO,EAAE,UAAU,KAAK,QAAQ,GAAG,UAAU,IACpf,GAAG,wBAAwB,QAAQ,KAAK,MAAM,SAAS,EAAE,OAAO,KAAK,IAAI,MAAM,MAAM,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI,MAAM,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,MAAM,QAAQ,KAAK,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,MAAM,MAAM,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,UAAU,EACnW;AACF;AAEA,MAAM,yBACJ,SACA,OACA,cAMA,QAAQ,UAAU,SAAS,SAAS,CAAC,CAAC,KACpC,OAAO,SAAS,oBACd,iBAAiB,iBAAiB,SAAS,OAAO,eAAe,CAAC,CACpE,GACA,OAAO,SAAS,qBACd,OAAO,KACL,mBAAmB,oBAAoB,KAAK,CAAC,CAAC,IAAI,6BAA6B,KAAK,CAAC,CAAC,CACxF,CACF,CACF;AAEF,MAAM,2BAA2B,OAAO,GAAG,oCAAoC,CAAC,CAAC,WAC/E,SACA,OACA,mBACmF;CACnF,MAAM,WAAW,OAAO;CAExB,OAAO,CACL,OAAO,UACL,SACG,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAkB,CAAC,CAAC,QAAQ,QAAQ,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAC1D,MACC,IACE,GAAG,eAAe,OAAO,CAAC,CAAC,QAAQ,MAAM,MAAM,GAC/C,GAAG,eAAe,OAAO,CAAC,CAAC,SAAS,MAAM,OAAO,CACnD,CACF,CACJ,GACA,OAAO,UACL,SACG,OAAO,QAAQ,KAAK,KAAK,CAAC,CAC1B,IACC,aAAkB;EAChB,CAAC,QAAQ,KAAK,OAAO,QAAQ,KAAK,qBAAqB;EACvD,CAAC,QAAQ,KAAK,eAAe,IAAI;EACjC,CAAC,QAAQ,KAAK,YAAY,QAAQ,KAAK,cAAc,iBAAiB,CAAC;CACzE,CAAC,CACH,CAAC,CACA,MAAM,GAAG,YAAY,OAAO,CAAC,CAAC,QAAQ,MAAM,MAAM,CAAC,CACxD,CACF;AACF,CAAC;AAED,MAAa,iCACX,aACI;CACJ,UACE,WACA,kBACG,QAAQ,SAAS,WAAW,aAAa,CAAC,CAAC,KAAK,UAAU;CAC/D,eAAe,aACb,YAAY,SAAS,QAAQ,CAAC,CAAC,KAAK,UAAU;CAChD,UACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EACvB,MAAM,SAAS,OAAO,YAAY,SAAS,MAAM,QAAQ;EAGzD,IAAI,EAAC,OAFmB,qBAAqB,MAAM,UAAU,MAAM,EAAA,CAErD,WAAW,OAAO,OAAO,MAAM;EAE7C,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAC/C,MAAM,SAAS,SAAS,SAC1B;EAEA,IAAI,YAAY,IACd,mBAAmB,SAAS,iBAAiB,MAAM,QAAQ,GAC3D,mBAAmB,SAAS,MAAM,UAAU,QAAQ,IAAI,GACxD,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,MAAM,SAAS,KAC5E,GAAG,GAAG,SAAS,cAAc,MAAM,SAAS,EAAE,MAAM,SAAS,cAAc,MAAM,iBAAiB,GACpG;EAEA,MAAM,aAA+B,CAAC;EAEtC,IAAI,MAAM,YAAY,KAAA,GAAW;GAC/B,IAAI,QAAQ,YAAY,KAAA,GAAW,OAAO,OAAO,eAAe;GAChE,MAAM,iBAAiB;IAAE,GAAG;IAAS,GAAG,QAAQ;GAAQ;GACxD,MAAM,SAAS,OAAO,YAAY,gBAAgB,MAAM,QAAQ,MAAM;GAEtE,IAAI,WAAW,KAAA,KAAa,CAAC,qBAAqB,MAAM,UAAU,OAAO,QAAQ,GAC/E,OAAO,OAAO,eAAe;GAC/B,YAAY,IACV,WACA,iBAAiB,gBAAgB,MAAM,SAAS,eAAe,CACjE;GACA,WAAW,KACT,GAAI,OAAO,yBACT,gBACA,MAAM,SACN,MAAM,iBACR,CACF;EACF;EAGA,OAAO;GAAE,SAFO,QAAQ,KAAA,GAAW,OAEpB;GAAG,YAAY,CAAC,OAAO,UAAU,SAAS,GAAG,GAAG,UAAU;EAAE;CAC7E,CAAC,GACD,KAAA,GACA,OAAO,cACL,MAAM,YAAY,KAAA,KAAa,QAAQ,YAAY,KAAA,IAC/C,OAAO,KAAK,MAAM,CAAC,IACnB,sBACE;EAAE,GAAG;EAAS,GAAG,QAAQ;CAAQ,GACjC,MAAM,SACN,MAAM,SAAS,SAAS,SAC1B,CACN,CACF;AACJ;;;AAIA,MAAM,2BAA2B,OAAO,GAAG,oCAAoC,CAAC,CAAC,WAG/E,SACA,OACA,YAKA;CACA,MAAM,SAAS,OAAO,gBAAwB,SAAS,MAAM,QAAQ,UAAU;CAE/E,IACE,WAAW,KAAA,KACV,MAAM,kBAAkB,KAAA,KAAa,OAAO,SAAS,kBAAkB,MAAM,eAE9E,OAAO,OAAO,eAAe;CAE/B,MAAM,SAAS,OAAO,gBAAgB,YAAY,SAAS,OAAO,QAAQ,IAAI,UAC5E,MAAM,SAAS,wBAAwB,eAAe,IAAI,KAC5D;CAEA,OAAO,qBAAqB,OAAO,UAAU,MAAM,CAAC,CAAC,KACnD,OAAO,eAAe,eAAe,CAAC,CACxC;CACA,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,OAAO,SAAS,SAAS,SAAS;CAmB5F,IAAI,EAAC,OAjBkB,iBACrB,IACE,mBAAmB,SAAS,iBAAiB,OAAO,QAAQ,GAC5D,mBAAmB,SAAS,OAAO,UAAU,QAAQ,KAAK,GAC1D,iBACE,SACA;EACE,QAAQ,MAAM;EACd,eAAe,OAAO,SAAS;EAC/B,QAAQ,OAAO,SAAS;EACxB,SAAS,OAAO;CAClB,GACA,eACF,CACF,CACF,IAEc,OAAO,OAAO,eAAe;CAE3C,OAAO;AACT,CAAC;AAED,MAAa,+BACX,aACI;CACJ,SACE,OACA,MACA,YAEA,WACE,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO;EACxB,MAAM,UAAU,OAAO;EACvB,MAAM,SAAS,OAAO,YAAY,SAAS,MAAM,QAAQ;EAEzD,OAAO,qBAAqB,MAAM,UAAU,MAAM;EAElD,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAC/C,MAAM,SAAS,SAAS,SAC1B;EAEA,IAAI,OAAO,cAAc,SAAS,MAAM,SAAS,MAAM,GACrD,OAAO,OAAO,gBAAgB,KAAK,CAAC,CAAC;EAEvC,MAAM,UAAU,OAAO,SACrB,QAAQ,QAAQ,iBAChB,QAAQ,QAAQ,mBAClB;EAEA,MAAM,SAAS;GAAE,GAAG;GAAO;EAAQ;EACnC,MAAM,IAAI,YAAY,OAAO;EAE7B,MAAM,YAAY,IAChB,mBAAmB,SAAS,iBAAiB,MAAM,QAAQ,GAC3D,mBAAmB,SAAS,MAAM,UAAU,QAAQ,KAAK,GACzD,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,MAAM,SAAS,KAC5E,IACE,GAAG,wBAAwB,QAAQ,KAAK,MAAM,SAAS,EAAE,OAAO,KAAK,IAAI,MAAM,MAAM,SAAS,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,UAAU,EAChK,CACF;EAEA,MAAM,iBAAiB,SACpB,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,MACC,GAAG,GAAG,eAAe,OAAO,CAAC,CAAC,OAAO,cAAc,EAAE,OAAO,QAAQ,QAAQ,KAAK,MAAM,SAAS,EAAE,OAAO,KAAK,IAAI,MAAM,MAAM,SAAS,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,MAAM,QAAQ,GAAG,UAAU,EAC1M;EAEF,MAAM,cAAc,SACjB,OAAO,QAAQ,KAAK,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,EAAE,QAAQ,MAAM,SAAS,MAAM,GAClC,GAAG,GAAG,EAAE,WAAW,MAAM,QAAQ,GAAG,WACtC,CACF;EAEF,MAAM,aAAa,SAAS,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,OACrD,QAAQ,KAAK,oBAAoB;GAC/B,UAAU,MAAM;GAChB,WAAW;GACX,eAAe,MAAM;GACrB,YAAY,MAAM;EACpB,CAAC,CACH;EAEA,MAAM,gBAAgB,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC3D,QAAQ,QAAQ,aAAa,QAAQ;GACnC,WAAW;GACX,gBAAgB;GAChB,UAAU;EACZ,CAAC,CACH;EAIA,OAAO;GACL,SAHc,QAAQ,QAAQ,OAGxB;GACN,YAAY;IACV,OAAO,UAAU,SAAS;IAC1B,OAAO,UAAU,cAAc;IAC/B,OAAO,UAAU,WAAW;IAC5B,OAAO,UAAU,UAAU;IAC3B,OAAO,UAAU,aAAa;GAChC;EACF;CACF,CAAC,GACD,QAAQ,sBACR,mBAAmB,SAAS,MAAM,SAAS,MAAM,CACnD;CACF,UAAU,UACR,yBAAqD,SAAS,OAAO,SAAS,CAAC,CAAC,KAC9E,OAAO,QAAQ,4BAA4B,GAC3C,UACF;CACF,OAAO,UACL,yBAA8D,SAAS,OAAO,QAAQ,CAAC,CAAC,KACtF,UACF;CACF,SACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO;EACxB,MAAM,UAAU,OAAO;EAEvB,MAAM,SAAS,OAAO,gBACpB,SACA,MAAM,QACN,SACF;EAEA,IAAI,WAAW,KAAA,GACb,OAAO;GACL,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;GAC9C,YAAY,CAAC,OAAO,UAAU,GAAG,MAAM,CAAC;EAC1C;EAEF,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAC/C,OAAO,SAAS,SAAS,SAC3B;EAEA,MAAM,IAAI,eAAe,OAAO;EAEhC,MAAM,YAAY,IAChB,mBAAmB,SAAS,iBAAiB,OAAO,QAAQ,GAC5D,GAAG,EAAE,QAAQ,MAAM,MAAM,GACzB,GAAG,EAAE,eAAe,MAAM,aAAa,GACvC,GAAG,EAAE,UAAU,KAAK,GACpB,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,CACtC;EAEA,MAAM,SAAS,SACZ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IACC,aAAkB,CAChB,CACE,QAAQ,QAAQ,gBAChB,GAAG,aAAa,EAAE,eAAe,KAAK,EAAE,aAAa,QAAQ,EAAE,eAAe,YAAY,EAAE,eAAe,KAC7G,CACF,CAAC,CACH,CAAC,CACA,MAAM,SAAS;EAIlB,OAAO;GAAE,SAFO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAE/B;GAAG,YAAY,CAAC,OAAO,UAAU,MAAM,CAAC;EAAE;CAC3D,CAAC,CACH;AACJ;AAEA,MAAa,0BACX,YACG;CACH,MAAM,IAAI,eAAe,OAAO;CAiZhC,OAAO;EAAE,aAAA;GA9YP,YACE,OACA,YAKA,WACE,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO;IACxB,MAAM,UAAU,OAAO;IACvB,MAAM,SAAS,OAAO,YAAY,SAAS,MAAM,QAAQ;IACzD,MAAM,WAAW,OAAO,qBAAqB,MAAM,UAAU,MAAM;IAEnE,IAAI,CAAC,SAAS,WAAW,OAAO,OAAO,MAAM;IAE7C,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAC/C,MAAM,SAAS,SAAS,SAC1B;IAEA,IAAI,MAAM,YAAY,KAAA,MAAc,OAAO,cAAc,SAAS,MAAM,SAAS,MAAM,IACrF,OAAO,OAAO,gBAAgB,KAAK,CAAC,CAAC;IAEvC,MAAM,kBAAkB,OAAO,SAC7B,QAAQ,QAAQ,YAChB,QAAQ,QAAQ,cAClB;IAEA,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,eAAe;IAEpE,MAAM,UAAU,OAAO,SACrB,QAAQ,QAAQ,iBAChB,QAAQ,QAAQ,mBAClB;IAEA,MAAM,SAAS;KACb,GAAG,MAAM;KACT;KACA;KACA,WAAW,MAAM,SAAS,SAAS;KACnC,kBAAkB,MAAM,SAAS,SAAS;KAC1C,WAAW,SAAS;KACpB,YAAY,OAAO,wCAAwC,EACzD,UAAU,MAAM,SAClB,CAAC;KAID,UAAU,SAAS,WAAW,SAAS,cAAc,MAAM,QAAQ,QAAQ,CAAC;IAC9E;IAEA,IAAI,YAAY,IACd,mBAAmB,SAAS,iBAAiB,MAAM,QAAQ,GAC3D,mBAAmB,SAAS,MAAM,UAAU,QAAQ,IAAI,GACxD,GAAG,GAAG,SAAS,cAAc,OAAO,QAAQ,EAAE,MAAM,QAAQ,GAAG,mBAC/D,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,SAAS,KAC7E,GAAG,GAAG,SAAS,cAAc,OAAO,SAAS,EAAE,MAAM,SAAS,cAAc,OAAO,iBAAiB,GACtG;IAEA,MAAM,aAA+B,CAAC;IAEtC,IAAI,MAAM,YAAY,KAAA,GAAW;KAC/B,MAAM,IAAI,YAAY,OAAO;KAE7B,YAAY,IACV,WACA,IACE,GAAG,wBAAwB,QAAQ,KAAK,MAAM,SAAS,EAAE,OAAO,KAAK,IAAI,MAAM,MAAM,SAAS,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,UAAU,EAChK,CACF;KACA,IAAI,QAAQ,YAAY,KAAA,GACtB,WAAW,KACT,OAAO,UACL,SACG,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,MACC,GACE,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM,GACpD,MAAM,SAAS,MACjB,CACF,CACJ,CACF;KACF,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,QAAQ,MAAM,SAAS,MAAM,CAAC,CAC/E,GACA,OAAO,UACL,SAAS,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,OAClC,QAAQ,KAAK,wBAAwB;MACnC,UAAU,MAAM;MAChB,WAAW;MACX,YAAY,OAAO;KACrB,CAAC,CACH,CACF,CACF;IACF,OAAO;KACL,IAAI,QAAQ,YAAY,KAAA,GAAW,OAAO,OAAO,eAAe;KAChE,MAAM,SAAS,OAAO,YAAY,SAAS,MAAM,QAAQ,MAAM;KAE/D,IAAI,WAAW,KAAA,KAAa,CAAC,qBAAqB,MAAM,UAAU,OAAO,QAAQ,GAC/E,OAAO,OAAO,eAAe;KAC/B,YAAY,IAAI,WAAW,iBAAiB,SAAS,MAAM,SAAS,eAAe,CAAC;KACpF,WAAW,KACT,GAAI,OAAO,yBACT,SACA,MAAM,SACN,OAAO,iBACT,CACF;IACF;IACA,WAAW,KACT,OAAO,UACL,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACrC,QAAQ,QAAQ,aAAa,QAAQ;KACnC,WAAW;KACX,WAAW;IACb,CAAC,CACH,CACF,CACF;IAGA,OAAO;KAAE,SAFO,QAAQ,QAAQ,OAEjB;KAAG,YAAY,CAAC,OAAO,UAAU,SAAS,GAAG,GAAG,UAAU;IAAE;GAC7E,CAAC,GACD,QAAQ,sBACR,OAAO,cAKL,MAAM,YAAY,KAAA,IACd,mBAAmB,SAAS,MAAM,SAAS,MAAM,IACjD,sBAAsB,SAAS,MAAM,SAAS,MAAM,SAAS,SAAS,SAAS,CACrF,CACF;GACF,SAAS,UACP,OAAO,IAAI,aAAa;IAGtB,MAAM,OAAO,QAAO,OAFI,0BAAA,CAGrB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,QAAQ,KAAK,EAAE,CAAC,CAAC,CACrD,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,UACC,QAAQ,QAAQ,OAChB,IACE,GAAG,EAAE,WAAW,eAAe,OAAO,CAAC,CAAC,EAAE,GAC1C,GAAG,EAAE,kBAAkB,eAAe,OAAO,CAAC,CAAC,QAAQ,GACvD,GAAG,eAAe,OAAO,CAAC,CAAC,QAAQ,QAAQ,GAAG,wBAAwB,CACxE,CACF,CAAC,CACA,MACC,IACE,GAAG,EAAE,QAAQ,MAAM,MAAM,GACzB,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,GACpC,GAAG,EAAE,mBAAmB,QAAQ,GAAG,SAAS,CAC9C,CACF,CAAC,CACA,MAAM,CAAC;IAEV,IAAI,KAAK,OAAO,KAAA,GAAW,OAAO,OAAO,eAAe;IAExD,OAAO,OAAO,QAAQ,QAAQ,OAAO,KAAK,EAAE;GAC9C,CAAC,CAAC,CAAC,KAAK,UAAU;GACpB,SACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO;IACxB,MAAM,UAAU,OAAO;IACvB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;IAEzE,MAAM,OAAO,OAAO,SACjB,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,EAAE,WAAW,eAAe,CAAC,CAAC,CACvC,MAAM,CAAC,EAAA,CAAG;IAEb,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,gBAAgB,KAAK,CAAC,CAAC;IAC5D,MAAM,UAAU,OAAO,QAAQ,QAAQ,OAAO,GAAG;IACjD,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,QAAQ,SAAS;IAE3E,MAAM,UAAU,OAAO,SACrB,QAAQ,QAAQ,iBAChB,QAAQ,QAAQ,mBAClB;IAEA,MAAM,OAAO;KACX,GAAG;KACH,QAAQ,MAAM;KACd,mBAAmB,MAAM;KACzB;KACA,UAAU,SAAS,WAAW,SAAS,cAAc,MAAM,GAAG,CAAC;KAC/D,WAAW,MAAM;IACnB;IAEA,MAAM,mBAAmB,IACvB,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,QAAQ,MAAM,cAAc,GACjC,GAAG,EAAE,SAAS,MAAM,eAAe,GACnC,GAAG,EAAE,kBAAkB,MAAM,wBAAwB,GACrD,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,GACpC,GAAG,EAAE,mBAAmB,QAAQ,GAAG,SAAS,CAC9C;IAEA,MAAM,gBAAgB,IACpB,GAAG,GAAG,SAAS,cAAc,KAAK,QAAQ,EAAE,MAAM,QAAQ,GAAG,mBAC7D,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,MAAM,aAAa,KAChF,GAAG,GAAG,SAAS,cAAc,MAAM,aAAa,EAAE,MAAM,SAAS,cAAc,QAAQ,iBAAiB,GAC1G;IAEA,MAAM,YAAY,yBAChB,SACA,iBACA,MAAM,wBACR;IAEA,MAAM,qBAAqB,IACzB,WACA,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,iBAAiB,IAC3E,aACF;IAEA,MAAM,SAAS,SACZ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,QAAQ,QAAQ,eAAe,IAAI,CAAC,CAAC,CACzC,MAAM,IAAI,WAAW,kBAAkB,aAAa,CAAC;IAIxD,OAAO;KACL,SAHc,QAAQ,MAAM,OAGtB;KACN,YAAY,CAAC,OAAO,UAAU,kBAAkB,GAAG,OAAO,UAAU,MAAM,CAAC;IAC7E;GACF,CAAC,GACD,KAAA,GACA,OAAO,KAAK,gBAAgB,KAAK,CAAC,CAAC,CAAC,CACtC;GACF,eACE,QACA,YAEA,WACE,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO;IACxB,MAAM,UAAU,OAAO;IAEvB,MAAM,OAAO,OAAO,SACjB,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC3B,MAAM,CAAC,EAAA,CAAG;IAEb,MAAM,aACJ,QAAQ,KAAA,IACJ,CAAC,OAAO,UAAU,GAAG,MAAM,CAAC,IAC5B,CACE,OAAO,UACL,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC,CACnE,CACF;IAEN,OAAO;KAAE,SAAS,QAAQ,QAAQ,KAAA,GAAW,OAAO;KAAG;IAAW;GACpE,CAAC,CACH;GACF,SACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO;IACxB,MAAM,UAAU,OAAO;IACvB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;IACzE,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;IAEzE,MAAM,YAAY,yBAChB,SACA,iBACA,MAAM,wBACR;IAEA,MAAM,SAAS,SACZ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,MAAM,IAAI,GAAG,EAAE,WAAW,eAAe,GAAG,GAAG,EAAE,WAAW,eAAe,CAAC,CAAC;IAIhF,OAAO;KACL,SAHc,QAAQ,KAAA,GAAW,OAG3B;KACN,YAAY,CAAC,OAAO,UAAU,SAAS,GAAG,OAAO,UAAU,MAAM,CAAC;IACpE;GACF,CAAC,GACD,KAAA,GACA,OAAO,KAAK,MAAM,CAAC,CACrB;GACF,YACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO;IACxB,MAAM,UAAU,OAAO;IACvB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;IAEzE,MAAM,OAAO,OAAO,SAClB,QAAQ,QAAQ,uBAAuB,MAAM,wBAAwB,GACrE,QAAQ,QAAQ,6BAA6B,KAAA,IACzC,KAAA,UACM,QAAQ,QAAQ,yBAA0B,MAAM,wBAAwB,CACpF;IAEA,MAAM,KAAK,eAAe,OAAO;IAEjC,MAAM,YAAY,IAChB,GAAG,GAAG,IAAI,eAAe,GACzB,GAAG,GAAG,QAAQ,QAAQ,GAAG,wBAAwB,GACjD,GAAG,GAAG,UAAU,MAAM,wBAAwB,CAChD;IAEA,MAAM,gBAAgB,SACnB,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAkB,CAAC,CAAC,QAAQ,QAAQ,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,CAClE,MAAM,SAAS;IAElB,MAAM,iBAAiB,SACpB,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,MAAM,GAAG,EAAE,WAAW,eAAe,CAAC;IAIzC,OAAO;KACL,SAHc,QAAQ,KAAA,GAAW,OAG3B;KACN,YAAY;MACV,OAAO,UACL,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,UAAU,EACtE;MACA,OAAO,UAAU,aAAa;MAC9B,OAAO,UAAU,cAAc;KACjC;IACF;GACF,CAAC,GACD,KAAA,GACA,OAAO,KAAK,MAAM,CAAC,CACrB;EAkDe;EAAG,YAAA,EA9CpB,OAAO,UACL,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;GAEzE,MAAM,SACJ,MAAM,WAAW,KAAA,IACb,KAAA,IACA,OAAO,QAAQ,UAAU,SAAS,MAAM,MAAa;GAE3D,MAAM,OAAO,OAAO,SACjB,OAAO,EAAE,GAAG,gBAAgB,QAAQ,QAAQ,KAAK,EAAE,CAAC,CAAC,CACrD,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,UACC,QAAQ,QAAQ,OAChB,IACE,GAAG,EAAE,WAAW,eAAe,OAAO,CAAC,CAAC,EAAE,GAC1C,GAAG,EAAE,kBAAkB,eAAe,OAAO,CAAC,CAAC,QAAQ,GACvD,GAAG,eAAe,OAAO,CAAC,CAAC,QAAQ,QAAQ,GAAG,wBAAwB,CACxE,CACF,CAAC,CACA,MACC,IACE,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,GACpC,GAAG,EAAE,mBAAmB,QAAQ,GAAG,SAAS,GAC5C,WAAW,KAAA,IAAY,KAAA,IAAY,GAAG,EAAE,WAAW,MAAM,CAC3D,CACF,CAAC,CACA,QAAQ,EAAE,SAAS,CAAC,CACpB,MAAM,MAAM,QAAQ,CAAC;GAExB,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,OAAO,GAAG,CAAC;GAChF,MAAM,QAAQ,OAAO,YAAY,OAAO,OAAO,eAAe,CAAC;GAE/D,MAAM,WAAW,OAAO,OAAO,QAAQ,QAAQ,MAAM,GAAG,MAAM,KAAK,IAAI,WACrE,OAAO,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,aAAa,KAAK,CAAC,CAAC,CACpF;GAEA,OAAO;IACL;IACA,GAAI,QAAQ,UAAU,MAAM,QAAQ,CAAC,IAAI,EAAE,YAAY,SAAS,GAAG,EAAE,CAAC,EAAE,UAAU;GACpF;EACF,CAAC,CAAC,CAAC,KAAK,UAAU,EAGS;CAAE;AACnC;AAEA,MAAa,wBACX,YACG;CACH,MAAM,KAAK,eAAe,OAAO;CAEjC,MAAM,IAAI;EACR,WAAW,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,SAAS;EACtE,WAAW,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,SAAS;EACtE,mBAAmB,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,iBAAiB;CACxF;CAEA,OAAO;EACL,SAAS,SAAyD,SAChE,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,QAAQ,SAAS;GAC3E,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,QAAQ,SAAS;GAmB3E,KAAI,OAjBgB,SACjB,OAAO,EAAE,WAAW,GAAG,GAAG,CAAC,CAAC,CAC5B,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,GAAG,IAAI,eAAe,GACzB,GAAG,GAAG,QAAQ,QAAQ,GAAG,wBAAwB,GACjD,GAAG,GAAG,UAAU,QAAQ,gBAAgB,GACxC,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,QAAQ,SAAS,KAC9E,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,QAAQ,iBAAiB,KACtF,IACE,GAAG,wBAAwB,QAAQ,UAAU,MAAM,SAAS,EAAE,UAAU,KAAK,IAAI,MAAM,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI,MAAM,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,KAAK,QAAQ,GAAG,UAAU,EAC5O,CACF,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAED,WAAW,GAAG,OAAO,OAAO,eAAe;EACtD,CAAC,CAAC,CAAC,KAAK,UAAU;EACpB,SACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,UAAU,OAAO;GACvB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;GACzE,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;GACzE,MAAM,YAAY,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,MAAM,iBAAiB,GAAG,EAAE,EAAE,OAAO,GAAG,OAAO,KAAK,IAAI,MAAM,QAAQ,GAAG,0BAA0B,GAAG,MAAM,EAAE,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM,MAAM,0BAA0B,GAAG,QAAQ,EAAE;GACxR,MAAM,gBAAgB,QAAQ,UAAU,cAAc,MAAM,iBAAiB;GAC7E,MAAM,gBAAgB,IAAI,MAAM,eAAe,EAAE,iBAAiB;GAElE,MAAM,QAAQ,SACX,OAAO,QAAQ,UAAU,KAAK,CAAC,CAC/B,OACC,QAAQ,UAAU,aAAa;IAC7B,WAAW;IACX,WAAW;IACX,mBAAmB,MAAM;GAC3B,CAAC,CACH,CAAC,CACA,mBAAmB;IAClB,QAAQ,CAAC,EAAE,WAAW,EAAE,SAAS;IACjC,KAAK,aAAkB,CACrB,CACE,QAAQ,UAAU,mBAClB,GAAG,aAAa,EAAE,kBAAkB,KAAK,cAAc,QAAQ,cAAc,QAAQ,EAAE,kBAAkB,KAC3G,CACF,CAAC;GACH,CAAC;GAIH,OAAO;IACL,SAHc,QAAQ,KAAA,GAAW,OAG3B;IACN,YAAY,CAAC,OAAO,UAAU,SAAS,GAAG,OAAO,UAAU,KAAK,CAAC;GACnE;EACF,CAAC,GACD,KAAA,GACA,OAAO,KAAK,MAAM,CAAC,CACrB;EACF,YACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,UAAU,OAAO;GACvB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS;GAEzE,MAAM,OAAO,OAAO,SAClB,QAAQ,QAAQ,uBAAuB,MAAM,wBAAwB,GACrE,QAAQ,QAAQ,6BAA6B,KAAA,IACzC,KAAA,UACM,QAAQ,QAAQ,yBAA0B,MAAM,wBAAwB,CACpF;GAEA,MAAM,YAAY,IAChB,GAAG,GAAG,IAAI,eAAe,GACzB,GAAG,GAAG,QAAQ,QAAQ,GAAG,wBAAwB,GACjD,GAAG,GAAG,UAAU,MAAM,wBAAwB,CAChD;GAEA,MAAM,gBAAgB,SACnB,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAkB,CAAC,CAAC,QAAQ,QAAQ,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,CAClE,MAAM,SAAS;GAIlB,OAAO;IACL,SAHc,QAAQ,KAAA,GAAW,OAG3B;IACN,YAAY,CACV,OAAO,UACL,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,UAAU,EACtE,GACA,OAAO,UAAU,aAAa,CAChC;GACF;EACF,CAAC,GACD,KAAA,GACA,OAAO,KAAK,MAAM,CAAC,CACrB;CACJ;AACF;AAEA,MAAa,8BAA8B;CACzC,YAAoB,UAAoB,YACtC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,8BAAsC,OAAO;EAEzD,MAAM,OAAgB,WACpB,OAAO,IAAI,aAAa;GACtB,KACG,OAAO,OAAO,cAAc,qBAAqB,EAAA,CAAG,SAAS,WAC7D,OAAO,iBAER,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;EACF,CAAC;EAQH,OAAO,EAAE,yBAAA;GALP,UAAU,WAAW,kBAAkB,IAAI,IAAI,QAAQ,WAAW,aAAa,CAAC;GAChF,eAAe,aAAa,IAAI,IAAI,aAAa,QAAQ,CAAC;GAC1D,UAAU,OAAO,YAAY,IAAI,IAAI,QAAQ,OAAO,OAAO,CAAC;EAG/B,EAAE;CACnC,CAAC;CACH,UAAkB,UAAoB,YACpC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,4BAAoC,OAAO;EAEvD,MAAM,OAAgB,WACpB,OAAO,IAAI,aAAa;GACtB,KACG,OAAO,OAAO,cAAc,qBAAqB,EAAA,CAAG,SAAS,WAC7D,OAAO,iBAER,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;EACF,CAAC;EASH,OAAO,EAAE,uBAAA;GANP,SAAS,OAAO,KAAK,YAAY,IAAI,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC;GACpE,UAAU,UAAU,IAAI,IAAI,QAAQ,KAAK,CAAC;GAC1C,OAAO,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC;GACpC,SAAS,OAAO,YAAY,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC;EAG/B,EAAE;CACjC,CAAC;CACH,WAAmB,UAAoB,YACrC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,uBAA+B,OAAO;EAElD,MAAM,OAAgB,WACpB,OAAO,IAAI,aAAa;GACtB,KACG,OAAO,OAAO,cAAc,qBAAqB,EAAA,CAAG,SAAS,WAC7D,OAAO,iBAER,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;EACF,CAAC;EAeH,OAAO;GAAE,4BAAA;IAZP,YAAY,OAAO,YAAY,IAAI,IAAI,YAAY,UAAU,OAAO,OAAO,CAAC;IAC5E,SAAS,UAAU,IAAI,IAAI,YAAY,OAAO,KAAK,CAAC;IACpD,SAAS,OAAO,YAAY,IAAI,IAAI,YAAY,OAAO,OAAO,OAAO,CAAC;IACtE,eAAe,QAAQ,YAAY,IAAI,IAAI,YAAY,aAAa,QAAQ,OAAO,CAAC;IACpF,SAAS,OAAO,YAAY,IAAI,IAAI,YAAY,OAAO,OAAO,OAAO,CAAC;IACtE,YAAY,OAAO,YAAY,IAAI,IAAI,YAAY,UAAU,OAAO,OAAO,CAAC;GAO5C;GAAG,mBAAA,EAHnC,OAAO,UAAU,IAAI,IAAI,WAAW,KAAK,KAAK,CAAC,EAGI;EAAE;CACzD,CAAC;CACH,WAAW,UAAoB,YAC7B,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,qBAAqB,OAAO;EAExC,MAAM,OAAgB,WACpB,OAAO,IAAI,aAAa;GACtB,KACG,OAAO,OAAO,cAAc,qBAAqB,EAAA,CAAG,SAAS,WAC7D,OAAO,iBAER,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;EACF,CAAC;EAQH,OAAO,EAAE,uBAAA;GALP,SAAS,SAAS,QAAQ,IAAI,IAAI,OAAO,SAAS,GAAG,CAAC;GACtD,SAAS,OAAO,YAAY,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC;GAC1D,YAAY,OAAO,YAAY,IAAI,IAAI,UAAU,OAAO,OAAO,CAAC;EAGrC,EAAE;CACjC,CAAC;AACL;;;;;;;;;;;AAcA,MAAa,4BACX,UACA,MACA,UAEA,OAAO,IAAI,aAA6E;CACtF,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;CA+DrD,QAAO,OA7De,uBAElB,OAAO,IAAI,aAAa;EACtB,MAAM,aAA+B,CAAC;EACtC,IAAI;EAEJ,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,WAAW,KAAK,SAAS,CAAC,EACrE,CAAC;EAED,MAAM,UAAU,OAAO,YAAY,YAAY,CAAC,CAAC,CAAC,KAChD,OAAO,eAAe,mBAAmB,eAAe,CAC1D;EAEA,IAAI;EAEJ,MAAM,kBAAkB,UACtB,QAAQ,IACN,OAAO,cAAc;GAGnB,IAAI,aAAa,KAAA,GAAW,OAAO,OAAO,KAAK,YAAY,CAAC;GAC5D,WAAW;GACX,WAAW,KAAK,GAAG,MAAM,UAAU;GAEnC,OAAO,OAAO;EAChB,CAAC,CACH;EAEF,QAAQ;GAAE,OAAO;GAAS,QAAQ;EAAe;EACjD,MAAM,WAAW,OAAO,KAAK,KAAK;EAElC,MAAM,QAAQ,OAAO,QAAQ,MAC3B,OAAO,eAAe,MAAM,UAAU,KAAK,GAAG,mBAAmB,QAAQ,SAAS,CACpF;EAEA,IAAI,UAAU,iBAAiB,KAAA,GAAW;GACxC,MAAM,SAAS,OAAO,OAAO,OAAO,SAAS,aAAa,IAAI;GAE9D,IAAI,OAAO,SAAS,aAAa,OAAO,QAAQ,SAAS,iBACvD,OAAO,OAAO,YAAY;EAC9B;EAEA,OAAO,SAAS,QACb,MAAM,UAAU,CAAC,CACjB,KACC,OAAO,YAAY,UACjB,OAAO,KACL,IAAI,eAAe;GAAE;GAAO,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAAG,CAAC,CAC/E,CACF,CACF;EAEF,OAAO;CACT,CAAC,GACH,EAAE,MAAM,QAAQ,CAClB,CAAC,CAAC,KACA,OAAO,WAAW,8BAA8B,GAChD,OAAO,eAAe,2BAA2B,QAAQ,CAC3D,EAAA,CAEc;AAChB,CAAC;AAEH,MAAa,yCAQX,UACA,YAQG,4BAA4B,UAAkB,UAAU,OAAc;AAE3E,MAAa,uCAQX,UACA,YAQG,4BAA4B,QAAgB,UAAU,OAAc;AAEzE,MAAa,iCAUX,UACA,YAUG,4BAA4B,SAAiB,UAAU,OAAc;AAE1E,MAAa,uCAMX,UACA,YACG,4BAA4B,SAAS,UAAU,OAAc;AAElE,SAAgB,oCAad,SACA,SAUA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yBACE,WACC,UACC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,8BAAsC,QAAQ,OAAc;EAExE,MAAM,OACJ,WAEA,MAAM,MAAM,IACV,OAAO,KACL,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,OAAO,eAAe,uBAAuB,KAAK,CACpD,CACF;EAQF,OAAO,EAAE,yBAAA;GALP,UAAU,WAAW,kBAAkB,IAAI,IAAI,QAAQ,WAAW,aAAa,CAAC;GAChF,eAAe,aAAa,IAAI,IAAI,aAAa,QAAQ,CAAC;GAC1D,UAAU,OAAO,YAAY,IAAI,IAAI,QAAQ,OAAO,OAAO,CAAC;EAG/B,EAAE;CACnC,CAAC,IAED,eACA,UACG;EACH,MAAM,WAAW,QAAQ,KACvB,yBACA,cAAc,uBAChB,CAAC,CAAC,KAAK,QAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS,CAAC;EAE5D,OAAO,OAAO,eAAe,MAAM,QAAQ;CAC7C,CACF,CACF;AACF;AAEA,SAAgB,kCAcd,SACA,SAWA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yBACE,WACC,UACC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,4BAAoC,QAAQ,OAAc;EAEtE,MAAM,OACJ,WAEA,MAAM,MAAM,IACV,OAAO,KACL,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,OAAO,eAAe,uBAAuB,KAAK,CACpD,CACF;EASF,OAAO,EAAE,uBAAA;GANP,SAAS,OAAO,KAAK,YAAY,IAAI,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC;GACpE,UAAU,UAAU,IAAI,IAAI,QAAQ,KAAK,CAAC;GAC1C,OAAO,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC;GACpC,SAAS,OAAO,YAAY,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC;EAG/B,EAAE;CACjC,CAAC,IACF,eAAkF,UAAU;EAC3F,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,cAAc,qBAAqB,CAAC,CAAC,KACjF,QAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS,CACtD;EAEA,OAAO,OAAO,eAAe,MAAM,QAAQ;CAC7C,CACF,CACF;AACF;AAEA,SAAgB,6BAiBd,SACA,SAcA,MAOA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yBACE,WACC,UACC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,uBAA+B,QAAQ,OAAc;EAEjE,MAAM,OACJ,WAEA,MAAM,MAAM,IACV,OAAO,KACL,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,OAAO,eAAe,uBAAuB,KAAK,CACpD,CACF;EAeF,OAAO;GAAE,4BAAA;IAZP,YAAY,OAAO,YAAY,IAAI,IAAI,YAAY,UAAU,OAAO,OAAO,CAAC;IAC5E,SAAS,UAAU,IAAI,IAAI,YAAY,OAAO,KAAK,CAAC;IACpD,SAAS,OAAO,YAAY,IAAI,IAAI,YAAY,OAAO,OAAO,OAAO,CAAC;IACtE,eAAe,QAAQ,YAAY,IAAI,IAAI,YAAY,aAAa,QAAQ,OAAO,CAAC;IACpF,SAAS,OAAO,YAAY,IAAI,IAAI,YAAY,OAAO,OAAO,OAAO,CAAC;IACtE,YAAY,OAAO,YAAY,IAAI,IAAI,YAAY,UAAU,OAAO,OAAO,CAAC;GAO5C;GAAG,mBAAA,EAHnC,OAAO,UAAU,IAAI,IAAI,WAAW,KAAK,KAAK,CAAC,EAGI;EAAE;CACzD,CAAC,IAED,eAIA,UACG;EACH,MAAM,WAAW,QAAQ,KACvB,QAAQ,aACR,cAAc,0BAChB,CAAC,CAAC,KACA,QAAQ,IAAI,QAAQ,YAAY,cAAc,iBAAiB,GAC/D,QAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS,CACtD;EAEA,OAAO,OAAO,eAAe,MAAM,QAAQ;CAC7C,CACF,CACF;AACF;AAEA,SAAgB,kCAYd,SACA,SASA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yBACE,WACC,UACC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,qBAAqB,QAAQ,OAAc;EAEvD,MAAM,OACJ,WAEA,MAAM,MAAM,IACV,OAAO,KACL,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,OAAO,eAAe,uBAAuB,KAAK,CACpD,CACF;EAQF,OAAO,EAAE,uBAAA;GALP,SAAS,SAAS,QAAQ,IAAI,IAAI,OAAO,SAAS,GAAG,CAAC;GACtD,SAAS,OAAO,YAAY,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC;GAC1D,YAAY,OAAO,YAAY,IAAI,IAAI,UAAU,OAAO,OAAO,CAAC;EAGrC,EAAE;CACjC,CAAC,IACF,eAA0E,UAAU;EACnF,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,cAAc,qBAAqB,CAAC,CAAC,KACjF,QAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS,CACtD;EAEA,OAAO,OAAO,eAAe,MAAM,QAAQ;CAC7C,CACF,CACF;AACF;AAEA,MAAM,iBAAiB,YACrB,OAAO,YACL;CACE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,IAAI,CAAC,CAAC,CACzE;AAEF,MAAM,yBACJ,SACA,QACA,iBACA,iBACA,SACQ;CACR,MAAM,SAAS,QAAQ;CAEvB,IAAI,OAAO,SAAS,OAAO,YAAY,OAAO,GAAG;CAEjD,MAAM,OAAO,IACX,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,SAAS,cAAc,OAAO,qBAAqB,KAC1F,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,eAAe,KACnF,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,uBAAuB,GAC7F;CAEA,IAAI,OAAO,SAAS,mBAAmB,OAAO;CAC9C,IAAI,OAAO,SAAS,uBAAuB;EACzC,MAAM,IAAI,OAAO,WACf,QAAQ,OAAO,EAAE,OAAO,EAAE,SAAS,GACnC,KAAK,OAAO,EAAE,OAAO,EAAE,SAAS,GAChC,SAAS,OAAO,EAAE,OAAO,EAAE,iBAAiB;EAE9C,OAAO,IACL,MACA,IACE,GAAG,wBAAwB,EAAE,MAAM,SAAS,MAAM,GAAG,IAAI,MAAM,iBAAiB,KAAK,EAAE,OAAO,GAAG,GAAG,IAAI,MAAM,iBAAiB,EAAE,EAAE,OAAO,OAAO,GAAG,QAAQ,GAAG,UAAU,EAC3K,CACF;CACF;CAEA,MAAM,IAAI,OAAO,SACf,IAAI,eAAe,MAAM;CAE3B,MAAM,YAAY,IAChB,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,kBAAkB,OAAO,SAAS,gBAAgB,GACvD,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,uBAAuB,GACvE,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,EAAE,cAAc,OAAO,qBAAqB,CAAC,GACpF,GAAG,EAAE,WAAW,EAAE,cAAc,OAAO,eAAe,CAAC,GACvD,GAAG,EAAE,mBAAmB,EAAE,cAAc,OAAO,uBAAuB,CAAC,GACvE,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,GACpC,GAAG,EAAE,mBAAmB,QAAQ,GAAG,SAAS,GAC5C,MAAM,YAAY,SAAS,aACvB,GAAG,EAAE,QAAQ,KAAK,YAAY,cAAc,IAC5C,KAAA,GACJ,MAAM,YAAY,SAAS,aACvB,GAAG,EAAE,SAAS,KAAK,YAAY,kBAAkB,IACjD,KAAA,CACN;CAEA,OAAO,IAAI,MAAM,GAAG,wBAAwB,EAAE,MAAM,SAAS,UAAU,EAAE;AAC3E;AAEA,MAAM,sBACJ,SACA,KACA,QACA,oBACQ;CACR,MAAM,IAAI,cAAc,OAAO,GAC7B,IAAI,QAAQ;CAEd,OAAO,IACL,GAAG,EAAE,QAAQ,OAAO,MAAM,GAC1B,GAAG,EAAE,SAAS,OAAO,OAAO,GAC5B,GAAG,EAAE,QAAQ,OAAO,MAAM,GAC1B,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,eAAe,OAAO,aAAa,GACxC,GAAG,EAAE,UAAU,IAAI,EAAE,SAAS,GAC9B,GAAG,EAAE,WAAW,EAAE,cAAc,OAAO,SAAS,CAAC,GACjD,GAAG,EAAE,cAAc,OAAO,YAAY,GACtC,GAAG,EAAE,UAAU,KAAK,GACpB,GAAG,EAAE,gBAAgB,IAAI,EAAE,eAAe,GAC1C,GAAG,GAAG,EAAE,eAAe,QACvB,GAAG,GAAG,EAAE,eAAe,KAAK,EAAE,gBAC9B,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,CACtC;AACF;AAEA,MAAM,eAAe,OAAO,GAAG,sBAAsB,CAAC,CAAC,WACrD,SACA,QACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,QAAQ,QAChB,IAAI,cAAc,OAAO;CAE3B,MAAM,OAAO,OAAO,SAAS,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAA,CAAG;CAE1F,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CACjE,MAAM,SAAS,OAAO,mBAAmB,IAAI,EAAE,SAAS;CAExD,IACE,OAAO,WAAW,UAClB,CAAC,iBAAiB,QAAQ,QAAQ,OAAO,MAAM,OAAO,SAAS,GAAG,KAClE,CAAC,OAAO,GAAG,OAAO,OAAO,CAAC,CAAC,IAAI,EAAE,eAAe,GAEhD,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CAC5C,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,OAAO,SAAS,SAAS;CAEnF,MAAM,kBACJ,QAAQ,OAAO,SAAS,oBACpB,KAAA,IACA,OAAO,QAAQ,OAAO,UAAU,SAAS,OAAO,eAAe;CAErE,MAAM,YAAY,IAChB,mBAAmB,SAAS,iBAAiB,MAAM,GACnD,sBAAsB,SAAS,QAAQ,iBAAiB,eAAe,GACvE,GAAG,wBAAwB,EAAE,MAAM,SAAS,mBAAmB,SAAS,KAAK,QAAQ,eAAe,EAAE,IACtG,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,SAAS,GAC/E;CAEA,IAAI,EAAE,OAAO,iBAAiB,SAAS,IAAI,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CAErF,OAAO;EAAE;EAAK;EAAQ;EAAiB;CAAgB;AACzD,CAAC;AAED,MAAM,2BAA2B,UAC/B,OAAO,UAAU,YACjB,UAAU,QACV,QAAQ,IAAI,OAAO,MAAM,MAAM;AAIjC,MAAM,gCACJ,QACA,aAEA,OAAO,KACL,OAAO,YAAY,UAAU;CAC3B,IACE,MAAM,QAAQ,SAAS,KACvB,MAAM,QAAQ,OACX,WAAW,MAAM,aAAa,MAAM,KAAK,wBAAwB,OAAO,KAAK,CAChF,GAEA,OAAO,OAAO,QAAQ,QAAQ;CAEhC,OAAO,OAAO,UACZ,MAAM,IAAI,QAAQ,UAChB,wBAAwB,KAAK,IAAI,mBAAmB,KAAK,CAAC,CAAC,IAAI,KACjE,CACF;AACF,CAAC,CACH;AAEF,MAAa,uBACX,YACG;CACH,MAAM,IAAI,QAAQ,QAChB,IAAI,cAAc,OAAO;CAE3B,MAAM,UAAU,OAAO,KAAK,qBAAqB,KAAK,CAAC,CAAC,CAAC;CAEzD,OAAO;EACL,SACE,OACA,MACA,YAEA,WACE,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,UAAU,OAAO;GAEvB,MAAM,UAAU,OAAO,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,GACtE,SAA8B;IAAE,GAAG;IAAO;GAAQ;GAEpD,IAAI,CAAC,iBAAiB,QAAQ,QAAQ,OAAO,MAAM,OAAO,SAAS,GAAG,GACpE,OAAO,OAAO,MAAM;GACtB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,MAAM,SAAS,SAAS;GAElF,MAAM,kBACJ,QAAQ,OAAO,SAAS,oBACpB,KAAA,IACA,OAAO,QAAQ,OAAO,UAAU,SAAS,MAAM,eAAe;GAQpE,KAAI,OANoB,SACrB,OAAO,CAAC,CACR,KAAK,EAAE,KAAK,CAAC,CACb,MAAM,GAAG,GAAG,EAAE,QAAQ,MAAM,MAAM,GAAG,GAAG,EAAE,QAAQ,MAAM,MAAM,CAAC,CAAC,CAAC,CACjE,MAAM,CAAC,EAAA,CAEG,SAAS,GAAG,OAAO,OAAO,gBAAgB,KAAK,CAAC,CAAC;GAE9D,MAAM,YAAY,IAChB,mBAAmB,SAAS,iBAAiB,MAAM,GACnD,sBAAsB,SAAS,QAAQ,iBAAiB,eAAe,GACvE,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,MAAM,SAAS,GAC9E;GAEA,IAAI,EAAE,OAAO,iBAAiB,SAAS,IAAI,OAAO,OAAO,MAAM;GAC/D,MAAM,WAAW,OAAO,mBAAmB,MAAM;GAEjD,MAAM,SAAS;IACb,GAAG,EAAE,aAAa,QAAQ,EAAE,WAAW,gBAAgB,CAAC;IACxD,GAAG,aAAkB;KACnB,CAAC,EAAE,QAAQ,OAAO,MAAM;KACxB,CAAC,EAAE,SAAS,OAAO;KACnB,CAAC,EAAE,QAAQ,OAAO,MAAM;KACxB,CAAC,EAAE,WAAW,eAAe;KAC7B,CAAC,EAAE,eAAe,OAAO,aAAa;KACtC,CAAC,EAAE,UAAU,QAAQ;KACrB,CAAC,EAAE,WAAW,EAAE,cAAc,OAAO,SAAS,CAAC;KAC/C,CAAC,EAAE,cAAc,OAAO,YAAY;KACpC,CAAC,EAAE,gBAAgB,CAAC;KACpB,CAAC,EAAE,UAAU,KAAK;IACpB,CAAC;GACH;GAEA,MAAM,UAAU,QAAQ,QAAQ,OAAO;GAEvC,MAAM,QAAQ,IACZ,GAAG,EAAE,QAAQ,OAAO,MAAM,GAC1B,GAAG,EAAE,SAAS,OAAO,GACrB,GAAG,EAAE,QAAQ,OAAO,MAAM,GAC1B,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,eAAe,OAAO,aAAa,GACxC,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,WAAW,EAAE,cAAc,OAAO,SAAS,CAAC,GACjD,GAAG,EAAE,cAAc,OAAO,YAAY,GACtC,GAAG,EAAE,gBAAgB,CAAC,GACtB,GAAG,EAAE,UAAU,KAAK,CACtB;GAEA,OAAO;IACL;IACA,YAAY;KACV,OAAO,UAAU,SAAS;KAC1B,OAAO,UAAU,SAAS,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC;KACxD,OAAO,UAAU,GAAG,eAAe;KACnC,OAAO,UACL,IAAI,WAAW,GAAG,wBAAwB,EAAE,MAAM,SAAS,MAAM,EAAE,CACrE;IACF;GACF;EACF,CAAC,GACD,QAAQ,sBACR,OAAO,KAAK,MAAM,CAAC,CACrB;EACF,UAAU,UACR,gBACE,aAAa,SAAS,MAAM,MAAM,CAAC,CAAC,KAClC,OAAO,SAAS,EAAE,aAChB,qCAAqC;GACnC,QAAQ,OAAO;GACf,eAAe,OAAO;GACtB,UAAU,OAAO;GACjB,iBAAiB,SAAS,cAAc,OAAO,SAAS;EAC1D,CAAC,CACH,CACF,IACC,UAAW,MAAM,SAAS,iCAAiC,YAAY,IAAI,KAC9E,CAAC,CAAC,KAAK,UAAU;EACnB,OAAO,UACL,aAAa,SAAS,MAAM,MAAM,CAAC,CAAC,KAClC,OAAO,SAAS,EAAE,aAChB,OAAO,kBAAkB,MAAM,gBAC3B,OAAO,QAAQ,MAAM,IACrB,OAAO,KAAK,qBAAqB,KAAK,CAAC,CAAC,CAAC,CAC/C,GACA,UACF;EACF,SACE,OACA,YAEA,WACE,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,UAAU,OAAO;GAEvB,MAAM,WAAW,OAAO,6BACtB,aAAa,SAAS,MAAM,MAAM,CAAC,CAAC,KAClC,OAAO,KAAK,WAAW;IAAE,MAAM;IAAkB;GAAM,EAAE,CAC3D,GACA,EAAE,MAAM,WAAoB,CAC9B;GAEA,IAAI,SAAS,SAAS,YACpB,OAAO;IAAE,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;IAAG,YAAY,CAAC;GAAE;GAC3E,MAAM,EAAE,KAAK,QAAQ,iBAAiB,oBAAoB,SAAS;GAInE,MAAM,YAAY,IAChB,GAAG,EAAE,QAAQ,OAAO,MAAM,GAC1B,GAAG,EAAE,SAAS,OAAO,OAAO,GAC5B,GAAG,EAAE,UAAU,IAAI,EAAE,SAAS,GAC9B,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,eAAe,OAAO,aAAa,GACxC,GAAG,EAAE,QAAQ,OAAO,MAAM,GAC1B,GAAG,EAAE,WAAW,EAAE,cAAc,OAAO,SAAS,CAAC,GACjD,GAAG,EAAE,cAAc,OAAO,YAAY,GACtC,GAAG,EAAE,UAAU,KAAK,GACpB,GAAG,GAAG,EAAE,eAAe,QACvB,GAAG,GAAG,EAAE,eAAe,KAAK,EAAE,gBAC9B,GAAG,EAAE,WAAW,QAAQ,GAAG,SAAS,GACpC,mBAAmB,SAAS,iBAAiB,MAAM,GACnD,sBAAsB,SAAS,QAAQ,iBAAiB,eAAe,CACzE;GAEA,MAAM,QAAQ,SACX,OAAO,EAAE,KAAK,CAAC,CACf,IAAI,aAAkB,CAAC,CAAC,EAAE,gBAAgB,GAAG,GAAG,EAAE,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,CAC1E,MAAM,SAAS;GAIlB,MAAM,UAAU,GAAG,6CAA6C,EAAE,MAAM,SAAS,UAAU;GAE3F,OAAO;IACL,SAAS,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;IAC9C,YAAY,CAAC,OAAO,UAAU,KAAK,GAAG,OAAO,UAAU,OAAO,CAAC;GACjE;EACF,CAAC,GACD,KAAA,GACA,OAAO,KAAK,YAAY,CAAC,CAC3B;EACF,WACE,MACA,YAEA,WACE,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO;GACxB,MAAM,UAAU,OAAO;GAEvB,OAAO,mBAAmB,IAAI;GAC9B,MAAM,SAAS,OAAO,aAAa,SAAS,KAAK,OAAO,MAAM;GAE9D,KACG,OAAO,mBAAmB,OAAO,MAAM,QAAQ,OAAO,mBAAmB,KAAK,MAAM,IAErF,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;GAC5C,MAAM,OAAO,OAAO,YAAY,SAAS,KAAK,QAAQ;GAEtD,IACE,EAAE,OAAO,qBAAqB,KAAK,UAAU,IAAI,EAAA,CAAG,aACpD,EAAE,OAAO,qBAAqB,KAAK,UAAU,OAAO,OAAO,WAAW,EAAA,CAAG,WAEzE,OAAO,OAAO,MAAM;GAEtB,MAAM,EAAE,KAAK,QAAQ,iBAAiB,oBAAoB,QACxD,cAAc,KAAK;GAErB,MAAM,SAAS,YAAY,WAAW;GAEtC,IACE,SAAS,cAAc,OAAO,SAAS,IACvC,SAAS,cAAc,OAAO,uBAAuB,GAErD,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;GAE5C,MAAM,OAAO,IACX,mBAAmB,SAAS,iBAAiB,KAAK,QAAQ,GAC1D,mBAAmB,SAAS,KAAK,UAAU,MAAM,IAAI,GACrD,mBAAmB,SAAS,KAAK,UAAU,OAAO,aAAa,IAAI,GACnE,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,SAAS,cAAc,OAAO,qBAAqB,KAC1F,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,SAAS,KAC7E,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,eAAe,KACnF,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,uBAAuB,KAC3F,GAAG,GAAG,QAAQ,GAAG,gBAAgB,MAAM,SAAS,cAAc,OAAO,QAAQ,KAC7E,GAAG,GAAG,QAAQ,GAAG,gBAAgB,KAAK,SAAS,cAAc,OAAO,SAAS,GAC/E;GAEA,MAAM,SAAS,sBACb,SACA,QACA,iBACA,iBACA,IACF;GAEA,MAAM,UAAU,OAAO,SAAS,EAAE,iBAAiB,EAAE,mBAAmB;GAExE,IAAI,YAAY,OAAO,SAAS,OAAO,OAAO,YAAY;GAC1D,MAAM,WAAW,OAAO,mBAAmB;IAAE,GAAG;IAAQ;GAAQ,CAAC;GAEjE,MAAM,UAAU,SACb,OAAO,EAAE,KAAK,CAAC,CACf,IACC,aAAkB;IAChB,CAAC,EAAE,UAAU,IAAI;IACjB,CAAC,EAAE,SAAS,OAAO;IACnB,CAAC,EAAE,UAAU,QAAQ;GACvB,CAAC,CACH,CAAC,CACA,MAAM,IAAI,mBAAmB,SAAS,KAAK,QAAQ,eAAe,GAAG,MAAM,MAAM,CAAC;GAErF,MAAM,SAAS,GAAG,wBAAwB,EAAE,MAAM,SAAS,EAAE,OAAO,GAAG,IAAI,MAAM,OAAO,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,IAAI,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,IAAI,MAAM,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,GAAG,IAAI,MAAM,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,EAAE,gBAAgB;GAEnT,MAAM,aAA+B,CACnC,OAAO,UAAU,OAAO,GACxB,OAAO,UAAU,GAAG,eAAe,CACrC;GAEA,IAAI,OAAY,GAAG;GAEnB,IAAI,YAAY,SAAS,YAAY;IACnC,IAAI,QAAQ,OAAO,SAAS,YAAY,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;IAElF,MAAM,IAAI,QAAQ,OAAO,SACvB,KAAK,eAAe,QAAQ,MAAM;IAEpC,MAAM,aAAa,OAAO,SAAS,EAAE,iBAAiB,EAAE,mBAAmB;IAE3E,MAAM,OAAO;KACX,GAAG;KACH,YAAY,YAAY,WAAW;KACnC,mBAAmB,YAAY,WAAW;KAC1C,QAAQ,YAAY;KACpB,SAAS;IACX;IAEA,MAAM,WAAW;KACf,GAAG,EAAE,eAAe,IAAI;KACxB,GAAG,aAAkB;MACnB,CAAC,EAAE,SAAS,UAAU;MACtB,CAAC,EAAE,QAAQ,KAAK,MAAM;MACtB,CAAC,EAAE,mBAAmB,KAAK,iBAAiB;MAC5C,CAAC,EAAE,iBAAiB,EAAE,cAAc,OAAO,UAAU,eAAe,CAAC;MACrE,CAAC,EAAE,UAAU,EAAE,cAAc,OAAO,QAAQ,CAAC;MAC7C,CAAC,EAAE,WAAW,EAAE,cAAc,OAAO,SAAS,CAAC;MAC/C,CAAC,EAAE,mBAAmB,EAAE,cAAc,OAAO,iBAAiB,CAAC;KACjE,CAAC;IACH;IAEA,MAAM,QAAQ,SACX,OAAO,EAAE,KAAK,CAAC,CACf,IAAI,QAAQ,CAAC,CACb,MACC,IACE,GAAG,GAAG,WAAW,eAAe,GAChC,GAAG,GAAG,QAAQ,YAAY,cAAc,GACxC,GAAG,GAAG,SAAS,YAAY,kBAAkB,GAC7C,QACA,QACA,IACF,CACF;IAEF,WAAW,KAAK,OAAO,UAAU,KAAK,GAAG,OAAO,UAAU,GAAG,eAAe,CAAC;IAE7E,MAAM,QAAQ,IACZ,GAAG,GAAG,WAAW,eAAe,GAChC,GAAG,GAAG,WAAW,eAAe,GAChC,GAAG,GAAG,SAAS,UAAU,GACzB,GAAG,GAAG,QAAQ,KAAK,MAAM,GACzB,GAAG,GAAG,kBAAkB,OAAO,gBAAgB,GAC/C,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,GAAG,KAAK,iBAAiB,GAC/D,GACE,OAAO,EAAE,OAAO,EAAE,eAAe,GACjC,EAAE,cAAc,OAAO,UAAU,eAAe,CAClD,GACA,GAAG,GAAG,UAAU,EAAE,cAAc,OAAO,QAAQ,CAAC,GAChD,GAAG,GAAG,WAAW,EAAE,cAAc,OAAO,SAAS,CAAC,GAClD,GAAG,GAAG,mBAAmB,EAAE,cAAc,OAAO,iBAAiB,CAAC,CACpE;IAEA,OAAO,GAAG,wBAAwB,EAAE,MAAM,SAAS,MAAM;GAC3D,OAAO,IAAI,YAAY,SAAS,uBAAuB;IACrD,IAAI,QAAQ,OAAO,SAAS,uBAC1B,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;IAE5C,MAAM,IAAI,QAAQ,OAAO,WACvB,QAAQ,OAAO,EAAE,OAAO,EAAE,SAAS,GACnC,KAAK,OAAO,EAAE,OAAO,EAAE,SAAS,GAChC,SAAS,OAAO,EAAE,OAAO,EAAE,iBAAiB;IAE9C,WAAW,KACT,OAAO,UACL,SACG,OAAO,EAAE,KAAK,CAAC,CACf,MACC,IACE,GAAG,OAAO,eAAe,GACzB,GAAG,IAAI,eAAe,GACtB,GAAG,GAAG,OAAO,MAAM,QAAQ,GAAG,aAC9B,MACF,CACF,CACJ,CACF;IAEA,MAAM,SAAS,EAAE,aAAa;KAC5B,WAAW;KACX,WAAW;KACX,mBAAmB,YAAY;IACjC,CAAC;IAED,WAAW,KACT,OAAO,UAAU,SAAS,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,GACxD,OAAO,UAAU,GAAG,eAAe,CACrC;IAEA,MAAM,QAAQ,IACZ,GAAG,OAAO,eAAe,GACzB,GAAG,IAAI,eAAe,GACtB,GAAG,QAAQ,EAAE,cAAc,YAAY,cAAc,CAAC,CACxD;IAEA,OAAO,GAAG,wBAAwB,EAAE,MAAM,SAAS,MAAM;GAC3D;GACA,WAAW,KAAK,OAAO,UAAU,IAAI,QAAQ,MAAM,IAAI,CAAE,CAAC;GAE1D,OAAO;IAAE,SAAS,QAAQ,YAAY,YAAY,OAAO;IAAG;GAAW;EACzE,CAAC,GACD,QAAQ,sBACR,OACF;CACJ;AACF;AAEA,MAAa,+BAWX,UACA,SACA,WAEA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,MAAM,oBAA4B,OAAc;CAEtD,MAAM,OAAgB,WACpB,OAAO,IAAI,aAAa;EACtB,KACG,OAAO,OAAO,cAAc,qBAAqB,EAAA,CAAG,SAAS,WAC7D,OAAO,iBAER,OAAO,OAAO,YAAY;EAE5B,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,CAC7C;CACF,CAAC;CAUH,OAAO,EAAE,0BARwB,OAAO,GAAG;EACzC,SAAS,OAAO,KAAK,YAAY,IAAI,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC;EACpE,UAAU,UAAU,IAAI,IAAI,QAAQ,KAAK,CAAC;EAC1C,OAAO,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC;EACpC,SAAS,OAAO,YAAY,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC;EAC1D,WAAW,MAAM,YAAY,IAAI,IAAI,SAAS,MAAM,OAAO,CAAC;CAC9D,CAEgC,EAAE;AACpC,CAAC;AAEH,SAAgB,0BAgBd,SACA,SAaA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,yBACE,WACC,UACC,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EACrB,MAAM,MAAM,oBAA4B,QAAQ,OAAc;EAE9D,MAAM,OACJ,WAEA,MAAM,MAAM,IACV,OAAO,KACL,OAAO,eAAe,2BAA2B,QAAQ,GACzD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,OAAO,eAAe,uBAAuB,KAAK,CACpD,CACF;EAUF,OAAO,EAAE,0BARwB,QAAQ,OAAO,GAAG;GACjD,SAAS,OAAO,KAAK,YAAY,IAAI,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC;GACpE,UAAU,UAAU,IAAI,IAAI,QAAQ,KAAK,CAAC;GAC1C,OAAO,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC;GACpC,SAAS,OAAO,YAAY,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC;GAC1D,WAAW,MAAM,YAAY,IAAI,IAAI,SAAS,MAAM,OAAO,CAAC;EAC9D,CAEgC,EAAE;CACpC,CAAC,IAED,eACA,UACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,cAAc,wBAAwB,CAAC,CAAC,KACpF,QAAQ,IAAI,mBAAmB,MAAM,MAAM,SAAS,CACtD;EAEA,OAAO,OAAO,eAAe,MAAM,QAAQ;CAC7C,CACF,CACF;AACF"}

package/dist/drizzle/d1-totp.d.mts

@@ -0,0 +1,27 @@
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { DrizzleMappingError } from "./model.mjs";
+import { TotpConfigurationError } from "../totp/errors.mjs";
+import { TotpPersistence } from "../totp/TotpPersistence.mjs";
+import { D1TotpMapping, TotpMapping, TotpMappingSource, TotpPersistenceServices } from "./totp-model.mjs";
+import "../Totp.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { TotpCoordinatorError } from "./totp-target.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { D1Client } from "@effect/sql-d1/D1Client";
+import { EffectSQLiteD1Database } from "drizzle-orm/effect-d1";
+import { AnySQLiteTable } from "drizzle-orm/sqlite-core";
+//#region src/drizzle/d1-totp.d.ts
+type Database = EffectSQLiteD1Database<AnyRelations> & {
+  readonly $client: D1Client;
+};
+type Table$1 = AnySQLiteTable;
+declare const makeTotpPersistenceServices: <Database extends EffectSQLiteD1Database<import("drizzle-orm").TablesRelationalConfig> & {
+  readonly $client: D1Client;
+}, S extends Table$1, F extends Table$1, C extends Table$1, N, RSetup = never>(database: Database, mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>) => Effect.Effect<TotpPersistenceServices, DrizzleMappingError | TotpConfigurationError, RSetup | LifecycleHooks>;
+declare const coordinateTotpPersistence: <D extends Database, S extends Table$1, F extends Table$1, C extends Table$1, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup>;
+}, body: Effect.Effect<A, E, R>) => Effect.Effect<A, TotpCoordinatorError<E> | DatabaseError, Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements>;
+//#endregion
+export { coordinateTotpPersistence, makeTotpPersistenceServices };
+//# sourceMappingURL=d1-totp.d.mts.map

package/dist/drizzle/d1-totp.mjs

@@ -0,0 +1,28 @@
+import { TotpPersistence } from "../totp/TotpPersistence.mjs";
+import { TotpUnavailable } from "../totp/errors.mjs";
+import { D1BatchStatements } from "./D1BatchStatements.mjs";
+import { makeD1Owner } from "./d1-planning.mjs";
+import { coordinateTargetTotp, makeTotpTarget } from "./totp-target.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/d1-totp.ts
+const configuration = {
+	mode: "batch",
+	dialect: "sqlite",
+	locking: false,
+	standaloneGuard: () => Effect.void
+};
+const { makeTotpPersistenceServices } = makeTotpTarget(configuration);
+const coordinateTotpPersistence = (acquire, options, body) => Effect.flatMap(acquire, (database) => coordinateTargetTotp(database, options.mapping, configuration, (_transaction, services, append) => Effect.gen(function* () {
+	const original = services.totpPersistence;
+	const nativeCollector = D1BatchStatements.of({ append: (statement) => Effect.sync(() => append(statement)) });
+	const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(Effect.provideService(D1BatchStatements, nativeCollector));
+	const provided = Context.make(TotpPersistence, {
+		snapshot: (input) => owner.run(original.snapshot(input)),
+		mutate: (input, prepare) => owner.run(original.mutate(input, prepare))
+	}).pipe(Context.add(D1BatchStatements, owner.collector));
+	return yield* owner.close(Effect.provideContext(body, provided));
+})));
+//#endregion
+export { coordinateTotpPersistence, makeTotpPersistenceServices };
+
+//# sourceMappingURL=d1-totp.mjs.map

package/dist/drizzle/d1-totp.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-totp.mjs","names":[],"sources":["../../src/drizzle/d1-totp.ts"],"sourcesContent":["import type { D1Client } from \"@effect/sql-d1/D1Client\";\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectSQLiteD1Database } from \"drizzle-orm/effect-d1\";\nimport type { AnySQLiteTable } from \"drizzle-orm/sqlite-core\";\nimport { Context, Effect } from \"effect\";\n\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport { TotpUnavailable } from \"../totp/errors\";\nimport { TotpPersistence } from \"../totp/TotpPersistence\";\nimport { makeD1Owner } from \"./d1-planning\";\nimport { D1BatchStatements } from \"./D1BatchStatements\";\nimport type { D1TotpMapping, TotpMapping, TotpMappingSource } from \"./totp-model\";\nimport { coordinateTargetTotp, makeTotpTarget, type TotpCoordinatorError } from \"./totp-target\";\ntype Database = EffectSQLiteD1Database<AnyRelations> & { readonly $client: D1Client };\ntype Table = AnySQLiteTable;\n\nconst configuration = {\n  mode: \"batch\" as const,\n  dialect: \"sqlite\" as const,\n  locking: false,\n  standaloneGuard: () => Effect.void,\n};\n\n/** Reads use a primary D1 session; observations and expiry are asserted in the same batch. */\nconst target = makeTotpTarget<Database, Table, D1TotpMapping>(configuration);\n\nexport const { makeTotpPersistenceServices } = target;\n\nexport const coordinateTotpPersistence = <\n  D extends Database,\n  S extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  A,\n  E,\n  R,\n  RSetup = never,\n  DatabaseError = never,\n  DatabaseRequirements = never,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: { readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N> & D1TotpMapping, RSetup> },\n  body: Effect.Effect<A, E, R>,\n): Effect.Effect<\n  A,\n  TotpCoordinatorError<E> | DatabaseError,\n  Exclude<R, TotpPersistence | D1BatchStatements> | LifecycleHooks | RSetup | DatabaseRequirements\n> =>\n  Effect.flatMap(acquire, (database) =>\n    coordinateTargetTotp(\n      database,\n      options.mapping,\n      configuration,\n      (_transaction, services, append) =>\n        Effect.gen(function* () {\n          const original = services.totpPersistence;\n\n          const nativeCollector = D1BatchStatements.of({\n            append: (statement) => Effect.sync(() => append(statement)),\n          });\n\n          const owner = yield* makeD1Owner(TotpUnavailable.make({})).pipe(\n            Effect.provideService(D1BatchStatements, nativeCollector),\n          );\n\n          const service: TotpPersistence[\"Service\"] = {\n            snapshot: (input) => owner.run(original.snapshot(input)),\n            mutate: (input, prepare) => owner.run(original.mutate(input, prepare)),\n          };\n\n          const provided = Context.make(TotpPersistence, service).pipe(\n            Context.add(D1BatchStatements, owner.collector),\n          );\n\n          return yield* owner.close(Effect.provideContext(body, provided));\n        }),\n    ),\n  );\n"],"mappings":";;;;;;;AAgBA,MAAM,gBAAgB;CACpB,MAAM;CACN,SAAS;CACT,SAAS;CACT,uBAAuB,OAAO;AAChC;AAKA,MAAa,EAAE,gCAFA,eAA+C,aAEf;AAE/C,MAAa,6BAaX,SACA,SACA,SAMA,OAAO,QAAQ,UAAU,aACvB,qBACE,UACA,QAAQ,SACR,gBACC,cAAc,UAAU,WACvB,OAAO,IAAI,aAAa;CACtB,MAAM,WAAW,SAAS;CAE1B,MAAM,kBAAkB,kBAAkB,GAAG,EAC3C,SAAS,cAAc,OAAO,WAAW,OAAO,SAAS,CAAC,EAC5D,CAAC;CAED,MAAM,QAAQ,OAAO,YAAY,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KACzD,OAAO,eAAe,mBAAmB,eAAe,CAC1D;CAOA,MAAM,WAAW,QAAQ,KAAK,iBAAiB;EAJ7C,WAAW,UAAU,MAAM,IAAI,SAAS,SAAS,KAAK,CAAC;EACvD,SAAS,OAAO,YAAY,MAAM,IAAI,SAAS,OAAO,OAAO,OAAO,CAAC;CAGlB,CAAC,CAAC,CAAC,KACtD,QAAQ,IAAI,mBAAmB,MAAM,SAAS,CAChD;CAEA,OAAO,OAAO,MAAM,MAAM,OAAO,eAAe,MAAM,QAAQ,CAAC;AACjE,CAAC,CACL,CACF"}