@yielded/auth 0.1.0-beta.1

package/dist/drizzle/email-registration.mjs

@@ -0,0 +1,238 @@
+import { HookConfigurationError } from "../hooks/models.mjs";
+import { reportPersistenceFailure } from "../internal/diagnostics.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { CurrentCommitJournal, coordinateCommit, hasCommitScope } from "../hooks/commit.mjs";
+import { requiredEmailRegistrationConstraints } from "./email-model.mjs";
+import { DrizzleMappingError, column, isMappedConstraintConflict } from "./model.mjs";
+import { EmailUnavailable } from "../email/errors.mjs";
+import { ProofUnavailable } from "../proofs/errors.mjs";
+import { CurrentProofSql, completeProofPlanIn } from "./proof-sql.mjs";
+import { CurrentEmailSql } from "./email-sql.mjs";
+import { Cause, DateTime, Effect, Schema } from "effect";
+import { and, eq, isNull } from "drizzle-orm";
+//#region src/drizzle/email-registration.ts
+const unavailable = () => EmailUnavailable.make({});
+const translateFailure = (effect) => reportPersistenceFailure(effect, (error) => Schema.is(EmailUnavailable)(error) || Schema.is(ProofUnavailable)(error) || Schema.is(HookConfigurationError)(error)).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));
+const nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);
+const selectRows = (query, locking) => locking && typeof query.for === "function" ? query.for("update") : query;
+const sameIdentifier = (left, right) => left.namespace === right.namespace && left.value === right.value;
+const validConstraints = (mapping) => {
+	if (mapping.constraints.request !== requiredEmailRegistrationConstraints.request || mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference) return false;
+	if (mapping.mode === "pending") return true;
+	return Object.entries(requiredEmailRegistrationConstraints).every(([key, value]) => mapping.constraints[key] === value);
+};
+const allocate = (mode, asynchronous, synchronous) => {
+	if (mode === "synchronous") return synchronous === void 0 ? Effect.fail(unavailable()) : Effect.try({
+		try: synchronous,
+		catch: (cause) => new DrizzleMappingError({
+			operation: "mapping",
+			cause
+		})
+	});
+	if (asynchronous !== void 0) return asynchronous;
+	return synchronous === void 0 ? Effect.fail(unavailable()) : Effect.try({
+		try: synchronous,
+		catch: (cause) => new DrizzleMappingError({
+			operation: "mapping",
+			cause
+		})
+	});
+};
+const registrationRows = Effect.fn("Drizzle.registrationRows")(function* (mapping, moduleId, commandId, locking) {
+	const database = yield* CurrentEmailSql;
+	const module = column(mapping.registration.table, mapping.registration.moduleId);
+	const command = column(mapping.registration.table, mapping.registration.commandId);
+	return yield* selectRows(database.select().from(mapping.registration.table).where(and(eq(module, moduleId), eq(command, commandId))).limit(1), locking);
+});
+const owned = (database, configuration, body) => {
+	const run = coordinateCommit(() => database.transaction((transaction) => body.pipe(Effect.provideService(CurrentEmailSql, transaction), Effect.provideService(CurrentProofSql, transaction))), { mode: configuration.mode }).pipe(Effect.map((result) => result.value));
+	return configuration.coordinated !== true ? Effect.gen(function* () {
+		if (yield* hasCommitScope) return yield* unavailable();
+		yield* configuration.standaloneGuard;
+		return yield* run;
+	}) : run;
+};
+const completionMatches = (mapping, input) => {
+	const completion = input.completion.input;
+	return completion.moduleId === `${input.moduleId}/registration` && completion.purpose === "email-code-registration" && completion.binding._tag === "Identifier" && sameIdentifier(completion.binding.identifier, input.identifier) && validConstraints(mapping);
+};
+const prepareReplay = Effect.fn("DrizzleEmailRegistration.prepareReplay")(function* (mapping, row, fingerprint, prepare) {
+	const journal = yield* CurrentCommitJournal;
+	if (row[mapping.registration.fingerprint] !== fingerprint) return prepare({ _tag: "Rejected" }, journal);
+	return prepare(yield* mapping.registration.decodeReplay(row), journal);
+});
+const registerIn = Effect.fn("DrizzleEmailRegistration.registerIn")(function* (mapping, configuration, input, inspected, allocated, prepare) {
+	const journal = yield* CurrentCommitJournal;
+	const existing = (yield* registrationRows(mapping, input.moduleId, input.commandId, configuration.locking))[0];
+	if (existing !== void 0) return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);
+	if (!completionMatches(mapping, input)) return prepare({ _tag: "Rejected" }, journal);
+	if (!inspected.eligible || inspected.fingerprint !== input.fingerprint) return prepare({ _tag: "Rejected" }, journal);
+	const now = yield* nowMillis;
+	const intent = {
+		moduleId: input.moduleId,
+		commandId: input.commandId,
+		identifier: Object.freeze({ ...input.identifier }),
+		registration: input.registration,
+		fingerprint: input.fingerprint,
+		completion: Object.freeze({
+			moduleId: input.completion.input.moduleId,
+			purpose: input.completion.input.purpose,
+			continuationId: input.completion.input.continuationId,
+			binding: input.completion.input.binding
+		})
+	};
+	let decision;
+	let nativeSubjectId = allocated.nativeSubjectId;
+	const protectedMutation = Effect.gen(function* () {
+		const transaction = yield* CurrentEmailSql;
+		if (mapping.mode === "pending") {
+			if (allocated.pendingReference === void 0) return false;
+			decision = {
+				_tag: "ProvisioningPending",
+				reference: allocated.pendingReference
+			};
+			yield* transaction.insert(mapping.registration.table).values(mapping.registration.encodeInsert(intent, {
+				state: "pending",
+				pendingReference: allocated.pendingReference,
+				retentionUntilMillis: now + mapping.retentionMillis
+			}));
+		} else {
+			if (allocated.credentialId === void 0 || allocated.securityRevision === void 0 || allocated.identifierRevision === void 0 || allocated.credentialRevision === void 0) return false;
+			const subjectInsert = transaction.insert(mapping.subject.table).values(mapping.provisioning.encodeSubjectInsert(intent, {
+				nativeSubjectId,
+				securityRevision: allocated.securityRevision
+			}));
+			if (mapping.provisioning.idMode === "generated") {
+				const rows = yield* configuration.generatedSubjectRows(subjectInsert);
+				nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);
+			} else yield* subjectInsert;
+			if (nativeSubjectId === void 0) return false;
+			yield* transaction.insert(mapping.identifier.table).values(mapping.identifier.encodeVerifiedInsert({
+				identifier: input.identifier,
+				subjectId: nativeSubjectId,
+				verifiedAtMillis: now,
+				bindingRevision: allocated.identifierRevision
+			}));
+			yield* transaction.insert(mapping.credential.table).values(mapping.credential.encodeVerifiedInsert({
+				moduleId: input.moduleId,
+				subjectId: nativeSubjectId,
+				credentialId: allocated.credentialId,
+				identifier: input.identifier,
+				credentialRevision: allocated.credentialRevision
+			}));
+			yield* transaction.insert(mapping.authorityCredential.table).values(mapping.authorityCredential.encodeInsert({
+				subjectId: nativeSubjectId,
+				credentialId: allocated.credentialId,
+				revision: allocated.credentialRevision
+			}));
+			yield* transaction.insert(mapping.registration.table).values(mapping.registration.encodeInsert(intent, {
+				state: "registered",
+				nativeSubjectId,
+				retentionUntilMillis: now + mapping.retentionMillis
+			}));
+			decision = { _tag: "Registered" };
+		}
+		const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];
+		const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);
+		const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);
+		const registrationFingerprint = column(mapping.registration.table, mapping.registration.fingerprint);
+		const registrationState = column(mapping.registration.table, mapping.registration.state);
+		const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);
+		const registrationReference = column(mapping.registration.table, mapping.registration.pendingReference);
+		const registrationRetention = column(mapping.registration.table, mapping.registration.retentionUntil);
+		const exactRegistration = yield* selectRows(transaction.select().from(mapping.registration.table).where(and(eq(registrationModule, input.moduleId), eq(registrationCommand, input.commandId), eq(registrationFingerprint, input.fingerprint), eq(registrationState, mapping.mode === "pending" ? "pending" : "registered"), eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)), mapping.mode === "pending" ? and(eq(registrationReference, allocated.pendingReference), isNull(registrationSubject)) : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)))).limit(1), false);
+		if (mapping.mode === "atomic" && nativeSubjectId !== void 0) {
+			const subjectId = column(mapping.subject.table, mapping.subject.id);
+			const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);
+			const identifierValue = column(mapping.identifier.table, mapping.identifier.value);
+			const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);
+			const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);
+			const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);
+			const credentialId = column(mapping.credential.table, mapping.credential.credentialId);
+			const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);
+			const credentialNamespace = column(mapping.credential.table, mapping.credential.identifierNamespace);
+			const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);
+			const authoritySubject = column(mapping.authorityCredential.table, mapping.authorityCredential.subjectId);
+			const authorityId = column(mapping.authorityCredential.table, mapping.authorityCredential.credentialId);
+			const subject = (yield* selectRows(transaction.select().from(mapping.subject.table).where(eq(subjectId, nativeSubjectId)).limit(1), false))[0];
+			const identifier = (yield* selectRows(transaction.select().from(mapping.identifier.table).where(and(eq(identifierNamespace, input.identifier.namespace), eq(identifierValue, input.identifier.value), eq(identifierSubject, nativeSubjectId), eq(identifierVerifiedAt, mapping.encodeInstant(now)))).limit(1), false))[0];
+			const credential = (yield* selectRows(transaction.select().from(mapping.credential.table).where(and(eq(credentialModule, input.moduleId), eq(credentialId, allocated.credentialId), eq(credentialSubject, nativeSubjectId), eq(credentialNamespace, input.identifier.namespace), eq(credentialValue, input.identifier.value))).limit(1), false))[0];
+			const authority = (yield* selectRows(transaction.select().from(mapping.authorityCredential.table).where(and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId))).limit(1), false))[0];
+			if (subject === void 0 || !mapping.subject.isActiveStatus(subject[mapping.subject.status]) || subject[mapping.subject.securityRevision] !== allocated.securityRevision || identifier === void 0 || identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision || !mapping.identifier.isCurrent(identifier) || credential === void 0 || credential[mapping.credential.credentialRevision] !== allocated.credentialRevision || !mapping.credential.isActiveStatus(credential[mapping.credential.status]) || authority === void 0 || authority[mapping.authorityCredential.revision] !== allocated.credentialRevision || !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])) return false;
+		}
+		return stored !== void 0 && exactRegistration.length === 1 && stored[mapping.registration.fingerprint] === input.fingerprint && (mapping.mode === "pending" || nativeSubjectId !== void 0 && stored[mapping.registration.subjectId] !== null && mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId));
+	});
+	let receipt;
+	yield* completeProofPlanIn(configuration.proof.mapping, configuration.proof.configuration, input.completion, protectedMutation, (completionDecision) => {
+		receipt = prepare(completionDecision === "completed" && decision !== void 0 ? decision : { _tag: "Rejected" }, journal);
+		return completionDecision;
+	});
+	return receipt ?? prepare({ _tag: "Rejected" }, journal);
+});
+const prepareConflict = Effect.fn("Drizzle.prepareConflict")(function* (mapping, configuration, input, prepare) {
+	const database = yield* CurrentEmailSql;
+	return yield* owned(database, configuration, Effect.gen(function* () {
+		const journal = yield* CurrentCommitJournal;
+		const row = (yield* registrationRows(mapping, input.moduleId, input.commandId, configuration.locking))[0];
+		return row === void 0 ? prepare({ _tag: "Rejected" }, journal) : yield* prepareReplay(mapping, row, input.fingerprint, prepare);
+	}));
+});
+const makeSqlEmailRegistrationAuthority = Effect.fn("makeSqlEmailRegistrationAuthority")(function* (database, mapping, configuration) {
+	const hooks = yield* LifecycleHooks;
+	return {
+		inspect: (input) => mapping.inspect(input).pipe(Effect.provideService(CurrentEmailSql, database), Effect.provideService(LifecycleHooks, hooks), translateFailure),
+		registerWithProof: (input, prepare) => Effect.gen(function* () {
+			if (!validConstraints(mapping)) return yield* unavailable();
+			const snapshot = (registration) => configuration.mode === "synchronous" && configuration.coordinated === true ? mapping.snapshotRegistrationSync === void 0 ? Effect.fail(unavailable()) : Effect.try({
+				try: () => mapping.snapshotRegistrationSync(registration),
+				catch: (cause) => new DrizzleMappingError({
+					operation: "mapping",
+					cause
+				})
+			}) : mapping.snapshotRegistration(registration);
+			const storedRegistration = yield* snapshot(input.registration);
+			const inspectionRegistration = yield* snapshot(input.registration);
+			const capturedInput = Object.freeze({
+				...input,
+				identifier: Object.freeze({ ...input.identifier }),
+				registration: storedRegistration
+			});
+			const inspectInput = {
+				identifier: capturedInput.identifier,
+				registration: inspectionRegistration
+			};
+			const inspected = configuration.mode === "synchronous" && configuration.coordinated === true ? mapping.inspectSync === void 0 ? yield* unavailable() : yield* Effect.try({
+				try: () => mapping.inspectSync(inspectInput),
+				catch: (cause) => new DrizzleMappingError({
+					operation: "mapping",
+					cause
+				})
+			}) : yield* mapping.inspect(inspectInput);
+			const atomic = mapping.mode === "atomic";
+			const credentialId = atomic ? yield* allocate(configuration.mode, mapping.allocateCredentialId, mapping.allocateCredentialIdSync) : void 0;
+			const securityRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
+			const identifierRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
+			const credentialRevision = atomic ? yield* allocate(configuration.mode, mapping.allocateRevision, mapping.allocateRevisionSync) : void 0;
+			const nativeSubjectId = atomic && mapping.provisioning.idMode !== "generated" ? yield* allocate(configuration.mode, mapping.provisioning.allocateSubjectId, mapping.provisioning.allocateSubjectIdSync) : void 0;
+			const pendingReference = mapping.mode === "pending" ? yield* allocate(configuration.mode, mapping.allocatePendingReference, mapping.allocatePendingReferenceSync) : void 0;
+			return yield* owned(database, configuration, Effect.gen(function* () {
+				return yield* registerIn(mapping, configuration, capturedInput, inspected, {
+					...credentialId === void 0 ? {} : { credentialId },
+					...securityRevision === void 0 ? {} : { securityRevision },
+					...identifierRevision === void 0 ? {} : { identifierRevision },
+					...credentialRevision === void 0 ? {} : { credentialRevision },
+					...nativeSubjectId === void 0 ? {} : { nativeSubjectId },
+					...pendingReference === void 0 ? {} : { pendingReference }
+				}, prepare);
+			})).pipe(Effect.catchCause((cause) => {
+				const request = cause.reasons.every(Cause.isFailReason) && isMappedConstraintConflict(mapping.isRequestConflict, cause);
+				const conflict = mapping.mode === "atomic" && (cause.reasons.every(Cause.isFailReason) && isMappedConstraintConflict(mapping.isIdentifierConflict, cause) || cause.reasons.every(Cause.isFailReason) && isMappedConstraintConflict(mapping.isCredentialConflict, cause));
+				return request || conflict ? prepareConflict(mapping, configuration, capturedInput, prepare) : Effect.failCause(cause);
+			}));
+		}).pipe(Effect.provideService(CurrentEmailSql, database), Effect.provideService(LifecycleHooks, hooks), translateFailure)
+	};
+});
+//#endregion
+export { makeSqlEmailRegistrationAuthority };
+
+//# sourceMappingURL=email-registration.mjs.map

package/dist/drizzle/email-registration.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-registration.mjs","names":[],"sources":["../../src/drizzle/email-registration.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- registration plans bridge consumer-owned Drizzle rows. */\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { Cause, DateTime, Effect, Schema } from \"effect\";\n\nimport type { PrepareEmailCommit } from \"../email/EmailAddressPersistence\";\nimport { EmailUnavailable } from \"../email/errors\";\nimport type { EmailCommandId, EmailRegistrationDecision } from \"../email/models\";\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type PreparedCommit,\n} from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport { HookConfigurationError } from \"../hooks/models\";\nimport type { LoginIdentifier } from \"../identity/models\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport type { ProofCompletionPlan } from \"../proofs/completion\";\nimport { ProofUnavailable } from \"../proofs/errors\";\nimport type { TokenDigest } from \"../Schema\";\nimport type { SecurityRevision } from \"../sessions/models\";\nimport {\n  type AnyEmailRegistrationMapping,\n  requiredEmailRegistrationConstraints,\n} from \"./email-model\";\nimport { CurrentEmailSql, type EmailSqlDatabase, type EmailSqlQuery } from \"./email-sql\";\nimport { column, isMappedConstraintConflict, DrizzleMappingError } from \"./model\";\nimport {\n  CurrentProofSql,\n  completeProofPlanIn,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n} from \"./proof-sql\";\n\ntype Mapping<Registration> = AnyEmailRegistrationMapping<Registration>;\nconst unavailable = () => EmailUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, EmailUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(EmailUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = Effect.map(DateTime.now, DateTime.toEpochMillis);\n\nexport interface EmailRegistrationAuthority<Registration> {\n  readonly inspect: (input: {\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n  }) => Effect.Effect<\n    { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n    EmailUnavailable\n  >;\n  readonly registerWithProof: <A>(\n    input: {\n      readonly moduleId: string;\n      readonly commandId: EmailCommandId;\n      readonly identifier: LoginIdentifier;\n      readonly registration: Registration;\n      readonly fingerprint: TokenDigest;\n      readonly completion: ProofCompletionPlan;\n    },\n    prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n  ) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;\n}\n\nexport interface EmailRegistrationConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, EmailUnavailable>;\n  readonly coordinated?: boolean;\n  readonly generatedSubjectRows: (query: EmailSqlQuery) => EmailSqlQuery;\n  readonly proof: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\nconst selectRows = (query: EmailSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst validConstraints = <Registration>(mapping: Mapping<Registration>) => {\n  if (\n    mapping.constraints.request !== requiredEmailRegistrationConstraints.request ||\n    mapping.constraints.pendingReference !== requiredEmailRegistrationConstraints.pendingReference\n  )\n    return false;\n  if (mapping.mode === \"pending\") return true;\n\n  return Object.entries(requiredEmailRegistrationConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredEmailRegistrationConstraints] === value,\n  );\n};\n\nconst allocate = <A>(\n  mode: EmailRegistrationConfiguration[\"mode\"],\n  asynchronous: Effect.Effect<A, DrizzleMappingError> | undefined,\n  synchronous: (() => A) | undefined,\n) => {\n  if (mode === \"synchronous\")\n    return synchronous === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: synchronous,\n          catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asynchronous !== undefined) return asynchronous;\n\n  return synchronous === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: synchronous,\n        catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst registrationRows = Effect.fn(\"Drizzle.registrationRows\")(function* <Registration>(\n  mapping: Mapping<Registration>,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentEmailSql;\n\n  const module = column(mapping.registration.table, mapping.registration.moduleId);\n  const command = column(mapping.registration.table, mapping.registration.commandId);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.registration.table)\n      .where(and(eq(module, moduleId), eq(command, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst owned = <A, E, R>(\n  database: EmailSqlDatabase,\n  configuration: EmailRegistrationConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentEmailSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst completionMatches = <Registration>(\n  mapping: Mapping<Registration>,\n  input: {\n    readonly moduleId: string;\n    readonly identifier: LoginIdentifier;\n    readonly completion: ProofCompletionPlan;\n  },\n) => {\n  const completion = input.completion.input;\n\n  return (\n    completion.moduleId === `${input.moduleId}/registration` &&\n    completion.purpose === \"email-code-registration\" &&\n    completion.binding._tag === \"Identifier\" &&\n    sameIdentifier(completion.binding.identifier, input.identifier) &&\n    validConstraints(mapping)\n  );\n};\n\nconst prepareReplay = Effect.fn(\"DrizzleEmailRegistration.prepareReplay\")(function* <\n  Registration,\n  A,\n>(\n  mapping: Mapping<Registration>,\n  row: any,\n  fingerprint: TokenDigest,\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  if (row[mapping.registration.fingerprint] !== fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n\n  return prepare(yield* mapping.registration.decodeReplay(row), journal);\n});\n\nconst registerIn = Effect.fn(\"DrizzleEmailRegistration.registerIn\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly identifier: LoginIdentifier;\n    readonly registration: Registration;\n    readonly fingerprint: TokenDigest;\n    readonly completion: ProofCompletionPlan;\n  },\n  inspected: { readonly fingerprint: TokenDigest; readonly eligible: boolean },\n  allocated: {\n    readonly credentialId?: string;\n    readonly securityRevision?: SecurityRevision;\n    readonly identifierRevision?: SecurityRevision;\n    readonly credentialRevision?: SecurityRevision;\n    readonly nativeSubjectId?: unknown;\n    readonly pendingReference?: string;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const existing = (yield* registrationRows(\n    mapping,\n    input.moduleId,\n    input.commandId,\n    configuration.locking,\n  ))[0];\n\n  if (existing !== undefined)\n    return yield* prepareReplay(mapping, existing, input.fingerprint, prepare);\n  if (!completionMatches(mapping, input)) return prepare({ _tag: \"Rejected\" }, journal);\n  if (!inspected.eligible || inspected.fingerprint !== input.fingerprint)\n    return prepare({ _tag: \"Rejected\" }, journal);\n  const now = yield* nowMillis;\n\n  const intent = {\n    moduleId: input.moduleId,\n    commandId: input.commandId,\n    identifier: Object.freeze({ ...input.identifier }),\n    registration: input.registration,\n    fingerprint: input.fingerprint,\n    completion: Object.freeze({\n      moduleId: input.completion.input.moduleId,\n      purpose: input.completion.input.purpose,\n      continuationId: input.completion.input.continuationId,\n      binding: input.completion.input.binding,\n    }),\n  };\n\n  let decision: EmailRegistrationDecision | undefined;\n  let nativeSubjectId = allocated.nativeSubjectId;\n\n  const protectedMutation = Effect.gen(function* () {\n    const transaction = yield* CurrentEmailSql;\n\n    if (mapping.mode === \"pending\") {\n      if (allocated.pendingReference === undefined) return false;\n      decision = { _tag: \"ProvisioningPending\", reference: allocated.pendingReference };\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"pending\",\n          pendingReference: allocated.pendingReference,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n    } else {\n      if (\n        allocated.credentialId === undefined ||\n        allocated.securityRevision === undefined ||\n        allocated.identifierRevision === undefined ||\n        allocated.credentialRevision === undefined\n      )\n        return false;\n\n      const subjectInsert = transaction.insert(mapping.subject.table).values(\n        mapping.provisioning.encodeSubjectInsert(intent, {\n          nativeSubjectId,\n          securityRevision: allocated.securityRevision,\n        }),\n      );\n\n      if (mapping.provisioning.idMode === \"generated\") {\n        const rows = yield* configuration.generatedSubjectRows(subjectInsert);\n\n        nativeSubjectId = yield* mapping.provisioning.decodeGeneratedId(rows);\n      } else yield* subjectInsert;\n      if (nativeSubjectId === undefined) return false;\n      yield* transaction.insert(mapping.identifier.table).values(\n        mapping.identifier.encodeVerifiedInsert({\n          identifier: input.identifier,\n          subjectId: nativeSubjectId,\n          verifiedAtMillis: now,\n          bindingRevision: allocated.identifierRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.credential.table).values(\n        mapping.credential.encodeVerifiedInsert({\n          moduleId: input.moduleId,\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          identifier: input.identifier,\n          credentialRevision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.authorityCredential.table).values(\n        mapping.authorityCredential.encodeInsert({\n          subjectId: nativeSubjectId,\n          credentialId: allocated.credentialId,\n          revision: allocated.credentialRevision,\n        }),\n      );\n      yield* transaction.insert(mapping.registration.table).values(\n        mapping.registration.encodeInsert(intent, {\n          state: \"registered\",\n          nativeSubjectId,\n          retentionUntilMillis: now + mapping.retentionMillis,\n        }),\n      );\n      decision = { _tag: \"Registered\" };\n    }\n    const stored = (yield* registrationRows(mapping, input.moduleId, input.commandId, false))[0];\n    const registrationModule = column(mapping.registration.table, mapping.registration.moduleId);\n    const registrationCommand = column(mapping.registration.table, mapping.registration.commandId);\n\n    const registrationFingerprint = column(\n      mapping.registration.table,\n      mapping.registration.fingerprint,\n    );\n\n    const registrationState = column(mapping.registration.table, mapping.registration.state);\n    const registrationSubject = column(mapping.registration.table, mapping.registration.subjectId);\n\n    const registrationReference = column(\n      mapping.registration.table,\n      mapping.registration.pendingReference,\n    );\n\n    const registrationRetention = column(\n      mapping.registration.table,\n      mapping.registration.retentionUntil,\n    );\n\n    const exactRegistration = yield* selectRows(\n      transaction\n        .select()\n        .from(mapping.registration.table)\n        .where(\n          and(\n            eq(registrationModule, input.moduleId),\n            eq(registrationCommand, input.commandId),\n            eq(registrationFingerprint, input.fingerprint),\n            eq(registrationState, mapping.mode === \"pending\" ? \"pending\" : \"registered\"),\n            eq(registrationRetention, mapping.encodeInstant(now + mapping.retentionMillis)),\n            mapping.mode === \"pending\"\n              ? and(\n                  eq(registrationReference, allocated.pendingReference!),\n                  isNull(registrationSubject),\n                )\n              : and(eq(registrationSubject, nativeSubjectId), isNull(registrationReference)),\n          ),\n        )\n        .limit(1),\n      false,\n    );\n\n    if (mapping.mode === \"atomic\" && nativeSubjectId !== undefined) {\n      const subjectId = column(mapping.subject.table, mapping.subject.id);\n      const identifierNamespace = column(mapping.identifier.table, mapping.identifier.namespace);\n      const identifierValue = column(mapping.identifier.table, mapping.identifier.value);\n      const identifierSubject = column(mapping.identifier.table, mapping.identifier.subjectId);\n      const identifierVerifiedAt = column(mapping.identifier.table, mapping.identifier.verifiedAt);\n      const credentialModule = column(mapping.credential.table, mapping.credential.moduleId);\n      const credentialId = column(mapping.credential.table, mapping.credential.credentialId);\n      const credentialSubject = column(mapping.credential.table, mapping.credential.subjectId);\n\n      const credentialNamespace = column(\n        mapping.credential.table,\n        mapping.credential.identifierNamespace,\n      );\n\n      const credentialValue = column(mapping.credential.table, mapping.credential.identifierValue);\n\n      const authoritySubject = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.subjectId,\n      );\n\n      const authorityId = column(\n        mapping.authorityCredential.table,\n        mapping.authorityCredential.credentialId,\n      );\n\n      const subject = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.subject.table)\n          .where(eq(subjectId, nativeSubjectId))\n          .limit(1),\n        false,\n      ))[0];\n\n      const identifier = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.identifier.table)\n          .where(\n            and(\n              eq(identifierNamespace, input.identifier.namespace),\n              eq(identifierValue, input.identifier.value),\n              eq(identifierSubject, nativeSubjectId),\n              eq(identifierVerifiedAt, mapping.encodeInstant(now)),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const credential = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.credential.table)\n          .where(\n            and(\n              eq(credentialModule, input.moduleId),\n              eq(credentialId, allocated.credentialId!),\n              eq(credentialSubject, nativeSubjectId),\n              eq(credentialNamespace, input.identifier.namespace),\n              eq(credentialValue, input.identifier.value),\n            ),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      const authority = (yield* selectRows(\n        transaction\n          .select()\n          .from(mapping.authorityCredential.table)\n          .where(\n            and(eq(authoritySubject, nativeSubjectId), eq(authorityId, allocated.credentialId!)),\n          )\n          .limit(1),\n        false,\n      ))[0];\n\n      if (\n        subject === undefined ||\n        !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n        subject[mapping.subject.securityRevision] !== allocated.securityRevision ||\n        identifier === undefined ||\n        identifier[mapping.identifier.bindingRevision] !== allocated.identifierRevision ||\n        !mapping.identifier.isCurrent(identifier) ||\n        credential === undefined ||\n        credential[mapping.credential.credentialRevision] !== allocated.credentialRevision ||\n        !mapping.credential.isActiveStatus(credential[mapping.credential.status]) ||\n        authority === undefined ||\n        authority[mapping.authorityCredential.revision] !== allocated.credentialRevision ||\n        !mapping.authorityCredential.isActiveStatus(authority[mapping.authorityCredential.status])\n      )\n        return false;\n    }\n\n    return (\n      stored !== undefined &&\n      exactRegistration.length === 1 &&\n      stored[mapping.registration.fingerprint] === input.fingerprint &&\n      (mapping.mode === \"pending\" ||\n        (nativeSubjectId !== undefined &&\n          stored[mapping.registration.subjectId] !== null &&\n          mapping.subjectId.equals(stored[mapping.registration.subjectId], nativeSubjectId)))\n    );\n  });\n\n  let receipt: PreparedCommit<A> | undefined;\n\n  yield* completeProofPlanIn(\n    configuration.proof.mapping,\n    configuration.proof.configuration,\n    input.completion,\n    protectedMutation,\n    (completionDecision) => {\n      receipt = prepare(\n        completionDecision === \"completed\" && decision !== undefined\n          ? decision\n          : { _tag: \"Rejected\" },\n        journal,\n      );\n\n      return completionDecision;\n    },\n  );\n\n  return receipt ?? prepare({ _tag: \"Rejected\" }, journal);\n});\n\nconst prepareConflict = Effect.fn(\"Drizzle.prepareConflict\")(function* <Registration, A>(\n  mapping: Mapping<Registration>,\n  configuration: EmailRegistrationConfiguration,\n  input: {\n    readonly moduleId: string;\n    readonly commandId: string;\n    readonly fingerprint: TokenDigest;\n  },\n  prepare: PrepareEmailCommit<EmailRegistrationDecision, A>,\n) {\n  const database = yield* CurrentEmailSql;\n\n  return yield* owned(\n    database,\n    configuration,\n    Effect.gen(function* () {\n      const journal = yield* CurrentCommitJournal;\n\n      const row = (yield* registrationRows(\n        mapping,\n        input.moduleId,\n        input.commandId,\n        configuration.locking,\n      ))[0];\n\n      return row === undefined\n        ? prepare({ _tag: \"Rejected\" }, journal)\n        : yield* prepareReplay(mapping, row, input.fingerprint, prepare);\n    }),\n  );\n});\n\nexport const makeSqlEmailRegistrationAuthority = Effect.fn(\"makeSqlEmailRegistrationAuthority\")(\n  function* <Registration>(\n    database: EmailSqlDatabase,\n    mapping: Mapping<Registration>,\n    configuration: EmailRegistrationConfiguration,\n  ): Effect.fn.Return<EmailRegistrationAuthority<Registration>, never, LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    return {\n      inspect: (input) =>\n        mapping\n          .inspect(input)\n          .pipe(\n            Effect.provideService(CurrentEmailSql, database),\n            Effect.provideService(LifecycleHooks, hooks),\n            translateFailure,\n          ),\n      registerWithProof: (input, prepare) =>\n        Effect.gen(function* () {\n          if (!validConstraints(mapping)) return yield* unavailable();\n\n          const snapshot = (registration: Registration) =>\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.snapshotRegistrationSync === undefined\n                ? Effect.fail(unavailable())\n                : Effect.try({\n                    try: () => mapping.snapshotRegistrationSync!(registration),\n                    catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n                  })\n              : mapping.snapshotRegistration(registration);\n\n          const storedRegistration = yield* snapshot(input.registration);\n          const inspectionRegistration = yield* snapshot(input.registration);\n\n          const capturedInput = Object.freeze({\n            ...input,\n            identifier: Object.freeze({ ...input.identifier }),\n            registration: storedRegistration,\n          });\n\n          // Registration decoding and fingerprinting may suspend (for example while\n          // hashing a detached Registration value). Finish that work before a\n          // synchronous Durable Object transaction owner is entered.\n          const inspectInput = {\n            identifier: capturedInput.identifier,\n            registration: inspectionRegistration,\n          };\n\n          const inspected =\n            configuration.mode === \"synchronous\" && configuration.coordinated === true\n              ? mapping.inspectSync === undefined\n                ? yield* unavailable()\n                : yield* Effect.try({\n                    try: () => mapping.inspectSync!(inspectInput),\n                    catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n                  })\n              : yield* mapping.inspect(inspectInput);\n\n          const atomic = mapping.mode === \"atomic\";\n\n          const credentialId = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateCredentialId,\n                mapping.allocateCredentialIdSync,\n              )\n            : undefined;\n\n          const securityRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const identifierRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const credentialRevision = atomic\n            ? yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              )\n            : undefined;\n\n          const nativeSubjectId =\n            atomic && mapping.provisioning.idMode !== \"generated\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.provisioning.allocateSubjectId,\n                  mapping.provisioning.allocateSubjectIdSync,\n                )\n              : undefined;\n\n          const pendingReference =\n            mapping.mode === \"pending\"\n              ? yield* allocate(\n                  configuration.mode,\n                  mapping.allocatePendingReference,\n                  mapping.allocatePendingReferenceSync,\n                )\n              : undefined;\n\n          const run = owned(\n            database,\n            configuration,\n            Effect.gen(function* () {\n              return yield* registerIn(\n                mapping,\n                configuration,\n                capturedInput,\n                inspected,\n                {\n                  ...(credentialId === undefined ? {} : { credentialId }),\n                  ...(securityRevision === undefined ? {} : { securityRevision }),\n                  ...(identifierRevision === undefined ? {} : { identifierRevision }),\n                  ...(credentialRevision === undefined ? {} : { credentialRevision }),\n                  ...(nativeSubjectId === undefined ? {} : { nativeSubjectId }),\n                  ...(pendingReference === undefined ? {} : { pendingReference }),\n                },\n                prepare,\n              );\n            }),\n          );\n\n          return yield* run.pipe(\n            Effect.catchCause((cause) => {\n              const request =\n                cause.reasons.every(Cause.isFailReason) &&\n                isMappedConstraintConflict(mapping.isRequestConflict, cause);\n\n              const conflict =\n                mapping.mode === \"atomic\" &&\n                ((cause.reasons.every(Cause.isFailReason) &&\n                  isMappedConstraintConflict(mapping.isIdentifierConflict, cause)) ||\n                  (cause.reasons.every(Cause.isFailReason) &&\n                    isMappedConstraintConflict(mapping.isCredentialConflict, cause)));\n\n              return request || conflict\n                ? prepareConflict(mapping, configuration, capturedInput, prepare)\n                : Effect.failCause(cause);\n            }),\n          );\n        }).pipe(\n          Effect.provideService(CurrentEmailSql, database),\n          Effect.provideService(LifecycleHooks, hooks),\n          translateFailure,\n        ),\n    };\n  },\n);\n"],"mappings":";;;;;;;;;;;;;AAmCA,MAAM,oBAAoB,iBAAiB,KAAK,CAAC,CAAC;AAElD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,SAAS,aAAa;AAmCjE,MAAM,cAAc,OAAsB,YACxC,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,oBAAkC,YAAmC;CACzE,IACE,QAAQ,YAAY,YAAY,qCAAqC,WACrE,QAAQ,YAAY,qBAAqB,qCAAqC,kBAE9E,OAAO;CACT,IAAI,QAAQ,SAAS,WAAW,OAAO;CAEvC,OAAO,OAAO,QAAQ,oCAAoC,CAAC,CAAC,OACzD,CAAC,KAAK,WACL,QAAQ,YAAY,SAA8D,KACtF;AACF;AAEA,MAAM,YACJ,MACA,cACA,gBACG;CACH,IAAI,SAAS,eACX,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,oBAAoB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC3E,CAAC;CACP,IAAI,iBAAiB,KAAA,GAAW,OAAO;CAEvC,OAAO,gBAAgB,KAAA,IACnB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,oBAAoB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC3E,CAAC;AACP;AAEA,MAAM,mBAAmB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAC7D,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;CAC/E,MAAM,UAAU,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;CAEjF,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MAAM,IAAI,GAAG,QAAQ,QAAQ,GAAG,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CACxD,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,SACJ,UACA,eACA,SACG;CACH,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,iBAAiB,WAAW,GAClD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,qBACJ,SACA,UAKG;CACH,MAAM,aAAa,MAAM,WAAW;CAEpC,OACE,WAAW,aAAa,GAAG,MAAM,SAAS,kBAC1C,WAAW,YAAY,6BACvB,WAAW,QAAQ,SAAS,gBAC5B,eAAe,WAAW,QAAQ,YAAY,MAAM,UAAU,KAC9D,iBAAiB,OAAO;AAE5B;AAEA,MAAM,gBAAgB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAIxE,SACA,KACA,aACA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,IAAI,IAAI,QAAQ,aAAa,iBAAiB,aAC5C,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAE9C,OAAO,QAAQ,OAAO,QAAQ,aAAa,aAAa,GAAG,GAAG,OAAO;AACvE,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAClE,SACA,eACA,OAQA,WACA,WAQA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,iBACvB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;CAEH,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,cAAc,SAAS,UAAU,MAAM,aAAa,OAAO;CAC3E,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CACpF,IAAI,CAAC,UAAU,YAAY,UAAU,gBAAgB,MAAM,aACzD,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;CAC9C,MAAM,MAAM,OAAO;CAEnB,MAAM,SAAS;EACb,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;EACjD,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,OAAO,OAAO;GACxB,UAAU,MAAM,WAAW,MAAM;GACjC,SAAS,MAAM,WAAW,MAAM;GAChC,gBAAgB,MAAM,WAAW,MAAM;GACvC,SAAS,MAAM,WAAW,MAAM;EAClC,CAAC;CACH;CAEA,IAAI;CACJ,IAAI,kBAAkB,UAAU;CAEhC,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,cAAc,OAAO;EAE3B,IAAI,QAAQ,SAAS,WAAW;GAC9B,IAAI,UAAU,qBAAqB,KAAA,GAAW,OAAO;GACrD,WAAW;IAAE,MAAM;IAAuB,WAAW,UAAU;GAAiB;GAChF,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP,kBAAkB,UAAU;IAC5B,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;EACF,OAAO;GACL,IACE,UAAU,iBAAiB,KAAA,KAC3B,UAAU,qBAAqB,KAAA,KAC/B,UAAU,uBAAuB,KAAA,KACjC,UAAU,uBAAuB,KAAA,GAEjC,OAAO;GAET,MAAM,gBAAgB,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC9D,QAAQ,aAAa,oBAAoB,QAAQ;IAC/C;IACA,kBAAkB,UAAU;GAC9B,CAAC,CACH;GAEA,IAAI,QAAQ,aAAa,WAAW,aAAa;IAC/C,MAAM,OAAO,OAAO,cAAc,qBAAqB,aAAa;IAEpE,kBAAkB,OAAO,QAAQ,aAAa,kBAAkB,IAAI;GACtE,OAAO,OAAO;GACd,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAC1C,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,YAAY,MAAM;IAClB,WAAW;IACX,kBAAkB;IAClB,iBAAiB,UAAU;GAC7B,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAClD,QAAQ,WAAW,qBAAqB;IACtC,UAAU,MAAM;IAChB,WAAW;IACX,cAAc,UAAU;IACxB,YAAY,MAAM;IAClB,oBAAoB,UAAU;GAChC,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OAC3D,QAAQ,oBAAoB,aAAa;IACvC,WAAW;IACX,cAAc,UAAU;IACxB,UAAU,UAAU;GACtB,CAAC,CACH;GACA,OAAO,YAAY,OAAO,QAAQ,aAAa,KAAK,CAAC,CAAC,OACpD,QAAQ,aAAa,aAAa,QAAQ;IACxC,OAAO;IACP;IACA,sBAAsB,MAAM,QAAQ;GACtC,CAAC,CACH;GACA,WAAW,EAAE,MAAM,aAAa;EAClC;EACA,MAAM,UAAU,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK,EAAA,CAAG;EAC1F,MAAM,qBAAqB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,QAAQ;EAC3F,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,0BAA0B,OAC9B,QAAQ,aAAa,OACrB,QAAQ,aAAa,WACvB;EAEA,MAAM,oBAAoB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,KAAK;EACvF,MAAM,sBAAsB,OAAO,QAAQ,aAAa,OAAO,QAAQ,aAAa,SAAS;EAE7F,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,gBACvB;EAEA,MAAM,wBAAwB,OAC5B,QAAQ,aAAa,OACrB,QAAQ,aAAa,cACvB;EAEA,MAAM,oBAAoB,OAAO,WAC/B,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,aAAa,KAAK,CAAC,CAChC,MACC,IACE,GAAG,oBAAoB,MAAM,QAAQ,GACrC,GAAG,qBAAqB,MAAM,SAAS,GACvC,GAAG,yBAAyB,MAAM,WAAW,GAC7C,GAAG,mBAAmB,QAAQ,SAAS,YAAY,YAAY,YAAY,GAC3E,GAAG,uBAAuB,QAAQ,cAAc,MAAM,QAAQ,eAAe,CAAC,GAC9E,QAAQ,SAAS,YACb,IACE,GAAG,uBAAuB,UAAU,gBAAiB,GACrD,OAAO,mBAAmB,CAC5B,IACA,IAAI,GAAG,qBAAqB,eAAe,GAAG,OAAO,qBAAqB,CAAC,CACjF,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF;EAEA,IAAI,QAAQ,SAAS,YAAY,oBAAoB,KAAA,GAAW;GAC9D,MAAM,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;GAClE,MAAM,sBAAsB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACzF,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;GACjF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GACvF,MAAM,uBAAuB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;GAC3F,MAAM,mBAAmB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;GACrF,MAAM,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;GACrF,MAAM,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEvF,MAAM,sBAAsB,OAC1B,QAAQ,WAAW,OACnB,QAAQ,WAAW,mBACrB;GAEA,MAAM,kBAAkB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;GAE3F,MAAM,mBAAmB,OACvB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,SAC9B;GAEA,MAAM,cAAc,OAClB,QAAQ,oBAAoB,OAC5B,QAAQ,oBAAoB,YAC9B;GAEA,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,WAAW,eAAe,CAAC,CAAC,CACrC,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,GAC1C,GAAG,mBAAmB,eAAe,GACrC,GAAG,sBAAsB,QAAQ,cAAc,GAAG,CAAC,CACrD,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,cAAc,OAAO,WACzB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,kBAAkB,MAAM,QAAQ,GACnC,GAAG,cAAc,UAAU,YAAa,GACxC,GAAG,mBAAmB,eAAe,GACrC,GAAG,qBAAqB,MAAM,WAAW,SAAS,GAClD,GAAG,iBAAiB,MAAM,WAAW,KAAK,CAC5C,CACF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,MAAM,aAAa,OAAO,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IAAI,GAAG,kBAAkB,eAAe,GAAG,GAAG,aAAa,UAAU,YAAa,CAAC,CACrF,CAAC,CACA,MAAM,CAAC,GACV,KACF,EAAA,CAAG;GAEH,IACE,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,QAAQ,QAAQ,QAAQ,sBAAsB,UAAU,oBACxD,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,qBAAqB,UAAU,sBAC7D,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,eAAe,KAAA,KACf,WAAW,QAAQ,WAAW,wBAAwB,UAAU,sBAChE,CAAC,QAAQ,WAAW,eAAe,WAAW,QAAQ,WAAW,OAAO,KACxE,cAAc,KAAA,KACd,UAAU,QAAQ,oBAAoB,cAAc,UAAU,sBAC9D,CAAC,QAAQ,oBAAoB,eAAe,UAAU,QAAQ,oBAAoB,OAAO,GAEzF,OAAO;EACX;EAEA,OACE,WAAW,KAAA,KACX,kBAAkB,WAAW,KAC7B,OAAO,QAAQ,aAAa,iBAAiB,MAAM,gBAClD,QAAQ,SAAS,aACf,oBAAoB,KAAA,KACnB,OAAO,QAAQ,aAAa,eAAe,QAC3C,QAAQ,UAAU,OAAO,OAAO,QAAQ,aAAa,YAAY,eAAe;CAExF,CAAC;CAED,IAAI;CAEJ,OAAO,oBACL,cAAc,MAAM,SACpB,cAAc,MAAM,eACpB,MAAM,YACN,oBACC,uBAAuB;EACtB,UAAU,QACR,uBAAuB,eAAe,aAAa,KAAA,IAC/C,WACA,EAAE,MAAM,WAAW,GACvB,OACF;EAEA,OAAO;CACT,CACF;CAEA,OAAO,WAAW,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO;AACzD,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3D,SACA,eACA,OAKA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,OAAO,OAAO,MACZ,UACA,eACA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO;EAEvB,MAAM,OAAO,OAAO,iBAClB,SACA,MAAM,UACN,MAAM,WACN,cAAc,OAChB,EAAA,CAAG;EAEH,OAAO,QAAQ,KAAA,IACX,QAAQ,EAAE,MAAM,WAAW,GAAG,OAAO,IACrC,OAAO,cAAc,SAAS,KAAK,MAAM,aAAa,OAAO;CACnE,CAAC,CACH;AACF,CAAC;AAED,MAAa,oCAAoC,OAAO,GAAG,mCAAmC,CAAC,CAC7F,WACE,UACA,SACA,eACmF;CACnF,MAAM,QAAQ,OAAO;CAErB,OAAO;EACL,UAAU,UACR,QACG,QAAQ,KAAK,CAAC,CACd,KACC,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACJ,oBAAoB,OAAO,YACzB,OAAO,IAAI,aAAa;GACtB,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,YAAY;GAE1D,MAAM,YAAY,iBAChB,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,6BAA6B,KAAA,IACnC,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;IACT,WAAW,QAAQ,yBAA0B,YAAY;IACzD,QAAQ,UAAU,IAAI,oBAAoB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC3E,CAAC,IACH,QAAQ,qBAAqB,YAAY;GAE/C,MAAM,qBAAqB,OAAO,SAAS,MAAM,YAAY;GAC7D,MAAM,yBAAyB,OAAO,SAAS,MAAM,YAAY;GAEjE,MAAM,gBAAgB,OAAO,OAAO;IAClC,GAAG;IACH,YAAY,OAAO,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;IACjD,cAAc;GAChB,CAAC;GAKD,MAAM,eAAe;IACnB,YAAY,cAAc;IAC1B,cAAc;GAChB;GAEA,MAAM,YACJ,cAAc,SAAS,iBAAiB,cAAc,gBAAgB,OAClE,QAAQ,gBAAgB,KAAA,IACtB,OAAO,YAAY,IACnB,OAAO,OAAO,IAAI;IAChB,WAAW,QAAQ,YAAa,YAAY;IAC5C,QAAQ,UAAU,IAAI,oBAAoB;KAAE,WAAW;KAAW;IAAM,CAAC;GAC3E,CAAC,IACH,OAAO,QAAQ,QAAQ,YAAY;GAEzC,MAAM,SAAS,QAAQ,SAAS;GAEhC,MAAM,eAAe,SACjB,OAAO,SACL,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV,IACA,KAAA;GAEJ,MAAM,mBAAmB,SACrB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,qBAAqB,SACvB,OAAO,SACL,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV,IACA,KAAA;GAEJ,MAAM,kBACJ,UAAU,QAAQ,aAAa,WAAW,cACtC,OAAO,SACL,cAAc,MACd,QAAQ,aAAa,mBACrB,QAAQ,aAAa,qBACvB,IACA,KAAA;GAEN,MAAM,mBACJ,QAAQ,SAAS,YACb,OAAO,SACL,cAAc,MACd,QAAQ,0BACR,QAAQ,4BACV,IACA,KAAA;GAwBN,OAAO,OAtBK,MACV,UACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,WACZ,SACA,eACA,eACA,WACA;KACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;KACrD,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;KAC7D,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB;KACjE,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;KAC3D,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAC/D,GACA,OACF;GACF,CAAC,CAGa,CAAC,CAAC,KAChB,OAAO,YAAY,UAAU;IAC3B,MAAM,UACJ,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,mBAAmB,KAAK;IAE7D,MAAM,WACJ,QAAQ,SAAS,aACf,MAAM,QAAQ,MAAM,MAAM,YAAY,KACtC,2BAA2B,QAAQ,sBAAsB,KAAK,KAC7D,MAAM,QAAQ,MAAM,MAAM,YAAY,KACrC,2BAA2B,QAAQ,sBAAsB,KAAK;IAEpE,OAAO,WAAW,WACd,gBAAgB,SAAS,eAAe,eAAe,OAAO,IAC9D,OAAO,UAAU,KAAK;GAC5B,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,iBAAiB,QAAQ,GAC/C,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ;AACF,CACF"}

package/dist/drizzle/email-sql.d.mts

@@ -0,0 +1,18 @@
+import "../Schema.mjs";
+import "../sessions/models.mjs";
+import "../identity/models.mjs";
+import "../hooks/LifecycleHooks.mjs";
+import "../hooks/commit.mjs";
+import "../email/models.mjs";
+import "./model.mjs";
+import "./email-model.mjs";
+import "../proofs/ProofPersistence.mjs";
+import "../Proofs.mjs";
+import "../email/errors.mjs";
+import "../email/EmailAddressPersistence.mjs";
+import "../Email.mjs";
+import "./proof-sql.mjs";
+import { Context, DateTime, Effect, Option } from "effect";
+import { sql } from "drizzle-orm";
+import "effect/unstable/sql/SqlError";
+import "drizzle-orm/effect-core";