@yielded/auth 0.1.0-beta.1

package/dist/drizzle/password-sql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-sql.mjs","names":[],"sources":["../../src/drizzle/password-sql.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- the shared dialect kernel intentionally erases consumer Drizzle table types. */\nimport { and, eq, gte, inArray, lte, notExists, sql } from \"drizzle-orm\";\nimport type { EffectDrizzleQueryError } from \"drizzle-orm/effect-core\";\nimport { Cause, Context, DateTime, Effect, Option, Redacted, Schema } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\n\nimport {\n  coordinateCommit,\n  CurrentCommitJournal,\n  hasCommitScope,\n  type CommitJournal,\n  type PreparedCommit,\n} from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport { HookConfigurationError } from \"../hooks/models\";\nimport type { LoginIdentifier } from \"../identity/models\";\nimport { reportPersistenceFailure } from \"../internal/diagnostics\";\nimport { PasswordUnavailable } from \"../password/methods/errors\";\nimport type {\n  PasswordAction,\n  PasswordAttemptDecision,\n  PasswordCredentialSnapshot,\n  PasswordMutationDecision,\n} from \"../password/methods/models\";\nimport {\n  PasswordPersistence,\n  type PasswordMutationInput,\n} from \"../password/methods/PasswordPersistence\";\nimport type { PasswordAttemptPolicy } from \"../password/methods/policy\";\nimport {\n  snapshotPasswordCredential,\n  snapshotPasswordRequirement,\n  snapshotPasswordRevision,\n} from \"../password/methods/snapshot\";\nimport type { ProofCompletionPlan } from \"../proofs/completion\";\nimport { ProofUnavailable } from \"../proofs/errors\";\nimport type { ProofCompletionInput } from \"../proofs/ProofPersistence\";\nimport { snapshotAuthenticationEvidence } from \"../sessions/assurance\";\nimport type {\n  AuthenticationEvidence,\n  AuthenticationRequirement,\n  SecurityRevision,\n} from \"../sessions/models\";\nimport { column, DrizzleMappingError, updateValues } from \"./model\";\nimport {\n  type AnyPasswordPersistenceMapping,\n  type PasswordAttemptAction,\n  type PasswordRateScopeKind,\n  type PasswordScopeKeys,\n  requiredPasswordConstraints,\n} from \"./password-model\";\nimport {\n  CurrentProofSql,\n  type ProofSqlConfiguration,\n  type ProofSqlDatabase,\n  completeProofPlanIn,\n} from \"./proof-sql\";\n\ntype AdapterFailure = EffectDrizzleQueryError | DrizzleMappingError | SqlError.SqlError;\n\nexport interface PasswordSqlQuery<A = ReadonlyArray<any>> extends Effect.Effect<A, AdapterFailure> {\n  readonly getSQL: () => ReturnType<typeof sql>;\n  readonly from: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly where: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly limit: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly orderBy: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly for: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly set: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly values: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly returning: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly $returningId: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly onConflictDoNothing: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n  readonly onDuplicateKeyUpdate: (...args: ReadonlyArray<any>) => PasswordSqlQuery<A>;\n}\n\nexport interface PasswordSqlDatabase {\n  readonly select: (...args: ReadonlyArray<any>) => PasswordSqlQuery;\n  readonly insert: (...args: ReadonlyArray<any>) => PasswordSqlQuery;\n  readonly update: (...args: ReadonlyArray<any>) => PasswordSqlQuery;\n  readonly delete: (...args: ReadonlyArray<any>) => PasswordSqlQuery;\n  readonly transaction: <A, E, R>(\n    body: (transaction: PasswordSqlDatabase) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport class CurrentPasswordSql extends Context.Service<CurrentPasswordSql, PasswordSqlDatabase>()(\n  \"effect-auth/CurrentPasswordSql\",\n) {}\n\nexport interface PasswordSqlConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, PasswordUnavailable>;\n  readonly coordinated?: boolean;\n  readonly insertIfAbsent: (\n    query: PasswordSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => PasswordSqlQuery;\n  readonly proof?: {\n    readonly mapping: any;\n    readonly configuration: ProofSqlConfiguration;\n  };\n}\n\ntype Database = PasswordSqlDatabase;\ntype Mapping = AnyPasswordPersistenceMapping;\nconst unavailable = () => PasswordUnavailable.make({});\n\nconst translateFailure = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordUnavailable, R> =>\n  reportPersistenceFailure(\n    effect,\n    (error) =>\n      Schema.is(PasswordUnavailable)(error) ||\n      Schema.is(ProofUnavailable)(error) ||\n      Schema.is(HookConfigurationError)(error),\n  ).pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, () => unavailable()))));\n\nconst nowMillis = DateTime.now.pipe(Effect.map(DateTime.toEpochMillis));\n\nconst validConstraints = (mapping: Mapping) =>\n  Object.entries(requiredPasswordConstraints).every(\n    ([key, value]) =>\n      mapping.constraints[key as keyof typeof requiredPasswordConstraints] === value,\n  );\n\nconst selectRows = (query: PasswordSqlQuery, locking: boolean) =>\n  locking && typeof query.for === \"function\" ? query.for(\"update\") : query;\n\nconst subjectColumns = (mapping: Mapping) => ({\n  id: column(mapping.subject.table, mapping.subject.id),\n  status: column(mapping.subject.table, mapping.subject.status),\n  securityRevision: column(mapping.subject.table, mapping.subject.securityRevision),\n});\n\nconst identifierColumns = (mapping: Mapping) => ({\n  namespace: column(mapping.identifier.table, mapping.identifier.namespace),\n  value: column(mapping.identifier.table, mapping.identifier.value),\n  subjectId: column(mapping.identifier.table, mapping.identifier.subjectId),\n  verifiedAt: column(mapping.identifier.table, mapping.identifier.verifiedAt),\n  bindingRevision: column(mapping.identifier.table, mapping.identifier.bindingRevision),\n});\n\nconst credentialColumns = (mapping: Mapping) => ({\n  moduleId: column(mapping.credential.table, mapping.credential.moduleId),\n  subjectId: column(mapping.credential.table, mapping.credential.subjectId),\n  credentialId: column(mapping.credential.table, mapping.credential.credentialId),\n  credentialRevision: column(mapping.credential.table, mapping.credential.credentialRevision),\n  verifierVersion: column(mapping.credential.table, mapping.credential.verifierVersion),\n  verifier: column(mapping.credential.table, mapping.credential.verifier),\n  normalization: column(mapping.credential.table, mapping.credential.normalization),\n});\n\nconst authorityCredentialColumns = (mapping: Mapping) => ({\n  subjectId: column(mapping.authorityCredential.table, mapping.authorityCredential.subjectId),\n  credentialId: column(mapping.authorityCredential.table, mapping.authorityCredential.credentialId),\n  revision: column(mapping.authorityCredential.table, mapping.authorityCredential.revision),\n});\n\nconst attemptColumns = (mapping: Mapping) => ({\n  moduleId: column(mapping.attempt.table, mapping.attempt.moduleId),\n  action: column(mapping.attempt.table, mapping.attempt.action),\n  attemptId: column(mapping.attempt.table, mapping.attempt.attemptId),\n  identifierNamespace: column(mapping.attempt.table, mapping.attempt.identifierNamespace),\n  identifierValue: column(mapping.attempt.table, mapping.attempt.identifierValue),\n  subjectId: column(mapping.attempt.table, mapping.attempt.subjectId),\n  credentialId: column(mapping.attempt.table, mapping.attempt.credentialId),\n  securityRevision: column(mapping.attempt.table, mapping.attempt.securityRevision),\n  credentialRevision: column(mapping.attempt.table, mapping.attempt.credentialRevision),\n  verifierVersion: column(mapping.attempt.table, mapping.attempt.verifierVersion),\n  identifierBindingRevision: column(\n    mapping.attempt.table,\n    mapping.attempt.identifierBindingRevision,\n  ),\n  admittedAt: column(mapping.attempt.table, mapping.attempt.admittedAt),\n  deadline: column(mapping.attempt.table, mapping.attempt.deadline),\n  retentionUntil: column(mapping.attempt.table, mapping.attempt.retentionUntil),\n  state: column(mapping.attempt.table, mapping.attempt.state),\n});\n\nconst scopeColumns = (mapping: Mapping) => ({\n  moduleId: column(mapping.rateScope.table, mapping.rateScope.moduleId),\n  action: column(mapping.rateScope.table, mapping.rateScope.action),\n  scopeKind: column(mapping.rateScope.table, mapping.rateScope.scopeKind),\n  scopeKey: column(mapping.rateScope.table, mapping.rateScope.scopeKey),\n});\n\nconst chargeColumns = (mapping: Mapping) => ({\n  moduleId: column(mapping.charge.table, mapping.charge.moduleId),\n  action: column(mapping.charge.table, mapping.charge.action),\n  scopeKind: column(mapping.charge.table, mapping.charge.scopeKind),\n  scopeKey: column(mapping.charge.table, mapping.charge.scopeKey),\n  attemptId: column(mapping.charge.table, mapping.charge.attemptId),\n  occurredAt: column(mapping.charge.table, mapping.charge.occurredAt),\n  retentionUntil: column(mapping.charge.table, mapping.charge.retentionUntil),\n});\n\nconst commandColumns = (mapping: Mapping) => ({\n  moduleId: column(mapping.command.table, mapping.command.moduleId),\n  commandId: column(mapping.command.table, mapping.command.commandId),\n  action: column(mapping.command.table, mapping.command.action),\n  bindingDigest: column(mapping.command.table, mapping.command.bindingDigest),\n  decision: column(mapping.command.table, mapping.command.decision),\n  retentionUntil: column(mapping.command.table, mapping.command.retentionUntil),\n});\n\nconst allocate = <A>(\n  mode: PasswordSqlConfiguration[\"mode\"],\n  asyncValue: Effect.Effect<A, DrizzleMappingError> | undefined,\n  syncValue: (() => A) | undefined,\n): Effect.Effect<A, PasswordUnavailable | DrizzleMappingError> => {\n  if (mode === \"synchronous\")\n    return syncValue === undefined\n      ? Effect.fail(unavailable())\n      : Effect.try({\n          try: syncValue,\n          catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n        });\n  if (asyncValue !== undefined) return asyncValue;\n\n  return syncValue === undefined\n    ? Effect.fail(unavailable())\n    : Effect.try({\n        try: syncValue,\n        catch: (cause) => new DrizzleMappingError({ operation: \"mapping\", cause }),\n      });\n};\n\nconst allocateNextSecurityRevision = (\n  mapping: Mapping,\n  mode: PasswordSqlConfiguration[\"mode\"],\n  current: SecurityRevision,\n) => {\n  const asyncValue = mapping.subject.nextSecurityRevision?.(current);\n\n  const syncValue =\n    mapping.subject.nextSecurityRevisionSync === undefined\n      ? undefined\n      : () => mapping.subject.nextSecurityRevisionSync!(current);\n\n  return allocate(\n    mode,\n    asyncValue ?? mapping.allocateRevision,\n    syncValue ?? mapping.allocateRevisionSync,\n  );\n};\n\nconst sameIdentifier = (left: LoginIdentifier, right: LoginIdentifier) =>\n  left.namespace === right.namespace && left.value === right.value;\n\nconst sameCredentialSnapshot = (\n  left: PasswordCredentialSnapshot,\n  right: PasswordCredentialSnapshot,\n) =>\n  left.moduleId === right.moduleId &&\n  left.revision.subjectId === right.revision.subjectId &&\n  left.revision.securityRevision === right.revision.securityRevision &&\n  left.credentialId === right.credentialId &&\n  left.credentialRevision === right.credentialRevision &&\n  left.verifierVersion === right.verifierVersion &&\n  left.normalization === right.normalization &&\n  left.identifierVerifiedAtMillis === right.identifierVerifiedAtMillis &&\n  left.revision.credentials.length === right.revision.credentials.length &&\n  left.revision.credentials.every((entry) =>\n    right.revision.credentials.some(\n      (other) => other.credentialId === entry.credentialId && other.revision === entry.revision,\n    ),\n  ) &&\n  left.identifierBindingRevision === right.identifierBindingRevision &&\n  sameIdentifier(left.identifier, right.identifier) &&\n  Redacted.value(left.verifier) === Redacted.value(right.verifier);\n\nconst evidenceSatisfiedAt = (\n  evidence: AuthenticationEvidence,\n  requirement: AuthenticationRequirement,\n  now: number,\n): boolean => {\n  if (evidence.proofs.length > 64 || evidence.revision.credentials.length > 64) return false;\n  const revisions = new Map<string, string>();\n\n  for (const item of evidence.revision.credentials) {\n    if (revisions.has(item.credentialId)) return false;\n    revisions.set(item.credentialId, item.revision);\n  }\n  if (evidence.proofs.some((proof) => !revisions.has(proof.credentialId))) return false;\n  if (evidence.proofs.some((proof) => now < DateTime.toEpochMillis(proof.verifiedAt))) return false;\n\n  const eligible = evidence.proofs.filter((proof) => {\n    const age = now - DateTime.toEpochMillis(proof.verifiedAt);\n\n    return age >= 0 && age < requirement.maximumAgeMillis;\n  });\n\n  const factors = new Set(eligible.flatMap((proof) => proof.factors));\n  const credentials = new Set(eligible.map((proof) => proof.credentialId));\n\n  return requirement.alternatives.some(\n    (alternative) =>\n      alternative.factors.every((factor) => factors.has(factor)) &&\n      credentials.size >= alternative.minimumCredentials &&\n      eligible.some(\n        (proof) =>\n          (!alternative.userVerified || proof.userVerified) &&\n          (!alternative.phishingResistant || proof.phishingResistant),\n      ),\n  );\n};\n\nconst snapshotMutationInput = Effect.fn(\"DrizzlePassword.snapshotMutationInput\")(function* (\n  input: PasswordMutationInput,\n) {\n  const expectedRevision = snapshotPasswordRevision(input.expectedRevision);\n\n  const evidence = yield* snapshotAuthenticationEvidence(input.authorization.evidence).pipe(\n    Effect.mapError(unavailable),\n  );\n\n  const requirement = yield* snapshotPasswordRequirement(input.authorization.requirement);\n\n  const credential =\n    input.credential === undefined\n      ? undefined\n      : yield* snapshotPasswordCredential(input.credential);\n\n  return Object.freeze({\n    ...input,\n    expectedRevision,\n    replacement: Object.freeze({\n      verifier: Redacted.make(Redacted.value(input.replacement.verifier)),\n      normalization: input.replacement.normalization,\n    }),\n    invalidation: Object.freeze({ ...input.invalidation }),\n    ...(credential === undefined ? {} : { credential }),\n    authorization: Object.freeze({\n      challenge: Object.freeze({\n        ...input.authorization.challenge,\n        revision: snapshotPasswordRevision(input.authorization.challenge.revision),\n      }),\n      evidence,\n      requirement,\n    }),\n  });\n});\n\nconst lockSubject = Effect.fn(\"DrizzlePassword.lockSubject\")(function* (\n  mapping: Mapping,\n  subjectId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const nativeSubjectId = yield* mapping.subjectId.toNative(subjectId as any);\n  const c = subjectColumns(mapping);\n\n  const rows = yield* selectRows(\n    database.select().from(mapping.subject.table).where(eq(c.id, nativeSubjectId)).limit(1),\n    locking,\n  );\n\n  return { nativeSubjectId, row: rows[0] };\n});\n\nconst lockIdentifier = Effect.fn(\"Drizzle.lockIdentifier\")(function* (\n  mapping: Mapping,\n  identifier: LoginIdentifier,\n  locking: boolean,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const c = identifierColumns(mapping);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.identifier.table)\n      .where(and(eq(c.namespace, identifier.namespace), eq(c.value, identifier.value)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst readPasswordCredential = Effect.fn(\"Drizzle.readPasswordCredential\")(function* (\n  mapping: Mapping,\n  moduleId: string,\n  nativeSubjectId: unknown,\n  locking: boolean,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const c = credentialColumns(mapping);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.credential.table)\n      .where(and(eq(c.moduleId, moduleId), eq(c.subjectId, nativeSubjectId)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst resolveCredential = Effect.fn(\"DrizzlePassword.resolveCredential\")(function* (\n  mapping: Mapping,\n  moduleId: string,\n  identifier: LoginIdentifier,\n  requestedSubjectId: string | undefined,\n  locking: boolean,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  // The unlocked lookup only discovers the prospective subject. The canonical\n  // protected order starts with the subject and then rechecks the identifier.\n  const discovered = (yield* lockIdentifier(mapping, identifier, false))[0];\n\n  if (discovered === undefined || !mapping.identifier.isCurrent(discovered)) return undefined;\n  const discoveredNative = discovered[mapping.identifier.subjectId];\n\n  const subjectRows = yield* selectRows(\n    database\n      .select()\n      .from(mapping.subject.table)\n      .where(eq(subjectColumns(mapping).id, discoveredNative))\n      .limit(1),\n    locking,\n  );\n\n  const subject = subjectRows[0];\n\n  if (subject === undefined || !mapping.subject.isActiveStatus(subject[mapping.subject.status]))\n    return undefined;\n  const identifiers = yield* lockIdentifier(mapping, identifier, locking);\n  const identifierRow = identifiers[0];\n\n  if (\n    identifierRow === undefined ||\n    !mapping.identifier.isCurrent(identifierRow) ||\n    !mapping.subjectId.equals(discoveredNative, identifierRow[mapping.identifier.subjectId])\n  )\n    return undefined;\n  const subjectId = yield* mapping.subjectId.toSubject(discoveredNative);\n\n  if (requestedSubjectId !== undefined && requestedSubjectId !== subjectId) return undefined;\n  const credentials = yield* readPasswordCredential(mapping, moduleId, discoveredNative, locking);\n  const credential = credentials[0];\n\n  if (credential === undefined)\n    return { nativeSubjectId: discoveredNative, subject, identifier: identifierRow };\n\n  const snapshot = yield* mapping.credential\n    .decode({ moduleId, subject, identifier: identifierRow, credential })\n    .pipe(Effect.flatMap(snapshotPasswordCredential));\n\n  return {\n    nativeSubjectId: discoveredNative,\n    subject,\n    identifier: identifierRow,\n    credential,\n    snapshot,\n  };\n});\n\ninterface ScopeEntry {\n  readonly kind: PasswordRateScopeKind;\n  readonly key: string;\n  readonly limit: number;\n  readonly windowMillis: number;\n}\n\nconst scopeEntries = (\n  keys: PasswordScopeKeys,\n  policy: PasswordAttemptPolicy,\n): ReadonlyArray<ScopeEntry> => {\n  const values: ScopeEntry[] = [\n    { kind: \"action\", key: keys.action, ...policy.action },\n    { kind: \"identifier\", key: keys.identifier, ...policy.identifier },\n  ];\n\n  if (keys.subject !== undefined)\n    values.push({ kind: \"subject\", key: keys.subject, ...policy.subject });\n\n  return values;\n};\n\nconst lockScope = Effect.fn(\"DrizzlePassword.lockScope\")(function* (\n  mapping: Mapping,\n  configuration: PasswordSqlConfiguration,\n  moduleId: string,\n  action: PasswordAttemptAction,\n  entry: ScopeEntry,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const query = database.insert(mapping.rateScope.table).values(\n    mapping.rateScope.encodeInsert({\n      moduleId,\n      action,\n      scopeKind: entry.kind,\n      scopeKey: entry.key,\n    }),\n  );\n\n  yield* configuration.insertIfAbsent(query, mapping.rateScope.scopeKey, entry.key);\n  const c = scopeColumns(mapping);\n\n  yield* selectRows(\n    database\n      .select()\n      .from(mapping.rateScope.table)\n      .where(\n        and(\n          eq(c.moduleId, moduleId),\n          eq(c.action, action),\n          eq(c.scopeKind, entry.kind),\n          eq(c.scopeKey, entry.key),\n        ),\n      )\n      .limit(1),\n    configuration.locking,\n  );\n});\n\nconst scopeAdmits = Effect.fn(\"DrizzlePassword.scopeAdmits\")(function* (\n  mapping: Mapping,\n  moduleId: string,\n  action: PasswordAttemptAction,\n  entry: ScopeEntry,\n  policy: PasswordAttemptPolicy,\n  identifier: LoginIdentifier,\n  nativeSubjectId: unknown | undefined,\n  now: number,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const c = chargeColumns(mapping);\n\n  const charges = yield* selectRows(\n    database\n      .select({ attemptId: c.attemptId })\n      .from(mapping.charge.table)\n      .where(\n        and(\n          eq(c.moduleId, moduleId),\n          eq(c.action, action),\n          eq(c.scopeKind, entry.kind),\n          eq(c.scopeKey, entry.key),\n          gte(c.occurredAt, mapping.encodeInstant(now - entry.windowMillis)),\n        ),\n      )\n      .limit(entry.limit),\n    true,\n  );\n\n  if (charges.length >= entry.limit) return false;\n  const a = attemptColumns(mapping);\n\n  const pendingWhere =\n    entry.kind === \"action\"\n      ? and(eq(a.moduleId, moduleId), eq(a.action, action), eq(a.state, \"pending\"))\n      : entry.kind === \"identifier\"\n        ? and(\n            eq(a.moduleId, moduleId),\n            eq(a.action, action),\n            eq(a.identifierNamespace, identifier.namespace),\n            eq(a.identifierValue, identifier.value),\n            eq(a.state, \"pending\"),\n          )\n        : and(\n            eq(a.moduleId, moduleId),\n            eq(a.action, action),\n            eq(a.subjectId, nativeSubjectId),\n            eq(a.state, \"pending\"),\n          );\n\n  const pending = yield* selectRows(\n    database\n      .select({ attemptId: a.attemptId })\n      .from(mapping.attempt.table)\n      .where(pendingWhere)\n      .limit(policy.maximumPending),\n    true,\n  );\n\n  return pending.length < policy.maximumPending;\n});\n\nconst insertCharge = Effect.fn(\"Drizzle.insertCharge\")(function* (\n  mapping: Mapping,\n  moduleId: string,\n  action: PasswordAttemptAction,\n  entry: ScopeEntry,\n  attemptId: any,\n  now: number,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  return yield* database.insert(mapping.charge.table).values(\n    mapping.charge.encodeInsert({\n      moduleId,\n      action,\n      scopeKind: entry.kind,\n      scopeKey: entry.key,\n      attemptId,\n      occurredAtMillis: now,\n      retentionUntilMillis: now + entry.windowMillis,\n    }),\n  );\n});\n\nconst owned = <A, E, R>(\n  database: Database,\n  mapping: Mapping,\n  configuration: PasswordSqlConfiguration,\n  body: Effect.Effect<A, E, R>,\n) => {\n  if (!validConstraints(mapping)) return Effect.fail(unavailable());\n\n  const run = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        body.pipe(\n          Effect.provideService(CurrentPasswordSql, transaction),\n          Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n        ),\n      ),\n    { mode: configuration.mode },\n  ).pipe(Effect.map((result) => result.value));\n\n  return configuration.coordinated !== true\n    ? Effect.gen(function* () {\n        if (yield* hasCommitScope) return yield* unavailable();\n        yield* configuration.standaloneGuard;\n\n        return yield* run;\n      })\n    : run;\n};\n\nconst safeRead = <A, E, R>(\n  database: Database,\n  configuration: PasswordSqlConfiguration,\n  body: Effect.Effect<A, E, R>,\n) =>\n  Effect.gen(function* () {\n    if (configuration.coordinated !== true) {\n      if (yield* hasCommitScope) return yield* unavailable();\n      yield* configuration.standaloneGuard;\n    }\n\n    return yield* database.transaction((transaction) =>\n      body.pipe(\n        Effect.provideService(CurrentPasswordSql, transaction),\n        Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase),\n      ),\n    );\n  });\n\nconst proofCompletionMatchesPassword = (\n  input: PasswordMutationInput & { readonly completion: ProofCompletionPlan },\n) => {\n  const completion = input.completion.input;\n  const binding = completion.binding;\n\n  if (\n    completion.moduleId !== `${input.moduleId}/reset` ||\n    completion.purpose !== \"password-reset\" ||\n    binding._tag !== \"Subject\" ||\n    input.credential === undefined ||\n    binding.revision.subjectId !== input.expectedRevision.subjectId ||\n    binding.revision.securityRevision !== input.expectedRevision.securityRevision ||\n    !sameIdentifier(binding.identifier, input.credential.identifier)\n  )\n    return false;\n\n  const expected = [...input.expectedRevision.credentials].sort((left, right) =>\n    left.credentialId.localeCompare(right.credentialId),\n  );\n\n  const actual = [...binding.revision.credentials].sort((left, right) =>\n    left.credentialId.localeCompare(right.credentialId),\n  );\n\n  return (\n    expected.length === actual.length &&\n    expected.every(\n      (item, index) =>\n        item.credentialId === actual[index]!.credentialId &&\n        item.revision === actual[index]!.revision,\n    )\n  );\n};\n\nconst probeProofCompletion = Effect.fn(\"Drizzle.probeProofCompletion\")(function* (\n  configuration: PasswordSqlConfiguration,\n  input: ProofCompletionInput,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  if (configuration.proof === undefined) return yield* Effect.fail(unavailable());\n  const validProbe = { _tag: \"PasswordProofCompletionValid\" } as const;\n\n  const plan: ProofCompletionPlan = {\n    input,\n    prepare: (decision, journal, project) => journal.prepare(project(decision)),\n  };\n\n  const probe = coordinateCommit(\n    () =>\n      database.transaction((transaction) =>\n        completeProofPlanIn(\n          configuration.proof!.mapping,\n          configuration.proof!.configuration,\n          plan,\n          Effect.fail(validProbe),\n          () => false,\n        ).pipe(Effect.provideService(CurrentProofSql, transaction as unknown as ProofSqlDatabase)),\n      ),\n    { mode: configuration.mode },\n  );\n\n  if (configuration.coordinated === true || (yield* hasCommitScope)) return yield* unavailable();\n  yield* configuration.standaloneGuard;\n\n  return yield* probe.pipe(\n    Effect.as(false),\n    Effect.catchCause((cause) => {\n      const reason = cause.reasons[0];\n\n      return cause.reasons.length === 1 &&\n        reason !== undefined &&\n        Cause.isFailReason(reason) &&\n        reason.error === validProbe\n        ? Effect.succeed(true)\n        : Effect.failCause(cause);\n    }),\n  );\n});\n\nconst validateMutationAuthority = Effect.fn(\"DrizzlePassword.validateMutationAuthority\")(function* (\n  mapping: Mapping,\n  configuration: PasswordSqlConfiguration,\n  input: PasswordMutationInput,\n  action: PasswordAction,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const locked = yield* lockSubject(\n    mapping,\n    input.expectedRevision.subjectId,\n    configuration.locking,\n  );\n\n  const row = locked.row;\n\n  if (\n    row === undefined ||\n    !mapping.subject.isActiveStatus(row[mapping.subject.status]) ||\n    row[mapping.subject.securityRevision] !== input.expectedRevision.securityRevision\n  )\n    return undefined;\n  if (\n    input.authorization.challenge.moduleId !== input.moduleId ||\n    input.authorization.challenge.action !== action ||\n    input.authorization.challenge.commandId !== input.commandId ||\n    input.authorization.challenge.revision.subjectId !== input.expectedRevision.subjectId ||\n    input.authorization.challenge.revision.securityRevision !==\n      input.expectedRevision.securityRevision ||\n    (input.authorization.evidence.flowId as string) !== (input.commandId as string) ||\n    input.authorization.evidence.bindingDigest !== input.authorization.challenge.bindingDigest ||\n    input.authorization.evidence.revision.subjectId !== input.expectedRevision.subjectId ||\n    input.authorization.evidence.revision.securityRevision !==\n      input.expectedRevision.securityRevision ||\n    (action === \"add-password\" &&\n      (input.credential !== undefined ||\n        input.authorization.challenge.targetCredentialId !== undefined))\n  )\n    return undefined;\n  if (\n    input.expectedRevision.credentials.some(\n      (expected) =>\n        !input.authorization.evidence.revision.credentials.some(\n          (actual) =>\n            actual.credentialId === expected.credentialId && actual.revision === expected.revision,\n        ),\n    )\n  )\n    return undefined;\n  if (input.credential !== undefined) {\n    const identifier = (yield* lockIdentifier(\n      mapping,\n      input.credential.identifier,\n      configuration.locking,\n    ))[0];\n\n    if (\n      identifier === undefined ||\n      !mapping.identifier.isCurrent(identifier) ||\n      !mapping.subjectId.equals(identifier[mapping.identifier.subjectId], locked.nativeSubjectId) ||\n      identifier[mapping.identifier.bindingRevision] !== input.credential.identifierBindingRevision\n    )\n      return undefined;\n  }\n\n  const allExpected = [\n    ...input.expectedRevision.credentials,\n    ...input.authorization.evidence.revision.credentials,\n  ];\n\n  const expected = [...new Map(allExpected.map((item) => [item.credentialId, item])).values()].sort(\n    (left, right) => left.credentialId.localeCompare(right.credentialId),\n  );\n\n  const ac = authorityCredentialColumns(mapping);\n\n  const credentialRows =\n    expected.length === 0\n      ? []\n      : yield* selectRows(\n          database\n            .select()\n            .from(mapping.authorityCredential.table)\n            .where(\n              and(\n                eq(ac.subjectId, locked.nativeSubjectId),\n                inArray(\n                  ac.credentialId,\n                  expected.map((item) => item.credentialId),\n                ),\n              ),\n            )\n            .orderBy(ac.credentialId),\n          configuration.locking,\n        );\n\n  if (credentialRows.length !== expected.length) return undefined;\n  for (let index = 0; index < credentialRows.length; index++) {\n    const actual = credentialRows[index]!;\n    const wanted = expected[index]!;\n\n    if (\n      actual[mapping.authorityCredential.credentialId] !== wanted.credentialId ||\n      actual[mapping.authorityCredential.revision] !== wanted.revision ||\n      (mapping.authorityCredential.status !== undefined &&\n        mapping.authorityCredential.isActiveStatus?.(actual[mapping.authorityCredential.status]) !==\n          true)\n    )\n      return undefined;\n  }\n  if (input.credential !== undefined) {\n    const identifier = (yield* lockIdentifier(mapping, input.credential.identifier, false))[0];\n\n    const credential = (yield* readPasswordCredential(\n      mapping,\n      input.moduleId,\n      locked.nativeSubjectId,\n      configuration.locking,\n    ))[0];\n\n    if (identifier === undefined || credential === undefined) return undefined;\n\n    const snapshot = yield* mapping.credential.decode({\n      moduleId: input.moduleId,\n      subject: row,\n      identifier,\n      credential,\n    });\n\n    if (!sameCredentialSnapshot(snapshot, input.credential)) return undefined;\n  }\n  const currentRequirement = yield* mapping.subject.decodeActionRequirement(row, action);\n  const now = yield* nowMillis;\n\n  if (\n    !evidenceSatisfiedAt(input.authorization.evidence, input.authorization.requirement, now) ||\n    !evidenceSatisfiedAt(input.authorization.evidence, currentRequirement, now)\n  )\n    return undefined;\n  if (\n    input.invalidation.existingSessions === \"immediate\" &&\n    mapping.sessionInvalidation !== \"same-authority-immediate\"\n  )\n    return undefined;\n\n  return { ...locked, now };\n});\n\nconst commandExists = Effect.fn(\"Drizzle.commandExists\")(function* (\n  mapping: Mapping,\n  moduleId: string,\n  commandId: string,\n  locking: boolean,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const c = commandColumns(mapping);\n\n  return yield* selectRows(\n    database\n      .select()\n      .from(mapping.command.table)\n      .where(and(eq(c.moduleId, moduleId), eq(c.commandId, commandId)))\n      .limit(1),\n    locking,\n  );\n});\n\nconst insertCommand = Effect.fn(\"Drizzle.insertCommand\")(function* (\n  mapping: Mapping,\n  input: PasswordMutationInput,\n  action: PasswordAction,\n  now: number,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  return yield* database.insert(mapping.command.table).values(\n    mapping.command.encodeInsert({\n      moduleId: input.moduleId,\n      commandId: input.commandId,\n      action,\n      bindingDigest: input.authorization.challenge.bindingDigest,\n      decision: \"changed\",\n      retentionUntilMillis: now + mapping.commandRetentionMillis,\n    }),\n  );\n});\n\nconst mutationPostconditions = Effect.fn(\"DrizzlePassword.mutationPostconditions\")(function* (\n  mapping: Mapping,\n  input: PasswordMutationInput,\n  nativeSubjectId: unknown,\n  subject: any,\n  authorityCredential: any,\n  now: number,\n) {\n  if (\n    subject === undefined ||\n    !mapping.subject.isActiveStatus(subject[mapping.subject.status]) ||\n    authorityCredential === undefined ||\n    (mapping.authorityCredential.status !== undefined &&\n      mapping.authorityCredential.isActiveStatus?.(\n        authorityCredential[mapping.authorityCredential.status],\n      ) !== true)\n  )\n    return false;\n  if (input.credential !== undefined) {\n    const identifier = (yield* lockIdentifier(mapping, input.credential.identifier, false))[0];\n\n    if (\n      identifier === undefined ||\n      !mapping.identifier.isCurrent(identifier) ||\n      !mapping.subjectId.equals(identifier[mapping.identifier.subjectId], nativeSubjectId) ||\n      identifier[mapping.identifier.bindingRevision] !== input.credential.identifierBindingRevision\n    )\n      return false;\n\n    const credential = (yield* readPasswordCredential(\n      mapping,\n      input.moduleId,\n      nativeSubjectId,\n      false,\n    ))[0];\n\n    if (credential === undefined) return false;\n\n    const decoded = yield* mapping.credential.decode({\n      moduleId: input.moduleId,\n      subject,\n      identifier,\n      credential,\n    });\n\n    if (decoded.identifierVerifiedAtMillis !== input.credential.identifierVerifiedAtMillis)\n      return false;\n  }\n  const rows = yield* commandExists(mapping, input.moduleId, input.commandId, false);\n  const row = rows[0];\n\n  return (\n    rows.length === 1 &&\n    row[mapping.command.action] === input.authorization.challenge.action &&\n    row[mapping.command.bindingDigest] === input.authorization.challenge.bindingDigest &&\n    row[mapping.command.decision] === \"changed\" &&\n    (yield* mapping.decodeInstant(row[mapping.command.retentionUntil])) ===\n      now + mapping.commandRetentionMillis\n  );\n});\n\nconst addPasswordIn = Effect.fn(\"DrizzlePassword.addPasswordIn\")(function* (\n  mapping: Mapping,\n  configuration: PasswordSqlConfiguration,\n  input: PasswordMutationInput,\n  revisions: {\n    readonly credentialId: string;\n    readonly credentialRevision: SecurityRevision;\n    readonly verifierVersion: SecurityRevision;\n    readonly nextSecurityRevision: SecurityRevision;\n  },\n  commandNow?: number,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const { credentialId, credentialRevision, verifierVersion, nextSecurityRevision } = revisions;\n\n  const authority = yield* validateMutationAuthority(mapping, configuration, input, \"add-password\");\n\n  if (authority === undefined) return false;\n  if ((yield* commandExists(mapping, input.moduleId, input.commandId, true)).length) return false;\n  if (\n    (yield* readPasswordCredential(mapping, input.moduleId, authority.nativeSubjectId, true)).length\n  )\n    return false;\n\n  yield* database.insert(mapping.credential.table).values(\n    mapping.credential.encodeInsert({\n      moduleId: input.moduleId,\n      subjectId: authority.nativeSubjectId,\n      credentialId,\n      credentialRevision,\n      verifierVersion,\n      replacement: input.replacement,\n    }),\n  );\n  yield* database.insert(mapping.authorityCredential.table).values(\n    mapping.authorityCredential.encodeInsert({\n      subjectId: authority.nativeSubjectId,\n      credentialId,\n      revision: credentialRevision,\n    }),\n  );\n  yield* database\n    .update(mapping.subject.table)\n    .set(updateValues([[mapping.subject.securityRevision, nextSecurityRevision]]))\n    .where(\n      and(\n        eq(subjectColumns(mapping).id, authority.nativeSubjectId),\n        eq(subjectColumns(mapping).securityRevision, input.expectedRevision.securityRevision),\n      ),\n    );\n  yield* insertCommand(mapping, input, \"add-password\", commandNow ?? authority.now);\n\n  const inserted = (yield* readPasswordCredential(\n    mapping,\n    input.moduleId,\n    authority.nativeSubjectId,\n    false,\n  ))[0];\n\n  const authorityInserted = (yield* database\n    .select()\n    .from(mapping.authorityCredential.table)\n    .where(\n      and(\n        eq(authorityCredentialColumns(mapping).subjectId, authority.nativeSubjectId),\n        eq(authorityCredentialColumns(mapping).credentialId, credentialId),\n        eq(authorityCredentialColumns(mapping).revision, credentialRevision),\n      ),\n    )\n    .limit(1))[0];\n\n  const subjectUpdated = (yield* database\n    .select()\n    .from(mapping.subject.table)\n    .where(\n      and(\n        eq(subjectColumns(mapping).id, authority.nativeSubjectId),\n        eq(subjectColumns(mapping).securityRevision, nextSecurityRevision),\n      ),\n    )\n    .limit(1))[0];\n\n  if (\n    inserted === undefined ||\n    inserted[mapping.credential.credentialId] !== credentialId ||\n    inserted[mapping.credential.credentialRevision] !== credentialRevision ||\n    inserted[mapping.credential.verifierVersion] !== verifierVersion ||\n    inserted[mapping.credential.verifier] !== Redacted.value(input.replacement.verifier) ||\n    inserted[mapping.credential.normalization] !== input.replacement.normalization ||\n    authorityInserted === undefined ||\n    subjectUpdated === undefined ||\n    !(yield* mutationPostconditions(\n      mapping,\n      input,\n      authority.nativeSubjectId,\n      subjectUpdated,\n      authorityInserted,\n      commandNow ?? authority.now,\n    ))\n  )\n    return yield* unavailable();\n\n  return true;\n});\n\nexport const makeSqlPasswordPersistence = Effect.fn(\"makeSqlPasswordPersistence\")(function* (\n  database: Database,\n  mapping: Mapping,\n  configuration: PasswordSqlConfiguration,\n): Effect.fn.Return<PasswordPersistence[\"Service\"], never, LifecycleHooks> {\n  const hooks = yield* LifecycleHooks;\n\n  return PasswordPersistence.of({\n    admitAttempt: (input, prepare) =>\n      Effect.gen(function* () {\n        const attemptId = yield* allocate(\n          configuration.mode,\n          mapping.allocateAttemptId,\n          mapping.allocateAttemptIdSync,\n        );\n\n        return yield* owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentPasswordSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const resolved = yield* resolveCredential(\n              mapping,\n              input.moduleId,\n              input.identifier,\n              input.subjectId,\n              configuration.locking,\n            );\n\n            const keys = mapping.scopeKeys({\n              moduleId: input.moduleId,\n              action: input.action,\n              identifier: input.identifier,\n              ...(resolved === undefined\n                ? {}\n                : { subjectId: resolved.snapshot?.revision.subjectId }),\n            });\n\n            const scopes = scopeEntries(keys, input.policy);\n            const admitted: ScopeEntry[] = [];\n\n            yield* lockScope(mapping, configuration, input.moduleId, input.action, scopes[0]!);\n            let currentNow = yield* nowMillis;\n\n            if (\n              yield* scopeAdmits(\n                mapping,\n                input.moduleId,\n                input.action,\n                scopes[0]!,\n                input.policy,\n                input.identifier,\n                resolved?.nativeSubjectId,\n                currentNow,\n              )\n            )\n              admitted.push(scopes[0]!);\n            if (admitted.length === 1) {\n              for (const entry of scopes.slice(1)) {\n                yield* lockScope(mapping, configuration, input.moduleId, input.action, entry);\n                currentNow = yield* nowMillis;\n                if (\n                  yield* scopeAdmits(\n                    mapping,\n                    input.moduleId,\n                    input.action,\n                    entry,\n                    input.policy,\n                    input.identifier,\n                    resolved?.nativeSubjectId,\n                    currentNow,\n                  )\n                )\n                  admitted.push(entry);\n              }\n            }\n            const now = yield* nowMillis;\n\n            for (const entry of admitted)\n              yield* insertCharge(mapping, input.moduleId, input.action, entry, attemptId, now);\n            if (admitted.length !== scopes.length)\n              return prepare({ _tag: \"Denied\" as const }, journal);\n            const snapshot = resolved?.snapshot;\n            const deadline = now + input.policy.attemptLifetimeMillis;\n\n            const retentionUntil = Math.max(\n              deadline,\n              ...scopes.map((entry) => now + entry.windowMillis),\n            );\n\n            yield* transaction.insert(mapping.attempt.table).values(\n              mapping.attempt.encodeInsert(\n                {\n                  moduleId: input.moduleId,\n                  action: input.action,\n                  attemptId,\n                  identifier: input.identifier,\n                  ...(snapshot === undefined\n                    ? {}\n                    : {\n                        subjectId: snapshot.revision.subjectId,\n                        credentialId: snapshot.credentialId,\n                        securityRevision: snapshot.revision.securityRevision,\n                        credentialRevision: snapshot.credentialRevision,\n                        verifierVersion: snapshot.verifierVersion,\n                        identifierBindingRevision: snapshot.identifierBindingRevision,\n                      }),\n                  admittedAtMillis: now,\n                  deadlineMillis: deadline,\n                  retentionUntilMillis: retentionUntil,\n                },\n                {\n                  ...(resolved?.nativeSubjectId === undefined\n                    ? {}\n                    : { nativeSubjectId: resolved.nativeSubjectId }),\n                  state: \"pending\",\n                },\n              ),\n            );\n\n            return prepare(\n              {\n                _tag: \"Admitted\" as const,\n                attemptId,\n                ...(snapshot === undefined ? {} : { credential: snapshot }),\n              },\n              journal,\n            );\n          }),\n        );\n      }).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    settleAttempt: (uncaptured, prepare) =>\n      Effect.gen(function* () {\n        const captured =\n          uncaptured.captured === undefined\n            ? undefined\n            : yield* snapshotPasswordCredential(uncaptured.captured);\n\n        const input = { ...uncaptured, ...(captured === undefined ? {} : { captured }) };\n\n        return yield* owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const transaction = yield* CurrentPasswordSql;\n            const journal = yield* CurrentCommitJournal;\n\n            const c = attemptColumns(mapping);\n\n            const discovered = yield* selectRows(\n              transaction\n                .select()\n                .from(mapping.attempt.table)\n                .where(and(eq(c.moduleId, input.moduleId), eq(c.attemptId, input.attemptId)))\n                .limit(1),\n              false,\n            );\n\n            let row = discovered[0];\n\n            if (row === undefined || row[mapping.attempt.state] !== \"pending\")\n              return prepare(\"rejected\", journal);\n            let decision: PasswordAttemptDecision = \"rejected\";\n            let current: any;\n            let attemptMatches = false;\n\n            if (input.outcome === \"verified\" && input.captured !== undefined) {\n              current = yield* resolveCredential(\n                mapping,\n                input.moduleId,\n                input.captured.identifier,\n                input.captured.revision.subjectId,\n                configuration.locking,\n              );\n              attemptMatches =\n                input.captured.moduleId === input.moduleId &&\n                row[mapping.attempt.identifierNamespace] === input.captured.identifier.namespace &&\n                row[mapping.attempt.identifierValue] === input.captured.identifier.value &&\n                mapping.subjectId.equals(\n                  row[mapping.attempt.subjectId],\n                  current?.nativeSubjectId,\n                ) &&\n                row[mapping.attempt.credentialId] === input.captured.credentialId &&\n                row[mapping.attempt.securityRevision] ===\n                  input.captured.revision.securityRevision &&\n                row[mapping.attempt.credentialRevision] === input.captured.credentialRevision &&\n                row[mapping.attempt.verifierVersion] === input.captured.verifierVersion &&\n                row[mapping.attempt.identifierBindingRevision] ===\n                  input.captured.identifierBindingRevision;\n            }\n            row = (yield* selectRows(\n              transaction\n                .select()\n                .from(mapping.attempt.table)\n                .where(and(eq(c.moduleId, input.moduleId), eq(c.attemptId, input.attemptId)))\n                .limit(1),\n              configuration.locking,\n            ))[0];\n            if (row === undefined || row[mapping.attempt.state] !== \"pending\")\n              return prepare(\"rejected\", journal);\n            const now = yield* nowMillis;\n            const deadline = yield* mapping.decodeInstant(row[mapping.attempt.deadline]);\n\n            if (\n              attemptMatches &&\n              current?.snapshot !== undefined &&\n              input.captured !== undefined &&\n              deadline > now &&\n              sameCredentialSnapshot(current.snapshot, input.captured)\n            )\n              decision = \"verified\";\n            const prepared = prepare(decision, journal);\n\n            yield* transaction\n              .update(mapping.attempt.table)\n              .set(updateValues([[mapping.attempt.state, decision]]))\n              .where(\n                and(\n                  eq(c.moduleId, input.moduleId),\n                  eq(c.attemptId, input.attemptId),\n                  eq(c.state, \"pending\"),\n                ),\n              );\n            if (\n              decision === \"verified\" &&\n              input.rehash !== undefined &&\n              current?.snapshot !== undefined\n            ) {\n              const cc = credentialColumns(mapping);\n\n              const nextVersion = yield* allocate(\n                configuration.mode,\n                mapping.allocateRevision,\n                mapping.allocateRevisionSync,\n              );\n\n              yield* transaction\n                .update(mapping.credential.table)\n                .set(mapping.credential.encodeVerifier(input.rehash.nextVerifier, nextVersion))\n                .where(\n                  and(\n                    eq(cc.moduleId, input.moduleId),\n                    eq(cc.subjectId, current.nativeSubjectId),\n                    eq(cc.credentialId, current.snapshot.credentialId),\n                    eq(cc.credentialRevision, current.snapshot.credentialRevision),\n                    eq(cc.verifierVersion, input.rehash.expectedVersion),\n                    eq(cc.verifier, Redacted.value(input.rehash.expectedVerifier)),\n                  ),\n                );\n            }\n\n            return prepared;\n          }),\n        );\n      }).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    readForSubject: (input) =>\n      safeRead(\n        database,\n        configuration,\n        Effect.gen(function* () {\n          const transaction = yield* CurrentPasswordSql;\n\n          const locked = yield* lockSubject(mapping, input.subjectId, false);\n\n          if (\n            locked.row === undefined ||\n            !mapping.subject.isActiveStatus(locked.row[mapping.subject.status])\n          )\n            return Option.none();\n\n          const credential = (yield* readPasswordCredential(\n            mapping,\n            input.moduleId,\n            locked.nativeSubjectId,\n            false,\n          ))[0];\n\n          if (credential === undefined) return Option.none();\n          const ic = identifierColumns(mapping);\n\n          const identifiers = yield* transaction\n            .select()\n            .from(mapping.identifier.table)\n            .where(eq(ic.subjectId, locked.nativeSubjectId));\n\n          const identifier = identifiers.find((row: any) => mapping.identifier.isCurrent(row));\n\n          if (identifier === undefined) return Option.none();\n\n          const snapshot = yield* mapping.credential\n            .decode({\n              moduleId: input.moduleId,\n              subject: locked.row,\n              identifier,\n              credential,\n            })\n            .pipe(Effect.flatMap(snapshotPasswordCredential));\n\n          return Option.some(snapshot);\n        }),\n      ).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    recoveryTarget: (input) =>\n      safeRead(\n        database,\n        configuration,\n        Effect.gen(function* () {\n          const resolved = yield* resolveCredential(\n            mapping,\n            input.moduleId,\n            input.identifier,\n            undefined,\n            false,\n          );\n\n          return resolved?.snapshot === undefined ||\n            resolved.snapshot.identifierVerifiedAtMillis === undefined\n            ? Option.none()\n            : Option.some(resolved.snapshot);\n        }),\n      ).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    addIfAbsent: (uncaptured, prepare) =>\n      Effect.gen(function* () {\n        const input = yield* snapshotMutationInput(uncaptured);\n\n        const credentialId = yield* allocate(\n          configuration.mode,\n          mapping.allocateCredentialId,\n          mapping.allocateCredentialIdSync,\n        );\n\n        const credentialRevision = yield* allocate(\n          configuration.mode,\n          mapping.allocateRevision,\n          mapping.allocateRevisionSync,\n        );\n\n        const verifierVersion = yield* allocate(\n          configuration.mode,\n          mapping.allocateRevision,\n          mapping.allocateRevisionSync,\n        );\n\n        const nextSecurityRevision = yield* allocateNextSecurityRevision(\n          mapping,\n          configuration.mode,\n          input.expectedRevision.securityRevision,\n        );\n\n        if (nextSecurityRevision === input.expectedRevision.securityRevision)\n          return yield* unavailable();\n\n        return yield* owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            const journal = yield* CurrentCommitJournal;\n\n            const changed = yield* addPasswordIn(mapping, configuration, input, {\n              credentialId,\n              credentialRevision,\n              verifierVersion,\n              nextSecurityRevision,\n            });\n\n            return prepare(changed ? \"changed\" : \"rejected\", journal);\n          }),\n        );\n      }).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    replaceIfCurrent: (uncaptured, prepare) =>\n      Effect.gen(function* () {\n        const input = yield* snapshotMutationInput(uncaptured);\n\n        const credentialRevision = yield* allocate(\n          configuration.mode,\n          mapping.allocateRevision,\n          mapping.allocateRevisionSync,\n        );\n\n        const verifierVersion = yield* allocate(\n          configuration.mode,\n          mapping.allocateRevision,\n          mapping.allocateRevisionSync,\n        );\n\n        const nextSecurityRevision = yield* allocateNextSecurityRevision(\n          mapping,\n          configuration.mode,\n          input.expectedRevision.securityRevision,\n        );\n\n        if (\n          nextSecurityRevision === input.expectedRevision.securityRevision ||\n          (input.credential !== undefined &&\n            credentialRevision === input.credential.credentialRevision)\n        )\n          return yield* unavailable();\n\n        return yield* owned(\n          database,\n          mapping,\n          configuration,\n          Effect.gen(function* () {\n            return yield* replaceIn(\n              mapping,\n              configuration,\n              input,\n              \"change-password\",\n              { credentialRevision, verifierVersion, nextSecurityRevision },\n              prepare,\n            );\n          }),\n        );\n      }).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    checkReset: (input) =>\n      (configuration.proof === undefined\n        ? Effect.fail(unavailable())\n        : Effect.gen(function* () {\n            if (\n              input.moduleId.length <= \"/reset\".length ||\n              !input.moduleId.endsWith(\"/reset\") ||\n              input.purpose !== \"password-reset\" ||\n              input.binding._tag !== \"Subject\"\n            )\n              return false;\n            const binding = input.binding;\n            const passwordModuleId = input.moduleId.slice(0, -\"/reset\".length);\n\n            const current = yield* safeRead(\n              database,\n              configuration,\n              Effect.gen(function* () {\n                const resolved = yield* resolveCredential(\n                  mapping,\n                  passwordModuleId,\n                  binding.identifier,\n                  binding.revision.subjectId,\n                  false,\n                );\n\n                return (\n                  resolved?.snapshot !== undefined &&\n                  resolved.snapshot.revision.securityRevision ===\n                    binding.revision.securityRevision &&\n                  binding.revision.credentials.every((item) =>\n                    resolved.snapshot!.revision.credentials.some(\n                      (actual) =>\n                        actual.credentialId === item.credentialId &&\n                        actual.revision === item.revision,\n                    ),\n                  )\n                );\n              }),\n            );\n\n            return current ? yield* probeProofCompletion(configuration, input) : false;\n          })\n      ).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    resetWithProof: (uncaptured, prepare) =>\n      (configuration.proof === undefined\n        ? Effect.fail(unavailable())\n        : Effect.gen(function* () {\n            const input = Object.freeze({\n              ...(yield* snapshotMutationInput(uncaptured)),\n              completion: uncaptured.completion,\n            });\n\n            const credentialRevision = yield* allocate(\n              configuration.mode,\n              mapping.allocateRevision,\n              mapping.allocateRevisionSync,\n            );\n\n            const verifierVersion = yield* allocate(\n              configuration.mode,\n              mapping.allocateRevision,\n              mapping.allocateRevisionSync,\n            );\n\n            const nextSecurityRevision = yield* allocateNextSecurityRevision(\n              mapping,\n              configuration.mode,\n              input.expectedRevision.securityRevision,\n            );\n\n            if (\n              nextSecurityRevision === input.expectedRevision.securityRevision ||\n              (input.credential !== undefined &&\n                credentialRevision === input.credential.credentialRevision)\n            )\n              return yield* unavailable();\n\n            return yield* owned(\n              database,\n              mapping,\n              configuration,\n              Effect.gen(function* () {\n                const journal = yield* CurrentCommitJournal;\n\n                if (!proofCompletionMatchesPassword(input)) return prepare(\"rejected\", journal);\n\n                const authority = yield* validateMutationAuthority(\n                  mapping,\n                  configuration,\n                  input,\n                  \"reset-password\",\n                );\n\n                if (authority === undefined) return prepare(\"rejected\", journal);\n                if ((yield* commandExists(mapping, input.moduleId, input.commandId, true)).length)\n                  return prepare(\"rejected\", journal);\n\n                const current = yield* currentExpectedCredential(\n                  mapping,\n                  input,\n                  authority.nativeSubjectId,\n                );\n\n                if (!current) return prepare(\"rejected\", journal);\n                let passwordReceipt: PreparedCommit<any> | undefined;\n\n                yield* completeProofPlanIn(\n                  configuration.proof!.mapping,\n                  configuration.proof!.configuration,\n                  input.completion,\n                  Effect.gen(function* () {\n                    return yield* writeReplacement(\n                      mapping,\n                      input,\n                      authority.nativeSubjectId,\n                      { credentialRevision, verifierVersion, nextSecurityRevision },\n                      authority.now,\n                    );\n                  }),\n                  (decision) => {\n                    passwordReceipt = prepare(\n                      decision === \"completed\" ? \"changed\" : \"rejected\",\n                      journal,\n                    );\n\n                    return decision;\n                  },\n                );\n\n                return passwordReceipt ?? prepare(\"rejected\", journal);\n              }),\n            );\n          })\n      ).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n    cleanupAttempts: (input, prepare) =>\n      owned(\n        database,\n        mapping,\n        configuration,\n        Effect.gen(function* () {\n          const transaction = yield* CurrentPasswordSql;\n          const journal = yield* CurrentCommitJournal;\n\n          const now = yield* nowMillis;\n          const nativeNow = mapping.encodeInstant(now);\n          let remaining = input.limit;\n          let hasMore = false;\n          const a = attemptColumns(mapping);\n          const c = chargeColumns(mapping);\n\n          const attempts = yield* selectRows(\n            transaction\n              .select({ attemptId: a.attemptId })\n              .from(mapping.attempt.table)\n              .where(and(eq(a.moduleId, input.moduleId), lte(a.retentionUntil, nativeNow)))\n              .limit(remaining + 1),\n            false,\n          );\n\n          if (attempts.length > remaining) hasMore = true;\n          const attemptCandidates = attempts.slice(0, remaining);\n\n          remaining -= attemptCandidates.length;\n\n          const charges = yield* selectRows(\n            transaction\n              .select({\n                action: c.action,\n                scopeKind: c.scopeKind,\n                scopeKey: c.scopeKey,\n                attemptId: c.attemptId,\n              })\n              .from(mapping.charge.table)\n              .where(and(eq(c.moduleId, input.moduleId), lte(c.retentionUntil, nativeNow)))\n              .limit(remaining + 1),\n            false,\n          );\n\n          if (charges.length > remaining) hasMore = true;\n          const chargeCandidates = charges.slice(0, remaining);\n\n          remaining -= chargeCandidates.length;\n          const sc = scopeColumns(mapping);\n\n          const scopes = yield* selectRows(\n            transaction\n              .select({ action: sc.action, scopeKind: sc.scopeKind, scopeKey: sc.scopeKey })\n              .from(mapping.rateScope.table)\n              .where(\n                and(\n                  eq(sc.moduleId, input.moduleId),\n                  notExists(\n                    transaction\n                      .select({ one: sql`1` })\n                      .from(mapping.charge.table)\n                      .where(\n                        and(\n                          eq(c.moduleId, sc.moduleId),\n                          eq(c.action, sc.action),\n                          eq(c.scopeKind, sc.scopeKind),\n                          eq(c.scopeKey, sc.scopeKey),\n                        ),\n                      ),\n                  ),\n                ),\n              )\n              .limit(remaining + 1),\n            remaining === 0 ? false : configuration.locking,\n          );\n\n          if (scopes.length > remaining) hasMore = true;\n          const selectedScopes = scopes.slice(0, remaining);\n\n          remaining -= selectedScopes.length;\n          const selectedCharges: typeof chargeCandidates = [];\n\n          for (const candidate of chargeCandidates) {\n            const locked = yield* selectRows(\n              transaction\n                .select({\n                  action: c.action,\n                  scopeKind: c.scopeKind,\n                  scopeKey: c.scopeKey,\n                  attemptId: c.attemptId,\n                })\n                .from(mapping.charge.table)\n                .where(\n                  and(\n                    eq(c.moduleId, input.moduleId),\n                    eq(c.action, candidate.action),\n                    eq(c.scopeKind, candidate.scopeKind),\n                    eq(c.scopeKey, candidate.scopeKey),\n                    eq(c.attemptId, candidate.attemptId),\n                    lte(c.retentionUntil, nativeNow),\n                  ),\n                )\n                .limit(1),\n              configuration.locking,\n            );\n\n            if (locked[0] !== undefined) selectedCharges.push(locked[0] as any);\n          }\n          const selectedAttempts: typeof attemptCandidates = [];\n\n          for (const candidate of attemptCandidates) {\n            const locked = yield* selectRows(\n              transaction\n                .select({ attemptId: a.attemptId })\n                .from(mapping.attempt.table)\n                .where(\n                  and(\n                    eq(a.moduleId, input.moduleId),\n                    eq(a.attemptId, candidate.attemptId),\n                    lte(a.retentionUntil, nativeNow),\n                  ),\n                )\n                .limit(1),\n              configuration.locking,\n            );\n\n            if (locked[0] !== undefined) selectedAttempts.push(locked[0] as any);\n          }\n\n          const prepared = prepare(\n            {\n              removed: selectedAttempts.length + selectedCharges.length + selectedScopes.length,\n              hasMore,\n            },\n            journal,\n          );\n\n          for (const row of selectedCharges)\n            yield* transaction\n              .delete(mapping.charge.table)\n              .where(\n                and(\n                  eq(c.moduleId, input.moduleId),\n                  eq(c.action, row.action),\n                  eq(c.scopeKind, row.scopeKind),\n                  eq(c.scopeKey, row.scopeKey),\n                  eq(c.attemptId, row.attemptId),\n                  lte(c.retentionUntil, nativeNow),\n                ),\n              );\n          if (selectedAttempts.length > 0)\n            yield* transaction.delete(mapping.attempt.table).where(\n              and(\n                eq(a.moduleId, input.moduleId),\n                inArray(\n                  a.attemptId,\n                  selectedAttempts.map((row: any) => row.attemptId),\n                ),\n                lte(a.retentionUntil, nativeNow),\n              ),\n            );\n          for (const row of selectedScopes)\n            yield* transaction.delete(mapping.rateScope.table).where(\n              and(\n                eq(sc.moduleId, input.moduleId),\n                eq(sc.action, row.action),\n                eq(sc.scopeKind, row.scopeKind),\n                eq(sc.scopeKey, row.scopeKey),\n                notExists(\n                  transaction\n                    .select({ one: sql`1` })\n                    .from(mapping.charge.table)\n                    .where(\n                      and(\n                        eq(c.moduleId, sc.moduleId),\n                        eq(c.action, sc.action),\n                        eq(c.scopeKind, sc.scopeKind),\n                        eq(c.scopeKey, sc.scopeKey),\n                      ),\n                    ),\n                ),\n              ),\n            );\n\n          return prepared;\n        }),\n      ).pipe(\n        Effect.provideService(CurrentPasswordSql, database),\n        Effect.provideService(LifecycleHooks, hooks),\n        translateFailure,\n      ),\n  });\n});\n\nconst currentExpectedCredential = Effect.fn(\"DrizzlePassword.currentExpectedCredential\")(function* (\n  mapping: Mapping,\n  input: PasswordMutationInput,\n  nativeSubjectId: unknown,\n) {\n  if (input.credential === undefined) return false;\n  const row = (yield* readPasswordCredential(mapping, input.moduleId, nativeSubjectId, true))[0];\n\n  if (row === undefined) return false;\n\n  return (\n    row[mapping.credential.credentialId] === input.credential.credentialId &&\n    row[mapping.credential.credentialRevision] === input.credential.credentialRevision &&\n    row[mapping.credential.verifierVersion] === input.credential.verifierVersion &&\n    row[mapping.credential.verifier] === Redacted.value(input.credential.verifier) &&\n    row[mapping.credential.normalization] === input.credential.normalization &&\n    input.authorization.challenge.targetCredentialId === input.credential.credentialId\n  );\n});\n\nconst checkMutationApplied = Effect.fn(\"DrizzlePassword.checkMutationApplied\")(function* (\n  mapping: Mapping,\n  input: PasswordMutationInput,\n  nativeSubjectId: unknown,\n  revisions: {\n    readonly credentialId: string;\n    readonly credentialRevision: SecurityRevision;\n    readonly verifierVersion: SecurityRevision;\n    readonly nextSecurityRevision: SecurityRevision;\n  },\n  now: number,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const c = credentialColumns(mapping),\n    s = subjectColumns(mapping);\n\n  const credential = (yield* database\n    .select()\n    .from(mapping.credential.table)\n    .where(\n      and(\n        eq(c.moduleId, input.moduleId),\n        eq(c.subjectId, nativeSubjectId),\n        eq(c.credentialId, revisions.credentialId),\n        eq(c.credentialRevision, revisions.credentialRevision),\n        eq(c.verifierVersion, revisions.verifierVersion),\n        eq(c.verifier, Redacted.value(input.replacement.verifier)),\n        eq(c.normalization, input.replacement.normalization),\n      ),\n    )\n    .limit(1))[0];\n\n  const subject = (yield* database\n    .select()\n    .from(mapping.subject.table)\n    .where(and(eq(s.id, nativeSubjectId), eq(s.securityRevision, revisions.nextSecurityRevision)))\n    .limit(1))[0];\n\n  const authorityCredential = (yield* database\n    .select()\n    .from(mapping.authorityCredential.table)\n    .where(\n      and(\n        eq(authorityCredentialColumns(mapping).subjectId, nativeSubjectId),\n        eq(authorityCredentialColumns(mapping).credentialId, revisions.credentialId),\n        eq(authorityCredentialColumns(mapping).revision, revisions.credentialRevision),\n      ),\n    )\n    .limit(1))[0];\n\n  return (\n    credential !== undefined &&\n    (yield* mutationPostconditions(\n      mapping,\n      input,\n      nativeSubjectId,\n      subject,\n      authorityCredential,\n      now,\n    ))\n  );\n});\n\nconst writeReplacement = Effect.fn(\"DrizzlePassword.writeReplacement\")(function* (\n  mapping: Mapping,\n  input: PasswordMutationInput,\n  nativeSubjectId: unknown,\n  revisions: {\n    readonly credentialRevision: SecurityRevision;\n    readonly verifierVersion: SecurityRevision;\n    readonly nextSecurityRevision: SecurityRevision;\n  },\n  now: number,\n) {\n  const database = yield* CurrentPasswordSql;\n\n  const c = credentialColumns(mapping);\n  const s = subjectColumns(mapping);\n\n  yield* database\n    .update(mapping.credential.table)\n    .set(\n      mapping.credential.encodeReplacement({\n        replacement: input.replacement,\n        credentialRevision: revisions.credentialRevision,\n        verifierVersion: revisions.verifierVersion,\n      }),\n    )\n    .where(\n      and(\n        eq(c.moduleId, input.moduleId),\n        eq(c.subjectId, nativeSubjectId),\n        eq(c.credentialId, input.credential!.credentialId),\n        eq(c.credentialRevision, input.credential!.credentialRevision),\n        eq(c.verifierVersion, input.credential!.verifierVersion),\n        eq(c.verifier, Redacted.value(input.credential!.verifier)),\n        eq(c.normalization, input.credential!.normalization),\n      ),\n    );\n  yield* database\n    .update(mapping.subject.table)\n    .set(updateValues([[mapping.subject.securityRevision, revisions.nextSecurityRevision]]))\n    .where(\n      and(\n        eq(s.id, nativeSubjectId),\n        eq(s.securityRevision, input.expectedRevision.securityRevision),\n      ),\n    );\n  yield* database\n    .update(mapping.authorityCredential.table)\n    .set(mapping.authorityCredential.encodeRevision(revisions.credentialRevision))\n    .where(\n      and(\n        eq(authorityCredentialColumns(mapping).subjectId, nativeSubjectId),\n        eq(authorityCredentialColumns(mapping).credentialId, input.credential!.credentialId),\n        eq(authorityCredentialColumns(mapping).revision, input.credential!.credentialRevision),\n      ),\n    );\n  yield* insertCommand(mapping, input, input.authorization.challenge.action, now);\n\n  return yield* checkMutationApplied(\n    mapping,\n    input,\n    nativeSubjectId,\n    {\n      ...revisions,\n      credentialId: input.credential!.credentialId,\n    },\n    now,\n  );\n});\n\nconst replaceIn = Effect.fn(\"Drizzle.replaceIn\")(function* <A>(\n  mapping: Mapping,\n  configuration: PasswordSqlConfiguration,\n  input: PasswordMutationInput,\n  action: PasswordAction,\n  revisions: {\n    readonly credentialRevision: SecurityRevision;\n    readonly verifierVersion: SecurityRevision;\n    readonly nextSecurityRevision: SecurityRevision;\n  },\n  prepare: (value: PasswordMutationDecision, journal: CommitJournal) => PreparedCommit<A>,\n) {\n  const journal = yield* CurrentCommitJournal;\n\n  const authority = yield* validateMutationAuthority(mapping, configuration, input, action);\n\n  if (authority === undefined) return prepare(\"rejected\", journal);\n  if ((yield* commandExists(mapping, input.moduleId, input.commandId, true)).length)\n    return prepare(\"rejected\", journal);\n  if (!(yield* currentExpectedCredential(mapping, input, authority.nativeSubjectId)))\n    return prepare(\"rejected\", journal);\n  const prepared = prepare(\"changed\", journal);\n\n  if (\n    !(yield* writeReplacement(mapping, input, authority.nativeSubjectId, revisions, authority.now))\n  )\n    return yield* unavailable();\n\n  return prepared;\n});\n\n/** Internal bound-owner primitives; deliberately not re-exported by driver modules. */\nexport const passwordSqlKernel = {\n  allocate,\n  allocateNextSecurityRevision,\n  owned,\n  safeRead,\n  snapshotMutationInput,\n  lockSubject,\n  lockIdentifier,\n  readPasswordCredential,\n  resolveCredential,\n  validateMutationAuthority,\n  currentExpectedCredential,\n  commandExists,\n  addPasswordIn,\n  checkMutationApplied,\n  writeReplacement,\n  evidenceSatisfiedAt,\n  sameCredentialSnapshot,\n  subjectColumns,\n  identifierColumns,\n  credentialColumns,\n  authorityCredentialColumns,\n  proofCompletionMatchesPassword,\n};\n"],"mappings":";;;;;;;;;;;;;;;AAqFA,IAAa,qBAAb,cAAwC,QAAQ,QAAiD,CAAC,CAChG,gCACF,CAAC,CAAC,CAAC;AAoBH,MAAM,oBAAoB,oBAAoB,KAAK,CAAC,CAAC;AAErD,MAAM,oBACJ,WAEA,yBACE,SACC,UACC,OAAO,GAAG,mBAAmB,CAAC,CAAC,KAAK,KACpC,OAAO,GAAG,gBAAgB,CAAC,CAAC,KAAK,KACjC,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,KAAK,OAAO,YAAY,UAAU,OAAO,UAAU,MAAM,IAAI,aAAa,YAAY,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,YAAY,SAAS,IAAI,KAAK,OAAO,IAAI,SAAS,aAAa,CAAC;AAEtE,MAAM,oBAAoB,YACxB,OAAO,QAAQ,2BAA2B,CAAC,CAAC,OACzC,CAAC,KAAK,WACL,QAAQ,YAAY,SAAqD,KAC7E;AAEF,MAAM,cAAc,OAAyB,YAC3C,WAAW,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI;AAErE,MAAM,kBAAkB,aAAsB;CAC5C,IAAI,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,EAAE;CACpD,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB;AAClF;AAEA,MAAM,qBAAqB,aAAsB;CAC/C,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,OAAO,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,KAAK;CAChE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,YAAY,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,UAAU;CAC1E,iBAAiB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;AACtF;AAEA,MAAM,qBAAqB,aAAsB;CAC/C,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;CACtE,WAAW,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,SAAS;CACxE,cAAc,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,YAAY;CAC9E,oBAAoB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,kBAAkB;CAC1F,iBAAiB,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,eAAe;CACpF,UAAU,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAAQ;CACtE,eAAe,OAAO,QAAQ,WAAW,OAAO,QAAQ,WAAW,aAAa;AAClF;AAEA,MAAM,8BAA8B,aAAsB;CACxD,WAAW,OAAO,QAAQ,oBAAoB,OAAO,QAAQ,oBAAoB,SAAS;CAC1F,cAAc,OAAO,QAAQ,oBAAoB,OAAO,QAAQ,oBAAoB,YAAY;CAChG,UAAU,OAAO,QAAQ,oBAAoB,OAAO,QAAQ,oBAAoB,QAAQ;AAC1F;AAEA,MAAM,kBAAkB,aAAsB;CAC5C,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,qBAAqB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,mBAAmB;CACtF,iBAAiB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;CAC9E,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,cAAc,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,YAAY;CACxE,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,gBAAgB;CAChF,oBAAoB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,kBAAkB;CACpF,iBAAiB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;CAC9E,2BAA2B,OACzB,QAAQ,QAAQ,OAChB,QAAQ,QAAQ,yBAClB;CACA,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,UAAU;CACpE,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;CAC5E,OAAO,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,KAAK;AAC5D;AAEA,MAAM,gBAAgB,aAAsB;CAC1C,UAAU,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,QAAQ;CACpE,QAAQ,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,MAAM;CAChE,WAAW,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,SAAS;CACtE,UAAU,OAAO,QAAQ,UAAU,OAAO,QAAQ,UAAU,QAAQ;AACtE;AAEA,MAAM,iBAAiB,aAAsB;CAC3C,UAAU,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,QAAQ;CAC9D,QAAQ,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,MAAM;CAC1D,WAAW,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,SAAS;CAChE,UAAU,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,QAAQ;CAC9D,WAAW,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,SAAS;CAChE,YAAY,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,UAAU;CAClE,gBAAgB,OAAO,QAAQ,OAAO,OAAO,QAAQ,OAAO,cAAc;AAC5E;AAEA,MAAM,kBAAkB,aAAsB;CAC5C,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,WAAW,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,SAAS;CAClE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,MAAM;CAC5D,eAAe,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,aAAa;CAC1E,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;CAChE,gBAAgB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,cAAc;AAC9E;AAEA,MAAM,YACJ,MACA,YACA,cACgE;CAChE,IAAI,SAAS,eACX,OAAO,cAAc,KAAA,IACjB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,oBAAoB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC3E,CAAC;CACP,IAAI,eAAe,KAAA,GAAW,OAAO;CAErC,OAAO,cAAc,KAAA,IACjB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI;EACT,KAAK;EACL,QAAQ,UAAU,IAAI,oBAAoB;GAAE,WAAW;GAAW;EAAM,CAAC;CAC3E,CAAC;AACP;AAEA,MAAM,gCACJ,SACA,MACA,YACG;CACH,MAAM,aAAa,QAAQ,QAAQ,uBAAuB,OAAO;CAEjE,MAAM,YACJ,QAAQ,QAAQ,6BAA6B,KAAA,IACzC,KAAA,UACM,QAAQ,QAAQ,yBAA0B,OAAO;CAE7D,OAAO,SACL,MACA,cAAc,QAAQ,kBACtB,aAAa,QAAQ,oBACvB;AACF;AAEA,MAAM,kBAAkB,MAAuB,UAC7C,KAAK,cAAc,MAAM,aAAa,KAAK,UAAU,MAAM;AAE7D,MAAM,0BACJ,MACA,UAEA,KAAK,aAAa,MAAM,YACxB,KAAK,SAAS,cAAc,MAAM,SAAS,aAC3C,KAAK,SAAS,qBAAqB,MAAM,SAAS,oBAClD,KAAK,iBAAiB,MAAM,gBAC5B,KAAK,uBAAuB,MAAM,sBAClC,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,+BAA+B,MAAM,8BAC1C,KAAK,SAAS,YAAY,WAAW,MAAM,SAAS,YAAY,UAChE,KAAK,SAAS,YAAY,OAAO,UAC/B,MAAM,SAAS,YAAY,MACxB,UAAU,MAAM,iBAAiB,MAAM,gBAAgB,MAAM,aAAa,MAAM,QACnF,CACF,KACA,KAAK,8BAA8B,MAAM,6BACzC,eAAe,KAAK,YAAY,MAAM,UAAU,KAChD,SAAS,MAAM,KAAK,QAAQ,MAAM,SAAS,MAAM,MAAM,QAAQ;AAEjE,MAAM,uBACJ,UACA,aACA,QACY;CACZ,IAAI,SAAS,OAAO,SAAS,MAAM,SAAS,SAAS,YAAY,SAAS,IAAI,OAAO;CACrF,MAAM,4BAAY,IAAI,IAAoB;CAE1C,KAAK,MAAM,QAAQ,SAAS,SAAS,aAAa;EAChD,IAAI,UAAU,IAAI,KAAK,YAAY,GAAG,OAAO;EAC7C,UAAU,IAAI,KAAK,cAAc,KAAK,QAAQ;CAChD;CACA,IAAI,SAAS,OAAO,MAAM,UAAU,CAAC,UAAU,IAAI,MAAM,YAAY,CAAC,GAAG,OAAO;CAChF,IAAI,SAAS,OAAO,MAAM,UAAU,MAAM,SAAS,cAAc,MAAM,UAAU,CAAC,GAAG,OAAO;CAE5F,MAAM,WAAW,SAAS,OAAO,QAAQ,UAAU;EACjD,MAAM,MAAM,MAAM,SAAS,cAAc,MAAM,UAAU;EAEzD,OAAO,OAAO,KAAK,MAAM,YAAY;CACvC,CAAC;CAED,MAAM,UAAU,IAAI,IAAI,SAAS,SAAS,UAAU,MAAM,OAAO,CAAC;CAClE,MAAM,cAAc,IAAI,IAAI,SAAS,KAAK,UAAU,MAAM,YAAY,CAAC;CAEvE,OAAO,YAAY,aAAa,MAC7B,gBACC,YAAY,QAAQ,OAAO,WAAW,QAAQ,IAAI,MAAM,CAAC,KACzD,YAAY,QAAQ,YAAY,sBAChC,SAAS,MACN,WACE,CAAC,YAAY,gBAAgB,MAAM,kBACnC,CAAC,YAAY,qBAAqB,MAAM,kBAC7C,CACJ;AACF;AAEA,MAAM,wBAAwB,OAAO,GAAG,uCAAuC,CAAC,CAAC,WAC/E,OACA;CACA,MAAM,mBAAmB,yBAAyB,MAAM,gBAAgB;CAExE,MAAM,WAAW,OAAO,+BAA+B,MAAM,cAAc,QAAQ,CAAC,CAAC,KACnF,OAAO,SAAS,WAAW,CAC7B;CAEA,MAAM,cAAc,OAAO,4BAA4B,MAAM,cAAc,WAAW;CAEtF,MAAM,aACJ,MAAM,eAAe,KAAA,IACjB,KAAA,IACA,OAAO,2BAA2B,MAAM,UAAU;CAExD,OAAO,OAAO,OAAO;EACnB,GAAG;EACH;EACA,aAAa,OAAO,OAAO;GACzB,UAAU,SAAS,KAAK,SAAS,MAAM,MAAM,YAAY,QAAQ,CAAC;GAClE,eAAe,MAAM,YAAY;EACnC,CAAC;EACD,cAAc,OAAO,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC;EACrD,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,eAAe,OAAO,OAAO;GAC3B,WAAW,OAAO,OAAO;IACvB,GAAG,MAAM,cAAc;IACvB,UAAU,yBAAyB,MAAM,cAAc,UAAU,QAAQ;GAC3E,CAAC;GACD;GACA;EACF,CAAC;CACH,CAAC;AACH,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC3D,SACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,kBAAkB,OAAO,QAAQ,UAAU,SAAS,SAAgB;CAC1E,MAAM,IAAI,eAAe,OAAO;CAOhC,OAAO;EAAE;EAAiB,MAAK,OALX,WAClB,SAAS,OAAO,CAAC,CAAC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GACtF,OACF,EAAA,CAEoC;CAAG;AACzC,CAAC;AAED,MAAM,iBAAiB,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACzD,SACA,YACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,kBAAkB,OAAO;CAEnC,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,EAAE,WAAW,WAAW,SAAS,GAAG,GAAG,EAAE,OAAO,WAAW,KAAK,CAAC,CAAC,CAAC,CAChF,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,yBAAyB,OAAO,GAAG,gCAAgC,CAAC,CAAC,WACzE,SACA,UACA,iBACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,kBAAkB,OAAO;CAEnC,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,WAAW,eAAe,CAAC,CAAC,CAAC,CACtE,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,oBAAoB,OAAO,GAAG,mCAAmC,CAAC,CAAC,WACvE,SACA,UACA,YACA,oBACA,SACA;CACA,MAAM,WAAW,OAAO;CAIxB,MAAM,cAAc,OAAO,eAAe,SAAS,YAAY,KAAK,EAAA,CAAG;CAEvE,IAAI,eAAe,KAAA,KAAa,CAAC,QAAQ,WAAW,UAAU,UAAU,GAAG,OAAO,KAAA;CAClF,MAAM,mBAAmB,WAAW,QAAQ,WAAW;CAWvD,MAAM,WAAU,OATW,WACzB,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,GAAG,eAAe,OAAO,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CACvD,MAAM,CAAC,GACV,OACF,EAAA,CAE4B;CAE5B,IAAI,YAAY,KAAA,KAAa,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,GAC1F,OAAO,KAAA;CAET,MAAM,iBAAgB,OADK,eAAe,SAAS,YAAY,OAAO,EAAA,CACpC;CAElC,IACE,kBAAkB,KAAA,KAClB,CAAC,QAAQ,WAAW,UAAU,aAAa,KAC3C,CAAC,QAAQ,UAAU,OAAO,kBAAkB,cAAc,QAAQ,WAAW,UAAU,GAEvF,OAAO,KAAA;CACT,MAAM,YAAY,OAAO,QAAQ,UAAU,UAAU,gBAAgB;CAErE,IAAI,uBAAuB,KAAA,KAAa,uBAAuB,WAAW,OAAO,KAAA;CAEjF,MAAM,cAAa,OADQ,uBAAuB,SAAS,UAAU,kBAAkB,OAAO,EAAA,CAC/D;CAE/B,IAAI,eAAe,KAAA,GACjB,OAAO;EAAE,iBAAiB;EAAkB;EAAS,YAAY;CAAc;CAMjF,OAAO;EACL,iBAAiB;EACjB;EACA,YAAY;EACZ;EACA,UAAA,OATsB,QAAQ,WAC7B,OAAO;GAAE;GAAU;GAAS,YAAY;GAAe;EAAW,CAAC,CAAC,CACpE,KAAK,OAAO,QAAQ,0BAA0B,CAAC;CAQlD;AACF,CAAC;AASD,MAAM,gBACJ,MACA,WAC8B;CAC9B,MAAM,SAAuB,CAC3B;EAAE,MAAM;EAAU,KAAK,KAAK;EAAQ,GAAG,OAAO;CAAO,GACrD;EAAE,MAAM;EAAc,KAAK,KAAK;EAAY,GAAG,OAAO;CAAW,CACnE;CAEA,IAAI,KAAK,YAAY,KAAA,GACnB,OAAO,KAAK;EAAE,MAAM;EAAW,KAAK,KAAK;EAAS,GAAG,OAAO;CAAQ,CAAC;CAEvE,OAAO;AACT;AAEA,MAAM,YAAY,OAAO,GAAG,2BAA2B,CAAC,CAAC,WACvD,SACA,eACA,UACA,QACA,OACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,QAAQ,SAAS,OAAO,QAAQ,UAAU,KAAK,CAAC,CAAC,OACrD,QAAQ,UAAU,aAAa;EAC7B;EACA;EACA,WAAW,MAAM;EACjB,UAAU,MAAM;CAClB,CAAC,CACH;CAEA,OAAO,cAAc,eAAe,OAAO,QAAQ,UAAU,UAAU,MAAM,GAAG;CAChF,MAAM,IAAI,aAAa,OAAO;CAE9B,OAAO,WACL,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,UAAU,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,WAAW,MAAM,IAAI,GAC1B,GAAG,EAAE,UAAU,MAAM,GAAG,CAC1B,CACF,CAAC,CACA,MAAM,CAAC,GACV,cAAc,OAChB;AACF,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC3D,SACA,UACA,QACA,OACA,QACA,YACA,iBACA,KACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,cAAc,OAAO;CAmB/B,KAAI,OAjBmB,WACrB,SACG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAClC,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,WAAW,MAAM,IAAI,GAC1B,GAAG,EAAE,UAAU,MAAM,GAAG,GACxB,IAAI,EAAE,YAAY,QAAQ,cAAc,MAAM,MAAM,YAAY,CAAC,CACnE,CACF,CAAC,CACA,MAAM,MAAM,KAAK,GACpB,IACF,EAAA,CAEY,UAAU,MAAM,OAAO,OAAO;CAC1C,MAAM,IAAI,eAAe,OAAO;CAEhC,MAAM,eACJ,MAAM,SAAS,WACX,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,QAAQ,MAAM,GAAG,GAAG,EAAE,OAAO,SAAS,CAAC,IAC1E,MAAM,SAAS,eACb,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,qBAAqB,WAAW,SAAS,GAC9C,GAAG,EAAE,iBAAiB,WAAW,KAAK,GACtC,GAAG,EAAE,OAAO,SAAS,CACvB,IACA,IACE,GAAG,EAAE,UAAU,QAAQ,GACvB,GAAG,EAAE,QAAQ,MAAM,GACnB,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,OAAO,SAAS,CACvB;CAWR,QAAO,OATgB,WACrB,SACG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAClC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,YAAY,CAAC,CACnB,MAAM,OAAO,cAAc,GAC9B,IACF,EAAA,CAEe,SAAS,OAAO;AACjC,CAAC;AAED,MAAM,eAAe,OAAO,GAAG,sBAAsB,CAAC,CAAC,WACrD,SACA,UACA,QACA,OACA,WACA,KACA;CAGA,OAAO,QAAO,OAFU,mBAAA,CAED,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,OAClD,QAAQ,OAAO,aAAa;EAC1B;EACA;EACA,WAAW,MAAM;EACjB,UAAU,MAAM;EAChB;EACA,kBAAkB;EAClB,sBAAsB,MAAM,MAAM;CACpC,CAAC,CACH;AACF,CAAC;AAED,MAAM,SACJ,UACA,SACA,eACA,SACG;CACH,IAAI,CAAC,iBAAiB,OAAO,GAAG,OAAO,OAAO,KAAK,YAAY,CAAC;CAEhE,MAAM,MAAM,uBAER,SAAS,aAAa,gBACpB,KAAK,KACH,OAAO,eAAe,oBAAoB,WAAW,GACrD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,KAAK,WAAW,OAAO,KAAK,CAAC;CAE3C,OAAO,cAAc,gBAAgB,OACjC,OAAO,IAAI,aAAa;EACtB,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;EAErB,OAAO,OAAO;CAChB,CAAC,IACD;AACN;AAEA,MAAM,YACJ,UACA,eACA,SAEA,OAAO,IAAI,aAAa;CACtB,IAAI,cAAc,gBAAgB,MAAM;EACtC,IAAI,OAAO,gBAAgB,OAAO,OAAO,YAAY;EACrD,OAAO,cAAc;CACvB;CAEA,OAAO,OAAO,SAAS,aAAa,gBAClC,KAAK,KACH,OAAO,eAAe,oBAAoB,WAAW,GACrD,OAAO,eAAe,iBAAiB,WAA0C,CACnF,CACF;AACF,CAAC;AAEH,MAAM,kCACJ,UACG;CACH,MAAM,aAAa,MAAM,WAAW;CACpC,MAAM,UAAU,WAAW;CAE3B,IACE,WAAW,aAAa,GAAG,MAAM,SAAS,WAC1C,WAAW,YAAY,oBACvB,QAAQ,SAAS,aACjB,MAAM,eAAe,KAAA,KACrB,QAAQ,SAAS,cAAc,MAAM,iBAAiB,aACtD,QAAQ,SAAS,qBAAqB,MAAM,iBAAiB,oBAC7D,CAAC,eAAe,QAAQ,YAAY,MAAM,WAAW,UAAU,GAE/D,OAAO;CAET,MAAM,WAAW,CAAC,GAAG,MAAM,iBAAiB,WAAW,CAAC,CAAC,MAAM,MAAM,UACnE,KAAK,aAAa,cAAc,MAAM,YAAY,CACpD;CAEA,MAAM,SAAS,CAAC,GAAG,QAAQ,SAAS,WAAW,CAAC,CAAC,MAAM,MAAM,UAC3D,KAAK,aAAa,cAAc,MAAM,YAAY,CACpD;CAEA,OACE,SAAS,WAAW,OAAO,UAC3B,SAAS,OACN,MAAM,UACL,KAAK,iBAAiB,OAAO,MAAM,CAAE,gBACrC,KAAK,aAAa,OAAO,MAAM,CAAE,QACrC;AAEJ;AAEA,MAAM,uBAAuB,OAAO,GAAG,8BAA8B,CAAC,CAAC,WACrE,eACA,OACA;CACA,MAAM,WAAW,OAAO;CAExB,IAAI,cAAc,UAAU,KAAA,GAAW,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;CAC9E,MAAM,aAAa,EAAE,MAAM,+BAA+B;CAE1D,MAAM,OAA4B;EAChC;EACA,UAAU,UAAU,SAAS,YAAY,QAAQ,QAAQ,QAAQ,QAAQ,CAAC;CAC5E;CAEA,MAAM,QAAQ,uBAEV,SAAS,aAAa,gBACpB,oBACE,cAAc,MAAO,SACrB,cAAc,MAAO,eACrB,MACA,OAAO,KAAK,UAAU,SAChB,KACR,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,WAA0C,CAAC,CAC3F,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B;CAEA,IAAI,cAAc,gBAAgB,SAAS,OAAO,iBAAiB,OAAO,OAAO,YAAY;CAC7F,OAAO,cAAc;CAErB,OAAO,OAAO,MAAM,KAClB,OAAO,GAAG,KAAK,GACf,OAAO,YAAY,UAAU;EAC3B,MAAM,SAAS,MAAM,QAAQ;EAE7B,OAAO,MAAM,QAAQ,WAAW,KAC9B,WAAW,KAAA,KACX,MAAM,aAAa,MAAM,KACzB,OAAO,UAAU,aACf,OAAO,QAAQ,IAAI,IACnB,OAAO,UAAU,KAAK;CAC5B,CAAC,CACH;AACF,CAAC;AAED,MAAM,4BAA4B,OAAO,GAAG,2CAA2C,CAAC,CAAC,WACvF,SACA,eACA,OACA,QACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,SAAS,OAAO,YACpB,SACA,MAAM,iBAAiB,WACvB,cAAc,OAChB;CAEA,MAAM,MAAM,OAAO;CAEnB,IACE,QAAQ,KAAA,KACR,CAAC,QAAQ,QAAQ,eAAe,IAAI,QAAQ,QAAQ,OAAO,KAC3D,IAAI,QAAQ,QAAQ,sBAAsB,MAAM,iBAAiB,kBAEjE,OAAO,KAAA;CACT,IACE,MAAM,cAAc,UAAU,aAAa,MAAM,YACjD,MAAM,cAAc,UAAU,WAAW,UACzC,MAAM,cAAc,UAAU,cAAc,MAAM,aAClD,MAAM,cAAc,UAAU,SAAS,cAAc,MAAM,iBAAiB,aAC5E,MAAM,cAAc,UAAU,SAAS,qBACrC,MAAM,iBAAiB,oBACxB,MAAM,cAAc,SAAS,WAAuB,MAAM,aAC3D,MAAM,cAAc,SAAS,kBAAkB,MAAM,cAAc,UAAU,iBAC7E,MAAM,cAAc,SAAS,SAAS,cAAc,MAAM,iBAAiB,aAC3E,MAAM,cAAc,SAAS,SAAS,qBACpC,MAAM,iBAAiB,oBACxB,WAAW,mBACT,MAAM,eAAe,KAAA,KACpB,MAAM,cAAc,UAAU,uBAAuB,KAAA,IAEzD,OAAO,KAAA;CACT,IACE,MAAM,iBAAiB,YAAY,MAChC,aACC,CAAC,MAAM,cAAc,SAAS,SAAS,YAAY,MAChD,WACC,OAAO,iBAAiB,SAAS,gBAAgB,OAAO,aAAa,SAAS,QAClF,CACJ,GAEA,OAAO,KAAA;CACT,IAAI,MAAM,eAAe,KAAA,GAAW;EAClC,MAAM,cAAc,OAAO,eACzB,SACA,MAAM,WAAW,YACjB,cAAc,OAChB,EAAA,CAAG;EAEH,IACE,eAAe,KAAA,KACf,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,CAAC,QAAQ,UAAU,OAAO,WAAW,QAAQ,WAAW,YAAY,OAAO,eAAe,KAC1F,WAAW,QAAQ,WAAW,qBAAqB,MAAM,WAAW,2BAEpE,OAAO,KAAA;CACX;CAEA,MAAM,cAAc,CAClB,GAAG,MAAM,iBAAiB,aAC1B,GAAG,MAAM,cAAc,SAAS,SAAS,WAC3C;CAEA,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,YAAY,KAAK,SAAS,CAAC,KAAK,cAAc,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAC1F,MAAM,UAAU,KAAK,aAAa,cAAc,MAAM,YAAY,CACrE;CAEA,MAAM,KAAK,2BAA2B,OAAO;CAE7C,MAAM,iBACJ,SAAS,WAAW,IAChB,CAAC,IACD,OAAO,WACL,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IACE,GAAG,GAAG,WAAW,OAAO,eAAe,GACvC,QACE,GAAG,cACH,SAAS,KAAK,SAAS,KAAK,YAAY,CAC1C,CACF,CACF,CAAC,CACA,QAAQ,GAAG,YAAY,GAC1B,cAAc,OAChB;CAEN,IAAI,eAAe,WAAW,SAAS,QAAQ,OAAO,KAAA;CACtD,KAAK,IAAI,QAAQ,GAAG,QAAQ,eAAe,QAAQ,SAAS;EAC1D,MAAM,SAAS,eAAe;EAC9B,MAAM,SAAS,SAAS;EAExB,IACE,OAAO,QAAQ,oBAAoB,kBAAkB,OAAO,gBAC5D,OAAO,QAAQ,oBAAoB,cAAc,OAAO,YACvD,QAAQ,oBAAoB,WAAW,KAAA,KACtC,QAAQ,oBAAoB,iBAAiB,OAAO,QAAQ,oBAAoB,OAAO,MACrF,MAEJ,OAAO,KAAA;CACX;CACA,IAAI,MAAM,eAAe,KAAA,GAAW;EAClC,MAAM,cAAc,OAAO,eAAe,SAAS,MAAM,WAAW,YAAY,KAAK,EAAA,CAAG;EAExF,MAAM,cAAc,OAAO,uBACzB,SACA,MAAM,UACN,OAAO,iBACP,cAAc,OAChB,EAAA,CAAG;EAEH,IAAI,eAAe,KAAA,KAAa,eAAe,KAAA,GAAW,OAAO,KAAA;EAEjE,MAAM,WAAW,OAAO,QAAQ,WAAW,OAAO;GAChD,UAAU,MAAM;GAChB,SAAS;GACT;GACA;EACF,CAAC;EAED,IAAI,CAAC,uBAAuB,UAAU,MAAM,UAAU,GAAG,OAAO,KAAA;CAClE;CACA,MAAM,qBAAqB,OAAO,QAAQ,QAAQ,wBAAwB,KAAK,MAAM;CACrF,MAAM,MAAM,OAAO;CAEnB,IACE,CAAC,oBAAoB,MAAM,cAAc,UAAU,MAAM,cAAc,aAAa,GAAG,KACvF,CAAC,oBAAoB,MAAM,cAAc,UAAU,oBAAoB,GAAG,GAE1E,OAAO,KAAA;CACT,IACE,MAAM,aAAa,qBAAqB,eACxC,QAAQ,wBAAwB,4BAEhC,OAAO,KAAA;CAET,OAAO;EAAE,GAAG;EAAQ;CAAI;AAC1B,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WACvD,SACA,UACA,WACA,SACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,eAAe,OAAO;CAEhC,OAAO,OAAO,WACZ,SACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,EAAE,UAAU,QAAQ,GAAG,GAAG,EAAE,WAAW,SAAS,CAAC,CAAC,CAAC,CAChE,MAAM,CAAC,GACV,OACF;AACF,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WACvD,SACA,OACA,QACA,KACA;CAGA,OAAO,QAAO,OAFU,mBAAA,CAED,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OACnD,QAAQ,QAAQ,aAAa;EAC3B,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB;EACA,eAAe,MAAM,cAAc,UAAU;EAC7C,UAAU;EACV,sBAAsB,MAAM,QAAQ;CACtC,CAAC,CACH;AACF,CAAC;AAED,MAAM,yBAAyB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WACjF,SACA,OACA,iBACA,SACA,qBACA,KACA;CACA,IACE,YAAY,KAAA,KACZ,CAAC,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,QAAQ,OAAO,KAC/D,wBAAwB,KAAA,KACvB,QAAQ,oBAAoB,WAAW,KAAA,KACtC,QAAQ,oBAAoB,iBAC1B,oBAAoB,QAAQ,oBAAoB,OAClD,MAAM,MAER,OAAO;CACT,IAAI,MAAM,eAAe,KAAA,GAAW;EAClC,MAAM,cAAc,OAAO,eAAe,SAAS,MAAM,WAAW,YAAY,KAAK,EAAA,CAAG;EAExF,IACE,eAAe,KAAA,KACf,CAAC,QAAQ,WAAW,UAAU,UAAU,KACxC,CAAC,QAAQ,UAAU,OAAO,WAAW,QAAQ,WAAW,YAAY,eAAe,KACnF,WAAW,QAAQ,WAAW,qBAAqB,MAAM,WAAW,2BAEpE,OAAO;EAET,MAAM,cAAc,OAAO,uBACzB,SACA,MAAM,UACN,iBACA,KACF,EAAA,CAAG;EAEH,IAAI,eAAe,KAAA,GAAW,OAAO;EASrC,KAAI,OAPmB,QAAQ,WAAW,OAAO;GAC/C,UAAU,MAAM;GAChB;GACA;GACA;EACF,CAAC,EAAA,CAEW,+BAA+B,MAAM,WAAW,4BAC1D,OAAO;CACX;CACA,MAAM,OAAO,OAAO,cAAc,SAAS,MAAM,UAAU,MAAM,WAAW,KAAK;CACjF,MAAM,MAAM,KAAK;CAEjB,OACE,KAAK,WAAW,KAChB,IAAI,QAAQ,QAAQ,YAAY,MAAM,cAAc,UAAU,UAC9D,IAAI,QAAQ,QAAQ,mBAAmB,MAAM,cAAc,UAAU,iBACrE,IAAI,QAAQ,QAAQ,cAAc,cACjC,OAAO,QAAQ,cAAc,IAAI,QAAQ,QAAQ,eAAe,OAC/D,MAAM,QAAQ;AAEpB,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAC/D,SACA,eACA,OACA,WAMA,YACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,EAAE,cAAc,oBAAoB,iBAAiB,yBAAyB;CAEpF,MAAM,YAAY,OAAO,0BAA0B,SAAS,eAAe,OAAO,cAAc;CAEhG,IAAI,cAAc,KAAA,GAAW,OAAO;CACpC,KAAK,OAAO,cAAc,SAAS,MAAM,UAAU,MAAM,WAAW,IAAI,EAAA,CAAG,QAAQ,OAAO;CAC1F,KACG,OAAO,uBAAuB,SAAS,MAAM,UAAU,UAAU,iBAAiB,IAAI,EAAA,CAAG,QAE1F,OAAO;CAET,OAAO,SAAS,OAAO,QAAQ,WAAW,KAAK,CAAC,CAAC,OAC/C,QAAQ,WAAW,aAAa;EAC9B,UAAU,MAAM;EAChB,WAAW,UAAU;EACrB;EACA;EACA;EACA,aAAa,MAAM;CACrB,CAAC,CACH;CACA,OAAO,SAAS,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CAAC,OACxD,QAAQ,oBAAoB,aAAa;EACvC,WAAW,UAAU;EACrB;EACA,UAAU;CACZ,CAAC,CACH;CACA,OAAO,SACJ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAa,CAAC,CAAC,QAAQ,QAAQ,kBAAkB,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAC7E,MACC,IACE,GAAG,eAAe,OAAO,CAAC,CAAC,IAAI,UAAU,eAAe,GACxD,GAAG,eAAe,OAAO,CAAC,CAAC,kBAAkB,MAAM,iBAAiB,gBAAgB,CACtF,CACF;CACF,OAAO,cAAc,SAAS,OAAO,gBAAgB,cAAc,UAAU,GAAG;CAEhF,MAAM,YAAY,OAAO,uBACvB,SACA,MAAM,UACN,UAAU,iBACV,KACF,EAAA,CAAG;CAEH,MAAM,qBAAqB,OAAO,SAC/B,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IACE,GAAG,2BAA2B,OAAO,CAAC,CAAC,WAAW,UAAU,eAAe,GAC3E,GAAG,2BAA2B,OAAO,CAAC,CAAC,cAAc,YAAY,GACjE,GAAG,2BAA2B,OAAO,CAAC,CAAC,UAAU,kBAAkB,CACrE,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAAG;CAEb,MAAM,kBAAkB,OAAO,SAC5B,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,eAAe,OAAO,CAAC,CAAC,IAAI,UAAU,eAAe,GACxD,GAAG,eAAe,OAAO,CAAC,CAAC,kBAAkB,oBAAoB,CACnE,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAAG;CAEb,IACE,aAAa,KAAA,KACb,SAAS,QAAQ,WAAW,kBAAkB,gBAC9C,SAAS,QAAQ,WAAW,wBAAwB,sBACpD,SAAS,QAAQ,WAAW,qBAAqB,mBACjD,SAAS,QAAQ,WAAW,cAAc,SAAS,MAAM,MAAM,YAAY,QAAQ,KACnF,SAAS,QAAQ,WAAW,mBAAmB,MAAM,YAAY,iBACjE,sBAAsB,KAAA,KACtB,mBAAmB,KAAA,KACnB,EAAE,OAAO,uBACP,SACA,OACA,UAAU,iBACV,gBACA,mBACA,cAAc,UAAU,GAC1B,IAEA,OAAO,OAAO,YAAY;CAE5B,OAAO;AACT,CAAC;AAED,MAAa,6BAA6B,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAChF,UACA,SACA,eACyE;CACzE,MAAM,QAAQ,OAAO;CAErB,OAAO,oBAAoB,GAAG;EAC5B,eAAe,OAAO,YACpB,OAAO,IAAI,aAAa;GACtB,MAAM,YAAY,OAAO,SACvB,cAAc,MACd,QAAQ,mBACR,QAAQ,qBACV;GAEA,OAAO,OAAO,MACZ,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,WAAW,OAAO,kBACtB,SACA,MAAM,UACN,MAAM,YACN,MAAM,WACN,cAAc,OAChB;IAEA,MAAM,OAAO,QAAQ,UAAU;KAC7B,UAAU,MAAM;KAChB,QAAQ,MAAM;KACd,YAAY,MAAM;KAClB,GAAI,aAAa,KAAA,IACb,CAAC,IACD,EAAE,WAAW,SAAS,UAAU,SAAS,UAAU;IACzD,CAAC;IAED,MAAM,SAAS,aAAa,MAAM,MAAM,MAAM;IAC9C,MAAM,WAAyB,CAAC;IAEhC,OAAO,UAAU,SAAS,eAAe,MAAM,UAAU,MAAM,QAAQ,OAAO,EAAG;IACjF,IAAI,aAAa,OAAO;IAExB,IACE,OAAO,YACL,SACA,MAAM,UACN,MAAM,QACN,OAAO,IACP,MAAM,QACN,MAAM,YACN,UAAU,iBACV,UACF,GAEA,SAAS,KAAK,OAAO,EAAG;IAC1B,IAAI,SAAS,WAAW,GACtB,KAAK,MAAM,SAAS,OAAO,MAAM,CAAC,GAAG;KACnC,OAAO,UAAU,SAAS,eAAe,MAAM,UAAU,MAAM,QAAQ,KAAK;KAC5E,aAAa,OAAO;KACpB,IACE,OAAO,YACL,SACA,MAAM,UACN,MAAM,QACN,OACA,MAAM,QACN,MAAM,YACN,UAAU,iBACV,UACF,GAEA,SAAS,KAAK,KAAK;IACvB;IAEF,MAAM,MAAM,OAAO;IAEnB,KAAK,MAAM,SAAS,UAClB,OAAO,aAAa,SAAS,MAAM,UAAU,MAAM,QAAQ,OAAO,WAAW,GAAG;IAClF,IAAI,SAAS,WAAW,OAAO,QAC7B,OAAO,QAAQ,EAAE,MAAM,SAAkB,GAAG,OAAO;IACrD,MAAM,WAAW,UAAU;IAC3B,MAAM,WAAW,MAAM,MAAM,OAAO;IAEpC,MAAM,iBAAiB,KAAK,IAC1B,UACA,GAAG,OAAO,KAAK,UAAU,MAAM,MAAM,YAAY,CACnD;IAEA,OAAO,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAC/C,QAAQ,QAAQ,aACd;KACE,UAAU,MAAM;KAChB,QAAQ,MAAM;KACd;KACA,YAAY,MAAM;KAClB,GAAI,aAAa,KAAA,IACb,CAAC,IACD;MACE,WAAW,SAAS,SAAS;MAC7B,cAAc,SAAS;MACvB,kBAAkB,SAAS,SAAS;MACpC,oBAAoB,SAAS;MAC7B,iBAAiB,SAAS;MAC1B,2BAA2B,SAAS;KACtC;KACJ,kBAAkB;KAClB,gBAAgB;KAChB,sBAAsB;IACxB,GACA;KACE,GAAI,UAAU,oBAAoB,KAAA,IAC9B,CAAC,IACD,EAAE,iBAAiB,SAAS,gBAAgB;KAChD,OAAO;IACT,CACF,CACF;IAEA,OAAO,QACL;KACE,MAAM;KACN;KACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,SAAS;IAC3D,GACA,OACF;GACF,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,gBAAgB,YAAY,YAC1B,OAAO,IAAI,aAAa;GACtB,MAAM,WACJ,WAAW,aAAa,KAAA,IACpB,KAAA,IACA,OAAO,2BAA2B,WAAW,QAAQ;GAE3D,MAAM,QAAQ;IAAE,GAAG;IAAY,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;GAAG;GAE/E,OAAO,OAAO,MACZ,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,cAAc,OAAO;IAC3B,MAAM,UAAU,OAAO;IAEvB,MAAM,IAAI,eAAe,OAAO;IAWhC,IAAI,OAAM,OATgB,WACxB,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,WAAW,MAAM,SAAS,CAAC,CAAC,CAAC,CAC5E,MAAM,CAAC,GACV,KACF,EAAA,CAEqB;IAErB,IAAI,QAAQ,KAAA,KAAa,IAAI,QAAQ,QAAQ,WAAW,WACtD,OAAO,QAAQ,YAAY,OAAO;IACpC,IAAI,WAAoC;IACxC,IAAI;IACJ,IAAI,iBAAiB;IAErB,IAAI,MAAM,YAAY,cAAc,MAAM,aAAa,KAAA,GAAW;KAChE,UAAU,OAAO,kBACf,SACA,MAAM,UACN,MAAM,SAAS,YACf,MAAM,SAAS,SAAS,WACxB,cAAc,OAChB;KACA,iBACE,MAAM,SAAS,aAAa,MAAM,YAClC,IAAI,QAAQ,QAAQ,yBAAyB,MAAM,SAAS,WAAW,aACvE,IAAI,QAAQ,QAAQ,qBAAqB,MAAM,SAAS,WAAW,SACnE,QAAQ,UAAU,OAChB,IAAI,QAAQ,QAAQ,YACpB,SAAS,eACX,KACA,IAAI,QAAQ,QAAQ,kBAAkB,MAAM,SAAS,gBACrD,IAAI,QAAQ,QAAQ,sBAClB,MAAM,SAAS,SAAS,oBAC1B,IAAI,QAAQ,QAAQ,wBAAwB,MAAM,SAAS,sBAC3D,IAAI,QAAQ,QAAQ,qBAAqB,MAAM,SAAS,mBACxD,IAAI,QAAQ,QAAQ,+BAClB,MAAM,SAAS;IACrB;IACA,OAAO,OAAO,WACZ,YACG,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,GAAG,EAAE,WAAW,MAAM,SAAS,CAAC,CAAC,CAAC,CAC5E,MAAM,CAAC,GACV,cAAc,OAChB,EAAA,CAAG;IACH,IAAI,QAAQ,KAAA,KAAa,IAAI,QAAQ,QAAQ,WAAW,WACtD,OAAO,QAAQ,YAAY,OAAO;IACpC,MAAM,MAAM,OAAO;IACnB,MAAM,WAAW,OAAO,QAAQ,cAAc,IAAI,QAAQ,QAAQ,SAAS;IAE3E,IACE,kBACA,SAAS,aAAa,KAAA,KACtB,MAAM,aAAa,KAAA,KACnB,WAAW,OACX,uBAAuB,QAAQ,UAAU,MAAM,QAAQ,GAEvD,WAAW;IACb,MAAM,WAAW,QAAQ,UAAU,OAAO;IAE1C,OAAO,YACJ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAa,CAAC,CAAC,QAAQ,QAAQ,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CACtD,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,WAAW,MAAM,SAAS,GAC/B,GAAG,EAAE,OAAO,SAAS,CACvB,CACF;IACF,IACE,aAAa,cACb,MAAM,WAAW,KAAA,KACjB,SAAS,aAAa,KAAA,GACtB;KACA,MAAM,KAAK,kBAAkB,OAAO;KAEpC,MAAM,cAAc,OAAO,SACzB,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;KAEA,OAAO,YACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IAAI,QAAQ,WAAW,eAAe,MAAM,OAAO,cAAc,WAAW,CAAC,CAAC,CAC9E,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,WAAW,QAAQ,eAAe,GACxC,GAAG,GAAG,cAAc,QAAQ,SAAS,YAAY,GACjD,GAAG,GAAG,oBAAoB,QAAQ,SAAS,kBAAkB,GAC7D,GAAG,GAAG,iBAAiB,MAAM,OAAO,eAAe,GACnD,GAAG,GAAG,UAAU,SAAS,MAAM,MAAM,OAAO,gBAAgB,CAAC,CAC/D,CACF;IACJ;IAEA,OAAO;GACT,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,iBAAiB,UACf,SACE,UACA,eACA,OAAO,IAAI,aAAa;GACtB,MAAM,cAAc,OAAO;GAE3B,MAAM,SAAS,OAAO,YAAY,SAAS,MAAM,WAAW,KAAK;GAEjE,IACE,OAAO,QAAQ,KAAA,KACf,CAAC,QAAQ,QAAQ,eAAe,OAAO,IAAI,QAAQ,QAAQ,OAAO,GAElE,OAAO,OAAO,KAAK;GAErB,MAAM,cAAc,OAAO,uBACzB,SACA,MAAM,UACN,OAAO,iBACP,KACF,EAAA,CAAG;GAEH,IAAI,eAAe,KAAA,GAAW,OAAO,OAAO,KAAK;GACjD,MAAM,KAAK,kBAAkB,OAAO;GAOpC,MAAM,cAAa,OALQ,YACxB,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MAAM,GAAG,GAAG,WAAW,OAAO,eAAe,CAAC,EAAA,CAElB,MAAM,QAAa,QAAQ,WAAW,UAAU,GAAG,CAAC;GAEnF,IAAI,eAAe,KAAA,GAAW,OAAO,OAAO,KAAK;GAEjD,MAAM,WAAW,OAAO,QAAQ,WAC7B,OAAO;IACN,UAAU,MAAM;IAChB,SAAS,OAAO;IAChB;IACA;GACF,CAAC,CAAC,CACD,KAAK,OAAO,QAAQ,0BAA0B,CAAC;GAElD,OAAO,OAAO,KAAK,QAAQ;EAC7B,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,iBAAiB,UACf,SACE,UACA,eACA,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,kBACtB,SACA,MAAM,UACN,MAAM,YACN,KAAA,GACA,KACF;GAEA,OAAO,UAAU,aAAa,KAAA,KAC5B,SAAS,SAAS,+BAA+B,KAAA,IAC/C,OAAO,KAAK,IACZ,OAAO,KAAK,SAAS,QAAQ;EACnC,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,cAAc,YAAY,YACxB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,sBAAsB,UAAU;GAErD,MAAM,eAAe,OAAO,SAC1B,cAAc,MACd,QAAQ,sBACR,QAAQ,wBACV;GAEA,MAAM,qBAAqB,OAAO,SAChC,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;GAEA,MAAM,kBAAkB,OAAO,SAC7B,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;GAEA,MAAM,uBAAuB,OAAO,6BAClC,SACA,cAAc,MACd,MAAM,iBAAiB,gBACzB;GAEA,IAAI,yBAAyB,MAAM,iBAAiB,kBAClD,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,MACZ,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IASvB,OAAO,SAAQ,OAPQ,cAAc,SAAS,eAAe,OAAO;KAClE;KACA;KACA;KACA;IACF,CAAC,KAEwB,YAAY,YAAY,OAAO;GAC1D,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,mBAAmB,YAAY,YAC7B,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,sBAAsB,UAAU;GAErD,MAAM,qBAAqB,OAAO,SAChC,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;GAEA,MAAM,kBAAkB,OAAO,SAC7B,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;GAEA,MAAM,uBAAuB,OAAO,6BAClC,SACA,cAAc,MACd,MAAM,iBAAiB,gBACzB;GAEA,IACE,yBAAyB,MAAM,iBAAiB,oBAC/C,MAAM,eAAe,KAAA,KACpB,uBAAuB,MAAM,WAAW,oBAE1C,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,MACZ,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,OAAO,OAAO,UACZ,SACA,eACA,OACA,mBACA;KAAE;KAAoB;KAAiB;IAAqB,GAC5D,OACF;GACF,CAAC,CACH;EACF,CAAC,CAAC,CAAC,KACD,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,aAAa,WACV,cAAc,UAAU,KAAA,IACrB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI,aAAa;GACtB,IACE,MAAM,SAAS,UAAU,KACzB,CAAC,MAAM,SAAS,SAAS,QAAQ,KACjC,MAAM,YAAY,oBAClB,MAAM,QAAQ,SAAS,WAEvB,OAAO;GACT,MAAM,UAAU,MAAM;GACtB,MAAM,mBAAmB,MAAM,SAAS,MAAM,GAAG,EAAgB;GA6BjE,QAAO,OA3BgB,SACrB,UACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO,kBACtB,SACA,kBACA,QAAQ,YACR,QAAQ,SAAS,WACjB,KACF;IAEA,OACE,UAAU,aAAa,KAAA,KACvB,SAAS,SAAS,SAAS,qBACzB,QAAQ,SAAS,oBACnB,QAAQ,SAAS,YAAY,OAAO,SAClC,SAAS,SAAU,SAAS,YAAY,MACrC,WACC,OAAO,iBAAiB,KAAK,gBAC7B,OAAO,aAAa,KAAK,QAC7B,CACF;GAEJ,CAAC,CACH,KAEiB,OAAO,qBAAqB,eAAe,KAAK,IAAI;EACvE,CAAC,EAAA,CACH,KACA,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,iBAAiB,YAAY,aAC1B,cAAc,UAAU,KAAA,IACrB,OAAO,KAAK,YAAY,CAAC,IACzB,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO;IAC1B,GAAI,OAAO,sBAAsB,UAAU;IAC3C,YAAY,WAAW;GACzB,CAAC;GAED,MAAM,qBAAqB,OAAO,SAChC,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;GAEA,MAAM,kBAAkB,OAAO,SAC7B,cAAc,MACd,QAAQ,kBACR,QAAQ,oBACV;GAEA,MAAM,uBAAuB,OAAO,6BAClC,SACA,cAAc,MACd,MAAM,iBAAiB,gBACzB;GAEA,IACE,yBAAyB,MAAM,iBAAiB,oBAC/C,MAAM,eAAe,KAAA,KACpB,uBAAuB,MAAM,WAAW,oBAE1C,OAAO,OAAO,YAAY;GAE5B,OAAO,OAAO,MACZ,UACA,SACA,eACA,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO;IAEvB,IAAI,CAAC,+BAA+B,KAAK,GAAG,OAAO,QAAQ,YAAY,OAAO;IAE9E,MAAM,YAAY,OAAO,0BACvB,SACA,eACA,OACA,gBACF;IAEA,IAAI,cAAc,KAAA,GAAW,OAAO,QAAQ,YAAY,OAAO;IAC/D,KAAK,OAAO,cAAc,SAAS,MAAM,UAAU,MAAM,WAAW,IAAI,EAAA,CAAG,QACzE,OAAO,QAAQ,YAAY,OAAO;IAQpC,IAAI,EAAC,OANkB,0BACrB,SACA,OACA,UAAU,eACZ,IAEc,OAAO,QAAQ,YAAY,OAAO;IAChD,IAAI;IAEJ,OAAO,oBACL,cAAc,MAAO,SACrB,cAAc,MAAO,eACrB,MAAM,YACN,OAAO,IAAI,aAAa;KACtB,OAAO,OAAO,iBACZ,SACA,OACA,UAAU,iBACV;MAAE;MAAoB;MAAiB;KAAqB,GAC5D,UAAU,GACZ;IACF,CAAC,IACA,aAAa;KACZ,kBAAkB,QAChB,aAAa,cAAc,YAAY,YACvC,OACF;KAEA,OAAO;IACT,CACF;IAEA,OAAO,mBAAmB,QAAQ,YAAY,OAAO;GACvD,CAAC,CACH;EACF,CAAC,EAAA,CACH,KACA,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;EACF,kBAAkB,OAAO,YACvB,MACE,UACA,SACA,eACA,OAAO,IAAI,aAAa;GACtB,MAAM,cAAc,OAAO;GAC3B,MAAM,UAAU,OAAO;GAEvB,MAAM,MAAM,OAAO;GACnB,MAAM,YAAY,QAAQ,cAAc,GAAG;GAC3C,IAAI,YAAY,MAAM;GACtB,IAAI,UAAU;GACd,MAAM,IAAI,eAAe,OAAO;GAChC,MAAM,IAAI,cAAc,OAAO;GAE/B,MAAM,WAAW,OAAO,WACtB,YACG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAClC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,IAAI,EAAE,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC5E,MAAM,YAAY,CAAC,GACtB,KACF;GAEA,IAAI,SAAS,SAAS,WAAW,UAAU;GAC3C,MAAM,oBAAoB,SAAS,MAAM,GAAG,SAAS;GAErD,aAAa,kBAAkB;GAE/B,MAAM,UAAU,OAAO,WACrB,YACG,OAAO;IACN,QAAQ,EAAE;IACV,WAAW,EAAE;IACb,UAAU,EAAE;IACZ,WAAW,EAAE;GACf,CAAC,CAAC,CACD,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MAAM,IAAI,GAAG,EAAE,UAAU,MAAM,QAAQ,GAAG,IAAI,EAAE,gBAAgB,SAAS,CAAC,CAAC,CAAC,CAC5E,MAAM,YAAY,CAAC,GACtB,KACF;GAEA,IAAI,QAAQ,SAAS,WAAW,UAAU;GAC1C,MAAM,mBAAmB,QAAQ,MAAM,GAAG,SAAS;GAEnD,aAAa,iBAAiB;GAC9B,MAAM,KAAK,aAAa,OAAO;GAE/B,MAAM,SAAS,OAAO,WACpB,YACG,OAAO;IAAE,QAAQ,GAAG;IAAQ,WAAW,GAAG;IAAW,UAAU,GAAG;GAAS,CAAC,CAAC,CAC7E,KAAK,QAAQ,UAAU,KAAK,CAAC,CAC7B,MACC,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,EAAE,UAAU,GAAG,QAAQ,GAC1B,GAAG,EAAE,QAAQ,GAAG,MAAM,GACtB,GAAG,EAAE,WAAW,GAAG,SAAS,GAC5B,GAAG,EAAE,UAAU,GAAG,QAAQ,CAC5B,CACF,CACJ,CACF,CACF,CAAC,CACA,MAAM,YAAY,CAAC,GACtB,cAAc,IAAI,QAAQ,cAAc,OAC1C;GAEA,IAAI,OAAO,SAAS,WAAW,UAAU;GACzC,MAAM,iBAAiB,OAAO,MAAM,GAAG,SAAS;GAEhD,aAAa,eAAe;GAC5B,MAAM,kBAA2C,CAAC;GAElD,KAAK,MAAM,aAAa,kBAAkB;IACxC,MAAM,SAAS,OAAO,WACpB,YACG,OAAO;KACN,QAAQ,EAAE;KACV,WAAW,EAAE;KACb,UAAU,EAAE;KACZ,WAAW,EAAE;IACf,CAAC,CAAC,CACD,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,QAAQ,UAAU,MAAM,GAC7B,GAAG,EAAE,WAAW,UAAU,SAAS,GACnC,GAAG,EAAE,UAAU,UAAU,QAAQ,GACjC,GAAG,EAAE,WAAW,UAAU,SAAS,GACnC,IAAI,EAAE,gBAAgB,SAAS,CACjC,CACF,CAAC,CACA,MAAM,CAAC,GACV,cAAc,OAChB;IAEA,IAAI,OAAO,OAAO,KAAA,GAAW,gBAAgB,KAAK,OAAO,EAAS;GACpE;GACA,MAAM,mBAA6C,CAAC;GAEpD,KAAK,MAAM,aAAa,mBAAmB;IACzC,MAAM,SAAS,OAAO,WACpB,YACG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAClC,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,WAAW,UAAU,SAAS,GACnC,IAAI,EAAE,gBAAgB,SAAS,CACjC,CACF,CAAC,CACA,MAAM,CAAC,GACV,cAAc,OAChB;IAEA,IAAI,OAAO,OAAO,KAAA,GAAW,iBAAiB,KAAK,OAAO,EAAS;GACrE;GAEA,MAAM,WAAW,QACf;IACE,SAAS,iBAAiB,SAAS,gBAAgB,SAAS,eAAe;IAC3E;GACF,GACA,OACF;GAEA,KAAK,MAAM,OAAO,iBAChB,OAAO,YACJ,OAAO,QAAQ,OAAO,KAAK,CAAC,CAC5B,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,QAAQ,IAAI,MAAM,GACvB,GAAG,EAAE,WAAW,IAAI,SAAS,GAC7B,GAAG,EAAE,UAAU,IAAI,QAAQ,GAC3B,GAAG,EAAE,WAAW,IAAI,SAAS,GAC7B,IAAI,EAAE,gBAAgB,SAAS,CACjC,CACF;GACJ,IAAI,iBAAiB,SAAS,GAC5B,OAAO,YAAY,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAC/C,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,QACE,EAAE,WACF,iBAAiB,KAAK,QAAa,IAAI,SAAS,CAClD,GACA,IAAI,EAAE,gBAAgB,SAAS,CACjC,CACF;GACF,KAAK,MAAM,OAAO,gBAChB,OAAO,YAAY,OAAO,QAAQ,UAAU,KAAK,CAAC,CAAC,MACjD,IACE,GAAG,GAAG,UAAU,MAAM,QAAQ,GAC9B,GAAG,GAAG,QAAQ,IAAI,MAAM,GACxB,GAAG,GAAG,WAAW,IAAI,SAAS,GAC9B,GAAG,GAAG,UAAU,IAAI,QAAQ,GAC5B,UACE,YACG,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CACvB,KAAK,QAAQ,OAAO,KAAK,CAAC,CAC1B,MACC,IACE,GAAG,EAAE,UAAU,GAAG,QAAQ,GAC1B,GAAG,EAAE,QAAQ,GAAG,MAAM,GACtB,GAAG,EAAE,WAAW,GAAG,SAAS,GAC5B,GAAG,EAAE,UAAU,GAAG,QAAQ,CAC5B,CACF,CACJ,CACF,CACF;GAEF,OAAO;EACT,CAAC,CACH,CAAC,CAAC,KACA,OAAO,eAAe,oBAAoB,QAAQ,GAClD,OAAO,eAAe,gBAAgB,KAAK,GAC3C,gBACF;CACJ,CAAC;AACH,CAAC;AAED,MAAM,4BAA4B,OAAO,GAAG,2CAA2C,CAAC,CAAC,WACvF,SACA,OACA,iBACA;CACA,IAAI,MAAM,eAAe,KAAA,GAAW,OAAO;CAC3C,MAAM,OAAO,OAAO,uBAAuB,SAAS,MAAM,UAAU,iBAAiB,IAAI,EAAA,CAAG;CAE5F,IAAI,QAAQ,KAAA,GAAW,OAAO;CAE9B,OACE,IAAI,QAAQ,WAAW,kBAAkB,MAAM,WAAW,gBAC1D,IAAI,QAAQ,WAAW,wBAAwB,MAAM,WAAW,sBAChE,IAAI,QAAQ,WAAW,qBAAqB,MAAM,WAAW,mBAC7D,IAAI,QAAQ,WAAW,cAAc,SAAS,MAAM,MAAM,WAAW,QAAQ,KAC7E,IAAI,QAAQ,WAAW,mBAAmB,MAAM,WAAW,iBAC3D,MAAM,cAAc,UAAU,uBAAuB,MAAM,WAAW;AAE1E,CAAC;AAED,MAAM,uBAAuB,OAAO,GAAG,sCAAsC,CAAC,CAAC,WAC7E,SACA,OACA,iBACA,WAMA,KACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,kBAAkB,OAAO,GACjC,IAAI,eAAe,OAAO;CAE5B,MAAM,cAAc,OAAO,SACxB,OAAO,CAAC,CACR,KAAK,QAAQ,WAAW,KAAK,CAAC,CAC9B,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,cAAc,UAAU,YAAY,GACzC,GAAG,EAAE,oBAAoB,UAAU,kBAAkB,GACrD,GAAG,EAAE,iBAAiB,UAAU,eAAe,GAC/C,GAAG,EAAE,UAAU,SAAS,MAAM,MAAM,YAAY,QAAQ,CAAC,GACzD,GAAG,EAAE,eAAe,MAAM,YAAY,aAAa,CACrD,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAAG;CAEb,MAAM,WAAW,OAAO,SACrB,OAAO,CAAC,CACR,KAAK,QAAQ,QAAQ,KAAK,CAAC,CAC3B,MAAM,IAAI,GAAG,EAAE,IAAI,eAAe,GAAG,GAAG,EAAE,kBAAkB,UAAU,oBAAoB,CAAC,CAAC,CAAC,CAC7F,MAAM,CAAC,EAAA,CAAG;CAEb,MAAM,uBAAuB,OAAO,SACjC,OAAO,CAAC,CACR,KAAK,QAAQ,oBAAoB,KAAK,CAAC,CACvC,MACC,IACE,GAAG,2BAA2B,OAAO,CAAC,CAAC,WAAW,eAAe,GACjE,GAAG,2BAA2B,OAAO,CAAC,CAAC,cAAc,UAAU,YAAY,GAC3E,GAAG,2BAA2B,OAAO,CAAC,CAAC,UAAU,UAAU,kBAAkB,CAC/E,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CAAG;CAEb,OACE,eAAe,KAAA,MACd,OAAO,uBACN,SACA,OACA,iBACA,SACA,qBACA,GACF;AAEJ,CAAC;AAED,MAAM,mBAAmB,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACrE,SACA,OACA,iBACA,WAKA,KACA;CACA,MAAM,WAAW,OAAO;CAExB,MAAM,IAAI,kBAAkB,OAAO;CACnC,MAAM,IAAI,eAAe,OAAO;CAEhC,OAAO,SACJ,OAAO,QAAQ,WAAW,KAAK,CAAC,CAChC,IACC,QAAQ,WAAW,kBAAkB;EACnC,aAAa,MAAM;EACnB,oBAAoB,UAAU;EAC9B,iBAAiB,UAAU;CAC7B,CAAC,CACH,CAAC,CACA,MACC,IACE,GAAG,EAAE,UAAU,MAAM,QAAQ,GAC7B,GAAG,EAAE,WAAW,eAAe,GAC/B,GAAG,EAAE,cAAc,MAAM,WAAY,YAAY,GACjD,GAAG,EAAE,oBAAoB,MAAM,WAAY,kBAAkB,GAC7D,GAAG,EAAE,iBAAiB,MAAM,WAAY,eAAe,GACvD,GAAG,EAAE,UAAU,SAAS,MAAM,MAAM,WAAY,QAAQ,CAAC,GACzD,GAAG,EAAE,eAAe,MAAM,WAAY,aAAa,CACrD,CACF;CACF,OAAO,SACJ,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAC7B,IAAI,aAAa,CAAC,CAAC,QAAQ,QAAQ,kBAAkB,UAAU,oBAAoB,CAAC,CAAC,CAAC,CAAC,CACvF,MACC,IACE,GAAG,EAAE,IAAI,eAAe,GACxB,GAAG,EAAE,kBAAkB,MAAM,iBAAiB,gBAAgB,CAChE,CACF;CACF,OAAO,SACJ,OAAO,QAAQ,oBAAoB,KAAK,CAAC,CACzC,IAAI,QAAQ,oBAAoB,eAAe,UAAU,kBAAkB,CAAC,CAAC,CAC7E,MACC,IACE,GAAG,2BAA2B,OAAO,CAAC,CAAC,WAAW,eAAe,GACjE,GAAG,2BAA2B,OAAO,CAAC,CAAC,cAAc,MAAM,WAAY,YAAY,GACnF,GAAG,2BAA2B,OAAO,CAAC,CAAC,UAAU,MAAM,WAAY,kBAAkB,CACvF,CACF;CACF,OAAO,cAAc,SAAS,OAAO,MAAM,cAAc,UAAU,QAAQ,GAAG;CAE9E,OAAO,OAAO,qBACZ,SACA,OACA,iBACA;EACE,GAAG;EACH,cAAc,MAAM,WAAY;CAClC,GACA,GACF;AACF,CAAC;AAED,MAAM,YAAY,OAAO,GAAG,mBAAmB,CAAC,CAAC,WAC/C,SACA,eACA,OACA,QACA,WAKA,SACA;CACA,MAAM,UAAU,OAAO;CAEvB,MAAM,YAAY,OAAO,0BAA0B,SAAS,eAAe,OAAO,MAAM;CAExF,IAAI,cAAc,KAAA,GAAW,OAAO,QAAQ,YAAY,OAAO;CAC/D,KAAK,OAAO,cAAc,SAAS,MAAM,UAAU,MAAM,WAAW,IAAI,EAAA,CAAG,QACzE,OAAO,QAAQ,YAAY,OAAO;CACpC,IAAI,EAAE,OAAO,0BAA0B,SAAS,OAAO,UAAU,eAAe,IAC9E,OAAO,QAAQ,YAAY,OAAO;CACpC,MAAM,WAAW,QAAQ,WAAW,OAAO;CAE3C,IACE,EAAE,OAAO,iBAAiB,SAAS,OAAO,UAAU,iBAAiB,WAAW,UAAU,GAAG,IAE7F,OAAO,OAAO,YAAY;CAE5B,OAAO;AACT,CAAC;;AAGD,MAAa,oBAAoB;CAC/B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}

package/dist/drizzle/password-target.d.mts

@@ -0,0 +1,25 @@
+import "../Schema.mjs";
+import "../hooks/models.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import "../Hooks.mjs";
+import "../Sessions.mjs";
+import "../password/methods/errors.mjs";
+import "../Identity.mjs";
+import "../Proofs.mjs";
+import { PasswordPersistence } from "../password/methods/PasswordPersistence.mjs";
+import "./proof-target.mjs";
+import "../Password.mjs";
+import "./password-sql.mjs";
+import { PasswordRegistrationAuthority } from "./password-registration.mjs";
+import { Context, Effect, Layer } from "effect";
+import "effect/unstable/sql/SqlError";
+//#region src/drizzle/password-target.d.ts
+declare const passwordPersistenceLayer: (services: Effect.Effect<{
+  readonly passwordPersistence: PasswordPersistence["Service"];
+}, never, LifecycleHooks>) => Layer.Layer<PasswordPersistence, never, LifecycleHooks>;
+declare const passwordRegistrationLayer: <Id, Registration>(tag: Context.Key<Id, PasswordRegistrationAuthority<Registration>>, services: Effect.Effect<{
+  readonly registrationAuthority: PasswordRegistrationAuthority<Registration>;
+}, never, LifecycleHooks>) => Layer.Layer<Id, never, LifecycleHooks>;
+//#endregion
+export { passwordPersistenceLayer, passwordRegistrationLayer };
+//# sourceMappingURL=password-target.d.mts.map

package/dist/drizzle/password-target.mjs

@@ -0,0 +1,63 @@
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { coordinateCommit, hasCommitScope } from "../hooks/commit.mjs";
+import { PasswordUnavailable } from "../password/methods/errors.mjs";
+import { sqlClientStandaloneGuard } from "./standalone-guard.mjs";
+import { PasswordPersistence } from "../password/methods/PasswordPersistence.mjs";
+import { makeSqlPasswordPersistence } from "./password-sql.mjs";
+import { makeSqlPasswordRegistrationAuthority } from "./password-registration.mjs";
+import { Effect, Layer } from "effect";
+//#region src/drizzle/password-target.ts
+const sqlClientPasswordStandaloneGuard = (database) => sqlClientStandaloneGuard(database, () => PasswordUnavailable.make({}));
+const passwordOptions = (configuration, proofMapping, coordinated = false) => ({
+	mode: configuration.mode,
+	locking: configuration.locking,
+	standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,
+	insertIfAbsent: configuration.insertIfAbsent,
+	coordinated,
+	...proofMapping === void 0 ? {} : { proof: {
+		mapping: proofMapping,
+		configuration: {
+			mode: configuration.proof.mode,
+			locking: configuration.proof.locking,
+			standaloneGuard: Effect.void,
+			coordinated,
+			insertIfAbsent: configuration.proof.insertIfAbsent
+		}
+	} }
+});
+const registrationOptions = (configuration, coordinated = false) => ({
+	mode: configuration.mode,
+	locking: configuration.locking,
+	standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,
+	generatedSubjectRows: configuration.generatedSubjectRows,
+	coordinated
+});
+const makeTargetPasswordPersistenceServices = (database, mapping, configuration, proofMapping) => Effect.gen(function* () {
+	return { passwordPersistence: yield* makeSqlPasswordPersistence(database, mapping, passwordOptions(configuration, proofMapping)) };
+});
+const makeTargetPasswordRegistrationServices = (database, mapping, configuration) => Effect.gen(function* () {
+	return { registrationAuthority: yield* makeSqlPasswordRegistrationAuthority(database, mapping, registrationOptions(configuration)) };
+});
+/** Native transaction acquisition exposes SqlError; caller errors propagate unchanged. */
+const coordinateTargetPasswordPersistence = (database, mapping, configuration, proofMapping, owner) => Effect.gen(function* () {
+	const hooks = yield* LifecycleHooks;
+	if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});
+	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
+	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
+		return yield* owner(transaction, { passwordPersistence: yield* makeSqlPasswordPersistence(transaction, mapping, passwordOptions(configuration, proofMapping, true)) });
+	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
+});
+const coordinateTargetPasswordRegistration = (database, mapping, configuration, owner) => Effect.gen(function* () {
+	const hooks = yield* LifecycleHooks;
+	if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});
+	yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;
+	return (yield* coordinateCommit(() => database.transaction((transaction) => Effect.gen(function* () {
+		return yield* owner(transaction, { registrationAuthority: yield* makeSqlPasswordRegistrationAuthority(transaction, mapping, registrationOptions(configuration, true)) });
+	})), { mode: configuration.mode }).pipe(Effect.provideService(LifecycleHooks, hooks))).value;
+});
+const passwordPersistenceLayer = (services) => Layer.effect(PasswordPersistence, Effect.map(services, (value) => value.passwordPersistence));
+const passwordRegistrationLayer = (tag, services) => Layer.effect(tag, Effect.map(services, (value) => value.registrationAuthority));
+//#endregion
+export { coordinateTargetPasswordPersistence, coordinateTargetPasswordRegistration, makeTargetPasswordPersistenceServices, makeTargetPasswordRegistrationServices, passwordOptions, passwordPersistenceLayer, passwordRegistrationLayer, sqlClientPasswordStandaloneGuard };
+
+//# sourceMappingURL=password-target.mjs.map

package/dist/drizzle/password-target.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-target.mjs","names":[],"sources":["../../src/drizzle/password-target.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- public driver wrappers restore concrete Drizzle generics. */\nimport type { Context } from \"effect\";\nimport { Effect, Layer } from \"effect\";\nimport type * as SqlError from \"effect/unstable/sql/SqlError\";\n\nimport { coordinateCommit, hasCommitScope } from \"../hooks/commit\";\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport { PasswordUnavailable } from \"../password/methods/errors\";\nimport { PasswordPersistence } from \"../password/methods/PasswordPersistence\";\nimport {\n  makeSqlPasswordRegistrationAuthority,\n  type PasswordRegistrationAuthority,\n  type PasswordRegistrationConfiguration,\n} from \"./password-registration\";\nimport {\n  makeSqlPasswordPersistence,\n  type PasswordSqlConfiguration,\n  type PasswordSqlDatabase,\n  type PasswordSqlQuery,\n} from \"./password-sql\";\nimport type { ProofTargetConfiguration } from \"./proof-target\";\nimport { sqlClientStandaloneGuard } from \"./standalone-guard\";\n\nexport interface PasswordTargetConfiguration {\n  readonly mode: \"interactive\" | \"synchronous\";\n  readonly locking: boolean;\n  readonly standaloneGuard: Effect.Effect<void, PasswordUnavailable>;\n  readonly coordinatorGuard?: Effect.Effect<void, PasswordUnavailable>;\n  readonly insertIfAbsent: (\n    query: PasswordSqlQuery,\n    selfKey: string,\n    selfValue: unknown,\n  ) => PasswordSqlQuery;\n  readonly generatedSubjectRows: (query: PasswordSqlQuery) => PasswordSqlQuery;\n  readonly proof: ProofTargetConfiguration;\n}\n\ninterface TransactionOwner<Transaction> {\n  readonly transaction: <A, E, R>(\n    body: (transaction: Transaction) => Effect.Effect<A, E, R>,\n  ) => Effect.Effect<A, E | SqlError.SqlError, R>;\n}\n\nexport type PasswordCoordinatorError<E> =\n  | E\n  | PasswordUnavailable\n  | HookConfigurationError\n  | SqlError.SqlError;\n\nexport const sqlClientPasswordStandaloneGuard = (\n  database: unknown,\n): Effect.Effect<void, PasswordUnavailable> =>\n  sqlClientStandaloneGuard(database, () => PasswordUnavailable.make({}));\n\nexport const passwordOptions = (\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n  coordinated = false,\n): PasswordSqlConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  insertIfAbsent: configuration.insertIfAbsent,\n  coordinated,\n  ...(proofMapping === undefined\n    ? {}\n    : {\n        proof: {\n          mapping: proofMapping,\n          configuration: {\n            mode: configuration.proof.mode,\n            locking: configuration.proof.locking,\n\n            standaloneGuard: Effect.void,\n\n            coordinated,\n            insertIfAbsent: configuration.proof.insertIfAbsent,\n          },\n        },\n      }),\n});\n\nconst registrationOptions = (\n  configuration: PasswordTargetConfiguration,\n  coordinated = false,\n): PasswordRegistrationConfiguration => ({\n  mode: configuration.mode,\n  locking: configuration.locking,\n\n  standaloneGuard: !coordinated ? configuration.standaloneGuard : Effect.void,\n  generatedSubjectRows: configuration.generatedSubjectRows,\n  coordinated,\n});\n\nexport const makeTargetPasswordPersistenceServices = (\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping?: any,\n) =>\n  Effect.gen(function* () {\n    return {\n      passwordPersistence: yield* makeSqlPasswordPersistence(\n        database,\n        mapping,\n        passwordOptions(configuration, proofMapping),\n      ),\n    };\n  });\n\nexport const makeTargetPasswordRegistrationServices = <Registration>(\n  database: any,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    return {\n      registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n        database,\n        mapping,\n        registrationOptions(configuration),\n      ),\n    };\n  });\n\n/** Native transaction acquisition exposes SqlError; caller errors propagate unchanged. */\nexport const coordinateTargetPasswordPersistence = <Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  proofMapping: any | undefined,\n  owner: (\n    transaction: Transaction,\n    services: { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, PasswordCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              passwordPersistence: yield* makeSqlPasswordPersistence(\n                transaction as unknown as PasswordSqlDatabase,\n                mapping,\n                passwordOptions(configuration, proofMapping, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const coordinateTargetPasswordRegistration = <Registration, Transaction, A, E, R>(\n  database: TransactionOwner<Transaction>,\n  mapping: any,\n  configuration: PasswordTargetConfiguration,\n  owner: (\n    transaction: Transaction,\n    services: {\n      readonly registrationAuthority: PasswordRegistrationAuthority<Registration>;\n    },\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PasswordCoordinatorError<E>, R | LifecycleHooks> =>\n  Effect.gen(function* (): Effect.fn.Return<A, PasswordCoordinatorError<E>, R | LifecycleHooks> {\n    const hooks = yield* LifecycleHooks;\n\n    if (yield* hasCommitScope) return yield* PasswordUnavailable.make({});\n    yield* configuration.coordinatorGuard ?? configuration.standaloneGuard;\n\n    const result = yield* coordinateCommit(\n      () =>\n        database.transaction((transaction) =>\n          Effect.gen(function* () {\n            return yield* owner(transaction, {\n              registrationAuthority: yield* makeSqlPasswordRegistrationAuthority<Registration>(\n                transaction as unknown as PasswordSqlDatabase,\n                mapping,\n                registrationOptions(configuration, true),\n              ),\n            });\n          }),\n        ),\n      { mode: configuration.mode },\n    ).pipe(Effect.provideService(LifecycleHooks, hooks));\n\n    return result.value;\n  });\n\nexport const passwordPersistenceLayer = (\n  services: Effect.Effect<\n    { readonly passwordPersistence: PasswordPersistence[\"Service\"] },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    PasswordPersistence,\n    Effect.map(services, (value) => value.passwordPersistence),\n  );\n\nexport const passwordRegistrationLayer = <Id, Registration>(\n  tag: Context.Key<Id, PasswordRegistrationAuthority<Registration>>,\n  services: Effect.Effect<\n    { readonly registrationAuthority: PasswordRegistrationAuthority<Registration> },\n    never,\n    LifecycleHooks\n  >,\n) =>\n  Layer.effect(\n    tag,\n    Effect.map(services, (value) => value.registrationAuthority),\n  );\n"],"mappings":";;;;;;;;;AAkDA,MAAa,oCACX,aAEA,yBAAyB,gBAAgB,oBAAoB,KAAK,CAAC,CAAC,CAAC;AAEvE,MAAa,mBACX,eACA,cACA,cAAc,WACgB;CAC9B,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,gBAAgB,cAAc;CAC9B;CACA,GAAI,iBAAiB,KAAA,IACjB,CAAC,IACD,EACE,OAAO;EACL,SAAS;EACT,eAAe;GACb,MAAM,cAAc,MAAM;GAC1B,SAAS,cAAc,MAAM;GAE7B,iBAAiB,OAAO;GAExB;GACA,gBAAgB,cAAc,MAAM;EACtC;CACF,EACF;AACN;AAEA,MAAM,uBACJ,eACA,cAAc,WACyB;CACvC,MAAM,cAAc;CACpB,SAAS,cAAc;CAEvB,iBAAiB,CAAC,cAAc,cAAc,kBAAkB,OAAO;CACvE,sBAAsB,cAAc;CACpC;AACF;AAEA,MAAa,yCACX,UACA,SACA,eACA,iBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,qBAAqB,OAAO,2BAC1B,UACA,SACA,gBAAgB,eAAe,YAAY,CAC7C,EACF;AACF,CAAC;AAEH,MAAa,0CACX,UACA,SACA,kBAEA,OAAO,IAAI,aAAa;CACtB,OAAO,EACL,uBAAuB,OAAO,qCAC5B,UACA,SACA,oBAAoB,aAAa,CACnC,EACF;AACF,CAAC;;AAGH,MAAa,uCACX,UACA,SACA,eACA,cACA,UAKA,OAAO,IAAI,aAAmF;CAC5F,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,qBAAqB,OAAO,2BAC1B,aACA,SACA,gBAAgB,eAAe,cAAc,IAAI,CACnD,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,wCACX,UACA,SACA,eACA,UAOA,OAAO,IAAI,aAAmF;CAC5F,MAAM,QAAQ,OAAO;CAErB,IAAI,OAAO,gBAAgB,OAAO,OAAO,oBAAoB,KAAK,CAAC,CAAC;CACpE,OAAO,cAAc,oBAAoB,cAAc;CAkBvD,QAAO,OAhBe,uBAElB,SAAS,aAAa,gBACpB,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,MAAM,aAAa,EAC/B,uBAAuB,OAAO,qCAC5B,aACA,SACA,oBAAoB,eAAe,IAAI,CACzC,EACF,CAAC;CACH,CAAC,CACH,GACF,EAAE,MAAM,cAAc,KAAK,CAC7B,CAAC,CAAC,KAAK,OAAO,eAAe,gBAAgB,KAAK,CAAC,EAAA,CAErC;AAChB,CAAC;AAEH,MAAa,4BACX,aAMA,MAAM,OACJ,qBACA,OAAO,IAAI,WAAW,UAAU,MAAM,mBAAmB,CAC3D;AAEF,MAAa,6BACX,KACA,aAMA,MAAM,OACJ,KACA,OAAO,IAAI,WAAW,UAAU,MAAM,qBAAqB,CAC7D"}

package/dist/drizzle/pg-emails.d.mts

@@ -0,0 +1,83 @@
+import { SubjectId } from "../Schema.mjs";
+import { LoginIdentifier } from "../identity/models.mjs";
+import { HookConfigurationError } from "../hooks/models.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { PreparedCommit } from "../hooks/commit.mjs";
+import "../Hooks.mjs";
+import { EmailAddressDecision, EmailCredentialSnapshot } from "../email/models.mjs";
+import { EmailAddressMapping, EmailRegistrationMapping, EmailSignInMapping } from "./email-model.mjs";
+import { ProofCompletionInput } from "../proofs/ProofPersistence.mjs";
+import "../Identity.mjs";
+import "../Proofs.mjs";
+import { ProofPersistenceMapping } from "./proof-model.mjs";
+import { EmailUnavailable } from "../email/errors.mjs";
+import { EmailAddressMutation, EmailAddressPersistence, EmailAddressTarget, PrepareEmailCommit } from "../email/EmailAddressPersistence.mjs";
+import "../Email.mjs";
+import { EmailRegistrationAuthority } from "./email-registration.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { AnyPgTable } from "drizzle-orm/pg-core";
+import { SqlError } from "effect/unstable/sql/SqlError";
+import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
+import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
+//#region src/drizzle/pg-emails.d.ts
+type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
+type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
+type ProofMapping = ProofPersistenceMapping<any, any, any, any, any, any, any, any, any, any, any, any>;
+declare const makePgEmailSignInServices: <S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, NativeId>(database: Database, mapping: EmailSignInMapping<S, I, C, NativeId>) => Effect.Effect<{
+  emailSignInTargets: {
+    readonly lookup: (input: {
+      readonly moduleId: string;
+      readonly identifier: LoginIdentifier;
+    }) => Effect.Effect<import("effect/Option").Option<EmailCredentialSnapshot>, EmailUnavailable>;
+  };
+}, never, never>;
+declare const makePgEmailAddressServices: <S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, M extends AnyPgTable, NativeId>(database: Database, mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
+  emailAddressPersistence: {
+    readonly target: (input: {
+      readonly moduleId: string;
+      readonly subjectId: SubjectId;
+      readonly target: LoginIdentifier;
+      readonly sourceCredentialId?: string;
+    }) => Effect.Effect<EmailAddressTarget, EmailUnavailable>;
+    readonly checkCompletion: (input: ProofCompletionInput) => Effect.Effect<boolean, EmailUnavailable>;
+    readonly verifyWithProof: <A>(input: EmailAddressMutation, prepare: PrepareEmailCommit<EmailAddressDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+    readonly changeWithProof: <A>(input: EmailAddressMutation, prepare: PrepareEmailCommit<EmailAddressDecision, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+    readonly cleanup: <A>(input: {
+      readonly moduleId: string;
+      readonly limit: number;
+    }, prepare: PrepareEmailCommit<{
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => Effect.Effect<PreparedCommit<A>, EmailUnavailable>;
+  };
+}, never, LifecycleHooks>;
+declare function coordinatePgEmailAddress<D extends Database, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, M extends AnyPgTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly transaction?: never;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgEmailAddress<D extends Database, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, M extends AnyPgTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements>;
+declare const makePgEmailRegistrationServices: <Registration, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, Rq extends AnyPgTable, NativeId>(database: Database, mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>, proofMapping: ProofMapping) => Effect.Effect<{
+  registrationAuthority: EmailRegistrationAuthority<Registration>;
+}, never, LifecycleHooks>;
+declare function coordinatePgEmailRegistration<TargetId, Registration, D extends Database, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, Rq extends AnyPgTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
+  readonly transaction?: never;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgEmailRegistration<TargetId, Registration, D extends Database, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, Rq extends AnyPgTable, NativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;
+  readonly proofMapping: ProofMapping;
+  readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinatePgEmailAddress, coordinatePgEmailRegistration, makePgEmailAddressServices, makePgEmailRegistrationServices, makePgEmailSignInServices };
+//# sourceMappingURL=pg-emails.d.mts.map

package/dist/drizzle/pg-emails.mjs

@@ -0,0 +1,38 @@
+import { EmailAddressPersistence } from "../email/EmailAddressPersistence.mjs";
+import { coordinateTargetEmailAddress, coordinateTargetEmailRegistration, makeTargetEmailAddressServices, makeTargetEmailRegistrationServices, makeTargetEmailSignInServices, sqlClientEmailStandaloneGuard } from "./email-target.mjs";
+import { sqlClientProofStandaloneGuard } from "./proof-target.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/pg-emails.ts
+const configuration = (database) => ({
+	mode: "interactive",
+	locking: true,
+	standaloneGuard: sqlClientEmailStandaloneGuard(database),
+	generatedSubjectRows: (query) => query.returning(),
+	proof: {
+		mode: "interactive",
+		locking: true,
+		standaloneGuard: sqlClientProofStandaloneGuard(database),
+		insertIfAbsent: (query) => query.onConflictDoNothing()
+	}
+});
+const makePgEmailSignInServices = (database, mapping) => makeTargetEmailSignInServices(database, mapping, configuration(database));
+const makePgEmailAddressServices = (database, mapping, proofMapping) => makeTargetEmailAddressServices(database, mapping, proofMapping, configuration(database));
+function coordinatePgEmailAddress(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetEmailAddress(database, options.mapping, options.proofMapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+const makePgEmailRegistrationServices = (database, mapping, proofMapping) => makeTargetEmailRegistrationServices(database, mapping, proofMapping, configuration(database));
+function coordinatePgEmailRegistration(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetEmailRegistration(database, options.mapping, options.proofMapping, configuration(database), (transaction, services) => {
+		const provided = Context.make(options.target, services.registrationAuthority);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+//#endregion
+export { coordinatePgEmailAddress, coordinatePgEmailRegistration, makePgEmailAddressServices, makePgEmailRegistrationServices, makePgEmailSignInServices };
+
+//# sourceMappingURL=pg-emails.mjs.map

package/dist/drizzle/pg-emails.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-emails.mjs","names":[],"sources":["../../src/drizzle/pg-emails.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- proof mapping tables are independently typed by the proof owner; this driver forwards them unchanged to the shared target. */\nimport type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport { EmailAddressPersistence } from \"../email/EmailAddressPersistence\";\nimport type { EmailUnavailable } from \"../email/errors\";\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport type {\n  EmailAddressMapping,\n  EmailRegistrationMapping,\n  EmailSignInMapping,\n} from \"./email-model\";\nimport type { EmailRegistrationAuthority } from \"./email-registration\";\nimport type { EmailSqlQuery } from \"./email-sql\";\nimport {\n  coordinateTargetEmailAddress,\n  coordinateTargetEmailRegistration,\n  makeTargetEmailAddressServices,\n  makeTargetEmailRegistrationServices,\n  makeTargetEmailSignInServices,\n  sqlClientEmailStandaloneGuard,\n} from \"./email-target\";\nimport type { ProofPersistenceMapping } from \"./proof-model\";\nimport type { ProofSqlQuery } from \"./proof-sql\";\nimport { sqlClientProofStandaloneGuard } from \"./proof-target\";\nimport type { SuppliedService } from \"./SuppliedService\";\n\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\ntype ProofMapping = ProofPersistenceMapping<\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any\n>;\n\nconst configuration = (database: Database) => ({\n  mode: \"interactive\" as const,\n  locking: true,\n  standaloneGuard: sqlClientEmailStandaloneGuard(database),\n  generatedSubjectRows: (query: EmailSqlQuery) => query.returning(),\n  proof: {\n    mode: \"interactive\" as const,\n    locking: true,\n    standaloneGuard: sqlClientProofStandaloneGuard(database),\n    insertIfAbsent: (query: ProofSqlQuery) => query.onConflictDoNothing(),\n  },\n});\n\nexport const makePgEmailSignInServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailSignInMapping<S, I, C, NativeId>,\n) => makeTargetEmailSignInServices(database, mapping, configuration(database));\n\nexport const makePgEmailAddressServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>,\n  proofMapping: ProofMapping,\n) => makeTargetEmailAddressServices(database, mapping, proofMapping, configuration(database));\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailAddress<\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  M extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailAddressMapping<S, I, C, AC, M, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, EmailAddressPersistence> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailAddress<TransactionOf<D>, Out, E, Exclude<R, EmailAddressPersistence>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly emailAddressPersistence: EmailAddressPersistence[\"Service\"] },\n      ) => {\n        const provided = Context.make(EmailAddressPersistence, services.emailAddressPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n\nexport const makePgEmailRegistrationServices = <\n  Registration,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n>(\n  database: Database,\n  mapping: EmailRegistrationMapping<Registration, S, I, C, AC, Rq, NativeId>,\n  proofMapping: ProofMapping,\n) =>\n  makeTargetEmailRegistrationServices<Registration>(\n    database,\n    mapping,\n    proofMapping,\n    configuration(database),\n  );\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgEmailRegistration<\n  TargetId,\n  Registration,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  Rq extends AnyPgTable,\n  NativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, Rq, NativeId>;\n    readonly proofMapping: ProofMapping;\n    readonly target: SuppliedService<TargetId, EmailRegistrationAuthority<Registration>>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | EmailUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetEmailRegistration<Registration, TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      options.proofMapping,\n      configuration(database),\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly registrationAuthority: EmailRegistrationAuthority<Registration> },\n      ) => {\n        const provided = Context.make(options.target, services.registrationAuthority);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;;AAiDA,MAAM,iBAAiB,cAAwB;CAC7C,MAAM;CACN,SAAS;CACT,iBAAiB,8BAA8B,QAAQ;CACvD,uBAAuB,UAAyB,MAAM,UAAU;CAChE,OAAO;EACL,MAAM;EACN,SAAS;EACT,iBAAiB,8BAA8B,QAAQ;EACvD,iBAAiB,UAAyB,MAAM,oBAAoB;CACtE;AACF;AAEA,MAAa,6BAMX,UACA,YACG,8BAA8B,UAAU,SAAS,cAAc,QAAQ,CAAC;AAE7E,MAAa,8BAQX,UACA,SACA,iBACG,+BAA+B,UAAU,SAAS,cAAc,cAAc,QAAQ,CAAC;AA0D5F,SAAgB,yBAgBd,SACA,SAKA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,6BACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,yBAAyB,SAAS,uBAAuB;EACvF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF;AAEA,MAAa,mCASX,UACA,SACA,iBAEA,oCACE,UACA,SACA,cACA,cAAc,QAAQ,CACxB;AAgEF,SAAgB,8BAkBd,SACA,SAMA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,kCACE,UACA,QAAQ,SACR,QAAQ,cACR,cAAc,QAAQ,IAEpB,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,qBAAqB;EAC5E,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}

package/dist/drizzle/pg-password-prepared.d.mts

@@ -0,0 +1,33 @@
+import { HookConfigurationError } from "../hooks/models.mjs";
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { PasswordUnavailable } from "../password/methods/errors.mjs";
+import { PasswordPreparedPersistence } from "../password/methods/PasswordPreparedPersistence.mjs";
+import { PasswordPreparedPersistenceMapping, PasswordPreparedProofMapping } from "./password-prepared-model.mjs";
+import { SuppliedService } from "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { AnyRelations } from "drizzle-orm";
+import { AnyPgTable } from "drizzle-orm/pg-core";
+import { SqlError } from "effect/unstable/sql/SqlError";
+import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
+import { EffectPgDatabase as EffectPgDatabase$1 } from "drizzle-orm/effect-postgres";
+//#region src/drizzle/pg-password-prepared.d.ts
+type Database = EffectPgDatabase$1<AnyRelations> | EffectPgDatabase<AnyRelations>;
+type TransactionOf<D extends Database> = Parameters<Parameters<D["transaction"]>[0]>[0];
+declare const makePgPasswordPreparedPersistenceServices: <S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, A extends AnyPgTable, RS extends AnyPgTable, CE extends AnyPgTable, M extends AnyPgTable, T extends AnyPgTable, B extends AnyPgTable, NativeId, PS extends AnyPgTable = AnyPgTable, PC extends AnyPgTable = AnyPgTable, PM extends AnyPgTable = AnyPgTable, PSub extends AnyPgTable = AnyPgTable, PI extends AnyPgTable = AnyPgTable, PCr extends AnyPgTable = AnyPgTable, PNativeId = unknown>(database: Database, mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>, proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>) => Effect.Effect<{
+  passwordPreparedPersistence: PasswordPreparedPersistence;
+}, never, LifecycleHooks>;
+declare function coordinatePgPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, A extends AnyPgTable, RS extends AnyPgTable, CE extends AnyPgTable, M extends AnyPgTable, T extends AnyPgTable, B extends AnyPgTable, NativeId, PS extends AnyPgTable, PC extends AnyPgTable, PM extends AnyPgTable, PSub extends AnyPgTable, PI extends AnyPgTable, PCr extends AnyPgTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;
+  readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
+  readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
+  readonly transaction?: never;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements>;
+declare function coordinatePgPasswordPreparedPersistence<TargetId, D extends Database, S extends AnyPgTable, I extends AnyPgTable, C extends AnyPgTable, AC extends AnyPgTable, A extends AnyPgTable, RS extends AnyPgTable, CE extends AnyPgTable, M extends AnyPgTable, T extends AnyPgTable, B extends AnyPgTable, NativeId, PS extends AnyPgTable, PC extends AnyPgTable, PM extends AnyPgTable, PSub extends AnyPgTable, PI extends AnyPgTable, PCr extends AnyPgTable, PNativeId, Out, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>, options: {
+  readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;
+  readonly proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId> | undefined;
+  readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;
+  readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;
+}, body: Effect.Effect<Out, E, R>): Effect.Effect<Out, E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError, Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements>;
+//#endregion
+export { coordinatePgPasswordPreparedPersistence, makePgPasswordPreparedPersistenceServices };
+//# sourceMappingURL=pg-password-prepared.d.mts.map

package/dist/drizzle/pg-password-prepared.mjs

@@ -0,0 +1,16 @@
+import { coordinateTargetPasswordPreparedPersistence, makeTargetPasswordPreparedPersistenceServices } from "./password-prepared-target.mjs";
+import { pgPasswordConfiguration as configuration } from "./pg-passwords.mjs";
+import { Context, Effect } from "effect";
+//#region src/drizzle/pg-password-prepared.ts
+const makePgPasswordPreparedPersistenceServices = (database, mapping, proofMapping) => makeTargetPasswordPreparedPersistenceServices(database, mapping, configuration(database), proofMapping);
+function coordinatePgPasswordPreparedPersistence(acquire, options, body) {
+	return Effect.flatMap(acquire, (database) => coordinateTargetPasswordPreparedPersistence(database, options.mapping, configuration(database), options.proofMapping, (transaction, services) => {
+		const provided = Context.make(options.target, services.passwordPreparedPersistence);
+		const work = Effect.provideContext(body, provided);
+		return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+	}));
+}
+//#endregion
+export { coordinatePgPasswordPreparedPersistence, makePgPasswordPreparedPersistenceServices };
+
+//# sourceMappingURL=pg-password-prepared.mjs.map

package/dist/drizzle/pg-password-prepared.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-password-prepared.mjs","names":[],"sources":["../../src/drizzle/pg-password-prepared.ts"],"sourcesContent":["import type { AnyRelations } from \"drizzle-orm\";\nimport type { EffectPgDatabase as PgliteDatabase } from \"drizzle-orm/effect-pglite\";\nimport type { EffectPgDatabase as PostgresDatabase } from \"drizzle-orm/effect-postgres\";\nimport type { AnyPgTable } from \"drizzle-orm/pg-core\";\nimport { Effect, Context } from \"effect\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nimport type { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport type { HookConfigurationError } from \"../hooks/models\";\nimport type { PasswordUnavailable } from \"../password/methods/errors\";\nimport type { PasswordPreparedPersistence } from \"../password/methods/PasswordPreparedPersistence\";\nimport type {\n  PasswordPreparedPersistenceMapping,\n  PasswordPreparedProofMapping,\n} from \"./password-prepared-model\";\nimport {\n  makeTargetPasswordPreparedPersistenceServices,\n  coordinateTargetPasswordPreparedPersistence,\n} from \"./password-prepared-target\";\nimport { pgPasswordConfiguration as configuration } from \"./pg-passwords\";\nimport type { SuppliedService } from \"./SuppliedService\";\ntype Database = PostgresDatabase<AnyRelations> | PgliteDatabase<AnyRelations>;\ntype TransactionOf<D extends Database> = Parameters<Parameters<D[\"transaction\"]>[0]>[0];\n\nexport const makePgPasswordPreparedPersistenceServices = <\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable = AnyPgTable,\n  PC extends AnyPgTable = AnyPgTable,\n  PM extends AnyPgTable = AnyPgTable,\n  PSub extends AnyPgTable = AnyPgTable,\n  PI extends AnyPgTable = AnyPgTable,\n  PCr extends AnyPgTable = AnyPgTable,\n  PNativeId = unknown,\n>(\n  database: Database,\n  mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>,\n  proofMapping?: PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>,\n) =>\n  makeTargetPasswordPreparedPersistenceServices(\n    database,\n    mapping,\n    configuration(database),\n    proofMapping,\n  );\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: never;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId | TxId> | LifecycleHooks | DatabaseRequirements\n>;\n\nexport function coordinatePgPasswordPreparedPersistence<\n  TargetId,\n  D extends Database,\n  S extends AnyPgTable,\n  I extends AnyPgTable,\n  C extends AnyPgTable,\n  AC extends AnyPgTable,\n  A extends AnyPgTable,\n  RS extends AnyPgTable,\n  CE extends AnyPgTable,\n  M extends AnyPgTable,\n  T extends AnyPgTable,\n  B extends AnyPgTable,\n  NativeId,\n  PS extends AnyPgTable,\n  PC extends AnyPgTable,\n  PM extends AnyPgTable,\n  PSub extends AnyPgTable,\n  PI extends AnyPgTable,\n  PCr extends AnyPgTable,\n  PNativeId,\n  Out,\n  E,\n  R,\n  DatabaseError,\n  DatabaseRequirements,\n  TxId,\n  TxShape,\n>(\n  acquire: Effect.Effect<D, DatabaseError, DatabaseRequirements>,\n  options: {\n    readonly mapping: PasswordPreparedPersistenceMapping<S, I, C, AC, A, RS, CE, M, T, B, NativeId>;\n    readonly proofMapping?:\n      | PasswordPreparedProofMapping<PS, PC, PM, PSub, PI, PCr, PNativeId>\n      | undefined;\n    readonly target: SuppliedService<TargetId, PasswordPreparedPersistence>;\n    readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<D>>, TxShape>;\n  },\n  body: Effect.Effect<Out, E, R>,\n): Effect.Effect<\n  Out,\n  E | PasswordUnavailable | HookConfigurationError | SqlError | DatabaseError,\n  Exclude<R, TargetId> | LifecycleHooks | DatabaseRequirements\n> {\n  return Effect.flatMap(acquire, (database) =>\n    coordinateTargetPasswordPreparedPersistence<TransactionOf<D>, Out, E, Exclude<R, TargetId>>(\n      database,\n      options.mapping,\n      configuration(database),\n      options.proofMapping,\n      (\n        transaction: TransactionOf<D>,\n        services: { readonly passwordPreparedPersistence: PasswordPreparedPersistence },\n      ) => {\n        const provided = Context.make(options.target, services.passwordPreparedPersistence);\n        const work = Effect.provideContext(body, provided);\n\n        return options.transaction === undefined\n          ? work\n          : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n      },\n    ),\n  );\n}\n"],"mappings":";;;;AAwBA,MAAa,6CAoBX,UACA,SACA,iBAEA,8CACE,UACA,SACA,cAAc,QAAQ,GACtB,YACF;AA0FF,SAAgB,wCA6Bd,SACA,SAQA,MAKA;CACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,4CACE,UACA,QAAQ,SACR,cAAc,QAAQ,GACtB,QAAQ,eAEN,aACA,aACG;EACH,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,SAAS,2BAA2B;EAClF,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;EAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;CAC1F,CACF,CACF;AACF"}