@yielded/auth 0.1.0-beta.1

package/dist/drizzle/phone-state.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-state.mjs","names":[],"sources":["../../src/drizzle/phone-state.ts"],"sourcesContent":["/* oxlint-disable no-explicit-any -- native kernel; public wrappers retain exact consumer table/ID types. */\nimport { sql, type SQL } from \"drizzle-orm\";\nimport { Context, Effect, Option, Schema } from \"effect\";\n\nimport {\n  PhoneCustody,\n  PhoneCommandId,\n  PhoneLifecycleAction,\n  PhoneLifecycleTarget,\n  PhoneLifecyclePolicy,\n  type PhoneMutationDecision,\n} from \"../phone/lifecycleModels\";\nimport { PhoneOtpUnavailable, PhoneCredentialSnapshot } from \"../phone/models\";\nimport type { PhoneMutation } from \"../phone/PhonePersistence\";\nimport type { SubjectId } from \"../Schema\";\nimport { AuthenticationRequirement, SecurityRevision } from \"../sessions/models\";\nimport { digest, randomId } from \"../totp/crypto\";\nimport { both, makeTransactionRows, type TransactionOwner } from \"./transaction-owner\";\nexport const unavailable = () => PhoneOtpUnavailable.make({});\n\nexport const invariant: (value: unknown) => asserts value = (value) => {\n  if (!value) throw unavailable();\n};\n\nexport class CurrentPhoneTransaction extends Context.Service<\n  CurrentPhoneTransaction,\n  TransactionOwner<PhoneOtpUnavailable>\n>()(\"effect-auth/drizzle/CurrentPhoneTransaction\") {}\n\nexport const { equal, copiedRow, col } = makeTransactionRows(unavailable);\n\nconst AdmissionReceipt = Schema.Struct({\n  fingerprint: Schema.NonEmptyString,\n  network: Schema.NonEmptyString,\n  accepted: Schema.Boolean,\n  expiresAtMillis: Schema.Natural,\n});\n\nconst AdmissionCounter = Schema.Struct({ window: Schema.Natural, count: Schema.Natural });\nconst CommandRecord = Schema.Struct({ commandId: PhoneCommandId, action: PhoneLifecycleAction });\nconst State = Schema.Union([PhoneCustody, AdmissionReceipt, AdmissionCounter, CommandRecord]);\n\nconst storageCodec = Schema.fromJsonString(\n  Schema.Struct({ moduleId: Schema.NonEmptyString, record: State }),\n);\n\nconst readStored = <A extends Schema.Top>(mapping: any, payload: string, schema: A): A[\"Type\"] => {\n  const stored = Schema.decodeSync(storageCodec)(payload);\n\n  invariant(stored.moduleId === mapping.moduleId && Schema.is(schema)(stored.record));\n\n  return stored.record;\n};\n\nconst stringTuple = Schema.fromJsonString(Schema.Array(Schema.String));\n\nconst scope = (moduleId: string, kind: string, key: string) =>\n  digest(Schema.encodeSync(stringTuple)([\"effect-auth/phone/v1\", moduleId, kind, key]));\n\nconst rejected: PhoneMutationDecision = { _tag: \"Rejected\" };\n\nconst stateRead = Effect.fn(\"PhoneNative.stateRead\")(function* (mapping: any, key: string) {\n  const owner = yield* CurrentPhoneTransaction;\n\n  return yield* owner.read(\n    mapping.state.table,\n    equal(mapping.state.table, { [mapping.state.scope]: key }),\n    { limit: 1 },\n  );\n});\n\nconst stateWrite = Effect.fn(\"PhoneNative.stateWrite\")(function* (\n  mapping: any,\n  key: string,\n  value: typeof State.Type,\n  observed: any,\n) {\n  const owner = yield* CurrentPhoneTransaction;\n\n  const values = {\n    [mapping.state.state]: Schema.encodeSync(storageCodec)({\n      moduleId: mapping.moduleId,\n      record: value,\n    }),\n    [mapping.state.version]: randomId(),\n  };\n\n  if (observed.rows.length === 0) {\n    const inserted = yield* owner.insert(\n      mapping.state.table,\n      {\n        ...copiedRow(\n          mapping.state.encodeInsert({\n            scope: key,\n            state: values[mapping.state.state],\n            version: values[mapping.state.version],\n          }),\n        ),\n        [mapping.state.scope]: key,\n        ...values,\n      },\n      { [mapping.state.scope]: key },\n    );\n\n    observed.rows = inserted.rows;\n  } else yield* owner.update(mapping.state.table, { [mapping.state.scope]: key }, values);\n});\n\nconst custodyRead = Effect.fn(\"PhoneNative.custodyRead\")(function* (\n  mapping: any,\n  phoneNumber: string,\n) {\n  const key = scope(mapping.moduleId, \"custody\", phoneNumber),\n    observation = yield* stateRead(mapping, key);\n\n  const custody =\n    observation.rows.length === 0\n      ? null\n      : readStored(mapping, observation.rows[0]![mapping.state.state], PhoneCustody);\n\n  invariant(custody === null || custody.phoneNumber === phoneNumber);\n\n  return { key, observation, custody };\n});\n\nexport const capturePhone = Effect.fn(\"PhoneNative.capture\")(function* (\n  mapping: any,\n  input: {\n    readonly action: \"register\" | \"verify\" | \"change\";\n    readonly phoneNumber: any;\n    readonly subjectId?: SubjectId;\n    readonly sourcePhoneNumber?: any;\n  },\n) {\n  const owner = yield* CurrentPhoneTransaction;\n  const destination = yield* custodyRead(mapping, input.phoneNumber);\n\n  const source =\n    input.sourcePhoneNumber === undefined\n      ? null\n      : yield* custodyRead(mapping, input.sourcePhoneNumber);\n\n  const id = input.subjectId ?? destination.custody?.subjectId;\n\n  const subject =\n    id === undefined\n      ? null\n      : yield* owner.read(\n          mapping.subject.table,\n          equal(mapping.subject.table, { [mapping.subject.id]: mapping.subjectIds.toNative(id) }),\n          { limit: 1 },\n        );\n\n  const row = subject?.rows[0];\n\n  const active =\n    row !== undefined &&\n    (yield* owner.check(\n      sql`exists(select 1 from ${mapping.subject.table} where ${both(owner.exact(mapping.subject.table, row), mapping.subject.activeCondition)})`,\n    ));\n\n  const targetIdentifier = yield* owner.read(\n    mapping.identifier.table,\n    equal(mapping.identifier.table, {\n      [mapping.identifier.namespace]: \"phone\",\n      [mapping.identifier.value]: input.phoneNumber,\n    }),\n    { limit: 1 },\n  );\n\n  let eligible =\n    input.action === \"register\"\n      ? destination.custody === null && targetIdentifier.rows.length === 0\n      : active &&\n        input.subjectId === id &&\n        ((destination.custody === null && targetIdentifier.rows.length === 0) ||\n          (destination.custody?.subjectId === id && destination.custody?.state === \"unverified\"));\n\n  if (input.action === \"change\")\n    eligible =\n      eligible &&\n      input.sourcePhoneNumber !== input.phoneNumber &&\n      source?.custody?.subjectId === id &&\n      source?.custody?.state === \"verified\";\n  const credentials = [];\n\n  for (const custody of [destination.custody, source?.custody])\n    if (\n      custody !== null &&\n      custody !== undefined &&\n      custody.state === \"verified\" &&\n      custody.subjectId === id\n    ) {\n      const c = mapping.credential;\n\n      const found = yield* owner.read(\n        c.table,\n        equal(c.table, {\n          [c.id]: custody.credentialId,\n          [c.subjectId]: mapping.subjectIds.toNative(id),\n        }),\n        { limit: 1 },\n      );\n\n      const cr = found.rows[0];\n\n      if (\n        cr === undefined ||\n        cr[c.revision] !== custody.credentialRevision ||\n        !(yield* owner.check(\n          sql`exists(select 1 from ${c.table} where ${both(owner.exact(c.table, cr), c.activeCondition)})`,\n        ))\n      )\n        eligible = false;\n      else\n        credentials.push({\n          credentialId: custody.credentialId,\n          revision: custody.credentialRevision,\n        });\n    }\n\n  const target: PhoneLifecycleTarget = {\n    phoneNumber: input.phoneNumber,\n    custody: destination.custody,\n    source: source?.custody ?? null,\n    revision: active\n      ? {\n          subjectId: id!,\n          securityRevision: SecurityRevision.make(row![mapping.subject.securityRevision]),\n          credentials,\n        }\n      : null,\n    eligible,\n  };\n\n  return { target, destination, source, subject, subjectRow: row, targetIdentifier };\n});\n\nexport const lookupPhone = Effect.fn(\"PhoneNative.lookup\")(function* (\n  mapping: any,\n  input: { readonly moduleId: string; readonly phoneNumber: any },\n) {\n  invariant(input.moduleId === mapping.moduleId);\n\n  const captured = yield* capturePhone(mapping, {\n    action: \"verify\",\n    phoneNumber: input.phoneNumber,\n  });\n\n  const { custody, revision } = captured.target;\n\n  if (\n    custody === null ||\n    custody.state !== \"verified\" ||\n    custody.verifiedAtMillis === null ||\n    revision === null ||\n    !revision.credentials.some((c) => c.credentialId === custody.credentialId)\n  )\n    return Option.none();\n\n  const owner = yield* CurrentPhoneTransaction,\n    i = mapping.identifier,\n    row = captured.targetIdentifier.rows[0];\n\n  if (\n    row === undefined ||\n    row[i.revision] !== custody.custodyRevision ||\n    !(yield* owner.check(\n      sql`exists(select 1 from ${i.table} where ${both(owner.exact(i.table, row), equal(i.table, { [i.subjectId]: mapping.subjectIds.toNative(custody.subjectId) }), i.activeCondition)})`,\n    ))\n  )\n    return Option.none();\n\n  return Option.some(\n    Schema.decodeSync(PhoneCredentialSnapshot)({\n      moduleId: mapping.moduleId,\n      phoneNumber: input.phoneNumber,\n      custodyRevision: custody.custodyRevision,\n      verifiedAtMillis: custody.verifiedAtMillis,\n      credentialId: custody.credentialId,\n      credentialRevision: custody.credentialRevision,\n      revision,\n    }),\n  );\n});\n\nexport const admitPhone = Effect.fn(\"PhoneNative.admit\")(function* (\n  mapping: any,\n  input: {\n    readonly moduleId: string;\n    readonly action: \"request\" | \"attempt\";\n    readonly requestId: string;\n    readonly fingerprint: string;\n    readonly networkKey: string;\n    readonly replayLifetimeMillis: number;\n  },\n) {\n  invariant(\n    input.moduleId === mapping.moduleId &&\n      Number.isSafeInteger(input.replayLifetimeMillis) &&\n      input.replayLifetimeMillis >= 0 &&\n      input.networkKey.length > 0 &&\n      input.networkKey.length <= 1024 &&\n      input.requestId.length > 0 &&\n      input.requestId.length <= 256,\n  );\n\n  const owner = yield* CurrentPhoneTransaction,\n    now = yield* owner.now(mapping),\n    policy = mapping.admission;\n\n  const key = scope(mapping.moduleId, \"admission\", input.action + \"/\" + input.requestId),\n    receipt = yield* stateRead(mapping, key);\n\n  if (receipt.rows.length !== 0) {\n    const saved = readStored(mapping, receipt.rows[0]![mapping.state.state], AdmissionReceipt);\n\n    if (saved.expiresAtMillis > now)\n      owner.postconditions.push(sql`${mapping.engineNowMillis} < ${saved.expiresAtMillis}`);\n\n    return (\n      saved.fingerprint === input.fingerprint &&\n      saved.network === digest(input.networkKey) &&\n      saved.accepted === true &&\n      saved.expiresAtMillis > now\n    );\n  }\n\n  const window = Math.floor(now / policy.windowMillis),\n    entries = [\n      {\n        key: scope(mapping.moduleId, \"network\", input.action + \"/\" + digest(input.networkKey)),\n        limit: input.action === \"request\" ? policy.networkRequests : policy.networkAttempts,\n      },\n      ...(input.action === \"request\"\n        ? [{ key: scope(mapping.moduleId, \"messages\", \"global\"), limit: policy.maximumMessages }]\n        : []),\n    ].sort((a, b) => a.key.localeCompare(b.key));\n\n  const updates = [];\n  let accepted = true;\n\n  for (const entry of entries) {\n    const observed = yield* stateRead(mapping, entry.key),\n      previous =\n        observed.rows.length === 0\n          ? undefined\n          : readStored(mapping, observed.rows[0]![mapping.state.state], AdmissionCounter);\n\n    const count = previous?.window === window ? previous.count : 0;\n\n    if (count >= entry.limit) accepted = false;\n    updates.push({ ...entry, observed, count });\n  }\n  if (accepted)\n    for (const update of updates)\n      yield* stateWrite(mapping, update.key, { window, count: update.count + 1 }, update.observed);\n  yield* stateWrite(\n    mapping,\n    key,\n    {\n      fingerprint: input.fingerprint,\n      network: digest(input.networkKey),\n      accepted,\n      expiresAtMillis: now + Math.min(policy.requestRetentionMillis, input.replayLifetimeMillis),\n    },\n    receipt,\n  );\n  owner.postconditions.push(\n    sql`${mapping.engineNowMillis} >= ${window * policy.windowMillis} and ${mapping.engineNowMillis} < ${(window + 1) * policy.windowMillis}`,\n  );\n\n  return accepted;\n});\n\nexport const preparePhoneMutation = Effect.fn(\"PhoneNative.prepareMutation\")(function* (\n  mapping: any,\n  input: PhoneMutation,\n) {\n  const owner = yield* CurrentPhoneTransaction;\n\n  invariant(\n    input.moduleId === mapping.moduleId &&\n      Schema.encodeSync(Schema.fromJsonString(PhoneLifecyclePolicy))(input.policy) ===\n        Schema.encodeSync(Schema.fromJsonString(PhoneLifecyclePolicy))(mapping.policy),\n  );\n\n  const captured = yield* capturePhone(mapping, {\n    action: input.action,\n    phoneNumber: input.target.phoneNumber,\n    ...(input.target.revision === null ? {} : { subjectId: input.target.revision.subjectId }),\n    ...(input.target.source === null ? {} : { sourcePhoneNumber: input.target.source.phoneNumber }),\n  });\n\n  if (\n    !captured.target.eligible ||\n    Schema.encodeSync(Schema.fromJsonString(PhoneLifecycleTarget))(captured.target) !==\n      Schema.encodeSync(Schema.fromJsonString(PhoneLifecycleTarget))(input.target)\n  )\n    return { decision: rejected };\n  const binding = input.completion.input.binding;\n\n  if (\n    input.completion.input.moduleId !== `${mapping.moduleId}/lifecycle` ||\n    input.completion.input.purpose !== \"phone-lifecycle\" ||\n    binding.identifier.namespace !== \"phone\" ||\n    binding.identifier.value !== input.target.phoneNumber\n  )\n    return { decision: rejected };\n  if (\n    input.action === \"register\"\n      ? binding._tag !== \"Identifier\"\n      : binding._tag === \"Identifier\" ||\n        binding.revision.subjectId !== input.target.revision?.subjectId ||\n        binding.revision.securityRevision !== input.target.revision?.securityRevision\n  )\n    return { decision: rejected };\n  if (\n    (input.action === \"verify\" && binding._tag !== \"Subject\") ||\n    (input.action === \"change\" && binding._tag !== \"IdentifierChange\")\n  )\n    return { decision: rejected };\n\n  const commandKey = scope(mapping.moduleId, \"command\", input.commandId),\n    command = yield* stateRead(mapping, commandKey);\n\n  if (command.rows.length !== 0) return { decision: rejected };\n\n  const now = yield* owner.now(mapping),\n    guards: SQL[] = [];\n\n  const credentialGuards: { id: string; condition: SQL }[] = [];\n\n  if (input.action !== \"register\") {\n    const authorization = input.authorization;\n\n    if (authorization === undefined) return { decision: rejected };\n    const { challenge, evidence } = authorization;\n    const revision = captured.target.revision!;\n\n    if (\n      challenge.moduleId !== mapping.moduleId ||\n      challenge.action !== input.action ||\n      challenge.commandId !== input.commandId ||\n      challenge.phoneNumber !== input.target.phoneNumber ||\n      challenge.sourcePhoneNumber !== input.target.source?.phoneNumber ||\n      challenge.flowId !== binding.flowId ||\n      challenge.bindingDigest !== binding.contextDigest ||\n      challenge.flowId !== evidence.flowId ||\n      challenge.bindingDigest !== evidence.bindingDigest ||\n      challenge.revision.subjectId !== revision.subjectId ||\n      challenge.revision.securityRevision !== revision.securityRevision ||\n      evidence.revision.subjectId !== revision.subjectId ||\n      evidence.revision.securityRevision !== revision.securityRevision\n    )\n      return { decision: rejected };\n    const c = mapping.credential;\n\n    for (const item of [...evidence.revision.credentials].sort((a, b) =>\n      a.credentialId.localeCompare(b.credentialId),\n    )) {\n      const found = yield* owner.read(\n          c.table,\n          equal(c.table, {\n            [c.id]: item.credentialId,\n            [c.subjectId]: mapping.subjectIds.toNative(revision.subjectId),\n          }),\n          { limit: 1 },\n        ),\n        row = found.rows[0];\n\n      if (row === undefined || row[c.revision] !== item.revision) return { decision: rejected };\n      const condition = sql`exists(select 1 from ${c.table} where ${both(owner.exact(c.table, row), c.activeCondition)})`;\n\n      if (!(yield* owner.check(condition))) return { decision: rejected };\n      credentialGuards.push({ id: item.credentialId, condition });\n    }\n    const proofs = evidence.proofs;\n\n    if (\n      proofs.length === 0 ||\n      proofs.some(\n        (p) => !evidence.revision.credentials.some((c) => c.credentialId === p.credentialId),\n      )\n    )\n      return { decision: rejected };\n\n    const requirements = [\n      authorization.requirement,\n      authorization.actionRequirement,\n      ...(mapping.subject.decodeActionRequirement === undefined\n        ? []\n        : [\n            Schema.decodeSync(AuthenticationRequirement)(\n              mapping.subject.decodeActionRequirement(\n                copiedRow(captured.subjectRow!),\n                input.action,\n              ),\n            ),\n          ]),\n      Schema.decodeSync(AuthenticationRequirement)(\n        mapping.subject.decodeRequirement(copiedRow(captured.subjectRow!)),\n      ),\n    ];\n\n    const age = Math.min(\n        input.policy.maximumEvidenceAgeMillis,\n        ...requirements.map((r) => r.maximumAgeMillis),\n      ),\n      factors = new Set(proofs.flatMap((p) => p.factors)),\n      credentials = new Set(proofs.map((p) => p.credentialId));\n\n    for (const requirement of requirements)\n      if (\n        !requirement.alternatives.some(\n          (a) =>\n            a.factors.every((f) => factors.has(f)) &&\n            credentials.size >= a.minimumCredentials &&\n            proofs.some(\n              (p) =>\n                (!a.userVerified || p.userVerified) &&\n                (!a.phishingResistant || p.phishingResistant),\n            ),\n        )\n      )\n        return { decision: rejected };\n    for (const proof of proofs) {\n      const at = proof.verifiedAt.epochMilliseconds;\n\n      if (at > now || now - at >= age) return { decision: rejected };\n      guards.push(\n        sql`${mapping.engineNowMillis} >= ${at} and ${mapping.engineNowMillis} < ${at + age}`,\n      );\n    }\n  }\n\n  const subjectId =\n      input.action === \"register\"\n        ? mapping.subjectIds.toSubject(mapping.subjectIds.allocate())\n        : captured.target.revision!.subjectId,\n    nativeId = mapping.subjectIds.toNative(subjectId),\n    securityRevision = SecurityRevision.make(randomId()),\n    credentialRevision = SecurityRevision.make(randomId()),\n    custodyRevision = SecurityRevision.make(randomId()),\n    credentialId = captured.target.custody?.credentialId ?? randomId();\n\n  invariant(mapping.subjectIds.toSubject(nativeId) === subjectId);\n\n  const custody: PhoneCustody = {\n    phoneNumber: input.target.phoneNumber,\n    subjectId,\n    credentialId,\n    credentialRevision,\n    custodyRevision,\n    verifiedAtMillis: now,\n    state: \"verified\",\n  };\n\n  const decision: PhoneMutationDecision = {\n    _tag: \"Accepted\",\n    credential: {\n      moduleId: mapping.moduleId,\n      phoneNumber: input.target.phoneNumber,\n      custodyRevision,\n      verifiedAtMillis: now,\n      credentialId,\n      credentialRevision,\n      revision: {\n        subjectId,\n        securityRevision,\n        credentials: [{ credentialId, revision: credentialRevision }],\n      },\n    },\n  };\n\n  const mutate = Effect.gen(function* () {\n    if (input.action === \"register\")\n      yield* owner.insert(\n        mapping.subject.table,\n        {\n          ...copiedRow(\n            mapping.subject.encodeInsert({\n              id: nativeId,\n              securityRevision,\n              phoneNumber: input.target.phoneNumber,\n            }),\n          ),\n          [mapping.subject.id]: nativeId,\n          [mapping.subject.securityRevision]: securityRevision,\n        },\n        { [mapping.subject.id]: nativeId },\n      );\n    else\n      yield* owner.update(\n        mapping.subject.table,\n        { [mapping.subject.id]: nativeId },\n        { [mapping.subject.securityRevision]: securityRevision },\n      );\n\n    const i = mapping.identifier,\n      c = mapping.credential;\n\n    if (captured.source?.custody) {\n      const old = captured.source.custody;\n\n      const ir = yield* owner.read(\n        i.table,\n        equal(i.table, {\n          [i.namespace]: \"phone\",\n          [i.value]: old.phoneNumber,\n          [i.subjectId]: nativeId,\n        }),\n        { limit: 1 },\n      );\n\n      invariant(ir.rows.length === 1 && ir.rows[0]![i.revision] === old.custodyRevision);\n      invariant(\n        yield* owner.check(\n          sql`exists(select 1 from ${i.table} where ${both(owner.exact(i.table, ir.rows[0]!), i.activeCondition)})`,\n        ),\n      );\n      yield* owner.update(\n        i.table,\n        { [i.namespace]: \"phone\", [i.value]: old.phoneNumber },\n        { [i.status]: i.encodeStatus(false), [i.revision]: randomId() },\n      );\n      yield* owner.update(\n        c.table,\n        { [c.id]: old.credentialId, [c.subjectId]: nativeId },\n        { [c.status]: c.encodeStatus(false), [c.revision]: randomId() },\n      );\n      yield* stateWrite(\n        mapping,\n        captured.source.key,\n        {\n          ...old,\n          state: \"retired\",\n          custodyRevision: SecurityRevision.make(randomId()),\n          credentialRevision: SecurityRevision.make(randomId()),\n        },\n        captured.source.observation,\n      );\n    }\n    if (captured.targetIdentifier.rows.length === 0) {\n      const inserted = yield* owner.insert(\n        i.table,\n        {\n          ...copiedRow(\n            i.encodeInsert({\n              phoneNumber: input.target.phoneNumber,\n              subjectId: nativeId,\n              revision: custodyRevision,\n              verifiedAtMillis: now,\n              active: true,\n            }),\n          ),\n          [i.namespace]: \"phone\",\n          [i.value]: input.target.phoneNumber,\n          [i.subjectId]: nativeId,\n          [i.revision]: custodyRevision,\n          [i.verifiedAt]: mapping.encodeInstant(now),\n          [i.status]: i.encodeStatus(true),\n        },\n        { [i.namespace]: \"phone\", [i.value]: input.target.phoneNumber },\n      );\n\n      captured.targetIdentifier.rows = inserted.rows;\n    } else {\n      const row = captured.targetIdentifier.rows[0]!;\n\n      invariant(\n        yield* owner.check(\n          sql`exists(select 1 from ${i.table} where ${both(owner.exact(i.table, row), equal(i.table, { [i.subjectId]: nativeId }))})`,\n        ),\n      );\n      yield* owner.update(\n        i.table,\n        { [i.namespace]: \"phone\", [i.value]: input.target.phoneNumber },\n        {\n          [i.revision]: custodyRevision,\n          [i.verifiedAt]: mapping.encodeInstant(now),\n          [i.status]: i.encodeStatus(true),\n        },\n      );\n    }\n\n    const credential = yield* owner.read(c.table, equal(c.table, { [c.id]: credentialId }), {\n      limit: 1,\n    });\n\n    if (credential.rows.length === 0) {\n      const inserted = yield* owner.insert(\n        c.table,\n        {\n          ...copiedRow(\n            c.encodeInsert({\n              credentialId,\n              subjectId: nativeId,\n              revision: credentialRevision,\n              active: true,\n            }),\n          ),\n          [c.id]: credentialId,\n          [c.subjectId]: nativeId,\n          [c.revision]: credentialRevision,\n          [c.status]: c.encodeStatus(true),\n        },\n        { [c.id]: credentialId },\n      );\n\n      credential.rows = inserted.rows;\n    } else {\n      invariant(\n        yield* owner.check(\n          sql`exists(select 1 from ${c.table} where ${both(owner.exact(c.table, credential.rows[0]!), equal(c.table, { [c.subjectId]: nativeId }))})`,\n        ),\n      );\n      yield* owner.update(\n        c.table,\n        { [c.id]: credentialId },\n        { [c.revision]: credentialRevision, [c.status]: c.encodeStatus(true) },\n      );\n    }\n    yield* stateWrite(mapping, captured.destination.key, custody, captured.destination.observation);\n    yield* stateWrite(\n      mapping,\n      commandKey,\n      { commandId: input.commandId, action: input.action },\n      command,\n    );\n    owner.postconditions.push(\n      ...guards,\n      sql`exists(select 1 from ${i.table} where ${both(equal(i.table, { [i.namespace]: \"phone\", [i.value]: input.target.phoneNumber, [i.subjectId]: nativeId, [i.revision]: custodyRevision, [i.verifiedAt]: mapping.encodeInstant(now) }), i.activeCondition)})`,\n      ...(captured.source?.custody === null || captured.source?.custody === undefined\n        ? []\n        : [\n            sql`not exists(select 1 from ${i.table} where ${both(equal(i.table, { [i.namespace]: \"phone\", [i.value]: captured.source.custody.phoneNumber }), i.activeCondition)})`,\n            sql`not exists(select 1 from ${c.table} where ${both(equal(c.table, { [c.id]: captured.source.custody.credentialId }), c.activeCondition)})`,\n          ]),\n      ...credentialGuards\n        .filter((g) => g.id !== captured.source?.custody?.credentialId && g.id !== credentialId)\n        .map((g) => g.condition),\n      sql`exists(select 1 from ${c.table} where ${both(equal(c.table, { [c.id]: credentialId, [c.subjectId]: nativeId, [c.revision]: credentialRevision }), c.activeCondition)})`,\n      sql`exists(select 1 from ${mapping.subject.table} where ${both(equal(mapping.subject.table, { [mapping.subject.id]: nativeId, [mapping.subject.securityRevision]: securityRevision }), mapping.subject.activeCondition)})`,\n    );\n\n    return true;\n  });\n\n  return {\n    decision,\n    mutate,\n    appliedCondition: sql`exists(select 1 from ${mapping.state.table} where ${equal(mapping.state.table, { [mapping.state.scope]: commandKey })})`,\n  };\n});\n\n/** Bounded cursor cleanup never removes custody or semantic-command tombstones. */\nexport const cleanupPhoneAdmission = Effect.fn(\"PhoneNative.cleanupAdmission\")(function* (\n  mapping: any,\n  input: { readonly moduleId: string; readonly limit: number; readonly after?: string },\n) {\n  invariant(\n    input.moduleId === mapping.moduleId &&\n      Number.isSafeInteger(input.limit) &&\n      input.limit >= 1 &&\n      input.limit <= 1000,\n  );\n\n  const owner = yield* CurrentPhoneTransaction,\n    now = yield* owner.now(mapping),\n    state = mapping.state;\n\n  const observed = yield* owner.read(\n    state.table,\n    input.after === undefined ? sql`1=1` : sql`${col(state.table, state.scope)} > ${input.after}`,\n    { limit: input.limit, takeOnly: true, orderBy: col(state.table, state.scope) },\n  );\n\n  let deleted = 0;\n  const rows = [...observed.rows];\n\n  for (const row of rows) {\n    const stored = Schema.decodeSync(storageCodec)(row[state.state]);\n\n    if (stored.moduleId !== mapping.moduleId) continue;\n    const record = stored.record;\n\n    if (\n      (Schema.is(AdmissionReceipt)(record) && record.expiresAtMillis <= now) ||\n      (Schema.is(AdmissionCounter)(record) &&\n        (record.window + 1) * mapping.admission.windowMillis <= now)\n    ) {\n      yield* owner.remove(state.table, { [state.scope]: row[state.scope] });\n      deleted++;\n    }\n  }\n\n  return {\n    deleted,\n    nextCursor: rows.length === input.limit ? String(rows[rows.length - 1]![state.scope]) : null,\n  };\n});\n"],"mappings":";;;;;;;;AAkBA,MAAa,oBAAoB,oBAAoB,KAAK,CAAC,CAAC;AAE5D,MAAa,aAAgD,UAAU;CACrE,IAAI,CAAC,OAAO,MAAM,YAAY;AAChC;AAEA,IAAa,0BAAb,cAA6C,QAAQ,QAGnD,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC;AAEpD,MAAa,EAAE,OAAO,WAAW,QAAQ,oBAAoB,WAAW;AAExE,MAAM,mBAAmB,OAAO,OAAO;CACrC,aAAa,OAAO;CACpB,SAAS,OAAO;CAChB,UAAU,OAAO;CACjB,iBAAiB,OAAO;AAC1B,CAAC;AAED,MAAM,mBAAmB,OAAO,OAAO;CAAE,QAAQ,OAAO;CAAS,OAAO,OAAO;AAAQ,CAAC;AACxF,MAAM,gBAAgB,OAAO,OAAO;CAAE,WAAW;CAAgB,QAAQ;AAAqB,CAAC;AAC/F,MAAM,QAAQ,OAAO,MAAM;CAAC;CAAc;CAAkB;CAAkB;AAAa,CAAC;AAE5F,MAAM,eAAe,OAAO,eAC1B,OAAO,OAAO;CAAE,UAAU,OAAO;CAAgB,QAAQ;AAAM,CAAC,CAClE;AAEA,MAAM,cAAoC,SAAc,SAAiB,WAAyB;CAChG,MAAM,SAAS,OAAO,WAAW,YAAY,CAAC,CAAC,OAAO;CAEtD,UAAU,OAAO,aAAa,QAAQ,YAAY,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;CAElF,OAAO,OAAO;AAChB;AAEA,MAAM,cAAc,OAAO,eAAe,OAAO,MAAM,OAAO,MAAM,CAAC;AAErE,MAAM,SAAS,UAAkB,MAAc,QAC7C,OAAO,OAAO,WAAW,WAAW,CAAC,CAAC;CAAC;CAAwB;CAAU;CAAM;AAAG,CAAC,CAAC;AAEtF,MAAM,WAAkC,EAAE,MAAM,WAAW;AAE3D,MAAM,YAAY,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAAW,SAAc,KAAa;CAGzF,OAAO,QAAO,OAFO,wBAAA,CAED,KAClB,QAAQ,MAAM,OACd,MAAM,QAAQ,MAAM,OAAO,GAAG,QAAQ,MAAM,QAAQ,IAAI,CAAC,GACzD,EAAE,OAAO,EAAE,CACb;AACF,CAAC;AAED,MAAM,aAAa,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACrD,SACA,KACA,OACA,UACA;CACA,MAAM,QAAQ,OAAO;CAErB,MAAM,SAAS;GACZ,QAAQ,MAAM,QAAQ,OAAO,WAAW,YAAY,CAAC,CAAC;GACrD,UAAU,QAAQ;GAClB,QAAQ;EACV,CAAC;GACA,QAAQ,MAAM,UAAU,SAAS;CACpC;CAEA,IAAI,SAAS,KAAK,WAAW,GAiB3B,SAAS,QAAO,OAhBQ,MAAM,OAC5B,QAAQ,MAAM,OACd;EACE,GAAG,UACD,QAAQ,MAAM,aAAa;GACzB,OAAO;GACP,OAAO,OAAO,QAAQ,MAAM;GAC5B,SAAS,OAAO,QAAQ,MAAM;EAChC,CAAC,CACH;GACC,QAAQ,MAAM,QAAQ;EACvB,GAAG;CACL,GACA,GAAG,QAAQ,MAAM,QAAQ,IAAI,CAC/B,EAAA,CAEyB;MACpB,OAAO,MAAM,OAAO,QAAQ,MAAM,OAAO,GAAG,QAAQ,MAAM,QAAQ,IAAI,GAAG,MAAM;AACxF,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACvD,SACA,aACA;CACA,MAAM,MAAM,MAAM,QAAQ,UAAU,WAAW,WAAW,GACxD,cAAc,OAAO,UAAU,SAAS,GAAG;CAE7C,MAAM,UACJ,YAAY,KAAK,WAAW,IACxB,OACA,WAAW,SAAS,YAAY,KAAK,EAAE,CAAE,QAAQ,MAAM,QAAQ,YAAY;CAEjF,UAAU,YAAY,QAAQ,QAAQ,gBAAgB,WAAW;CAEjE,OAAO;EAAE;EAAK;EAAa;CAAQ;AACrC,CAAC;AAED,MAAa,eAAe,OAAO,GAAG,qBAAqB,CAAC,CAAC,WAC3D,SACA,OAMA;CACA,MAAM,QAAQ,OAAO;CACrB,MAAM,cAAc,OAAO,YAAY,SAAS,MAAM,WAAW;CAEjE,MAAM,SACJ,MAAM,sBAAsB,KAAA,IACxB,OACA,OAAO,YAAY,SAAS,MAAM,iBAAiB;CAEzD,MAAM,KAAK,MAAM,aAAa,YAAY,SAAS;CAEnD,MAAM,UACJ,OAAO,KAAA,IACH,OACA,OAAO,MAAM,KACX,QAAQ,QAAQ,OAChB,MAAM,QAAQ,QAAQ,OAAO,GAAG,QAAQ,QAAQ,KAAK,QAAQ,WAAW,SAAS,EAAE,EAAE,CAAC,GACtF,EAAE,OAAO,EAAE,CACb;CAEN,MAAM,MAAM,SAAS,KAAK;CAE1B,MAAM,SACJ,QAAQ,KAAA,MACP,OAAO,MAAM,MACZ,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,KAAK,MAAM,MAAM,QAAQ,QAAQ,OAAO,GAAG,GAAG,QAAQ,QAAQ,eAAe,EAAE,EAC3I;CAEF,MAAM,mBAAmB,OAAO,MAAM,KACpC,QAAQ,WAAW,OACnB,MAAM,QAAQ,WAAW,OAAO;GAC7B,QAAQ,WAAW,YAAY;GAC/B,QAAQ,WAAW,QAAQ,MAAM;CACpC,CAAC,GACD,EAAE,OAAO,EAAE,CACb;CAEA,IAAI,WACF,MAAM,WAAW,aACb,YAAY,YAAY,QAAQ,iBAAiB,KAAK,WAAW,IACjE,UACA,MAAM,cAAc,OAClB,YAAY,YAAY,QAAQ,iBAAiB,KAAK,WAAW,KAChE,YAAY,SAAS,cAAc,MAAM,YAAY,SAAS,UAAU;CAEjF,IAAI,MAAM,WAAW,UACnB,WACE,YACA,MAAM,sBAAsB,MAAM,eAClC,QAAQ,SAAS,cAAc,MAC/B,QAAQ,SAAS,UAAU;CAC/B,MAAM,cAAc,CAAC;CAErB,KAAK,MAAM,WAAW,CAAC,YAAY,SAAS,QAAQ,OAAO,GACzD,IACE,YAAY,QACZ,YAAY,KAAA,KACZ,QAAQ,UAAU,cAClB,QAAQ,cAAc,IACtB;EACA,MAAM,IAAI,QAAQ;EAWlB,MAAM,MAAK,OATU,MAAM,KACzB,EAAE,OACF,MAAM,EAAE,OAAO;IACZ,EAAE,KAAK,QAAQ;IACf,EAAE,YAAY,QAAQ,WAAW,SAAS,EAAE;EAC/C,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CAEiB,KAAK;EAEtB,IACE,OAAO,KAAA,KACP,GAAG,EAAE,cAAc,QAAQ,sBAC3B,EAAE,OAAO,MAAM,MACb,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,EAChG,IAEA,WAAW;OAEX,YAAY,KAAK;GACf,cAAc,QAAQ;GACtB,UAAU,QAAQ;EACpB,CAAC;CACL;CAgBF,OAAO;EAAE,QAAA;GAbP,aAAa,MAAM;GACnB,SAAS,YAAY;GACrB,QAAQ,QAAQ,WAAW;GAC3B,UAAU,SACN;IACE,WAAW;IACX,kBAAkB,iBAAiB,KAAK,IAAK,QAAQ,QAAQ,iBAAiB;IAC9E;GACF,IACA;GACJ;EAGY;EAAG;EAAa;EAAQ;EAAS,YAAY;EAAK;CAAiB;AACnF,CAAC;AAED,MAAa,cAAc,OAAO,GAAG,oBAAoB,CAAC,CAAC,WACzD,SACA,OACA;CACA,UAAU,MAAM,aAAa,QAAQ,QAAQ;CAE7C,MAAM,WAAW,OAAO,aAAa,SAAS;EAC5C,QAAQ;EACR,aAAa,MAAM;CACrB,CAAC;CAED,MAAM,EAAE,SAAS,aAAa,SAAS;CAEvC,IACE,YAAY,QACZ,QAAQ,UAAU,cAClB,QAAQ,qBAAqB,QAC7B,aAAa,QACb,CAAC,SAAS,YAAY,MAAM,MAAM,EAAE,iBAAiB,QAAQ,YAAY,GAEzE,OAAO,OAAO,KAAK;CAErB,MAAM,QAAQ,OAAO,yBACnB,IAAI,QAAQ,YACZ,MAAM,SAAS,iBAAiB,KAAK;CAEvC,IACE,QAAQ,KAAA,KACR,IAAI,EAAE,cAAc,QAAQ,mBAC5B,EAAE,OAAO,MAAM,MACb,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,MAAM,EAAE,OAAO,GAAG,GAAG,MAAM,EAAE,OAAO,GAAG,EAAE,YAAY,QAAQ,WAAW,SAAS,QAAQ,SAAS,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,EACpL,IAEA,OAAO,OAAO,KAAK;CAErB,OAAO,OAAO,KACZ,OAAO,WAAW,uBAAuB,CAAC,CAAC;EACzC,UAAU,QAAQ;EAClB,aAAa,MAAM;EACnB,iBAAiB,QAAQ;EACzB,kBAAkB,QAAQ;EAC1B,cAAc,QAAQ;EACtB,oBAAoB,QAAQ;EAC5B;CACF,CAAC,CACH;AACF,CAAC;AAED,MAAa,aAAa,OAAO,GAAG,mBAAmB,CAAC,CAAC,WACvD,SACA,OAQA;CACA,UACE,MAAM,aAAa,QAAQ,YACzB,OAAO,cAAc,MAAM,oBAAoB,KAC/C,MAAM,wBAAwB,KAC9B,MAAM,WAAW,SAAS,KAC1B,MAAM,WAAW,UAAU,QAC3B,MAAM,UAAU,SAAS,KACzB,MAAM,UAAU,UAAU,GAC9B;CAEA,MAAM,QAAQ,OAAO,yBACnB,MAAM,OAAO,MAAM,IAAI,OAAO,GAC9B,SAAS,QAAQ;CAEnB,MAAM,MAAM,MAAM,QAAQ,UAAU,aAAa,MAAM,SAAS,MAAM,MAAM,SAAS,GACnF,UAAU,OAAO,UAAU,SAAS,GAAG;CAEzC,IAAI,QAAQ,KAAK,WAAW,GAAG;EAC7B,MAAM,QAAQ,WAAW,SAAS,QAAQ,KAAK,EAAE,CAAE,QAAQ,MAAM,QAAQ,gBAAgB;EAEzF,IAAI,MAAM,kBAAkB,KAC1B,MAAM,eAAe,KAAK,GAAG,GAAG,QAAQ,gBAAgB,KAAK,MAAM,iBAAiB;EAEtF,OACE,MAAM,gBAAgB,MAAM,eAC5B,MAAM,YAAY,OAAO,MAAM,UAAU,KACzC,MAAM,aAAa,QACnB,MAAM,kBAAkB;CAE5B;CAEA,MAAM,SAAS,KAAK,MAAM,MAAM,OAAO,YAAY,GACjD,UAAU,CACR;EACE,KAAK,MAAM,QAAQ,UAAU,WAAW,MAAM,SAAS,MAAM,OAAO,MAAM,UAAU,CAAC;EACrF,OAAO,MAAM,WAAW,YAAY,OAAO,kBAAkB,OAAO;CACtE,GACA,GAAI,MAAM,WAAW,YACjB,CAAC;EAAE,KAAK,MAAM,QAAQ,UAAU,YAAY,QAAQ;EAAG,OAAO,OAAO;CAAgB,CAAC,IACtF,CAAC,CACP,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;CAE7C,MAAM,UAAU,CAAC;CACjB,IAAI,WAAW;CAEf,KAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,WAAW,OAAO,UAAU,SAAS,MAAM,GAAG,GAClD,WACE,SAAS,KAAK,WAAW,IACrB,KAAA,IACA,WAAW,SAAS,SAAS,KAAK,EAAE,CAAE,QAAQ,MAAM,QAAQ,gBAAgB;EAEpF,MAAM,QAAQ,UAAU,WAAW,SAAS,SAAS,QAAQ;EAE7D,IAAI,SAAS,MAAM,OAAO,WAAW;EACrC,QAAQ,KAAK;GAAE,GAAG;GAAO;GAAU;EAAM,CAAC;CAC5C;CACA,IAAI,UACF,KAAK,MAAM,UAAU,SACnB,OAAO,WAAW,SAAS,OAAO,KAAK;EAAE;EAAQ,OAAO,OAAO,QAAQ;CAAE,GAAG,OAAO,QAAQ;CAC/F,OAAO,WACL,SACA,KACA;EACE,aAAa,MAAM;EACnB,SAAS,OAAO,MAAM,UAAU;EAChC;EACA,iBAAiB,MAAM,KAAK,IAAI,OAAO,wBAAwB,MAAM,oBAAoB;CAC3F,GACA,OACF;CACA,MAAM,eAAe,KACnB,GAAG,GAAG,QAAQ,gBAAgB,MAAM,SAAS,OAAO,aAAa,OAAO,QAAQ,gBAAgB,MAAM,SAAS,KAAK,OAAO,cAC7H;CAEA,OAAO;AACT,CAAC;AAED,MAAa,uBAAuB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC3E,SACA,OACA;CACA,MAAM,QAAQ,OAAO;CAErB,UACE,MAAM,aAAa,QAAQ,YACzB,OAAO,WAAW,OAAO,eAAe,oBAAoB,CAAC,CAAC,CAAC,MAAM,MAAM,MACzE,OAAO,WAAW,OAAO,eAAe,oBAAoB,CAAC,CAAC,CAAC,QAAQ,MAAM,CACnF;CAEA,MAAM,WAAW,OAAO,aAAa,SAAS;EAC5C,QAAQ,MAAM;EACd,aAAa,MAAM,OAAO;EAC1B,GAAI,MAAM,OAAO,aAAa,OAAO,CAAC,IAAI,EAAE,WAAW,MAAM,OAAO,SAAS,UAAU;EACvF,GAAI,MAAM,OAAO,WAAW,OAAO,CAAC,IAAI,EAAE,mBAAmB,MAAM,OAAO,OAAO,YAAY;CAC/F,CAAC;CAED,IACE,CAAC,SAAS,OAAO,YACjB,OAAO,WAAW,OAAO,eAAe,oBAAoB,CAAC,CAAC,CAAC,SAAS,MAAM,MAC5E,OAAO,WAAW,OAAO,eAAe,oBAAoB,CAAC,CAAC,CAAC,MAAM,MAAM,GAE7E,OAAO,EAAE,UAAU,SAAS;CAC9B,MAAM,UAAU,MAAM,WAAW,MAAM;CAEvC,IACE,MAAM,WAAW,MAAM,aAAa,GAAG,QAAQ,SAAS,eACxD,MAAM,WAAW,MAAM,YAAY,qBACnC,QAAQ,WAAW,cAAc,WACjC,QAAQ,WAAW,UAAU,MAAM,OAAO,aAE1C,OAAO,EAAE,UAAU,SAAS;CAC9B,IACE,MAAM,WAAW,aACb,QAAQ,SAAS,eACjB,QAAQ,SAAS,gBACjB,QAAQ,SAAS,cAAc,MAAM,OAAO,UAAU,aACtD,QAAQ,SAAS,qBAAqB,MAAM,OAAO,UAAU,kBAEjE,OAAO,EAAE,UAAU,SAAS;CAC9B,IACG,MAAM,WAAW,YAAY,QAAQ,SAAS,aAC9C,MAAM,WAAW,YAAY,QAAQ,SAAS,oBAE/C,OAAO,EAAE,UAAU,SAAS;CAE9B,MAAM,aAAa,MAAM,QAAQ,UAAU,WAAW,MAAM,SAAS,GACnE,UAAU,OAAO,UAAU,SAAS,UAAU;CAEhD,IAAI,QAAQ,KAAK,WAAW,GAAG,OAAO,EAAE,UAAU,SAAS;CAE3D,MAAM,MAAM,OAAO,MAAM,IAAI,OAAO,GAClC,SAAgB,CAAC;CAEnB,MAAM,mBAAqD,CAAC;CAE5D,IAAI,MAAM,WAAW,YAAY;EAC/B,MAAM,gBAAgB,MAAM;EAE5B,IAAI,kBAAkB,KAAA,GAAW,OAAO,EAAE,UAAU,SAAS;EAC7D,MAAM,EAAE,WAAW,aAAa;EAChC,MAAM,WAAW,SAAS,OAAO;EAEjC,IACE,UAAU,aAAa,QAAQ,YAC/B,UAAU,WAAW,MAAM,UAC3B,UAAU,cAAc,MAAM,aAC9B,UAAU,gBAAgB,MAAM,OAAO,eACvC,UAAU,sBAAsB,MAAM,OAAO,QAAQ,eACrD,UAAU,WAAW,QAAQ,UAC7B,UAAU,kBAAkB,QAAQ,iBACpC,UAAU,WAAW,SAAS,UAC9B,UAAU,kBAAkB,SAAS,iBACrC,UAAU,SAAS,cAAc,SAAS,aAC1C,UAAU,SAAS,qBAAqB,SAAS,oBACjD,SAAS,SAAS,cAAc,SAAS,aACzC,SAAS,SAAS,qBAAqB,SAAS,kBAEhD,OAAO,EAAE,UAAU,SAAS;EAC9B,MAAM,IAAI,QAAQ;EAElB,KAAK,MAAM,QAAQ,CAAC,GAAG,SAAS,SAAS,WAAW,CAAC,CAAC,MAAM,GAAG,MAC7D,EAAE,aAAa,cAAc,EAAE,YAAY,CAC7C,GAAG;GACD,MAQE,OAAM,OARa,MAAM,KACvB,EAAE,OACF,MAAM,EAAE,OAAO;KACZ,EAAE,KAAK,KAAK;KACZ,EAAE,YAAY,QAAQ,WAAW,SAAS,SAAS,SAAS;GAC/D,CAAC,GACD,EAAE,OAAO,EAAE,CACb,EAAA,CACY,KAAK;GAEnB,IAAI,QAAQ,KAAA,KAAa,IAAI,EAAE,cAAc,KAAK,UAAU,OAAO,EAAE,UAAU,SAAS;GACxF,MAAM,YAAY,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,eAAe,EAAE;GAEjH,IAAI,EAAE,OAAO,MAAM,MAAM,SAAS,IAAI,OAAO,EAAE,UAAU,SAAS;GAClE,iBAAiB,KAAK;IAAE,IAAI,KAAK;IAAc;GAAU,CAAC;EAC5D;EACA,MAAM,SAAS,SAAS;EAExB,IACE,OAAO,WAAW,KAClB,OAAO,MACJ,MAAM,CAAC,SAAS,SAAS,YAAY,MAAM,MAAM,EAAE,iBAAiB,EAAE,YAAY,CACrF,GAEA,OAAO,EAAE,UAAU,SAAS;EAE9B,MAAM,eAAe;GACnB,cAAc;GACd,cAAc;GACd,GAAI,QAAQ,QAAQ,4BAA4B,KAAA,IAC5C,CAAC,IACD,CACE,OAAO,WAAW,yBAAyB,CAAC,CAC1C,QAAQ,QAAQ,wBACd,UAAU,SAAS,UAAW,GAC9B,MAAM,MACR,CACF,CACF;GACJ,OAAO,WAAW,yBAAyB,CAAC,CAC1C,QAAQ,QAAQ,kBAAkB,UAAU,SAAS,UAAW,CAAC,CACnE;EACF;EAEA,MAAM,MAAM,KAAK,IACb,MAAM,OAAO,0BACb,GAAG,aAAa,KAAK,MAAM,EAAE,gBAAgB,CAC/C,GACA,UAAU,IAAI,IAAI,OAAO,SAAS,MAAM,EAAE,OAAO,CAAC,GAClD,cAAc,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,YAAY,CAAC;EAEzD,KAAK,MAAM,eAAe,cACxB,IACE,CAAC,YAAY,aAAa,MACvB,MACC,EAAE,QAAQ,OAAO,MAAM,QAAQ,IAAI,CAAC,CAAC,KACrC,YAAY,QAAQ,EAAE,sBACtB,OAAO,MACJ,OACE,CAAC,EAAE,gBAAgB,EAAE,kBACrB,CAAC,EAAE,qBAAqB,EAAE,kBAC/B,CACJ,GAEA,OAAO,EAAE,UAAU,SAAS;EAChC,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,KAAK,MAAM,WAAW;GAE5B,IAAI,KAAK,OAAO,MAAM,MAAM,KAAK,OAAO,EAAE,UAAU,SAAS;GAC7D,OAAO,KACL,GAAG,GAAG,QAAQ,gBAAgB,MAAM,GAAG,OAAO,QAAQ,gBAAgB,KAAK,KAAK,KAClF;EACF;CACF;CAEA,MAAM,YACF,MAAM,WAAW,aACb,QAAQ,WAAW,UAAU,QAAQ,WAAW,SAAS,CAAC,IAC1D,SAAS,OAAO,SAAU,WAChC,WAAW,QAAQ,WAAW,SAAS,SAAS,GAChD,mBAAmB,iBAAiB,KAAK,SAAS,CAAC,GACnD,qBAAqB,iBAAiB,KAAK,SAAS,CAAC,GACrD,kBAAkB,iBAAiB,KAAK,SAAS,CAAC,GAClD,eAAe,SAAS,OAAO,SAAS,gBAAgB,SAAS;CAEnE,UAAU,QAAQ,WAAW,UAAU,QAAQ,MAAM,SAAS;CAE9D,MAAM,UAAwB;EAC5B,aAAa,MAAM,OAAO;EAC1B;EACA;EACA;EACA;EACA,kBAAkB;EAClB,OAAO;CACT;CAiMA,OAAO;EACL,UAAA;GA/LA,MAAM;GACN,YAAY;IACV,UAAU,QAAQ;IAClB,aAAa,MAAM,OAAO;IAC1B;IACA,kBAAkB;IAClB;IACA;IACA,UAAU;KACR;KACA;KACA,aAAa,CAAC;MAAE;MAAc,UAAU;KAAmB,CAAC;IAC9D;GACF;EAkLO;EACP,QAhLa,OAAO,IAAI,aAAa;GACrC,IAAI,MAAM,WAAW,YACnB,OAAO,MAAM,OACX,QAAQ,QAAQ,OAChB;IACE,GAAG,UACD,QAAQ,QAAQ,aAAa;KAC3B,IAAI;KACJ;KACA,aAAa,MAAM,OAAO;IAC5B,CAAC,CACH;KACC,QAAQ,QAAQ,KAAK;KACrB,QAAQ,QAAQ,mBAAmB;GACtC,GACA,GAAG,QAAQ,QAAQ,KAAK,SAAS,CACnC;QAEA,OAAO,MAAM,OACX,QAAQ,QAAQ,OAChB,GAAG,QAAQ,QAAQ,KAAK,SAAS,GACjC,GAAG,QAAQ,QAAQ,mBAAmB,iBAAiB,CACzD;GAEF,MAAM,IAAI,QAAQ,YAChB,IAAI,QAAQ;GAEd,IAAI,SAAS,QAAQ,SAAS;IAC5B,MAAM,MAAM,SAAS,OAAO;IAE5B,MAAM,KAAK,OAAO,MAAM,KACtB,EAAE,OACF,MAAM,EAAE,OAAO;MACZ,EAAE,YAAY;MACd,EAAE,QAAQ,IAAI;MACd,EAAE,YAAY;IACjB,CAAC,GACD,EAAE,OAAO,EAAE,CACb;IAEA,UAAU,GAAG,KAAK,WAAW,KAAK,GAAG,KAAK,EAAE,CAAE,EAAE,cAAc,IAAI,eAAe;IACjF,UACE,OAAO,MAAM,MACX,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK,EAAG,GAAG,EAAE,eAAe,EAAE,EACzG,CACF;IACA,OAAO,MAAM,OACX,EAAE,OACF;MAAG,EAAE,YAAY;MAAU,EAAE,QAAQ,IAAI;IAAY,GACrD;MAAG,EAAE,SAAS,EAAE,aAAa,KAAK;MAAI,EAAE,WAAW,SAAS;IAAE,CAChE;IACA,OAAO,MAAM,OACX,EAAE,OACF;MAAG,EAAE,KAAK,IAAI;MAAe,EAAE,YAAY;IAAS,GACpD;MAAG,EAAE,SAAS,EAAE,aAAa,KAAK;MAAI,EAAE,WAAW,SAAS;IAAE,CAChE;IACA,OAAO,WACL,SACA,SAAS,OAAO,KAChB;KACE,GAAG;KACH,OAAO;KACP,iBAAiB,iBAAiB,KAAK,SAAS,CAAC;KACjD,oBAAoB,iBAAiB,KAAK,SAAS,CAAC;IACtD,GACA,SAAS,OAAO,WAClB;GACF;GACA,IAAI,SAAS,iBAAiB,KAAK,WAAW,GAAG;IAC/C,MAAM,WAAW,OAAO,MAAM,OAC5B,EAAE,OACF;KACE,GAAG,UACD,EAAE,aAAa;MACb,aAAa,MAAM,OAAO;MAC1B,WAAW;MACX,UAAU;MACV,kBAAkB;MAClB,QAAQ;KACV,CAAC,CACH;MACC,EAAE,YAAY;MACd,EAAE,QAAQ,MAAM,OAAO;MACvB,EAAE,YAAY;MACd,EAAE,WAAW;MACb,EAAE,aAAa,QAAQ,cAAc,GAAG;MACxC,EAAE,SAAS,EAAE,aAAa,IAAI;IACjC,GACA;MAAG,EAAE,YAAY;MAAU,EAAE,QAAQ,MAAM,OAAO;IAAY,CAChE;IAEA,SAAS,iBAAiB,OAAO,SAAS;GAC5C,OAAO;IACL,MAAM,MAAM,SAAS,iBAAiB,KAAK;IAE3C,UACE,OAAO,MAAM,MACX,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,MAAM,EAAE,OAAO,GAAG,GAAG,MAAM,EAAE,OAAO,GAAG,EAAE,YAAY,SAAS,CAAC,CAAC,EAAE,EAC3H,CACF;IACA,OAAO,MAAM,OACX,EAAE,OACF;MAAG,EAAE,YAAY;MAAU,EAAE,QAAQ,MAAM,OAAO;IAAY,GAC9D;MACG,EAAE,WAAW;MACb,EAAE,aAAa,QAAQ,cAAc,GAAG;MACxC,EAAE,SAAS,EAAE,aAAa,IAAI;IACjC,CACF;GACF;GAEA,MAAM,aAAa,OAAO,MAAM,KAAK,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,EAAE,KAAK,aAAa,CAAC,GAAG,EACtF,OAAO,EACT,CAAC;GAED,IAAI,WAAW,KAAK,WAAW,GAoB7B,WAAW,QAAO,OAnBM,MAAM,OAC5B,EAAE,OACF;IACE,GAAG,UACD,EAAE,aAAa;KACb;KACA,WAAW;KACX,UAAU;KACV,QAAQ;IACV,CAAC,CACH;KACC,EAAE,KAAK;KACP,EAAE,YAAY;KACd,EAAE,WAAW;KACb,EAAE,SAAS,EAAE,aAAa,IAAI;GACjC,GACA,GAAG,EAAE,KAAK,aAAa,CACzB,EAAA,CAE2B;QACtB;IACL,UACE,OAAO,MAAM,MACX,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,MAAM,EAAE,OAAO,WAAW,KAAK,EAAG,GAAG,MAAM,EAAE,OAAO,GAAG,EAAE,YAAY,SAAS,CAAC,CAAC,EAAE,EAC3I,CACF;IACA,OAAO,MAAM,OACX,EAAE,OACF,GAAG,EAAE,KAAK,aAAa,GACvB;MAAG,EAAE,WAAW;MAAqB,EAAE,SAAS,EAAE,aAAa,IAAI;IAAE,CACvE;GACF;GACA,OAAO,WAAW,SAAS,SAAS,YAAY,KAAK,SAAS,SAAS,YAAY,WAAW;GAC9F,OAAO,WACL,SACA,YACA;IAAE,WAAW,MAAM;IAAW,QAAQ,MAAM;GAAO,GACnD,OACF;GACA,MAAM,eAAe,KACnB,GAAG,QACH,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,EAAE,OAAO;KAAG,EAAE,YAAY;KAAU,EAAE,QAAQ,MAAM,OAAO;KAAc,EAAE,YAAY;KAAW,EAAE,WAAW;KAAkB,EAAE,aAAa,QAAQ,cAAc,GAAG;GAAE,CAAC,GAAG,EAAE,eAAe,EAAE,IACzP,GAAI,SAAS,QAAQ,YAAY,QAAQ,SAAS,QAAQ,YAAY,KAAA,IAClE,CAAC,IACD,CACE,GAAG,4BAA4B,EAAE,MAAM,SAAS,KAAK,MAAM,EAAE,OAAO;KAAG,EAAE,YAAY;KAAU,EAAE,QAAQ,SAAS,OAAO,QAAQ;GAAY,CAAC,GAAG,EAAE,eAAe,EAAE,IACpK,GAAG,4BAA4B,EAAE,MAAM,SAAS,KAAK,MAAM,EAAE,OAAO,GAAG,EAAE,KAAK,SAAS,OAAO,QAAQ,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,EAC5I,GACJ,GAAG,iBACA,QAAQ,MAAM,EAAE,OAAO,SAAS,QAAQ,SAAS,gBAAgB,EAAE,OAAO,YAAY,CAAC,CACvF,KAAK,MAAM,EAAE,SAAS,GACzB,GAAG,wBAAwB,EAAE,MAAM,SAAS,KAAK,MAAM,EAAE,OAAO;KAAG,EAAE,KAAK;KAAe,EAAE,YAAY;KAAW,EAAE,WAAW;GAAmB,CAAC,GAAG,EAAE,eAAe,EAAE,IACzK,GAAG,wBAAwB,QAAQ,QAAQ,MAAM,SAAS,KAAK,MAAM,QAAQ,QAAQ,OAAO;KAAG,QAAQ,QAAQ,KAAK;KAAW,QAAQ,QAAQ,mBAAmB;GAAiB,CAAC,GAAG,QAAQ,QAAQ,eAAe,EAAE,EAC1N;GAEA,OAAO;EACT,CAIO;EACL,kBAAkB,GAAG,wBAAwB,QAAQ,MAAM,MAAM,SAAS,MAAM,QAAQ,MAAM,OAAO,GAAG,QAAQ,MAAM,QAAQ,WAAW,CAAC,EAAE;CAC9I;AACF,CAAC;;AAGD,MAAa,wBAAwB,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAC7E,SACA,OACA;CACA,UACE,MAAM,aAAa,QAAQ,YACzB,OAAO,cAAc,MAAM,KAAK,KAChC,MAAM,SAAS,KACf,MAAM,SAAS,GACnB;CAEA,MAAM,QAAQ,OAAO,yBACnB,MAAM,OAAO,MAAM,IAAI,OAAO,GAC9B,QAAQ,QAAQ;CAElB,MAAM,WAAW,OAAO,MAAM,KAC5B,MAAM,OACN,MAAM,UAAU,KAAA,IAAY,GAAG,QAAQ,GAAG,GAAG,IAAI,MAAM,OAAO,MAAM,KAAK,EAAE,KAAK,MAAM,SACtF;EAAE,OAAO,MAAM;EAAO,UAAU;EAAM,SAAS,IAAI,MAAM,OAAO,MAAM,KAAK;CAAE,CAC/E;CAEA,IAAI,UAAU;CACd,MAAM,OAAO,CAAC,GAAG,SAAS,IAAI;CAE9B,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,SAAS,OAAO,WAAW,YAAY,CAAC,CAAC,IAAI,MAAM,MAAM;EAE/D,IAAI,OAAO,aAAa,QAAQ,UAAU;EAC1C,MAAM,SAAS,OAAO;EAEtB,IACG,OAAO,GAAG,gBAAgB,CAAC,CAAC,MAAM,KAAK,OAAO,mBAAmB,OACjE,OAAO,GAAG,gBAAgB,CAAC,CAAC,MAAM,MAChC,OAAO,SAAS,KAAK,QAAQ,UAAU,gBAAgB,KAC1D;GACA,OAAO,MAAM,OAAO,MAAM,OAAO,GAAG,MAAM,QAAQ,IAAI,MAAM,OAAO,CAAC;GACpE;EACF;CACF;CAEA,OAAO;EACL;EACA,YAAY,KAAK,WAAW,MAAM,QAAQ,OAAO,KAAK,KAAK,SAAS,EAAE,CAAE,MAAM,MAAM,IAAI;CAC1F;AACF,CAAC"}

package/dist/drizzle/phone-target.d.mts

@@ -0,0 +1,19 @@
+import "../hooks/LifecycleHooks.mjs";
+import { DrizzleMappingError } from "./model.mjs";
+import "./transaction-owner.mjs";
+import { TransactionCoordinatorError } from "./transaction-execution.mjs";
+import { PhoneOtpUnavailable } from "../phone/models.mjs";
+import { PhoneConfigurationError } from "../phone/lifecycleModels.mjs";
+import "../phone/PhoneAdmission.mjs";
+import "../phone/PhonePersistence.mjs";
+import "../phone/PhoneSignInTargets.mjs";
+import "./phone-model.mjs";
+import "./SuppliedService.mjs";
+import { Effect } from "effect";
+import { Table } from "drizzle-orm";
+import { Statement } from "effect/unstable/sql/Statement";
+//#region src/drizzle/phone-target.d.ts
+type PhoneCoordinatorError<E> = TransactionCoordinatorError<E, PhoneOtpUnavailable> | PhoneConfigurationError | DrizzleMappingError;
+//#endregion
+export { PhoneCoordinatorError };
+//# sourceMappingURL=phone-target.d.mts.map

package/dist/drizzle/phone-target.mjs

@@ -0,0 +1,171 @@
+import { LifecycleHooks } from "../hooks/LifecycleHooks.mjs";
+import { requiredProofConstraints } from "./proof-model.mjs";
+import { ProofBinding } from "../proofs/models.mjs";
+import { CurrentProofSql, completeProofPlanIn } from "./proof-sql.mjs";
+import { coordinateTransactionOwner, makeTransactionExecution, sqlClientTransactionStandaloneGuard } from "./transaction-execution.mjs";
+import { randomId } from "../totp/crypto.mjs";
+import { PhoneAdmission } from "../phone/PhoneAdmission.mjs";
+import { PhonePersistence } from "../phone/PhonePersistence.mjs";
+import { PhoneSignInTargets } from "../phone/PhoneSignInTargets.mjs";
+import { phoneProofs, requiredPhoneConstraints } from "./phone-model.mjs";
+import { CurrentD1PlanningDatabase } from "./d1-planning.mjs";
+import { compileD1ProofCompletionPlan } from "./d1-proofs.mjs";
+import { PhoneActionAuthorization, PhoneAdmissionPolicy, PhoneConfigurationError, PhoneLifecyclePolicy, PhoneLifecycleTarget } from "../phone/lifecycleModels.mjs";
+import { CurrentPhoneTransaction, admitPhone, capturePhone, cleanupPhoneAdmission, equal, invariant, lookupPhone, preparePhoneMutation, unavailable } from "./phone-state.mjs";
+import { Context, Effect, Schema } from "effect";
+import { sql } from "drizzle-orm";
+//#region src/drizzle/phone-target.ts
+const sqlClientPhoneStandaloneGuard = (database) => sqlClientTransactionStandaloneGuard(unavailable, database);
+const validateMapping = (original, configuration) => {
+	const mapping = original;
+	invariant(mapping.moduleId.length > 0);
+	Schema.decodeSync(PhoneLifecyclePolicy)(mapping.policy);
+	Schema.decodeSync(PhoneAdmissionPolicy)(mapping.admission);
+	invariant(mapping.admission.requestRetentionMillis >= mapping.admission.windowMillis);
+	const proofs = phoneProofs(mapping.proofs);
+	invariant(proofs !== void 0);
+	for (const [key, value] of Object.entries(requiredProofConstraints)) invariant(proofs.constraints?.[key] === value);
+	if (configuration.mode === "synchronous") invariant(proofs.allocateVersionSync !== void 0);
+	if (configuration.mode === "batch") invariant(proofs.d1 !== void 0 && proofs.authority.identifier.d1CurrentCondition !== void 0);
+	for (const [key, value] of Object.entries(requiredPhoneConstraints)) invariant(mapping.constraints?.[key] === value);
+	if (configuration.mode === "batch") invariant(mapping.d1?.primary === true);
+	return Object.freeze({
+		...mapping,
+		policy: Object.freeze({ ...mapping.policy }),
+		subject: Object.freeze({ ...mapping.subject }),
+		state: Object.freeze({ ...mapping.state }),
+		identifier: Object.freeze({ ...mapping.identifier }),
+		admission: Object.freeze({ ...mapping.admission }),
+		credential: Object.freeze({ ...mapping.credential }),
+		subjectIds: Object.freeze({ ...mapping.subjectIds })
+	});
+};
+const services = (mapping, execution, hooks, configuration) => {
+	const run = (effect, mutation = true) => execution.admit.pipe(Effect.andThen(execution.run(effect, mutation)), Effect.provideService(LifecycleHooks, hooks));
+	return {
+		phoneAdmission: PhoneAdmission.of({
+			admit: (input) => run(admitPhone(mapping, { ...input })),
+			cleanup: (input) => run(cleanupPhoneAdmission(mapping, { ...input }))
+		}),
+		phoneSignInTargets: PhoneSignInTargets.of({ lookup: (input) => run(lookupPhone(mapping, { ...input }), false) }),
+		phonePersistence: PhonePersistence.of({
+			target: (input) => run(Effect.gen(function* () {
+				invariant(input.moduleId === mapping.moduleId);
+				return (yield* capturePhone(mapping, { ...input })).target;
+			}), false),
+			mutate: (original, prepare) => Effect.suspend(() => {
+				const input = {
+					...original,
+					target: Schema.decodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(Schema.encodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(original.target)),
+					policy: { ...original.policy },
+					...original.authorization === void 0 ? {} : { authorization: Schema.decodeSync(Schema.toCodecIso(PhoneActionAuthorization))(Schema.encodeSync(Schema.toCodecIso(PhoneActionAuthorization))(original.authorization)) },
+					completion: {
+						input: {
+							...original.completion.input,
+							binding: Schema.decodeSync(Schema.toCodecIso(ProofBinding))(Schema.encodeSync(Schema.toCodecIso(ProofBinding))(original.completion.input.binding))
+						},
+						prepare: original.completion.prepare
+					}
+				};
+				return run(Effect.gen(function* () {
+					const owner = yield* CurrentPhoneTransaction, candidate = yield* preparePhoneMutation(mapping, input);
+					if (candidate.mutate === void 0) {
+						const receipt = prepare(candidate.decision, owner.journal);
+						owner.guards.push(receipt);
+						return receipt;
+					}
+					const cn = phoneProofs(mapping.proofs).continuation;
+					const observed = yield* owner.read(cn.table, equal(cn.table, {
+						[cn.moduleId]: input.completion.input.moduleId,
+						[cn.continuationId]: input.completion.input.continuationId
+					}), { limit: 1 });
+					let completed = false;
+					const plan = {
+						...input.completion,
+						prepare: (decision, journal) => {
+							completed = decision === "completed";
+							const proofReceipt = input.completion.prepare(decision, journal, () => void 0);
+							owner.guards.push(proofReceipt);
+							return prepare(decision === "completed" ? candidate.decision : { _tag: "Rejected" }, journal);
+						}
+					};
+					let receipt;
+					if (owner.batch) {
+						const offset = owner.statements.length;
+						yield* candidate.mutate;
+						const statements = owner.statements.splice(offset);
+						const compiled = yield* compileD1ProofCompletionPlan(phoneProofs(mapping.proofs), plan, {
+							statements,
+							appliedCondition: candidate.appliedCondition
+						}, (x) => x).pipe(Effect.provideService(CurrentD1PlanningDatabase, owner.database));
+						invariant(compiled.statements.length !== 0);
+						owner.statements.push(...compiled.statements, ...compiled.postconditions ?? []);
+						receipt = compiled.receipt;
+					} else receipt = yield* completeProofPlanIn(phoneProofs(mapping.proofs), {
+						mode: configuration.mode === "synchronous" ? "synchronous" : "interactive",
+						locking: configuration.locking,
+						standaloneGuard: Effect.void,
+						coordinated: true,
+						insertIfAbsent: (query, key, value) => configuration.dialect === "mysql" ? query.onDuplicateKeyUpdate({ set: { [key]: value } }) : query.onConflictDoNothing()
+					}, plan, candidate.mutate, (x) => x).pipe(Effect.provideService(CurrentProofSql, owner.database));
+					if (completed) {
+						invariant(observed.rows.length === 1);
+						const record = yield* cn.decode(observed.rows[0]);
+						observed.rows = observed.rows.map((row) => ({
+							...row,
+							[cn.consumed]: true
+						}));
+						const command = phoneProofs(mapping.proofs).command;
+						owner.postconditions.push(sql`${mapping.engineNowMillis} < ${record.expiresAtMillis}`, sql`exists(select 1 from ${command.table} where ${equal(command.table, {
+							[command.moduleId]: input.completion.input.moduleId,
+							[command.commandId]: input.completion.input.continuationDigest,
+							[command.kind]: "complete",
+							[command.decision]: "completed",
+							[command.retentionUntil]: phoneProofs(mapping.proofs).encodeInstant(record.expiresAtMillis)
+						})})`);
+					}
+					invariant(receipt?._tag === "PreparedCommit");
+					owner.guards.push(receipt);
+					return receipt;
+				}));
+			}).pipe(Effect.catchDefect(() => Effect.fail(unavailable())))
+		})
+	};
+};
+const makeTargetPhonePersistence = (database, source, configuration) => Effect.gen(function* () {
+	const hooks = yield* LifecycleHooks;
+	const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);
+	const mapping = yield* Effect.try({
+		try: () => validateMapping(original, configuration),
+		catch: () => PhoneConfigurationError.make({})
+	});
+	const execution = makeTransactionExecution(CurrentPhoneTransaction, database, configuration, unavailable, randomId);
+	return services(mapping, execution, hooks, configuration);
+});
+const coordinateTargetPhone = (database, source, configuration, body) => Effect.gen(function* () {
+	const hooks = yield* LifecycleHooks;
+	const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);
+	const mapping = yield* Effect.try({
+		try: () => validateMapping(original, configuration),
+		catch: () => PhoneConfigurationError.make({})
+	});
+	return yield* coordinateTransactionOwner(database, CurrentPhoneTransaction, configuration, Effect.void, unavailable, randomId, (execution) => services(mapping, execution, hooks, configuration), body);
+});
+/** Concrete driver wrappers select transaction mode; cryptography always precedes these owners. */
+const makePhoneTarget = (configuration) => {
+	function coordinatePhonePersistence(acquire, options, body) {
+		return Effect.flatMap(acquire, (database) => coordinateTargetPhone(database, options.mapping, configuration, (transaction, services) => {
+			const provided = Context.make(PhonePersistence, services.phonePersistence).pipe(Context.add(PhoneAdmission, services.phoneAdmission), Context.add(PhoneSignInTargets, services.phoneSignInTargets));
+			const work = Effect.provideContext(body, provided);
+			return options.transaction === void 0 ? work : Effect.provideService(work, options.transaction, options.transaction.of(transaction));
+		}));
+	}
+	return {
+		makePhonePersistenceServices: (database, mapping) => makeTargetPhonePersistence(database, mapping, configuration),
+		coordinatePhonePersistence
+	};
+};
+//#endregion
+export { coordinateTargetPhone, makePhoneTarget, makeTargetPhonePersistence, sqlClientPhoneStandaloneGuard };
+
+//# sourceMappingURL=phone-target.mjs.map

package/dist/drizzle/phone-target.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-target.mjs","names":[],"sources":["../../src/drizzle/phone-target.ts"],"sourcesContent":["import { sql, type Table } from \"drizzle-orm\";\n/* oxlint-disable no-explicit-any -- shared native implementation; driver entrypoints retain exact database and table types. */\nimport { Context, Effect, Schema } from \"effect\";\nimport type { Statement } from \"effect/unstable/sql/Statement\";\n\nimport { LifecycleHooks } from \"../hooks/LifecycleHooks\";\nimport {\n  PhoneConfigurationError,\n  PhoneLifecyclePolicy,\n  PhoneAdmissionPolicy,\n  PhoneLifecycleTarget,\n  PhoneActionAuthorization,\n} from \"../phone/lifecycleModels\";\nimport type { PhoneOtpUnavailable as PhoneUnavailable } from \"../phone/models\";\nimport { PhoneAdmission } from \"../phone/PhoneAdmission\";\nimport { type PhoneMutation, PhonePersistence } from \"../phone/PhonePersistence\";\nimport { PhoneSignInTargets } from \"../phone/PhoneSignInTargets\";\nimport { ProofBinding } from \"../proofs/models\";\nimport { randomId } from \"../totp/crypto\";\nimport { CurrentD1PlanningDatabase } from \"./d1-planning\";\nimport { compileD1ProofCompletionPlan } from \"./d1-proofs\";\nimport type { DrizzleMappingError } from \"./model\";\nimport {\n  phoneProofs,\n  type PhoneMapping,\n  type PhoneMappingSource,\n  type PhonePersistenceServices,\n  requiredPhoneConstraints,\n} from \"./phone-model\";\nimport {\n  capturePhone,\n  lookupPhone,\n  admitPhone,\n  cleanupPhoneAdmission,\n  CurrentPhoneTransaction,\n  invariant,\n  equal,\n  preparePhoneMutation,\n  unavailable,\n} from \"./phone-state\";\nimport { requiredProofConstraints } from \"./proof-model\";\nimport { completeProofPlanIn, CurrentProofSql } from \"./proof-sql\";\nimport type { SuppliedService } from \"./SuppliedService\";\nimport {\n  coordinateTransactionOwner,\n  makeTransactionExecution,\n  sqlClientTransactionStandaloneGuard,\n  type TransactionExecution,\n  type TransactionTargetConfiguration,\n  type TransactionCoordinatorError,\n} from \"./transaction-execution\";\nimport type { TransactionNativeDatabase } from \"./transaction-owner\";\nexport type PhoneTargetConfiguration = TransactionTargetConfiguration<PhoneUnavailable>;\n\nexport type PhoneCoordinatorError<E> =\n  | TransactionCoordinatorError<E, PhoneUnavailable>\n  | PhoneConfigurationError\n  | DrizzleMappingError;\n\nexport const sqlClientPhoneStandaloneGuard = (\n  database: Parameters<typeof sqlClientTransactionStandaloneGuard>[1],\n) => sqlClientTransactionStandaloneGuard(unavailable, database);\n\nconst validateMapping = <M>(original: M, configuration: PhoneTargetConfiguration): M => {\n  const mapping = original as any;\n\n  invariant(mapping.moduleId.length > 0);\n  Schema.decodeSync(PhoneLifecyclePolicy)(mapping.policy);\n  Schema.decodeSync(PhoneAdmissionPolicy)(mapping.admission);\n  invariant(mapping.admission.requestRetentionMillis >= mapping.admission.windowMillis);\n  const proofs = phoneProofs(mapping.proofs);\n\n  invariant(proofs !== undefined);\n  for (const [key, value] of Object.entries(requiredProofConstraints))\n    invariant((proofs.constraints as any)?.[key] === value);\n  if (configuration.mode === \"synchronous\") invariant(proofs.allocateVersionSync !== undefined);\n  if (configuration.mode === \"batch\")\n    invariant(\n      proofs.d1 !== undefined && proofs.authority.identifier.d1CurrentCondition !== undefined,\n    );\n  for (const [key, value] of Object.entries(requiredPhoneConstraints))\n    invariant(mapping.constraints?.[key] === value);\n  if (configuration.mode === \"batch\") invariant(mapping.d1?.primary === true);\n\n  return Object.freeze({\n    ...mapping,\n    policy: Object.freeze({ ...mapping.policy }),\n    subject: Object.freeze({ ...mapping.subject }),\n    state: Object.freeze({ ...mapping.state }),\n    identifier: Object.freeze({ ...mapping.identifier }),\n    admission: Object.freeze({ ...mapping.admission }),\n    credential: Object.freeze({ ...mapping.credential }),\n    subjectIds: Object.freeze({ ...mapping.subjectIds }),\n  });\n};\n\nconst services = (\n  mapping: any,\n  execution: TransactionExecution<PhoneUnavailable, CurrentPhoneTransaction>,\n  hooks: LifecycleHooks[\"Service\"],\n  configuration: PhoneTargetConfiguration,\n): PhonePersistenceServices => {\n  const run = <A, E, R>(effect: Effect.Effect<A, E, R>, mutation = true) =>\n    execution.admit.pipe(\n      Effect.andThen(execution.run(effect, mutation)),\n      Effect.provideService(LifecycleHooks, hooks),\n    );\n\n  return {\n    phoneAdmission: PhoneAdmission.of({\n      admit: (input) => run(admitPhone(mapping, { ...input })),\n      cleanup: (input) => run(cleanupPhoneAdmission(mapping, { ...input })),\n    }),\n    phoneSignInTargets: PhoneSignInTargets.of({\n      lookup: (input) => run(lookupPhone(mapping, { ...input }), false),\n    }),\n    phonePersistence: PhonePersistence.of({\n      target: (input) =>\n        run(\n          Effect.gen(function* () {\n            invariant(input.moduleId === mapping.moduleId);\n\n            return (yield* capturePhone(mapping, { ...input })).target;\n          }),\n          false,\n        ),\n      mutate: (original, prepare) =>\n        Effect.suspend(() => {\n          const input: PhoneMutation = {\n            ...original,\n            target: Schema.decodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(\n              Schema.encodeSync(Schema.toCodecIso(PhoneLifecycleTarget))(original.target),\n            ),\n            policy: { ...original.policy },\n            ...(original.authorization === undefined\n              ? {}\n              : {\n                  authorization: Schema.decodeSync(Schema.toCodecIso(PhoneActionAuthorization))(\n                    Schema.encodeSync(Schema.toCodecIso(PhoneActionAuthorization))(\n                      original.authorization,\n                    ),\n                  ),\n                }),\n            completion: {\n              input: {\n                ...original.completion.input,\n                binding: Schema.decodeSync(Schema.toCodecIso(ProofBinding))(\n                  Schema.encodeSync(Schema.toCodecIso(ProofBinding))(\n                    original.completion.input.binding,\n                  ),\n                ),\n              },\n              prepare: original.completion.prepare,\n            },\n          };\n\n          return run(\n            Effect.gen(function* () {\n              const owner = yield* CurrentPhoneTransaction,\n                candidate = yield* preparePhoneMutation(mapping, input);\n\n              if (candidate.mutate === undefined) {\n                const receipt = prepare(candidate.decision, owner.journal);\n\n                owner.guards.push(receipt as any);\n\n                return receipt;\n              }\n              const cn = phoneProofs(mapping.proofs).continuation;\n\n              const observed = yield* owner.read(\n                cn.table,\n                equal(cn.table, {\n                  [cn.moduleId]: input.completion.input.moduleId,\n                  [cn.continuationId]: input.completion.input.continuationId,\n                }),\n                { limit: 1 },\n              );\n\n              let completed = false;\n\n              const plan = {\n                ...input.completion,\n                prepare: (decision: any, journal: any) => {\n                  completed = decision === \"completed\";\n                  const proofReceipt = input.completion.prepare(decision, journal, () => undefined);\n\n                  owner.guards.push(proofReceipt);\n\n                  return prepare(\n                    decision === \"completed\" ? candidate.decision : { _tag: \"Rejected\" },\n                    journal,\n                  );\n                },\n              };\n\n              let receipt;\n\n              if (owner.batch) {\n                const offset = owner.statements.length;\n\n                yield* candidate.mutate;\n                const statements = owner.statements.splice(offset);\n\n                const compiled = yield* compileD1ProofCompletionPlan(\n                  phoneProofs(mapping.proofs) as any,\n                  plan as any,\n                  { statements, appliedCondition: candidate.appliedCondition! },\n                  (x) => x,\n                ).pipe(Effect.provideService(CurrentD1PlanningDatabase, owner.database));\n\n                // Mutation observations describe an accepted plan. A stale proof aborts this owner.\n                invariant(compiled.statements.length !== 0);\n                owner.statements.push(...compiled.statements, ...(compiled.postconditions ?? []));\n                receipt = compiled.receipt;\n              } else {\n                receipt = yield* completeProofPlanIn(\n                  phoneProofs(mapping.proofs),\n                  {\n                    mode: configuration.mode === \"synchronous\" ? \"synchronous\" : \"interactive\",\n                    locking: configuration.locking,\n                    standaloneGuard: Effect.void,\n                    coordinated: true,\n                    insertIfAbsent: (query: any, key, value) =>\n                      configuration.dialect === \"mysql\"\n                        ? query.onDuplicateKeyUpdate({ set: { [key]: value } })\n                        : query.onConflictDoNothing(),\n                  },\n                  plan as any,\n                  candidate.mutate,\n                  (x) => x,\n                ).pipe(Effect.provideService(CurrentProofSql, owner.database));\n              }\n              if (completed) {\n                invariant(observed.rows.length === 1);\n                const record = yield* cn.decode(observed.rows[0]!);\n\n                observed.rows = observed.rows.map((row) => ({ ...row, [cn.consumed]: true }));\n                const command = phoneProofs(mapping.proofs).command;\n\n                owner.postconditions.push(\n                  sql`${mapping.engineNowMillis} < ${record.expiresAtMillis}`,\n                  sql`exists(select 1 from ${command.table} where ${equal(command.table, { [command.moduleId]: input.completion.input.moduleId, [command.commandId]: input.completion.input.continuationDigest, [command.kind]: \"complete\", [command.decision]: \"completed\", [command.retentionUntil]: phoneProofs(mapping.proofs).encodeInstant(record.expiresAtMillis) })})`,\n                );\n              }\n              invariant(receipt?._tag === \"PreparedCommit\");\n              owner.guards.push(receipt as any);\n\n              return receipt as ReturnType<typeof prepare>;\n            }),\n          );\n        }).pipe(Effect.catchDefect(() => Effect.fail(unavailable()))),\n    }),\n  };\n};\n\nexport const makeTargetPhonePersistence = <\n  S extends Table,\n  I extends Table,\n  F extends Table,\n  C extends Table,\n  N,\n  RSetup = never,\n>(\n  database: TransactionNativeDatabase,\n  source: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>,\n  configuration: PhoneTargetConfiguration,\n) =>\n  Effect.gen(function* () {\n    const hooks = yield* LifecycleHooks;\n    const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);\n\n    const mapping = yield* Effect.try({\n      try: () => validateMapping(original, configuration),\n      catch: () => PhoneConfigurationError.make({}),\n    });\n\n    const execution = makeTransactionExecution(\n      CurrentPhoneTransaction,\n      database,\n      configuration,\n      unavailable,\n      randomId,\n    );\n\n    return services(mapping, execution, hooks, configuration);\n  });\n\nexport const coordinateTargetPhone = <M, A, E, R, RSetup = never>(\n  database: TransactionNativeDatabase,\n  source: PhoneMappingSource<M, RSetup>,\n  configuration: PhoneTargetConfiguration,\n  body: (\n    transaction: any,\n    services: PhonePersistenceServices,\n    append: (statement: Statement<any>) => void,\n  ) => Effect.Effect<A, E, R>,\n): Effect.Effect<A, PhoneCoordinatorError<E>, R | RSetup | LifecycleHooks> =>\n  Effect.gen(function* () {\n    const hooks = yield* LifecycleHooks;\n    const original = yield* Effect.isEffect(source) ? source : Effect.succeed(source);\n\n    const mapping = yield* Effect.try({\n      try: () => validateMapping(original, configuration),\n      catch: () => PhoneConfigurationError.make({}),\n    });\n\n    return yield* coordinateTransactionOwner(\n      database,\n      CurrentPhoneTransaction,\n      configuration,\n      Effect.void,\n      unavailable,\n      randomId,\n      (execution) => services(mapping, execution, hooks, configuration),\n      body,\n    );\n  });\n\ntype TransactionOf<D> = D extends { readonly transaction: (...args: any[]) => any }\n  ? Parameters<Parameters<D[\"transaction\"]>[0]>[0]\n  : never;\n\n/** Concrete driver wrappers select transaction mode; cryptography always precedes these owners. */\nexport const makePhoneTarget = <\n  D extends { readonly transaction: any },\n  T extends Table,\n  Extra = unknown,\n  Synchronous extends boolean = false,\n>(\n  configuration: PhoneTargetConfiguration,\n) => {\n  function coordinatePhonePersistence<\n    Database extends D,\n    S extends T,\n    I extends T,\n    F extends T,\n    C extends T,\n    N,\n    A,\n    E,\n    R,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>;\n      readonly transaction?: never;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true ? NoInfer<PhonePersistence | PhoneAdmission | PhoneSignInTargets> : R\n    >,\n  ): Effect.Effect<\n    A,\n    PhoneCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true\n        ? never\n        : Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets>)\n    | LifecycleHooks\n    | RSetup\n    | DatabaseRequirements\n  >;\n  function coordinatePhonePersistence<\n    Database extends D,\n    S extends T,\n    I extends T,\n    F extends T,\n    C extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>;\n      readonly transaction: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<\n      A,\n      E,\n      Synchronous extends true\n        ? NoInfer<PhonePersistence | PhoneAdmission | PhoneSignInTargets | TxId>\n        : R\n    >,\n  ): Effect.Effect<\n    A,\n    PhoneCoordinatorError<E> | DatabaseError,\n    | (Synchronous extends true\n        ? never\n        : Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets | TxId>)\n    | LifecycleHooks\n    | RSetup\n    | DatabaseRequirements\n  >;\n  function coordinatePhonePersistence<\n    Database extends D,\n    S extends T,\n    I extends T,\n    F extends T,\n    C extends T,\n    N,\n    A,\n    E,\n    R,\n    TxId,\n    TxShape,\n    RSetup = never,\n    DatabaseError = never,\n    DatabaseRequirements = never,\n  >(\n    acquire: Effect.Effect<Database, DatabaseError, DatabaseRequirements>,\n    options: {\n      readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>;\n      readonly transaction?: SuppliedService<TxId, NoInfer<TransactionOf<Database>>, TxShape>;\n    },\n    body: Effect.Effect<A, E, R>,\n  ): Effect.Effect<\n    A,\n    PhoneCoordinatorError<E> | DatabaseError,\n    | Exclude<R, PhonePersistence | PhoneAdmission | PhoneSignInTargets>\n    | LifecycleHooks\n    | RSetup\n    | DatabaseRequirements\n  > {\n    return Effect.flatMap(acquire, (database) =>\n      coordinateTargetPhone(\n        database as any,\n        options.mapping,\n        configuration,\n        (transaction: TransactionOf<Database>, services) => {\n          const provided = Context.make(PhonePersistence, services.phonePersistence).pipe(\n            Context.add(PhoneAdmission, services.phoneAdmission),\n            Context.add(PhoneSignInTargets, services.phoneSignInTargets),\n          );\n\n          const work = Effect.provideContext(body, provided);\n\n          return options.transaction === undefined\n            ? work\n            : Effect.provideService(work, options.transaction, options.transaction.of(transaction));\n        },\n      ),\n    );\n  }\n\n  return {\n    makePhonePersistenceServices: <\n      Database extends D,\n      S extends T,\n      I extends T,\n      F extends T,\n      C extends T,\n      N,\n      RSetup = never,\n    >(\n      database: Database,\n      mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N> & Extra, RSetup>,\n    ) => makeTargetPhonePersistence(database as any, mapping, configuration),\n    coordinatePhonePersistence,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AA2DA,MAAa,iCACX,aACG,oCAAoC,aAAa,QAAQ;AAE9D,MAAM,mBAAsB,UAAa,kBAA+C;CACtF,MAAM,UAAU;CAEhB,UAAU,QAAQ,SAAS,SAAS,CAAC;CACrC,OAAO,WAAW,oBAAoB,CAAC,CAAC,QAAQ,MAAM;CACtD,OAAO,WAAW,oBAAoB,CAAC,CAAC,QAAQ,SAAS;CACzD,UAAU,QAAQ,UAAU,0BAA0B,QAAQ,UAAU,YAAY;CACpF,MAAM,SAAS,YAAY,QAAQ,MAAM;CAEzC,UAAU,WAAW,KAAA,CAAS;CAC9B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,wBAAwB,GAChE,UAAW,OAAO,cAAsB,SAAS,KAAK;CACxD,IAAI,cAAc,SAAS,eAAe,UAAU,OAAO,wBAAwB,KAAA,CAAS;CAC5F,IAAI,cAAc,SAAS,SACzB,UACE,OAAO,OAAO,KAAA,KAAa,OAAO,UAAU,WAAW,uBAAuB,KAAA,CAChF;CACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,wBAAwB,GAChE,UAAU,QAAQ,cAAc,SAAS,KAAK;CAChD,IAAI,cAAc,SAAS,SAAS,UAAU,QAAQ,IAAI,YAAY,IAAI;CAE1E,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,QAAQ,OAAO,OAAO,EAAE,GAAG,QAAQ,OAAO,CAAC;EAC3C,SAAS,OAAO,OAAO,EAAE,GAAG,QAAQ,QAAQ,CAAC;EAC7C,OAAO,OAAO,OAAO,EAAE,GAAG,QAAQ,MAAM,CAAC;EACzC,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;EACnD,WAAW,OAAO,OAAO,EAAE,GAAG,QAAQ,UAAU,CAAC;EACjD,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;EACnD,YAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;CACrD,CAAC;AACH;AAEA,MAAM,YACJ,SACA,WACA,OACA,kBAC6B;CAC7B,MAAM,OAAgB,QAAgC,WAAW,SAC/D,UAAU,MAAM,KACd,OAAO,QAAQ,UAAU,IAAI,QAAQ,QAAQ,CAAC,GAC9C,OAAO,eAAe,gBAAgB,KAAK,CAC7C;CAEF,OAAO;EACL,gBAAgB,eAAe,GAAG;GAChC,QAAQ,UAAU,IAAI,WAAW,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;GACvD,UAAU,UAAU,IAAI,sBAAsB,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;EACtE,CAAC;EACD,oBAAoB,mBAAmB,GAAG,EACxC,SAAS,UAAU,IAAI,YAAY,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,EAClE,CAAC;EACD,kBAAkB,iBAAiB,GAAG;GACpC,SAAS,UACP,IACE,OAAO,IAAI,aAAa;IACtB,UAAU,MAAM,aAAa,QAAQ,QAAQ;IAE7C,QAAQ,OAAO,aAAa,SAAS,EAAE,GAAG,MAAM,CAAC,EAAA,CAAG;GACtD,CAAC,GACD,KACF;GACF,SAAS,UAAU,YACjB,OAAO,cAAc;IACnB,MAAM,QAAuB;KAC3B,GAAG;KACH,QAAQ,OAAO,WAAW,OAAO,WAAW,oBAAoB,CAAC,CAAC,CAChE,OAAO,WAAW,OAAO,WAAW,oBAAoB,CAAC,CAAC,CAAC,SAAS,MAAM,CAC5E;KACA,QAAQ,EAAE,GAAG,SAAS,OAAO;KAC7B,GAAI,SAAS,kBAAkB,KAAA,IAC3B,CAAC,IACD,EACE,eAAe,OAAO,WAAW,OAAO,WAAW,wBAAwB,CAAC,CAAC,CAC3E,OAAO,WAAW,OAAO,WAAW,wBAAwB,CAAC,CAAC,CAC5D,SAAS,aACX,CACF,EACF;KACJ,YAAY;MACV,OAAO;OACL,GAAG,SAAS,WAAW;OACvB,SAAS,OAAO,WAAW,OAAO,WAAW,YAAY,CAAC,CAAC,CACzD,OAAO,WAAW,OAAO,WAAW,YAAY,CAAC,CAAC,CAChD,SAAS,WAAW,MAAM,OAC5B,CACF;MACF;MACA,SAAS,SAAS,WAAW;KAC/B;IACF;IAEA,OAAO,IACL,OAAO,IAAI,aAAa;KACtB,MAAM,QAAQ,OAAO,yBACnB,YAAY,OAAO,qBAAqB,SAAS,KAAK;KAExD,IAAI,UAAU,WAAW,KAAA,GAAW;MAClC,MAAM,UAAU,QAAQ,UAAU,UAAU,MAAM,OAAO;MAEzD,MAAM,OAAO,KAAK,OAAc;MAEhC,OAAO;KACT;KACA,MAAM,KAAK,YAAY,QAAQ,MAAM,CAAC,CAAC;KAEvC,MAAM,WAAW,OAAO,MAAM,KAC5B,GAAG,OACH,MAAM,GAAG,OAAO;OACb,GAAG,WAAW,MAAM,WAAW,MAAM;OACrC,GAAG,iBAAiB,MAAM,WAAW,MAAM;KAC9C,CAAC,GACD,EAAE,OAAO,EAAE,CACb;KAEA,IAAI,YAAY;KAEhB,MAAM,OAAO;MACX,GAAG,MAAM;MACT,UAAU,UAAe,YAAiB;OACxC,YAAY,aAAa;OACzB,MAAM,eAAe,MAAM,WAAW,QAAQ,UAAU,eAAe,KAAA,CAAS;OAEhF,MAAM,OAAO,KAAK,YAAY;OAE9B,OAAO,QACL,aAAa,cAAc,UAAU,WAAW,EAAE,MAAM,WAAW,GACnE,OACF;MACF;KACF;KAEA,IAAI;KAEJ,IAAI,MAAM,OAAO;MACf,MAAM,SAAS,MAAM,WAAW;MAEhC,OAAO,UAAU;MACjB,MAAM,aAAa,MAAM,WAAW,OAAO,MAAM;MAEjD,MAAM,WAAW,OAAO,6BACtB,YAAY,QAAQ,MAAM,GAC1B,MACA;OAAE;OAAY,kBAAkB,UAAU;MAAkB,IAC3D,MAAM,CACT,CAAC,CAAC,KAAK,OAAO,eAAe,2BAA2B,MAAM,QAAQ,CAAC;MAGvE,UAAU,SAAS,WAAW,WAAW,CAAC;MAC1C,MAAM,WAAW,KAAK,GAAG,SAAS,YAAY,GAAI,SAAS,kBAAkB,CAAC,CAAE;MAChF,UAAU,SAAS;KACrB,OACE,UAAU,OAAO,oBACf,YAAY,QAAQ,MAAM,GAC1B;MACE,MAAM,cAAc,SAAS,gBAAgB,gBAAgB;MAC7D,SAAS,cAAc;MACvB,iBAAiB,OAAO;MACxB,aAAa;MACb,iBAAiB,OAAY,KAAK,UAChC,cAAc,YAAY,UACtB,MAAM,qBAAqB,EAAE,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,IACpD,MAAM,oBAAoB;KAClC,GACA,MACA,UAAU,SACT,MAAM,CACT,CAAC,CAAC,KAAK,OAAO,eAAe,iBAAiB,MAAM,QAAQ,CAAC;KAE/D,IAAI,WAAW;MACb,UAAU,SAAS,KAAK,WAAW,CAAC;MACpC,MAAM,SAAS,OAAO,GAAG,OAAO,SAAS,KAAK,EAAG;MAEjD,SAAS,OAAO,SAAS,KAAK,KAAK,SAAS;OAAE,GAAG;QAAM,GAAG,WAAW;MAAK,EAAE;MAC5E,MAAM,UAAU,YAAY,QAAQ,MAAM,CAAC,CAAC;MAE5C,MAAM,eAAe,KACnB,GAAG,GAAG,QAAQ,gBAAgB,KAAK,OAAO,mBAC1C,GAAG,wBAAwB,QAAQ,MAAM,SAAS,MAAM,QAAQ,OAAO;QAAG,QAAQ,WAAW,MAAM,WAAW,MAAM;QAAW,QAAQ,YAAY,MAAM,WAAW,MAAM;QAAqB,QAAQ,OAAO;QAAa,QAAQ,WAAW;QAAc,QAAQ,iBAAiB,YAAY,QAAQ,MAAM,CAAC,CAAC,cAAc,OAAO,eAAe;MAAE,CAAC,EAAE,EAC5V;KACF;KACA,UAAU,SAAS,SAAS,gBAAgB;KAC5C,MAAM,OAAO,KAAK,OAAc;KAEhC,OAAO;IACT,CAAC,CACH;GACF,CAAC,CAAC,CAAC,KAAK,OAAO,kBAAkB,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC;EAChE,CAAC;CACH;AACF;AAEA,MAAa,8BAQX,UACA,QACA,kBAEA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,WAAW,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,QAAQ,MAAM;CAEhF,MAAM,UAAU,OAAO,OAAO,IAAI;EAChC,WAAW,gBAAgB,UAAU,aAAa;EAClD,aAAa,wBAAwB,KAAK,CAAC,CAAC;CAC9C,CAAC;CAED,MAAM,YAAY,yBAChB,yBACA,UACA,eACA,aACA,QACF;CAEA,OAAO,SAAS,SAAS,WAAW,OAAO,aAAa;AAC1D,CAAC;AAEH,MAAa,yBACX,UACA,QACA,eACA,SAMA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,WAAW,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,QAAQ,MAAM;CAEhF,MAAM,UAAU,OAAO,OAAO,IAAI;EAChC,WAAW,gBAAgB,UAAU,aAAa;EAClD,aAAa,wBAAwB,KAAK,CAAC,CAAC;CAC9C,CAAC;CAED,OAAO,OAAO,2BACZ,UACA,yBACA,eACA,OAAO,MACP,aACA,WACC,cAAc,SAAS,SAAS,WAAW,OAAO,aAAa,GAChE,IACF;AACF,CAAC;;AAOH,MAAa,mBAMX,kBACG;CAyEH,SAAS,2BAgBP,SACA,SAIA,MAQA;EACA,OAAO,OAAO,QAAQ,UAAU,aAC9B,sBACE,UACA,QAAQ,SACR,gBACC,aAAsC,aAAa;GAClD,MAAM,WAAW,QAAQ,KAAK,kBAAkB,SAAS,gBAAgB,CAAC,CAAC,KACzE,QAAQ,IAAI,gBAAgB,SAAS,cAAc,GACnD,QAAQ,IAAI,oBAAoB,SAAS,kBAAkB,CAC7D;GAEA,MAAM,OAAO,OAAO,eAAe,MAAM,QAAQ;GAEjD,OAAO,QAAQ,gBAAgB,KAAA,IAC3B,OACA,OAAO,eAAe,MAAM,QAAQ,aAAa,QAAQ,YAAY,GAAG,WAAW,CAAC;EAC1F,CACF,CACF;CACF;CAEA,OAAO;EACL,+BASE,UACA,YACG,2BAA2B,UAAiB,SAAS,aAAa;EACvE;CACF;AACF"}

package/dist/drizzle/proof-model.d.mts

@@ -0,0 +1,287 @@
+import { TokenDigest } from "../Schema.mjs";
+import { ProofBinding, ProofContinuationId, ProofId, ProofPurpose, ProofRequestReceipt, ProofVersion } from "../proofs/models.mjs";
+import { DrizzleMappingError, SubjectIdCodec } from "./model.mjs";
+import { ProofPolicy } from "../proofs/policy.mjs";
+import { ProofRecord } from "../proofs/ProofPersistence.mjs";
+import { Effect } from "effect";
+import { InferInsertModel, InferSelectModel, SQL, Table } from "drizzle-orm";
+//#region src/drizzle/proof-model.d.ts
+type ColumnKey<T extends Table> = Extract<keyof T["_"]["columns"], string>;
+type ProofAction = "issue" | "attempt";
+type ProofScopeKind = "action" | "identifier" | "subject";
+type ProofGenerationState = "active" | "consumed" | "cancelled" | "superseded";
+type ProofDeliveryState = "new" | "claimed" | "accepted" | "failed" | "ambiguous";
+type ProofCommandKind = "attempt" | "complete";
+type ProofCommandDecision = "accepted" | "rejected" | "completed";
+interface ProofScopeKeys {
+  /** Stable across flow/context/request changes and bounded by the consumer codec. */
+  readonly series: string;
+  readonly identifier: string;
+  /** A tagged non-null value; use a stable sentinel when the binding has no subject. */
+  readonly subject: string;
+}
+interface ProofAuthorityInput<NativeSubjectId> {
+  readonly moduleId: string;
+  readonly purpose: ProofPurpose;
+  readonly binding: ProofBinding;
+  /** Resolved by Effect preplanning before an interactive check or D1 predicate compile. */
+  readonly nativeSubjectId?: NativeSubjectId;
+}
+interface ProofAuthorityTables<Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> {
+  readonly identifier: {
+    readonly table: Identifier;
+    readonly namespace: ColumnKey<Identifier>;
+    readonly value: ColumnKey<Identifier>;
+    /** Evaluate the consumer's explicit current-ownership/availability semantics. */
+    readonly isCurrent: (input: ProofAuthorityInput<NativeSubjectId>, rows: ReadonlyArray<InferSelectModel<Identifier>>) => boolean;
+    /** Optional outside D1. Never infer this semantic predicate from eligibility. */
+    readonly d1CurrentCondition?: (input: ProofAuthorityInput<NativeSubjectId>) => SQL;
+  };
+  readonly subject?: {
+    readonly table: Subject;
+    readonly id: ColumnKey<Subject>;
+    readonly status: ColumnKey<Subject>;
+    readonly securityRevision: ColumnKey<Subject>;
+    readonly isActiveStatus: (value: unknown) => boolean;
+    readonly d1ActiveStatusValue: unknown;
+  };
+  readonly credential?: {
+    readonly table: Credential;
+    readonly subjectId: ColumnKey<Credential>;
+    readonly credentialId: ColumnKey<Credential>;
+    readonly revision: ColumnKey<Credential>;
+    readonly status?: ColumnKey<Credential>;
+    readonly isActiveStatus?: (value: unknown) => boolean;
+    readonly d1ActiveStatusValue?: unknown;
+  };
+  readonly subjectId?: SubjectIdCodec<NativeSubjectId>;
+}
+interface ProofRequestTable<Request extends Table> {
+  readonly table: Request;
+  readonly moduleId: ColumnKey<Request>;
+  readonly requestId: ColumnKey<Request>;
+  readonly fingerprint: ColumnKey<Request>;
+  readonly proofId: ColumnKey<Request>;
+  readonly purpose: ColumnKey<Request>;
+  readonly keyId: ColumnKey<Request>;
+  readonly createdAt: ColumnKey<Request>;
+  readonly retentionUntil: ColumnKey<Request>;
+  readonly encodeInsert: (input: {
+    readonly record: ProofRecord;
+    readonly createdAtMillis: number;
+    readonly retentionUntilMillis: number;
+  }) => InferInsertModel<Request>;
+  readonly decodeReceipt: (row: InferSelectModel<Request>) => Effect.Effect<ProofRequestReceipt, DrizzleMappingError>;
+}
+interface ProofSeriesTable<Series extends Table> {
+  readonly table: Series;
+  readonly moduleId: ColumnKey<Series>;
+  readonly purpose: ColumnKey<Series>;
+  readonly scopeKey: ColumnKey<Series>;
+  readonly activeProofId: ColumnKey<Series>;
+  readonly lastIssueAt: ColumnKey<Series>;
+  readonly version: ColumnKey<Series>;
+  readonly encodeInsert: (input: {
+    readonly moduleId: string;
+    readonly purpose: ProofPurpose;
+    readonly scopeKey: string;
+    readonly version: ProofVersion;
+  }) => InferInsertModel<Series>;
+}
+interface ProofGenerationTable<Generation extends Table> {
+  readonly table: Generation;
+  readonly moduleId: ColumnKey<Generation>;
+  readonly purpose: ColumnKey<Generation>;
+  readonly proofId: ColumnKey<Generation>;
+  readonly requestId: ColumnKey<Generation>;
+  readonly seriesKey: ColumnKey<Generation>;
+  readonly deliveryId: ColumnKey<Generation>;
+  readonly binding: ColumnKey<Generation>;
+  readonly verifierKeyId: ColumnKey<Generation>;
+  readonly verifierDigest: ColumnKey<Generation>;
+  readonly issuedAt: ColumnKey<Generation>;
+  readonly expiresAt: ColumnKey<Generation>;
+  readonly version: ColumnKey<Generation>;
+  readonly state: ColumnKey<Generation>;
+  readonly sendCount: ColumnKey<Generation>;
+  readonly deliveryState: ColumnKey<Generation>;
+  readonly claimVersion: ColumnKey<Generation>;
+  readonly claimDeadline: ColumnKey<Generation>;
+  readonly retryAt: ColumnKey<Generation>;
+  readonly deliveryRetryMillis: ColumnKey<Generation>;
+  readonly retentionUntil: ColumnKey<Generation>;
+  readonly encodeInsert: (input: {
+    readonly record: ProofRecord;
+    readonly seriesKey: string;
+    readonly retentionUntilMillis: number;
+    readonly state: ProofGenerationState;
+    readonly deliveryState: ProofDeliveryState;
+    readonly policy: ProofPolicy;
+  }) => InferInsertModel<Generation>;
+  readonly decodeRecord: (row: InferSelectModel<Generation>) => Effect.Effect<ProofRecord, DrizzleMappingError>;
+  readonly decodeBinding: (row: InferSelectModel<Generation>) => Effect.Effect<ProofBinding, DrizzleMappingError>;
+}
+interface ProofContinuationRecord {
+  readonly moduleId: string;
+  readonly purpose: ProofPurpose;
+  readonly continuationId: ProofContinuationId;
+  readonly digest: TokenDigest;
+  readonly proofId: ProofId;
+  readonly seriesKey: string;
+  readonly binding: ProofBinding;
+  readonly expiresAtMillis: number;
+  readonly version: ProofVersion;
+}
+interface ProofContinuationTable<Continuation extends Table> {
+  readonly table: Continuation;
+  readonly moduleId: ColumnKey<Continuation>;
+  readonly purpose: ColumnKey<Continuation>;
+  readonly continuationId: ColumnKey<Continuation>;
+  readonly digest: ColumnKey<Continuation>;
+  readonly proofId: ColumnKey<Continuation>;
+  readonly seriesKey: ColumnKey<Continuation>;
+  readonly binding: ColumnKey<Continuation>;
+  readonly expiresAt: ColumnKey<Continuation>;
+  readonly consumed: ColumnKey<Continuation>;
+  readonly version: ColumnKey<Continuation>;
+  readonly retentionUntil: ColumnKey<Continuation>;
+  readonly encodeInsert: (record: ProofContinuationRecord & {
+    readonly retentionUntilMillis: number;
+  }) => InferInsertModel<Continuation>;
+  readonly decode: (row: InferSelectModel<Continuation>) => Effect.Effect<ProofContinuationRecord, DrizzleMappingError>;
+}
+interface ProofRateScopeTable<RateScope extends Table> {
+  readonly table: RateScope;
+  readonly moduleId: ColumnKey<RateScope>;
+  readonly purpose: ColumnKey<RateScope>;
+  readonly action: ColumnKey<RateScope>;
+  readonly scopeKind: ColumnKey<RateScope>;
+  readonly scopeKey: ColumnKey<RateScope>;
+  readonly encodeInsert: (input: {
+    readonly moduleId: string;
+    readonly purpose: ProofPurpose;
+    readonly action: ProofAction;
+    readonly scopeKind: ProofScopeKind;
+    readonly scopeKey: string;
+  }) => InferInsertModel<RateScope>;
+}
+interface ProofAbuseEventTable<AbuseEvent extends Table> {
+  readonly table: AbuseEvent;
+  readonly moduleId: ColumnKey<AbuseEvent>;
+  readonly purpose: ColumnKey<AbuseEvent>;
+  readonly action: ColumnKey<AbuseEvent>;
+  readonly scopeKind: ColumnKey<AbuseEvent>;
+  readonly scopeKey: ColumnKey<AbuseEvent>;
+  readonly commandId: ColumnKey<AbuseEvent>;
+  readonly occurredAt: ColumnKey<AbuseEvent>;
+  readonly retentionUntil: ColumnKey<AbuseEvent>;
+  readonly encodeInsert: (input: {
+    readonly moduleId: string;
+    readonly purpose: ProofPurpose;
+    readonly action: ProofAction;
+    readonly scopeKind: ProofScopeKind;
+    readonly scopeKey: string;
+    readonly commandId: string;
+    readonly occurredAtMillis: number;
+    readonly retentionUntilMillis: number;
+  }) => InferInsertModel<AbuseEvent>;
+}
+interface ProofFailureEventTable<FailureEvent extends Table> {
+  readonly table: FailureEvent;
+  readonly moduleId: ColumnKey<FailureEvent>;
+  readonly purpose: ColumnKey<FailureEvent>;
+  readonly seriesKey: ColumnKey<FailureEvent>;
+  readonly commandId: ColumnKey<FailureEvent>;
+  readonly occurredAt: ColumnKey<FailureEvent>;
+  readonly retentionUntil: ColumnKey<FailureEvent>;
+  readonly encodeInsert: (input: {
+    readonly moduleId: string;
+    readonly purpose: ProofPurpose;
+    readonly seriesKey: string;
+    readonly commandId: string;
+    readonly occurredAtMillis: number;
+    readonly retentionUntilMillis: number;
+  }) => InferInsertModel<FailureEvent>;
+}
+interface ProofCommandTable<Command extends Table> {
+  readonly table: Command;
+  readonly moduleId: ColumnKey<Command>;
+  readonly commandId: ColumnKey<Command>;
+  readonly kind: ColumnKey<Command>;
+  readonly decision: ColumnKey<Command>;
+  readonly retentionUntil: ColumnKey<Command>;
+  readonly encodeInsert: (input: {
+    readonly moduleId: string;
+    readonly commandId: string;
+    readonly kind: ProofCommandKind;
+    readonly decision: ProofCommandDecision;
+    readonly retentionUntilMillis: number;
+  }) => InferInsertModel<Command>;
+}
+interface RequiredProofConstraints {
+  readonly request: "unique(request.moduleId,request.requestId)";
+  readonly series: "unique(series.moduleId,series.purpose,series.scopeKey)";
+  readonly proof: "unique(generation.moduleId,generation.proofId)";
+  readonly delivery: "unique(generation.moduleId,generation.deliveryId)";
+  readonly continuationId: "unique(continuation.moduleId,continuation.continuationId)";
+  readonly continuationDigest: "unique(continuation.moduleId,continuation.digest)";
+  readonly rateScope: "unique(rateScope.moduleId,rateScope.purpose,rateScope.action,rateScope.scopeKind,rateScope.scopeKey)";
+  readonly abuseEvent: "unique(abuseEvent.moduleId,abuseEvent.action,abuseEvent.scopeKind,abuseEvent.scopeKey,abuseEvent.commandId)";
+  readonly failureEvent: "unique(failureEvent.moduleId,failureEvent.seriesKey,failureEvent.commandId)";
+  readonly command: "unique(command.moduleId,command.commandId)";
+}
+declare const requiredProofConstraints: RequiredProofConstraints;
+interface ProofConstraintClassifier {
+  /** Match only the declared request uniqueness constraint, including wrapped driver errors. */
+  readonly isRequestConflict: (cause: unknown) => boolean;
+  /** Match only the declared series uniqueness constraint, including wrapped driver errors. */
+  readonly isSeriesConflict: (cause: unknown) => boolean;
+  /** Match only the declared command uniqueness constraint, including wrapped driver errors. */
+  readonly isCommandConflict: (cause: unknown) => boolean;
+}
+interface ProofD1Clock {
+  /** Native instant expression evaluated by SQLite inside the submitted batch. */
+  readonly engineNow: SQL;
+  /** Integer Unix milliseconds expression evaluated inside the submitted batch. */
+  readonly engineNowMillis: SQL;
+  /** Native instant expression for an engine-time rolling-window cutoff. */
+  readonly engineInstantMinus: (millis: number) => SQL;
+  /** Native instant expression for a retention/lease deadline from engine time. */
+  readonly engineInstantPlus: (millis: number) => SQL;
+}
+interface ProofPersistenceMapping<Request extends Table, Series extends Table, Generation extends Table, Continuation extends Table, RateScope extends Table, AbuseEvent extends Table, FailureEvent extends Table, Command extends Table, Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> extends ProofConstraintClassifier {
+  readonly request: ProofRequestTable<Request>;
+  readonly series: ProofSeriesTable<Series>;
+  readonly generation: ProofGenerationTable<Generation>;
+  readonly continuation: ProofContinuationTable<Continuation>;
+  readonly rateScope: ProofRateScopeTable<RateScope>;
+  readonly abuseEvent: ProofAbuseEventTable<AbuseEvent>;
+  readonly failureEvent: ProofFailureEventTable<FailureEvent>;
+  readonly command: ProofCommandTable<Command>;
+  readonly authority: ProofAuthorityTables<Subject, Identifier, Credential, NativeSubjectId>;
+  readonly constraints: RequiredProofConstraints;
+  readonly scopeKeys: (input: {
+    readonly moduleId: string;
+    readonly purpose: ProofPurpose;
+    readonly binding: ProofBinding;
+  }) => ProofScopeKeys;
+  readonly encodeInstant: (epochMillis: number) => unknown;
+  readonly decodeInstant: (native: unknown) => Effect.Effect<number, DrizzleMappingError>;
+  readonly allocateVersion?: Effect.Effect<ProofVersion, DrizzleMappingError>;
+  readonly allocateVersionSync?: () => ProofVersion;
+  /** Required by D1 mappings and ignored by interactive targets. */
+  readonly d1?: ProofD1Clock;
+}
+type D1ProofPersistenceMapping<Request extends Table, Series extends Table, Generation extends Table, Continuation extends Table, RateScope extends Table, AbuseEvent extends Table, FailureEvent extends Table, Command extends Table, Subject extends Table, Identifier extends Table, Credential extends Table, NativeSubjectId> = ProofPersistenceMapping<Request, Series, Generation, Continuation, RateScope, AbuseEvent, FailureEvent, Command, Subject, Identifier, Credential, NativeSubjectId> & {
+  readonly d1: ProofD1Clock;
+  readonly authority: ProofAuthorityTables<Subject, Identifier, Credential, NativeSubjectId> & {
+    readonly identifier: ProofAuthorityTables<Subject, Identifier, Credential, NativeSubjectId>["identifier"] & {
+      /** Synchronous SQL compiler; Effect-based ID conversion has already completed. */
+      readonly d1CurrentCondition: (input: ProofAuthorityInput<NativeSubjectId>) => SQL;
+    };
+  };
+};
+type AnyProofPersistenceMapping = ProofPersistenceMapping<Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, Table, unknown>;
+//#endregion
+export { AnyProofPersistenceMapping, D1ProofPersistenceMapping, ProofAbuseEventTable, ProofAction, ProofAuthorityInput, ProofAuthorityTables, ProofCommandDecision, ProofCommandKind, ProofCommandTable, ProofConstraintClassifier, ProofContinuationRecord, ProofContinuationTable, ProofD1Clock, ProofDeliveryState, ProofFailureEventTable, ProofGenerationState, ProofGenerationTable, ProofPersistenceMapping, ProofRateScopeTable, ProofRequestTable, ProofScopeKeys, ProofScopeKind, ProofSeriesTable, RequiredProofConstraints, requiredProofConstraints };
+//# sourceMappingURL=proof-model.d.mts.map