effect 4.0.0-beta.5 → 4.0.0-beta.50

package/dist/unstable/eventlog/SqlEventLogServerEncrypted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlEventLogServerEncrypted.js","names":["Effect","Layer","PubSub","RcMap","Schema","Stream","SqlClient","EntryId","makeRemoteIdUnsafe","EventLogEncryption","EventLogServerEncrypted","makeStorage","options","gen","encryptions","sql","withoutTransforms","tablePrefix","entryTablePrefix","remoteIdTable","sessionAuthBindingsTable","insertBatchSize","remoteIdTableSql","sessionAuthBindingsTableSql","onDialectOrElse","pg","mysql","mssql","orElse","remoteId","pipe","flatMap","results","length","succeed","remote_id","created","as","resources","make","lookup","fnUntraced","scopeKey","scopeHash","sha256String","TextEncoder","encode","slice","table","tableSql","pubsub","acquireRelease","unbounded","shutdown","idleTimeToLive","getSessionAuthBinding","publicKey","decodeSessionAuthBindings","map","rows","row","undefined","signing_public_key","orDie","Storage","of","getId","getOrCreateSessionAuthBinding","signingPublicKey","existing","withTransaction","write","storeId","entries","makeEncryptedScopeKey","get","forInsert","ids","currentBatch","entry","push","entryId","iv","entry_id","encrypted_entry","encryptedEntry","allEntries","batch","encryptedEntries","insert","andThen","in","decodeEntries","publishAll","scoped","changes","startSequence","subscription","subscribe","initial","fromArray","concat","fromSubscription","unwrap","EncryptedRemoteEntrySql","Struct","sequence","Number","Uint8Array","SessionAuthBindingSql","public_key","String","decodeEntryRows","decodeUnknownEffect","Array","decodeSessionAuthBindingRows","toEncryptedRemoteEntry","layerStorage","effect","layerStorageSubtle","provide","layerSubtle"],"sources":["../../../src/unstable/eventlog/SqlEventLogServerEncrypted.ts"],"sourcesContent":[null],"mappings":"AAAA;;;AAGA,OAAO,KAAKA,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAKC,KAAK,MAAM,gBAAgB;AACvC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAKC,KAAK,MAAM,gBAAgB;AACvC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AAEzC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAKC,SAAS,MAAM,qBAAqB;AAEhD,SAASC,OAAO,EAAEC,kBAAkB,QAAuB,mBAAmB;AAC9E,OAAO,KAAKC,kBAAkB,MAAM,yBAAyB;AAC7D,OAAO,KAAKC,uBAAuB,MAAM,8BAA8B;AAEvE;;;;AAIA,OAAO,MAAMC,WAAW,GAAIC,OAI3B,IAKCZ,MAAM,CAACa,GAAG,CAAC,aAAS;EAClB,MAAMC,WAAW,GAAG,OAAOL,kBAAkB,CAACA,kBAAkB;EAChE,MAAMM,GAAG,GAAG,CAAC,OAAOT,SAAS,CAACA,SAAS,EAAEU,iBAAiB,EAAE;EAE5D,MAAMC,WAAW,GAAGL,OAAO,EAAEM,gBAAgB,IAAI,eAAe;EAChE,MAAMC,aAAa,GAAGP,OAAO,EAAEO,aAAa,IAAI,kBAAkB;EAClE,MAAMC,wBAAwB,GAAG,GAAGH,WAAW,wBAAwB;EACvE,MAAMI,eAAe,GAAGT,OAAO,EAAES,eAAe,IAAI,GAAG;EAEvD,MAAMC,gBAAgB,GAAGP,GAAG,CAACI,aAAa,CAAC;EAC3C,MAAMI,2BAA2B,GAAGR,GAAG,CAACK,wBAAwB,CAAC;EAEjE,OAAOL,GAAG,CAACS,eAAe,CAAC;IACzBC,EAAE,EAAEA,CAAA,KACFV,GAAG;uCAC4BO,gBAAgB;;YAE3C;IACNI,KAAK,EAAEA,CAAA,KACLX,GAAG;uCAC4BO,gBAAgB;;YAE3C;IACNK,KAAK,EAAEA,CAAA,KACLZ,GAAG;uCAC4BO,gBAAgB;;YAE3C;IACNM,MAAM,EAAEA,CAAA,KACNb,GAAG;uCAC4BO,gBAAgB;;;GAGlD,CAAC;EAEF,OAAOP,GAAG,CAACS,eAAe,CAAC;IACzBC,EAAE,EAAEA,CAAA,KACFV,GAAG;uCAC4BQ,2BAA2B;;;YAGtD;IACNG,KAAK,EAAEA,CAAA,KACLX,GAAG;uCAC4BQ,2BAA2B;;;YAGtD;IACNI,KAAK,EAAEA,CAAA,KACLZ,GAAG;uCAC4BQ,2BAA2B;;;YAGtD;IACNK,MAAM,EAAEA,CAAA,KACNb,GAAG;uCAC4BQ,2BAA2B;;;;GAI7D,CAAC;EAEF,MAAMM,QAAQ,GAAG,OAAOd,GAA8B,yBAAyBO,gBAAgB,EAAE,CAACQ,IAAI,CACpG9B,MAAM,CAAC+B,OAAO,CAAEC,OAAO,IAAI;IACzB,IAAIA,OAAO,CAACC,MAAM,GAAG,CAAC,EAAE;MACtB,OAAOjC,MAAM,CAACkC,OAAO,CAACF,OAAO,CAAC,CAAC,CAAC,CAACG,SAAqB,CAAC;IACzD;IACA,MAAMC,OAAO,GAAG5B,kBAAkB,EAAE;IACpC,OAAOR,MAAM,CAACqC,EAAE,CACdtB,GAAG,eAAeO,gBAAgB,wBAAwBc,OAAO,GAAG,EACpEA,OAAO,CACR;EACH,CAAC,CAAC,CACH;EAED,MAAME,SAAS,GAAG,OAAOnC,KAAK,CAACoC,IAAI,CAAC;IAClCC,MAAM,EAAExC,MAAM,CAACyC,UAAU,CAAC,WAAUC,QAAgB;MAClD,MAAMC,SAAS,GAAG,CAAC,OAAO7B,WAAW,CAAC8B,YAAY,CAAC,IAAIC,WAAW,EAAE,CAACC,MAAM,CAACJ,QAAQ,CAAC,CAAC,EAAEK,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;MACpG,MAAMC,KAAK,GAAG,GAAG/B,WAAW,IAAI0B,SAAS,EAAE;MAC3C,MAAMM,QAAQ,GAAGlC,GAAG,CAACiC,KAAK,CAAC;MAE3B,OAAOjC,GAAG,CAACS,eAAe,CAAC;QACzBC,EAAE,EAAEA,CAAA,KACFV,GAAG;6CAC8BkC,QAAQ;;;;;kBAKnC;QACRvB,KAAK,EAAEA,CAAA,KACLX,GAAG;6CAC8BkC,QAAQ;;;;;kBAKnC;QACRtB,KAAK,EAAEA,CAAA,KACLZ,GAAG;6CAC8BkC,QAAQ;;;;;kBAKnC;QACRrB,MAAM,EAAEA,CAAA,KACNb,GAAG;6CAC8BkC,QAAQ;;;;;;OAM5C,CAAC;MAEF,MAAMC,MAAM,GAAG,OAAOlD,MAAM,CAACmD,cAAc,CACzCjD,MAAM,CAACkD,SAAS,EAA2C,EAC3DlD,MAAM,CAACmD,QAAQ,CAChB;MACD,OAAO;QAAEH,MAAM;QAAEF;MAAK,CAAW;IACnC,CAAC,CAAC;IACFM,cAAc,EAAE;GACjB,CAAC;EAEF,MAAMC,qBAAqB,GAAIC,SAAiB,IAC9CzC,GAAG;;iBAEQQ,2BAA2B;+BACbiC,SAAS;SAC/B,CAAC1B,IAAI,CACN9B,MAAM,CAAC+B,OAAO,CAAC0B,yBAAyB,CAAC,EACzCzD,MAAM,CAAC0D,GAAG,CAAEC,IAAI,IAAI;IAClB,MAAMC,GAAG,GAAGD,IAAI,CAAC,CAAC,CAAC;IACnB,OAAOC,GAAG,KAAKC,SAAS,GAAGA,SAAS,GAAGD,GAAG,CAACE,kBAA6C;EAC1F,CAAC,CAAC,EACF9D,MAAM,CAAC+D,KAAK,CACb;EAEH,OAAOrD,uBAAuB,CAACsD,OAAO,CAACC,EAAE,CAAC;IACxCC,KAAK,EAAElE,MAAM,CAACkC,OAAO,CAACL,QAAQ,CAAC;IAC/BsC,6BAA6B,EAAEnE,MAAM,CAACyC,UAAU,CAC9C,WAAUe,SAAS,EAAEY,gBAAgB;MACnC,MAAMC,QAAQ,GAAG,OAAOd,qBAAqB,CAACC,SAAS,CAAC;MACxD,IAAIa,QAAQ,KAAKR,SAAS,EAAE;QAC1B,OAAOQ,QAAQ;MACjB;MACA,OAAO,OAAOtD,GAAG;0BACDQ,2BAA2B;sBAC/BiC,SAAS,KAAKY,gBAAgB;WACzC,CAACtC,IAAI,CACJ9B,MAAM,CAACqC,EAAE,CAAC+B,gBAAgB,CAAC,CAC5B;IACH,CAAC,EACDrD,GAAG,CAACuD,eAAe,EACnBtE,MAAM,CAAC+D,KAAK,CACb;IACDQ,KAAK,EAAEvE,MAAM,CAACyC,UAAU,CACtB,WAAUe,SAAS,EAAEgB,OAAO,EAAEC,OAAO;MACnC,IAAIA,OAAO,CAACxC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE;MACnC,MAAMS,QAAQ,GAAGgC,qBAAqB,CAAClB,SAAS,EAAEgB,OAAO,CAAC;MAC1D,MAAM;QAAEtB,MAAM;QAAEF;MAAK,CAAE,GAAG,OAAO7C,KAAK,CAACwE,GAAG,CAACrC,SAAS,EAAEI,QAAQ,CAAC;MAC/D,MAAMkC,SAAS,GAOV,CAAC;QAAEC,GAAG,EAAE,EAAE;QAAEJ,OAAO,EAAE;MAAE,CAAE,CAAC;MAC/B,IAAIK,YAAY,GAAGF,SAAS,CAAC,CAAC,CAAC;MAC/B,KAAK,MAAMG,KAAK,IAAIN,OAAO,EAAE;QAC3BK,YAAY,CAACD,GAAG,CAACG,IAAI,CAACD,KAAK,CAACE,OAAO,CAAC;QACpCH,YAAY,CAACL,OAAO,CAACO,IAAI,CAAC;UACxBE,EAAE,EAAEH,KAAK,CAACG,EAAE;UACZC,QAAQ,EAAEJ,KAAK,CAACE,OAAO;UACvBG,eAAe,EAAEL,KAAK,CAACM;SACxB,CAAC;QACF,IAAIP,YAAY,CAACL,OAAO,CAACxC,MAAM,KAAKZ,eAAe,EAAE;UACnDyD,YAAY,GAAG;YAAED,GAAG,EAAE,EAAE;YAAEJ,OAAO,EAAE;UAAE,CAAE;UACvCG,SAAS,CAACI,IAAI,CAACF,YAAY,CAAC;QAC9B;MACF;MAEA,MAAMQ,UAAU,GAAmD,EAAE;MACrE,KAAK,MAAMC,KAAK,IAAIX,SAAS,EAAE;QAC7B,IAAIW,KAAK,CAACd,OAAO,CAACxC,MAAM,KAAK,CAAC,EAAE;QAChC,MAAMuD,gBAAgB,GAAG,OAAOzE,GAAG;4BACnBA,GAAG,CAACiC,KAAK,CAAC,IAAIjC,GAAG,CAAC0E,MAAM,CAACF,KAAK,CAACd,OAAO,CAAC;aACtD,CAAC3C,IAAI,CACJ9B,MAAM,CAAC0F,OAAO,CACZ3E,GAAG,iBAAiBA,GAAG,CAACiC,KAAK,CAAC,UAAUjC,GAAG,CAAC4E,EAAE,CAAC,UAAU,EAAEJ,KAAK,CAACV,GAAG,CAAC,wBAAwB,CAC9F,EACD7E,MAAM,CAAC+B,OAAO,CAAC6D,aAAa,CAAC,CAC9B;QACD,OAAO1F,MAAM,CAAC2F,UAAU,CAAC3C,MAAM,EAAEsC,gBAAgB,CAAC;QAClDF,UAAU,CAACN,IAAI,CAAC,GAAGQ,gBAAgB,CAAC;MACtC;MACA,OAAOF,UAAU;IACnB,CAAC,EACDtF,MAAM,CAAC+D,KAAK,EACZ/D,MAAM,CAAC8F,MAAM,CACd;IACDC,OAAO,EAAE/F,MAAM,CAACyC,UAAU,CACxB,WAAUe,SAAS,EAAEgB,OAAO,EAAEwB,aAAa;MACzC,MAAMtD,QAAQ,GAAGgC,qBAAqB,CAAClB,SAAS,EAAEgB,OAAO,CAAC;MAC1D,MAAM;QAAEtB,MAAM;QAAEF;MAAK,CAAE,GAAG,OAAO7C,KAAK,CAACwE,GAAG,CAACrC,SAAS,EAAEI,QAAQ,CAAC;MAC/D,MAAMuD,YAAY,GAAG,OAAO/F,MAAM,CAACgG,SAAS,CAAChD,MAAM,CAAC;MACpD,MAAMiD,OAAO,GAAG,OAAOpF,GAAG;4BACRA,GAAG,CAACiC,KAAK,CAAC,sBAAsBgD,aAAa;WAC9D,CAAClE,IAAI,CACJ9B,MAAM,CAAC+B,OAAO,CAAC6D,aAAa,CAAC,CAC9B;MACD,OAAOvF,MAAM,CAAC+F,SAAS,CAACD,OAAO,CAAC,CAACrE,IAAI,CAACzB,MAAM,CAACgG,MAAM,CAAChG,MAAM,CAACiG,gBAAgB,CAACL,YAAY,CAAC,CAAC,CAAC;IAC7F,CAAC,EACDjG,MAAM,CAAC+D,KAAK,EACZ1D,MAAM,CAACkG,MAAM;GAEhB,CAAC;AACJ,CAAC,CAAC;AAEJ,MAAMC,uBAAuB,gBAAGpG,MAAM,CAACqG,MAAM,CAAC;EAC5CC,QAAQ,EAAEtG,MAAM,CAACuG,MAAM;EACvBzB,EAAE,EAAE9E,MAAM,CAACwG,UAAU;EACrBzB,QAAQ,EAAE5E,OAAO;EACjB6E,eAAe,EAAEhF,MAAM,CAACwG;CACzB,CAAC;AAIF,MAAMC,qBAAqB,gBAAGzG,MAAM,CAACqG,MAAM,CAAC;EAC1CK,UAAU,EAAE1G,MAAM,CAAC2G,MAAM;EACzBjD,kBAAkB,EAAE1D,MAAM,CAACwG;CAC5B,CAAC;AAIF,MAAMI,eAAe,gBAAG5G,MAAM,CAAC6G,mBAAmB,cAAC7G,MAAM,CAAC8G,KAAK,CAACV,uBAAuB,CAAC,CAAC;AACzF,MAAMW,4BAA4B,gBAAG/G,MAAM,CAAC6G,mBAAmB,cAAC7G,MAAM,CAAC8G,KAAK,CAACL,qBAAqB,CAAC,CAAC;AAEpG,MAAMO,sBAAsB,GAAIxD,GAA4B,KAA+C;EACzG8C,QAAQ,EAAE9C,GAAG,CAAC8C,QAAQ;EACtBxB,EAAE,EAAEtB,GAAG,CAACsB,EAA6B;EACrCD,OAAO,EAAErB,GAAG,CAACuB,QAAQ;EACrBE,cAAc,EAAEzB,GAAG,CAACwB;CACrB,CAAC;AAEF,MAAMQ,aAAa,GACjBjC,IAAa,IAEbqD,eAAe,CAACrD,IAAI,CAAC,CAAC7B,IAAI,CAAC9B,MAAM,CAAC0D,GAAG,CAAEe,OAAO,IAAKA,OAAO,CAACf,GAAG,CAAC0D,sBAAsB,CAAC,CAAC,CAAC;AAE1F,MAAM3D,yBAAyB,GAC7BE,IAAa,IAC+DwD,4BAA4B,CAACxD,IAAI,CAAC;AAEhH;;;;AAIA,OAAO,MAAM0D,YAAY,GAAIzG,OAI5B,IAIIX,KAAK,CAACqH,MAAM,CAAC5G,uBAAuB,CAACsD,OAAO,CAAC,CAACrD,WAAW,CAACC,OAAO,CAAC,CAAC;AAExE;;;;AAIA,OAAO,MAAM2G,kBAAkB,GAAI3G,OAIlC,IACCyG,YAAY,CAACzG,OAAO,CAAC,CAACkB,IAAI,CACxB7B,KAAK,CAACuH,OAAO,CAAC/G,kBAAkB,CAACgH,WAAW,CAAC,CAC9C;AAEH,MAAM/C,qBAAqB,GAAGA,CAC5BlB,SAAiB,EACjBgB,OAAe,KACJ,GAAGhB,SAAS,IAAIgB,OAAO,EAAE","ignoreList":[]}

package/dist/unstable/eventlog/SqlEventLogServerUnencrypted.d.ts

@@ -0,0 +1,25 @@
+import * as Effect from "../../Effect.ts";
+import * as Layer from "../../Layer.ts";
+import type * as Scope from "../../Scope.ts";
+import * as SqlClient from "../sql/SqlClient.ts";
+import * as SqlError from "../sql/SqlError.ts";
+import * as EventLogServerUnencrypted from "./EventLogServerUnencrypted.ts";
+/**
+ * @since 4.0.0
+ * @category constructors
+ */
+export declare const makeStorage: (options?: {
+    readonly entryTablePrefix?: string;
+    readonly remoteIdTable?: string;
+    readonly insertBatchSize?: number;
+}) => Effect.Effect<EventLogServerUnencrypted.Storage["Service"], SqlError.SqlError, SqlClient.SqlClient | Scope.Scope>;
+/**
+ * @since 4.0.0
+ * @category layers
+ */
+export declare const layerStorage: (options?: {
+    readonly entryTablePrefix?: string;
+    readonly remoteIdTable?: string;
+    readonly insertBatchSize?: number;
+}) => Layer.Layer<EventLogServerUnencrypted.Storage, SqlError.SqlError, SqlClient.SqlClient>;
+//# sourceMappingURL=SqlEventLogServerUnencrypted.d.ts.map

package/dist/unstable/eventlog/SqlEventLogServerUnencrypted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlEventLogServerUnencrypted.d.ts","sourceRoot":"","sources":["../../../src/unstable/eventlog/SqlEventLogServerUnencrypted.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAA;AAIvC,OAAO,KAAK,KAAK,KAAK,MAAM,gBAAgB,CAAA;AAE5C,OAAO,KAAK,SAAS,MAAM,qBAAqB,CAAA;AAChD,OAAO,KAAK,QAAQ,MAAM,oBAAoB,CAAA;AAE9C,OAAO,KAAK,yBAAyB,MAAM,gCAAgC,CAAA;AAE3E;;;GAGG;AACH,eAAO,MAAM,WAAW,GAAI,UAAU;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC,KAAG,MAAM,CAAC,MAAM,CACf,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,EAC5C,QAAQ,CAAC,QAAQ,EACjB,SAAS,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAwY/B,CAAA;AAEJ;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC,KAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,CAClB,CAAA"}

package/dist/unstable/eventlog/SqlEventLogServerUnencrypted.js

@@ -0,0 +1,354 @@
+/**
+ * @since 4.0.0
+ */
+import * as Arr from "../../Array.js";
+import * as Effect from "../../Effect.js";
+import * as Layer from "../../Layer.js";
+import * as PubSub from "../../PubSub.js";
+import * as RcMap from "../../RcMap.js";
+import * as Schema from "../../Schema.js";
+import * as Stream from "../../Stream.js";
+import * as SqlClient from "../sql/SqlClient.js";
+import * as SqlError from "../sql/SqlError.js";
+import { Entry, EntryId, makeRemoteIdUnsafe, RemoteEntry } from "./EventJournal.js";
+import * as EventLogServerUnencrypted from "./EventLogServerUnencrypted.js";
+/**
+ * @since 4.0.0
+ * @category constructors
+ */
+export const makeStorage = options => Effect.gen(function* () {
+  const sql = (yield* SqlClient.SqlClient).withoutTransforms();
+  const entriesTable = options?.entryTablePrefix ?? "effect_events";
+  const remoteIdTable = options?.remoteIdTable ?? "effect_remote_id";
+  const insertBatchSize = options?.insertBatchSize ?? 200;
+  const storesTable = `${entriesTable}_stores`;
+  const sessionAuthBindingsTable = `${entriesTable}_session_auth_bindings`;
+  const remoteIdTableSql = sql(remoteIdTable);
+  const entriesTableSql = sql(entriesTable);
+  const storesTableSql = sql(storesTable);
+  const sessionAuthBindingsTableSql = sql(sessionAuthBindingsTable);
+  yield* sql.onDialectOrElse({
+    pg: () => sql`
+          CREATE TABLE IF NOT EXISTS ${remoteIdTableSql} (
+            singleton INT PRIMARY KEY,
+            remote_id BYTEA NOT NULL
+          )`,
+    mysql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${remoteIdTableSql} (
+            singleton INT PRIMARY KEY,
+            remote_id BINARY(16) NOT NULL
+          )`,
+    mssql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${remoteIdTableSql} (
+            singleton INT PRIMARY KEY,
+            remote_id VARBINARY(16) NOT NULL
+          )`,
+    orElse: () => sql`
+          CREATE TABLE IF NOT EXISTS ${remoteIdTableSql} (
+            singleton INTEGER PRIMARY KEY,
+            remote_id BLOB NOT NULL
+          )`
+  });
+  yield* sql.onDialectOrElse({
+    pg: () => sql`
+          CREATE TABLE IF NOT EXISTS ${entriesTableSql} (
+            store_id TEXT NOT NULL,
+            sequence BIGINT NOT NULL,
+            entry_id BYTEA NOT NULL,
+            event TEXT NOT NULL,
+            primary_key TEXT NOT NULL,
+            payload BYTEA NOT NULL,
+            PRIMARY KEY (store_id, sequence),
+            UNIQUE (store_id, entry_id)
+          )`,
+    mysql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${entriesTableSql} (
+            store_id VARCHAR(191) NOT NULL,
+            sequence BIGINT NOT NULL,
+            entry_id BINARY(16) NOT NULL,
+            event TEXT NOT NULL,
+            primary_key TEXT NOT NULL,
+            payload BLOB NOT NULL,
+            PRIMARY KEY (store_id, sequence),
+            UNIQUE (store_id, entry_id)
+          )`,
+    mssql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${entriesTableSql} (
+            store_id NVARCHAR(191) NOT NULL,
+            sequence BIGINT NOT NULL,
+            entry_id VARBINARY(16) NOT NULL,
+            event NVARCHAR(MAX) NOT NULL,
+            primary_key NVARCHAR(MAX) NOT NULL,
+            payload VARBINARY(MAX) NOT NULL,
+            PRIMARY KEY (store_id, sequence),
+            UNIQUE (store_id, entry_id)
+          )`,
+    orElse: () => sql`
+          CREATE TABLE IF NOT EXISTS ${entriesTableSql} (
+            store_id TEXT NOT NULL,
+            sequence INTEGER NOT NULL,
+            entry_id BLOB NOT NULL,
+            event TEXT NOT NULL,
+            primary_key TEXT NOT NULL,
+            payload BLOB NOT NULL,
+            PRIMARY KEY (store_id, sequence),
+            UNIQUE (store_id, entry_id)
+          )`
+  });
+  yield* sql.onDialectOrElse({
+    pg: () => sql`
+          CREATE TABLE IF NOT EXISTS ${storesTableSql} (
+            store_id TEXT PRIMARY KEY,
+            next_sequence BIGINT NOT NULL
+          )`,
+    mysql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${storesTableSql} (
+            store_id VARCHAR(191) PRIMARY KEY,
+            next_sequence BIGINT NOT NULL
+          )`,
+    mssql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${storesTableSql} (
+            store_id NVARCHAR(191) PRIMARY KEY,
+            next_sequence BIGINT NOT NULL
+          )`,
+    orElse: () => sql`
+          CREATE TABLE IF NOT EXISTS ${storesTableSql} (
+            store_id TEXT PRIMARY KEY,
+            next_sequence INTEGER NOT NULL
+          )`
+  });
+  yield* sql.onDialectOrElse({
+    pg: () => sql`
+          CREATE TABLE IF NOT EXISTS ${sessionAuthBindingsTableSql} (
+            public_key TEXT PRIMARY KEY,
+            signing_public_key BYTEA NOT NULL
+          )`,
+    mysql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${sessionAuthBindingsTableSql} (
+            public_key VARCHAR(191) PRIMARY KEY,
+            signing_public_key BINARY(32) NOT NULL
+          )`,
+    mssql: () => sql`
+          CREATE TABLE IF NOT EXISTS ${sessionAuthBindingsTableSql} (
+            public_key NVARCHAR(191) PRIMARY KEY,
+            signing_public_key VARBINARY(32) NOT NULL
+          )`,
+    orElse: () => sql`
+          CREATE TABLE IF NOT EXISTS ${sessionAuthBindingsTableSql} (
+            public_key TEXT PRIMARY KEY,
+            signing_public_key BLOB NOT NULL
+          )`
+  });
+  const selectRemoteId = sql`
+      SELECT remote_id
+      FROM ${remoteIdTableSql}
+      WHERE singleton = 1
+    `;
+  const remoteId = yield* selectRemoteId.pipe(Effect.flatMap(rows => {
+    const existing = rows[0];
+    if (existing !== undefined) {
+      return Effect.succeed(existing.remote_id);
+    }
+    const created = makeRemoteIdUnsafe();
+    return sql`
+          INSERT INTO ${remoteIdTableSql} (singleton, remote_id)
+          VALUES (1, ${created})
+        `.pipe(Effect.catchIf(error => error.reason._tag === "ConstraintError", () => Effect.void), Effect.andThen(selectRemoteId), Effect.map(rows => rows[0]?.remote_id), Effect.map(persisted => persisted ?? created));
+  }));
+  const pubsubs = yield* RcMap.make({
+    lookup: _storeId => Effect.acquireRelease(PubSub.unbounded(), PubSub.shutdown),
+    idleTimeToLive: "5 minutes"
+  });
+  const ensureStore = storeId => sql.onDialectOrElse({
+    pg: () => sql`
+            INSERT INTO ${storesTableSql} (store_id, next_sequence)
+            VALUES (${storeId}, 1)
+            ON CONFLICT (store_id) DO NOTHING
+          `,
+    mysql: () => sql`
+            INSERT INTO ${storesTableSql} (store_id, next_sequence)
+            VALUES (${storeId}, 1)
+            ON DUPLICATE KEY UPDATE store_id = store_id
+          `,
+    mssql: () => sql`
+            MERGE ${storesTableSql} WITH (HOLDLOCK) AS target
+            USING (SELECT ${storeId} AS store_id, 1 AS next_sequence) AS source
+              ON target.store_id = source.store_id
+            WHEN NOT MATCHED THEN
+              INSERT (store_id, next_sequence)
+              VALUES (source.store_id, source.next_sequence);
+          `,
+    orElse: () => sql`
+            INSERT INTO ${storesTableSql} (store_id, next_sequence)
+            VALUES (${storeId}, 1)
+            ON CONFLICT DO NOTHING
+          `
+  });
+  const lockStore = storeId => sql.onDialectOrElse({
+    pg: () => sql`
+            SELECT next_sequence
+            FROM ${storesTableSql}
+            WHERE store_id = ${storeId}
+            FOR UPDATE
+          `,
+    mysql: () => sql`
+            SELECT next_sequence
+            FROM ${storesTableSql}
+            WHERE store_id = ${storeId}
+            FOR UPDATE
+          `,
+    mssql: () => sql`
+            SELECT next_sequence
+            FROM ${storesTableSql} WITH (UPDLOCK, HOLDLOCK)
+            WHERE store_id = ${storeId}
+          `,
+    orElse: () => sql`
+            UPDATE ${storesTableSql}
+            SET next_sequence = next_sequence
+            WHERE store_id = ${storeId}
+            RETURNING next_sequence
+          `
+  }).pipe(Effect.flatMap(decodeStoreSequence));
+  const setNextSequence = (storeId, nextSequence) => sql`
+        UPDATE ${storesTableSql}
+        SET next_sequence = ${nextSequence}
+        WHERE store_id = ${storeId}
+      `;
+  const selectEntriesAfter = (storeId, startSequence) => sql`
+        SELECT sequence, entry_id, event, primary_key, payload
+        FROM ${entriesTableSql}
+        WHERE store_id = ${storeId} AND sequence >= ${startSequence}
+        ORDER BY sequence ASC
+      `.pipe(Effect.flatMap(decodeRemoteEntries));
+  const getSessionAuthBinding = publicKey => sql`
+        SELECT public_key, signing_public_key
+        FROM ${sessionAuthBindingsTableSql}
+        WHERE public_key = ${publicKey}
+      `.pipe(Effect.flatMap(decodeSessionAuthBindings), Effect.map(rows => {
+    const row = rows[0];
+    return row === undefined ? undefined : row.signing_public_key;
+  }), Effect.orDie);
+  return EventLogServerUnencrypted.Storage.of({
+    getId: Effect.succeed(remoteId),
+    getOrCreateSessionAuthBinding: Effect.fnUntraced(function* (publicKey, signingPublicKey) {
+      const existing = yield* getSessionAuthBinding(publicKey);
+      if (existing !== undefined) {
+        return existing;
+      }
+      return yield* sql`
+            INSERT INTO ${sessionAuthBindingsTableSql} (public_key, signing_public_key)
+            VALUES (${publicKey}, ${signingPublicKey})
+          `.pipe(Effect.as(signingPublicKey));
+    }, sql.withTransaction, Effect.orDie),
+    entriesAfter: (storeId, entry) => sql`
+          SELECT sequence, entry_id, event, primary_key, payload
+          FROM ${entriesTableSql}
+          WHERE store_id = ${storeId} AND entry_id >= ${entry.id}
+          ORDER BY sequence ASC
+        `.pipe(Effect.flatMap(decodeRemoteEntries), Effect.map(Arr.map(r => r.entry)), Effect.orDie),
+    write: Effect.fnUntraced(function* (storeId, entries) {
+      if (entries.length === 0) {
+        return [];
+      }
+      yield* ensureStore(storeId);
+      const currentNextSequence = yield* lockStore(storeId);
+      const committed = [];
+      let rowsForInsert = [];
+      for (let index = 0; index < entries.length; index++) {
+        const entry = entries[index];
+        const remoteSequence = currentNextSequence + index;
+        committed.push(new RemoteEntry({
+          remoteSequence,
+          entry
+        }, {
+          disableChecks: true
+        }));
+        rowsForInsert.push({
+          store_id: storeId,
+          sequence: remoteSequence,
+          entry_id: entry.id,
+          event: entry.event,
+          primary_key: entry.primaryKey,
+          payload: entry.payload
+        });
+        if (rowsForInsert.length >= insertBatchSize) {
+          yield* sql`INSERT INTO ${entriesTableSql} ${sql.insert(rowsForInsert)}`;
+          rowsForInsert = [];
+        }
+      }
+      if (rowsForInsert.length > 0) {
+        yield* sql`INSERT INTO ${entriesTableSql} ${sql.insert(rowsForInsert)}`;
+      }
+      const nextSequence = currentNextSequence + entries.length;
+      yield* setNextSequence(storeId, nextSequence);
+      const pubsub = yield* RcMap.get(pubsubs, storeId);
+      yield* PubSub.publishAll(pubsub, committed);
+      return committed;
+    }, Effect.scoped, sql.withTransaction, Effect.orDie),
+    changes: Effect.fnUntraced(function* ({
+      storeId,
+      startSequence,
+      compactors
+    }) {
+      const pubsub = yield* RcMap.get(pubsubs, storeId);
+      const subscription = yield* PubSub.subscribe(pubsub);
+      const backlog = yield* EventLogServerUnencrypted.compactBacklog({
+        compactors,
+        remoteEntries: yield* selectEntriesAfter(storeId, startSequence)
+      });
+      let watermark = backlog.length > 0 ? backlog[backlog.length - 1].remoteSequence : startSequence - 1;
+      return Stream.fromArray(backlog).pipe(Stream.concat(Stream.fromSubscription(subscription).pipe(Stream.filter(entry => entry.remoteSequence > watermark))));
+    }, Effect.orDie, Stream.unwrap),
+    withTransaction: effect => sql.withTransaction(effect).pipe(Effect.catchIf(SqlError.isSqlError, Effect.die))
+  });
+});
+/**
+ * @since 4.0.0
+ * @category layers
+ */
+export const layerStorage = options => Layer.effect(EventLogServerUnencrypted.Storage)(makeStorage(options));
+const EntrySql = /*#__PURE__*/Schema.Struct({
+  entry_id: EntryId,
+  event: Schema.String,
+  primary_key: Schema.String,
+  payload: Schema.Uint8Array
+});
+const SqlNumber = /*#__PURE__*/Schema.Union([Schema.Number, Schema.NumberFromString]);
+const RemoteEntrySql = /*#__PURE__*/Schema.Struct({
+  ...EntrySql.fields,
+  sequence: SqlNumber
+});
+const StoreSequenceSql = /*#__PURE__*/Schema.Struct({
+  next_sequence: SqlNumber
+});
+const SessionAuthBindingSql = /*#__PURE__*/Schema.Struct({
+  public_key: Schema.String,
+  signing_public_key: Schema.Uint8Array
+});
+const decodeRemoteEntryRows = /*#__PURE__*/Schema.decodeUnknownEffect(/*#__PURE__*/Schema.mutable(/*#__PURE__*/Schema.Array(RemoteEntrySql)));
+const decodeStoreSequenceRows = /*#__PURE__*/Schema.decodeUnknownEffect(/*#__PURE__*/Schema.Array(StoreSequenceSql));
+const decodeSessionAuthBindingRows = /*#__PURE__*/Schema.decodeUnknownEffect(/*#__PURE__*/Schema.Array(SessionAuthBindingSql));
+const toEntry = row => new Entry({
+  id: row.entry_id,
+  event: row.event,
+  primaryKey: row.primary_key,
+  payload: row.payload
+}, {
+  disableChecks: true
+});
+const toRemoteEntry = row => new RemoteEntry({
+  remoteSequence: row.sequence,
+  entry: toEntry(row)
+}, {
+  disableChecks: true
+});
+const decodeRemoteEntries = rows => decodeRemoteEntryRows(rows).pipe(Effect.map(rows => rows.map(toRemoteEntry)));
+const decodeStoreSequence = rows => decodeStoreSequenceRows(rows).pipe(Effect.flatMap(rows => {
+  const row = rows[0];
+  if (row === undefined) {
+    return Effect.die("SqlEventLogServerUnencrypted missing store sequence row");
+  }
+  return Effect.succeed(row.next_sequence);
+}));
+const decodeSessionAuthBindings = rows => decodeSessionAuthBindingRows(rows);
+//# sourceMappingURL=SqlEventLogServerUnencrypted.js.map

package/dist/unstable/eventlog/SqlEventLogServerUnencrypted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlEventLogServerUnencrypted.js","names":["Arr","Effect","Layer","PubSub","RcMap","Schema","Stream","SqlClient","SqlError","Entry","EntryId","makeRemoteIdUnsafe","RemoteEntry","EventLogServerUnencrypted","makeStorage","options","gen","sql","withoutTransforms","entriesTable","entryTablePrefix","remoteIdTable","insertBatchSize","storesTable","sessionAuthBindingsTable","remoteIdTableSql","entriesTableSql","storesTableSql","sessionAuthBindingsTableSql","onDialectOrElse","pg","mysql","mssql","orElse","selectRemoteId","remoteId","pipe","flatMap","rows","existing","undefined","succeed","remote_id","created","catchIf","error","reason","_tag","void","andThen","map","persisted","pubsubs","make","lookup","_storeId","acquireRelease","unbounded","shutdown","idleTimeToLive","ensureStore","storeId","lockStore","decodeStoreSequence","setNextSequence","nextSequence","selectEntriesAfter","startSequence","decodeRemoteEntries","getSessionAuthBinding","publicKey","decodeSessionAuthBindings","row","signing_public_key","orDie","Storage","of","getId","getOrCreateSessionAuthBinding","fnUntraced","signingPublicKey","as","withTransaction","entriesAfter","entry","id","r","write","entries","length","currentNextSequence","committed","rowsForInsert","index","remoteSequence","push","disableChecks","store_id","sequence","entry_id","event","primary_key","primaryKey","payload","insert","pubsub","get","publishAll","scoped","changes","compactors","subscription","subscribe","backlog","compactBacklog","remoteEntries","watermark","fromArray","concat","fromSubscription","filter","unwrap","effect","isSqlError","die","layerStorage","EntrySql","Struct","String","Uint8Array","SqlNumber","Union","Number","NumberFromString","RemoteEntrySql","fields","StoreSequenceSql","next_sequence","SessionAuthBindingSql","public_key","decodeRemoteEntryRows","decodeUnknownEffect","mutable","Array","decodeStoreSequenceRows","decodeSessionAuthBindingRows","toEntry","toRemoteEntry"],"sources":["../../../src/unstable/eventlog/SqlEventLogServerUnencrypted.ts"],"sourcesContent":[null],"mappings":"AAAA;;;AAGA,OAAO,KAAKA,GAAG,MAAM,gBAAgB;AACrC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAKC,KAAK,MAAM,gBAAgB;AACvC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAKC,KAAK,MAAM,gBAAgB;AACvC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AAEzC,OAAO,KAAKC,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAKC,SAAS,MAAM,qBAAqB;AAChD,OAAO,KAAKC,QAAQ,MAAM,oBAAoB;AAC9C,SAASC,KAAK,EAAEC,OAAO,EAAEC,kBAAkB,EAAEC,WAAW,QAAuB,mBAAmB;AAClG,OAAO,KAAKC,yBAAyB,MAAM,gCAAgC;AAE3E;;;;AAIA,OAAO,MAAMC,WAAW,GAAIC,OAI3B,IAKCd,MAAM,CAACe,GAAG,CAAC,aAAS;EAClB,MAAMC,GAAG,GAAG,CAAC,OAAOV,SAAS,CAACA,SAAS,EAAEW,iBAAiB,EAAE;EAE5D,MAAMC,YAAY,GAAGJ,OAAO,EAAEK,gBAAgB,IAAI,eAAe;EACjE,MAAMC,aAAa,GAAGN,OAAO,EAAEM,aAAa,IAAI,kBAAkB;EAClE,MAAMC,eAAe,GAAGP,OAAO,EAAEO,eAAe,IAAI,GAAG;EACvD,MAAMC,WAAW,GAAG,GAAGJ,YAAY,SAAS;EAC5C,MAAMK,wBAAwB,GAAG,GAAGL,YAAY,wBAAwB;EAExE,MAAMM,gBAAgB,GAAGR,GAAG,CAACI,aAAa,CAAC;EAC3C,MAAMK,eAAe,GAAGT,GAAG,CAACE,YAAY,CAAC;EACzC,MAAMQ,cAAc,GAAGV,GAAG,CAACM,WAAW,CAAC;EACvC,MAAMK,2BAA2B,GAAGX,GAAG,CAACO,wBAAwB,CAAC;EAEjE,OAAOP,GAAG,CAACY,eAAe,CAAC;IACzBC,EAAE,EAAEA,CAAA,KACFb,GAAG;uCAC4BQ,gBAAgB;;;YAG3C;IACNM,KAAK,EAAEA,CAAA,KACLd,GAAG;uCAC4BQ,gBAAgB;;;YAG3C;IACNO,KAAK,EAAEA,CAAA,KACLf,GAAG;uCAC4BQ,gBAAgB;;;YAG3C;IACNQ,MAAM,EAAEA,CAAA,KACNhB,GAAG;uCAC4BQ,gBAAgB;;;;GAIlD,CAAC;EAEF,OAAOR,GAAG,CAACY,eAAe,CAAC;IACzBC,EAAE,EAAEA,CAAA,KACFb,GAAG;uCAC4BS,eAAe;;;;;;;;;YAS1C;IACNK,KAAK,EAAEA,CAAA,KACLd,GAAG;uCAC4BS,eAAe;;;;;;;;;YAS1C;IACNM,KAAK,EAAEA,CAAA,KACLf,GAAG;uCAC4BS,eAAe;;;;;;;;;YAS1C;IACNO,MAAM,EAAEA,CAAA,KACNhB,GAAG;uCAC4BS,eAAe;;;;;;;;;;GAUjD,CAAC;EAEF,OAAOT,GAAG,CAACY,eAAe,CAAC;IACzBC,EAAE,EAAEA,CAAA,KACFb,GAAG;uCAC4BU,cAAc;;;YAGzC;IACNI,KAAK,EAAEA,CAAA,KACLd,GAAG;uCAC4BU,cAAc;;;YAGzC;IACNK,KAAK,EAAEA,CAAA,KACLf,GAAG;uCAC4BU,cAAc;;;YAGzC;IACNM,MAAM,EAAEA,CAAA,KACNhB,GAAG;uCAC4BU,cAAc;;;;GAIhD,CAAC;EAEF,OAAOV,GAAG,CAACY,eAAe,CAAC;IACzBC,EAAE,EAAEA,CAAA,KACFb,GAAG;uCAC4BW,2BAA2B;;;YAGtD;IACNG,KAAK,EAAEA,CAAA,KACLd,GAAG;uCAC4BW,2BAA2B;;;YAGtD;IACNI,KAAK,EAAEA,CAAA,KACLf,GAAG;uCAC4BW,2BAA2B;;;YAGtD;IACNK,MAAM,EAAEA,CAAA,KACNhB,GAAG;uCAC4BW,2BAA2B;;;;GAI7D,CAAC;EAEF,MAAMM,cAAc,GAAGjB,GAA8B;;aAE5CQ,gBAAgB;;KAExB;EAED,MAAMU,QAAQ,GAAG,OAAOD,cAAc,CAACE,IAAI,CACzCnC,MAAM,CAACoC,OAAO,CAAEC,IAAI,IAAI;IACtB,MAAMC,QAAQ,GAAGD,IAAI,CAAC,CAAC,CAAC;IACxB,IAAIC,QAAQ,KAAKC,SAAS,EAAE;MAC1B,OAAOvC,MAAM,CAACwC,OAAO,CAACF,QAAQ,CAACG,SAAqB,CAAC;IACvD;IAEA,MAAMC,OAAO,GAAGhC,kBAAkB,EAAE;IACpC,OAAOM,GAAG;wBACMQ,gBAAgB;uBACjBkB,OAAO;SACrB,CAACP,IAAI,CACJnC,MAAM,CAAC2C,OAAO,CACXC,KAAwB,IAAKA,KAAK,CAACC,MAAM,CAACC,IAAI,KAAK,iBAAiB,EACrE,MAAM9C,MAAM,CAAC+C,IAAI,CAClB,EACD/C,MAAM,CAACgD,OAAO,CAACf,cAAc,CAAC,EAC9BjC,MAAM,CAACiD,GAAG,CAAEZ,IAAI,IAAKA,IAAI,CAAC,CAAC,CAAC,EAAEI,SAAiC,CAAC,EAChEzC,MAAM,CAACiD,GAAG,CAAEC,SAAS,IAAKA,SAAS,IAAIR,OAAO,CAAC,CAChD;EACH,CAAC,CAAC,CACH;EAED,MAAMS,OAAO,GAAG,OAAOhD,KAAK,CAACiD,IAAI,CAAC;IAChCC,MAAM,EAAGC,QAAgB,IACvBtD,MAAM,CAACuD,cAAc,CACnBrD,MAAM,CAACsD,SAAS,EAAe,EAC/BtD,MAAM,CAACuD,QAAQ,CAChB;IACHC,cAAc,EAAE;GACjB,CAAC;EAEF,MAAMC,WAAW,GAAIC,OAAe,IAClC5C,GAAG,CAACY,eAAe,CAAC;IAClBC,EAAE,EAAEA,CAAA,KACFb,GAAG;0BACaU,cAAc;sBAClBkC,OAAO;;WAElB;IACH9B,KAAK,EAAEA,CAAA,KACLd,GAAG;0BACaU,cAAc;sBAClBkC,OAAO;;WAElB;IACH7B,KAAK,EAAEA,CAAA,KACLf,GAAG;oBACOU,cAAc;4BACNkC,OAAO;;;;;WAKxB;IACH5B,MAAM,EAAEA,CAAA,KACNhB,GAAG;0BACaU,cAAc;sBAClBkC,OAAO;;;GAGtB,CAAC;EAEJ,MAAMC,SAAS,GAAID,OAAe,IAChC5C,GAAG,CAACY,eAAe,CAAC;IAClBC,EAAE,EAAEA,CAAA,KACFb,GAAG;;mBAEMU,cAAc;+BACFkC,OAAO;;WAE3B;IACH9B,KAAK,EAAEA,CAAA,KACLd,GAAG;;mBAEMU,cAAc;+BACFkC,OAAO;;WAE3B;IACH7B,KAAK,EAAEA,CAAA,KACLf,GAAG;;mBAEMU,cAAc;+BACFkC,OAAO;WAC3B;IACH5B,MAAM,EAAEA,CAAA,KACNhB,GAAG;qBACQU,cAAc;;+BAEJkC,OAAO;;;GAG/B,CAAC,CAACzB,IAAI,CACLnC,MAAM,CAACoC,OAAO,CAAC0B,mBAAmB,CAAC,CACpC;EAEH,MAAMC,eAAe,GAAGA,CAACH,OAAe,EAAEI,YAAoB,KAC5DhD,GAAG;iBACQU,cAAc;8BACDsC,YAAY;2BACfJ,OAAO;OAC3B;EAEH,MAAMK,kBAAkB,GAAGA,CAACL,OAAe,EAAEM,aAAqB,KAChElD,GAAG;;eAEMS,eAAe;2BACHmC,OAAO,oBAAoBM,aAAa;;OAE5D,CAAC/B,IAAI,CACJnC,MAAM,CAACoC,OAAO,CAAC+B,mBAAmB,CAAC,CACpC;EAEH,MAAMC,qBAAqB,GAAIC,SAAiB,IAC9CrD,GAAG;;eAEMW,2BAA2B;6BACb0C,SAAS;OAC/B,CAAClC,IAAI,CACJnC,MAAM,CAACoC,OAAO,CAACkC,yBAAyB,CAAC,EACzCtE,MAAM,CAACiD,GAAG,CAAEZ,IAAI,IAAI;IAClB,MAAMkC,GAAG,GAAGlC,IAAI,CAAC,CAAC,CAAC;IACnB,OAAOkC,GAAG,KAAKhC,SAAS,GAAGA,SAAS,GAAGgC,GAAG,CAACC,kBAA6C;EAC1F,CAAC,CAAC,EACFxE,MAAM,CAACyE,KAAK,CACb;EAEH,OAAO7D,yBAAyB,CAAC8D,OAAO,CAACC,EAAE,CAAC;IAC1CC,KAAK,EAAE5E,MAAM,CAACwC,OAAO,CAACN,QAAQ,CAAC;IAC/B2C,6BAA6B,EAAE7E,MAAM,CAAC8E,UAAU,CAC9C,WAAUT,SAAS,EAAEU,gBAAgB;MACnC,MAAMzC,QAAQ,GAAG,OAAO8B,qBAAqB,CAACC,SAAS,CAAC;MACxD,IAAI/B,QAAQ,KAAKC,SAAS,EAAE;QAC1B,OAAOD,QAAQ;MACjB;MACA,OAAO,OAAOtB,GAAG;0BACDW,2BAA2B;sBAC/B0C,SAAS,KAAKU,gBAAgB;WACzC,CAAC5C,IAAI,CACJnC,MAAM,CAACgF,EAAE,CAACD,gBAAgB,CAAC,CAC5B;IACH,CAAC,EACD/D,GAAG,CAACiE,eAAe,EACnBjF,MAAM,CAACyE,KAAK,CACb;IACDS,YAAY,EAAEA,CAACtB,OAAO,EAAEuB,KAAK,KAC3BnE,GAAG;;iBAEMS,eAAe;6BACHmC,OAAO,oBAAoBuB,KAAK,CAACC,EAAE;;SAEvD,CAACjD,IAAI,CACJnC,MAAM,CAACoC,OAAO,CAAC+B,mBAAmB,CAAC,EACnCnE,MAAM,CAACiD,GAAG,CAAClD,GAAG,CAACkD,GAAG,CAAEoC,CAAC,IAAKA,CAAC,CAACF,KAAK,CAAC,CAAC,EACnCnF,MAAM,CAACyE,KAAK,CACb;IACHa,KAAK,EAAEtF,MAAM,CAAC8E,UAAU,CACtB,WAAUlB,OAAO,EAAE2B,OAAO;MACxB,IAAIA,OAAO,CAACC,MAAM,KAAK,CAAC,EAAE;QACxB,OAAO,EAAE;MACX;MAEA,OAAO7B,WAAW,CAACC,OAAO,CAAC;MAC3B,MAAM6B,mBAAmB,GAAG,OAAO5B,SAAS,CAACD,OAAO,CAAC;MAErD,MAAM8B,SAAS,GAAuB,EAAE;MACxC,IAAIC,aAAa,GAOZ,EAAE;MAEP,KAAK,IAAIC,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGL,OAAO,CAACC,MAAM,EAAEI,KAAK,EAAE,EAAE;QACnD,MAAMT,KAAK,GAAGI,OAAO,CAACK,KAAK,CAAC;QAC5B,MAAMC,cAAc,GAAGJ,mBAAmB,GAAGG,KAAK;QAClDF,SAAS,CAACI,IAAI,CACZ,IAAInF,WAAW,CAAC;UACdkF,cAAc;UACdV;SACD,EAAE;UAAEY,aAAa,EAAE;QAAI,CAAE,CAAC,CAC5B;QACDJ,aAAa,CAACG,IAAI,CAAC;UACjBE,QAAQ,EAAEpC,OAAO;UACjBqC,QAAQ,EAAEJ,cAAc;UACxBK,QAAQ,EAAEf,KAAK,CAACC,EAAE;UAClBe,KAAK,EAAEhB,KAAK,CAACgB,KAAK;UAClBC,WAAW,EAAEjB,KAAK,CAACkB,UAAU;UAC7BC,OAAO,EAAEnB,KAAK,CAACmB;SAChB,CAAC;QACF,IAAIX,aAAa,CAACH,MAAM,IAAInE,eAAe,EAAE;UAC3C,OAAOL,GAAG,eAAeS,eAAe,IAAIT,GAAG,CAACuF,MAAM,CAACZ,aAAa,CAAC,EAAE;UACvEA,aAAa,GAAG,EAAE;QACpB;MACF;MACA,IAAIA,aAAa,CAACH,MAAM,GAAG,CAAC,EAAE;QAC5B,OAAOxE,GAAG,eAAeS,eAAe,IAAIT,GAAG,CAACuF,MAAM,CAACZ,aAAa,CAAC,EAAE;MACzE;MACA,MAAM3B,YAAY,GAAGyB,mBAAmB,GAAGF,OAAO,CAACC,MAAM;MACzD,OAAOzB,eAAe,CAACH,OAAO,EAAEI,YAAY,CAAC;MAE7C,MAAMwC,MAAM,GAAG,OAAOrG,KAAK,CAACsG,GAAG,CAACtD,OAAO,EAAES,OAAO,CAAC;MACjD,OAAO1D,MAAM,CAACwG,UAAU,CAACF,MAAM,EAAEd,SAAS,CAAC;MAE3C,OAAOA,SAAS;IAClB,CAAC,EACD1F,MAAM,CAAC2G,MAAM,EACb3F,GAAG,CAACiE,eAAe,EACnBjF,MAAM,CAACyE,KAAK,CACb;IACDmC,OAAO,EAAE5G,MAAM,CAAC8E,UAAU,CACxB,WAAU;MAAElB,OAAO;MAAEM,aAAa;MAAE2C;IAAU,CAAE;MAC9C,MAAML,MAAM,GAAG,OAAOrG,KAAK,CAACsG,GAAG,CAACtD,OAAO,EAAES,OAAO,CAAC;MACjD,MAAMkD,YAAY,GAAG,OAAO5G,MAAM,CAAC6G,SAAS,CAACP,MAAM,CAAC;MACpD,MAAMQ,OAAO,GAAG,OAAOpG,yBAAyB,CAACqG,cAAc,CAAC;QAC9DJ,UAAU;QACVK,aAAa,EAAE,OAAOjD,kBAAkB,CAACL,OAAO,EAAEM,aAAa;OAChE,CAAC;MACF,IAAIiD,SAAS,GAAGH,OAAO,CAACxB,MAAM,GAAG,CAAC,GAAGwB,OAAO,CAACA,OAAO,CAACxB,MAAM,GAAG,CAAC,CAAE,CAACK,cAAc,GAAG3B,aAAa,GAAG,CAAC;MAEpG,OAAO7D,MAAM,CAAC+G,SAAS,CAACJ,OAAO,CAAC,CAAC7E,IAAI,CACnC9B,MAAM,CAACgH,MAAM,CACXhH,MAAM,CAACiH,gBAAgB,CAACR,YAAY,CAAC,CAAC3E,IAAI,CACxC9B,MAAM,CAACkH,MAAM,CAAEpC,KAAK,IAAKA,KAAK,CAACU,cAAc,GAAGsB,SAAS,CAAC,CAC3D,CACF,CACF;IACH,CAAC,EACDnH,MAAM,CAACyE,KAAK,EACZpE,MAAM,CAACmH,MAAM,CACd;IACDvC,eAAe,EAAGwC,MAAM,IACtBzG,GAAG,CAACiE,eAAe,CAACwC,MAAM,CAAC,CAACtF,IAAI,CAC9BnC,MAAM,CAAC2C,OAAO,CAACpC,QAAQ,CAACmH,UAAU,EAAE1H,MAAM,CAAC2H,GAAG,CAAC;GAEpD,CAAC;AACJ,CAAC,CAAC;AAEJ;;;;AAIA,OAAO,MAAMC,YAAY,GAAI9G,OAI5B,IACCb,KAAK,CAACwH,MAAM,CAAC7G,yBAAyB,CAAC8D,OAAO,CAAC,CAAC7D,WAAW,CAACC,OAAO,CAAC,CAAC;AAEvE,MAAM+G,QAAQ,gBAAGzH,MAAM,CAAC0H,MAAM,CAAC;EAC7B5B,QAAQ,EAAEzF,OAAO;EACjB0F,KAAK,EAAE/F,MAAM,CAAC2H,MAAM;EACpB3B,WAAW,EAAEhG,MAAM,CAAC2H,MAAM;EAC1BzB,OAAO,EAAElG,MAAM,CAAC4H;CACjB,CAAC;AAIF,MAAMC,SAAS,gBAAG7H,MAAM,CAAC8H,KAAK,CAAC,CAAC9H,MAAM,CAAC+H,MAAM,EAAE/H,MAAM,CAACgI,gBAAgB,CAAC,CAAC;AAExE,MAAMC,cAAc,gBAAGjI,MAAM,CAAC0H,MAAM,CAAC;EACnC,GAAGD,QAAQ,CAACS,MAAM;EAClBrC,QAAQ,EAAEgC;CACX,CAAC;AAIF,MAAMM,gBAAgB,gBAAGnI,MAAM,CAAC0H,MAAM,CAAC;EACrCU,aAAa,EAAEP;CAChB,CAAC;AAEF,MAAMQ,qBAAqB,gBAAGrI,MAAM,CAAC0H,MAAM,CAAC;EAC1CY,UAAU,EAAEtI,MAAM,CAAC2H,MAAM;EACzBvD,kBAAkB,EAAEpE,MAAM,CAAC4H;CAC5B,CAAC;AAIF,MAAMW,qBAAqB,gBAAGvI,MAAM,CAACwI,mBAAmB,cAACxI,MAAM,CAACyI,OAAO,cAACzI,MAAM,CAAC0I,KAAK,CAACT,cAAc,CAAC,CAAC,CAAC;AACtG,MAAMU,uBAAuB,gBAAG3I,MAAM,CAACwI,mBAAmB,cAACxI,MAAM,CAAC0I,KAAK,CAACP,gBAAgB,CAAC,CAAC;AAC1F,MAAMS,4BAA4B,gBAAG5I,MAAM,CAACwI,mBAAmB,cAACxI,MAAM,CAAC0I,KAAK,CAACL,qBAAqB,CAAC,CAAC;AAEpG,MAAMQ,OAAO,GAAI1E,GAAa,IAC5B,IAAI/D,KAAK,CAAC;EACR4E,EAAE,EAAEb,GAAG,CAAC2B,QAAQ;EAChBC,KAAK,EAAE5B,GAAG,CAAC4B,KAAK;EAChBE,UAAU,EAAE9B,GAAG,CAAC6B,WAAW;EAC3BE,OAAO,EAAE/B,GAAG,CAAC+B;CACd,EAAE;EAAEP,aAAa,EAAE;AAAI,CAAE,CAAC;AAE7B,MAAMmD,aAAa,GAAI3E,GAAmB,IACxC,IAAI5D,WAAW,CAAC;EACdkF,cAAc,EAAEtB,GAAG,CAAC0B,QAAQ;EAC5Bd,KAAK,EAAE8D,OAAO,CAAC1E,GAAG;CACnB,EAAE;EAAEwB,aAAa,EAAE;AAAI,CAAE,CAAC;AAE7B,MAAM5B,mBAAmB,GACvB9B,IAAa,IAEbsG,qBAAqB,CAACtG,IAAI,CAAC,CAACF,IAAI,CAC9BnC,MAAM,CAACiD,GAAG,CAAEZ,IAAI,IAAKA,IAAI,CAACY,GAAG,CAACiG,aAAa,CAAC,CAAC,CAC9C;AAEH,MAAMpF,mBAAmB,GAAIzB,IAAa,IACxC0G,uBAAuB,CAAC1G,IAAI,CAAC,CAACF,IAAI,CAChCnC,MAAM,CAACoC,OAAO,CAAEC,IAAI,IAAI;EACtB,MAAMkC,GAAG,GAAGlC,IAAI,CAAC,CAAC,CAAC;EACnB,IAAIkC,GAAG,KAAKhC,SAAS,EAAE;IACrB,OAAOvC,MAAM,CAAC2H,GAAG,CAAC,yDAAyD,CAAC;EAC9E;EACA,OAAO3H,MAAM,CAACwC,OAAO,CAAC+B,GAAG,CAACiE,aAAa,CAAC;AAC1C,CAAC,CAAC,CACH;AAEH,MAAMlE,yBAAyB,GAC7BjC,IAAa,IAC+D2G,4BAA4B,CAAC3G,IAAI,CAAC","ignoreList":[]}

package/dist/unstable/eventlog/index.d.ts

@@ -21,6 +21,10 @@ export * as EventLog from "./EventLog.ts";
  * @since 4.0.0
  */
 export * as EventLogEncryption from "./EventLogEncryption.ts";
+/**
+ * @since 4.0.0
+ */
+export * as EventLogMessage from "./EventLogMessage.ts";
 /**
  * @since 4.0.0
  */
@@ -32,9 +36,25 @@ export * as EventLogServer from "./EventLogServer.ts";
 /**
  * @since 4.0.0
  */
-export * as SqlEventLogJournal from "./SqlEventLogJournal.ts";
+export * as EventLogServerEncrypted from "./EventLogServerEncrypted.ts";
+/**
+ * @since 4.0.0
+ */
+export * as EventLogServerUnencrypted from "./EventLogServerUnencrypted.ts";
+/**
+ * @since 4.0.0
+ */
+export * as EventLogSessionAuth from "./EventLogSessionAuth.ts";
+/**
+ * @since 4.0.0
+ */
+export * as SqlEventJournal from "./SqlEventJournal.ts";
+/**
+ * @since 4.0.0
+ */
+export * as SqlEventLogServerEncrypted from "./SqlEventLogServerEncrypted.ts";
 /**
  * @since 4.0.0
  */
-export * as SqlEventLogServer from "./SqlEventLogServer.ts";
+export * as SqlEventLogServerUnencrypted from "./SqlEventLogServerUnencrypted.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/unstable/eventlog/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/unstable/eventlog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAEnC;;GAEG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;GAEG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;GAEG;AACH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC;;GAEG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAE7D;;GAEG;AACH,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AAErD;;GAEG;AACH,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AAErD;;GAEG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAE7D;;GAEG;AACH,OAAO,KAAK,iBAAiB,MAAM,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/unstable/eventlog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAEnC;;GAEG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;GAEG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;GAEG;AACH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC;;GAEG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAE7D;;GAEG;AACH,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AAEvD;;GAEG;AACH,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AAErD;;GAEG;AACH,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AAErD;;GAEG;AACH,OAAO,KAAK,uBAAuB,MAAM,8BAA8B,CAAA;AAEvE;;GAEG;AACH,OAAO,KAAK,yBAAyB,MAAM,gCAAgC,CAAA;AAE3E;;GAEG;AACH,OAAO,KAAK,mBAAmB,MAAM,0BAA0B,CAAA;AAE/D;;GAEG;AACH,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AAEvD;;GAEG;AACH,OAAO,KAAK,0BAA0B,MAAM,iCAAiC,CAAA;AAE7E;;GAEG;AACH,OAAO,KAAK,4BAA4B,MAAM,mCAAmC,CAAA"}

package/dist/unstable/eventlog/index.js

@@ -22,6 +22,10 @@ export * as EventLog from "./EventLog.js";
  * @since 4.0.0
  */
 export * as EventLogEncryption from "./EventLogEncryption.js";
+/**
+ * @since 4.0.0
+ */
+export * as EventLogMessage from "./EventLogMessage.js";
 /**
  * @since 4.0.0
  */
@@ -33,9 +37,25 @@ export * as EventLogServer from "./EventLogServer.js";
 /**
  * @since 4.0.0
  */
-export * as SqlEventLogJournal from "./SqlEventLogJournal.js";
+export * as EventLogServerEncrypted from "./EventLogServerEncrypted.js";
+/**
+ * @since 4.0.0
+ */
+export * as EventLogServerUnencrypted from "./EventLogServerUnencrypted.js";
+/**
+ * @since 4.0.0
+ */
+export * as EventLogSessionAuth from "./EventLogSessionAuth.js";
+/**
+ * @since 4.0.0
+ */
+export * as SqlEventJournal from "./SqlEventJournal.js";
+/**
+ * @since 4.0.0
+ */
+export * as SqlEventLogServerEncrypted from "./SqlEventLogServerEncrypted.js";
 /**
  * @since 4.0.0
  */
-export * as SqlEventLogServer from "./SqlEventLogServer.js";
+export * as SqlEventLogServerUnencrypted from "./SqlEventLogServerUnencrypted.js";
 //# sourceMappingURL=index.js.map

package/dist/unstable/eventlog/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["Event","EventGroup","EventJournal","EventLog","EventLogEncryption","EventLogRemote","EventLogServer","SqlEventLogJournal","SqlEventLogServer"],"sources":["../../../src/unstable/eventlog/index.ts"],"sourcesContent":[null],"mappings":"AAAA;;;AAIA;AAEA;;;AAGA,OAAO,KAAKA,KAAK,MAAM,YAAY;AAEnC;;;AAGA,OAAO,KAAKC,UAAU,MAAM,iBAAiB;AAE7C;;;AAGA,OAAO,KAAKC,YAAY,MAAM,mBAAmB;AAEjD;;;AAGA,OAAO,KAAKC,QAAQ,MAAM,eAAe;AAEzC;;;AAGA,OAAO,KAAKC,kBAAkB,MAAM,yBAAyB;AAE7D;;;AAGA,OAAO,KAAKC,cAAc,MAAM,qBAAqB;AAErD;;;AAGA,OAAO,KAAKC,cAAc,MAAM,qBAAqB;AAErD;;;AAGA,OAAO,KAAKC,kBAAkB,MAAM,yBAAyB;AAE7D;;;AAGA,OAAO,KAAKC,iBAAiB,MAAM,wBAAwB","ignoreList":[]}
+{"version":3,"file":"index.js","names":["Event","EventGroup","EventJournal","EventLog","EventLogEncryption","EventLogMessage","EventLogRemote","EventLogServer","EventLogServerEncrypted","EventLogServerUnencrypted","EventLogSessionAuth","SqlEventJournal","SqlEventLogServerEncrypted","SqlEventLogServerUnencrypted"],"sources":["../../../src/unstable/eventlog/index.ts"],"sourcesContent":[null],"mappings":"AAAA;;;AAIA;AAEA;;;AAGA,OAAO,KAAKA,KAAK,MAAM,YAAY;AAEnC;;;AAGA,OAAO,KAAKC,UAAU,MAAM,iBAAiB;AAE7C;;;AAGA,OAAO,KAAKC,YAAY,MAAM,mBAAmB;AAEjD;;;AAGA,OAAO,KAAKC,QAAQ,MAAM,eAAe;AAEzC;;;AAGA,OAAO,KAAKC,kBAAkB,MAAM,yBAAyB;AAE7D;;;AAGA,OAAO,KAAKC,eAAe,MAAM,sBAAsB;AAEvD;;;AAGA,OAAO,KAAKC,cAAc,MAAM,qBAAqB;AAErD;;;AAGA,OAAO,KAAKC,cAAc,MAAM,qBAAqB;AAErD;;;AAGA,OAAO,KAAKC,uBAAuB,MAAM,8BAA8B;AAEvE;;;AAGA,OAAO,KAAKC,yBAAyB,MAAM,gCAAgC;AAE3E;;;AAGA,OAAO,KAAKC,mBAAmB,MAAM,0BAA0B;AAE/D;;;AAGA,OAAO,KAAKC,eAAe,MAAM,sBAAsB;AAEvD;;;AAGA,OAAO,KAAKC,0BAA0B,MAAM,iCAAiC;AAE7E;;;AAGA,OAAO,KAAKC,4BAA4B,MAAM,mCAAmC","ignoreList":[]}

package/dist/unstable/eventlog/internal/identityRootSecretDerivation.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=identityRootSecretDerivation.d.ts.map

package/dist/unstable/eventlog/internal/identityRootSecretDerivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityRootSecretDerivation.d.ts","sourceRoot":"","sources":["../../../../src/unstable/eventlog/internal/identityRootSecretDerivation.ts"],"names":[],"mappings":""}

package/dist/unstable/eventlog/internal/identityRootSecretDerivation.js

@@ -0,0 +1,89 @@
+import * as Effect from "../../../Effect.js";
+import * as Redacted from "../../../Redacted.js";
+const textEncoder = /*#__PURE__*/new TextEncoder();
+const Ed25519PublicKeyLength = 32;
+const Ed25519Pkcs8SeedPrefix = /*#__PURE__*/Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20]);
+/** @internal */
+export const EncryptionDerivationLabelV1 = "effect/eventlog/identity/v1/encryption";
+/** @internal */
+export const SigningDerivationLabelV1 = "effect/eventlog/identity/v1/signing";
+const toArrayBuffer = data => {
+  const copy = new Uint8Array(data.byteLength);
+  copy.set(data);
+  return copy.buffer;
+};
+const decodeBase64Url = value => {
+  const normalized = value.replaceAll("-", "+").replaceAll("_", "/");
+  const remainder = normalized.length % 4;
+  const padded = remainder === 0 ? normalized : `${normalized}${"=".repeat(4 - remainder)}`;
+  const decoded = atob(padded);
+  const bytes = new Uint8Array(decoded.length);
+  for (let i = 0; i < decoded.length; i++) {
+    bytes[i] = decoded.charCodeAt(i);
+  }
+  return bytes;
+};
+const makeEd25519Pkcs8FromSeed = seed => {
+  const key = new Uint8Array(Ed25519Pkcs8SeedPrefix.byteLength + seed.byteLength);
+  key.set(Ed25519Pkcs8SeedPrefix, 0);
+  key.set(seed, Ed25519Pkcs8SeedPrefix.byteLength);
+  return key;
+};
+const deriveSecretBytes = /*#__PURE__*/Effect.fnUntraced(function* (options) {
+  const labelBytes = textEncoder.encode(options.label);
+  const derivationInput = new Uint8Array(labelBytes.byteLength + 1 + options.rootSecret.byteLength);
+  derivationInput.set(labelBytes, 0);
+  derivationInput[labelBytes.byteLength] = 0;
+  derivationInput.set(options.rootSecret, labelBytes.byteLength + 1);
+  const digest = yield* Effect.promise(() => options.crypto.subtle.digest("SHA-256", toArrayBuffer(derivationInput)));
+  return new Uint8Array(digest);
+});
+/** @internal */
+export const deriveIdentityRootSecretMaterial = /*#__PURE__*/Effect.fnUntraced(function* (options) {
+  const encryptionKeyMaterial = yield* deriveSecretBytes({
+    crypto: options.crypto,
+    rootSecret: options.rootSecret,
+    label: EncryptionDerivationLabelV1
+  });
+  const signingSeed = yield* deriveSecretBytes({
+    crypto: options.crypto,
+    rootSecret: options.rootSecret,
+    label: SigningDerivationLabelV1
+  });
+  const signingPrivateKeyBytes = makeEd25519Pkcs8FromSeed(signingSeed);
+  const encryptionKey = yield* Effect.promise(() => options.crypto.subtle.importKey("raw", toArrayBuffer(encryptionKeyMaterial), "AES-GCM", true, ["encrypt", "decrypt"]));
+  const signingPrivateKey = yield* Effect.promise(() => options.crypto.subtle.importKey("pkcs8", toArrayBuffer(signingPrivateKeyBytes), "Ed25519", true, ["sign"]));
+  const signingJwk = yield* Effect.promise(() => options.crypto.subtle.exportKey("jwk", signingPrivateKey));
+  if (typeof signingJwk.x !== "string") {
+    return yield* Effect.die(new Error("Unable to export deterministic Ed25519 public key"));
+  }
+  const signingPublicKey = decodeBase64Url(signingJwk.x);
+  if (signingPublicKey.byteLength !== Ed25519PublicKeyLength) {
+    return yield* Effect.die(new Error(`Expected derived signing public key to be ${Ed25519PublicKeyLength} bytes`));
+  }
+  return {
+    encryptionKeyMaterial,
+    encryptionKey,
+    signingPublicKey,
+    signingPrivateKey: Redacted.make(signingPrivateKeyBytes)
+  };
+});
+/** @internal */
+export const makeGetIdentityRootSecretMaterial = crypto => {
+  const cache = new WeakMap();
+  return Effect.fnUntraced(function* (identity) {
+    const cached = cache.get(identity);
+    if (cached !== undefined) {
+      return cached;
+    }
+    const derived = yield* deriveIdentityRootSecretMaterial({
+      crypto,
+      rootSecret: Redacted.value(identity.privateKey)
+    });
+    yield* Effect.sync(() => {
+      cache.set(identity, derived);
+    });
+    return derived;
+  });
+};
+//# sourceMappingURL=identityRootSecretDerivation.js.map

package/dist/unstable/eventlog/internal/identityRootSecretDerivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityRootSecretDerivation.js","names":["Effect","Redacted","textEncoder","TextEncoder","Ed25519PublicKeyLength","Ed25519Pkcs8SeedPrefix","Uint8Array","from","EncryptionDerivationLabelV1","SigningDerivationLabelV1","toArrayBuffer","data","copy","byteLength","set","buffer","decodeBase64Url","value","normalized","replaceAll","remainder","length","padded","repeat","decoded","atob","bytes","i","charCodeAt","makeEd25519Pkcs8FromSeed","seed","key","deriveSecretBytes","fnUntraced","options","labelBytes","encode","label","derivationInput","rootSecret","digest","promise","crypto","subtle","deriveIdentityRootSecretMaterial","encryptionKeyMaterial","signingSeed","signingPrivateKeyBytes","encryptionKey","importKey","signingPrivateKey","signingJwk","exportKey","x","die","Error","signingPublicKey","make","makeGetIdentityRootSecretMaterial","cache","WeakMap","identity","cached","get","undefined","derived","privateKey","sync"],"sources":["../../../../src/unstable/eventlog/internal/identityRootSecretDerivation.ts"],"sourcesContent":[null],"mappings":"AAAA,OAAO,KAAKA,MAAM,MAAM,oBAAoB;AAC5C,OAAO,KAAKC,QAAQ,MAAM,sBAAsB;AAGhD,MAAMC,WAAW,gBAAG,IAAIC,WAAW,EAAE;AAErC,MAAMC,sBAAsB,GAAG,EAAE;AAEjC,MAAMC,sBAAsB,gBAAGC,UAAU,CAACC,IAAI,CAAC,CAC7C,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,CACL,CAAC;AAEF;AACA,OAAO,MAAMC,2BAA2B,GAAG,wCAAwC;AAEnF;AACA,OAAO,MAAMC,wBAAwB,GAAG,qCAAqC;AAU7E,MAAMC,aAAa,GAAIC,IAAgB,IAAiB;EACtD,MAAMC,IAAI,GAAG,IAAIN,UAAU,CAACK,IAAI,CAACE,UAAU,CAAC;EAC5CD,IAAI,CAACE,GAAG,CAACH,IAAI,CAAC;EACd,OAAOC,IAAI,CAACG,MAAM;AACpB,CAAC;AAED,MAAMC,eAAe,GAAIC,KAAa,IAA6B;EACjE,MAAMC,UAAU,GAAGD,KAAK,CAACE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAACA,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;EAClE,MAAMC,SAAS,GAAGF,UAAU,CAACG,MAAM,GAAG,CAAC;EACvC,MAAMC,MAAM,GAAGF,SAAS,KAAK,CAAC,GAAGF,UAAU,GAAG,GAAGA,UAAU,GAAG,GAAG,CAACK,MAAM,CAAC,CAAC,GAAGH,SAAS,CAAC,EAAE;EACzF,MAAMI,OAAO,GAAGC,IAAI,CAACH,MAAM,CAAC;EAC5B,MAAMI,KAAK,GAAG,IAAIpB,UAAU,CAACkB,OAAO,CAACH,MAAM,CAAC;EAC5C,KAAK,IAAIM,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGH,OAAO,CAACH,MAAM,EAAEM,CAAC,EAAE,EAAE;IACvCD,KAAK,CAACC,CAAC,CAAC,GAAGH,OAAO,CAACI,UAAU,CAACD,CAAC,CAAC;EAClC;EACA,OAAOD,KAAK;AACd,CAAC;AAED,MAAMG,wBAAwB,GAAIC,IAAgB,IAA6B;EAC7E,MAAMC,GAAG,GAAG,IAAIzB,UAAU,CAACD,sBAAsB,CAACQ,UAAU,GAAGiB,IAAI,CAACjB,UAAU,CAAC;EAC/EkB,GAAG,CAACjB,GAAG,CAACT,sBAAsB,EAAE,CAAC,CAAC;EAClC0B,GAAG,CAACjB,GAAG,CAACgB,IAAI,EAAEzB,sBAAsB,CAACQ,UAAU,CAAC;EAChD,OAAOkB,GAAG;AACZ,CAAC;AAED,MAAMC,iBAAiB,gBAAGhC,MAAM,CAACiC,UAAU,CAAC,WAAUC,OAIrD;EACC,MAAMC,UAAU,GAAGjC,WAAW,CAACkC,MAAM,CAACF,OAAO,CAACG,KAAK,CAAC;EACpD,MAAMC,eAAe,GAAG,IAAIhC,UAAU,CAAC6B,UAAU,CAACtB,UAAU,GAAG,CAAC,GAAGqB,OAAO,CAACK,UAAU,CAAC1B,UAAU,CAAC;EACjGyB,eAAe,CAACxB,GAAG,CAACqB,UAAU,EAAE,CAAC,CAAC;EAClCG,eAAe,CAACH,UAAU,CAACtB,UAAU,CAAC,GAAG,CAAC;EAC1CyB,eAAe,CAACxB,GAAG,CAACoB,OAAO,CAACK,UAAU,EAAEJ,UAAU,CAACtB,UAAU,GAAG,CAAC,CAAC;EAElE,MAAM2B,MAAM,GAAG,OAAOxC,MAAM,CAACyC,OAAO,CAAC,MAAMP,OAAO,CAACQ,MAAM,CAACC,MAAM,CAACH,MAAM,CAAC,SAAS,EAAE9B,aAAa,CAAC4B,eAAe,CAAC,CAAC,CAAC;EAEnH,OAAO,IAAIhC,UAAU,CAACkC,MAAM,CAAC;AAC/B,CAAC,CAAC;AAEF;AACA,OAAO,MAAMI,gCAAgC,gBAAG5C,MAAM,CAACiC,UAAU,CAAC,WAAUC,OAG3E;EACC,MAAMW,qBAAqB,GAAG,OAAOb,iBAAiB,CAAC;IACrDU,MAAM,EAAER,OAAO,CAACQ,MAAM;IACtBH,UAAU,EAAEL,OAAO,CAACK,UAAU;IAC9BF,KAAK,EAAE7B;GACR,CAAC;EACF,MAAMsC,WAAW,GAAG,OAAOd,iBAAiB,CAAC;IAC3CU,MAAM,EAAER,OAAO,CAACQ,MAAM;IACtBH,UAAU,EAAEL,OAAO,CAACK,UAAU;IAC9BF,KAAK,EAAE5B;GACR,CAAC;EAEF,MAAMsC,sBAAsB,GAAGlB,wBAAwB,CAACiB,WAAW,CAAC;EAEpE,MAAME,aAAa,GAAG,OAAOhD,MAAM,CAACyC,OAAO,CAAC,MAC1CP,OAAO,CAACQ,MAAM,CAACC,MAAM,CAACM,SAAS,CAAC,KAAK,EAAEvC,aAAa,CAACmC,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAC5F,SAAS,EACT,SAAS,CACV,CAAC,CACH;EACD,MAAMK,iBAAiB,GAAG,OAAOlD,MAAM,CAACyC,OAAO,CAAC,MAC9CP,OAAO,CAACQ,MAAM,CAACC,MAAM,CAACM,SAAS,CAAC,OAAO,EAAEvC,aAAa,CAACqC,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAC3G;EACD,MAAMI,UAAU,GAAG,OAAOnD,MAAM,CAACyC,OAAO,CAAC,MAAMP,OAAO,CAACQ,MAAM,CAACC,MAAM,CAACS,SAAS,CAAC,KAAK,EAAEF,iBAAiB,CAAC,CAAC;EAEzG,IAAI,OAAOC,UAAU,CAACE,CAAC,KAAK,QAAQ,EAAE;IACpC,OAAO,OAAOrD,MAAM,CAACsD,GAAG,CAAC,IAAIC,KAAK,CAAC,mDAAmD,CAAC,CAAC;EAC1F;EAEA,MAAMC,gBAAgB,GAAGxC,eAAe,CAACmC,UAAU,CAACE,CAAC,CAAC;EAEtD,IAAIG,gBAAgB,CAAC3C,UAAU,KAAKT,sBAAsB,EAAE;IAC1D,OAAO,OAAOJ,MAAM,CAACsD,GAAG,CACtB,IAAIC,KAAK,CAAC,6CAA6CnD,sBAAsB,QAAQ,CAAC,CACvF;EACH;EAEA,OAAO;IACLyC,qBAAqB;IACrBG,aAAa;IACbQ,gBAAgB;IAChBN,iBAAiB,EAAEjD,QAAQ,CAACwD,IAAI,CAACV,sBAAsB;GACnB;AACxC,CAAC,CAAC;AAEF;AACA,OAAO,MAAMW,iCAAiC,GAAIhB,MAAc,IAAI;EAClE,MAAMiB,KAAK,GAAG,IAAIC,OAAO,EAAmD;EAE5E,OAAO5D,MAAM,CAACiC,UAAU,CAAC,WAAU4B,QAA6B;IAC9D,MAAMC,MAAM,GAAGH,KAAK,CAACI,GAAG,CAACF,QAAQ,CAAC;IAClC,IAAIC,MAAM,KAAKE,SAAS,EAAE;MACxB,OAAOF,MAAM;IACf;IAEA,MAAMG,OAAO,GAAG,OAAOrB,gCAAgC,CAAC;MACtDF,MAAM;MACNH,UAAU,EAAEtC,QAAQ,CAACgB,KAAK,CAAC4C,QAAQ,CAACK,UAAU;KAC/C,CAAC;IAEF,OAAOlE,MAAM,CAACmE,IAAI,CAAC,MAAK;MACtBR,KAAK,CAAC7C,GAAG,CAAC+C,QAAQ,EAAEI,OAAO,CAAC;IAC9B,CAAC,CAAC;IAEF,OAAOA,OAAO;EAChB,CAAC,CAAC;AACJ,CAAC","ignoreList":[]}