emdash 1.3.1 → 1.4.0

package/dist/canonical-DjF_z6GI.mjs

@@ -1,174 +0,0 @@
-//#region src/transfer/format/limits.ts
-/**
-* Hard limits for site packages and transfer operations.
-*
-* Package limits are part of the format contract: an exporter must never
-* produce a package that exceeds them and a reader must reject one that does
-* before doing expensive work. Operation limits bound one `advance` step so it
-* fits a Workers request on D1.
-*/
-const MiB = 1024 * 1024;
-const TRANSFER_LIMITS = Object.freeze({
-	manifestBytes: 8 * MiB,
-	recordLineBytes: 19e5,
-	chunkBytes: 4 * MiB,
-	chunkRecords: 1e3,
-	totalRecords: 5e6,
-	jsonDepth: 64,
-	totalFiles: 1e6,
-	indexChunks: 1e3,
-	defaultMaxBlobBytes: 50 * MiB,
-	idLength: 1024,
-	shortString: 4096,
-	stepQueryCeiling: 900,
-	stepQueries: 150,
-	stepClosingQueries: 2,
-	stepBytes: 32 * MiB,
-	d1BindParameters: 100,
-	leaseSeconds: 300,
-	pendingImportTtlSeconds: 1440 * 60,
-	exportTtlSeconds: 10080 * 60,
-	approvalTtlSeconds: 900,
-	exportFenceAttempts: 3,
-	verificationMismatches: 50,
-	planIssues: 500
-});
-/**
-* Rows per multi-row INSERT so a statement stays within D1's bound-parameter
-* limit. Returns 0 when a single row needs more parameters than the limit;
-* callers then insert core columns first and set the rest with batched
-* UPDATEs.
-*/
-function rowsPerInsert(columnCount) {
-	if (!Number.isInteger(columnCount) || columnCount < 1) throw new RangeError(`Invalid column count ${columnCount}`);
-	return Math.floor(TRANSFER_LIMITS.d1BindParameters / columnCount);
-}
-
-//#endregion
-//#region src/transfer/format/canonical.ts
-/**
-* Canonical JSON serialization for site packages.
-*
-* Rules (normative for formatVersion "1"):
-* - object keys are sorted by UTF-16 code unit order ({@link compareUtf16});
-* - no insignificant whitespace;
-* - strings and numbers are encoded exactly as `JSON.stringify` encodes them;
-* - object properties whose value is `undefined` are omitted;
-* - `undefined` inside an array, non-finite numbers, and any value that is not
-*   a plain object, array, string, finite number, boolean, or `null` are
-*   rejected;
-* - nesting depth is at most {@link TRANSFER_LIMITS.jsonDepth} containers
-*   (the root object or array is depth 1).
-*
-* The manifest, every NDJSON line, the plan, the receipt, and logical digests
-* all use this one implementation.
-*/
-var CanonicalJsonError = class extends Error {
-	path;
-	constructor(message, path) {
-		super(`${message} at ${path}`);
-		this.name = "CanonicalJsonError";
-		this.path = path;
-	}
-};
-function compareUtf16(a, b) {
-	if (a === b) return 0;
-	return a < b ? -1 : 1;
-}
-function canonicalJson(value, options = {}) {
-	const maxDepth = options.maxDepth ?? TRANSFER_LIMITS.jsonDepth;
-	const parts = [];
-	write(value, parts, 0, maxDepth, "$");
-	return parts.join("");
-}
-function write(value, out, depth, maxDepth, path) {
-	if (value === null) {
-		out.push("null");
-		return;
-	}
-	switch (typeof value) {
-		case "string":
-			out.push(JSON.stringify(value));
-			return;
-		case "number":
-			if (!Number.isFinite(value)) throw new CanonicalJsonError("Non-finite number", path);
-			out.push(JSON.stringify(value));
-			return;
-		case "boolean":
-			out.push(value ? "true" : "false");
-			return;
-		case "object": break;
-		default: throw new CanonicalJsonError(`Unsupported ${typeof value} value`, path);
-	}
-	if (depth + 1 > maxDepth) throw new CanonicalJsonError(`Nesting deeper than ${maxDepth}`, path);
-	if (Array.isArray(value)) {
-		out.push("[");
-		for (let index = 0; index < value.length; index++) {
-			if (index > 0) out.push(",");
-			const item = value[index];
-			if (item === void 0) throw new CanonicalJsonError("Undefined array item", `${path}[${index}]`);
-			write(item, out, depth + 1, maxDepth, `${path}[${index}]`);
-		}
-		out.push("]");
-		return;
-	}
-	const prototype = Object.getPrototypeOf(value);
-	if (prototype !== Object.prototype && prototype !== null) throw new CanonicalJsonError("Non-plain object", path);
-	const present = Object.entries(value).filter(([, item]) => item !== void 0).toSorted(([a], [b]) => compareUtf16(a, b));
-	out.push("{");
-	present.forEach(([key, item], index) => {
-		if (index > 0) out.push(",");
-		out.push(JSON.stringify(key), ":");
-		write(item, out, depth + 1, maxDepth, `${path}.${key}`);
-	});
-	out.push("}");
-}
-/**
-* Container nesting depth of a JSON text, measured without parsing it so an
-* adversarial document cannot exhaust the parser's stack first. Returns
-* `Infinity` as soon as `limit` is exceeded.
-*/
-function measureJsonDepth(text, limit = TRANSFER_LIMITS.jsonDepth) {
-	let depth = 0;
-	let max = 0;
-	let inString = false;
-	for (let index = 0; index < text.length; index++) {
-		const code = text.charCodeAt(index);
-		if (inString) {
-			if (code === 92) index++;
-			else if (code === 34) inString = false;
-			continue;
-		}
-		if (code === 34) inString = true;
-		else if (code === 123 || code === 91) {
-			depth++;
-			if (depth > max) {
-				max = depth;
-				if (max > limit) return Number.POSITIVE_INFINITY;
-			}
-		} else if (code === 125 || code === 93) depth--;
-	}
-	return max;
-}
-/**
-* Parse a JSON text that must already be in canonical form. Throws
-* {@link CanonicalJsonError} when the depth limit is exceeded, the text is not
-* valid JSON, or re-serializing the parsed value does not reproduce the text
-* byte for byte.
-*/
-function parseCanonicalJson(text, options = {}) {
-	const maxDepth = options.maxDepth ?? TRANSFER_LIMITS.jsonDepth;
-	if (measureJsonDepth(text, maxDepth) > maxDepth) throw new CanonicalJsonError(`Nesting deeper than ${maxDepth}`, "$");
-	let parsed;
-	try {
-		parsed = JSON.parse(text);
-	} catch {
-		throw new CanonicalJsonError("Invalid JSON", "$");
-	}
-	if (canonicalJson(parsed, { maxDepth }) !== text) throw new CanonicalJsonError("JSON is not in canonical form", "$");
-	return parsed;
-}
-
-//#endregion
-export { parseCanonicalJson as a, measureJsonDepth as i, canonicalJson as n, TRANSFER_LIMITS as o, compareUtf16 as r, rowsPerInsert as s, CanonicalJsonError as t };
-//# sourceMappingURL=canonical-DjF_z6GI.mjs.map

package/dist/canonical-DjF_z6GI.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonical-DjF_z6GI.mjs","names":[],"sources":["../src/transfer/format/limits.ts","../src/transfer/format/canonical.ts"],"sourcesContent":["/**\n * Hard limits for site packages and transfer operations.\n *\n * Package limits are part of the format contract: an exporter must never\n * produce a package that exceeds them and a reader must reject one that does\n * before doing expensive work. Operation limits bound one `advance` step so it\n * fits a Workers request on D1.\n */\n\nconst MiB = 1024 * 1024;\n\nexport const TRANSFER_LIMITS = Object.freeze({\n\t/** Maximum `manifest.json` size in bytes. */\n\tmanifestBytes: 8 * MiB,\n\t/**\n\t * Maximum bytes in one NDJSON line, excluding the newline. Kept under D1's\n\t * 2 MB row/statement ceiling so every record can be written in one row.\n\t */\n\trecordLineBytes: 1_900_000,\n\t/** Maximum bytes in one record or index chunk file. */\n\tchunkBytes: 4 * MiB,\n\t/** Maximum records (or index entries) in one chunk file. */\n\tchunkRecords: 1000,\n\t/** Maximum records across every kind. */\n\ttotalRecords: 5_000_000,\n\t/** Maximum container nesting of any JSON value (root = 1). */\n\tjsonDepth: 64,\n\t/** Maximum files (record chunks + media blobs) listed by the index. */\n\ttotalFiles: 1_000_000,\n\t/** Maximum index chunk files listed by the manifest. */\n\tindexChunks: 1000,\n\t/** Default per-blob ceiling; the target's `maxUploadSize` overrides it. */\n\tdefaultMaxBlobBytes: 50 * MiB,\n\n\t/** Maximum length of a portable id (including synthetic composite ids). */\n\tidLength: 1024,\n\t/** Maximum length of short strings: slugs, names, labels, locales, mime types. */\n\tshortString: 4096,\n\n\t/** Operation step: stop starting work once this many queries ran in the request. */\n\tstepQueryCeiling: 900,\n\t/** Operation step: queries a unit of work may use; checked before starting it. */\n\tstepQueries: 150,\n\t/**\n\t * Operation step: queries kept back from the ceiling for the writes that\n\t * end a step once no more units start (a checkpoint and the lease\n\t * release, or the read and write that record a failed step).\n\t */\n\tstepClosingQueries: 2,\n\t/** Operation step: media bytes copied per step (a larger single blob gets its own step). */\n\tstepBytes: 32 * MiB,\n\t/** D1 bound parameters per statement. */\n\td1BindParameters: 100,\n\n\t/** Operation lease duration. */\n\tleaseSeconds: 5 * 60,\n\t/** Uploading / analyzing / planned imports expire after this long. */\n\tpendingImportTtlSeconds: 24 * 60 * 60,\n\t/** Completed exports expire (and their staging is collected) after this long. */\n\texportTtlSeconds: 7 * 24 * 60 * 60,\n\t/**\n\t * MCP approval grant lifetime: a pending grant expires this long after it\n\t * is requested, and an approved one this long after it is approved.\n\t */\n\tapprovalTtlSeconds: 15 * 60,\n\t/** Export attempts before failing with TRANSFER_EXPORT_CONCURRENT_WRITES. */\n\texportFenceAttempts: 3,\n\t/** Maximum mismatches kept in a verification failure detail. */\n\tverificationMismatches: 50,\n\t/** Maximum warnings or blockers kept in a plan (the rest are summarized by count). */\n\tplanIssues: 500,\n});\n\nexport type TransferLimits = typeof TRANSFER_LIMITS;\n\n/**\n * Rows per multi-row INSERT so a statement stays within D1's bound-parameter\n * limit. Returns 0 when a single row needs more parameters than the limit;\n * callers then insert core columns first and set the rest with batched\n * UPDATEs.\n */\nexport function rowsPerInsert(columnCount: number): number {\n\tif (!Number.isInteger(columnCount) || columnCount < 1) {\n\t\tthrow new RangeError(`Invalid column count ${columnCount}`);\n\t}\n\treturn Math.floor(TRANSFER_LIMITS.d1BindParameters / columnCount);\n}\n","/**\n * Canonical JSON serialization for site packages.\n *\n * Rules (normative for formatVersion \"1\"):\n * - object keys are sorted by UTF-16 code unit order ({@link compareUtf16});\n * - no insignificant whitespace;\n * - strings and numbers are encoded exactly as `JSON.stringify` encodes them;\n * - object properties whose value is `undefined` are omitted;\n * - `undefined` inside an array, non-finite numbers, and any value that is not\n *   a plain object, array, string, finite number, boolean, or `null` are\n *   rejected;\n * - nesting depth is at most {@link TRANSFER_LIMITS.jsonDepth} containers\n *   (the root object or array is depth 1).\n *\n * The manifest, every NDJSON line, the plan, the receipt, and logical digests\n * all use this one implementation.\n */\n\nimport { TRANSFER_LIMITS } from \"./limits.js\";\n\nexport class CanonicalJsonError extends Error {\n\treadonly path: string;\n\n\tconstructor(message: string, path: string) {\n\t\tsuper(`${message} at ${path}`);\n\t\tthis.name = \"CanonicalJsonError\";\n\t\tthis.path = path;\n\t}\n}\n\nexport type JsonPrimitive = string | number | boolean | null;\nexport type JsonValue = JsonPrimitive | JsonValue[] | { [key: string]: JsonValue };\n\nexport function compareUtf16(a: string, b: string): number {\n\tif (a === b) return 0;\n\treturn a < b ? -1 : 1;\n}\n\nexport function canonicalJson(value: unknown, options: { maxDepth?: number } = {}): string {\n\tconst maxDepth = options.maxDepth ?? TRANSFER_LIMITS.jsonDepth;\n\tconst parts: string[] = [];\n\twrite(value, parts, 0, maxDepth, \"$\");\n\treturn parts.join(\"\");\n}\n\nfunction write(value: unknown, out: string[], depth: number, maxDepth: number, path: string): void {\n\tif (value === null) {\n\t\tout.push(\"null\");\n\t\treturn;\n\t}\n\tswitch (typeof value) {\n\t\tcase \"string\":\n\t\t\tout.push(JSON.stringify(value));\n\t\t\treturn;\n\t\tcase \"number\":\n\t\t\tif (!Number.isFinite(value)) throw new CanonicalJsonError(\"Non-finite number\", path);\n\t\t\tout.push(JSON.stringify(value));\n\t\t\treturn;\n\t\tcase \"boolean\":\n\t\t\tout.push(value ? \"true\" : \"false\");\n\t\t\treturn;\n\t\tcase \"object\":\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new CanonicalJsonError(`Unsupported ${typeof value} value`, path);\n\t}\n\n\tif (depth + 1 > maxDepth) {\n\t\tthrow new CanonicalJsonError(`Nesting deeper than ${maxDepth}`, path);\n\t}\n\n\tif (Array.isArray(value)) {\n\t\tout.push(\"[\");\n\t\tfor (let index = 0; index < value.length; index++) {\n\t\t\tif (index > 0) out.push(\",\");\n\t\t\tconst item: unknown = value[index];\n\t\t\tif (item === undefined)\n\t\t\t\tthrow new CanonicalJsonError(\"Undefined array item\", `${path}[${index}]`);\n\t\t\twrite(item, out, depth + 1, maxDepth, `${path}[${index}]`);\n\t\t}\n\t\tout.push(\"]\");\n\t\treturn;\n\t}\n\n\tconst prototype: unknown = Object.getPrototypeOf(value);\n\tif (prototype !== Object.prototype && prototype !== null) {\n\t\tthrow new CanonicalJsonError(\"Non-plain object\", path);\n\t}\n\tconst entries: Array<[string, unknown]> = Object.entries(value);\n\tconst present = entries\n\t\t.filter(([, item]) => item !== undefined)\n\t\t.toSorted(([a], [b]) => compareUtf16(a, b));\n\tout.push(\"{\");\n\tpresent.forEach(([key, item], index) => {\n\t\tif (index > 0) out.push(\",\");\n\t\tout.push(JSON.stringify(key), \":\");\n\t\twrite(item, out, depth + 1, maxDepth, `${path}.${key}`);\n\t});\n\tout.push(\"}\");\n}\n\n/**\n * Container nesting depth of a JSON text, measured without parsing it so an\n * adversarial document cannot exhaust the parser's stack first. Returns\n * `Infinity` as soon as `limit` is exceeded.\n */\nexport function measureJsonDepth(text: string, limit: number = TRANSFER_LIMITS.jsonDepth): number {\n\tlet depth = 0;\n\tlet max = 0;\n\tlet inString = false;\n\tfor (let index = 0; index < text.length; index++) {\n\t\tconst code = text.charCodeAt(index);\n\t\tif (inString) {\n\t\t\tif (code === 0x5c) index++;\n\t\t\telse if (code === 0x22) inString = false;\n\t\t\tcontinue;\n\t\t}\n\t\tif (code === 0x22) inString = true;\n\t\telse if (code === 0x7b || code === 0x5b) {\n\t\t\tdepth++;\n\t\t\tif (depth > max) {\n\t\t\t\tmax = depth;\n\t\t\t\tif (max > limit) return Number.POSITIVE_INFINITY;\n\t\t\t}\n\t\t} else if (code === 0x7d || code === 0x5d) depth--;\n\t}\n\treturn max;\n}\n\n/**\n * Parse a JSON text that must already be in canonical form. Throws\n * {@link CanonicalJsonError} when the depth limit is exceeded, the text is not\n * valid JSON, or re-serializing the parsed value does not reproduce the text\n * byte for byte.\n */\nexport function parseCanonicalJson(text: string, options: { maxDepth?: number } = {}): unknown {\n\tconst maxDepth = options.maxDepth ?? TRANSFER_LIMITS.jsonDepth;\n\tif (measureJsonDepth(text, maxDepth) > maxDepth) {\n\t\tthrow new CanonicalJsonError(`Nesting deeper than ${maxDepth}`, \"$\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(text);\n\t} catch {\n\t\tthrow new CanonicalJsonError(\"Invalid JSON\", \"$\");\n\t}\n\tif (canonicalJson(parsed, { maxDepth }) !== text) {\n\t\tthrow new CanonicalJsonError(\"JSON is not in canonical form\", \"$\");\n\t}\n\treturn parsed;\n}\n"],"mappings":";;;;;;;;;AASA,MAAM,MAAM,OAAO;AAEnB,MAAa,kBAAkB,OAAO,OAAO;CAE5C,eAAe,IAAI;CAKnB,iBAAiB;CAEjB,YAAY,IAAI;CAEhB,cAAc;CAEd,cAAc;CAEd,WAAW;CAEX,YAAY;CAEZ,aAAa;CAEb,qBAAqB,KAAK;CAG1B,UAAU;CAEV,aAAa;CAGb,kBAAkB;CAElB,aAAa;CAMb,oBAAoB;CAEpB,WAAW,KAAK;CAEhB,kBAAkB;CAGlB,cAAc;CAEd,yBAAyB,OAAU;CAEnC,kBAAkB,QAAc;CAKhC,oBAAoB;CAEpB,qBAAqB;CAErB,wBAAwB;CAExB,YAAY;CACZ,CAAC;;;;;;;AAUF,SAAgB,cAAc,aAA6B;AAC1D,KAAI,CAAC,OAAO,UAAU,YAAY,IAAI,cAAc,EACnD,OAAM,IAAI,WAAW,wBAAwB,cAAc;AAE5D,QAAO,KAAK,MAAM,gBAAgB,mBAAmB,YAAY;;;;;;;;;;;;;;;;;;;;;;ACjElE,IAAa,qBAAb,cAAwC,MAAM;CAC7C,AAAS;CAET,YAAY,SAAiB,MAAc;AAC1C,QAAM,GAAG,QAAQ,MAAM,OAAO;AAC9B,OAAK,OAAO;AACZ,OAAK,OAAO;;;AAOd,SAAgB,aAAa,GAAW,GAAmB;AAC1D,KAAI,MAAM,EAAG,QAAO;AACpB,QAAO,IAAI,IAAI,KAAK;;AAGrB,SAAgB,cAAc,OAAgB,UAAiC,EAAE,EAAU;CAC1F,MAAM,WAAW,QAAQ,YAAY,gBAAgB;CACrD,MAAM,QAAkB,EAAE;AAC1B,OAAM,OAAO,OAAO,GAAG,UAAU,IAAI;AACrC,QAAO,MAAM,KAAK,GAAG;;AAGtB,SAAS,MAAM,OAAgB,KAAe,OAAe,UAAkB,MAAoB;AAClG,KAAI,UAAU,MAAM;AACnB,MAAI,KAAK,OAAO;AAChB;;AAED,SAAQ,OAAO,OAAf;EACC,KAAK;AACJ,OAAI,KAAK,KAAK,UAAU,MAAM,CAAC;AAC/B;EACD,KAAK;AACJ,OAAI,CAAC,OAAO,SAAS,MAAM,CAAE,OAAM,IAAI,mBAAmB,qBAAqB,KAAK;AACpF,OAAI,KAAK,KAAK,UAAU,MAAM,CAAC;AAC/B;EACD,KAAK;AACJ,OAAI,KAAK,QAAQ,SAAS,QAAQ;AAClC;EACD,KAAK,SACJ;EACD,QACC,OAAM,IAAI,mBAAmB,eAAe,OAAO,MAAM,SAAS,KAAK;;AAGzE,KAAI,QAAQ,IAAI,SACf,OAAM,IAAI,mBAAmB,uBAAuB,YAAY,KAAK;AAGtE,KAAI,MAAM,QAAQ,MAAM,EAAE;AACzB,MAAI,KAAK,IAAI;AACb,OAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AAClD,OAAI,QAAQ,EAAG,KAAI,KAAK,IAAI;GAC5B,MAAM,OAAgB,MAAM;AAC5B,OAAI,SAAS,OACZ,OAAM,IAAI,mBAAmB,wBAAwB,GAAG,KAAK,GAAG,MAAM,GAAG;AAC1E,SAAM,MAAM,KAAK,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG;;AAE3D,MAAI,KAAK,IAAI;AACb;;CAGD,MAAM,YAAqB,OAAO,eAAe,MAAM;AACvD,KAAI,cAAc,OAAO,aAAa,cAAc,KACnD,OAAM,IAAI,mBAAmB,oBAAoB,KAAK;CAGvD,MAAM,UADoC,OAAO,QAAQ,MAAM,CAE7D,QAAQ,GAAG,UAAU,SAAS,OAAU,CACxC,UAAU,CAAC,IAAI,CAAC,OAAO,aAAa,GAAG,EAAE,CAAC;AAC5C,KAAI,KAAK,IAAI;AACb,SAAQ,SAAS,CAAC,KAAK,OAAO,UAAU;AACvC,MAAI,QAAQ,EAAG,KAAI,KAAK,IAAI;AAC5B,MAAI,KAAK,KAAK,UAAU,IAAI,EAAE,IAAI;AAClC,QAAM,MAAM,KAAK,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM;GACtD;AACF,KAAI,KAAK,IAAI;;;;;;;AAQd,SAAgB,iBAAiB,MAAc,QAAgB,gBAAgB,WAAmB;CACjG,IAAI,QAAQ;CACZ,IAAI,MAAM;CACV,IAAI,WAAW;AACf,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;EACjD,MAAM,OAAO,KAAK,WAAW,MAAM;AACnC,MAAI,UAAU;AACb,OAAI,SAAS,GAAM;YACV,SAAS,GAAM,YAAW;AACnC;;AAED,MAAI,SAAS,GAAM,YAAW;WACrB,SAAS,OAAQ,SAAS,IAAM;AACxC;AACA,OAAI,QAAQ,KAAK;AAChB,UAAM;AACN,QAAI,MAAM,MAAO,QAAO,OAAO;;aAEtB,SAAS,OAAQ,SAAS,GAAM;;AAE5C,QAAO;;;;;;;;AASR,SAAgB,mBAAmB,MAAc,UAAiC,EAAE,EAAW;CAC9F,MAAM,WAAW,QAAQ,YAAY,gBAAgB;AACrD,KAAI,iBAAiB,MAAM,SAAS,GAAG,SACtC,OAAM,IAAI,mBAAmB,uBAAuB,YAAY,IAAI;CAErE,IAAI;AACJ,KAAI;AACH,WAAS,KAAK,MAAM,KAAK;SAClB;AACP,QAAM,IAAI,mBAAmB,gBAAgB,IAAI;;AAElD,KAAI,cAAc,QAAQ,EAAE,UAAU,CAAC,KAAK,KAC3C,OAAM,IAAI,mBAAmB,iCAAiC,IAAI;AAEnE,QAAO"}

package/dist/capture-triggers-D7g3fOZj.mjs

@@ -1,362 +0,0 @@
-import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
-import { u as isPostgres, y as tableExists } from "./dialect-helpers-7_IqPdh9.mjs";
-import { sql } from "kysely";
-
-//#region src/media/usage/capture-triggers.ts
-const POSTGRES_TRIGGER_FUNCTION = "emdash_media_usage_capture_work";
-const POSTGRES_IDENTIFIER_LIMIT = 63;
-const CAPTURE_TRIGGER_VERSION = 1;
-const OWNED_TRIGGER_PREFIX = "emdash_mu_";
-const MAX_OWNED_CAPTURE_TRIGGERS = 100;
-const WHITESPACE_PATTERN = /\s+/g;
-const TRAILING_SEMICOLON_PATTERN = /;$/;
-async function installMediaUsageCaptureTriggers(db, identity, options = {}) {
-	const identifiers = await captureIdentifiers(identity);
-	if (isPostgres(db)) await installPostgresFunction(db);
-	const installedNames = await listOwnedCaptureTriggers(db, identifiers.tableName, MAX_OWNED_CAPTURE_TRIGGERS + 1);
-	if (installedNames.length > MAX_OWNED_CAPTURE_TRIGGERS) throw new Error("Media usage capture trigger set exceeds the activation limit");
-	if (await hasExactCaptureTriggers(db, identifiers, identity, installedNames)) return;
-	await assertCaptureLifecycle(db, identity, ["installing"]);
-	const expectedNames = new Set(Object.values(identifiers.triggerNames));
-	const retainedNames = new Set(options.replaceExisting === false ? installedNames.filter((name) => expectedNames.has(name)) : []);
-	await removeCaptureTriggers(db, identifiers.tableName, installedNames.filter((name) => !retainedNames.has(name)));
-	for (const operation of captureOperations) {
-		if (retainedNames.has(identifiers.triggerNames[operation])) continue;
-		if (isPostgres(db)) await postgresCreateTrigger(db, identifiers.tableName, identifiers.triggerNames[operation], operation, identity);
-		else await sqliteCreateTrigger(db, identifiers.tableName, identifiers.triggerNames[operation], operation, identity);
-	}
-	await assertExpectedTriggerSet(db, identifiers, identity);
-}
-async function verifyMediaUsageCaptureTriggers(db, identity) {
-	const identifiers = await captureIdentifiers(identity);
-	if (!await tableExists(db, identifiers.tableName)) return false;
-	return hasExactCaptureTriggers(db, identifiers, identity, await listOwnedCaptureTriggers(db, identifiers.tableName, MAX_OWNED_CAPTURE_TRIGGERS + 1));
-}
-const captureOperations = [
-	"insert",
-	"update",
-	"delete"
-];
-async function captureIdentifiers(identity) {
-	validateIdentifier(identity.collectionSlug, "collection slug");
-	const tableName = `ec_${identity.collectionSlug}`;
-	validateIdentifier(tableName, "content table");
-	const digest = await identityDigest(`${CAPTURE_TRIGGER_VERSION}:${identity.collectionId}:${identity.collectionSlug}`);
-	const triggerNames = {
-		insert: `emdash_mu_${digest}_ai`,
-		update: `emdash_mu_${digest}_au`,
-		delete: `emdash_mu_${digest}_ad`
-	};
-	for (const triggerName of Object.values(triggerNames)) {
-		validateIdentifier(triggerName, "media usage trigger");
-		if (triggerName.length > POSTGRES_IDENTIFIER_LIMIT) throw new Error(`Media usage trigger name exceeds ${POSTGRES_IDENTIFIER_LIMIT} bytes`);
-	}
-	return {
-		tableName,
-		triggerNames
-	};
-}
-async function identityDigest(value) {
-	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
-	return Array.from(new Uint8Array(digest).slice(0, 16), (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
-async function removeCaptureTriggers(db, tableName, triggerNames) {
-	for (const triggerName of triggerNames) {
-		validateIdentifier(triggerName, "media usage trigger");
-		if (isPostgres(db)) await sql`
-				DROP TRIGGER IF EXISTS ${sql.ref(triggerName)} ON ${sql.ref(tableName)}
-			`.execute(db);
-		else await sql`DROP TRIGGER IF EXISTS ${sql.ref(triggerName)}`.execute(db);
-	}
-}
-async function listOwnedCaptureTriggers(db, tableName, limit) {
-	const limitClause = limit === void 0 ? sql`` : sql`LIMIT ${limit}`;
-	if (isPostgres(db)) return (await sql`
-			SELECT trigger.tgname AS name
-			FROM pg_trigger AS trigger
-			INNER JOIN pg_class AS relation ON relation.oid = trigger.tgrelid
-			INNER JOIN pg_namespace AS namespace ON namespace.oid = relation.relnamespace
-			WHERE namespace.nspname = current_schema()
-				AND relation.relname = ${tableName}
-				AND NOT trigger.tgisinternal
-				AND left(trigger.tgname, 10) = ${OWNED_TRIGGER_PREFIX}
-			${limitClause}
-		`.execute(db)).rows.map((row) => row.name);
-	return (await sql`
-		SELECT name
-		FROM sqlite_master
-		WHERE type = 'trigger'
-			AND tbl_name = ${tableName}
-			AND substr(name, 1, 10) = ${OWNED_TRIGGER_PREFIX}
-		${limitClause}
-	`.execute(db)).rows.map((row) => row.name);
-}
-async function hasExactCaptureTriggers(db, identifiers, identity, installedNames) {
-	const expectedNames = new Set(Object.values(identifiers.triggerNames));
-	if (installedNames.length !== expectedNames.size || installedNames.some((name) => !expectedNames.has(name))) return false;
-	if (isPostgres(db)) {
-		const result = await sql`
-			SELECT
-				trigger.tgname AS name,
-				trigger.tgtype AS trigger_type,
-				procedure.proname AS function_name,
-				encode(trigger.tgargs, 'hex') AS arguments_hex,
-				trigger.tgenabled AS enabled,
-				trigger.tgqual IS NOT NULL AS has_when
-			FROM pg_trigger AS trigger
-			INNER JOIN pg_class AS relation ON relation.oid = trigger.tgrelid
-			INNER JOIN pg_namespace AS namespace ON namespace.oid = relation.relnamespace
-			INNER JOIN pg_proc AS procedure ON procedure.oid = trigger.tgfoid
-			INNER JOIN pg_namespace AS function_namespace ON function_namespace.oid = procedure.pronamespace
-			WHERE namespace.nspname = current_schema()
-				AND function_namespace.nspname = current_schema()
-				AND relation.relname = ${identifiers.tableName}
-				AND NOT trigger.tgisinternal
-				AND trigger.tgconstraint = 0
-				AND NOT trigger.tgdeferrable
-				AND NOT trigger.tginitdeferred
-				AND trigger.tgattr = ''::int2vector
-				AND left(trigger.tgname, 10) = ${OWNED_TRIGGER_PREFIX}
-		`.execute(db);
-		const expectedArguments = triggerArgumentsHex(identity);
-		return captureOperations.every((operation) => {
-			const row = result.rows.find((candidate) => candidate.name === identifiers.triggerNames[operation]);
-			return row?.function_name === POSTGRES_TRIGGER_FUNCTION && Number(row.trigger_type) === postgresTriggerType(operation) && row.arguments_hex === expectedArguments && row.enabled === "O" && row.has_when === false;
-		});
-	}
-	const result = await sql`
-		SELECT name, sql AS definition
-		FROM sqlite_master
-		WHERE type = 'trigger'
-			AND tbl_name = ${identifiers.tableName}
-			AND substr(name, 1, 10) = ${OWNED_TRIGGER_PREFIX}
-	`.execute(db);
-	return captureOperations.every((operation) => {
-		const row = result.rows.find((candidate) => candidate.name === identifiers.triggerNames[operation]);
-		const contentId = operation === "delete" ? sql`OLD.id` : sql`NEW.id`;
-		const expected = sqliteTriggerSql(identifiers.tableName, identifiers.triggerNames[operation], operationSql(operation), contentId, identity).compile(db).sql;
-		return row ? normalizeDdl(row.definition) === normalizeDdl(expected) : false;
-	});
-}
-function triggerArgumentsHex(identity) {
-	const bytes = new TextEncoder().encode(`${identity.collectionId}\0${identity.collectionSlug}\0`);
-	return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
-function postgresTriggerType(operation) {
-	switch (operation) {
-		case "insert": return 5;
-		case "update": return 17;
-		case "delete": return 9;
-	}
-}
-function normalizeDdl(definition) {
-	return definition.replace(WHITESPACE_PATTERN, " ").trim().replace(TRAILING_SEMICOLON_PATTERN, "");
-}
-async function assertCaptureLifecycle(db, identity, allowedStates) {
-	const lifecycle = await db.selectFrom("_emdash_media_usage_index_status").select("capture_state").where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", identity.collectionSlug).where("collection_id", "=", identity.collectionId).executeTakeFirst();
-	if (!lifecycle?.capture_state || !allowedStates.includes(lifecycle.capture_state)) throw new Error("Media usage capture trigger changes require a fenced collection lifecycle");
-}
-async function assertExpectedTriggerSet(db, identifiers, identity) {
-	if (!await hasExactCaptureTriggers(db, identifiers, identity, await listOwnedCaptureTriggers(db, identifiers.tableName, MAX_OWNED_CAPTURE_TRIGGERS + 1))) throw new Error("Media usage capture trigger installation is incomplete");
-}
-async function installPostgresFunction(db) {
-	await sql`
-		CREATE OR REPLACE FUNCTION ${sql.ref(POSTGRES_TRIGGER_FUNCTION)}()
-		RETURNS trigger
-		LANGUAGE plpgsql
-		AS $function$
-		DECLARE
-			v_collection_id text := TG_ARGV[0];
-			v_collection_slug text := TG_ARGV[1];
-			v_content_id text;
-			v_epoch bigint;
-			v_now text := to_char(
-				clock_timestamp() AT TIME ZONE 'UTC',
-				'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'
-			);
-		BEGIN
-			IF TG_OP = 'DELETE' THEN
-				v_content_id := OLD.id;
-			ELSE
-				v_content_id := NEW.id;
-			END IF;
-
-			UPDATE _emdash_media_usage_index_status
-			SET change_epoch = change_epoch + 1,
-				status = CASE WHEN status = 'complete' THEN 'stale' ELSE status END,
-				completed_at = CASE WHEN status = 'complete' THEN NULL ELSE completed_at END,
-				updated_at = v_now
-			WHERE adapter_id = 'content-media'
-				AND scope_type = 'collection'
-				AND scope_key = v_collection_slug
-				AND collection_id = v_collection_id
-				AND capture_state = 'active'
-				AND EXISTS (
-					SELECT 1
-					FROM _emdash_collections AS collection
-					WHERE collection.id = v_collection_id
-						AND collection.slug = v_collection_slug
-				)
-			RETURNING change_epoch INTO v_epoch;
-
-			IF NOT FOUND THEN
-				RAISE EXCEPTION USING
-					ERRCODE = 'P0001',
-					MESSAGE = 'media usage capture inactive';
-			END IF;
-
-			INSERT INTO _emdash_media_usage_work (
-				collection_id,
-				collection_slug,
-				content_id,
-				change_epoch,
-				work_version,
-				state,
-				attempt_count,
-				next_attempt_at,
-				lease_token,
-				lease_expires_at,
-				last_attempted_at,
-				last_error_code,
-				created_at,
-				updated_at
-			)
-			VALUES (
-				v_collection_id,
-				v_collection_slug,
-				v_content_id,
-				v_epoch,
-				1,
-				'pending',
-				0,
-				v_now,
-				NULL,
-				NULL,
-				NULL,
-				NULL,
-				v_now,
-				v_now
-			)
-			ON CONFLICT (collection_id, content_id) DO UPDATE SET
-				collection_slug = EXCLUDED.collection_slug,
-				change_epoch = EXCLUDED.change_epoch,
-				work_version = _emdash_media_usage_work.work_version + 1,
-				state = 'pending',
-				attempt_count = 0,
-				next_attempt_at = EXCLUDED.next_attempt_at,
-				lease_token = NULL,
-				lease_expires_at = NULL,
-				last_attempted_at = NULL,
-				last_error_code = NULL,
-				updated_at = EXCLUDED.updated_at;
-
-			RETURN NULL;
-		END;
-		$function$
-	`.execute(db);
-}
-async function postgresCreateTrigger(db, tableName, triggerName, operation, identity) {
-	await sql`
-		CREATE TRIGGER ${sql.ref(triggerName)}
-		AFTER ${operationSql(operation)} ON ${sql.ref(tableName)}
-		FOR EACH ROW
-		EXECUTE FUNCTION ${sql.ref(POSTGRES_TRIGGER_FUNCTION)}(
-			${sql.lit(identity.collectionId)},
-			${sql.lit(identity.collectionSlug)}
-		)
-	`.execute(db);
-}
-async function sqliteCreateTrigger(db, tableName, triggerName, operation, identity) {
-	const contentId = operation === "delete" ? sql`OLD.id` : sql`NEW.id`;
-	await sqliteTriggerSql(tableName, triggerName, operationSql(operation), contentId, identity).execute(db);
-}
-function sqliteTriggerSql(tableName, triggerName, operation, contentId, identity) {
-	return sql`
-		CREATE TRIGGER ${sql.ref(triggerName)}
-		AFTER ${operation} ON ${sql.ref(tableName)}
-		FOR EACH ROW
-		BEGIN
-			UPDATE _emdash_media_usage_index_status
-			SET change_epoch = change_epoch + 1,
-				status = CASE WHEN status = 'complete' THEN 'stale' ELSE status END,
-				completed_at = CASE WHEN status = 'complete' THEN NULL ELSE completed_at END,
-				updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
-			WHERE adapter_id = 'content-media'
-				AND scope_type = 'collection'
-				AND scope_key = ${sql.lit(identity.collectionSlug)}
-				AND collection_id = ${sql.lit(identity.collectionId)}
-				AND capture_state = 'active'
-				AND EXISTS (
-					SELECT 1
-					FROM _emdash_collections AS collection
-					WHERE collection.id = ${sql.lit(identity.collectionId)}
-						AND collection.slug = ${sql.lit(identity.collectionSlug)}
-				);
-
-			SELECT CASE
-				WHEN changes() <> 1 THEN RAISE(ABORT, 'media usage capture inactive')
-			END;
-
-			INSERT INTO _emdash_media_usage_work (
-				collection_id,
-				collection_slug,
-				content_id,
-				change_epoch,
-				work_version,
-				state,
-				attempt_count,
-				next_attempt_at,
-				lease_token,
-				lease_expires_at,
-				last_attempted_at,
-				last_error_code,
-				created_at,
-				updated_at
-			)
-			SELECT
-				${sql.lit(identity.collectionId)},
-				${sql.lit(identity.collectionSlug)},
-				${contentId},
-				change_epoch,
-				1,
-				'pending',
-				0,
-				strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
-				NULL,
-				NULL,
-				NULL,
-				NULL,
-				strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
-				strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
-			FROM _emdash_media_usage_index_status
-			WHERE adapter_id = 'content-media'
-				AND scope_type = 'collection'
-				AND scope_key = ${sql.lit(identity.collectionSlug)}
-				AND collection_id = ${sql.lit(identity.collectionId)}
-				AND capture_state = 'active'
-			ON CONFLICT (collection_id, content_id) DO UPDATE SET
-				collection_slug = excluded.collection_slug,
-				change_epoch = excluded.change_epoch,
-				work_version = _emdash_media_usage_work.work_version + 1,
-				state = 'pending',
-				attempt_count = 0,
-				next_attempt_at = excluded.next_attempt_at,
-				lease_token = NULL,
-				lease_expires_at = NULL,
-				last_attempted_at = NULL,
-				last_error_code = NULL,
-				updated_at = excluded.updated_at;
-		END
-	`;
-}
-function operationSql(operation) {
-	switch (operation) {
-		case "insert": return sql`INSERT`;
-		case "update": return sql`UPDATE`;
-		case "delete": return sql`DELETE`;
-	}
-}
-
-//#endregion
-export { verifyMediaUsageCaptureTriggers as n, installMediaUsageCaptureTriggers as t };
-//# sourceMappingURL=capture-triggers-D7g3fOZj.mjs.map

package/dist/capture-triggers-D7g3fOZj.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"capture-triggers-D7g3fOZj.mjs","names":[],"sources":["../src/media/usage/capture-triggers.ts"],"sourcesContent":["import { sql, type Kysely, type RawBuilder } from \"kysely\";\n\nimport { isPostgres, tableExists } from \"../../database/dialect-helpers.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\n\nconst POSTGRES_TRIGGER_FUNCTION = \"emdash_media_usage_capture_work\";\nconst POSTGRES_IDENTIFIER_LIMIT = 63;\nconst CAPTURE_TRIGGER_VERSION = 1;\nconst OWNED_TRIGGER_PREFIX = \"emdash_mu_\";\nconst MAX_OWNED_CAPTURE_TRIGGERS = 100;\nconst WHITESPACE_PATTERN = /\\s+/g;\nconst TRAILING_SEMICOLON_PATTERN = /;$/;\n\nexport interface MediaUsageCaptureIdentity {\n\tcollectionId: string;\n\tcollectionSlug: string;\n}\n\ntype CaptureOperation = \"insert\" | \"update\" | \"delete\";\n\nexport async function installMediaUsageCaptureTriggers(\n\tdb: Kysely<Database>,\n\tidentity: MediaUsageCaptureIdentity,\n\toptions: { replaceExisting?: boolean } = {},\n): Promise<void> {\n\tconst identifiers = await captureIdentifiers(identity);\n\tif (isPostgres(db)) await installPostgresFunction(db);\n\tconst installedNames = await listOwnedCaptureTriggers(\n\t\tdb,\n\t\tidentifiers.tableName,\n\t\tMAX_OWNED_CAPTURE_TRIGGERS + 1,\n\t);\n\tif (installedNames.length > MAX_OWNED_CAPTURE_TRIGGERS) {\n\t\tthrow new Error(\"Media usage capture trigger set exceeds the activation limit\");\n\t}\n\tif (await hasExactCaptureTriggers(db, identifiers, identity, installedNames)) {\n\t\treturn;\n\t}\n\n\tawait assertCaptureLifecycle(db, identity, [\"installing\"]);\n\tconst expectedNames = new Set(Object.values(identifiers.triggerNames));\n\tconst retainedNames = new Set(\n\t\toptions.replaceExisting === false\n\t\t\t? installedNames.filter((name) => expectedNames.has(name))\n\t\t\t: [],\n\t);\n\tawait removeCaptureTriggers(\n\t\tdb,\n\t\tidentifiers.tableName,\n\t\tinstalledNames.filter((name) => !retainedNames.has(name)),\n\t);\n\n\tfor (const operation of captureOperations) {\n\t\tif (retainedNames.has(identifiers.triggerNames[operation])) continue;\n\t\tif (isPostgres(db)) {\n\t\t\tawait postgresCreateTrigger(\n\t\t\t\tdb,\n\t\t\t\tidentifiers.tableName,\n\t\t\t\tidentifiers.triggerNames[operation],\n\t\t\t\toperation,\n\t\t\t\tidentity,\n\t\t\t);\n\t\t} else {\n\t\t\tawait sqliteCreateTrigger(\n\t\t\t\tdb,\n\t\t\t\tidentifiers.tableName,\n\t\t\t\tidentifiers.triggerNames[operation],\n\t\t\t\toperation,\n\t\t\t\tidentity,\n\t\t\t);\n\t\t}\n\t}\n\n\tawait assertExpectedTriggerSet(db, identifiers, identity);\n}\n\nexport async function verifyMediaUsageCaptureTriggers(\n\tdb: Kysely<Database>,\n\tidentity: MediaUsageCaptureIdentity,\n): Promise<boolean> {\n\tconst identifiers = await captureIdentifiers(identity);\n\tif (!(await tableExists(db, identifiers.tableName))) return false;\n\treturn hasExactCaptureTriggers(\n\t\tdb,\n\t\tidentifiers,\n\t\tidentity,\n\t\tawait listOwnedCaptureTriggers(db, identifiers.tableName, MAX_OWNED_CAPTURE_TRIGGERS + 1),\n\t);\n}\n\nexport async function removeMediaUsageCaptureTriggers(\n\tdb: Kysely<Database>,\n\tidentity: MediaUsageCaptureIdentity,\n): Promise<void> {\n\tconst identifiers = await captureIdentifiers(identity);\n\tif (!(await tableExists(db, identifiers.tableName))) return;\n\tawait assertCaptureLifecycle(db, identity, [\"installing\", \"deleting\"]);\n\tawait removeCaptureTriggers(\n\t\tdb,\n\t\tidentifiers.tableName,\n\t\tawait listOwnedCaptureTriggers(db, identifiers.tableName),\n\t);\n}\n\nconst captureOperations: readonly CaptureOperation[] = [\"insert\", \"update\", \"delete\"];\n\nasync function captureIdentifiers(identity: MediaUsageCaptureIdentity): Promise<{\n\ttableName: string;\n\ttriggerNames: Record<CaptureOperation, string>;\n}> {\n\tvalidateIdentifier(identity.collectionSlug, \"collection slug\");\n\tconst tableName = `ec_${identity.collectionSlug}`;\n\tvalidateIdentifier(tableName, \"content table\");\n\n\tconst digest = await identityDigest(\n\t\t`${CAPTURE_TRIGGER_VERSION}:${identity.collectionId}:${identity.collectionSlug}`,\n\t);\n\tconst triggerNames = {\n\t\tinsert: `emdash_mu_${digest}_ai`,\n\t\tupdate: `emdash_mu_${digest}_au`,\n\t\tdelete: `emdash_mu_${digest}_ad`,\n\t};\n\tfor (const triggerName of Object.values(triggerNames)) {\n\t\tvalidateIdentifier(triggerName, \"media usage trigger\");\n\t\tif (triggerName.length > POSTGRES_IDENTIFIER_LIMIT) {\n\t\t\tthrow new Error(`Media usage trigger name exceeds ${POSTGRES_IDENTIFIER_LIMIT} bytes`);\n\t\t}\n\t}\n\n\treturn { tableName, triggerNames };\n}\n\nasync function identityDigest(value: string): Promise<string> {\n\tconst digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value));\n\treturn Array.from(new Uint8Array(digest).slice(0, 16), (byte) =>\n\t\tbyte.toString(16).padStart(2, \"0\"),\n\t).join(\"\");\n}\n\nasync function removeCaptureTriggers(\n\tdb: Kysely<Database>,\n\ttableName: string,\n\ttriggerNames: readonly string[],\n): Promise<void> {\n\tfor (const triggerName of triggerNames) {\n\t\tvalidateIdentifier(triggerName, \"media usage trigger\");\n\t\tif (isPostgres(db)) {\n\t\t\tawait sql`\n\t\t\t\tDROP TRIGGER IF EXISTS ${sql.ref(triggerName)} ON ${sql.ref(tableName)}\n\t\t\t`.execute(db);\n\t\t} else {\n\t\t\tawait sql`DROP TRIGGER IF EXISTS ${sql.ref(triggerName)}`.execute(db);\n\t\t}\n\t}\n}\n\nasync function listOwnedCaptureTriggers(\n\tdb: Kysely<Database>,\n\ttableName: string,\n\tlimit?: number,\n): Promise<string[]> {\n\tconst limitClause = limit === undefined ? sql`` : sql`LIMIT ${limit}`;\n\tif (isPostgres(db)) {\n\t\tconst result = await sql<{ name: string }>`\n\t\t\tSELECT trigger.tgname AS name\n\t\t\tFROM pg_trigger AS trigger\n\t\t\tINNER JOIN pg_class AS relation ON relation.oid = trigger.tgrelid\n\t\t\tINNER JOIN pg_namespace AS namespace ON namespace.oid = relation.relnamespace\n\t\t\tWHERE namespace.nspname = current_schema()\n\t\t\t\tAND relation.relname = ${tableName}\n\t\t\t\tAND NOT trigger.tgisinternal\n\t\t\t\tAND left(trigger.tgname, 10) = ${OWNED_TRIGGER_PREFIX}\n\t\t\t${limitClause}\n\t\t`.execute(db);\n\t\treturn result.rows.map((row) => row.name);\n\t}\n\n\tconst result = await sql<{ name: string }>`\n\t\tSELECT name\n\t\tFROM sqlite_master\n\t\tWHERE type = 'trigger'\n\t\t\tAND tbl_name = ${tableName}\n\t\t\tAND substr(name, 1, 10) = ${OWNED_TRIGGER_PREFIX}\n\t\t${limitClause}\n\t`.execute(db);\n\treturn result.rows.map((row) => row.name);\n}\n\nasync function hasExactCaptureTriggers(\n\tdb: Kysely<Database>,\n\tidentifiers: {\n\t\ttableName: string;\n\t\ttriggerNames: Record<CaptureOperation, string>;\n\t},\n\tidentity: MediaUsageCaptureIdentity,\n\tinstalledNames: readonly string[],\n): Promise<boolean> {\n\tconst expectedNames = new Set(Object.values(identifiers.triggerNames));\n\tif (\n\t\tinstalledNames.length !== expectedNames.size ||\n\t\tinstalledNames.some((name) => !expectedNames.has(name))\n\t) {\n\t\treturn false;\n\t}\n\n\tif (isPostgres(db)) {\n\t\tconst result = await sql<{\n\t\t\tname: string;\n\t\t\ttrigger_type: number;\n\t\t\tfunction_name: string;\n\t\t\targuments_hex: string;\n\t\t\tenabled: string;\n\t\t\thas_when: boolean;\n\t\t}>`\n\t\t\tSELECT\n\t\t\t\ttrigger.tgname AS name,\n\t\t\t\ttrigger.tgtype AS trigger_type,\n\t\t\t\tprocedure.proname AS function_name,\n\t\t\t\tencode(trigger.tgargs, 'hex') AS arguments_hex,\n\t\t\t\ttrigger.tgenabled AS enabled,\n\t\t\t\ttrigger.tgqual IS NOT NULL AS has_when\n\t\t\tFROM pg_trigger AS trigger\n\t\t\tINNER JOIN pg_class AS relation ON relation.oid = trigger.tgrelid\n\t\t\tINNER JOIN pg_namespace AS namespace ON namespace.oid = relation.relnamespace\n\t\t\tINNER JOIN pg_proc AS procedure ON procedure.oid = trigger.tgfoid\n\t\t\tINNER JOIN pg_namespace AS function_namespace ON function_namespace.oid = procedure.pronamespace\n\t\t\tWHERE namespace.nspname = current_schema()\n\t\t\t\tAND function_namespace.nspname = current_schema()\n\t\t\t\tAND relation.relname = ${identifiers.tableName}\n\t\t\t\tAND NOT trigger.tgisinternal\n\t\t\t\tAND trigger.tgconstraint = 0\n\t\t\t\tAND NOT trigger.tgdeferrable\n\t\t\t\tAND NOT trigger.tginitdeferred\n\t\t\t\tAND trigger.tgattr = ''::int2vector\n\t\t\t\tAND left(trigger.tgname, 10) = ${OWNED_TRIGGER_PREFIX}\n\t\t`.execute(db);\n\t\tconst expectedArguments = triggerArgumentsHex(identity);\n\t\treturn captureOperations.every((operation) => {\n\t\t\tconst row = result.rows.find(\n\t\t\t\t(candidate) => candidate.name === identifiers.triggerNames[operation],\n\t\t\t);\n\t\t\treturn (\n\t\t\t\trow?.function_name === POSTGRES_TRIGGER_FUNCTION &&\n\t\t\t\tNumber(row.trigger_type) === postgresTriggerType(operation) &&\n\t\t\t\trow.arguments_hex === expectedArguments &&\n\t\t\t\trow.enabled === \"O\" &&\n\t\t\t\trow.has_when === false\n\t\t\t);\n\t\t});\n\t}\n\n\tconst result = await sql<{ name: string; definition: string }>`\n\t\tSELECT name, sql AS definition\n\t\tFROM sqlite_master\n\t\tWHERE type = 'trigger'\n\t\t\tAND tbl_name = ${identifiers.tableName}\n\t\t\tAND substr(name, 1, 10) = ${OWNED_TRIGGER_PREFIX}\n\t`.execute(db);\n\treturn captureOperations.every((operation) => {\n\t\tconst row = result.rows.find(\n\t\t\t(candidate) => candidate.name === identifiers.triggerNames[operation],\n\t\t);\n\t\tconst contentId = operation === \"delete\" ? sql`OLD.id` : sql`NEW.id`;\n\t\tconst expected = sqliteTriggerSql(\n\t\t\tidentifiers.tableName,\n\t\t\tidentifiers.triggerNames[operation],\n\t\t\toperationSql(operation),\n\t\t\tcontentId,\n\t\t\tidentity,\n\t\t).compile(db).sql;\n\t\treturn row ? normalizeDdl(row.definition) === normalizeDdl(expected) : false;\n\t});\n}\n\nfunction triggerArgumentsHex(identity: MediaUsageCaptureIdentity): string {\n\tconst bytes = new TextEncoder().encode(`${identity.collectionId}\\0${identity.collectionSlug}\\0`);\n\treturn Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction postgresTriggerType(operation: CaptureOperation): number {\n\tswitch (operation) {\n\t\tcase \"insert\":\n\t\t\treturn 5;\n\t\tcase \"update\":\n\t\t\treturn 17;\n\t\tcase \"delete\":\n\t\t\treturn 9;\n\t}\n}\n\nfunction normalizeDdl(definition: string): string {\n\treturn definition.replace(WHITESPACE_PATTERN, \" \").trim().replace(TRAILING_SEMICOLON_PATTERN, \"\");\n}\n\nasync function assertCaptureLifecycle(\n\tdb: Kysely<Database>,\n\tidentity: MediaUsageCaptureIdentity,\n\tallowedStates: readonly string[],\n): Promise<void> {\n\tconst lifecycle = await db\n\t\t.selectFrom(\"_emdash_media_usage_index_status\")\n\t\t.select(\"capture_state\")\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.executeTakeFirst();\n\tif (!lifecycle?.capture_state || !allowedStates.includes(lifecycle.capture_state)) {\n\t\tthrow new Error(\"Media usage capture trigger changes require a fenced collection lifecycle\");\n\t}\n}\n\nasync function assertExpectedTriggerSet(\n\tdb: Kysely<Database>,\n\tidentifiers: {\n\t\ttableName: string;\n\t\ttriggerNames: Record<CaptureOperation, string>;\n\t},\n\tidentity: MediaUsageCaptureIdentity,\n): Promise<void> {\n\tconst actual = await listOwnedCaptureTriggers(\n\t\tdb,\n\t\tidentifiers.tableName,\n\t\tMAX_OWNED_CAPTURE_TRIGGERS + 1,\n\t);\n\tif (!(await hasExactCaptureTriggers(db, identifiers, identity, actual))) {\n\t\tthrow new Error(\"Media usage capture trigger installation is incomplete\");\n\t}\n}\n\nasync function installPostgresFunction(db: Kysely<Database>): Promise<void> {\n\tawait sql`\n\t\tCREATE OR REPLACE FUNCTION ${sql.ref(POSTGRES_TRIGGER_FUNCTION)}()\n\t\tRETURNS trigger\n\t\tLANGUAGE plpgsql\n\t\tAS $function$\n\t\tDECLARE\n\t\t\tv_collection_id text := TG_ARGV[0];\n\t\t\tv_collection_slug text := TG_ARGV[1];\n\t\t\tv_content_id text;\n\t\t\tv_epoch bigint;\n\t\t\tv_now text := to_char(\n\t\t\t\tclock_timestamp() AT TIME ZONE 'UTC',\n\t\t\t\t'YYYY-MM-DD\"T\"HH24:MI:SS.MS\"Z\"'\n\t\t\t);\n\t\tBEGIN\n\t\t\tIF TG_OP = 'DELETE' THEN\n\t\t\t\tv_content_id := OLD.id;\n\t\t\tELSE\n\t\t\t\tv_content_id := NEW.id;\n\t\t\tEND IF;\n\n\t\t\tUPDATE _emdash_media_usage_index_status\n\t\t\tSET change_epoch = change_epoch + 1,\n\t\t\t\tstatus = CASE WHEN status = 'complete' THEN 'stale' ELSE status END,\n\t\t\t\tcompleted_at = CASE WHEN status = 'complete' THEN NULL ELSE completed_at END,\n\t\t\t\tupdated_at = v_now\n\t\t\tWHERE adapter_id = 'content-media'\n\t\t\t\tAND scope_type = 'collection'\n\t\t\t\tAND scope_key = v_collection_slug\n\t\t\t\tAND collection_id = v_collection_id\n\t\t\t\tAND capture_state = 'active'\n\t\t\t\tAND EXISTS (\n\t\t\t\t\tSELECT 1\n\t\t\t\t\tFROM _emdash_collections AS collection\n\t\t\t\t\tWHERE collection.id = v_collection_id\n\t\t\t\t\t\tAND collection.slug = v_collection_slug\n\t\t\t\t)\n\t\t\tRETURNING change_epoch INTO v_epoch;\n\n\t\t\tIF NOT FOUND THEN\n\t\t\t\tRAISE EXCEPTION USING\n\t\t\t\t\tERRCODE = 'P0001',\n\t\t\t\t\tMESSAGE = 'media usage capture inactive';\n\t\t\tEND IF;\n\n\t\t\tINSERT INTO _emdash_media_usage_work (\n\t\t\t\tcollection_id,\n\t\t\t\tcollection_slug,\n\t\t\t\tcontent_id,\n\t\t\t\tchange_epoch,\n\t\t\t\twork_version,\n\t\t\t\tstate,\n\t\t\t\tattempt_count,\n\t\t\t\tnext_attempt_at,\n\t\t\t\tlease_token,\n\t\t\t\tlease_expires_at,\n\t\t\t\tlast_attempted_at,\n\t\t\t\tlast_error_code,\n\t\t\t\tcreated_at,\n\t\t\t\tupdated_at\n\t\t\t)\n\t\t\tVALUES (\n\t\t\t\tv_collection_id,\n\t\t\t\tv_collection_slug,\n\t\t\t\tv_content_id,\n\t\t\t\tv_epoch,\n\t\t\t\t1,\n\t\t\t\t'pending',\n\t\t\t\t0,\n\t\t\t\tv_now,\n\t\t\t\tNULL,\n\t\t\t\tNULL,\n\t\t\t\tNULL,\n\t\t\t\tNULL,\n\t\t\t\tv_now,\n\t\t\t\tv_now\n\t\t\t)\n\t\t\tON CONFLICT (collection_id, content_id) DO UPDATE SET\n\t\t\t\tcollection_slug = EXCLUDED.collection_slug,\n\t\t\t\tchange_epoch = EXCLUDED.change_epoch,\n\t\t\t\twork_version = _emdash_media_usage_work.work_version + 1,\n\t\t\t\tstate = 'pending',\n\t\t\t\tattempt_count = 0,\n\t\t\t\tnext_attempt_at = EXCLUDED.next_attempt_at,\n\t\t\t\tlease_token = NULL,\n\t\t\t\tlease_expires_at = NULL,\n\t\t\t\tlast_attempted_at = NULL,\n\t\t\t\tlast_error_code = NULL,\n\t\t\t\tupdated_at = EXCLUDED.updated_at;\n\n\t\t\tRETURN NULL;\n\t\tEND;\n\t\t$function$\n\t`.execute(db);\n}\n\nasync function postgresCreateTrigger(\n\tdb: Kysely<Database>,\n\ttableName: string,\n\ttriggerName: string,\n\toperation: CaptureOperation,\n\tidentity: MediaUsageCaptureIdentity,\n): Promise<void> {\n\tawait sql`\n\t\tCREATE TRIGGER ${sql.ref(triggerName)}\n\t\tAFTER ${operationSql(operation)} ON ${sql.ref(tableName)}\n\t\tFOR EACH ROW\n\t\tEXECUTE FUNCTION ${sql.ref(POSTGRES_TRIGGER_FUNCTION)}(\n\t\t\t${sql.lit(identity.collectionId)},\n\t\t\t${sql.lit(identity.collectionSlug)}\n\t\t)\n\t`.execute(db);\n}\n\nasync function sqliteCreateTrigger(\n\tdb: Kysely<Database>,\n\ttableName: string,\n\ttriggerName: string,\n\toperation: CaptureOperation,\n\tidentity: MediaUsageCaptureIdentity,\n): Promise<void> {\n\tconst contentId = operation === \"delete\" ? sql`OLD.id` : sql`NEW.id`;\n\tawait sqliteTriggerSql(\n\t\ttableName,\n\t\ttriggerName,\n\t\toperationSql(operation),\n\t\tcontentId,\n\t\tidentity,\n\t).execute(db);\n}\n\nfunction sqliteTriggerSql(\n\ttableName: string,\n\ttriggerName: string,\n\toperation: RawBuilder<unknown>,\n\tcontentId: RawBuilder<unknown>,\n\tidentity: MediaUsageCaptureIdentity,\n): RawBuilder<unknown> {\n\treturn sql`\n\t\tCREATE TRIGGER ${sql.ref(triggerName)}\n\t\tAFTER ${operation} ON ${sql.ref(tableName)}\n\t\tFOR EACH ROW\n\t\tBEGIN\n\t\t\tUPDATE _emdash_media_usage_index_status\n\t\t\tSET change_epoch = change_epoch + 1,\n\t\t\t\tstatus = CASE WHEN status = 'complete' THEN 'stale' ELSE status END,\n\t\t\t\tcompleted_at = CASE WHEN status = 'complete' THEN NULL ELSE completed_at END,\n\t\t\t\tupdated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')\n\t\t\tWHERE adapter_id = 'content-media'\n\t\t\t\tAND scope_type = 'collection'\n\t\t\t\tAND scope_key = ${sql.lit(identity.collectionSlug)}\n\t\t\t\tAND collection_id = ${sql.lit(identity.collectionId)}\n\t\t\t\tAND capture_state = 'active'\n\t\t\t\tAND EXISTS (\n\t\t\t\t\tSELECT 1\n\t\t\t\t\tFROM _emdash_collections AS collection\n\t\t\t\t\tWHERE collection.id = ${sql.lit(identity.collectionId)}\n\t\t\t\t\t\tAND collection.slug = ${sql.lit(identity.collectionSlug)}\n\t\t\t\t);\n\n\t\t\tSELECT CASE\n\t\t\t\tWHEN changes() <> 1 THEN RAISE(ABORT, 'media usage capture inactive')\n\t\t\tEND;\n\n\t\t\tINSERT INTO _emdash_media_usage_work (\n\t\t\t\tcollection_id,\n\t\t\t\tcollection_slug,\n\t\t\t\tcontent_id,\n\t\t\t\tchange_epoch,\n\t\t\t\twork_version,\n\t\t\t\tstate,\n\t\t\t\tattempt_count,\n\t\t\t\tnext_attempt_at,\n\t\t\t\tlease_token,\n\t\t\t\tlease_expires_at,\n\t\t\t\tlast_attempted_at,\n\t\t\t\tlast_error_code,\n\t\t\t\tcreated_at,\n\t\t\t\tupdated_at\n\t\t\t)\n\t\t\tSELECT\n\t\t\t\t${sql.lit(identity.collectionId)},\n\t\t\t\t${sql.lit(identity.collectionSlug)},\n\t\t\t\t${contentId},\n\t\t\t\tchange_epoch,\n\t\t\t\t1,\n\t\t\t\t'pending',\n\t\t\t\t0,\n\t\t\t\tstrftime('%Y-%m-%dT%H:%M:%fZ', 'now'),\n\t\t\t\tNULL,\n\t\t\t\tNULL,\n\t\t\t\tNULL,\n\t\t\t\tNULL,\n\t\t\t\tstrftime('%Y-%m-%dT%H:%M:%fZ', 'now'),\n\t\t\t\tstrftime('%Y-%m-%dT%H:%M:%fZ', 'now')\n\t\t\tFROM _emdash_media_usage_index_status\n\t\t\tWHERE adapter_id = 'content-media'\n\t\t\t\tAND scope_type = 'collection'\n\t\t\t\tAND scope_key = ${sql.lit(identity.collectionSlug)}\n\t\t\t\tAND collection_id = ${sql.lit(identity.collectionId)}\n\t\t\t\tAND capture_state = 'active'\n\t\t\tON CONFLICT (collection_id, content_id) DO UPDATE SET\n\t\t\t\tcollection_slug = excluded.collection_slug,\n\t\t\t\tchange_epoch = excluded.change_epoch,\n\t\t\t\twork_version = _emdash_media_usage_work.work_version + 1,\n\t\t\t\tstate = 'pending',\n\t\t\t\tattempt_count = 0,\n\t\t\t\tnext_attempt_at = excluded.next_attempt_at,\n\t\t\t\tlease_token = NULL,\n\t\t\t\tlease_expires_at = NULL,\n\t\t\t\tlast_attempted_at = NULL,\n\t\t\t\tlast_error_code = NULL,\n\t\t\t\tupdated_at = excluded.updated_at;\n\t\tEND\n\t`;\n}\n\nfunction operationSql(operation: CaptureOperation): RawBuilder<unknown> {\n\tswitch (operation) {\n\t\tcase \"insert\":\n\t\t\treturn sql`INSERT`;\n\t\tcase \"update\":\n\t\t\treturn sql`UPDATE`;\n\t\tcase \"delete\":\n\t\t\treturn sql`DELETE`;\n\t}\n}\n"],"mappings":";;;;;AAMA,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAChC,MAAM,uBAAuB;AAC7B,MAAM,6BAA6B;AACnC,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AASnC,eAAsB,iCACrB,IACA,UACA,UAAyC,EAAE,EAC3B;CAChB,MAAM,cAAc,MAAM,mBAAmB,SAAS;AACtD,KAAI,WAAW,GAAG,CAAE,OAAM,wBAAwB,GAAG;CACrD,MAAM,iBAAiB,MAAM,yBAC5B,IACA,YAAY,WACZ,6BAA6B,EAC7B;AACD,KAAI,eAAe,SAAS,2BAC3B,OAAM,IAAI,MAAM,+DAA+D;AAEhF,KAAI,MAAM,wBAAwB,IAAI,aAAa,UAAU,eAAe,CAC3E;AAGD,OAAM,uBAAuB,IAAI,UAAU,CAAC,aAAa,CAAC;CAC1D,MAAM,gBAAgB,IAAI,IAAI,OAAO,OAAO,YAAY,aAAa,CAAC;CACtE,MAAM,gBAAgB,IAAI,IACzB,QAAQ,oBAAoB,QACzB,eAAe,QAAQ,SAAS,cAAc,IAAI,KAAK,CAAC,GACxD,EAAE,CACL;AACD,OAAM,sBACL,IACA,YAAY,WACZ,eAAe,QAAQ,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,CACzD;AAED,MAAK,MAAM,aAAa,mBAAmB;AAC1C,MAAI,cAAc,IAAI,YAAY,aAAa,WAAW,CAAE;AAC5D,MAAI,WAAW,GAAG,CACjB,OAAM,sBACL,IACA,YAAY,WACZ,YAAY,aAAa,YACzB,WACA,SACA;MAED,OAAM,oBACL,IACA,YAAY,WACZ,YAAY,aAAa,YACzB,WACA,SACA;;AAIH,OAAM,yBAAyB,IAAI,aAAa,SAAS;;AAG1D,eAAsB,gCACrB,IACA,UACmB;CACnB,MAAM,cAAc,MAAM,mBAAmB,SAAS;AACtD,KAAI,CAAE,MAAM,YAAY,IAAI,YAAY,UAAU,CAAG,QAAO;AAC5D,QAAO,wBACN,IACA,aACA,UACA,MAAM,yBAAyB,IAAI,YAAY,WAAW,6BAA6B,EAAE,CACzF;;AAiBF,MAAM,oBAAiD;CAAC;CAAU;CAAU;CAAS;AAErF,eAAe,mBAAmB,UAG/B;AACF,oBAAmB,SAAS,gBAAgB,kBAAkB;CAC9D,MAAM,YAAY,MAAM,SAAS;AACjC,oBAAmB,WAAW,gBAAgB;CAE9C,MAAM,SAAS,MAAM,eACpB,GAAG,wBAAwB,GAAG,SAAS,aAAa,GAAG,SAAS,iBAChE;CACD,MAAM,eAAe;EACpB,QAAQ,aAAa,OAAO;EAC5B,QAAQ,aAAa,OAAO;EAC5B,QAAQ,aAAa,OAAO;EAC5B;AACD,MAAK,MAAM,eAAe,OAAO,OAAO,aAAa,EAAE;AACtD,qBAAmB,aAAa,sBAAsB;AACtD,MAAI,YAAY,SAAS,0BACxB,OAAM,IAAI,MAAM,oCAAoC,0BAA0B,QAAQ;;AAIxF,QAAO;EAAE;EAAW;EAAc;;AAGnC,eAAe,eAAe,OAAgC;CAC7D,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,aAAa,CAAC,OAAO,MAAM,CAAC;AACrF,QAAO,MAAM,KAAK,IAAI,WAAW,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,SACvD,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAClC,CAAC,KAAK,GAAG;;AAGX,eAAe,sBACd,IACA,WACA,cACgB;AAChB,MAAK,MAAM,eAAe,cAAc;AACvC,qBAAmB,aAAa,sBAAsB;AACtD,MAAI,WAAW,GAAG,CACjB,OAAM,GAAG;6BACiB,IAAI,IAAI,YAAY,CAAC,MAAM,IAAI,IAAI,UAAU,CAAC;KACtE,QAAQ,GAAG;MAEb,OAAM,GAAG,0BAA0B,IAAI,IAAI,YAAY,GAAG,QAAQ,GAAG;;;AAKxE,eAAe,yBACd,IACA,WACA,OACoB;CACpB,MAAM,cAAc,UAAU,SAAY,GAAG,KAAK,GAAG,SAAS;AAC9D,KAAI,WAAW,GAAG,CAYjB,SAXe,MAAM,GAAqB;;;;;;6BAMf,UAAU;;qCAEF,qBAAqB;KACrD,YAAY;IACb,QAAQ,GAAG,EACC,KAAK,KAAK,QAAQ,IAAI,KAAK;AAW1C,SARe,MAAM,GAAqB;;;;oBAIvB,UAAU;+BACC,qBAAqB;IAChD,YAAY;GACb,QAAQ,GAAG,EACC,KAAK,KAAK,QAAQ,IAAI,KAAK;;AAG1C,eAAe,wBACd,IACA,aAIA,UACA,gBACmB;CACnB,MAAM,gBAAgB,IAAI,IAAI,OAAO,OAAO,YAAY,aAAa,CAAC;AACtE,KACC,eAAe,WAAW,cAAc,QACxC,eAAe,MAAM,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,CAEvD,QAAO;AAGR,KAAI,WAAW,GAAG,EAAE;EACnB,MAAM,SAAS,MAAM,GAOnB;;;;;;;;;;;;;;;6BAeyB,YAAY,UAAU;;;;;;qCAMd,qBAAqB;IACtD,QAAQ,GAAG;EACb,MAAM,oBAAoB,oBAAoB,SAAS;AACvD,SAAO,kBAAkB,OAAO,cAAc;GAC7C,MAAM,MAAM,OAAO,KAAK,MACtB,cAAc,UAAU,SAAS,YAAY,aAAa,WAC3D;AACD,UACC,KAAK,kBAAkB,6BACvB,OAAO,IAAI,aAAa,KAAK,oBAAoB,UAAU,IAC3D,IAAI,kBAAkB,qBACtB,IAAI,YAAY,OAChB,IAAI,aAAa;IAEjB;;CAGH,MAAM,SAAS,MAAM,GAAyC;;;;oBAI3C,YAAY,UAAU;+BACX,qBAAqB;GACjD,QAAQ,GAAG;AACb,QAAO,kBAAkB,OAAO,cAAc;EAC7C,MAAM,MAAM,OAAO,KAAK,MACtB,cAAc,UAAU,SAAS,YAAY,aAAa,WAC3D;EACD,MAAM,YAAY,cAAc,WAAW,GAAG,WAAW,GAAG;EAC5D,MAAM,WAAW,iBAChB,YAAY,WACZ,YAAY,aAAa,YACzB,aAAa,UAAU,EACvB,WACA,SACA,CAAC,QAAQ,GAAG,CAAC;AACd,SAAO,MAAM,aAAa,IAAI,WAAW,KAAK,aAAa,SAAS,GAAG;GACtE;;AAGH,SAAS,oBAAoB,UAA6C;CACzE,MAAM,QAAQ,IAAI,aAAa,CAAC,OAAO,GAAG,SAAS,aAAa,IAAI,SAAS,eAAe,IAAI;AAChG,QAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;AAGhF,SAAS,oBAAoB,WAAqC;AACjE,SAAQ,WAAR;EACC,KAAK,SACJ,QAAO;EACR,KAAK,SACJ,QAAO;EACR,KAAK,SACJ,QAAO;;;AAIV,SAAS,aAAa,YAA4B;AACjD,QAAO,WAAW,QAAQ,oBAAoB,IAAI,CAAC,MAAM,CAAC,QAAQ,4BAA4B,GAAG;;AAGlG,eAAe,uBACd,IACA,UACA,eACgB;CAChB,MAAM,YAAY,MAAM,GACtB,WAAW,mCAAmC,CAC9C,OAAO,gBAAgB,CACvB,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,kBAAkB;AACpB,KAAI,CAAC,WAAW,iBAAiB,CAAC,cAAc,SAAS,UAAU,cAAc,CAChF,OAAM,IAAI,MAAM,4EAA4E;;AAI9F,eAAe,yBACd,IACA,aAIA,UACgB;AAMhB,KAAI,CAAE,MAAM,wBAAwB,IAAI,aAAa,UALtC,MAAM,yBACpB,IACA,YAAY,WACZ,6BAA6B,EAC7B,CACqE,CACrE,OAAM,IAAI,MAAM,yDAAyD;;AAI3E,eAAe,wBAAwB,IAAqC;AAC3E,OAAM,GAAG;+BACqB,IAAI,IAAI,0BAA0B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4F/D,QAAQ,GAAG;;AAGd,eAAe,sBACd,IACA,WACA,aACA,WACA,UACgB;AAChB,OAAM,GAAG;mBACS,IAAI,IAAI,YAAY,CAAC;UAC9B,aAAa,UAAU,CAAC,MAAM,IAAI,IAAI,UAAU,CAAC;;qBAEtC,IAAI,IAAI,0BAA0B,CAAC;KACnD,IAAI,IAAI,SAAS,aAAa,CAAC;KAC/B,IAAI,IAAI,SAAS,eAAe,CAAC;;GAEnC,QAAQ,GAAG;;AAGd,eAAe,oBACd,IACA,WACA,aACA,WACA,UACgB;CAChB,MAAM,YAAY,cAAc,WAAW,GAAG,WAAW,GAAG;AAC5D,OAAM,iBACL,WACA,aACA,aAAa,UAAU,EACvB,WACA,SACA,CAAC,QAAQ,GAAG;;AAGd,SAAS,iBACR,WACA,aACA,WACA,WACA,UACsB;AACtB,QAAO,GAAG;mBACQ,IAAI,IAAI,YAAY,CAAC;UAC9B,UAAU,MAAM,IAAI,IAAI,UAAU,CAAC;;;;;;;;;;sBAUvB,IAAI,IAAI,SAAS,eAAe,CAAC;0BAC7B,IAAI,IAAI,SAAS,aAAa,CAAC;;;;;6BAK5B,IAAI,IAAI,SAAS,aAAa,CAAC;8BAC9B,IAAI,IAAI,SAAS,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;MAwBzD,IAAI,IAAI,SAAS,aAAa,CAAC;MAC/B,IAAI,IAAI,SAAS,eAAe,CAAC;MACjC,UAAU;;;;;;;;;;;;;;;sBAeM,IAAI,IAAI,SAAS,eAAe,CAAC;0BAC7B,IAAI,IAAI,SAAS,aAAa,CAAC;;;;;;;;;;;;;;;;;AAkBzD,SAAS,aAAa,WAAkD;AACvE,SAAQ,WAAR;EACC,KAAK,SACJ,QAAO,GAAG;EACX,KAAK,SACJ,QAAO,GAAG;EACX,KAAK,SACJ,QAAO,GAAG"}

package/dist/challenge-store-Cfjdvw86.mjs

@@ -1,51 +0,0 @@
-//#region src/auth/challenge-store.ts
-function createChallengeStore(db) {
-	return {
-		async set(challenge, data) {
-			const expiresAt = new Date(data.expiresAt).toISOString();
-			await db.insertInto("auth_challenges").values({
-				challenge,
-				type: data.type,
-				user_id: data.userId ?? null,
-				data: data.context ?? null,
-				expires_at: expiresAt
-			}).onConflict((oc) => oc.column("challenge").doUpdateSet({
-				type: data.type,
-				user_id: data.userId ?? null,
-				data: data.context ?? null,
-				expires_at: expiresAt
-			})).execute();
-		},
-		async get(challenge) {
-			const row = await db.selectFrom("auth_challenges").selectAll().where("challenge", "=", challenge).executeTakeFirst();
-			if (!row) return null;
-			const expiresAt = new Date(row.expires_at).getTime();
-			if (expiresAt < Date.now()) {
-				await this.delete(challenge);
-				return null;
-			}
-			return {
-				type: row.type === "registration" ? "registration" : "authentication",
-				userId: row.user_id ?? void 0,
-				expiresAt,
-				...row.data === null ? {} : { context: row.data }
-			};
-		},
-		async delete(challenge) {
-			await db.deleteFrom("auth_challenges").where("challenge", "=", challenge).execute();
-		}
-	};
-}
-/**
-* Clean up expired challenges.
-* Should be called periodically (e.g., on startup, or via cron).
-*/
-async function cleanupExpiredChallenges(db) {
-	const now = (/* @__PURE__ */ new Date()).toISOString();
-	const result = await db.deleteFrom("auth_challenges").where("expires_at", "<", now).executeTakeFirst();
-	return Number(result.numDeletedRows ?? 0);
-}
-
-//#endregion
-export { createChallengeStore as n, cleanupExpiredChallenges as t };
-//# sourceMappingURL=challenge-store-Cfjdvw86.mjs.map