@effect-agent/platform-cloudflare 0.1.0-beta.121 → 0.1.0-beta.123

package/dist/BrowserCredentials.d.mts

@@ -0,0 +1,91 @@
+import { Context, Effect, Schema } from "effect";
+declare namespace BrowserCredentials_d_exports {
+  export { BrowserCredentialAccess, BrowserCredentialMaterial, CardCredential, CredentialAccessError, CredentialAccessRequest, CredentialDispatch, CredentialFieldRole, CredentialFillError, CredentialFillResult, CredentialKind, CredentialOrigin, CredentialTarget, FillCredentialRequest, LoginCredential };
+}
+export declare const CredentialKind: Schema.Literals<readonly ["login", "card"]>;
+export declare const CredentialFieldRole: Schema.Literals<readonly ["username", "password", "card-name", "card-number", "card-expiry", "card-expiry-month", "card-expiry-year", "card-security-code"]>;
+/** Canonical HTTPS origins, including non-default ports. Grants must match exactly. */
+export declare const CredentialOrigin: Schema.String;
+declare const CredentialTarget_base: Schema.Class<CredentialTarget, Schema.Struct<{
+  readonly topOrigin: Schema.String;
+  readonly frameOrigin: Schema.String;
+  readonly recipientOrigin: Schema.String;
+}>, {}>;
+export declare class CredentialTarget extends CredentialTarget_base {}
+declare const FillCredentialRequest_base: Schema.Class<FillCredentialRequest, Schema.Struct<{
+  readonly credential: Schema.NonEmptyString;
+  readonly kind: Schema.Literals<readonly ["login", "card"]>;
+  readonly frame: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
+  readonly fields: Schema.$Array<Schema.Struct<{
+    readonly selector: Schema.NonEmptyString;
+    readonly role: Schema.Literals<readonly ["username", "password", "card-name", "card-number", "card-expiry", "card-expiry-month", "card-expiry-year", "card-security-code"]>;
+  }>>;
+}>, {}>;
+/** Selectors identify one native form. Roles explicitly select material; no field inference occurs. */
+export declare class FillCredentialRequest extends FillCredentialRequest_base {}
+/** Host-only material. Never return or encode it through a Tool, log, trace, or checkpoint. */
+export declare const LoginCredential: Schema.TaggedStruct<"LoginCredential", {
+  readonly username: Schema.Redacted<Schema.NonEmptyString>;
+  readonly password: Schema.Redacted<Schema.NonEmptyString>;
+}>;
+/** Security codes are transient; the host must not persist them. */
+export declare const CardCredential: Schema.TaggedStruct<"CardCredential", {
+  readonly name: Schema.Redacted<Schema.NonEmptyString>;
+  readonly number: Schema.Redacted<Schema.String>;
+  readonly expiry: Schema.Redacted<Schema.NonEmptyString>;
+  readonly expiryMonth: Schema.Redacted<Schema.String>;
+  readonly expiryYear: Schema.Redacted<Schema.String>;
+  readonly securityCode: Schema.optionalKey<Schema.Redacted<Schema.String>>;
+}>;
+export declare const BrowserCredentialMaterial: Schema.Union<readonly [Schema.TaggedStruct<"LoginCredential", {
+  readonly username: Schema.Redacted<Schema.NonEmptyString>;
+  readonly password: Schema.Redacted<Schema.NonEmptyString>;
+}>, Schema.TaggedStruct<"CardCredential", {
+  readonly name: Schema.Redacted<Schema.NonEmptyString>;
+  readonly number: Schema.Redacted<Schema.String>;
+  readonly expiry: Schema.Redacted<Schema.NonEmptyString>;
+  readonly expiryMonth: Schema.Redacted<Schema.String>;
+  readonly expiryYear: Schema.Redacted<Schema.String>;
+  readonly securityCode: Schema.optionalKey<Schema.Redacted<Schema.String>>;
+}>]>;
+export type BrowserCredentialMaterial = typeof BrowserCredentialMaterial.Type;
+declare const CredentialAccessError_base: Schema.Class<CredentialAccessError, Schema.TaggedStruct<"CredentialAccessError", {
+  readonly reason: Schema.Literals<readonly ["denied", "missing-credential", "needs-attention", "busy", "resolver"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class CredentialAccessError extends CredentialAccessError_base {}
+export interface CredentialAccessRequest {
+  readonly credential: string;
+  readonly kind: typeof CredentialKind.Type;
+  readonly target: CredentialTarget;
+  readonly roles: ReadonlyArray<typeof CredentialFieldRole.Type>;
+}
+declare const BrowserCredentialAccess_base: Context.ServiceClass<BrowserCredentialAccess, "@effect-agent/platform-cloudflare/BrowserCredentialAccess", {
+  readonly authorize: (request: CredentialAccessRequest) => Effect.Effect<void, CredentialAccessError>;
+  readonly resolve: (request: CredentialAccessRequest) => Effect.Effect<BrowserCredentialMaterial, CredentialAccessError>;
+}>;
+/**
+ * Invocation-owned authority. Derive caller/ownership from the host, not the public credential
+ * identifier. Authorize the actual merchant, frame, recipient, roles, and side effects of filling.
+ * Repeated checks must consult current grants. Never log or trace resolved material.
+ * Bind caller identity and identifier-to-vault-item selection for the whole invocation; an alias
+ * changing between resolve and authorize must never authorize different material.
+ */
+export declare class BrowserCredentialAccess extends BrowserCredentialAccess_base {}
+export declare const CredentialDispatch: Schema.Literals<readonly ["not-dispatched", "possibly-dispatched", "dispatched"]>;
+declare const CredentialFillResult_base: Schema.Class<CredentialFillResult, Schema.Struct<{
+  readonly dispatch: Schema.Literal<"dispatched">;
+  readonly filled: Schema.Natural;
+}>, {}>;
+/** Filled counts acknowledged assignments, not authentication, submission, or website acceptance. */
+export declare class CredentialFillResult extends CredentialFillResult_base {}
+declare const CredentialFillError_base: Schema.Class<CredentialFillError, Schema.TaggedStruct<"CredentialFillError", {
+  readonly reason: Schema.Literals<readonly ["denied", "missing-credential", "stale-target", "unsupported", "needs-attention", "busy", "provider", "resolver", "timeout"]>;
+  readonly dispatch: Schema.Literals<readonly ["not-dispatched", "possibly-dispatched", "dispatched"]>;
+  readonly filled: Schema.Natural;
+  readonly cleanup: Schema.Literals<readonly ["not-requested", "confirmed", "unconfirmed"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Content-free evidence. A lost reply never authorizes a retry or proves that no write occurred. */
+export declare class CredentialFillError extends CredentialFillError_base {}
+//#endregion
+export { BrowserCredentials_d_exports as t };
+//# sourceMappingURL=BrowserCredentials.d.mts.map

package/dist/BrowserCredentials.mjs

@@ -0,0 +1,120 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Schema } from "effect";
+//#region src/BrowserCredentials.ts
+var BrowserCredentials_exports = /* @__PURE__ */ __exportAll({
+	BrowserCredentialAccess: () => BrowserCredentialAccess,
+	BrowserCredentialMaterial: () => BrowserCredentialMaterial,
+	CardCredential: () => CardCredential,
+	CredentialAccessError: () => CredentialAccessError,
+	CredentialDispatch: () => CredentialDispatch,
+	CredentialFieldRole: () => CredentialFieldRole,
+	CredentialFillError: () => CredentialFillError,
+	CredentialFillResult: () => CredentialFillResult,
+	CredentialKind: () => CredentialKind,
+	CredentialOrigin: () => CredentialOrigin,
+	CredentialTarget: () => CredentialTarget,
+	FillCredentialRequest: () => FillCredentialRequest,
+	LoginCredential: () => LoginCredential
+});
+const Selector = Schema.NonEmptyString.check(Schema.isMaxLength(2048));
+const CredentialKind = Schema.Literals(["login", "card"]);
+const CredentialFieldRole = Schema.Literals([
+	"username",
+	"password",
+	"card-name",
+	"card-number",
+	"card-expiry",
+	"card-expiry-month",
+	"card-expiry-year",
+	"card-security-code"
+]);
+/** Canonical HTTPS origins, including non-default ports. Grants must match exactly. */
+const CredentialOrigin = Schema.String.check(Schema.isMaxLength(2048), Schema.makeFilter((value) => {
+	try {
+		const url = new URL(value);
+		return url.protocol === "https:" && url.origin === value && !url.username && !url.password;
+	} catch {
+		return false;
+	}
+}));
+var CredentialTarget = class extends Schema.Class("CredentialTarget")({
+	topOrigin: CredentialOrigin,
+	frameOrigin: CredentialOrigin,
+	recipientOrigin: CredentialOrigin
+}) {};
+/** Selectors identify one native form. Roles explicitly select material; no field inference occurs. */
+var FillCredentialRequest = class extends Schema.Class("FillCredentialRequest")({
+	credential: Schema.NonEmptyString.check(Schema.isMaxLength(256)),
+	kind: CredentialKind,
+	frame: Schema.optionalKey(Schema.Array(Selector).check(Schema.isMaxLength(8))),
+	fields: Schema.Array(Schema.Struct({
+		selector: Selector,
+		role: CredentialFieldRole
+	})).check(Schema.isMinLength(1), Schema.isMaxLength(8))
+}) {};
+const SecretText = Schema.Redacted(Schema.NonEmptyString.check(Schema.isMaxLength(1024)));
+/** Host-only material. Never return or encode it through a Tool, log, trace, or checkpoint. */
+const LoginCredential = Schema.TaggedStruct("LoginCredential", {
+	username: SecretText,
+	password: SecretText
+});
+/** Security codes are transient; the host must not persist them. */
+const CardCredential = Schema.TaggedStruct("CardCredential", {
+	name: SecretText,
+	number: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\d{12,19}$/))),
+	expiry: SecretText,
+	expiryMonth: Schema.Redacted(Schema.String.check(Schema.isPattern(/^(0[1-9]|1[0-2])$/))),
+	expiryYear: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\d{4}$/))),
+	securityCode: Schema.optionalKey(Schema.Redacted(Schema.String.check(Schema.isPattern(/^\d{3,4}$/))))
+});
+const BrowserCredentialMaterial = Schema.Union([LoginCredential, CardCredential]);
+var CredentialAccessError = class extends Schema.TaggedError()("CredentialAccessError", { reason: Schema.Literals([
+	"denied",
+	"missing-credential",
+	"needs-attention",
+	"busy",
+	"resolver"
+]) }) {};
+/**
+* Invocation-owned authority. Derive caller/ownership from the host, not the public credential
+* identifier. Authorize the actual merchant, frame, recipient, roles, and side effects of filling.
+* Repeated checks must consult current grants. Never log or trace resolved material.
+* Bind caller identity and identifier-to-vault-item selection for the whole invocation; an alias
+* changing between resolve and authorize must never authorize different material.
+*/
+var BrowserCredentialAccess = class extends Context.Service()("@effect-agent/platform-cloudflare/BrowserCredentialAccess") {};
+const CredentialDispatch = Schema.Literals([
+	"not-dispatched",
+	"possibly-dispatched",
+	"dispatched"
+]);
+/** Filled counts acknowledged assignments, not authentication, submission, or website acceptance. */
+var CredentialFillResult = class extends Schema.Class("CredentialFillResult")({
+	dispatch: Schema.Literal("dispatched"),
+	filled: Schema.Natural.check(Schema.isLessThanOrEqualTo(8))
+}) {};
+/** Content-free evidence. A lost reply never authorizes a retry or proves that no write occurred. */
+var CredentialFillError = class extends Schema.TaggedError()("CredentialFillError", {
+	reason: Schema.Literals([
+		"denied",
+		"missing-credential",
+		"stale-target",
+		"unsupported",
+		"needs-attention",
+		"busy",
+		"provider",
+		"resolver",
+		"timeout"
+	]),
+	dispatch: CredentialDispatch,
+	filled: Schema.Natural.check(Schema.isLessThanOrEqualTo(8)),
+	cleanup: Schema.Literals([
+		"not-requested",
+		"confirmed",
+		"unconfirmed"
+	])
+}) {};
+//#endregion
+export { BrowserCredentialAccess, BrowserCredentialMaterial, CardCredential, CredentialAccessError, CredentialDispatch, CredentialFieldRole, CredentialFillError, CredentialFillResult, CredentialKind, CredentialOrigin, CredentialTarget, FillCredentialRequest, LoginCredential, BrowserCredentials_exports as t };
+
+//# sourceMappingURL=BrowserCredentials.mjs.map

package/dist/BrowserCredentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCredentials.mjs","names":[],"sources":["../src/BrowserCredentials.ts"],"sourcesContent":["import { Context, type Effect, Schema } from \"effect\";\n\nconst Selector = Schema.NonEmptyString.check(Schema.isMaxLength(2048));\n\nexport const CredentialKind = Schema.Literals([\"login\", \"card\"]);\n\nexport const CredentialFieldRole = Schema.Literals([\n  \"username\",\n  \"password\",\n  \"card-name\",\n  \"card-number\",\n  \"card-expiry\",\n  \"card-expiry-month\",\n  \"card-expiry-year\",\n  \"card-security-code\",\n]);\n\n/** Canonical HTTPS origins, including non-default ports. Grants must match exactly. */\nexport const CredentialOrigin = Schema.String.check(\n  Schema.isMaxLength(2048),\n  Schema.makeFilter((value) => {\n    try {\n      const url = new URL(value);\n\n      return url.protocol === \"https:\" && url.origin === value && !url.username && !url.password;\n    } catch {\n      return false;\n    }\n  }),\n);\n\nexport class CredentialTarget extends Schema.Class<CredentialTarget>(\"CredentialTarget\")({\n  topOrigin: CredentialOrigin,\n  frameOrigin: CredentialOrigin,\n  recipientOrigin: CredentialOrigin,\n}) {}\n\n/** Selectors identify one native form. Roles explicitly select material; no field inference occurs. */\nexport class FillCredentialRequest extends Schema.Class<FillCredentialRequest>(\n  \"FillCredentialRequest\",\n)({\n  credential: Schema.NonEmptyString.check(Schema.isMaxLength(256)),\n  kind: CredentialKind,\n  frame: Schema.optionalKey(Schema.Array(Selector).check(Schema.isMaxLength(8))),\n  fields: Schema.Array(Schema.Struct({ selector: Selector, role: CredentialFieldRole })).check(\n    Schema.isMinLength(1),\n    Schema.isMaxLength(8),\n  ),\n}) {}\n\nconst SecretText = Schema.Redacted(Schema.NonEmptyString.check(Schema.isMaxLength(1024)));\n\n/** Host-only material. Never return or encode it through a Tool, log, trace, or checkpoint. */\nexport const LoginCredential = Schema.TaggedStruct(\"LoginCredential\", {\n  username: SecretText,\n  password: SecretText,\n});\n\n/** Security codes are transient; the host must not persist them. */\nexport const CardCredential = Schema.TaggedStruct(\"CardCredential\", {\n  name: SecretText,\n  number: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\\d{12,19}$/))),\n  expiry: SecretText,\n  expiryMonth: Schema.Redacted(Schema.String.check(Schema.isPattern(/^(0[1-9]|1[0-2])$/))),\n  expiryYear: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\\d{4}$/))),\n  securityCode: Schema.optionalKey(\n    Schema.Redacted(Schema.String.check(Schema.isPattern(/^\\d{3,4}$/))),\n  ),\n});\n\nexport const BrowserCredentialMaterial = Schema.Union([LoginCredential, CardCredential]);\nexport type BrowserCredentialMaterial = typeof BrowserCredentialMaterial.Type;\n\nexport class CredentialAccessError extends Schema.TaggedError<CredentialAccessError>()(\n  \"CredentialAccessError\",\n  {\n    reason: Schema.Literals([\n      \"denied\",\n      \"missing-credential\",\n      \"needs-attention\",\n      \"busy\",\n      \"resolver\",\n    ]),\n  },\n) {}\n\nexport interface CredentialAccessRequest {\n  readonly credential: string;\n  readonly kind: typeof CredentialKind.Type;\n  readonly target: CredentialTarget;\n  readonly roles: ReadonlyArray<typeof CredentialFieldRole.Type>;\n}\n\n/**\n * Invocation-owned authority. Derive caller/ownership from the host, not the public credential\n * identifier. Authorize the actual merchant, frame, recipient, roles, and side effects of filling.\n * Repeated checks must consult current grants. Never log or trace resolved material.\n * Bind caller identity and identifier-to-vault-item selection for the whole invocation; an alias\n * changing between resolve and authorize must never authorize different material.\n */\nexport class BrowserCredentialAccess extends Context.Service<\n  BrowserCredentialAccess,\n  {\n    readonly authorize: (\n      request: CredentialAccessRequest,\n    ) => Effect.Effect<void, CredentialAccessError>;\n    readonly resolve: (\n      request: CredentialAccessRequest,\n    ) => Effect.Effect<BrowserCredentialMaterial, CredentialAccessError>;\n  }\n>()(\"@effect-agent/platform-cloudflare/BrowserCredentialAccess\") {}\n\nexport const CredentialDispatch = Schema.Literals([\n  \"not-dispatched\",\n  \"possibly-dispatched\",\n  \"dispatched\",\n]);\n\n/** Filled counts acknowledged assignments, not authentication, submission, or website acceptance. */\nexport class CredentialFillResult extends Schema.Class<CredentialFillResult>(\n  \"CredentialFillResult\",\n)({\n  dispatch: Schema.Literal(\"dispatched\"),\n  filled: Schema.Natural.check(Schema.isLessThanOrEqualTo(8)),\n}) {}\n\n/** Content-free evidence. A lost reply never authorizes a retry or proves that no write occurred. */\nexport class CredentialFillError extends Schema.TaggedError<CredentialFillError>()(\n  \"CredentialFillError\",\n  {\n    reason: Schema.Literals([\n      \"denied\",\n      \"missing-credential\",\n      \"stale-target\",\n      \"unsupported\",\n      \"needs-attention\",\n      \"busy\",\n      \"provider\",\n      \"resolver\",\n      \"timeout\",\n    ]),\n    dispatch: CredentialDispatch,\n    filled: Schema.Natural.check(Schema.isLessThanOrEqualTo(8)),\n    cleanup: Schema.Literals([\"not-requested\", \"confirmed\", \"unconfirmed\"]),\n  },\n) {}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAEA,MAAM,WAAW,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC;AAErE,MAAa,iBAAiB,OAAO,SAAS,CAAC,SAAS,MAAM,CAAC;AAE/D,MAAa,sBAAsB,OAAO,SAAS;CACjD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,MAAa,mBAAmB,OAAO,OAAO,MAC5C,OAAO,YAAY,IAAI,GACvB,OAAO,YAAY,UAAU;CAC3B,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EAEzB,OAAO,IAAI,aAAa,YAAY,IAAI,WAAW,SAAS,CAAC,IAAI,YAAY,CAAC,IAAI;CACpF,QAAQ;EACN,OAAO;CACT;AACF,CAAC,CACH;AAEA,IAAa,mBAAb,cAAsC,OAAO,MAAwB,kBAAkB,CAAC,CAAC;CACvF,WAAW;CACX,aAAa;CACb,iBAAiB;AACnB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,wBAAb,cAA2C,OAAO,MAChD,uBACF,CAAC,CAAC;CACA,YAAY,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;CAC/D,MAAM;CACN,OAAO,OAAO,YAAY,OAAO,MAAM,QAAQ,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC,CAAC;CAC7E,QAAQ,OAAO,MAAM,OAAO,OAAO;EAAE,UAAU;EAAU,MAAM;CAAoB,CAAC,CAAC,CAAC,CAAC,MACrF,OAAO,YAAY,CAAC,GACpB,OAAO,YAAY,CAAC,CACtB;AACF,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,aAAa,OAAO,SAAS,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC,CAAC;;AAGxF,MAAa,kBAAkB,OAAO,aAAa,mBAAmB;CACpE,UAAU;CACV,UAAU;AACZ,CAAC;;AAGD,MAAa,iBAAiB,OAAO,aAAa,kBAAkB;CAClE,MAAM;CACN,QAAQ,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,aAAa,CAAC,CAAC;CAC5E,QAAQ;CACR,aAAa,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,mBAAmB,CAAC,CAAC;CACvF,YAAY,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,SAAS,CAAC,CAAC;CAC5E,cAAc,OAAO,YACnB,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,WAAW,CAAC,CAAC,CACpE;AACF,CAAC;AAED,MAAa,4BAA4B,OAAO,MAAM,CAAC,iBAAiB,cAAc,CAAC;AAGvF,IAAa,wBAAb,cAA2C,OAAO,YAAmC,CAAC,CACpF,yBACA,EACE,QAAQ,OAAO,SAAS;CACtB;CACA;CACA;CACA;CACA;AACF,CAAC,EACH,CACF,CAAC,CAAC,CAAC;;;;;;;;AAgBH,IAAa,0BAAb,cAA6C,QAAQ,QAUnD,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC;AAElE,MAAa,qBAAqB,OAAO,SAAS;CAChD;CACA;CACA;AACF,CAAC;;AAGD,IAAa,uBAAb,cAA0C,OAAO,MAC/C,sBACF,CAAC,CAAC;CACA,UAAU,OAAO,QAAQ,YAAY;CACrC,QAAQ,OAAO,QAAQ,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CACE,QAAQ,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,UAAU;CACV,QAAQ,OAAO,QAAQ,MAAM,OAAO,oBAAoB,CAAC,CAAC;CAC1D,SAAS,OAAO,SAAS;EAAC;EAAiB;EAAa;CAAa,CAAC;AACxE,CACF,CAAC,CAAC,CAAC"}