@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/TrustedDevice.js

@@ -0,0 +1,252 @@
+import { Context, Data, Duration, Effect, Layer, Option, Redacted, } from "effect";
+import { AuthSecrets } from "./AuthConfig.js";
+import { Crypto } from "./Crypto.js";
+import { addMillis, currentUnixMillis } from "./Internal.js";
+export class TrustedDeviceError extends Data.TaggedError("TrustedDeviceError") {
+}
+export class TrustedDeviceStore extends Context.Service()("auth/TrustedDeviceStore") {
+}
+(function (TrustedDeviceStore) {
+    TrustedDeviceStore.make = (service) => TrustedDeviceStore.of(service);
+})(TrustedDeviceStore || (TrustedDeviceStore = {}));
+export class TrustedDevice extends Context.Service()("auth/TrustedDevice") {
+}
+(function (TrustedDevice) {
+    TrustedDevice.make = (service) => TrustedDevice.of(service);
+})(TrustedDevice || (TrustedDevice = {}));
+export class TrustedDeviceCookie extends Context.Service()("auth/TrustedDeviceCookie") {
+}
+(function (TrustedDeviceCookie) {
+    TrustedDeviceCookie.make = (service) => TrustedDeviceCookie.of(service);
+})(TrustedDeviceCookie || (TrustedDeviceCookie = {}));
+export const defaultTrustedDeviceTtl = Duration.days(90);
+export const defaultTrustedDeviceTokenBytes = 32;
+const defaultTrustedDeviceCookieOptions = {
+    name: "__Host-auth-device",
+    secure: true,
+    httpOnly: true,
+    sameSite: "lax",
+    path: "/",
+};
+const trustedDeviceHashNamespace = "auth.trusted_device.v1";
+const trustedDeviceKey = (userId, tokenHash) => `${userId}:${tokenHash}`;
+const trustedDeviceHash = (dependencies, userId, token, operation) => dependencies.crypto
+    .hmacSha256({
+    key: dependencies.secret,
+    data: `${trustedDeviceHashNamespace}:${userId}:${Redacted.value(token)}`,
+})
+    .pipe(Effect.mapError((cause) => new TrustedDeviceError({
+    operation,
+    message: "Failed to hash trusted device token",
+    cause,
+})));
+const deviceContext = (status) => ({
+    status,
+});
+const cloneRecord = (record) => ({
+    ...record,
+    ...(record.metadata === undefined
+        ? {}
+        : { metadata: { ...record.metadata } }),
+});
+const compareTrustedDeviceRecords = (left, right) => {
+    const lastSeenAt = Number(right.lastSeenAt) - Number(left.lastSeenAt);
+    return lastSeenAt === 0
+        ? right.tokenHash.localeCompare(left.tokenHash)
+        : lastSeenAt;
+};
+const insertSortedTrustedDeviceRecord = (devices, device) => {
+    const index = devices.findIndex((existing) => compareTrustedDeviceRecords(device, existing) < 0);
+    return index === -1
+        ? [...devices, device]
+        : [...devices.slice(0, index), device, ...devices.slice(index)];
+};
+const sortTrustedDeviceRecords = (devices) => {
+    let sorted = [];
+    for (const device of devices) {
+        sorted = insertSortedTrustedDeviceRecord(sorted, device);
+    }
+    return sorted;
+};
+export const filterTrustedDevicesForUser = (devices, input) => {
+    const limit = input.limit === undefined ? undefined : Math.max(0, Math.floor(input.limit));
+    const filtered = sortTrustedDeviceRecords([...devices]
+        .filter((device) => device.userId === input.userId)
+        .filter((device) => Number(device.expiresAt) > Number(input.now))).map(cloneRecord);
+    return limit === undefined ? filtered : filtered.slice(0, limit);
+};
+export const makeTrustedDeviceStoreMemory = () => {
+    const devices = new Map();
+    return TrustedDeviceStore.make({
+        find: (input) => Effect.sync(() => {
+            const row = devices.get(trustedDeviceKey(input.userId, input.tokenHash));
+            if (row === undefined || Number(row.expiresAt) <= Number(input.now)) {
+                return Option.none();
+            }
+            return Option.some(cloneRecord(row));
+        }),
+        upsert: (input) => Effect.sync(() => {
+            const key = trustedDeviceKey(input.userId, input.tokenHash);
+            const existing = devices.get(key);
+            const row = {
+                userId: input.userId,
+                tokenHash: input.tokenHash,
+                createdAt: existing?.createdAt ?? input.now,
+                lastSeenAt: input.now,
+                expiresAt: input.expiresAt,
+                metadata: input.metadata ?? existing?.metadata,
+            };
+            devices.set(key, row);
+            return cloneRecord(row);
+        }),
+        listForUser: (input) => Effect.sync(() => filterTrustedDevicesForUser(devices.values(), input)),
+        revokeForUser: (input) => Effect.sync(() => {
+            devices.delete(trustedDeviceKey(input.userId, input.tokenHash));
+        }),
+    });
+};
+export const TrustedDeviceStoreMemoryLive = Layer.sync(TrustedDeviceStore)(makeTrustedDeviceStoreMemory);
+export const makeTrustedDevice = (dependencies) => {
+    const ttl = dependencies.ttl ?? defaultTrustedDeviceTtl;
+    const tokenBytes = dependencies.tokenBytes ?? defaultTrustedDeviceTokenBytes;
+    return TrustedDevice.make({
+        status: Effect.fn("auth.trusted_device.status")(function* (input) {
+            if (input.token === undefined) {
+                return deviceContext("unknown");
+            }
+            const now = yield* currentUnixMillis;
+            const tokenHash = yield* trustedDeviceHash(dependencies, input.userId, input.token, "status");
+            const row = yield* dependencies.store.find({
+                userId: input.userId,
+                tokenHash,
+                now,
+            });
+            return deviceContext(Option.isSome(row) ? "known" : "new");
+        }),
+        trust: Effect.fn("auth.trusted_device.trust")(function* (input) {
+            const now = yield* currentUnixMillis;
+            const token = input.token ??
+                Redacted.make(yield* dependencies.crypto.randomToken(tokenBytes).pipe(Effect.mapError((cause) => new TrustedDeviceError({
+                    operation: "trust",
+                    message: "Failed to create trusted device token",
+                    cause,
+                }))));
+            const tokenHash = yield* trustedDeviceHash(dependencies, input.userId, token, "trust");
+            const expiresAt = addMillis(now, Duration.toMillis(input.ttl ?? ttl));
+            yield* dependencies.store.upsert({
+                userId: input.userId,
+                tokenHash,
+                now,
+                expiresAt,
+                metadata: input.metadata,
+            });
+            return {
+                userId: input.userId,
+                token,
+                expiresAt,
+            };
+        }),
+    });
+};
+export function TrustedDeviceLive(options) {
+    return Layer.effect(TrustedDevice)(Effect.gen(function* () {
+        const crypto = yield* Crypto;
+        const store = yield* TrustedDeviceStore;
+        const resolvedOptions = options ??
+            {
+                secret: (yield* AuthSecrets).privacy,
+            };
+        return makeTrustedDevice({
+            ...resolvedOptions,
+            crypto,
+            store,
+        });
+    }));
+}
+const resolveTrustedDeviceCookieOptions = (options = {}) => {
+    const resolved = {
+        ...defaultTrustedDeviceCookieOptions,
+        ...options,
+    };
+    if (resolved.name.startsWith("__Host-")) {
+        return {
+            ...resolved,
+            secure: true,
+            path: "/",
+            domain: undefined,
+        };
+    }
+    return resolved;
+};
+const sameSiteHeaderValue = (sameSite) => {
+    switch (sameSite) {
+        case "strict": {
+            return "Strict";
+        }
+        case "none": {
+            return "None";
+        }
+        case "lax": {
+            return "Lax";
+        }
+    }
+};
+const appendCookieAttributes = (parts, options) => {
+    if (options.httpOnly) {
+        parts.push("HttpOnly");
+    }
+    if (options.secure) {
+        parts.push("Secure");
+    }
+    parts.push(`SameSite=${sameSiteHeaderValue(options.sameSite)}`);
+    parts.push(`Path=${options.path}`);
+    if (options.domain !== undefined) {
+        parts.push(`Domain=${options.domain}`);
+    }
+    return parts;
+};
+const parseCookieValue = (header, name) => {
+    if (header === null) {
+        return undefined;
+    }
+    for (const part of header.split(";")) {
+        const trimmed = part.trim();
+        const separator = trimmed.indexOf("=");
+        if (separator <= 0) {
+            continue;
+        }
+        if (trimmed.slice(0, separator) !== name) {
+            continue;
+        }
+        try {
+            return decodeURIComponent(trimmed.slice(separator + 1));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+};
+const serializeCookie = (options, value, expiresAt) => {
+    const parts = [`${options.name}=${encodeURIComponent(value)}`];
+    if (expiresAt !== undefined) {
+        parts.push(`Expires=${new Date(Number(expiresAt)).toUTCString()}`);
+    }
+    return appendCookieAttributes(parts, options).join("; ");
+};
+const serializeClearCookie = (options) => appendCookieAttributes([`${options.name}=`, "Max-Age=0", "Expires=Thu, 01 Jan 1970 00:00:00 GMT"], options).join("; ");
+export const makeTrustedDeviceCookie = (options) => {
+    const resolved = resolveTrustedDeviceCookieOptions(options);
+    return TrustedDeviceCookie.make({
+        read: (request) => Effect.succeed((() => {
+            const value = parseCookieValue(request.headers.get("Cookie"), resolved.name);
+            return value === undefined
+                ? Option.none()
+                : Option.some(Redacted.make(value));
+        })()),
+        commit: (input) => Effect.succeed(serializeCookie(resolved, Redacted.value(input.token.token), input.token.expiresAt)),
+        clear: Effect.succeed(serializeClearCookie(resolved)),
+    });
+};
+export const TrustedDeviceCookieLive = (options) => Layer.succeed(TrustedDeviceCookie)(makeTrustedDeviceCookie(options));
+//# sourceMappingURL=TrustedDevice.js.map

package/dist/TrustedDevice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustedDevice.js","sourceRoot":"","sources":["../src/TrustedDevice.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,GACT,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AA+D7D,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAI3E;CAAG;AAoBL,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAEjC,WAAiB,kBAAkB;IACpB,uBAAI,GAAG,CAClB,OAAkC,EACP,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC,EAJgB,kBAAkB,KAAlB,kBAAkB,QAIlC;AAWD,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAmBD,MAAM,OAAO,mBAAoB,SAAQ,OAAO,CAAC,OAAO,EAGrD,CAAC,0BAA0B,CAAC;CAAG;AAElC,WAAiB,mBAAmB;IACrB,wBAAI,GAAG,CAClB,OAAmC,EACP,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC,EAJgB,mBAAmB,KAAnB,mBAAmB,QAInC;AA+BD,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,MAAM,iCAAiC,GAAuC;IAC5E,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAE5D,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAU,EAAE,CACrE,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;AAE3B,MAAM,iBAAiB,GAAG,CACxB,YAAkE,EAClE,MAAc,EACd,KAAgC,EAChC,SAAsC,EACtC,EAAE,CACF,YAAY,CAAC,MAAM;KAChB,UAAU,CAAC;IACV,GAAG,EAAE,YAAY,CAAC,MAAM;IACxB,IAAI,EAAE,GAAG,0BAA0B,IAAI,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;CACzE,CAAC;KACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;IACrB,SAAS;IACT,OAAO,EAAE,qCAAqC;IAC9C,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEN,MAAM,aAAa,GAAG,CAAC,MAAyB,EAAsB,EAAE,CAAC,CAAC;IACxE,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,MAA2B,EAAuB,EAAE,CAAC,CAAC;IACzE,GAAG,MAAM;IACT,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,IAAyB,EACzB,KAA0B,EAClB,EAAE;IACV,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtE,OAAO,UAAU,KAAK,CAAC;QACrB,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CACtC,OAAuC,EACvC,MAA2B,EACK,EAAE;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAC7B,CAAC,QAAQ,EAAE,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAChE,CAAC;IAEF,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC;QACtB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,OAAsC,EACN,EAAE;IAClC,IAAI,MAAM,GAAmC,EAAE,CAAC;IAEhD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,OAAsC,EACtC,KAAyC,EACT,EAAE;IAClC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,wBAAwB,CACvC,CAAC,GAAG,OAAO,CAAC;SACT,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;SAClD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CACpE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAEnB,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAA8B,EAAE;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,OAAO,kBAAkB,CAAC,IAAI,CAAC;QAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CACrB,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAChD,CAAC;YAEF,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,GAAG,GAAwB;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,KAAK,CAAC,GAAG;gBAC3C,UAAU,EAAE,KAAK,CAAC,GAAG;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,QAAQ;aAC/C,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAEtB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC;QACJ,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QACzE,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CACvB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACxE,4BAA4B,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE;IACxB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,uBAAuB,CAAC;IACxD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,8BAA8B,CAAC;IAE7E,OAAO,aAAa,CAAC,IAAI,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YAC9D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACxC,YAAY,EACZ,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,EACX,QAAQ,CACT,CAAC;YACF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS;gBACT,GAAG;aACJ,CAAC,CAAC;YAEH,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YAC5D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK;gBACX,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;oBACrB,SAAS,EAAE,OAAO;oBAClB,OAAO,EAAE,uCAAuC;oBAChD,KAAK;iBACN,CAAC,CACL,CACF,CACF,CAAC;YACJ,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACxC,YAAY,EACZ,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,OAAO,CACR,CAAC;YACF,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;YAEtE,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS;gBACT,GAAG;gBACH,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK;gBACL,SAAS;aACV,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAUF,MAAM,UAAU,iBAAiB,CAAC,OAA8B;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;QACxC,MAAM,eAAe,GACnB,OAAO;YACN;gBACC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO;aACL,CAAC;QAEpC,OAAO,iBAAiB,CAAC;YACvB,GAAG,eAAe;YAClB,MAAM;YACN,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,iCAAiC,GAAG,CACxC,UAAsC,EAAE,EACJ,EAAE;IACtC,MAAM,QAAQ,GAAG;QACf,GAAG,iCAAiC;QACpC,GAAG,OAAO;KACX,CAAC;IAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,QAA+B,EAAU,EAAE;IACtE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,KAAe,EACf,OAA2C,EACjC,EAAE;IACZ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAY,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,MAAqB,EACrB,IAAY,EACQ,EAAE;IACtB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,OAA2C,EAC3C,KAAa,EACb,SAAsB,EACd,EAAE;IACV,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,OAA2C,EACnC,EAAE,CACV,sBAAsB,CACpB,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,uCAAuC,CAAC,EAC1E,OAAO,CACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAoC,EACR,EAAE;IAC9B,MAAM,QAAQ,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAE5D,OAAO,mBAAmB,CAAC,IAAI,CAAC;QAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,CAAC,GAAG,EAAE;YACJ,MAAM,KAAK,GAAG,gBAAgB,CAC5B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC7B,QAAQ,CAAC,IAAI,CACd,CAAC;YAEF,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,CACL;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,eAAe,CACb,QAAQ,EACR,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EACjC,KAAK,CAAC,KAAK,CAAC,SAAS,CACtB,CACF;QACH,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;KACtD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAoC,EAAE,EAAE,CAC9E,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/WaitUntil.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WaitUntil.d.ts","sourceRoot":"","sources":["../src/WaitUntil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;;;;AAErD,qBAAa,cAAe,SAAQ,oBAAmC;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB,CAAC;CAAG;AAEL,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;CACxG;;AAED,qBAAa,SAAU,SAAQ,cAAmE;CAAG;AAErG,yBAAiB,SAAS,CAAC;IAClB,MAAM,IAAI,GAAI,SAAS,gBAAgB,KAAG,gBAAyC,CAAA;CAC3F;AAED,eAAO,MAAM,iBAAiB,sCAE3B,CAAA"}
+{"version":3,"file":"WaitUntil.d.ts","sourceRoot":"","sources":["../src/WaitUntil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;;;;AAEtD,qBAAa,cAAe,SAAQ,oBAAmC;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;CAC7C;;AAED,qBAAa,SAAU,SAAQ,cAE9B;CAAG;AAEJ,yBAAiB,SAAS,CAAC;IAClB,MAAM,IAAI,GAAI,SAAS,gBAAgB,KAAG,gBAC1B,CAAC;CACzB;AAED,eAAO,MAAM,iBAAiB,sCAK7B,CAAC"}

package/dist/WaitUntil.js

@@ -7,6 +7,6 @@ export class WaitUntil extends Context.Service()("runtime/WaitUntil") {
     WaitUntil.make = (service) => WaitUntil.of(service);
 })(WaitUntil || (WaitUntil = {}));
 export const WaitUntilNoopLive = Layer.succeed(WaitUntil)(WaitUntil.make({
-    waitUntil: (_effect) => Effect.asVoid(Effect.context())
+    waitUntil: (_effect) => Effect.asVoid(Effect.context()),
 }));
 //# sourceMappingURL=WaitUntil.js.map

package/dist/WaitUntil.js.map

@@ -1 +1 @@
-{"version":3,"file":"WaitUntil.js","sourceRoot":"","sources":["../src/WaitUntil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAErD,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAML,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAA+B,CAAC,mBAAmB,CAAC;CAAG;AAErG,WAAiB,SAAS;IACX,cAAI,GAAG,CAAC,OAAyB,EAAoB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;AAC5F,CAAC,EAFgB,SAAS,KAAT,SAAS,QAEzB;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;IACvE,SAAS,EAAE,CAAU,OAA+B,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAK,CAAC;CAC5F,CAAC,CAAC,CAAA"}
+{"version":3,"file":"WaitUntil.js","sourceRoot":"","sources":["../src/WaitUntil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEtD,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAQL,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAA+B,CAC3E,mBAAmB,CACpB;CAAG;AAEJ,WAAiB,SAAS;IACX,cAAI,GAAG,CAAC,OAAyB,EAAoB,EAAE,CAClE,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC,EAHgB,SAAS,KAAT,SAAS,QAGzB;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CACvD,SAAS,CAAC,IAAI,CAAC;IACb,SAAS,EAAE,CAAU,OAA+B,EAAE,EAAE,CACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAK,CAAC;CACrC,CAAC,CACH,CAAC"}

package/dist/Webhook.d.ts

@@ -0,0 +1,72 @@
+import { Context, Effect, Layer } from "effect";
+import { Crypto, type CryptoKey } from "./Crypto.js";
+import type { UnixMillis } from "./Identifiers.js";
+export type WebhookOperation = "encode" | "sign" | "verify" | "deliver";
+declare const WebhookError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "WebhookError";
+} & Readonly<A>;
+export declare class WebhookError extends WebhookError_base<{
+    readonly operation: WebhookOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface WebhookEvent<Type extends string = string, Payload = unknown> {
+    readonly id: string;
+    readonly type: Type;
+    readonly payload: Payload;
+    readonly occurredAt: UnixMillis;
+}
+export type WebhookEventInput<Type extends string = string, Payload = unknown> = Omit<WebhookEvent<Type, Payload>, "occurredAt"> & {
+    readonly occurredAt?: UnixMillis;
+};
+export interface WebhookEndpoint {
+    readonly url: string;
+    readonly secret: CryptoKey;
+    readonly headers?: Readonly<Record<string, string>>;
+}
+export interface WebhookSignedRequest {
+    readonly url: string;
+    readonly method: "POST";
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: string;
+}
+export interface WebhookSignatureInput {
+    readonly id: string;
+    readonly timestamp: UnixMillis;
+    readonly body: string;
+    readonly secret: CryptoKey;
+}
+export interface WebhookVerifyInput extends WebhookSignatureInput {
+    readonly signatureHeader: string;
+}
+export interface MakeWebhookRequestInput<Type extends string = string, Payload = unknown> {
+    readonly endpoint: WebhookEndpoint;
+    readonly event: WebhookEvent<Type, Payload>;
+}
+export interface WebhookDeliveryService {
+    readonly deliver: (request: WebhookSignedRequest) => Effect.Effect<void, WebhookError>;
+}
+declare const WebhookDelivery_base: Context.ServiceClass<WebhookDelivery, "auth/WebhookDelivery", WebhookDeliveryService>;
+export declare class WebhookDelivery extends WebhookDelivery_base {
+}
+export declare namespace WebhookDelivery {
+    const make: (service: WebhookDeliveryService) => WebhookDeliveryService;
+}
+export declare const WebhookHeaders: {
+    readonly id: "effect-auth-webhook-id";
+    readonly timestamp: "effect-auth-webhook-timestamp";
+    readonly signature: "effect-auth-webhook-signature";
+    readonly eventType: "effect-auth-webhook-event";
+};
+export declare const formatWebhookSignatureHeader: (signature: string) => string;
+export declare const makeWebhookEvent: <Type extends string, Payload>(input: WebhookEventInput<Type, Payload>) => Effect.Effect<WebhookEvent<Type, Payload>>;
+export declare const encodeWebhookEvent: (event: WebhookEvent) => Effect.Effect<string, WebhookError>;
+export declare const signWebhookBody: (input: WebhookSignatureInput) => Effect.Effect<string, WebhookError, Crypto>;
+export declare const verifyWebhookSignature: (input: WebhookVerifyInput) => Effect.Effect<boolean, WebhookError, Crypto>;
+export declare const makeWebhookRequest: <Type extends string, Payload>(input: MakeWebhookRequestInput<Type, Payload>) => Effect.Effect<WebhookSignedRequest, WebhookError, Crypto>;
+export declare const deliverWebhook: (request: WebhookSignedRequest) => Effect.Effect<void, WebhookError, WebhookDelivery>;
+export declare const dispatchWebhook: <Type extends string, Payload>(input: MakeWebhookRequestInput<Type, Payload>) => Effect.Effect<void, WebhookError, Crypto | WebhookDelivery>;
+export declare const WebhookDeliveryNoopLive: Layer.Layer<WebhookDelivery, never, never>;
+export {};
+//# sourceMappingURL=Webhook.d.ts.map

package/dist/Webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Webhook.d.ts","sourceRoot":"","sources":["../src/Webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAY,KAAK,EAAU,MAAM,QAAQ,CAAC;AAExE,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,SAAS,CAAC;;;;AAEd,qBAAa,YAAa,SAAQ,kBAAiC;IACjE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,YAAY,CAC3B,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,OAAO,GAAG,OAAO;IAEjB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,MAAM,iBAAiB,CAC3B,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,OAAO,GAAG,OAAO,IACf,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB,CACtC,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,OAAO,GAAG,OAAO;IAEjB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,CAChB,OAAO,EAAE,oBAAoB,KAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;CACxC;;AAED,qBAAa,eAAgB,SAAQ,oBAGV;CAAG;AAE9B,yBAAiB,eAAe,CAAC;IACxB,MAAM,IAAI,GACf,SAAS,sBAAsB,KAC9B,sBAAqD,CAAC;CAC1D;AAED,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAiCX,eAAO,MAAM,4BAA4B,GAAI,WAAW,MAAM,KAAG,MAC9C,CAAC;AAEpB,eAAO,MAAM,gBAAgB,GAAI,IAAI,SAAS,MAAM,EAAE,OAAO,EAC3D,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,KACtC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAMxC,CAAC;AAEL,eAAO,MAAM,kBAAkB,GAC7B,OAAO,YAAY,KAClB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAIjC,CAAC;AAEL,eAAO,MAAM,eAAe,GAC1B,OAAO,qBAAqB,KAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAY1C,CAAC;AAEJ,eAAO,MAAM,sBAAsB,GACjC,OAAO,kBAAkB,KACxB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAgB1C,CAAC;AAEL,eAAO,MAAM,kBAAkB,GAAI,IAAI,SAAS,MAAM,EAAE,OAAO,EAC7D,OAAO,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,KAC5C,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,YAAY,EAAE,MAAM,CAuBvD,CAAC;AAEL,eAAO,MAAM,cAAc,GACzB,SAAS,oBAAoB,KAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CACU,CAAC;AAE/D,eAAO,MAAM,eAAe,GAAI,IAAI,SAAS,MAAM,EAAE,OAAO,EAC1D,OAAO,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,KAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,GAAG,eAAe,CAKzD,CAAC;AAEL,eAAO,MAAM,uBAAuB,4CAInC,CAAC"}

package/dist/Webhook.js

@@ -0,0 +1,82 @@
+import { Context, Data, Effect, Encoding, Layer, Result } from "effect";
+import { Crypto } from "./Crypto.js";
+import { currentUnixMillis } from "./Internal.js";
+export class WebhookError extends Data.TaggedError("WebhookError") {
+}
+export class WebhookDelivery extends Context.Service()("auth/WebhookDelivery") {
+}
+(function (WebhookDelivery) {
+    WebhookDelivery.make = (service) => WebhookDelivery.of(service);
+})(WebhookDelivery || (WebhookDelivery = {}));
+export const WebhookHeaders = {
+    id: "effect-auth-webhook-id",
+    timestamp: "effect-auth-webhook-timestamp",
+    signature: "effect-auth-webhook-signature",
+    eventType: "effect-auth-webhook-event",
+};
+const webhookError = (operation, message, cause) => new WebhookError({ operation, message, cause });
+const signaturePayload = (input) => `${input.id}.${input.timestamp}.${input.body}`;
+const decodeBase64Url = (value, operation) => Result.match(Encoding.decodeBase64Url(value), {
+    onSuccess: Effect.succeed,
+    onFailure: (cause) => Effect.fail(webhookError(operation, "Invalid webhook signature encoding", cause)),
+});
+const parseSignatureHeader = (value) => value.startsWith("v1=") && value.length > 3
+    ? Effect.succeed(value.slice(3))
+    : Effect.fail(webhookError("verify", "Invalid webhook signature header format"));
+export const formatWebhookSignatureHeader = (signature) => `v1=${signature}`;
+export const makeWebhookEvent = (input) => Effect.gen(function* () {
+    return {
+        ...input,
+        occurredAt: input.occurredAt ?? (yield* currentUnixMillis),
+    };
+});
+export const encodeWebhookEvent = (event) => Effect.try({
+    try: () => JSON.stringify(event),
+    catch: (cause) => webhookError("encode", "Failed to encode webhook event", cause),
+});
+export const signWebhookBody = (input) => Crypto.use((crypto) => crypto
+    .hmacSha256({
+    key: input.secret,
+    data: signaturePayload(input),
+})
+    .pipe(Effect.mapError((cause) => webhookError("sign", "Failed to sign webhook body", cause))));
+export const verifyWebhookSignature = (input) => Effect.gen(function* () {
+    const receivedSignature = yield* parseSignatureHeader(input.signatureHeader);
+    const expectedSignature = yield* signWebhookBody(input);
+    const received = yield* decodeBase64Url(receivedSignature, "verify");
+    const expected = yield* decodeBase64Url(expectedSignature, "verify");
+    return yield* Crypto.use((crypto) => crypto
+        .timingSafeEqual({ left: received, right: expected })
+        .pipe(Effect.mapError((cause) => webhookError("verify", "Failed to verify webhook signature", cause))));
+});
+export const makeWebhookRequest = (input) => Effect.gen(function* () {
+    const body = yield* encodeWebhookEvent(input.event);
+    const signature = yield* signWebhookBody({
+        id: input.event.id,
+        timestamp: input.event.occurredAt,
+        body,
+        secret: input.endpoint.secret,
+    });
+    return {
+        url: input.endpoint.url,
+        method: "POST",
+        body,
+        headers: {
+            "content-type": "application/json",
+            ...input.endpoint.headers,
+            [WebhookHeaders.id]: input.event.id,
+            [WebhookHeaders.timestamp]: String(input.event.occurredAt),
+            [WebhookHeaders.signature]: formatWebhookSignatureHeader(signature),
+            [WebhookHeaders.eventType]: input.event.type,
+        },
+    };
+});
+export const deliverWebhook = (request) => WebhookDelivery.use((delivery) => delivery.deliver(request));
+export const dispatchWebhook = (input) => Effect.gen(function* () {
+    const request = yield* makeWebhookRequest(input);
+    return yield* deliverWebhook(request);
+});
+export const WebhookDeliveryNoopLive = Layer.succeed(WebhookDelivery)(WebhookDelivery.make({
+    deliver: () => Effect.void,
+}));
+//# sourceMappingURL=Webhook.js.map

package/dist/Webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Webhook.js","sourceRoot":"","sources":["../src/Webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExE,OAAO,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAQlD,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAI/D;CAAG;AAyDL,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAGjD,CAAC,sBAAsB,CAAC;CAAG;AAE9B,WAAiB,eAAe;IACjB,oBAAI,GAAG,CAClB,OAA+B,EACP,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC,EAJgB,eAAe,KAAf,eAAe,QAI/B;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,wBAAwB;IAC5B,SAAS,EAAE,+BAA+B;IAC1C,SAAS,EAAE,+BAA+B;IAC1C,SAAS,EAAE,2BAA2B;CAC9B,CAAC;AAEX,MAAM,YAAY,GAAG,CACnB,SAA2B,EAC3B,OAAe,EACf,KAAe,EACD,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnE,MAAM,gBAAgB,GAAG,CAAC,KAIzB,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;AAE7D,MAAM,eAAe,GAAG,CACtB,KAAa,EACb,SAA2B,EACc,EAAE,CAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC,OAAO;IACzB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;CACpF,CAAC,CAAC;AAEL,MAAM,oBAAoB,GAAG,CAC3B,KAAa,EACwB,EAAE,CACvC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;IACzC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,YAAY,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAClE,CAAC;AAER,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAiB,EAAU,EAAE,CACxE,MAAM,SAAS,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAuC,EACK,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,GAAG,KAAK;QACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;KAC3D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAAmB,EACkB,EAAE,CACvC,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAChC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,gCAAgC,EAAE,KAAK,CAAC;CAClF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA4B,EACiB,EAAE,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpB,MAAM;KACH,UAAU,CAAC;IACV,GAAG,EAAE,KAAK,CAAC,MAAM;IACjB,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;CAC9B,CAAC;KACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,YAAY,CAAC,MAAM,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAC3D,CACF,CACJ,CAAC;AAEJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAyB,EACqB,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7E,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAErE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAClC,MAAM;SACH,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;SACpD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,YAAY,CAAC,QAAQ,EAAE,oCAAoC,EAAE,KAAK,CAAC,CACpE,CACF,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAA6C,EACc,EAAE,CAC7D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;QACvC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QAClB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;QACjC,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG;QACvB,MAAM,EAAE,MAAe;QACvB,IAAI;QACJ,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO;YACzB,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACnC,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAC1D,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;YACnE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;SAC7C;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAA6B,EACuB,EAAE,CACtD,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA6C,EACgB,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEjD,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CACnE,eAAe,CAAC,IAAI,CAAC;IACnB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;CAC3B,CAAC,CACH,CAAC"}

package/dist/alchemy/cloudflare/Email.d.ts

@@ -0,0 +1,25 @@
+import { RuntimeContext } from "alchemy";
+import * as Cloudflare from "alchemy/Cloudflare";
+import { Effect, Layer } from "effect";
+import { EmailSendError, Mailer, type EmailAddress, type EmailMessage, type MailerService } from "../../Mailer.js";
+export interface AlchemyCloudflareSendEmailClient {
+    readonly send: (message: Cloudflare.SendEmailMessage) => Effect.Effect<unknown, unknown>;
+}
+export interface AlchemyCloudflareMailerOptions {
+    readonly email: AlchemyCloudflareSendEmailClient;
+    readonly from: EmailAddress;
+    readonly provider?: string;
+}
+export type AlchemyCloudflareSendEmailDescriptor<R = never> = Cloudflare.SendEmail | Effect.Effect<Cloudflare.SendEmail, never, R>;
+export interface AlchemyCloudflareMailerLayerOptions<R = never> {
+    readonly sender: AlchemyCloudflareSendEmailDescriptor<R>;
+    readonly from: EmailAddress;
+    readonly provider?: string;
+}
+export declare const renderAlchemyCloudflareEmail: (options: Omit<AlchemyCloudflareMailerOptions, "email">, message: EmailMessage) => Effect.Effect<Cloudflare.SendEmailMessage, EmailSendError>;
+export declare const makeAlchemyCloudflareMailer: (options: AlchemyCloudflareMailerOptions) => MailerService;
+export declare const AlchemyCloudflareMailer: {
+    readonly make: (options: AlchemyCloudflareMailerOptions) => MailerService;
+    readonly layer: <R = never>(options: AlchemyCloudflareMailerLayerOptions<R>) => Layer.Layer<Mailer, never, RuntimeContext | Cloudflare.SendEmailBinding | R>;
+};
+//# sourceMappingURL=Email.d.ts.map

package/dist/alchemy/cloudflare/Email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.d.ts","sourceRoot":"","sources":["../../../src/alchemy/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,EACL,cAAc,EACd,MAAM,EACN,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,UAAU,CAAC,gBAAgB,KACjC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oCAAoC,CAAC,CAAC,GAAG,KAAK,IACtD,UAAU,CAAC,SAAS,GACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAElD,MAAM,WAAW,mCAAmC,CAAC,CAAC,GAAG,KAAK;IAC5D,QAAQ,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AA0HD,eAAO,MAAM,4BAA4B,GACvC,SAAS,IAAI,CAAC,8BAA8B,EAAE,OAAO,CAAC,EACtD,SAAS,YAAY,KACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE,cAAc,CA0DxD,CAAC;AAEL,eAAO,MAAM,2BAA2B,GACtC,SAAS,8BAA8B,KACtC,aAiBC,CAAC;AAcL,eAAO,MAAM,uBAAuB;6BAhCzB,8BAA8B,KACtC,aAAa;qBAiCN,CAAC,mBACE,mCAAmC,CAAC,CAAC,CAAC,KAC9C,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,gBAAgB,GAAG,CAAC,CAAC;CAkBvE,CAAC"}

package/dist/alchemy/cloudflare/Email.js

@@ -0,0 +1,117 @@
+import { RuntimeContext } from "alchemy";
+import * as Cloudflare from "alchemy/Cloudflare";
+import { Effect, Layer } from "effect";
+import { EmailSendError, Mailer, } from "../../Mailer.js";
+const reservedHeaderNames = new Set([
+    "bcc",
+    "cc",
+    "content-transfer-encoding",
+    "content-type",
+    "from",
+    "mime-version",
+    "reply-to",
+    "subject",
+    "to",
+]);
+const sendError = (message, cause, provider = "alchemy-cloudflare") => new EmailSendError({ provider, message, cause });
+const addressEmail = (address) => typeof address === "string" ? address : address.email;
+const addressList = (address) => {
+    if (address === undefined) {
+        return [];
+    }
+    return Array.isArray(address) ? address : [address];
+};
+const validateHeaderName = (name, provider) => {
+    if (!/^[A-Za-z0-9-]+$/.test(name)) {
+        return Effect.fail(sendError(`Invalid email header name: ${name}`, undefined, provider));
+    }
+    if (reservedHeaderNames.has(name.toLowerCase())) {
+        return Effect.fail(sendError(`Email header is managed by AlchemyCloudflareMailer: ${name}`, undefined, provider));
+    }
+    return Effect.succeed(name);
+};
+const validateHeaderValue = (value, provider) => value.includes("\r") || value.includes("\n")
+    ? Effect.fail(sendError("Email header values must not contain newlines", undefined, provider))
+    : Effect.succeed(value);
+const alchemyAddress = (address, provider, options) => Effect.gen(function* () {
+    const email = yield* validateHeaderValue(addressEmail(address), provider);
+    if (typeof address === "string") {
+        return email;
+    }
+    if (address.name === undefined || address.name.length === 0) {
+        return email;
+    }
+    if (!options.allowName) {
+        return yield* Effect.fail(sendError(`Alchemy Cloudflare SendEmail does not support named ${options.field} addresses`, undefined, provider));
+    }
+    return {
+        name: yield* validateHeaderValue(address.name, provider),
+        email,
+    };
+});
+const alchemyRecipients = (addresses, field, provider) => Effect.forEach(addresses, (address) => alchemyAddress(address, provider, { allowName: false, field }).pipe(Effect.map((recipient) => recipient)));
+const optionalRecipients = (addresses) => {
+    if (addresses.length === 0) {
+        return undefined;
+    }
+    return addresses.length === 1 ? addresses[0] : [...addresses];
+};
+export const renderAlchemyCloudflareEmail = (options, message) => Effect.gen(function* () {
+    const provider = options.provider ?? "alchemy-cloudflare";
+    if (message.text === undefined && message.html === undefined) {
+        return yield* Effect.fail(sendError("Email message must include text or html content", undefined, provider));
+    }
+    const to = yield* alchemyRecipients(addressList(message.to), "to", provider);
+    if (to.length === 0) {
+        return yield* Effect.fail(sendError("Email message must include at least one to recipient", undefined, provider));
+    }
+    const cc = yield* alchemyRecipients(addressList(message.cc), "cc", provider);
+    const bcc = yield* alchemyRecipients(addressList(message.bcc), "bcc", provider);
+    const headers = {};
+    for (const [name, value] of Object.entries(message.headers ?? {})) {
+        headers[yield* validateHeaderName(name, provider)] = yield* validateHeaderValue(value, provider);
+    }
+    return {
+        from: yield* alchemyAddress(message.from ?? options.from, provider, {
+            allowName: true,
+            field: "from",
+        }),
+        to: optionalRecipients(to) ?? [],
+        subject: yield* validateHeaderValue(message.subject, provider),
+        ...(message.replyTo === undefined
+            ? {}
+            : {
+                replyTo: yield* alchemyAddress(message.replyTo, provider, {
+                    allowName: true,
+                    field: "reply-to",
+                }),
+            }),
+        ...(cc.length === 0 ? {} : { cc: optionalRecipients(cc) }),
+        ...(bcc.length === 0 ? {} : { bcc: optionalRecipients(bcc) }),
+        ...(Object.keys(headers).length === 0 ? {} : { headers }),
+        ...(message.text === undefined ? {} : { text: message.text }),
+        ...(message.html === undefined ? {} : { html: message.html }),
+    };
+});
+export const makeAlchemyCloudflareMailer = (options) => Mailer.make({
+    send: Effect.fn("auth.alchemy_cloudflare_email.send")(function* (message) {
+        const rendered = yield* renderAlchemyCloudflareEmail(options, message);
+        yield* options.email.send(rendered).pipe(Effect.mapError((cause) => sendError("Alchemy Cloudflare failed to send email", cause, options.provider)));
+    }),
+});
+const bindSendEmail = (sender) => Cloudflare.SendEmail.bind(sender);
+export const AlchemyCloudflareMailer = {
+    make: makeAlchemyCloudflareMailer,
+    layer: (options) => Layer.effect(Mailer)(Effect.gen(function* () {
+        const runtimeContext = yield* RuntimeContext;
+        const email = yield* bindSendEmail(options.sender);
+        return makeAlchemyCloudflareMailer({
+            email: {
+                send: (message) => email.send(message).pipe(Effect.provideService(RuntimeContext, runtimeContext)),
+            },
+            from: options.from,
+            provider: options.provider,
+        });
+    })),
+};
+//# sourceMappingURL=Email.js.map

package/dist/alchemy/cloudflare/Email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.js","sourceRoot":"","sources":["../../../src/alchemy/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,EACL,cAAc,EACd,MAAM,GAIP,MAAM,iBAAiB,CAAC;AA0BzB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,IAAI;IACJ,2BAA2B;IAC3B,cAAc;IACd,MAAM;IACN,cAAc;IACd,UAAU;IACV,SAAS;IACT,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,KAAe,EAAE,QAAQ,GAAG,oBAAoB,EAAE,EAAE,CACtF,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnD,MAAM,YAAY,GAAG,CAAC,OAAqB,EAAS,EAAE,CACpD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;AAExD,MAAM,WAAW,GAAG,CAClB,OAA2D,EAClC,EAAE;IAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAuB,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,QAAgB,EACuB,EAAE;IACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CAAC,8BAA8B,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CACP,uDAAuD,IAAI,EAAE,EAC7D,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,+CAA+C,EAC/C,SAAS,EACT,QAAQ,CACT,CACF;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5B,MAAM,cAAc,GAAG,CACrB,OAAqB,EACrB,QAAgB,EAChB,OAAgE,EACZ,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE1E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,uDAAuD,OAAO,CAAC,KAAK,YAAY,EAChF,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxD,KAAK;KACN,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CACxB,SAAkC,EAClC,KAAa,EACb,QAAgB,EACkC,EAAE,CACpD,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACpC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAmB,CAAC,CAC/C,CACF,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CACzB,SAA4B,EACG,EAAE;IACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,OAAsD,EACtD,OAAqB,EACuC,EAAE,CAC9D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,CAAC;IAE1D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,iDAAiD,EACjD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7E,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,sDAAsD,EACtD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAC7E,KAAK,EACL,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE;YAClE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,MAAM;SACd,CAAC;QACF,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAChC,OAAO,EAAE,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,EAAE,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;oBACxD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,UAAU;iBAClB,CAAC;aACH,CAAC;QACN,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;KACxB,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,OAAuC,EACxB,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC;IACV,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC7D,OAAqB;QAErB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,SAAS,CACP,yCAAyC,EACzC,KAAK,EACL,OAAO,CAAC,QAAQ,CACjB,CACF,CACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CACpB,MAA+C,EAK/C,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAIpC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,CACL,OAA+C,EAC+B,EAAE,CAChF,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEnD,OAAO,2BAA2B,CAAC;YACjC,KAAK,EAAE;gBACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACtB,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,cAAc,CAAC,CACtD;aACJ;YACD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CACH;CACK,CAAC"}