@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.10

package/migrations/0003_auth_login_approval_review.sql

@@ -0,0 +1,22 @@
+create table if not exists auth_login_approval_review (
+  approval_challenge_id text primary key,
+  flow_id text not null,
+  user_id text not null,
+  channel text not null,
+  reason text not null,
+  session_binding text not null,
+  same_device_required integer not null,
+  status text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  reviewed_at integer,
+  reviewed_by text,
+  denied_reason text,
+  risk text,
+  metadata text,
+  review_metadata text
+);
+
+create index if not exists auth_login_approval_review_flow_id_idx on auth_login_approval_review (flow_id);
+create index if not exists auth_login_approval_review_user_id_idx on auth_login_approval_review (user_id);
+create index if not exists auth_login_approval_review_status_expires_at_idx on auth_login_approval_review (status, expires_at);

package/migrations/0004_auth_trusted_device.sql

@@ -0,0 +1,12 @@
+create table if not exists auth_trusted_device (
+  user_id text not null,
+  token_hash text not null,
+  created_at integer not null,
+  last_seen_at integer not null,
+  expires_at integer not null,
+  metadata text,
+  primary key (user_id, token_hash)
+);
+
+create index if not exists auth_trusted_device_user_id_idx on auth_trusted_device (user_id);
+create index if not exists auth_trusted_device_expires_at_idx on auth_trusted_device (expires_at);

package/migrations/0005_auth_passkey.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_passkey_credential (
+  id text primary key,
+  user_id text not null,
+  credential_id text not null,
+  public_key text not null,
+  sign_count integer not null,
+  transports text,
+  backed_up integer,
+  created_at integer not null,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_passkey_credential_credential_id_idx on auth_passkey_credential (credential_id);
+create index if not exists auth_passkey_credential_user_id_idx on auth_passkey_credential (user_id);
+create index if not exists auth_passkey_credential_revoked_at_idx on auth_passkey_credential (revoked_at);

package/migrations/0006_auth_totp_factor.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_totp_factor (
+  id text primary key,
+  user_id text not null,
+  secret text not null,
+  algorithm text not null,
+  digits integer not null,
+  period integer not null,
+  created_at integer not null,
+  confirmed_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_totp_factor_user_id_idx on auth_totp_factor (user_id);
+create index if not exists auth_totp_factor_confirmed_at_idx on auth_totp_factor (confirmed_at);
+create index if not exists auth_totp_factor_revoked_at_idx on auth_totp_factor (revoked_at);

package/migrations/0007_auth_recovery_code.sql

@@ -0,0 +1,13 @@
+create table if not exists auth_recovery_code (
+  id text primary key,
+  user_id text not null,
+  code_hash text not null,
+  created_at integer not null,
+  used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_recovery_code_user_id_idx on auth_recovery_code (user_id);
+create index if not exists auth_recovery_code_used_at_idx on auth_recovery_code (used_at);
+create index if not exists auth_recovery_code_revoked_at_idx on auth_recovery_code (revoked_at);

package/migrations/0008_auth_api_key.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_api_key (
+  id text primary key,
+  user_id text not null,
+  prefix text not null,
+  secret_hash text not null,
+  scopes text not null,
+  created_at integer not null,
+  expires_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_api_key_prefix_idx on auth_api_key (prefix);
+create index if not exists auth_api_key_user_id_idx on auth_api_key (user_id);
+create index if not exists auth_api_key_expires_at_idx on auth_api_key (expires_at);
+create index if not exists auth_api_key_revoked_at_idx on auth_api_key (revoked_at);

package/migrations/0009_auth_refresh_token.sql

@@ -0,0 +1,21 @@
+create table if not exists auth_refresh_token (
+  id text primary key,
+  family_id text not null,
+  user_id text not null,
+  secret_hash text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  last_used_at integer,
+  rotated_at integer,
+  replaced_by_id text,
+  revoked_at integer,
+  reuse_detected_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_refresh_token_secret_hash_idx on auth_refresh_token (secret_hash);
+create index if not exists auth_refresh_token_family_id_idx on auth_refresh_token (family_id);
+create index if not exists auth_refresh_token_user_id_idx on auth_refresh_token (user_id);
+create index if not exists auth_refresh_token_expires_at_idx on auth_refresh_token (expires_at);
+create index if not exists auth_refresh_token_rotated_at_idx on auth_refresh_token (rotated_at);
+create index if not exists auth_refresh_token_revoked_at_idx on auth_refresh_token (revoked_at);

package/migrations/0010_auth_jwt_revocation.sql

@@ -0,0 +1,8 @@
+create table if not exists auth_jwt_revocation (
+  jwt_id text primary key,
+  revoked_at integer not null,
+  expires_at integer,
+  reason text
+);
+
+create index if not exists auth_jwt_revocation_expires_at_idx on auth_jwt_revocation (expires_at);

package/migrations/0011_auth_oauth_account.sql

@@ -0,0 +1,16 @@
+create table if not exists auth_oauth_account (
+  id text primary key,
+  provider_id text not null,
+  provider_account_id text not null,
+  user_id text not null,
+  email text,
+  email_verified integer,
+  created_at integer not null,
+  updated_at integer not null,
+  unlinked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_oauth_account_provider_account_idx on auth_oauth_account (provider_id, provider_account_id);
+create index if not exists auth_oauth_account_user_id_idx on auth_oauth_account (user_id);
+create index if not exists auth_oauth_account_unlinked_at_idx on auth_oauth_account (unlinked_at);

package/migrations/0012_auth_oauth_provider_token_vault.sql

@@ -0,0 +1,20 @@
+create table if not exists auth_oauth_provider_token_vault (
+  account_id text primary key,
+  user_id text not null,
+  provider_id text not null,
+  provider_account_id text not null,
+  access_token_ciphertext text not null,
+  refresh_token_ciphertext text,
+  id_token_ciphertext text,
+  token_type text not null,
+  scopes text,
+  expires_at integer,
+  updated_at integer not null,
+  revoked_at integer,
+  revocation_reason text
+);
+
+create index if not exists auth_oauth_provider_token_vault_user_id_idx on auth_oauth_provider_token_vault (user_id);
+create index if not exists auth_oauth_provider_token_vault_provider_account_idx on auth_oauth_provider_token_vault (provider_id, provider_account_id);
+create index if not exists auth_oauth_provider_token_vault_expires_at_idx on auth_oauth_provider_token_vault (expires_at);
+create index if not exists auth_oauth_provider_token_vault_revoked_at_idx on auth_oauth_provider_token_vault (revoked_at);

package/migrations/0013_auth_security_timeline.sql

@@ -0,0 +1,16 @@
+create table if not exists auth_security_timeline (
+  id text primary key,
+  user_id text not null,
+  type text not null,
+  category text not null,
+  severity text not null,
+  occurred_at integer not null,
+  summary text not null,
+  actor text,
+  request text,
+  metadata text
+);
+
+create index if not exists auth_security_timeline_user_occurred_at_idx on auth_security_timeline (user_id, occurred_at);
+create index if not exists auth_security_timeline_type_idx on auth_security_timeline (type);
+create index if not exists auth_security_timeline_category_idx on auth_security_timeline (category);

package/package.json

@@ -1,18 +1,26 @@
 {
   "name": "@effect-auth/core",
-  "version": "0.1.0-alpha.1",
+  "version": "0.1.0-alpha.10",
   "description": "Composable Effect-first authentication primitives.",
-  "type": "module",
   "license": "MIT",
+  "files": [
+    "dist/**/*.d.ts",
+    "dist/**/*.d.ts.map",
+    "dist/**/*.js",
+    "dist/**/*.js.map",
+    "migrations/**/*.sql"
+  ],
+  "type": "module",
   "sideEffects": false,
-  "publishConfig": {
-    "access": "public"
-  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./ApiKey": {
+      "types": "./dist/ApiKey.d.ts",
+      "default": "./dist/ApiKey.js"
+    },
     "./AuditLog": {
       "types": "./dist/AuditLog.d.ts",
       "default": "./dist/AuditLog.js"
@@ -21,26 +29,98 @@
       "types": "./dist/AuthFlow.d.ts",
       "default": "./dist/AuthFlow.js"
     },
+    "./AuthConfig": {
+      "types": "./dist/AuthConfig.d.ts",
+      "default": "./dist/AuthConfig.js"
+    },
+    "./AuthKernel": {
+      "types": "./dist/AuthKernel.d.ts",
+      "default": "./dist/AuthKernel.js"
+    },
     "./Challenge": {
       "types": "./dist/Challenge.d.ts",
       "default": "./dist/Challenge.js"
     },
+    "./AlchemyCloudflareRateLimitDurableObject": {
+      "types": "./dist/alchemy/cloudflare/RateLimitDurableObject.d.ts",
+      "default": "./dist/alchemy/cloudflare/RateLimitDurableObject.js"
+    },
+    "./AlchemyCloudflareEmail": {
+      "types": "./dist/alchemy/cloudflare/Email.d.ts",
+      "default": "./dist/alchemy/cloudflare/Email.js"
+    },
+    "./CloudflareRateLimitDurableObject": {
+      "types": "./dist/cloudflare/RateLimitDurableObject.d.ts",
+      "default": "./dist/cloudflare/RateLimitDurableObject.js"
+    },
+    "./CloudflareEmail": {
+      "types": "./dist/cloudflare/Email.d.ts",
+      "default": "./dist/cloudflare/Email.js"
+    },
+    "./Client": {
+      "types": "./dist/Client.d.ts",
+      "default": "./dist/Client.js"
+    },
     "./Crypto": {
       "types": "./dist/Crypto.d.ts",
       "default": "./dist/Crypto.js"
     },
-    "./D1Kysely": {
-      "types": "./dist/D1Kysely.d.ts",
-      "default": "./dist/D1Kysely.js"
+    "./EffectQbSqliteStorage": {
+      "types": "./dist/EffectQbSqliteStorage.d.ts",
+      "default": "./dist/EffectQbSqliteStorage.js"
+    },
+    "./EmailOtp": {
+      "types": "./dist/EmailOtp.d.ts",
+      "default": "./dist/EmailOtp.js"
+    },
+    "./EmailVerification": {
+      "types": "./dist/EmailVerification.d.ts",
+      "default": "./dist/EmailVerification.js"
     },
     "./WaitUntil": {
       "types": "./dist/WaitUntil.d.ts",
       "default": "./dist/WaitUntil.js"
     },
+    "./Webhook": {
+      "types": "./dist/Webhook.d.ts",
+      "default": "./dist/Webhook.js"
+    },
     "./Identifiers": {
       "types": "./dist/Identifiers.d.ts",
       "default": "./dist/Identifiers.js"
     },
+    "./LoginApproval": {
+      "types": "./dist/LoginApproval.d.ts",
+      "default": "./dist/LoginApproval.js"
+    },
+    "./LoginNotification": {
+      "types": "./dist/LoginNotification.d.ts",
+      "default": "./dist/LoginNotification.js"
+    },
+    "./LoginRisk": {
+      "types": "./dist/LoginRisk.d.ts",
+      "default": "./dist/LoginRisk.js"
+    },
+    "./Jwt": {
+      "types": "./dist/Jwt.d.ts",
+      "default": "./dist/Jwt.js"
+    },
+    "./HttpApi": {
+      "types": "./dist/HttpApi.d.ts",
+      "default": "./dist/HttpApi.js"
+    },
+    "./Mailer": {
+      "types": "./dist/Mailer.d.ts",
+      "default": "./dist/Mailer.js"
+    },
+    "./MagicLink": {
+      "types": "./dist/MagicLink.d.ts",
+      "default": "./dist/MagicLink.js"
+    },
+    "./OAuth": {
+      "types": "./dist/OAuth.d.ts",
+      "default": "./dist/OAuth.js"
+    },
     "./Policy": {
       "types": "./dist/Policy.d.ts",
       "default": "./dist/Policy.js"
@@ -49,18 +129,46 @@
       "types": "./dist/Privacy.d.ts",
       "default": "./dist/Privacy.js"
     },
-    "./KyselyStorage": {
-      "types": "./dist/KyselyStorage.d.ts",
-      "default": "./dist/KyselyStorage.js"
+    "./RateLimiter": {
+      "types": "./dist/RateLimiter.d.ts",
+      "default": "./dist/RateLimiter.js"
+    },
+    "./RecoveryCode": {
+      "types": "./dist/RecoveryCode.d.ts",
+      "default": "./dist/RecoveryCode.js"
+    },
+    "./RefreshToken": {
+      "types": "./dist/RefreshToken.d.ts",
+      "default": "./dist/RefreshToken.js"
+    },
+    "./Password": {
+      "types": "./dist/Password.d.ts",
+      "default": "./dist/Password.js"
+    },
+    "./Passkey": {
+      "types": "./dist/Passkey.d.ts",
+      "default": "./dist/Passkey.js"
+    },
+    "./PasskeySimpleWebAuthn": {
+      "types": "./dist/PasskeySimpleWebAuthn.d.ts",
+      "default": "./dist/PasskeySimpleWebAuthn.js"
     },
     "./Sessions": {
       "types": "./dist/Sessions.d.ts",
       "default": "./dist/Sessions.js"
     },
+    "./SecurityTimeline": {
+      "types": "./dist/SecurityTimeline.d.ts",
+      "default": "./dist/SecurityTimeline.js"
+    },
     "./Storage": {
       "types": "./dist/Storage.d.ts",
       "default": "./dist/Storage.js"
     },
+    "./StepUp": {
+      "types": "./dist/StepUp.d.ts",
+      "default": "./dist/StepUp.js"
+    },
     "./StorageMigrations": {
       "types": "./dist/StorageMigrations.d.ts",
       "default": "./dist/StorageMigrations.js"
@@ -69,25 +177,20 @@
       "types": "./dist/Testing.d.ts",
       "default": "./dist/Testing.js"
     },
+    "./Totp": {
+      "types": "./dist/Totp.d.ts",
+      "default": "./dist/Totp.js"
+    },
+    "./TrustedDevice": {
+      "types": "./dist/TrustedDevice.d.ts",
+      "default": "./dist/TrustedDevice.js"
+    },
     "./package.json": {
       "default": "./package.json"
     }
   },
-  "files": [
-    "dist/**/*.d.ts",
-    "dist/**/*.d.ts.map",
-    "dist/**/*.js",
-    "dist/**/*.js.map",
-    "migrations/**/*.sql"
-  ],
-  "peerDependencies": {
-    "effect": "^4.0.0-beta.67",
-    "kysely": "^0.29.2"
-  },
-  "peerDependenciesMeta": {
-    "kysely": {
-      "optional": true
-    }
+  "publishConfig": {
+    "access": "public"
   },
   "scripts": {
     "build": "tsc -b",
@@ -96,5 +199,22 @@
     "test": "bun run build && bun --bun vitest run --config ../../vitest.config.ts",
     "test-type": "tsc -p tsconfig.test.json --pretty false",
     "type-test": "tsc -p tsconfig.type-tests.json --pretty false"
+  },
+  "peerDependencies": {
+    "@simplewebauthn/server": "^13.3.1",
+    "alchemy": ">=2.0.0-beta.44 <3",
+    "effect": "^4.0.0-beta.67",
+    "effect-qb": "4.0.0-beta.66"
+  },
+  "peerDependenciesMeta": {
+    "@simplewebauthn/server": {
+      "optional": true
+    },
+    "alchemy": {
+      "optional": true
+    },
+    "effect-qb": {
+      "optional": true
+    }
   }
 }

package/dist/D1Kysely.d.ts

@@ -1,40 +0,0 @@
-import { Kysely, SqliteAdapter, type DatabaseIntrospector, type Dialect, type Driver, type QueryCompiler } from "kysely";
-export interface D1Result<Row extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>> {
-    readonly success?: boolean;
-    readonly error?: string;
-    readonly results?: ReadonlyArray<Row>;
-    readonly meta?: {
-        readonly changes?: number;
-        readonly rows_written?: number;
-        readonly last_row_id?: number | null;
-    };
-}
-export interface D1PreparedStatementLike {
-    readonly bind: (...values: ReadonlyArray<unknown>) => D1PreparedStatementLike;
-    readonly all: <Row extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>>() => Promise<D1Result<Row>>;
-}
-export interface D1DatabaseLike {
-    readonly prepare: (sql: string) => D1PreparedStatementLike;
-}
-declare const D1KyselyError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
-    readonly _tag: "D1KyselyError";
-} & Readonly<A>;
-export declare class D1KyselyError extends D1KyselyError_base<{
-    readonly message: string;
-    readonly cause?: unknown;
-}> {
-}
-export interface D1KyselyDialectOptions {
-    readonly database: D1DatabaseLike;
-}
-export declare class D1KyselyDialect implements Dialect {
-    #private;
-    constructor(options: D1KyselyDialectOptions);
-    createAdapter(): SqliteAdapter;
-    createDriver(): Driver;
-    createQueryCompiler(): QueryCompiler;
-    createIntrospector(db: Kysely<unknown>): DatabaseIntrospector;
-}
-export declare const makeD1Kysely: <DB>(database: D1DatabaseLike) => Kysely<DB>;
-export {};
-//# sourceMappingURL=D1Kysely.d.ts.map

package/dist/D1Kysely.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"D1Kysely.d.ts","sourceRoot":"","sources":["../src/D1Kysely.ts"],"names":[],"mappings":"AACA,OAAO,EACL,MAAM,EACN,aAAa,EAKb,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,MAAM,EACX,KAAK,aAAa,EAGnB,MAAM,QAAQ,CAAA;AAEf,MAAM,WAAW,QAAQ,CAAC,GAAG,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KACrC,CAAA;CACF;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,uBAAuB,CAAA;IAC7E,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;CAC9H;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,uBAAuB,CAAA;CAC3D;;;;AAED,qBAAa,aAAc,SAAQ,mBAAkC;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB,CAAC;CAAG;AAEL,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;CAClC;AAED,qBAAa,eAAgB,YAAW,OAAO;;gBAGjC,OAAO,EAAE,sBAAsB;IAI3C,aAAa;IAIb,YAAY,IAAI,MAAM;IAItB,mBAAmB,IAAI,aAAa;IAIpC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,oBAAoB;CAG9D;AAmED,eAAO,MAAM,YAAY,GAAI,EAAE,EAAE,UAAU,cAAc,KAAG,MAAM,CAAC,EAAE,CAGjE,CAAA"}

package/dist/D1Kysely.js

@@ -1,75 +0,0 @@
-import { Data } from "effect";
-import { Kysely, SqliteAdapter, SqliteIntrospector, SqliteQueryCompiler } from "kysely";
-export class D1KyselyError extends Data.TaggedError("D1KyselyError") {
-}
-export class D1KyselyDialect {
-    #database;
-    constructor(options) {
-        this.#database = options.database;
-    }
-    createAdapter() {
-        return new SqliteAdapter();
-    }
-    createDriver() {
-        return new D1KyselyDriver(this.#database);
-    }
-    createQueryCompiler() {
-        return new SqliteQueryCompiler();
-    }
-    createIntrospector(db) {
-        return new SqliteIntrospector(db);
-    }
-}
-class D1KyselyDriver {
-    #database;
-    constructor(database) {
-        this.#database = database;
-    }
-    async init() { }
-    async acquireConnection() {
-        return new D1KyselyConnection(this.#database);
-    }
-    async beginTransaction(_connection, _settings) {
-        throw new D1KyselyError({ message: "D1 transactions are not supported" });
-    }
-    async commitTransaction(_connection) {
-        throw new D1KyselyError({ message: "D1 transactions are not supported" });
-    }
-    async rollbackTransaction(_connection) {
-        throw new D1KyselyError({ message: "D1 transactions are not supported" });
-    }
-    async releaseConnection(_connection) { }
-    async destroy() { }
-}
-class D1KyselyConnection {
-    #database;
-    constructor(database) {
-        this.#database = database;
-    }
-    async executeQuery(compiledQuery) {
-        const result = await this.#database
-            .prepare(compiledQuery.sql)
-            .bind(...compiledQuery.parameters)
-            .all();
-        if (result.success === false || result.error !== undefined) {
-            throw new D1KyselyError({
-                message: result.error ?? "D1 query failed"
-            });
-        }
-        const rowsAffected = result.meta?.changes ?? result.meta?.rows_written ?? 0;
-        return {
-            insertId: result.meta?.last_row_id === undefined || result.meta.last_row_id === null
-                ? undefined
-                : BigInt(result.meta.last_row_id),
-            numAffectedRows: BigInt(rowsAffected),
-            rows: [...(result.results ?? [])]
-        };
-    }
-    async *streamQuery(_compiledQuery, _chunkSize) {
-        throw new D1KyselyError({ message: "D1 streaming is not supported" });
-    }
-}
-export const makeD1Kysely = (database) => new Kysely({
-    dialect: new D1KyselyDialect({ database })
-});
-//# sourceMappingURL=D1Kysely.js.map

package/dist/D1Kysely.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"D1Kysely.js","sourceRoot":"","sources":["../src/D1Kysely.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EACL,MAAM,EACN,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EASpB,MAAM,QAAQ,CAAA;AAsBf,MAAM,OAAO,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,CAGjE;CAAG;AAML,MAAM,OAAO,eAAe;IACjB,SAAS,CAAgB;IAElC,YAAY,OAA+B;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAA;IACnC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,aAAa,EAAE,CAAA;IAC5B,CAAC;IAED,YAAY;QACV,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC3C,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,mBAAmB,EAAE,CAAA;IAClC,CAAC;IAED,kBAAkB,CAAC,EAAmB;QACpC,OAAO,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAA;IACnC,CAAC;CACF;AAED,MAAM,cAAc;IACT,SAAS,CAAgB;IAElC,YAAY,QAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,KAAmB,CAAC;IAE9B,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAA+B,EAAE,SAA8B;QACpF,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAA+B;QACrD,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAA+B;QACvD,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAA+B,IAAkB,CAAC;IAE1E,KAAK,CAAC,OAAO,KAAmB,CAAC;CAClC;AAED,MAAM,kBAAkB;IACb,SAAS,CAAgB;IAElC,YAAY,QAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,YAAY,CAAM,aAA4B;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS;aAChC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC;aAC1B,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC;aACjC,GAAG,EAA2C,CAAA;QAEjD,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,iBAAiB;aAC3C,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC,CAAA;QAE3E,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI;gBAClF,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACnC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC;YACrC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAe;SAChD,CAAA;IACH,CAAC;IAED,KAAK,CAAC,CAAC,WAAW,CAAM,cAA6B,EAAE,UAAkB;QACvE,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAA;IACvE,CAAC;CACF;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAK,QAAwB,EAAc,EAAE,CACvE,IAAI,MAAM,CAAK;IACb,OAAO,EAAE,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC3C,CAAC,CAAA"}

package/dist/KyselyStorage.d.ts

@@ -1,41 +0,0 @@
-import { Layer } from "effect";
-import type { Kysely } from "kysely";
-import { SessionStore, VerificationStore, type SessionStoreService, type VerificationStoreService } from "./Storage.js";
-export interface KyselyAuthSessionTable {
-    id: string;
-    user_id: string;
-    secret_hash: string;
-    created_at: number;
-    expires_at: number;
-    auth_time: number;
-    aal: string;
-    amr: string;
-    mfa_verified_at: number | null;
-    metadata: string | null;
-    revoked_at: number | null;
-    last_seen_at: number | null;
-    rotated_at: number | null;
-}
-export interface KyselyAuthVerificationTable {
-    id: string;
-    type: string;
-    subject: string;
-    secret_hash: string | null;
-    created_at: number;
-    expires_at: number;
-    metadata: string | null;
-    consumed_at: number | null;
-}
-export interface KyselyAuthDatabase {
-    readonly auth_session: KyselyAuthSessionTable;
-    readonly auth_verification: KyselyAuthVerificationTable;
-}
-export interface KyselyStorageStores {
-    readonly sessionStore: SessionStoreService;
-    readonly verificationStore: VerificationStoreService;
-}
-export declare const makeKyselySessionStore: <DB extends KyselyAuthDatabase>(db: Kysely<DB>) => SessionStoreService;
-export declare const makeKyselyVerificationStore: <DB extends KyselyAuthDatabase>(db: Kysely<DB>) => VerificationStoreService;
-export declare const makeKyselyStorage: <DB extends KyselyAuthDatabase>(db: Kysely<DB>) => KyselyStorageStores;
-export declare const KyselyAuthStorageLive: <DB extends KyselyAuthDatabase>(db: Kysely<DB>) => Layer.Layer<SessionStore | VerificationStore, never, never>;
-//# sourceMappingURL=KyselyStorage.d.ts.map

package/dist/KyselyStorage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"KyselyStorage.d.ts","sourceRoot":"","sources":["../src/KyselyStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAU,MAAM,QAAQ,CAAA;AAC9C,OAAO,KAAK,EAAc,MAAM,EAAc,MAAM,QAAQ,CAAA;AAG5D,OAAO,EACL,YAAY,EAEZ,iBAAiB,EAQjB,KAAK,mBAAmB,EAIxB,KAAK,wBAAwB,EAC9B,MAAM,cAAc,CAAA;AAIrB,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAA;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAA;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAA;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;CACrD;AA8GD,eAAO,MAAM,sBAAsB,GAAI,EAAE,SAAS,kBAAkB,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,KAAG,mBAiEtF,CAAA;AAED,eAAO,MAAM,2BAA2B,GAAI,EAAE,SAAS,kBAAkB,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,KAAG,wBA2D3F,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,EAAE,SAAS,kBAAkB,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,KAAG,mBAGhF,CAAA;AAEF,eAAO,MAAM,qBAAqB,GAAI,EAAE,SAAS,kBAAkB,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,gEAIhF,CAAA"}