@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13

package/dist/AuditLog.js

@@ -1,12 +1,329 @@
 import { Context, Data, Effect, Layer } from "effect";
+import { currentUnixMillis } from "./Internal.js";
 export class AuditLogError extends Data.TaggedError("AuditLogError") {
 }
+export class AuditLogStoreError extends Data.TaggedError("AuditLogStoreError") {
+}
+export const AuditActor = {
+    anonymous: () => ({ type: "anonymous" }),
+    user: (input) => ({
+        type: "user",
+        userId: input.userId,
+        ...(input.sessionId === undefined ? {} : { sessionId: input.sessionId }),
+    }),
+};
+export const AuditSubject = {
+    anonymous: () => ({ type: "anonymous" }),
+    email: (emailHash) => ({ type: "email", emailHash }),
+    user: (userId) => ({ type: "user", userId }),
+};
 export class AuditLog extends Context.Service()("auth/AuditLog") {
 }
 (function (AuditLog) {
     AuditLog.make = (service) => AuditLog.of(service);
 })(AuditLog || (AuditLog = {}));
+export class AuditLogStore extends Context.Service()("auth/AuditLogStore") {
+}
+(function (AuditLogStore) {
+    AuditLogStore.make = (service) => AuditLogStore.of(service);
+})(AuditLogStore || (AuditLogStore = {}));
+const occurredAt = (value) => value === undefined ? currentUnixMillis : Effect.succeed(value);
+const clone = (value) => structuredClone(value);
+export const auditEventUserId = (event) => {
+    if ("userId" in event) {
+        return event.userId;
+    }
+    if (event.type === "auth.risk.assessed") {
+        return event.assessment.userId;
+    }
+    if ("subject" in event && event.subject.type === "user") {
+        return event.subject.userId;
+    }
+    if ("actor" in event && event.actor.type === "user") {
+        return event.actor.userId;
+    }
+    return undefined;
+};
+export const auditEventActorUserId = (event) => "actor" in event && event.actor.type === "user" ? event.actor.userId : undefined;
+const compareAuditEvents = (left, right) => {
+    const occurredAtDifference = Number(right.occurredAt) - Number(left.occurredAt);
+    return occurredAtDifference === 0
+        ? String(right.id ?? "").localeCompare(String(left.id ?? ""))
+        : occurredAtDifference;
+};
+const insertSortedAuditEvent = (events, event) => {
+    const index = events.findIndex((existing) => compareAuditEvents(event, existing) < 0);
+    return index === -1
+        ? [...events, event]
+        : [...events.slice(0, index), event, ...events.slice(index)];
+};
+const sortAuditEvents = (events) => {
+    let sorted = [];
+    for (const event of events) {
+        sorted = insertSortedAuditEvent(sorted, event);
+    }
+    return sorted;
+};
+export const filterAuditLogEvents = (events, input = {}) => {
+    const types = input.types === undefined ? undefined : new Set(input.types);
+    const beforeOccurredAt = input.beforeOccurredAt === undefined
+        ? undefined
+        : Number(input.beforeOccurredAt);
+    const limit = input.limit === undefined ? undefined : Math.max(0, Math.floor(input.limit));
+    const filtered = [...events]
+        .filter((event) => input.userId === undefined || auditEventUserId(event) === input.userId)
+        .filter((event) => beforeOccurredAt === undefined || Number(event.occurredAt) < beforeOccurredAt)
+        .filter((event) => types === undefined || types.has(event.type));
+    const sorted = sortAuditEvents(filtered).map(clone);
+    return limit === undefined ? sorted : sorted.slice(0, limit);
+};
+const auditLogStoreErrorToAuditLogError = (cause) => new AuditLogError({
+    message: "Audit log store insert failed",
+    cause,
+});
+export const makeAuditLogFromStore = (store) => AuditLog.make({
+    emit: (event) => store.insert(event).pipe(Effect.mapError(auditLogStoreErrorToAuditLogError)),
+});
+export const emit = (event) => AuditLog.use((auditLog) => auditLog.emit(event));
+export const insertAuditLogEvent = (event) => AuditLogStore.use((store) => store.insert(event));
+export const listAuditLogEvents = (input = {}) => AuditLogStore.use((store) => store.list(input));
+export const deleteAuditLogEventsBefore = (input) => AuditLogStore.use((store) => store.deleteBefore(input));
+export const loginSucceeded = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.login.succeeded",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const loginFailed = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.login.failed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const sessionRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.session.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const loginRiskAssessed = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.risk.assessed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const policyDenied = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.policy.denied",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const oauthAccountLinked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.oauth.account.linked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const oauthAccountUnlinked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.oauth.account.unlinked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const oauthLinkConfirmationStarted = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.oauth.link_confirmation.started",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const oauthLinkConfirmationConfirmed = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.oauth.link_confirmation.confirmed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const oauthProviderTokenRefreshed = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.oauth.provider_token.refreshed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const oauthProviderTokenRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.oauth.provider_token.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const passkeyCredentialRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.passkey.credential.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const totpEnrollmentStarted = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.totp.enrollment.started",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const totpFactorConfirmed = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.totp.factor.confirmed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const totpFactorVerified = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.totp.factor.verified",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const totpFactorRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.totp.factor.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const recoveryCodeGenerated = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.recovery_code.generated",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const recoveryCodeVerified = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.recovery_code.verified",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const recoveryCodeRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.recovery_code.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const apiKeyCreated = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.api_key.created",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const apiKeyVerified = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.api_key.verified",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const apiKeyRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.api_key.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const apiKeyVerificationFailed = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.api_key.verification_failed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const refreshTokenIssued = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.refresh_token.issued",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const refreshTokenRotated = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.refresh_token.rotated",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const refreshTokenReuseDetected = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.refresh_token.reuse_detected",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const refreshTokenRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.refresh_token.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const incidentActionExecuted = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.incident_action.executed",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const jwtIntrospected = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.jwt.introspected",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const jwtRevoked = (input) => Effect.gen(function* () {
+    return yield* emit({
+        ...input,
+        type: "auth.jwt.revoked",
+        occurredAt: yield* occurredAt(input.occurredAt),
+    });
+});
+export const makeAuditLogStoreMemory = () => {
+    const events = [];
+    return AuditLogStore.make({
+        insert: (event) => Effect.sync(() => {
+            events.push(clone(event));
+        }),
+        list: (input = {}) => Effect.sync(() => filterAuditLogEvents(events, input)),
+        deleteBefore: (input) => Effect.sync(() => {
+            const retained = [];
+            let deleted = 0;
+            for (const event of events) {
+                if (Number(event.occurredAt) < Number(input.beforeOccurredAt) &&
+                    (input.userId === undefined || auditEventUserId(event) === input.userId)) {
+                    deleted += 1;
+                    continue;
+                }
+                retained.push(event);
+            }
+            events.splice(0, events.length, ...retained);
+            return deleted;
+        }),
+    });
+};
+export const AuditLogStoreMemoryLive = Layer.sync(AuditLogStore, makeAuditLogStoreMemory);
+export const AuditLogFromStoreLive = Layer.effect(AuditLog)(AuditLogStore.use((store) => Effect.succeed(makeAuditLogFromStore(store))));
 export const AuditLogNoopLive = Layer.succeed(AuditLog)(AuditLog.make({
-    emit: () => Effect.void
+    emit: () => Effect.void,
 }));
 //# sourceMappingURL=AuditLog.js.map

package/dist/AuditLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuditLog.js","sourceRoot":"","sources":["../src/AuditLog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAIrD,MAAM,OAAO,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,CAGjE;CAAG;AAyDL,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAA6B,CAAC,eAAe,CAAC;CAAG;AAE9F,WAAiB,QAAQ;IACV,aAAI,GAAG,CAAC,OAAwB,EAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;AACzF,CAAC,EAFgB,QAAQ,KAAR,QAAQ,QAExB;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IACpE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;CACxB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"AuditLog.js","sourceRoot":"","sources":["../src/AuditLog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAkBtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAKlD,MAAM,OAAO,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,CAGjE;CAAG;AAIL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAI3E;CAAG;AAUL,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,SAAS,EAAE,GAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,KAGN,EAAc,EAAE,CAAC,CAAC;QACjB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;KACzE,CAAC;CACM,CAAC;AAOX,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS,EAAE,GAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACtD,KAAK,EAAE,CAAC,SAAoB,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC7E,IAAI,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;CAC1D,CAAC;AAkVX,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAA6B,CACxE,eAAe,CAChB;CAAG;AAEJ,WAAiB,QAAQ;IACV,aAAI,GAAG,CAAC,OAAwB,EAAmB,EAAE,CAChE,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC,EAHgB,QAAQ,KAAR,QAAQ,QAGxB;AAED,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AASD,MAAM,UAAU,GAAG,CAAC,KAA6B,EAAE,EAAE,CACnD,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAElE,MAAM,KAAK,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAqB,EAAsB,EAAE;IAC5E,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,IAAI,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAqB,EACD,EAAE,CACtB,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEnF,MAAM,kBAAkB,GAAG,CACzB,IAAoB,EACpB,KAAqB,EACb,EAAE;IACV,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEhF,OAAO,oBAAoB,KAAK,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,oBAAoB,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,MAAiC,EACjC,KAAqB,EACM,EAAE;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAC5B,CAAC,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CACtD,CAAC;IAEF,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,MAAgC,EACL,EAAE;IAC7B,IAAI,MAAM,GAA8B,EAAE,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,MAAgC,EAChC,QAA2B,EAAE,EACF,EAAE;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;SACzB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAClF;SACA,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAChF;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEpD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CAAC,KAAyB,EAAE,EAAE,CACtE,IAAI,aAAa,CAAC;IAChB,OAAO,EAAE,+BAA+B;IACxC,KAAK;CACN,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAA2B,EACV,EAAE,CACnB,QAAQ,CAAC,IAAI,CAAC;IACZ,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;CAC9F,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,KAAqB,EACyB,EAAE,CAChD,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAqB,EACmC,EAAE,CAC1D,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,QAA2B,EAAE,EACgD,EAAE,CAC/E,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,KAAgC,EAC0B,EAAE,CAC5D,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAA8C,EACA,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,KAA2C,EACG,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,mBAAmB;QACzB,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAA8C,EACA,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAA4C,EACE,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAA4C,EACE,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAAmD,EACL,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAqD,EACP,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,KAA8D,EAChB,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,sCAAsC;QAC5C,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,KAAgE,EAClB,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,wCAAwC;QAC9C,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,KAA6D,EACf,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,qCAAqC;QAC3C,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,KAA2D,EACb,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,mCAAmC;QACzC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,KAAyD,EACX,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,iCAAiC;QACvC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAsD,EACR,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAoD,EACN,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAAmD,EACL,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAAkD,EACJ,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAsD,EACR,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAqD,EACP,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAoD,EACN,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,KAA8C,EACA,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAA+C,EACD,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,KAA8C,EACA,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,KAA0D,EACZ,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,kCAAkC;QACxC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAAmD,EACL,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAoD,EACN,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,KAA2D,EACb,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,mCAAmC;QACzC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAoD,EACN,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAuD,EACT,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,+BAA+B;QACrC,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA+C,EACD,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,KAA0C,EACI,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,KAAK;QACR,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAyB,EAAE;IAChE,MAAM,MAAM,GAAqB,EAAE,CAAC;IAEpC,OAAO,aAAa,CAAC,IAAI,CAAC;QACxB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC;QACJ,IAAI,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5E,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,QAAQ,GAAqB,EAAE,CAAC;YACtC,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IACE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBACzD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EACxE,CAAC;oBACD,OAAO,IAAI,CAAC,CAAC;oBACb,SAAS;gBACX,CAAC;gBAED,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;YAE7C,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC,IAAI,CAC/C,aAAa,EACb,uBAAuB,CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CACzD,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3E,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CACrD,QAAQ,CAAC,IAAI,CAAC;IACZ,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;CACxB,CAAC,CACH,CAAC"}

package/dist/AuthConfig.d.ts

@@ -0,0 +1,42 @@
+import { Context, Layer } from "effect";
+import type { EmailVerificationSessionPolicyOptions } from "./AuthFlow.js";
+import type { ChallengeOptions } from "./Challenge.js";
+import { Crypto } from "./Crypto.js";
+import type { CryptoError, CryptoKey } from "./Crypto.js";
+import type { PrivacyOptions } from "./Privacy.js";
+import type { SessionCookieOptions, SessionsOptions } from "./Sessions.js";
+export interface AuthSecretsShape {
+    readonly session: CryptoKey;
+    readonly challenge: CryptoKey;
+    readonly privacy: CryptoKey;
+}
+declare const AuthSecrets_base: Context.ServiceClass<AuthSecrets, "auth/AuthSecrets", AuthSecretsShape>;
+export declare class AuthSecrets extends AuthSecrets_base {
+}
+export declare namespace AuthSecrets {
+    const make: (secrets: AuthSecretsShape) => AuthSecretsShape;
+}
+export declare const AuthSecretsLive: (secrets: AuthSecretsShape) => Layer.Layer<AuthSecrets, never, never>;
+export interface AuthSecretsFromRootOptions {
+    readonly root: CryptoKey;
+    readonly namespace?: string;
+}
+export declare const AuthSecretsFromRootLive: (options: AuthSecretsFromRootOptions) => Layer.Layer<AuthSecrets, CryptoError, Crypto>;
+export type AuthSessionsConfig = Omit<SessionsOptions, "secret">;
+export type AuthChallengeConfig = Omit<ChallengeOptions, "secret">;
+export type AuthPrivacyConfig = Omit<PrivacyOptions, "secret">;
+export declare const AuthSessionsConfig: Context.Reference<AuthSessionsConfig>;
+export declare const AuthSessionCookieConfig: Context.Reference<SessionCookieOptions>;
+export declare const AuthChallengeConfig: Context.Reference<AuthChallengeConfig>;
+export declare const AuthPrivacyConfig: Context.Reference<AuthPrivacyConfig>;
+export declare const AuthEmailVerificationSessionPolicyConfig: Context.Reference<EmailVerificationSessionPolicyOptions>;
+export interface AuthDomainConfigOptions {
+    readonly sessions?: AuthSessionsConfig;
+    readonly sessionCookie?: SessionCookieOptions;
+    readonly challenge?: AuthChallengeConfig;
+    readonly privacy?: AuthPrivacyConfig;
+    readonly emailVerificationSessionPolicy?: EmailVerificationSessionPolicyOptions;
+}
+export declare const AuthDomainConfigLive: (options?: AuthDomainConfigOptions) => Layer.Layer<never, never, never>;
+export {};
+//# sourceMappingURL=AuthConfig.d.ts.map

package/dist/AuthConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthConfig.d.ts","sourceRoot":"","sources":["../src/AuthConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,KAAK,EAAY,MAAM,QAAQ,CAAC;AAE1D,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;CAC7B;;AAED,qBAAa,WAAY,SAAQ,gBAGV;CAAG;AAE1B,yBAAiB,WAAW,CAAC;IACpB,MAAM,IAAI,GAAI,SAAS,gBAAgB,KAAG,gBACxB,CAAC;CAC3B;AAED,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,2CACF,CAAC;AAExD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAiBD,eAAO,MAAM,uBAAuB,GAClC,SAAS,0BAA0B,kDAapC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACjE,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAE/D,eAAO,MAAM,kBAAkB,uCAG9B,CAAC;AAEF,eAAO,MAAM,uBAAuB,yCAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,wCAG/B,CAAC;AAEF,eAAO,MAAM,iBAAiB,sCAG7B,CAAC;AAEF,eAAO,MAAM,wCAAwC,0DAIlD,CAAC;AAEJ,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,qCAAqC,CAAC;CACjF;AAED,eAAO,MAAM,oBAAoB,GAAI,UAAS,uBAA4B,qCAmBvE,CAAC"}

package/dist/AuthConfig.js

@@ -0,0 +1,43 @@
+import { Context, Effect, Layer, Redacted } from "effect";
+import { Crypto } from "./Crypto.js";
+export class AuthSecrets extends Context.Service()("auth/AuthSecrets") {
+}
+(function (AuthSecrets) {
+    AuthSecrets.make = (secrets) => AuthSecrets.of(secrets);
+})(AuthSecrets || (AuthSecrets = {}));
+export const AuthSecretsLive = (secrets) => Layer.succeed(AuthSecrets)(AuthSecrets.make(secrets));
+const deriveSecret = (root, namespace, purpose) => Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    const value = yield* crypto.hmacSha256({
+        key: root,
+        data: `${namespace}.${purpose}`,
+    });
+    return Redacted.make(value);
+});
+export const AuthSecretsFromRootLive = (options) => {
+    const namespace = options.namespace ?? "auth.secret.v1";
+    return Layer.effect(AuthSecrets)(Effect.gen(function* () {
+        return AuthSecrets.make({
+            session: yield* deriveSecret(options.root, namespace, "session"),
+            challenge: yield* deriveSecret(options.root, namespace, "challenge"),
+            privacy: yield* deriveSecret(options.root, namespace, "privacy"),
+        });
+    }));
+};
+export const AuthSessionsConfig = Context.Reference("auth/config/Sessions", { defaultValue: () => ({}) });
+export const AuthSessionCookieConfig = Context.Reference("auth/config/SessionCookie", { defaultValue: () => ({}) });
+export const AuthChallengeConfig = Context.Reference("auth/config/Challenge", { defaultValue: () => ({}) });
+export const AuthPrivacyConfig = Context.Reference("auth/config/Privacy", { defaultValue: () => ({}) });
+export const AuthEmailVerificationSessionPolicyConfig = Context.Reference("auth/config/EmailVerificationSessionPolicy", { defaultValue: () => ({}) });
+export const AuthDomainConfigLive = (options = {}) => Layer.mergeAll(options.sessions === undefined
+    ? Layer.empty
+    : Layer.succeed(AuthSessionsConfig)(options.sessions), options.sessionCookie === undefined
+    ? Layer.empty
+    : Layer.succeed(AuthSessionCookieConfig)(options.sessionCookie), options.challenge === undefined
+    ? Layer.empty
+    : Layer.succeed(AuthChallengeConfig)(options.challenge), options.privacy === undefined
+    ? Layer.empty
+    : Layer.succeed(AuthPrivacyConfig)(options.privacy), options.emailVerificationSessionPolicy === undefined
+    ? Layer.empty
+    : Layer.succeed(AuthEmailVerificationSessionPolicyConfig)(options.emailVerificationSessionPolicy));
+//# sourceMappingURL=AuthConfig.js.map

package/dist/AuthConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthConfig.js","sourceRoot":"","sources":["../src/AuthConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAI1D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAWrC,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAG7C,CAAC,kBAAkB,CAAC;CAAG;AAE1B,WAAiB,WAAW;IACb,gBAAI,GAAG,CAAC,OAAyB,EAAoB,EAAE,CAClE,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC,EAHgB,WAAW,KAAX,WAAW,QAG3B;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAyB,EAAE,EAAE,CAC3D,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAOxD,MAAM,YAAY,GAAG,CACnB,IAAe,EACf,SAAiB,EACjB,OAAe,EACgD,EAAE,CACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,GAAG,SAAS,IAAI,OAAO,EAAE;KAChC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAmC,EACnC,EAAE;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,OAAO,WAAW,CAAC,IAAI,CAAC;YACtB,OAAO,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC;YAChE,SAAS,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC;YACpE,OAAO,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC;SACjE,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,CACjD,sBAAsB,EACtB,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC,SAAS,CACtD,2BAA2B,EAC3B,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAClD,uBAAuB,EACvB,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAChD,qBAAqB,EACrB,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GACnD,OAAO,CAAC,SAAS,CACf,4CAA4C,EAC5C,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7B,CAAC;AAUJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,UAAmC,EAAE,EAAE,EAAE,CAC5E,KAAK,CAAC,QAAQ,CACZ,OAAO,CAAC,QAAQ,KAAK,SAAS;IAC5B,CAAC,CAAC,KAAK,CAAC,KAAK;IACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvD,OAAO,CAAC,aAAa,KAAK,SAAS;IACjC,CAAC,CAAC,KAAK,CAAC,KAAK;IACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EACjE,OAAO,CAAC,SAAS,KAAK,SAAS;IAC7B,CAAC,CAAC,KAAK,CAAC,KAAK;IACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EACzD,OAAO,CAAC,OAAO,KAAK,SAAS;IAC3B,CAAC,CAAC,KAAK,CAAC,KAAK;IACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EACrD,OAAO,CAAC,8BAA8B,KAAK,SAAS;IAClD,CAAC,CAAC,KAAK,CAAC,KAAK;IACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,wCAAwC,CAAC,CACrD,OAAO,CAAC,8BAA8B,CACvC,CACN,CAAC"}