@effect-auth/core 0.1.0-alpha.10 → 0.1.0-alpha.13

package/dist/index.js

@@ -6,13 +6,16 @@ export * from "./AuthFlow.js";
 export * from "./AuthKernel.js";
 export * from "./Challenge.js";
 export * from "./Crypto.js";
+export * from "./DomainVerification.js";
 export * from "./EmailOtp.js";
 export * from "./EmailVerification.js";
 export * from "./Identifiers.js";
+export * from "./IncidentAction.js";
 export * from "./Jwt.js";
 export * from "./LoginApproval.js";
 export * from "./LoginNotification.js";
 export * from "./LoginRisk.js";
+export * from "./MachineAuth.js";
 export * from "./Mailer.js";
 export * from "./MagicLink.js";
 export * from "./OAuth.js";
@@ -22,6 +25,7 @@ export * from "./Policy.js";
 export * from "./Privacy.js";
 export * from "./RecoveryCode.js";
 export * from "./RefreshToken.js";
+export * from "./Retention.js";
 export * from "./Sessions.js";
 export * from "./SecurityTimeline.js";
 export * from "./Storage.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/migrations/0014_auth_webhook_outbox.sql

@@ -0,0 +1,16 @@
+create table if not exists auth_webhook_outbox (
+  id text primary key,
+  endpoint_key text not null,
+  event text not null,
+  status text not null,
+  attempts integer not null,
+  next_attempt_at integer not null,
+  created_at integer not null,
+  updated_at integer not null,
+  delivered_at integer,
+  last_error text
+);
+
+create index if not exists auth_webhook_outbox_due_idx on auth_webhook_outbox (next_attempt_at, status);
+create index if not exists auth_webhook_outbox_endpoint_due_idx on auth_webhook_outbox (endpoint_key, next_attempt_at);
+create index if not exists auth_webhook_outbox_status_idx on auth_webhook_outbox (status);

package/migrations/0015_auth_webhook_replay.sql

@@ -0,0 +1,7 @@
+create table if not exists auth_webhook_replay (
+  id text primary key,
+  expires_at integer not null,
+  created_at integer not null
+);
+
+create index if not exists auth_webhook_replay_expires_at_idx on auth_webhook_replay (expires_at);

package/migrations/0016_auth_login_risk_history.sql

@@ -0,0 +1,23 @@
+create table if not exists auth_login_risk_history (
+  id text primary key,
+  user_id text not null,
+  occurred_at integer not null,
+  outcome text not null,
+  method text not null,
+  amr text not null,
+  aal text not null,
+  device_status text not null,
+  device_key text,
+  location_key text,
+  country text,
+  region text,
+  latitude_micro integer,
+  longitude_micro integer,
+  risk_level text,
+  created_at integer not null
+);
+
+create index if not exists auth_login_risk_history_user_occurred_at_idx on auth_login_risk_history (user_id, occurred_at);
+create index if not exists auth_login_risk_history_user_device_key_idx on auth_login_risk_history (user_id, device_key);
+create index if not exists auth_login_risk_history_user_location_key_idx on auth_login_risk_history (user_id, location_key);
+create index if not exists auth_login_risk_history_occurred_at_idx on auth_login_risk_history (occurred_at);

package/migrations/0017_auth_audit_log.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_audit_log (
+  id text,
+  type text not null,
+  user_id text,
+  actor_user_id text,
+  occurred_at integer not null,
+  request_ip_hash text,
+  request_user_agent_hash text,
+  event text not null,
+  created_at integer not null
+);
+
+create index if not exists auth_audit_log_id_idx on auth_audit_log (id);
+create index if not exists auth_audit_log_user_occurred_at_idx on auth_audit_log (user_id, occurred_at);
+create index if not exists auth_audit_log_actor_user_occurred_at_idx on auth_audit_log (actor_user_id, occurred_at);
+create index if not exists auth_audit_log_type_occurred_at_idx on auth_audit_log (type, occurred_at);
+create index if not exists auth_audit_log_occurred_at_idx on auth_audit_log (occurred_at);

package/migrations/0018_auth_domain_verification.sql

@@ -0,0 +1,18 @@
+create table if not exists auth_domain_verification (
+  id text primary key,
+  owner_id text not null,
+  domain text not null,
+  proof_method text not null,
+  proof_token text not null,
+  status text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  verified_at integer,
+  revoked_at integer,
+  last_checked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_domain_verification_owner_domain_idx on auth_domain_verification (owner_id, domain);
+create index if not exists auth_domain_verification_domain_idx on auth_domain_verification (domain);
+create index if not exists auth_domain_verification_status_expires_at_idx on auth_domain_verification (status, expires_at);

package/migrations/0019_auth_oauth_authorization_code.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_oauth_authorization_code (
+  code_hash text primary key,
+  client_id text not null,
+  subject text not null,
+  redirect_uri text not null,
+  scopes text not null,
+  code_challenge text,
+  code_challenge_method text,
+  issued_at integer not null,
+  expires_at integer not null,
+  consumed_at integer,
+  metadata text
+);
+
+create index if not exists auth_oauth_authorization_code_client_expires_at_idx on auth_oauth_authorization_code (client_id, expires_at);
+create index if not exists auth_oauth_authorization_code_expires_at_idx on auth_oauth_authorization_code (expires_at);
+create index if not exists auth_oauth_authorization_code_consumed_at_idx on auth_oauth_authorization_code (consumed_at);

package/migrations/0020_auth_oauth_provider_mode_token.sql

@@ -0,0 +1,24 @@
+create table if not exists auth_oauth_provider_mode_token (
+  token_hash text primary key,
+  token_type text not null,
+  client_id text not null,
+  subject text not null,
+  scopes text not null,
+  issued_at integer not null,
+  expires_at integer not null,
+  issuer text,
+  audience text,
+  jwt_id text,
+  revoked_at integer,
+  revocation_reason text,
+  rotated_at integer,
+  replaced_by_token_hash text,
+  metadata text
+);
+
+create index if not exists auth_oauth_provider_mode_token_client_expires_at_idx on auth_oauth_provider_mode_token (client_id, expires_at);
+create index if not exists auth_oauth_provider_mode_token_subject_idx on auth_oauth_provider_mode_token (subject);
+create index if not exists auth_oauth_provider_mode_token_expires_at_idx on auth_oauth_provider_mode_token (expires_at);
+create index if not exists auth_oauth_provider_mode_token_revoked_at_idx on auth_oauth_provider_mode_token (revoked_at);
+create index if not exists auth_oauth_provider_mode_token_rotated_at_idx on auth_oauth_provider_mode_token (rotated_at);
+create index if not exists auth_oauth_provider_mode_token_jwt_id_idx on auth_oauth_provider_mode_token (jwt_id);

package/migrations/0021_auth_oauth_client_secret.sql

@@ -0,0 +1,14 @@
+create table if not exists auth_oauth_client_secret (
+  prefix text primary key,
+  client_id text not null,
+  secret_hash text not null,
+  authentication_methods text not null,
+  created_at integer not null,
+  expires_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_oauth_client_secret_client_prefix_idx on auth_oauth_client_secret (client_id, prefix);
+create index if not exists auth_oauth_client_secret_client_id_idx on auth_oauth_client_secret (client_id);

package/migrations/0022_auth_oauth_client.sql

@@ -0,0 +1,15 @@
+create table if not exists auth_oauth_client (
+  id text primary key,
+  type text not null,
+  status text not null,
+  name text,
+  redirect_uris text not null,
+  allowed_grant_types text not null,
+  allowed_response_types text not null,
+  allowed_scopes text,
+  created_at integer,
+  updated_at integer,
+  metadata text
+);
+
+create index if not exists auth_oauth_client_status_idx on auth_oauth_client (status);

package/migrations/0023_auth_oauth_consent.sql

@@ -0,0 +1,15 @@
+create table if not exists auth_oauth_consent (
+  id text primary key,
+  user_id text not null,
+  client_id text not null,
+  scopes text not null,
+  granted_at integer not null,
+  expires_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_oauth_consent_user_client_idx on auth_oauth_consent (user_id, client_id);
+create index if not exists auth_oauth_consent_user_id_idx on auth_oauth_consent (user_id);
+create index if not exists auth_oauth_consent_expires_at_idx on auth_oauth_consent (expires_at);
+create index if not exists auth_oauth_consent_revoked_at_idx on auth_oauth_consent (revoked_at);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@effect-auth/core",
-  "version": "0.1.0-alpha.10",
+  "version": "0.1.0-alpha.13",
   "description": "Composable Effect-first authentication primitives.",
   "license": "MIT",
   "files": [
@@ -65,6 +65,10 @@
       "types": "./dist/Crypto.d.ts",
       "default": "./dist/Crypto.js"
     },
+    "./DomainVerification": {
+      "types": "./dist/DomainVerification.d.ts",
+      "default": "./dist/DomainVerification.js"
+    },
     "./EffectQbSqliteStorage": {
       "types": "./dist/EffectQbSqliteStorage.d.ts",
       "default": "./dist/EffectQbSqliteStorage.js"
@@ -89,6 +93,10 @@
       "types": "./dist/Identifiers.d.ts",
       "default": "./dist/Identifiers.js"
     },
+    "./IncidentAction": {
+      "types": "./dist/IncidentAction.d.ts",
+      "default": "./dist/IncidentAction.js"
+    },
     "./LoginApproval": {
       "types": "./dist/LoginApproval.d.ts",
       "default": "./dist/LoginApproval.js"
@@ -101,6 +109,10 @@
       "types": "./dist/LoginRisk.d.ts",
       "default": "./dist/LoginRisk.js"
     },
+    "./MachineAuth": {
+      "types": "./dist/MachineAuth.d.ts",
+      "default": "./dist/MachineAuth.js"
+    },
     "./Jwt": {
       "types": "./dist/Jwt.d.ts",
       "default": "./dist/Jwt.js"
@@ -141,6 +153,10 @@
       "types": "./dist/RefreshToken.d.ts",
       "default": "./dist/RefreshToken.js"
     },
+    "./Retention": {
+      "types": "./dist/Retention.d.ts",
+      "default": "./dist/Retention.js"
+    },
     "./Password": {
       "types": "./dist/Password.d.ts",
       "default": "./dist/Password.js"