@effect-auth/core 0.1.0-alpha.15 → 0.1.0-alpha.18

package/dist/index.d.ts

@@ -1,37 +1,2 @@
 export declare const packageName: "@effect-auth/core";
-export * from "./ApiKey.js";
-export * from "./AuditLog.js";
-export * from "./AuthConfig.js";
-export * from "./AuthFlow.js";
-export * from "./AuthKernel.js";
-export * from "./Challenge.js";
-export * from "./Crypto.js";
-export * from "./DomainVerification.js";
-export * from "./EmailOtp.js";
-export * from "./EmailVerification.js";
-export * from "./Identifiers.js";
-export * from "./IncidentAction.js";
-export * from "./Jwt.js";
-export * from "./LoginApproval.js";
-export * from "./LoginNotification.js";
-export * from "./LoginRisk.js";
-export * from "./MachineAuth.js";
-export * from "./Mailer.js";
-export * from "./MagicLink.js";
-export * from "./OAuth.js";
-export * from "./Password.js";
-export * from "./Passkey.js";
-export * from "./Policy.js";
-export * from "./Privacy.js";
-export * from "./RecoveryCode.js";
-export * from "./RefreshToken.js";
-export * from "./Retention.js";
-export * from "./Sessions.js";
-export * from "./SecurityTimeline.js";
-export * from "./Storage.js";
-export * from "./StepUp.js";
-export * from "./Totp.js";
-export * from "./TrustedDevice.js";
-export * from "./WaitUntil.js";
-export * from "./Webhook.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAC"}

package/dist/index.js

@@ -1,37 +1,2 @@
 export const packageName = "@effect-auth/core";
-export * from "./ApiKey.js";
-export * from "./AuditLog.js";
-export * from "./AuthConfig.js";
-export * from "./AuthFlow.js";
-export * from "./AuthKernel.js";
-export * from "./Challenge.js";
-export * from "./Crypto.js";
-export * from "./DomainVerification.js";
-export * from "./EmailOtp.js";
-export * from "./EmailVerification.js";
-export * from "./Identifiers.js";
-export * from "./IncidentAction.js";
-export * from "./Jwt.js";
-export * from "./LoginApproval.js";
-export * from "./LoginNotification.js";
-export * from "./LoginRisk.js";
-export * from "./MachineAuth.js";
-export * from "./Mailer.js";
-export * from "./MagicLink.js";
-export * from "./OAuth.js";
-export * from "./Password.js";
-export * from "./Passkey.js";
-export * from "./Policy.js";
-export * from "./Privacy.js";
-export * from "./RecoveryCode.js";
-export * from "./RefreshToken.js";
-export * from "./Retention.js";
-export * from "./Sessions.js";
-export * from "./SecurityTimeline.js";
-export * from "./Storage.js";
-export * from "./StepUp.js";
-export * from "./Totp.js";
-export * from "./TrustedDevice.js";
-export * from "./WaitUntil.js";
-export * from "./Webhook.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC"}

package/dist/internal/AuthFlowFinalizer.d.ts

@@ -0,0 +1,31 @@
+import { Context, Effect, Layer } from "effect";
+import type { AuthFlowCompleteError, AuthFlowCompleteInput, AuthFlowDerivedInput, AuthResultOf, AuthenticatedResult } from "../AuthFlow.js";
+import type { LoginNotificationService } from "../LoginNotification.js";
+import type { RecoveryRequirementPolicyService } from "../RecoveryPolicy.js";
+import { Sessions } from "../Sessions.js";
+import type { PreparedSession, SessionsService } from "../Sessions.js";
+export interface AuthFlowTerminalDependencies {
+    readonly sessions: SessionsService;
+    readonly loginNotification?: LoginNotificationService;
+    readonly recoveryRequirementPolicy?: RecoveryRequirementPolicyService;
+}
+export interface PreparedAuthFlowTerminal {
+    readonly _tag: "PreparedAuthenticated";
+    readonly prepared: PreparedSession;
+    readonly notify: Effect.Effect<void>;
+}
+export interface AuthFlowTerminal {
+    readonly derive: (input: AuthFlowCompleteInput) => Effect.Effect<AuthFlowDerivedInput, AuthFlowCompleteError>;
+    readonly complete: (input: AuthFlowDerivedInput) => Effect.Effect<AuthenticatedResult | AuthResultOf<"PolicyDenied">, AuthFlowCompleteError>;
+    readonly prepare: (input: AuthFlowDerivedInput) => Effect.Effect<PreparedAuthFlowTerminal | AuthResultOf<"PolicyDenied">, AuthFlowCompleteError>;
+}
+export declare const makeAuthFlowTerminal: (dependencies: AuthFlowTerminalDependencies) => AuthFlowTerminal;
+export interface AuthFlowFinalizerService {
+    readonly complete: (input: AuthFlowCompleteInput) => Effect.Effect<AuthenticatedResult | AuthResultOf<"PolicyDenied">, AuthFlowCompleteError>;
+}
+declare const AuthFlowFinalizer_base: Context.ServiceClass<AuthFlowFinalizer, "auth/internal/AuthFlowFinalizer", AuthFlowFinalizerService>;
+export declare class AuthFlowFinalizer extends AuthFlowFinalizer_base {
+}
+export declare const AuthFlowFinalizerLive: Layer.Layer<AuthFlowFinalizer, never, Sessions>;
+export {};
+//# sourceMappingURL=AuthFlowFinalizer.d.ts.map

package/dist/internal/AuthFlowFinalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthFlowFinalizer.d.ts","sourceRoot":"","sources":["../../src/internal/AuthFlowFinalizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAkB,MAAM,QAAQ,CAAC;AAShE,OAAO,KAAK,EACV,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,KAAK,EACV,wBAAwB,EAEzB,MAAM,yBAAyB,CAAC;AAWjC,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAEL,QAAQ,EAET,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAEV,eAAe,EACf,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,gCAAgC,CAAC;CACvE;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,qBAAqB,KACzB,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;IAChE,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAChB,mBAAmB,GAAG,YAAY,CAAC,cAAc,CAAC,EAClD,qBAAqB,CACtB,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,CAChB,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAChB,wBAAwB,GAAG,YAAY,CAAC,cAAc,CAAC,EACvD,qBAAqB,CACtB,CAAC;CACH;AA2ED,eAAO,MAAM,oBAAoB,iBACjB,4BAA4B,KACzC,gBAsJF,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,qBAAqB,KACzB,MAAM,CAAC,MAAM,CAChB,mBAAmB,GAAG,YAAY,CAAC,cAAc,CAAC,EAClD,qBAAqB,CACtB,CAAC;CACH;;AAED,qBAAa,iBAAkB,SAAQ,sBAGD;CAAG;AAEzC,eAAO,MAAM,qBAAqB,iDAuBjC,CAAC"}

package/dist/internal/AuthFlowFinalizer.js

@@ -0,0 +1,182 @@
+import { Context, Effect, Layer, Option, Result } from "effect";
+import { compactAuthenticationEventsResult, deriveAssuranceResult, deriveMfaVerifiedAtResult, maximumSessionAuthenticationEvents, validateAuthenticationEvidenceTimestamps, } from "../Assurance.js";
+import { currentUnixMillis } from "../Internal.js";
+import { unknownLoginDeviceContext } from "../LoginApproval.js";
+import { LoginNotification } from "../LoginNotification.js";
+import { defaultLoginRiskContext } from "../LoginRisk.js";
+import { RecoveryRequirementPolicy, defaultRecoveryRemediationCapabilities, makeRecoveryRequirementPolicyAllow, recoveryPolicyInput, withRecoveryEnrollmentRequirement, withRecoveryRemediationRequirement, } from "../RecoveryPolicy.js";
+import { SessionCreateError, Sessions, sessionRequestMetadataKey, } from "../Sessions.js";
+const loginNotificationSession = (session) => ({
+    sessionId: session.sessionId,
+    userId: session.userId,
+    authTime: session.authTime,
+    expiresAt: session.expiresAt,
+    aal: session.aal,
+    amr: session.amr,
+    ...(session.claims === undefined ? {} : { claims: session.claims }),
+});
+const loginRequestContextFromMetadata = (metadata) => {
+    const value = metadata?.[sessionRequestMetadataKey];
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+};
+const appMetadata = (metadata) => {
+    if (metadata === undefined) {
+        return undefined;
+    }
+    const { method: _method, evidence: _evidence, identity: _identity, emailDestination: _emailDestination, intent: _intent, deviceStatus: _deviceStatus, deviceKey: _deviceKey, locationKey: _locationKey, claims: _claims, [sessionRequestMetadataKey]: _request, ...rest } = metadata;
+    return Object.keys(rest).length === 0 ? undefined : rest;
+};
+const persistedSessionMetadata = (input) => input.request === undefined
+    ? input.metadata
+    : {
+        ...input.metadata,
+        [sessionRequestMetadataKey]: input.request,
+    };
+const fromEvidenceValidationResult = (result) => Effect.fromResult(result).pipe(Effect.mapError((cause) => new SessionCreateError({
+    message: "Session evidence policy validation failed",
+    cause,
+})));
+const primaryFactorNotEstablished = () => ({
+    _tag: "PolicyDenied",
+    reason: "Authentication evidence did not establish a primary factor",
+});
+export const makeAuthFlowTerminal = (dependencies) => {
+    const recoveryRequirementPolicy = dependencies.recoveryRequirementPolicy ??
+        makeRecoveryRequirementPolicyAllow();
+    const { customEvidencePolicies } = dependencies.sessions;
+    const derive = Effect.fn("auth.auth_flow.derive")(function* (input) {
+        const serverNow = yield* currentUnixMillis;
+        yield* fromEvidenceValidationResult(validateAuthenticationEvidenceTimestamps(input.evidence, serverNow));
+        const evidence = yield* fromEvidenceValidationResult(compactAuthenticationEventsResult(input.evidence, maximumSessionAuthenticationEvents, customEvidencePolicies));
+        const assurance = yield* fromEvidenceValidationResult(deriveAssuranceResult(evidence, { customEvidencePolicies }));
+        const mfaVerifiedAt = yield* fromEvidenceValidationResult(deriveMfaVerifiedAtResult(evidence, customEvidencePolicies));
+        return {
+            ...input,
+            evidence,
+            aal: assurance.level,
+            amr: assurance.amr,
+            primaryEstablished: assurance.primaryEstablished,
+            recoveryRemediation: assurance.recoveryRemediation,
+            ...(mfaVerifiedAt === undefined ? {} : { mfaVerifiedAt }),
+        };
+    });
+    const notifyLogin = (input, session) => dependencies.loginNotification === undefined
+        ? Effect.void
+        : dependencies.loginNotification
+            .notify({
+            userId: input.userId,
+            ...(input.identity === undefined
+                ? {}
+                : { identity: input.identity }),
+            ...(input.emailDestination === undefined
+                ? {}
+                : { emailDestination: input.emailDestination }),
+            ...(input.intent === undefined ? {} : { intent: input.intent }),
+            method: input.method,
+            amr: input.amr,
+            aal: input.aal,
+            session: loginNotificationSession(session),
+            device: input.device ?? unknownLoginDeviceContext,
+            risk: input.risk ?? defaultLoginRiskContext,
+            request: input.request ?? loginRequestContextFromMetadata(input.metadata),
+            ...(input.metadata === undefined
+                ? {}
+                : { metadata: input.metadata }),
+        })
+            .pipe(Effect.catchCause(() => Effect.void));
+    const recoveryClaims = (input) => Effect.gen(function* () {
+        const decision = yield* recoveryRequirementPolicy.decide(recoveryPolicyInput({
+            ...input,
+            request: input.request ?? loginRequestContextFromMetadata(input.metadata),
+            metadata: appMetadata(input.metadata),
+        }));
+        if (decision.type === "deny") {
+            return Option.none();
+        }
+        const policyClaims = decision.type === "require-enrollment"
+            ? withRecoveryEnrollmentRequirement(input.claims, decision.allowed)
+            : input.claims;
+        return Option.some(input.recoveryRemediation
+            ? withRecoveryRemediationRequirement(policyClaims, defaultRecoveryRemediationCapabilities)
+            : policyClaims);
+    });
+    return {
+        derive,
+        complete: Effect.fn("auth.auth_flow.complete")(function* (input) {
+            yield* Effect.annotateCurrentSpan({
+                "auth.method": input.method,
+                "auth.aal": input.aal,
+                "auth.amr_count": input.amr.length,
+            });
+            if (!input.primaryEstablished) {
+                yield* Effect.annotateCurrentSpan("auth.result", "PolicyDenied");
+                return primaryFactorNotEstablished();
+            }
+            const claims = yield* recoveryClaims(input);
+            if (Option.isNone(claims)) {
+                yield* Effect.annotateCurrentSpan("auth.result", "PolicyDenied");
+                return { _tag: "PolicyDenied" };
+            }
+            const session = yield* dependencies.sessions.create({
+                userId: input.userId,
+                authenticationEvents: input.evidence,
+                ...(Option.isNone(claims) ? {} : { claims: claims.value }),
+                ...(input.mfaVerifiedAt === undefined
+                    ? {}
+                    : { mfaVerifiedAt: input.mfaVerifiedAt }),
+                metadata: persistedSessionMetadata(input),
+            });
+            yield* notifyLogin(input, session);
+            yield* Effect.annotateCurrentSpan("auth.result", "Authenticated");
+            return { _tag: "Authenticated", session };
+        }),
+        prepare: Effect.fn("auth.auth_flow.prepare_complete")(function* (input) {
+            if (!input.primaryEstablished) {
+                return primaryFactorNotEstablished();
+            }
+            const claims = yield* recoveryClaims(input);
+            if (Option.isNone(claims)) {
+                return { _tag: "PolicyDenied" };
+            }
+            if (dependencies.sessions.prepareCreate === undefined) {
+                return {
+                    _tag: "PolicyDenied",
+                    reason: "Atomic recovery login is not configured",
+                };
+            }
+            const prepared = yield* dependencies.sessions.prepareCreate({
+                userId: input.userId,
+                authenticationEvents: input.evidence,
+                claims: claims.value,
+                metadata: persistedSessionMetadata(input),
+            });
+            return {
+                _tag: "PreparedAuthenticated",
+                prepared,
+                notify: notifyLogin(input, prepared.session),
+            };
+        }),
+    };
+};
+export class AuthFlowFinalizer extends Context.Service()("auth/internal/AuthFlowFinalizer") {
+}
+export const AuthFlowFinalizerLive = Layer.effect(AuthFlowFinalizer, Effect.gen(function* () {
+    const sessions = yield* Sessions;
+    const loginNotification = yield* Effect.serviceOption(LoginNotification);
+    const recoveryRequirementPolicy = yield* Effect.serviceOption(RecoveryRequirementPolicy);
+    const terminal = makeAuthFlowTerminal({
+        sessions,
+        ...(Option.isSome(loginNotification)
+            ? { loginNotification: loginNotification.value }
+            : {}),
+        ...(Option.isSome(recoveryRequirementPolicy)
+            ? { recoveryRequirementPolicy: recoveryRequirementPolicy.value }
+            : {}),
+    });
+    return AuthFlowFinalizer.of({
+        complete: (input) => terminal.derive(input).pipe(Effect.flatMap(terminal.complete)),
+    });
+}));
+//# sourceMappingURL=AuthFlowFinalizer.js.map

package/dist/internal/AuthFlowFinalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthFlowFinalizer.js","sourceRoot":"","sources":["../../src/internal/AuthFlowFinalizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhE,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,wCAAwC,GACzC,MAAM,iBAAiB,CAAC;AAQzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAK5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EACL,yBAAyB,EACzB,sCAAsC,EACtC,kCAAkC,EAClC,mBAAmB,EACnB,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAqCxB,MAAM,wBAAwB,GAAG,CAC/B,OAAsB,EACI,EAAE,CAAC,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,CACtC,QAAuD,EACtB,EAAE;IACnC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,yBAAyB,CAAC,CAAC;IAEpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,QAAuD,EACR,EAAE;IACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,SAAS,EACnB,QAAQ,EAAE,SAAS,EACnB,gBAAgB,EAAE,iBAAiB,EACnC,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,aAAa,EAC3B,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,YAAY,EACzB,MAAM,EAAE,OAAO,EACf,CAAC,yBAAyB,CAAC,EAAE,QAAQ,EACrC,GAAG,IAAI,EACR,GAAG,QAAQ,CAAC;IAEb,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,KAA2B,EACoB,EAAE,CACjD,KAAK,CAAC,OAAO,KAAK,SAAS;IACzB,CAAC,CAAC,KAAK,CAAC,QAAQ;IAChB,CAAC,CAAC;QACE,GAAG,KAAK,CAAC,QAAQ;QACjB,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC,OAAO;KAC3C,CAAC;AAER,MAAM,4BAA4B,GAAG,CACnC,MAA2B,EACW,EAAE,CACxC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5B,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;IACrB,OAAO,EAAE,2CAA2C;IACpD,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,2BAA2B,GAAG,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,EAAE,cAAuB;IAC7B,MAAM,EAAE,4DAA4D;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,YAA0C,EACxB,EAAE;IACpB,MAAM,yBAAyB,GAC7B,YAAY,CAAC,yBAAyB;QACtC,kCAAkC,EAAE,CAAC;IACvC,MAAM,EAAE,sBAAsB,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EACzD,KAA4B;QAE5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QAC3C,KAAK,CAAC,CAAC,4BAA4B,CACjC,wCAAwC,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CACpE,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAClD,iCAAiC,CAC/B,KAAK,CAAC,QAAQ,EACd,kCAAkC,EAClC,sBAAsB,CACvB,CACF,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,4BAA4B,CACnD,qBAAqB,CAAC,QAAQ,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAC5D,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,4BAA4B,CACvD,yBAAyB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAC5D,CAAC;QAEF,OAAO;YACL,GAAG,KAAK;YACR,QAAQ;YACR,GAAG,EAAE,SAAS,CAAC,KAAK;YACpB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YAChD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;YAClD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,KAA2B,EAAE,OAAsB,EAAE,EAAE,CAC1E,YAAY,CAAC,iBAAiB,KAAK,SAAS;QAC1C,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,YAAY,CAAC,iBAAiB;aAC3B,MAAM,CAAC;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC;YAC1C,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,yBAAyB;YACjD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,uBAAuB;YAC3C,OAAO,EACL,KAAK,CAAC,OAAO,IAAI,+BAA+B,CAAC,KAAK,CAAC,QAAQ,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SAClC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,CAAC,KAA2B,EAAE,EAAE,CACrD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,MAAM,CACtD,mBAAmB,CAAC;YAClB,GAAG,KAAK;YACR,OAAO,EACL,KAAK,CAAC,OAAO,IAAI,+BAA+B,CAAC,KAAK,CAAC,QAAQ,CAAC;YAClE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SACtC,CAAC,CACH,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,YAAY,GAChB,QAAQ,CAAC,IAAI,KAAK,oBAAoB;YACpC,CAAC,CAAC,iCAAiC,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAEnB,OAAO,MAAM,CAAC,IAAI,CAChB,KAAK,CAAC,mBAAmB;YACvB,CAAC,CAAC,kCAAkC,CAChC,YAAY,EACZ,sCAAsC,CACvC;YACH,CAAC,CAAC,YAAY,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YAC7D,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBAChC,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,UAAU,EAAE,KAAK,CAAC,GAAG;gBACrB,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM;aACnC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC9B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;gBACjE,OAAO,2BAA2B,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;gBACjE,OAAO,EAAE,IAAI,EAAE,cAAuB,EAAE,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAClD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,oBAAoB,EAAE,KAAK,CAAC,QAAQ;gBACpC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC3C,QAAQ,EAAE,wBAAwB,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACnC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YAElE,OAAO,EAAE,IAAI,EAAE,eAAwB,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YACpE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC9B,OAAO,2BAA2B,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,cAAuB,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACtD,OAAO;oBACL,IAAI,EAAE,cAAuB;oBAC7B,MAAM,EAAE,yCAAyC;iBAClD,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC1D,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,oBAAoB,EAAE,KAAK,CAAC,QAAQ;gBACpC,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,QAAQ,EAAE,wBAAwB,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI,EAAE,uBAAgC;gBACtC,QAAQ;gBACR,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;aAC7C,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AAWF,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,iCAAiC,CAAC;CAAG;AAEzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,CAC/C,iBAAiB,EACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACzE,MAAM,yBAAyB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAC3D,yBAAyB,CAC1B,CAAC;IACF,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClC,CAAC,CAAC,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,KAAK,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;YAC1C,CAAC,CAAC,EAAE,yBAAyB,EAAE,yBAAyB,CAAC,KAAK,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,OAAO,iBAAiB,CAAC,EAAE,CAAC;QAC1B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;KACjE,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/dist/internal/RateLimitDurableObject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimitDurableObject.d.ts","sourceRoot":"","sources":["../../src/internal/RateLimitDurableObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,WAAW,IAAI,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAEpF,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,EACxB,GAAG,EAAE,MAAM,KACR,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EACtB,IAAI,EAAE,CACJ,WAAW,EAAE,6BAA6B,KACvC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,sCAAsC,KAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,sCAAsC,KAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,yBAAyB,CAAC;CACjE;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AA4BD,eAAO,MAAM,6BAA6B,GACxC,SAAS,6BAA6B,KACrC,yBA+DD,CAAC;AAEH,eAAO,MAAM,oCAAoC,GAC/C,SAAS,kCAAkC,KAC1C,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,gBAAgB,CA2BrD,CAAC"}
+{"version":3,"file":"RateLimitDurableObject.d.ts","sourceRoot":"","sources":["../../src/internal/RateLimitDurableObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,WAAW,IAAI,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAEpF,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,EACxB,GAAG,EAAE,MAAM,KACR,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EACtB,IAAI,EAAE,CACJ,WAAW,EAAE,6BAA6B,KACvC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,sCAAsC,KAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,sCAAsC,KAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,yBAAyB,CAAC;CACjE;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAsCD,eAAO,MAAM,6BAA6B,YAC/B,6BAA6B,KACrC,yBA+DD,CAAC;AAEH,eAAO,MAAM,oCAAoC,YACtC,kCAAkC,KAC1C,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,gBAAgB,CA8BrD,CAAC"}

package/dist/internal/RateLimitDurableObject.js

@@ -9,6 +9,7 @@ const storeError = (operation, cause) => new PersistenceRateLimiter.RateLimiterE
         cause,
     }),
 });
+const adaptiveUnsupported = (operation) => Effect.fail(storeError(operation, "Adaptive rate limiting is not supported by the Cloudflare Durable Object rate limit store"));
 export const makeRateLimitDurableObjectApi = (storage) => ({
     fixedWindow: (input) => storage.transaction((transaction) => Effect.gen(function* () {
         const now = yield* Clock.currentTimeMillis;
@@ -75,6 +76,8 @@ export const makeRateLimitDurableObjectStoreLayer = (options) => {
             allowOverflow: input.allowOverflow,
         })
             .pipe(Effect.mapError((cause) => storeError("tokenBucket", cause))),
+        adaptiveConsume: () => adaptiveUnsupported("adaptiveConsume"),
+        adaptiveFeedback: () => adaptiveUnsupported("adaptiveFeedback"),
     }));
 };
 //# sourceMappingURL=RateLimitDurableObject.js.map

package/dist/internal/RateLimitDurableObject.js.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimitDurableObject.js","sourceRoot":"","sources":["../../src/internal/RateLimitDurableObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,WAAW,IAAI,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAuDpF,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEtE,MAAM,UAAU,GAAG,CACjB,SAAiB,EACjB,KAAc,EAC2B,EAAE,CAC3C,IAAI,sBAAsB,CAAC,gBAAgB,CAAC;IAC1C,MAAM,EAAE,IAAI,sBAAsB,CAAC,mBAAmB,CAAC;QACrD,OAAO,EAAE,4DAA4D,SAAS,EAAE;QAChF,KAAK;KACN,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,OAAsC,EACX,EAAE,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAmB,cAAc,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACzC,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAExD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YACzD,OAAO,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS,GAAG,YAAY,GAAG,KAAK,CAAC,MAAM;SAC3D,CAAC;QAEF,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE7C,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAU,CAAC;IAClE,CAAC,CAAC,CACH;IAEH,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAmB,cAAc,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;YACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC;YAEvD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,GAAG;oBACP,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC1D,UAAU,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,GAAG,YAAY;iBAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAE/C,IAAI,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE;gBACrC,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CACH;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAClD,OAA2C,EACW,EAAE;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAC7B,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;IAEjD,OAAO,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAC9D,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aACd,WAAW,CAAC;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;QAEvE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aACd,WAAW,CAAC;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;KACxE,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"RateLimitDurableObject.js","sourceRoot":"","sources":["../../src/internal/RateLimitDurableObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,WAAW,IAAI,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAuDpF,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEtE,MAAM,UAAU,GAAG,CACjB,SAAiB,EACjB,KAAc,EAC2B,EAAE,CAC3C,IAAI,sBAAsB,CAAC,gBAAgB,CAAC;IAC1C,MAAM,EAAE,IAAI,sBAAsB,CAAC,mBAAmB,CAAC;QACrD,OAAO,EAAE,4DAA4D,SAAS,EAAE;QAChF,KAAK;KACN,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAC1B,SAAiB,EAC8C,EAAE,CACjE,MAAM,CAAC,IAAI,CACT,UAAU,CACR,SAAS,EACT,2FAA2F,CAC5F,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,OAAsC,EACX,EAAE,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAmB,cAAc,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACzC,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAExD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YACzD,OAAO,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS,GAAG,YAAY,GAAG,KAAK,CAAC,MAAM;SAC3D,CAAC;QAEF,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE7C,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAU,CAAC;IAClE,CAAC,CAAC,CACH;IAEH,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAmB,cAAc,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;YACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC;YAEvD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,GAAG;oBACP,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC1D,UAAU,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,GAAG,YAAY;iBAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAE/C,IAAI,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE;gBACrC,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CACH;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAClD,OAA2C,EACW,EAAE;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAC7B,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;IAEjD,OAAO,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAC9D,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aACd,WAAW,CAAC;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;QAEvE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aACd,WAAW,CAAC;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;QAEvE,eAAe,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,iBAAiB,CAAC;QAC7D,gBAAgB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,kBAAkB,CAAC;KAChE,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}

package/migrations/0001_auth_storage.sql

@@ -5,6 +5,7 @@ create table if not exists auth_session (
   created_at integer not null,
   expires_at integer not null,
   auth_time integer not null,
+  authentication_events text not null,
   aal text not null,
   amr text not null,
   mfa_verified_at integer,

package/migrations/0006_auth_totp_factor.sql

@@ -8,6 +8,7 @@ create table if not exists auth_totp_factor (
   created_at integer not null,
   confirmed_at integer,
   last_used_at integer,
+  last_accepted_counter integer,
   revoked_at integer,
   metadata text
 );

package/migrations/0024_auth_permission.sql

@@ -0,0 +1,39 @@
+create table if not exists auth_permission_grant (
+  subject_type text not null,
+  subject_id text not null,
+  permission_id text not null,
+  scope_type text not null,
+  scope_id_present integer not null,
+  scope_id text not null,
+  expires_at integer,
+  metadata text,
+  revoked_at integer,
+  primary key (subject_type, subject_id, permission_id, scope_type, scope_id_present, scope_id)
+);
+
+create index if not exists auth_permission_grant_check_idx on auth_permission_grant (subject_type, subject_id, permission_id, revoked_at, expires_at);
+
+create table if not exists auth_role_grant (
+  subject_type text not null,
+  subject_id text not null,
+  role_id text not null,
+  scope_type text not null,
+  scope_id_present integer not null,
+  scope_id text not null,
+  expires_at integer,
+  metadata text,
+  revoked_at integer,
+  primary key (subject_type, subject_id, role_id, scope_type, scope_id_present, scope_id)
+);
+
+create index if not exists auth_role_grant_check_idx on auth_role_grant (subject_type, subject_id, role_id, revoked_at, expires_at);
+
+create table if not exists auth_role_permission (
+  role_id text not null,
+  permission_id text not null,
+  scope_type_present integer not null,
+  scope_type text not null,
+  primary key (role_id, permission_id, scope_type_present, scope_type)
+);
+
+create index if not exists auth_role_permission_check_idx on auth_role_permission (permission_id, role_id, scope_type_present, scope_type);

package/migrations/0025_auth_permission_definition.sql

@@ -0,0 +1,19 @@
+create table if not exists auth_permission_definition (
+  id text primary key,
+  description text,
+  scope_type_present integer not null,
+  scope_type text not null,
+  created_at integer not null,
+  updated_at integer not null,
+  disabled_at integer,
+  deleted_at integer
+);
+
+create table if not exists auth_role_definition (
+  id text primary key,
+  description text,
+  created_at integer not null,
+  updated_at integer not null,
+  disabled_at integer,
+  deleted_at integer
+);

package/migrations/0026_auth_user_identity.sql

@@ -0,0 +1,59 @@
+create table if not exists auth_user_identity (
+  id text primary key,
+  user_id text not null,
+  scope_type text not null,
+  scope_id text not null,
+  kind text not null,
+  value text not null,
+  normalized_value text not null,
+  verified_at integer,
+  is_primary_login integer not null,
+  created_at integer not null,
+  updated_at integer not null,
+  revoked_at integer,
+  replaced_by_id text,
+  metadata text
+);
+
+insert into auth_user_identity (
+  id,
+  user_id,
+  scope_type,
+  scope_id,
+  kind,
+  value,
+  normalized_value,
+  verified_at,
+  is_primary_login,
+  created_at,
+  updated_at,
+  revoked_at,
+  replaced_by_id,
+  metadata
+)
+select
+  'legacy-email:' || id,
+  id,
+  'global',
+  '',
+  'email',
+  email,
+  substr(email, 1, instr(email, '@') - 1) || lower(substr(email, instr(email, '@'))),
+  case when email_verified <> 0 then updated_at else null end,
+  1,
+  created_at,
+  updated_at,
+  null,
+  null,
+  null
+from auth_user;
+
+drop index auth_user_email_idx;
+
+alter table auth_user drop column email;
+alter table auth_user drop column email_verified;
+
+create unique index auth_user_identity_active_value_idx on auth_user_identity (scope_type, scope_id, kind, normalized_value) where revoked_at is null;
+create index auth_user_identity_user_id_idx on auth_user_identity (user_id);
+create index auth_user_identity_replaced_by_id_idx on auth_user_identity (replaced_by_id);
+create unique index auth_user_identity_active_primary_idx on auth_user_identity (user_id) where revoked_at is null and is_primary_login = 1;

package/migrations/0027_auth_audit_log_storage_order.sql

@@ -0,0 +1,46 @@
+alter table auth_audit_log rename to auth_audit_log_legacy;
+
+create table auth_audit_log (
+  storage_id integer primary key autoincrement,
+  id text,
+  type text not null,
+  user_id text,
+  actor_user_id text,
+  occurred_at integer not null,
+  request_ip_hash text,
+  request_user_agent_hash text,
+  event text not null,
+  created_at integer not null
+);
+
+insert into auth_audit_log (
+  id,
+  type,
+  user_id,
+  actor_user_id,
+  occurred_at,
+  request_ip_hash,
+  request_user_agent_hash,
+  event,
+  created_at
+)
+select
+  id,
+  type,
+  user_id,
+  actor_user_id,
+  occurred_at,
+  request_ip_hash,
+  request_user_agent_hash,
+  event,
+  created_at
+from auth_audit_log_legacy
+order by rowid;
+
+drop table auth_audit_log_legacy;
+
+create index auth_audit_log_id_idx on auth_audit_log (id);
+create index auth_audit_log_user_occurred_at_idx on auth_audit_log (user_id, occurred_at);
+create index auth_audit_log_actor_user_occurred_at_idx on auth_audit_log (actor_user_id, occurred_at);
+create index auth_audit_log_type_occurred_at_idx on auth_audit_log (type, occurred_at);
+create index auth_audit_log_occurred_at_idx on auth_audit_log (occurred_at);

package/migrations/0028_auth_oauth_client_secret_key.sql

@@ -0,0 +1,39 @@
+alter table auth_oauth_client_secret rename to auth_oauth_client_secret_legacy;
+
+create table auth_oauth_client_secret (
+  prefix text not null,
+  client_id text not null,
+  secret_hash text not null,
+  authentication_methods text not null,
+  created_at integer not null,
+  expires_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text,
+  primary key (client_id, prefix)
+);
+
+insert into auth_oauth_client_secret (
+  prefix,
+  client_id,
+  secret_hash,
+  authentication_methods,
+  created_at,
+  expires_at,
+  last_used_at,
+  revoked_at,
+  metadata
+)
+select
+  prefix,
+  client_id,
+  secret_hash,
+  authentication_methods,
+  created_at,
+  expires_at,
+  last_used_at,
+  revoked_at,
+  metadata
+from auth_oauth_client_secret_legacy;
+
+drop table auth_oauth_client_secret_legacy;