@effect-auth/core 0.1.0-alpha.15 → 0.1.0-alpha.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (627) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +332 -131
  3. package/dist/AbuseProtection.d.ts +100 -0
  4. package/dist/AbuseProtection.d.ts.map +1 -0
  5. package/dist/AbuseProtection.js +71 -0
  6. package/dist/AbuseProtection.js.map +1 -0
  7. package/dist/AccessGrant.d.ts +344 -0
  8. package/dist/AccessGrant.d.ts.map +1 -0
  9. package/dist/AccessGrant.js +687 -0
  10. package/dist/AccessGrant.js.map +1 -0
  11. package/dist/ApiKey.d.ts +2 -14
  12. package/dist/ApiKey.d.ts.map +1 -1
  13. package/dist/ApiKey.js +36 -27
  14. package/dist/ApiKey.js.map +1 -1
  15. package/dist/Assurance.d.ts +415 -0
  16. package/dist/Assurance.d.ts.map +1 -0
  17. package/dist/Assurance.js +764 -0
  18. package/dist/Assurance.js.map +1 -0
  19. package/dist/AtomicPlanExecutor.d.ts +28 -0
  20. package/dist/AtomicPlanExecutor.d.ts.map +1 -0
  21. package/dist/AtomicPlanExecutor.js +5 -0
  22. package/dist/AtomicPlanExecutor.js.map +1 -0
  23. package/dist/AuditLog.d.ts +2314 -52
  24. package/dist/AuditLog.d.ts.map +1 -1
  25. package/dist/AuditLog.js +511 -33
  26. package/dist/AuditLog.js.map +1 -1
  27. package/dist/AuthConfig.d.ts.map +1 -1
  28. package/dist/AuthConfig.js.map +1 -1
  29. package/dist/AuthFlow.d.ts +326 -220
  30. package/dist/AuthFlow.d.ts.map +1 -1
  31. package/dist/AuthFlow.js +611 -263
  32. package/dist/AuthFlow.js.map +1 -1
  33. package/dist/AuthKernel.d.ts +1 -1
  34. package/dist/AuthRateLimit.d.ts +96 -0
  35. package/dist/AuthRateLimit.d.ts.map +1 -0
  36. package/dist/AuthRateLimit.js +212 -0
  37. package/dist/AuthRateLimit.js.map +1 -0
  38. package/dist/Challenge.d.ts +0 -3
  39. package/dist/Challenge.d.ts.map +1 -1
  40. package/dist/Challenge.js +1 -4
  41. package/dist/Challenge.js.map +1 -1
  42. package/dist/Client.d.ts +205 -10
  43. package/dist/Client.d.ts.map +1 -1
  44. package/dist/Client.js +397 -16
  45. package/dist/Client.js.map +1 -1
  46. package/dist/CloudflareTurnstile.d.ts +28 -0
  47. package/dist/CloudflareTurnstile.d.ts.map +1 -0
  48. package/dist/CloudflareTurnstile.js +205 -0
  49. package/dist/CloudflareTurnstile.js.map +1 -0
  50. package/dist/Crypto.d.ts +0 -3
  51. package/dist/Crypto.d.ts.map +1 -1
  52. package/dist/Crypto.js +5 -7
  53. package/dist/Crypto.js.map +1 -1
  54. package/dist/DelegatedAccessStorageMigrations.d.ts +7 -0
  55. package/dist/DelegatedAccessStorageMigrations.d.ts.map +1 -0
  56. package/dist/DelegatedAccessStorageMigrations.js +159 -0
  57. package/dist/DelegatedAccessStorageMigrations.js.map +1 -0
  58. package/dist/DisposableEmailDomains.d.ts +19 -0
  59. package/dist/DisposableEmailDomains.d.ts.map +1 -0
  60. package/dist/DisposableEmailDomains.js +85 -0
  61. package/dist/DisposableEmailDomains.js.map +1 -0
  62. package/dist/DomainVerification.d.ts +0 -9
  63. package/dist/DomainVerification.d.ts.map +1 -1
  64. package/dist/DomainVerification.js +36 -22
  65. package/dist/DomainVerification.js.map +1 -1
  66. package/dist/DrizzleBunSqliteStorage.d.ts +18 -0
  67. package/dist/DrizzleBunSqliteStorage.d.ts.map +1 -0
  68. package/dist/DrizzleBunSqliteStorage.js +11 -0
  69. package/dist/DrizzleBunSqliteStorage.js.map +1 -0
  70. package/dist/DrizzleD1SqliteStorage.d.ts +28 -0
  71. package/dist/DrizzleD1SqliteStorage.d.ts.map +1 -0
  72. package/dist/DrizzleD1SqliteStorage.js +10 -0
  73. package/dist/DrizzleD1SqliteStorage.js.map +1 -0
  74. package/dist/DrizzleDurableObjectSqliteStorage.d.ts +19 -0
  75. package/dist/DrizzleDurableObjectSqliteStorage.d.ts.map +1 -0
  76. package/dist/DrizzleDurableObjectSqliteStorage.js +14 -0
  77. package/dist/DrizzleDurableObjectSqliteStorage.js.map +1 -0
  78. package/dist/DrizzleEffectSqliteStorage.d.ts +31 -0
  79. package/dist/DrizzleEffectSqliteStorage.d.ts.map +1 -0
  80. package/dist/DrizzleEffectSqliteStorage.js +108 -0
  81. package/dist/DrizzleEffectSqliteStorage.js.map +1 -0
  82. package/dist/DrizzleNodeSqliteStorage.d.ts +18 -0
  83. package/dist/DrizzleNodeSqliteStorage.d.ts.map +1 -0
  84. package/dist/DrizzleNodeSqliteStorage.js +11 -0
  85. package/dist/DrizzleNodeSqliteStorage.js.map +1 -0
  86. package/dist/DrizzleWasmSqliteStorage.d.ts +23 -0
  87. package/dist/DrizzleWasmSqliteStorage.d.ts.map +1 -0
  88. package/dist/DrizzleWasmSqliteStorage.js +15 -0
  89. package/dist/DrizzleWasmSqliteStorage.js.map +1 -0
  90. package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts +34 -0
  91. package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts.map +1 -0
  92. package/dist/EffectQbPostgresDelegatedAccessStorage.js +499 -0
  93. package/dist/EffectQbPostgresDelegatedAccessStorage.js.map +1 -0
  94. package/dist/EffectQbPostgresStorage.d.ts +171 -0
  95. package/dist/EffectQbPostgresStorage.d.ts.map +1 -0
  96. package/dist/EffectQbPostgresStorage.js +4280 -0
  97. package/dist/EffectQbPostgresStorage.js.map +1 -0
  98. package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts +112 -0
  99. package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts.map +1 -0
  100. package/dist/EffectQbSqliteDelegatedAccessStorage.js +602 -0
  101. package/dist/EffectQbSqliteDelegatedAccessStorage.js.map +1 -0
  102. package/dist/EffectQbSqliteStorage.d.ts +184 -27
  103. package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
  104. package/dist/EffectQbSqliteStorage.js +1729 -135
  105. package/dist/EffectQbSqliteStorage.js.map +1 -1
  106. package/dist/EmailAuth.d.ts +65 -0
  107. package/dist/EmailAuth.d.ts.map +1 -0
  108. package/dist/EmailAuth.js +171 -0
  109. package/dist/EmailAuth.js.map +1 -0
  110. package/dist/EmailIdentityAuth.d.ts +30 -0
  111. package/dist/EmailIdentityAuth.d.ts.map +1 -0
  112. package/dist/EmailIdentityAuth.js +142 -0
  113. package/dist/EmailIdentityAuth.js.map +1 -0
  114. package/dist/EmailOtp.d.ts +10 -11
  115. package/dist/EmailOtp.d.ts.map +1 -1
  116. package/dist/EmailOtp.js +44 -81
  117. package/dist/EmailOtp.js.map +1 -1
  118. package/dist/EmailRisk.d.ts +48 -0
  119. package/dist/EmailRisk.d.ts.map +1 -0
  120. package/dist/EmailRisk.js +33 -0
  121. package/dist/EmailRisk.js.map +1 -0
  122. package/dist/EmailVerification.d.ts +10 -16
  123. package/dist/EmailVerification.d.ts.map +1 -1
  124. package/dist/EmailVerification.js +85 -42
  125. package/dist/EmailVerification.js.map +1 -1
  126. package/dist/Guard.d.ts +11 -0
  127. package/dist/Guard.d.ts.map +1 -0
  128. package/dist/Guard.js +11 -0
  129. package/dist/Guard.js.map +1 -0
  130. package/dist/HibpPwnedPasswords.d.ts +56 -0
  131. package/dist/HibpPwnedPasswords.d.ts.map +1 -0
  132. package/dist/HibpPwnedPasswords.js +232 -0
  133. package/dist/HibpPwnedPasswords.js.map +1 -0
  134. package/dist/HttpApi/AdminPermissionDefinition.d.ts +4 -0
  135. package/dist/HttpApi/AdminPermissionDefinition.d.ts.map +1 -0
  136. package/dist/HttpApi/AdminPermissionDefinition.js +4 -0
  137. package/dist/HttpApi/AdminPermissionDefinition.js.map +1 -0
  138. package/dist/HttpApi/AdminSecurityTimeline.d.ts +4 -0
  139. package/dist/HttpApi/AdminSecurityTimeline.d.ts.map +1 -0
  140. package/dist/HttpApi/AdminSecurityTimeline.js +4 -0
  141. package/dist/HttpApi/AdminSecurityTimeline.js.map +1 -0
  142. package/dist/HttpApi/AdminSession.d.ts +4 -0
  143. package/dist/HttpApi/AdminSession.d.ts.map +1 -0
  144. package/dist/HttpApi/AdminSession.js +4 -0
  145. package/dist/HttpApi/AdminSession.js.map +1 -0
  146. package/dist/HttpApi/AdminTrustedDevice.d.ts +4 -0
  147. package/dist/HttpApi/AdminTrustedDevice.d.ts.map +1 -0
  148. package/dist/HttpApi/AdminTrustedDevice.js +4 -0
  149. package/dist/HttpApi/AdminTrustedDevice.js.map +1 -0
  150. package/dist/HttpApi/Api.d.ts +1172 -1172
  151. package/dist/HttpApi/Api.d.ts.map +1 -1
  152. package/dist/HttpApi/Api.js +2160 -896
  153. package/dist/HttpApi/Api.js.map +1 -1
  154. package/dist/HttpApi/ApiKey.d.ts +4 -0
  155. package/dist/HttpApi/ApiKey.d.ts.map +1 -0
  156. package/dist/HttpApi/ApiKey.js +4 -0
  157. package/dist/HttpApi/ApiKey.js.map +1 -0
  158. package/dist/HttpApi/Audit.d.ts +6 -0
  159. package/dist/HttpApi/Audit.d.ts.map +1 -0
  160. package/dist/HttpApi/Audit.js +10 -0
  161. package/dist/HttpApi/Audit.js.map +1 -0
  162. package/dist/HttpApi/ClientApi.d.ts +917 -0
  163. package/dist/HttpApi/ClientApi.d.ts.map +1 -0
  164. package/dist/HttpApi/ClientApi.js +101 -0
  165. package/dist/HttpApi/ClientApi.js.map +1 -0
  166. package/dist/HttpApi/EmailAuth.d.ts +6 -0
  167. package/dist/HttpApi/EmailAuth.d.ts.map +1 -0
  168. package/dist/HttpApi/EmailAuth.js +6 -0
  169. package/dist/HttpApi/EmailAuth.js.map +1 -0
  170. package/dist/HttpApi/EmailGuards.d.ts +115 -0
  171. package/dist/HttpApi/EmailGuards.d.ts.map +1 -0
  172. package/dist/HttpApi/EmailGuards.js +191 -0
  173. package/dist/HttpApi/EmailGuards.js.map +1 -0
  174. package/dist/HttpApi/EmailOtp.d.ts +6 -0
  175. package/dist/HttpApi/EmailOtp.d.ts.map +1 -0
  176. package/dist/HttpApi/EmailOtp.js +6 -0
  177. package/dist/HttpApi/EmailOtp.js.map +1 -0
  178. package/dist/HttpApi/EmailVerification.d.ts +6 -0
  179. package/dist/HttpApi/EmailVerification.d.ts.map +1 -0
  180. package/dist/HttpApi/EmailVerification.js +6 -0
  181. package/dist/HttpApi/EmailVerification.js.map +1 -0
  182. package/dist/HttpApi/Endpoints.d.ts +629 -301
  183. package/dist/HttpApi/Endpoints.d.ts.map +1 -1
  184. package/dist/HttpApi/Endpoints.js +178 -120
  185. package/dist/HttpApi/Endpoints.js.map +1 -1
  186. package/dist/HttpApi/Errors.d.ts +26 -7
  187. package/dist/HttpApi/Errors.d.ts.map +1 -1
  188. package/dist/HttpApi/Errors.js +26 -4
  189. package/dist/HttpApi/Errors.js.map +1 -1
  190. package/dist/HttpApi/Identity.d.ts +6 -0
  191. package/dist/HttpApi/Identity.d.ts.map +1 -0
  192. package/dist/HttpApi/Identity.js +6 -0
  193. package/dist/HttpApi/Identity.js.map +1 -0
  194. package/dist/HttpApi/IdentityGuards.d.ts +31 -0
  195. package/dist/HttpApi/IdentityGuards.d.ts.map +1 -0
  196. package/dist/HttpApi/IdentityGuards.js +33 -0
  197. package/dist/HttpApi/IdentityGuards.js.map +1 -0
  198. package/dist/HttpApi/Jwt.d.ts +4 -0
  199. package/dist/HttpApi/Jwt.d.ts.map +1 -0
  200. package/dist/HttpApi/Jwt.js +4 -0
  201. package/dist/HttpApi/Jwt.js.map +1 -0
  202. package/dist/HttpApi/JwtDiscovery.d.ts +4 -0
  203. package/dist/HttpApi/JwtDiscovery.d.ts.map +1 -0
  204. package/dist/HttpApi/JwtDiscovery.js +4 -0
  205. package/dist/HttpApi/JwtDiscovery.js.map +1 -0
  206. package/dist/HttpApi/LoginApproval.d.ts +5 -0
  207. package/dist/HttpApi/LoginApproval.d.ts.map +1 -0
  208. package/dist/HttpApi/LoginApproval.js +5 -0
  209. package/dist/HttpApi/LoginApproval.js.map +1 -0
  210. package/dist/HttpApi/LoginNotification.d.ts +5 -0
  211. package/dist/HttpApi/LoginNotification.d.ts.map +1 -0
  212. package/dist/HttpApi/LoginNotification.js +5 -0
  213. package/dist/HttpApi/LoginNotification.js.map +1 -0
  214. package/dist/HttpApi/MagicLink.d.ts +6 -0
  215. package/dist/HttpApi/MagicLink.d.ts.map +1 -0
  216. package/dist/HttpApi/MagicLink.js +6 -0
  217. package/dist/HttpApi/MagicLink.js.map +1 -0
  218. package/dist/HttpApi/Mfa.d.ts +5 -0
  219. package/dist/HttpApi/Mfa.d.ts.map +1 -0
  220. package/dist/HttpApi/Mfa.js +5 -0
  221. package/dist/HttpApi/Mfa.js.map +1 -0
  222. package/dist/HttpApi/Middleware.d.ts +14 -0
  223. package/dist/HttpApi/Middleware.d.ts.map +1 -0
  224. package/dist/HttpApi/Middleware.js +5 -0
  225. package/dist/HttpApi/Middleware.js.map +1 -0
  226. package/dist/HttpApi/OAuth.d.ts +4 -0
  227. package/dist/HttpApi/OAuth.d.ts.map +1 -0
  228. package/dist/HttpApi/OAuth.js +4 -0
  229. package/dist/HttpApi/OAuth.js.map +1 -0
  230. package/dist/HttpApi/OAuthProviderAuthorization.d.ts +4 -0
  231. package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map +1 -0
  232. package/dist/HttpApi/OAuthProviderAuthorization.js +4 -0
  233. package/dist/HttpApi/OAuthProviderAuthorization.js.map +1 -0
  234. package/dist/HttpApi/OAuthToken.d.ts +4 -0
  235. package/dist/HttpApi/OAuthToken.d.ts.map +1 -0
  236. package/dist/HttpApi/OAuthToken.js +4 -0
  237. package/dist/HttpApi/OAuthToken.js.map +1 -0
  238. package/dist/HttpApi/OidcDiscovery.d.ts +4 -0
  239. package/dist/HttpApi/OidcDiscovery.d.ts.map +1 -0
  240. package/dist/HttpApi/OidcDiscovery.js +4 -0
  241. package/dist/HttpApi/OidcDiscovery.js.map +1 -0
  242. package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts +28 -0
  243. package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts.map +1 -0
  244. package/dist/HttpApi/Operations/AdminPermissionDefinition.js +5 -0
  245. package/dist/HttpApi/Operations/AdminPermissionDefinition.js.map +1 -0
  246. package/dist/HttpApi/Operations/AdminSession.d.ts +16 -0
  247. package/dist/HttpApi/Operations/AdminSession.d.ts.map +1 -0
  248. package/dist/HttpApi/Operations/AdminSession.js +5 -0
  249. package/dist/HttpApi/Operations/AdminSession.js.map +1 -0
  250. package/dist/HttpApi/Operations/ApiKey.d.ts +16 -0
  251. package/dist/HttpApi/Operations/ApiKey.d.ts.map +1 -0
  252. package/dist/HttpApi/Operations/ApiKey.js +5 -0
  253. package/dist/HttpApi/Operations/ApiKey.js.map +1 -0
  254. package/dist/HttpApi/Operations/Discovery.d.ts +19 -0
  255. package/dist/HttpApi/Operations/Discovery.d.ts.map +1 -0
  256. package/dist/HttpApi/Operations/Discovery.js +7 -0
  257. package/dist/HttpApi/Operations/Discovery.js.map +1 -0
  258. package/dist/HttpApi/Operations/EmailAuth.d.ts +12 -0
  259. package/dist/HttpApi/Operations/EmailAuth.d.ts.map +1 -0
  260. package/dist/HttpApi/Operations/EmailAuth.js +5 -0
  261. package/dist/HttpApi/Operations/EmailAuth.js.map +1 -0
  262. package/dist/HttpApi/Operations/EmailOtp.d.ts +14 -0
  263. package/dist/HttpApi/Operations/EmailOtp.d.ts.map +1 -0
  264. package/dist/HttpApi/Operations/EmailOtp.js +5 -0
  265. package/dist/HttpApi/Operations/EmailOtp.js.map +1 -0
  266. package/dist/HttpApi/Operations/EmailVerification.d.ts +14 -0
  267. package/dist/HttpApi/Operations/EmailVerification.d.ts.map +1 -0
  268. package/dist/HttpApi/Operations/EmailVerification.js +5 -0
  269. package/dist/HttpApi/Operations/EmailVerification.js.map +1 -0
  270. package/dist/HttpApi/Operations/HttpOperation.d.ts +4 -0
  271. package/dist/HttpApi/Operations/HttpOperation.d.ts.map +1 -0
  272. package/dist/HttpApi/Operations/HttpOperation.js +2 -0
  273. package/dist/HttpApi/Operations/HttpOperation.js.map +1 -0
  274. package/dist/HttpApi/Operations/Identity.d.ts +22 -0
  275. package/dist/HttpApi/Operations/Identity.d.ts.map +1 -0
  276. package/dist/HttpApi/Operations/Identity.js +5 -0
  277. package/dist/HttpApi/Operations/Identity.js.map +1 -0
  278. package/dist/HttpApi/Operations/Jwt.d.ts +14 -0
  279. package/dist/HttpApi/Operations/Jwt.d.ts.map +1 -0
  280. package/dist/HttpApi/Operations/Jwt.js +5 -0
  281. package/dist/HttpApi/Operations/Jwt.js.map +1 -0
  282. package/dist/HttpApi/Operations/LoginApproval.d.ts +16 -0
  283. package/dist/HttpApi/Operations/LoginApproval.d.ts.map +1 -0
  284. package/dist/HttpApi/Operations/LoginApproval.js +5 -0
  285. package/dist/HttpApi/Operations/LoginApproval.js.map +1 -0
  286. package/dist/HttpApi/Operations/MagicLink.d.ts +14 -0
  287. package/dist/HttpApi/Operations/MagicLink.d.ts.map +1 -0
  288. package/dist/HttpApi/Operations/MagicLink.js +5 -0
  289. package/dist/HttpApi/Operations/MagicLink.js.map +1 -0
  290. package/dist/HttpApi/Operations/Mfa.d.ts +24 -0
  291. package/dist/HttpApi/Operations/Mfa.d.ts.map +1 -0
  292. package/dist/HttpApi/Operations/Mfa.js +5 -0
  293. package/dist/HttpApi/Operations/Mfa.js.map +1 -0
  294. package/dist/HttpApi/Operations/OAuth.d.ts +20 -0
  295. package/dist/HttpApi/Operations/OAuth.d.ts.map +1 -0
  296. package/dist/HttpApi/Operations/OAuth.js +5 -0
  297. package/dist/HttpApi/Operations/OAuth.js.map +1 -0
  298. package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts +12 -0
  299. package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts.map +1 -0
  300. package/dist/HttpApi/Operations/OAuthProviderAuthorization.js +5 -0
  301. package/dist/HttpApi/Operations/OAuthProviderAuthorization.js.map +1 -0
  302. package/dist/HttpApi/Operations/OAuthToken.d.ts +16 -0
  303. package/dist/HttpApi/Operations/OAuthToken.d.ts.map +1 -0
  304. package/dist/HttpApi/Operations/OAuthToken.js +5 -0
  305. package/dist/HttpApi/Operations/OAuthToken.js.map +1 -0
  306. package/dist/HttpApi/Operations/Passkey.d.ts +22 -0
  307. package/dist/HttpApi/Operations/Passkey.d.ts.map +1 -0
  308. package/dist/HttpApi/Operations/Passkey.js +5 -0
  309. package/dist/HttpApi/Operations/Passkey.js.map +1 -0
  310. package/dist/HttpApi/Operations/Password.d.ts +22 -0
  311. package/dist/HttpApi/Operations/Password.d.ts.map +1 -0
  312. package/dist/HttpApi/Operations/Password.js +5 -0
  313. package/dist/HttpApi/Operations/Password.js.map +1 -0
  314. package/dist/HttpApi/Operations/RecoveryCodes.d.ts +20 -0
  315. package/dist/HttpApi/Operations/RecoveryCodes.d.ts.map +1 -0
  316. package/dist/HttpApi/Operations/RecoveryCodes.js +5 -0
  317. package/dist/HttpApi/Operations/RecoveryCodes.js.map +1 -0
  318. package/dist/HttpApi/Operations/RefreshToken.d.ts +12 -0
  319. package/dist/HttpApi/Operations/RefreshToken.d.ts.map +1 -0
  320. package/dist/HttpApi/Operations/RefreshToken.js +5 -0
  321. package/dist/HttpApi/Operations/RefreshToken.js.map +1 -0
  322. package/dist/HttpApi/Operations/Security.d.ts +12 -0
  323. package/dist/HttpApi/Operations/Security.d.ts.map +1 -0
  324. package/dist/HttpApi/Operations/Security.js +5 -0
  325. package/dist/HttpApi/Operations/Security.js.map +1 -0
  326. package/dist/HttpApi/Operations/SecurityTimeline.d.ts +19 -0
  327. package/dist/HttpApi/Operations/SecurityTimeline.d.ts.map +1 -0
  328. package/dist/HttpApi/Operations/SecurityTimeline.js +7 -0
  329. package/dist/HttpApi/Operations/SecurityTimeline.js.map +1 -0
  330. package/dist/HttpApi/Operations/Session.d.ts +22 -0
  331. package/dist/HttpApi/Operations/Session.d.ts.map +1 -0
  332. package/dist/HttpApi/Operations/Session.js +5 -0
  333. package/dist/HttpApi/Operations/Session.js.map +1 -0
  334. package/dist/HttpApi/Operations/StepUp.d.ts +22 -0
  335. package/dist/HttpApi/Operations/StepUp.d.ts.map +1 -0
  336. package/dist/HttpApi/Operations/StepUp.js +5 -0
  337. package/dist/HttpApi/Operations/StepUp.js.map +1 -0
  338. package/dist/HttpApi/Operations/Totp.d.ts +20 -0
  339. package/dist/HttpApi/Operations/Totp.d.ts.map +1 -0
  340. package/dist/HttpApi/Operations/Totp.js +5 -0
  341. package/dist/HttpApi/Operations/Totp.js.map +1 -0
  342. package/dist/HttpApi/Operations/TrustedDevice.d.ts +23 -0
  343. package/dist/HttpApi/Operations/TrustedDevice.d.ts.map +1 -0
  344. package/dist/HttpApi/Operations/TrustedDevice.js +7 -0
  345. package/dist/HttpApi/Operations/TrustedDevice.js.map +1 -0
  346. package/dist/HttpApi/Operations/index.d.ts +27 -0
  347. package/dist/HttpApi/Operations/index.d.ts.map +1 -0
  348. package/dist/HttpApi/Operations/index.js +27 -0
  349. package/dist/HttpApi/Operations/index.js.map +1 -0
  350. package/dist/HttpApi/Passkey.d.ts +5 -0
  351. package/dist/HttpApi/Passkey.d.ts.map +1 -0
  352. package/dist/HttpApi/Passkey.js +5 -0
  353. package/dist/HttpApi/Passkey.js.map +1 -0
  354. package/dist/HttpApi/Password.d.ts +220 -0
  355. package/dist/HttpApi/Password.d.ts.map +1 -0
  356. package/dist/HttpApi/Password.js +237 -0
  357. package/dist/HttpApi/Password.js.map +1 -0
  358. package/dist/HttpApi/PasswordContract.d.ts +307 -0
  359. package/dist/HttpApi/PasswordContract.d.ts.map +1 -0
  360. package/dist/HttpApi/PasswordContract.js +63 -0
  361. package/dist/HttpApi/PasswordContract.js.map +1 -0
  362. package/dist/HttpApi/PasswordGuards.d.ts +82 -0
  363. package/dist/HttpApi/PasswordGuards.d.ts.map +1 -0
  364. package/dist/HttpApi/PasswordGuards.js +179 -0
  365. package/dist/HttpApi/PasswordGuards.js.map +1 -0
  366. package/dist/HttpApi/RecoveryCodes.d.ts +5 -0
  367. package/dist/HttpApi/RecoveryCodes.d.ts.map +1 -0
  368. package/dist/HttpApi/RecoveryCodes.js +5 -0
  369. package/dist/HttpApi/RecoveryCodes.js.map +1 -0
  370. package/dist/HttpApi/RefreshToken.d.ts +4 -0
  371. package/dist/HttpApi/RefreshToken.d.ts.map +1 -0
  372. package/dist/HttpApi/RefreshToken.js +4 -0
  373. package/dist/HttpApi/RefreshToken.js.map +1 -0
  374. package/dist/HttpApi/RequestGuards.d.ts +42 -0
  375. package/dist/HttpApi/RequestGuards.d.ts.map +1 -0
  376. package/dist/HttpApi/RequestGuards.js +194 -0
  377. package/dist/HttpApi/RequestGuards.js.map +1 -0
  378. package/dist/HttpApi/Schemas.d.ts +361 -84
  379. package/dist/HttpApi/Schemas.d.ts.map +1 -1
  380. package/dist/HttpApi/Schemas.js +190 -27
  381. package/dist/HttpApi/Schemas.js.map +1 -1
  382. package/dist/HttpApi/Security.d.ts +12 -93
  383. package/dist/HttpApi/Security.d.ts.map +1 -1
  384. package/dist/HttpApi/Security.js +65 -356
  385. package/dist/HttpApi/Security.js.map +1 -1
  386. package/dist/HttpApi/SecurityTimeline.d.ts +4 -0
  387. package/dist/HttpApi/SecurityTimeline.d.ts.map +1 -0
  388. package/dist/HttpApi/SecurityTimeline.js +4 -0
  389. package/dist/HttpApi/SecurityTimeline.js.map +1 -0
  390. package/dist/HttpApi/Session.d.ts +5 -0
  391. package/dist/HttpApi/Session.d.ts.map +1 -0
  392. package/dist/HttpApi/Session.js +5 -0
  393. package/dist/HttpApi/Session.js.map +1 -0
  394. package/dist/HttpApi/SessionGuards.d.ts +15 -0
  395. package/dist/HttpApi/SessionGuards.d.ts.map +1 -0
  396. package/dist/HttpApi/SessionGuards.js +37 -0
  397. package/dist/HttpApi/SessionGuards.js.map +1 -0
  398. package/dist/HttpApi/StepUp.d.ts +5 -0
  399. package/dist/HttpApi/StepUp.d.ts.map +1 -0
  400. package/dist/HttpApi/StepUp.js +5 -0
  401. package/dist/HttpApi/StepUp.js.map +1 -0
  402. package/dist/HttpApi/Totp.d.ts +5 -0
  403. package/dist/HttpApi/Totp.d.ts.map +1 -0
  404. package/dist/HttpApi/Totp.js +5 -0
  405. package/dist/HttpApi/Totp.js.map +1 -0
  406. package/dist/HttpApi/Transport.d.ts +4 -6
  407. package/dist/HttpApi/Transport.d.ts.map +1 -1
  408. package/dist/HttpApi/Transport.js +62 -36
  409. package/dist/HttpApi/Transport.js.map +1 -1
  410. package/dist/HttpApi/TrustedDevice.d.ts +4 -0
  411. package/dist/HttpApi/TrustedDevice.d.ts.map +1 -0
  412. package/dist/HttpApi/TrustedDevice.js +4 -0
  413. package/dist/HttpApi/TrustedDevice.js.map +1 -0
  414. package/dist/HttpApi/index.d.ts +9 -3
  415. package/dist/HttpApi/index.d.ts.map +1 -1
  416. package/dist/HttpApi/index.js +8 -2
  417. package/dist/HttpApi/index.js.map +1 -1
  418. package/dist/Identity.d.ts +138 -0
  419. package/dist/Identity.d.ts.map +1 -0
  420. package/dist/Identity.js +105 -0
  421. package/dist/Identity.js.map +1 -0
  422. package/dist/IdentityManagement.d.ts +189 -0
  423. package/dist/IdentityManagement.d.ts.map +1 -0
  424. package/dist/IdentityManagement.js +317 -0
  425. package/dist/IdentityManagement.js.map +1 -0
  426. package/dist/IncidentAction.d.ts +1 -4
  427. package/dist/IncidentAction.d.ts.map +1 -1
  428. package/dist/IncidentAction.js +15 -9
  429. package/dist/IncidentAction.js.map +1 -1
  430. package/dist/Internal.d.ts +2 -0
  431. package/dist/Internal.d.ts.map +1 -1
  432. package/dist/Internal.js +30 -0
  433. package/dist/Internal.js.map +1 -1
  434. package/dist/Invitation.d.ts +362 -0
  435. package/dist/Invitation.d.ts.map +1 -0
  436. package/dist/Invitation.js +633 -0
  437. package/dist/Invitation.js.map +1 -0
  438. package/dist/IpQualityScore.d.ts +38 -0
  439. package/dist/IpQualityScore.d.ts.map +1 -0
  440. package/dist/IpQualityScore.js +215 -0
  441. package/dist/IpQualityScore.js.map +1 -0
  442. package/dist/Jwt.d.ts +9 -30
  443. package/dist/Jwt.d.ts.map +1 -1
  444. package/dist/Jwt.js +72 -60
  445. package/dist/Jwt.js.map +1 -1
  446. package/dist/LoginApproval.d.ts +16 -31
  447. package/dist/LoginApproval.d.ts.map +1 -1
  448. package/dist/LoginApproval.js +47 -41
  449. package/dist/LoginApproval.js.map +1 -1
  450. package/dist/LoginNotification.d.ts +8 -12
  451. package/dist/LoginNotification.d.ts.map +1 -1
  452. package/dist/LoginNotification.js +30 -17
  453. package/dist/LoginNotification.js.map +1 -1
  454. package/dist/LoginRisk.d.ts +11 -13
  455. package/dist/LoginRisk.d.ts.map +1 -1
  456. package/dist/LoginRisk.js +66 -26
  457. package/dist/LoginRisk.js.map +1 -1
  458. package/dist/LoginRiskEnrichment.d.ts +145 -0
  459. package/dist/LoginRiskEnrichment.d.ts.map +1 -0
  460. package/dist/LoginRiskEnrichment.js +220 -0
  461. package/dist/LoginRiskEnrichment.js.map +1 -0
  462. package/dist/MachineAuth.d.ts.map +1 -1
  463. package/dist/MachineAuth.js.map +1 -1
  464. package/dist/MagicLink.d.ts +9 -8
  465. package/dist/MagicLink.d.ts.map +1 -1
  466. package/dist/MagicLink.js +40 -73
  467. package/dist/MagicLink.js.map +1 -1
  468. package/dist/Mailer.d.ts +20 -13
  469. package/dist/Mailer.d.ts.map +1 -1
  470. package/dist/Mailer.js +10 -12
  471. package/dist/Mailer.js.map +1 -1
  472. package/dist/OAuth.d.ts +100 -103
  473. package/dist/OAuth.d.ts.map +1 -1
  474. package/dist/OAuth.js +404 -217
  475. package/dist/OAuth.js.map +1 -1
  476. package/dist/Passkey.d.ts +17 -19
  477. package/dist/Passkey.d.ts.map +1 -1
  478. package/dist/Passkey.js +86 -39
  479. package/dist/Passkey.js.map +1 -1
  480. package/dist/PasskeyBrowser.d.ts +39 -0
  481. package/dist/PasskeyBrowser.d.ts.map +1 -0
  482. package/dist/PasskeyBrowser.js +206 -0
  483. package/dist/PasskeyBrowser.js.map +1 -0
  484. package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -1
  485. package/dist/PasskeySimpleWebAuthn.js +19 -7
  486. package/dist/PasskeySimpleWebAuthn.js.map +1 -1
  487. package/dist/Password.d.ts +71 -37
  488. package/dist/Password.d.ts.map +1 -1
  489. package/dist/Password.js +296 -82
  490. package/dist/Password.js.map +1 -1
  491. package/dist/PasswordRisk.d.ts +63 -0
  492. package/dist/PasswordRisk.d.ts.map +1 -0
  493. package/dist/PasswordRisk.js +37 -0
  494. package/dist/PasswordRisk.js.map +1 -0
  495. package/dist/Permission.d.ts +308 -0
  496. package/dist/Permission.d.ts.map +1 -0
  497. package/dist/Permission.js +827 -0
  498. package/dist/Permission.js.map +1 -0
  499. package/dist/Policy.d.ts +31 -18
  500. package/dist/Policy.d.ts.map +1 -1
  501. package/dist/Policy.js +58 -14
  502. package/dist/Policy.js.map +1 -1
  503. package/dist/PostgresDelegatedAccessStorageMigrations.d.ts +7 -0
  504. package/dist/PostgresDelegatedAccessStorageMigrations.d.ts.map +1 -0
  505. package/dist/PostgresDelegatedAccessStorageMigrations.js +119 -0
  506. package/dist/PostgresDelegatedAccessStorageMigrations.js.map +1 -0
  507. package/dist/PostgresStorageMigrations.d.ts +15 -0
  508. package/dist/PostgresStorageMigrations.d.ts.map +1 -0
  509. package/dist/PostgresStorageMigrations.js +620 -0
  510. package/dist/PostgresStorageMigrations.js.map +1 -0
  511. package/dist/Privacy.d.ts +0 -3
  512. package/dist/Privacy.d.ts.map +1 -1
  513. package/dist/Privacy.js +2 -5
  514. package/dist/Privacy.js.map +1 -1
  515. package/dist/RateLimiter.d.ts +0 -3
  516. package/dist/RateLimiter.d.ts.map +1 -1
  517. package/dist/RateLimiter.js +1 -4
  518. package/dist/RateLimiter.js.map +1 -1
  519. package/dist/RecoveryCode.d.ts +84 -12
  520. package/dist/RecoveryCode.d.ts.map +1 -1
  521. package/dist/RecoveryCode.js +273 -75
  522. package/dist/RecoveryCode.js.map +1 -1
  523. package/dist/RecoveryPolicy.d.ts +81 -0
  524. package/dist/RecoveryPolicy.d.ts.map +1 -0
  525. package/dist/RecoveryPolicy.js +119 -0
  526. package/dist/RecoveryPolicy.js.map +1 -0
  527. package/dist/RefreshToken.d.ts +1 -10
  528. package/dist/RefreshToken.d.ts.map +1 -1
  529. package/dist/RefreshToken.js +31 -22
  530. package/dist/RefreshToken.js.map +1 -1
  531. package/dist/Retention.d.ts.map +1 -1
  532. package/dist/Retention.js.map +1 -1
  533. package/dist/SecurityTimeline.d.ts +1 -4
  534. package/dist/SecurityTimeline.d.ts.map +1 -1
  535. package/dist/SecurityTimeline.js +110 -17
  536. package/dist/SecurityTimeline.js.map +1 -1
  537. package/dist/Sessions.d.ts +124 -29
  538. package/dist/Sessions.d.ts.map +1 -1
  539. package/dist/Sessions.js +626 -94
  540. package/dist/Sessions.js.map +1 -1
  541. package/dist/StepUp.d.ts +132 -11
  542. package/dist/StepUp.d.ts.map +1 -1
  543. package/dist/StepUp.js +387 -19
  544. package/dist/StepUp.js.map +1 -1
  545. package/dist/Storage.d.ts +89 -23
  546. package/dist/Storage.d.ts.map +1 -1
  547. package/dist/Storage.js +10 -12
  548. package/dist/Storage.js.map +1 -1
  549. package/dist/StorageMigrations.d.ts +6 -1
  550. package/dist/StorageMigrations.d.ts.map +1 -1
  551. package/dist/StorageMigrations.js +224 -0
  552. package/dist/StorageMigrations.js.map +1 -1
  553. package/dist/StorageSchemaGenerator.d.ts +486 -0
  554. package/dist/StorageSchemaGenerator.d.ts.map +1 -0
  555. package/dist/StorageSchemaGenerator.js +1022 -0
  556. package/dist/StorageSchemaGenerator.js.map +1 -0
  557. package/dist/StrongFactor.d.ts +64 -0
  558. package/dist/StrongFactor.d.ts.map +1 -0
  559. package/dist/StrongFactor.js +100 -0
  560. package/dist/StrongFactor.js.map +1 -0
  561. package/dist/Testing.d.ts +1 -1
  562. package/dist/Testing.js +2 -2
  563. package/dist/Testing.js.map +1 -1
  564. package/dist/Totp.d.ts +88 -13
  565. package/dist/Totp.d.ts.map +1 -1
  566. package/dist/Totp.js +194 -36
  567. package/dist/Totp.js.map +1 -1
  568. package/dist/TrustedDevice.d.ts +0 -9
  569. package/dist/TrustedDevice.d.ts.map +1 -1
  570. package/dist/TrustedDevice.js +15 -17
  571. package/dist/TrustedDevice.js.map +1 -1
  572. package/dist/WaitUntil.d.ts +0 -3
  573. package/dist/WaitUntil.d.ts.map +1 -1
  574. package/dist/WaitUntil.js +1 -4
  575. package/dist/WaitUntil.js.map +1 -1
  576. package/dist/Webhook.d.ts +42 -12
  577. package/dist/Webhook.d.ts.map +1 -1
  578. package/dist/Webhook.js +165 -26
  579. package/dist/Webhook.js.map +1 -1
  580. package/dist/alchemy/cloudflare/Email.d.ts +4 -4
  581. package/dist/alchemy/cloudflare/Email.d.ts.map +1 -1
  582. package/dist/alchemy/cloudflare/Email.js +10 -5
  583. package/dist/alchemy/cloudflare/Email.js.map +1 -1
  584. package/dist/alchemy/cloudflare/RateLimitDurableObject.d.ts +4 -4
  585. package/dist/alchemy/cloudflare/RateLimitDurableObject.d.ts.map +1 -1
  586. package/dist/alchemy/cloudflare/RateLimitDurableObject.js +5 -4
  587. package/dist/alchemy/cloudflare/RateLimitDurableObject.js.map +1 -1
  588. package/dist/cloudflare/Email.d.ts.map +1 -1
  589. package/dist/cloudflare/Email.js +1 -1
  590. package/dist/cloudflare/Email.js.map +1 -1
  591. package/dist/cloudflare/RateLimitDurableObject.d.ts +6 -5
  592. package/dist/cloudflare/RateLimitDurableObject.d.ts.map +1 -1
  593. package/dist/cloudflare/RateLimitDurableObject.js.map +1 -1
  594. package/dist/cloudflare/RequestMetadata.d.ts +49 -0
  595. package/dist/cloudflare/RequestMetadata.d.ts.map +1 -0
  596. package/dist/cloudflare/RequestMetadata.js +71 -0
  597. package/dist/cloudflare/RequestMetadata.js.map +1 -0
  598. package/dist/index.d.ts +0 -35
  599. package/dist/index.d.ts.map +1 -1
  600. package/dist/index.js +0 -35
  601. package/dist/index.js.map +1 -1
  602. package/dist/internal/AuthFlowFinalizer.d.ts +31 -0
  603. package/dist/internal/AuthFlowFinalizer.d.ts.map +1 -0
  604. package/dist/internal/AuthFlowFinalizer.js +182 -0
  605. package/dist/internal/AuthFlowFinalizer.js.map +1 -0
  606. package/dist/internal/RateLimitDurableObject.d.ts.map +1 -1
  607. package/dist/internal/RateLimitDurableObject.js +3 -0
  608. package/dist/internal/RateLimitDurableObject.js.map +1 -1
  609. package/migrations/0001_auth_storage.sql +1 -0
  610. package/migrations/0006_auth_totp_factor.sql +1 -0
  611. package/migrations/0024_auth_permission.sql +39 -0
  612. package/migrations/0025_auth_permission_definition.sql +19 -0
  613. package/migrations/0026_auth_user_identity.sql +59 -0
  614. package/migrations/0027_auth_audit_log_storage_order.sql +46 -0
  615. package/migrations/0028_auth_oauth_client_secret_key.sql +39 -0
  616. package/migrations/delegated-access/0001_auth_delegated_access.sql +152 -0
  617. package/migrations/postgres/0001_auth_core.sql +77 -0
  618. package/migrations/postgres/0002_auth_security_oauth.sql +65 -0
  619. package/migrations/postgres/0003_auth_credentials_tokens.sql +43 -0
  620. package/migrations/postgres/0004_auth_security_history.sql +103 -0
  621. package/migrations/postgres/0005_auth_webhooks.sql +29 -0
  622. package/migrations/postgres/0006_auth_domain_timeline.sql +50 -0
  623. package/migrations/postgres/0007_auth_oauth_clients.sql +85 -0
  624. package/migrations/postgres/0008_auth_oauth_tokens.sql +63 -0
  625. package/migrations/postgres/0009_auth_permissions.sql +66 -0
  626. package/migrations/postgres/delegated-access/0001_auth_delegated_access.sql +112 -0
  627. package/package.json +309 -2
@@ -0,0 +1,66 @@
1
+ create table auth_permission_definition (
2
+ id text collate "C" constraint auth_permission_definition_pkey primary key,
3
+ description text,
4
+ scope_type_present boolean not null,
5
+ scope_type text not null,
6
+ created_at bigint not null,
7
+ updated_at bigint not null,
8
+ disabled_at bigint,
9
+ deleted_at bigint
10
+ );
11
+ create index auth_permission_definition_status_idx
12
+ on auth_permission_definition (disabled_at, deleted_at, id);
13
+
14
+ create table auth_role_definition (
15
+ id text constraint auth_role_definition_pkey primary key,
16
+ description text,
17
+ created_at bigint not null,
18
+ updated_at bigint not null,
19
+ disabled_at bigint,
20
+ deleted_at bigint
21
+ );
22
+ create index auth_role_definition_status_idx
23
+ on auth_role_definition (disabled_at, deleted_at, id collate "C");
24
+
25
+ create table auth_permission_grant (
26
+ subject_type text not null,
27
+ subject_id text not null,
28
+ permission_id text not null,
29
+ scope_type text not null,
30
+ scope_id_present boolean not null,
31
+ scope_id text not null,
32
+ expires_at bigint,
33
+ metadata jsonb,
34
+ revoked_at bigint,
35
+ constraint auth_permission_grant_pkey primary key
36
+ (subject_type, subject_id, permission_id, scope_type, scope_id_present, scope_id)
37
+ );
38
+ create index auth_permission_grant_check_idx
39
+ on auth_permission_grant (subject_type, subject_id, permission_id, revoked_at, expires_at);
40
+
41
+ create table auth_role_grant (
42
+ subject_type text not null,
43
+ subject_id text not null,
44
+ role_id text not null,
45
+ scope_type text not null,
46
+ scope_id_present boolean not null,
47
+ scope_id text not null,
48
+ expires_at bigint,
49
+ metadata jsonb,
50
+ revoked_at bigint,
51
+ constraint auth_role_grant_pkey primary key
52
+ (subject_type, subject_id, role_id, scope_type, scope_id_present, scope_id)
53
+ );
54
+ create index auth_role_grant_check_idx
55
+ on auth_role_grant (subject_type, subject_id, role_id, revoked_at, expires_at);
56
+
57
+ create table auth_role_permission (
58
+ role_id text not null,
59
+ permission_id text not null,
60
+ scope_type_present boolean not null,
61
+ scope_type text not null,
62
+ constraint auth_role_permission_pkey primary key
63
+ (role_id, permission_id, scope_type_present, scope_type)
64
+ );
65
+ create index auth_role_permission_check_idx
66
+ on auth_role_permission (permission_id, role_id, scope_type_present, scope_type);
@@ -0,0 +1,112 @@
1
+ create table auth_invitation (
2
+ id text collate "C" constraint auth_invitation_pkey primary key,
3
+ kind text not null,
4
+ target_type text not null,
5
+ target_id text not null,
6
+ intent_type text not null,
7
+ intent_version integer not null,
8
+ intent_payload jsonb not null,
9
+ recipient_type text,
10
+ recipient_reference text,
11
+ issued_by_type text,
12
+ issued_by_id text,
13
+ created_at bigint not null,
14
+ expires_at bigint not null,
15
+ token_hash text not null,
16
+ accepted_at bigint,
17
+ accepted_by_type text,
18
+ accepted_by_id text,
19
+ revoked_at bigint,
20
+ superseded_at bigint,
21
+ superseded_by_id text,
22
+ metadata jsonb,
23
+ constraint auth_invitation_id_check
24
+ check (id ~ '^[A-Za-z0-9_-]{22}$'),
25
+ constraint auth_invitation_required_text_check
26
+ check (length(kind) > 0 and length(target_type) > 0 and length(target_id) > 0 and length(intent_type) > 0),
27
+ constraint auth_invitation_intent_check
28
+ check (intent_version >= 1 and jsonb_typeof(intent_payload) = 'object'),
29
+ constraint auth_invitation_recipient_pair_check
30
+ check ((recipient_type is null and recipient_reference is null) or (recipient_type is not null and recipient_reference is not null and length(recipient_type) > 0 and length(recipient_reference) > 0)),
31
+ constraint auth_invitation_issued_by_pair_check
32
+ check ((issued_by_type is null and issued_by_id is null) or (issued_by_type is not null and issued_by_id is not null and length(issued_by_type) > 0 and length(issued_by_id) > 0)),
33
+ constraint auth_invitation_token_hash_check
34
+ check (token_hash ~ '^sha256:.+$'),
35
+ constraint auth_invitation_accepted_pair_check
36
+ check ((accepted_at is null and accepted_by_type is null and accepted_by_id is null) or (accepted_at is not null and accepted_by_type is not null and accepted_by_id is not null and length(accepted_by_type) > 0 and length(accepted_by_id) > 0)),
37
+ constraint auth_invitation_superseded_pair_check
38
+ check ((superseded_at is null and superseded_by_id is null) or (superseded_at is not null and superseded_by_id is not null and superseded_by_id ~ '^[A-Za-z0-9_-]{22}$')),
39
+ constraint auth_invitation_terminal_state_check
40
+ check (((accepted_at is not null)::integer + (revoked_at is not null)::integer + (superseded_at is not null)::integer) <= 1),
41
+ constraint auth_invitation_metadata_check
42
+ check (metadata is null or jsonb_typeof(metadata) = 'object'),
43
+ constraint auth_invitation_timestamp_order_check
44
+ check (created_at >= 0 and expires_at > created_at and (accepted_at is null or accepted_at >= created_at) and (revoked_at is null or revoked_at >= created_at) and (superseded_at is null or superseded_at >= created_at))
45
+ );
46
+ create index auth_invitation_created_at_idx
47
+ on auth_invitation (created_at, id);
48
+ create index auth_invitation_kind_created_at_idx
49
+ on auth_invitation (kind, created_at, id);
50
+ create index auth_invitation_target_created_at_idx
51
+ on auth_invitation (target_type, target_id, created_at, id);
52
+ create index auth_invitation_recipient_created_at_idx
53
+ on auth_invitation (recipient_type, recipient_reference, created_at, id);
54
+ create index auth_invitation_issued_by_created_at_idx
55
+ on auth_invitation (issued_by_type, issued_by_id, created_at, id);
56
+ create index auth_invitation_pending_expires_at_idx
57
+ on auth_invitation (expires_at, created_at, id)
58
+ where accepted_at is null and revoked_at is null and superseded_at is null;
59
+
60
+ create table auth_access_grant (
61
+ id text collate "C" constraint auth_access_grant_pkey primary key,
62
+ target_type text not null,
63
+ target_id text not null,
64
+ capabilities jsonb not null,
65
+ binding_type text not null,
66
+ binding_subject_type text,
67
+ binding_subject_id text,
68
+ issuer_type text,
69
+ issuer_id text,
70
+ created_at bigint not null,
71
+ expires_at bigint,
72
+ token_hash text,
73
+ revoked_at bigint,
74
+ superseded_at bigint,
75
+ superseded_by_id text,
76
+ metadata jsonb,
77
+ constraint auth_access_grant_id_check
78
+ check (id ~ '^[A-Za-z0-9_-]{22}$'),
79
+ constraint auth_access_grant_target_check
80
+ check (length(target_type) > 0 and length(target_id) > 0),
81
+ constraint auth_access_grant_capabilities_check
82
+ check (jsonb_typeof(capabilities) = 'array' and jsonb_array_length(capabilities) > 0 and not jsonb_path_exists(capabilities, '$[*] ? (@.type() != "string" || @ == "")')),
83
+ constraint auth_access_grant_binding_type_check
84
+ check (binding_type in ('bearer', 'subject', 'subject-and-bearer')),
85
+ constraint auth_access_grant_binding_subject_check
86
+ check ((binding_type = 'bearer' and binding_subject_type is null and binding_subject_id is null) or (binding_type in ('subject', 'subject-and-bearer') and binding_subject_type is not null and binding_subject_id is not null and length(binding_subject_type) > 0 and length(binding_subject_id) > 0)),
87
+ constraint auth_access_grant_issuer_pair_check
88
+ check ((issuer_type is null and issuer_id is null) or (issuer_type is not null and issuer_id is not null and length(issuer_type) > 0 and length(issuer_id) > 0)),
89
+ constraint auth_access_grant_token_hash_check
90
+ check (token_hash is null or token_hash ~ '^sha256:.+$'),
91
+ constraint auth_access_grant_binding_token_hash_check
92
+ check ((binding_type = 'subject' and token_hash is null) or (binding_type in ('bearer', 'subject-and-bearer') and token_hash is not null)),
93
+ constraint auth_access_grant_superseded_pair_check
94
+ check ((superseded_at is null and superseded_by_id is null) or (superseded_at is not null and superseded_by_id is not null and superseded_by_id ~ '^[A-Za-z0-9_-]{22}$')),
95
+ constraint auth_access_grant_terminal_state_check
96
+ check (((revoked_at is not null)::integer + (superseded_at is not null)::integer) <= 1),
97
+ constraint auth_access_grant_metadata_check
98
+ check (metadata is null or jsonb_typeof(metadata) = 'object'),
99
+ constraint auth_access_grant_timestamp_order_check
100
+ check (created_at >= 0 and (expires_at is null or expires_at > created_at) and (revoked_at is null or revoked_at >= created_at) and (superseded_at is null or superseded_at >= created_at))
101
+ );
102
+ create index auth_access_grant_created_at_idx
103
+ on auth_access_grant (created_at, id);
104
+ create index auth_access_grant_target_created_at_idx
105
+ on auth_access_grant (target_type, target_id, created_at, id);
106
+ create index auth_access_grant_issuer_created_at_idx
107
+ on auth_access_grant (issuer_type, issuer_id, created_at, id);
108
+ create index auth_access_grant_subject_created_at_idx
109
+ on auth_access_grant (binding_subject_type, binding_subject_id, created_at, id);
110
+ create index auth_access_grant_active_expires_at_idx
111
+ on auth_access_grant (expires_at, created_at, id)
112
+ where revoked_at is null and superseded_at is null;
package/package.json CHANGED
@@ -1,8 +1,27 @@
1
1
  {
2
2
  "name": "@effect-auth/core",
3
- "version": "0.1.0-alpha.15",
3
+ "version": "0.1.0-alpha.18",
4
4
  "description": "Composable Effect-first authentication primitives.",
5
+ "keywords": [
6
+ "auth",
7
+ "authentication",
8
+ "effect",
9
+ "effect-ts",
10
+ "oauth",
11
+ "passkeys",
12
+ "sessions",
13
+ "webauthn"
14
+ ],
15
+ "homepage": "https://github.com/nr1brolyfan/effect-auth/tree/main/packages/core#readme",
16
+ "bugs": {
17
+ "url": "https://github.com/nr1brolyfan/effect-auth/issues"
18
+ },
5
19
  "license": "MIT",
20
+ "repository": {
21
+ "type": "git",
22
+ "url": "git+https://github.com/nr1brolyfan/effect-auth.git",
23
+ "directory": "packages/core"
24
+ },
6
25
  "files": [
7
26
  "dist/**/*.d.ts",
8
27
  "dist/**/*.d.ts.map",
@@ -17,10 +36,26 @@
17
36
  "types": "./dist/index.d.ts",
18
37
  "default": "./dist/index.js"
19
38
  },
39
+ "./Assurance": {
40
+ "types": "./dist/Assurance.d.ts",
41
+ "default": "./dist/Assurance.js"
42
+ },
43
+ "./AtomicPlanExecutor": {
44
+ "types": "./dist/AtomicPlanExecutor.d.ts",
45
+ "default": "./dist/AtomicPlanExecutor.js"
46
+ },
20
47
  "./ApiKey": {
21
48
  "types": "./dist/ApiKey.d.ts",
22
49
  "default": "./dist/ApiKey.js"
23
50
  },
51
+ "./AbuseProtection": {
52
+ "types": "./dist/AbuseProtection.d.ts",
53
+ "default": "./dist/AbuseProtection.js"
54
+ },
55
+ "./AccessGrant": {
56
+ "types": "./dist/AccessGrant.d.ts",
57
+ "default": "./dist/AccessGrant.js"
58
+ },
24
59
  "./AuditLog": {
25
60
  "types": "./dist/AuditLog.d.ts",
26
61
  "default": "./dist/AuditLog.js"
@@ -37,6 +72,14 @@
37
72
  "types": "./dist/AuthKernel.d.ts",
38
73
  "default": "./dist/AuthKernel.js"
39
74
  },
75
+ "./AuthRateLimit": {
76
+ "types": "./dist/AuthRateLimit.d.ts",
77
+ "default": "./dist/AuthRateLimit.js"
78
+ },
79
+ "./RecoveryPolicy": {
80
+ "types": "./dist/RecoveryPolicy.d.ts",
81
+ "default": "./dist/RecoveryPolicy.js"
82
+ },
40
83
  "./Challenge": {
41
84
  "types": "./dist/Challenge.d.ts",
42
85
  "default": "./dist/Challenge.js"
@@ -57,6 +100,14 @@
57
100
  "types": "./dist/cloudflare/Email.d.ts",
58
101
  "default": "./dist/cloudflare/Email.js"
59
102
  },
103
+ "./CloudflareRequestMetadata": {
104
+ "types": "./dist/cloudflare/RequestMetadata.d.ts",
105
+ "default": "./dist/cloudflare/RequestMetadata.js"
106
+ },
107
+ "./CloudflareTurnstile": {
108
+ "types": "./dist/CloudflareTurnstile.d.ts",
109
+ "default": "./dist/CloudflareTurnstile.js"
110
+ },
60
111
  "./Client": {
61
112
  "types": "./dist/Client.d.ts",
62
113
  "default": "./dist/Client.js"
@@ -65,18 +116,78 @@
65
116
  "types": "./dist/Crypto.d.ts",
66
117
  "default": "./dist/Crypto.js"
67
118
  },
119
+ "./Guard": {
120
+ "types": "./dist/Guard.d.ts",
121
+ "default": "./dist/Guard.js"
122
+ },
123
+ "./HibpPwnedPasswords": {
124
+ "types": "./dist/HibpPwnedPasswords.d.ts",
125
+ "default": "./dist/HibpPwnedPasswords.js"
126
+ },
68
127
  "./DomainVerification": {
69
128
  "types": "./dist/DomainVerification.d.ts",
70
129
  "default": "./dist/DomainVerification.js"
71
130
  },
131
+ "./DisposableEmailDomains": {
132
+ "types": "./dist/DisposableEmailDomains.d.ts",
133
+ "default": "./dist/DisposableEmailDomains.js"
134
+ },
135
+ "./DelegatedAccessStorageMigrations": {
136
+ "types": "./dist/DelegatedAccessStorageMigrations.d.ts",
137
+ "default": "./dist/DelegatedAccessStorageMigrations.js"
138
+ },
139
+ "./DrizzleD1SqliteStorage": {
140
+ "types": "./dist/DrizzleD1SqliteStorage.d.ts",
141
+ "default": "./dist/DrizzleD1SqliteStorage.js"
142
+ },
143
+ "./DrizzleBunSqliteStorage": {
144
+ "types": "./dist/DrizzleBunSqliteStorage.d.ts",
145
+ "default": "./dist/DrizzleBunSqliteStorage.js"
146
+ },
147
+ "./DrizzleDurableObjectSqliteStorage": {
148
+ "types": "./dist/DrizzleDurableObjectSqliteStorage.d.ts",
149
+ "default": "./dist/DrizzleDurableObjectSqliteStorage.js"
150
+ },
151
+ "./DrizzleEffectSqliteStorage": {
152
+ "types": "./dist/DrizzleEffectSqliteStorage.d.ts",
153
+ "default": "./dist/DrizzleEffectSqliteStorage.js"
154
+ },
155
+ "./DrizzleNodeSqliteStorage": {
156
+ "types": "./dist/DrizzleNodeSqliteStorage.d.ts",
157
+ "default": "./dist/DrizzleNodeSqliteStorage.js"
158
+ },
159
+ "./DrizzleWasmSqliteStorage": {
160
+ "types": "./dist/DrizzleWasmSqliteStorage.d.ts",
161
+ "default": "./dist/DrizzleWasmSqliteStorage.js"
162
+ },
72
163
  "./EffectQbSqliteStorage": {
73
164
  "types": "./dist/EffectQbSqliteStorage.d.ts",
74
165
  "default": "./dist/EffectQbSqliteStorage.js"
75
166
  },
167
+ "./EffectQbSqliteDelegatedAccessStorage": {
168
+ "types": "./dist/EffectQbSqliteDelegatedAccessStorage.d.ts",
169
+ "default": "./dist/EffectQbSqliteDelegatedAccessStorage.js"
170
+ },
171
+ "./EffectQbPostgresStorage": {
172
+ "types": "./dist/EffectQbPostgresStorage.d.ts",
173
+ "default": "./dist/EffectQbPostgresStorage.js"
174
+ },
175
+ "./EffectQbPostgresDelegatedAccessStorage": {
176
+ "types": "./dist/EffectQbPostgresDelegatedAccessStorage.d.ts",
177
+ "default": "./dist/EffectQbPostgresDelegatedAccessStorage.js"
178
+ },
179
+ "./EmailAuth": {
180
+ "types": "./dist/EmailAuth.d.ts",
181
+ "default": "./dist/EmailAuth.js"
182
+ },
76
183
  "./EmailOtp": {
77
184
  "types": "./dist/EmailOtp.d.ts",
78
185
  "default": "./dist/EmailOtp.js"
79
186
  },
187
+ "./EmailRisk": {
188
+ "types": "./dist/EmailRisk.d.ts",
189
+ "default": "./dist/EmailRisk.js"
190
+ },
80
191
  "./EmailVerification": {
81
192
  "types": "./dist/EmailVerification.d.ts",
82
193
  "default": "./dist/EmailVerification.js"
@@ -93,10 +204,26 @@
93
204
  "types": "./dist/Identifiers.d.ts",
94
205
  "default": "./dist/Identifiers.js"
95
206
  },
207
+ "./Identity": {
208
+ "types": "./dist/Identity.d.ts",
209
+ "default": "./dist/Identity.js"
210
+ },
211
+ "./IdentityManagement": {
212
+ "types": "./dist/IdentityManagement.d.ts",
213
+ "default": "./dist/IdentityManagement.js"
214
+ },
215
+ "./Invitation": {
216
+ "types": "./dist/Invitation.d.ts",
217
+ "default": "./dist/Invitation.js"
218
+ },
96
219
  "./IncidentAction": {
97
220
  "types": "./dist/IncidentAction.d.ts",
98
221
  "default": "./dist/IncidentAction.js"
99
222
  },
223
+ "./IpQualityScore": {
224
+ "types": "./dist/IpQualityScore.d.ts",
225
+ "default": "./dist/IpQualityScore.js"
226
+ },
100
227
  "./LoginApproval": {
101
228
  "types": "./dist/LoginApproval.d.ts",
102
229
  "default": "./dist/LoginApproval.js"
@@ -109,6 +236,10 @@
109
236
  "types": "./dist/LoginRisk.d.ts",
110
237
  "default": "./dist/LoginRisk.js"
111
238
  },
239
+ "./LoginRiskEnrichment": {
240
+ "types": "./dist/LoginRiskEnrichment.d.ts",
241
+ "default": "./dist/LoginRiskEnrichment.js"
242
+ },
112
243
  "./MachineAuth": {
113
244
  "types": "./dist/MachineAuth.d.ts",
114
245
  "default": "./dist/MachineAuth.js"
@@ -121,6 +252,118 @@
121
252
  "types": "./dist/HttpApi.d.ts",
122
253
  "default": "./dist/HttpApi.js"
123
254
  },
255
+ "./HttpApi/AdminPermissionDefinition": {
256
+ "types": "./dist/HttpApi/AdminPermissionDefinition.d.ts",
257
+ "default": "./dist/HttpApi/AdminPermissionDefinition.js"
258
+ },
259
+ "./HttpApi/AdminSecurityTimeline": {
260
+ "types": "./dist/HttpApi/AdminSecurityTimeline.d.ts",
261
+ "default": "./dist/HttpApi/AdminSecurityTimeline.js"
262
+ },
263
+ "./HttpApi/AdminSession": {
264
+ "types": "./dist/HttpApi/AdminSession.d.ts",
265
+ "default": "./dist/HttpApi/AdminSession.js"
266
+ },
267
+ "./HttpApi/AdminTrustedDevice": {
268
+ "types": "./dist/HttpApi/AdminTrustedDevice.d.ts",
269
+ "default": "./dist/HttpApi/AdminTrustedDevice.js"
270
+ },
271
+ "./HttpApi/ApiKey": {
272
+ "types": "./dist/HttpApi/ApiKey.d.ts",
273
+ "default": "./dist/HttpApi/ApiKey.js"
274
+ },
275
+ "./HttpApi/EmailAuth": {
276
+ "types": "./dist/HttpApi/EmailAuth.d.ts",
277
+ "default": "./dist/HttpApi/EmailAuth.js"
278
+ },
279
+ "./HttpApi/EmailOtp": {
280
+ "types": "./dist/HttpApi/EmailOtp.d.ts",
281
+ "default": "./dist/HttpApi/EmailOtp.js"
282
+ },
283
+ "./HttpApi/EmailVerification": {
284
+ "types": "./dist/HttpApi/EmailVerification.d.ts",
285
+ "default": "./dist/HttpApi/EmailVerification.js"
286
+ },
287
+ "./HttpApi/Identity": {
288
+ "types": "./dist/HttpApi/Identity.d.ts",
289
+ "default": "./dist/HttpApi/Identity.js"
290
+ },
291
+ "./HttpApi/Jwt": {
292
+ "types": "./dist/HttpApi/Jwt.d.ts",
293
+ "default": "./dist/HttpApi/Jwt.js"
294
+ },
295
+ "./HttpApi/JwtDiscovery": {
296
+ "types": "./dist/HttpApi/JwtDiscovery.d.ts",
297
+ "default": "./dist/HttpApi/JwtDiscovery.js"
298
+ },
299
+ "./HttpApi/LoginApproval": {
300
+ "types": "./dist/HttpApi/LoginApproval.d.ts",
301
+ "default": "./dist/HttpApi/LoginApproval.js"
302
+ },
303
+ "./HttpApi/LoginNotification": {
304
+ "types": "./dist/HttpApi/LoginNotification.d.ts",
305
+ "default": "./dist/HttpApi/LoginNotification.js"
306
+ },
307
+ "./HttpApi/MagicLink": {
308
+ "types": "./dist/HttpApi/MagicLink.d.ts",
309
+ "default": "./dist/HttpApi/MagicLink.js"
310
+ },
311
+ "./HttpApi/Mfa": {
312
+ "types": "./dist/HttpApi/Mfa.d.ts",
313
+ "default": "./dist/HttpApi/Mfa.js"
314
+ },
315
+ "./HttpApi/OAuth": {
316
+ "types": "./dist/HttpApi/OAuth.d.ts",
317
+ "default": "./dist/HttpApi/OAuth.js"
318
+ },
319
+ "./HttpApi/OAuthProviderAuthorization": {
320
+ "types": "./dist/HttpApi/OAuthProviderAuthorization.d.ts",
321
+ "default": "./dist/HttpApi/OAuthProviderAuthorization.js"
322
+ },
323
+ "./HttpApi/OAuthToken": {
324
+ "types": "./dist/HttpApi/OAuthToken.d.ts",
325
+ "default": "./dist/HttpApi/OAuthToken.js"
326
+ },
327
+ "./HttpApi/OidcDiscovery": {
328
+ "types": "./dist/HttpApi/OidcDiscovery.d.ts",
329
+ "default": "./dist/HttpApi/OidcDiscovery.js"
330
+ },
331
+ "./HttpApi/Passkey": {
332
+ "types": "./dist/HttpApi/Passkey.d.ts",
333
+ "default": "./dist/HttpApi/Passkey.js"
334
+ },
335
+ "./HttpApi/Password": {
336
+ "types": "./dist/HttpApi/Password.d.ts",
337
+ "default": "./dist/HttpApi/Password.js"
338
+ },
339
+ "./HttpApi/RecoveryCodes": {
340
+ "types": "./dist/HttpApi/RecoveryCodes.d.ts",
341
+ "default": "./dist/HttpApi/RecoveryCodes.js"
342
+ },
343
+ "./HttpApi/RefreshToken": {
344
+ "types": "./dist/HttpApi/RefreshToken.d.ts",
345
+ "default": "./dist/HttpApi/RefreshToken.js"
346
+ },
347
+ "./HttpApi/SecurityTimeline": {
348
+ "types": "./dist/HttpApi/SecurityTimeline.d.ts",
349
+ "default": "./dist/HttpApi/SecurityTimeline.js"
350
+ },
351
+ "./HttpApi/Session": {
352
+ "types": "./dist/HttpApi/Session.d.ts",
353
+ "default": "./dist/HttpApi/Session.js"
354
+ },
355
+ "./HttpApi/StepUp": {
356
+ "types": "./dist/HttpApi/StepUp.d.ts",
357
+ "default": "./dist/HttpApi/StepUp.js"
358
+ },
359
+ "./HttpApi/Totp": {
360
+ "types": "./dist/HttpApi/Totp.d.ts",
361
+ "default": "./dist/HttpApi/Totp.js"
362
+ },
363
+ "./HttpApi/TrustedDevice": {
364
+ "types": "./dist/HttpApi/TrustedDevice.d.ts",
365
+ "default": "./dist/HttpApi/TrustedDevice.js"
366
+ },
124
367
  "./Mailer": {
125
368
  "types": "./dist/Mailer.d.ts",
126
369
  "default": "./dist/Mailer.js"
@@ -161,10 +404,22 @@
161
404
  "types": "./dist/Password.d.ts",
162
405
  "default": "./dist/Password.js"
163
406
  },
407
+ "./PasswordRisk": {
408
+ "types": "./dist/PasswordRisk.d.ts",
409
+ "default": "./dist/PasswordRisk.js"
410
+ },
164
411
  "./Passkey": {
165
412
  "types": "./dist/Passkey.d.ts",
166
413
  "default": "./dist/Passkey.js"
167
414
  },
415
+ "./PasskeyBrowser": {
416
+ "types": "./dist/PasskeyBrowser.d.ts",
417
+ "default": "./dist/PasskeyBrowser.js"
418
+ },
419
+ "./Permission": {
420
+ "types": "./dist/Permission.d.ts",
421
+ "default": "./dist/Permission.js"
422
+ },
168
423
  "./PasskeySimpleWebAuthn": {
169
424
  "types": "./dist/PasskeySimpleWebAuthn.d.ts",
170
425
  "default": "./dist/PasskeySimpleWebAuthn.js"
@@ -185,10 +440,26 @@
185
440
  "types": "./dist/StepUp.d.ts",
186
441
  "default": "./dist/StepUp.js"
187
442
  },
443
+ "./StrongFactor": {
444
+ "types": "./dist/StrongFactor.d.ts",
445
+ "default": "./dist/StrongFactor.js"
446
+ },
188
447
  "./StorageMigrations": {
189
448
  "types": "./dist/StorageMigrations.d.ts",
190
449
  "default": "./dist/StorageMigrations.js"
191
450
  },
451
+ "./StorageSchemaGenerator": {
452
+ "types": "./dist/StorageSchemaGenerator.d.ts",
453
+ "default": "./dist/StorageSchemaGenerator.js"
454
+ },
455
+ "./PostgresStorageMigrations": {
456
+ "types": "./dist/PostgresStorageMigrations.d.ts",
457
+ "default": "./dist/PostgresStorageMigrations.js"
458
+ },
459
+ "./PostgresDelegatedAccessStorageMigrations": {
460
+ "types": "./dist/PostgresDelegatedAccessStorageMigrations.d.ts",
461
+ "default": "./dist/PostgresDelegatedAccessStorageMigrations.js"
462
+ },
192
463
  "./Testing": {
193
464
  "types": "./dist/Testing.d.ts",
194
465
  "default": "./dist/Testing.js"
@@ -213,10 +484,46 @@
213
484
  "check": "tsc -b --pretty false && bun run type-test && bun run test-type",
214
485
  "prepack": "rm -rf dist && bun run build",
215
486
  "test": "bun run build && bun --bun vitest run --config ../../vitest.config.ts",
487
+ "test:node-runtime": "bun run build && node ../../node_modules/vitest/vitest.mjs run --config ../../vitest.config.ts test/NodeDrizzleEffectSqliteStorage.test.ts",
488
+ "test:postgres": "bun run build && bun --bun vitest run --config ../../vitest.postgres.config.ts",
216
489
  "test-type": "tsc -p tsconfig.test.json --pretty false",
217
490
  "type-test": "tsc -p tsconfig.type-tests.json --pretty false"
218
491
  },
219
492
  "peerDependencies": {
220
- "effect": "4.0.0-beta.67"
493
+ "@effect/sql-d1": "4.0.0-beta.98",
494
+ "@effect/sql-pg": "4.0.0-beta.98",
495
+ "@effect/sql-sqlite-bun": "4.0.0-beta.98",
496
+ "@effect/sql-sqlite-do": "4.0.0-beta.98",
497
+ "@effect/sql-sqlite-node": "4.0.0-beta.98",
498
+ "@effect/sql-sqlite-wasm": "4.0.0-beta.98",
499
+ "drizzle-orm": "1.0.0-rc.4",
500
+ "effect": "4.0.0-beta.98",
501
+ "effect-qb": "4.0.0-beta.98"
502
+ },
503
+ "peerDependenciesMeta": {
504
+ "@effect/sql-d1": {
505
+ "optional": true
506
+ },
507
+ "@effect/sql-pg": {
508
+ "optional": true
509
+ },
510
+ "@effect/sql-sqlite-bun": {
511
+ "optional": true
512
+ },
513
+ "@effect/sql-sqlite-do": {
514
+ "optional": true
515
+ },
516
+ "@effect/sql-sqlite-node": {
517
+ "optional": true
518
+ },
519
+ "@effect/sql-sqlite-wasm": {
520
+ "optional": true
521
+ },
522
+ "drizzle-orm": {
523
+ "optional": true
524
+ },
525
+ "effect-qb": {
526
+ "optional": true
527
+ }
221
528
  }
222
529
  }