@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.18

package/dist/HttpApi/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/HttpApi/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,sBAAsB,EACtB,8BAA8B,EAC9B,+BAA+B,EAC/B,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/HttpApi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,wCAAwC,EAC7C,KAAK,kCAAkC,EACvC,KAAK,qCAAqC,EAC1C,KAAK,mCAAmC,EACxC,KAAK,yCAAyC,EAC9C,KAAK,sCAAsC,EAC3C,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,sCAAsC,EAC3C,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,mCAAmC,EACxC,KAAK,qCAAqC,EAC1C,KAAK,yCAAyC,EAC9C,KAAK,0CAA0C,EAC/C,KAAK,qCAAqC,EAC1C,KAAK,uCAAuC,EAC5C,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,EACjC,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,sCAAsC,EACtC,yCAAyC,EACzC,+BAA+B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,qCAAqC,EAC1C,KAAK,6BAA6B,EAClC,sCAAsC,EACtC,oCAAoC,EACpC,KAAK,mCAAmC,EACxC,KAAK,qCAAqC,EAC1C,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,mBAAmB,EACxB,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,aAAa,EACb,iBAAiB,EACjB,6BAA6B,EAC7B,+BAA+B,EAC/B,oBAAoB,EACpB,8BAA8B,EAC9B,gCAAgC,EAChC,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,wBAAwB,EACxB,KAAK,2BAA2B,EAChC,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,8BAA8B,EACnC,0BAA0B,EAC1B,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,yBAAyB,EACzB,KAAK,4CAA4C,EACjD,KAAK,2CAA2C,EAChD,KAAK,6CAA6C,EAClD,sCAAsC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,yCAAyC,EAC9C,kCAAkC,EAClC,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EACzC,KAAK,sCAAsC,EAC3C,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,qCAAqC,EACrC,gCAAgC,EAChC,6BAA6B,EAC7B,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,sCAAsC,EACtC,iCAAiC,EACjC,yBAAyB,EACzB,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,6BAA6B,EAC7B,4BAA4B,EAC5B,uBAAuB,EACvB,iCAAiC,EACjC,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,EAC9B,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,mCAAmC,EACnC,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,+BAA+B,EAC/B,qBAAqB,EACrB,wBAAwB,EACxB,8BAA8B,EAC9B,2CAA2C,EAC3C,mCAAmC,EACnC,kCAAkC,EAClC,uCAAuC,EACvC,+BAA+B,EAC/B,oCAAoC,EACpC,uBAAuB,EACvB,4CAA4C,EAC5C,4BAA4B,EAC5B,+BAA+B,EAC/B,wBAAwB,EACxB,8BAA8B,EAC9B,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,EACvB,yCAAyC,EACzC,6CAA6C,EAC7C,oCAAoC,EACpC,kCAAkC,EAClC,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,6BAA6B,EAC7B,wBAAwB,EACxB,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,8BAA8B,EAC9B,kCAAkC,EAClC,gCAAgC,EAChC,2BAA2B,EAC3B,0CAA0C,EAC1C,qCAAqC,EACrC,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC7B,wBAAwB,EACxB,qCAAqC,EACrC,gCAAgC,EAChC,6BAA6B,EAC7B,wBAAwB,EACxB,kCAAkC,EAClC,6BAA6B,EAC7B,mBAAmB,EACnB,UAAU,GACX,MAAM,UAAU,CAAC;AAClB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,6BAA6B,EAC7B,iCAAiC,EACjC,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/dist/HttpApi/index.js

@@ -1,7 +1,13 @@
-export * from "./Api.js";
+export { passwordSetInput, passwordChangeInput, emailVerificationVerifyInput, oauthAuthorizationStartInput, oauthAuthorizationStartedHttpBody, oauthLinkConfirmationStartInput, oauthLinkConfirmationInspectInput, oauthLinkConfirmationConfirmInput, oauthLinkConfirmationStartedHttpBody, oauthLinkConfirmationPendingHttpBody, oauthAuthorizationCallbackQueryPayload, oauthAuthorizationCallbackFormPostPayload, oauthAuthorizationCallbackInput, oauthLinkConfirmationConfirmedHttpBody, oauthAccountUnlinkResolutionHttpBody, PasskeyHttpConfig, PasskeyHttpConfigLive, TotpHttpConfig, TotpHttpConfigLive, RecoveryCodeHttpConfig, RecoveryCodeHttpConfigLive, OAuthHttpConfig, OAuthHttpConfigLive, OAuthTokenHttpConfig, OAuthTokenHttpConfigLive, RefreshTokenHttpConfig, RefreshTokenHttpConfigLive, JwtHttpConfig, JwtHttpConfigLive, passkeyRegistrationStartInput, passkeyAuthenticationStartInput, passkeyMfaStartInput, passkeyRegistrationFinishInput, passkeyAuthenticationFinishInput, passkeyMfaVerifyInput, passkeyCredentialRevokeInput, totpEnrollmentStartInput, totpEnrollmentConfirmInput, totpVerifyInput, totpFactorRevokeInput, recoveryCodeGenerateInput, recoveryCodeRegenerateInput, recoveryCodeVerifyInput, recoveryCodeRevokeInput, apiKeyCreateInput, apiKeyRevokeInput, refreshTokenRefreshInput, jwtIntrospectInput, jwtRevokeInput, jwtJwksHttpBody, totpMfaVerifyInput, totpMfaVerifyForFlowInput, recoveryCodeMfaVerifyInput, recoveryCodeMfaVerifyForFlowInput, stepUpTotpVerifyInput, stepUpPasswordVerifyInput, stepUpRecoveryCodeVerifyInput, stepUpPasskeyStartInput, stepUpPasskeyVerifyInput, loginApprovalApproveInput, loginApprovalStatusInput, loginApprovalFinalizeInput, loginNotificationReportInput, adminSessionHttpBody, stepUpAuthenticatedHttpBody, AdminSessionAuthorization, AdminPermissionDefinitionAuthorization, AdminSecurityTimelineAuthorization, AdminTrustedDeviceAuthorization, OidcDiscoveryMetadata, OidcDiscoveryMetadataLive, securityTimelineEventHttpBody, trustedDeviceHttpBody, PasswordHttpApiGroup, PasswordHttpApi, SessionHttpApiGroup, AdminSessionHttpApiGroup, AdminSessionHttpApi, AdminPermissionDefinitionHttpApiGroup, AdminPermissionDefinitionHttpApi, EmailVerificationHttpApiGroup, EmailOtpHttpApiGroup, EmailAuthHttpApiGroup, EmailAuthHttpApi, MagicLinkHttpApiGroup, PasskeyHttpApiGroup, PasskeyHttpApi, IdentityHttpApiGroup, IdentityHttpApi, TotpHttpApiGroup, TotpHttpApi, RecoveryCodesHttpApiGroup, RecoveryCodesHttpApi, OAuthHttpApiGroup, OAuthHttpApi, OAuthTokenHttpApiGroup, OAuthTokenHttpApi, OAuthProviderAuthorizationHttpApiGroup, OAuthProviderAuthorizationHttpApi, LoginApprovalHttpApiGroup, MfaHttpApiGroup, MfaHttpApi, StepUpHttpApiGroup, StepUpHttpApi, ApiKeyHttpApiGroup, ApiKeyHttpApi, RefreshTokenHttpApiGroup, RefreshTokenHttpApi, JwtHttpApiGroup, JwtHttpApi, JwtDiscoveryHttpApiGroup, JwtDiscoveryHttpApi, OidcDiscoveryHttpApiGroup, OidcDiscoveryHttpApi, LoginNotificationHttpApiGroup, SecurityTimelineHttpApiGroup, SecurityTimelineHttpApi, AdminSecurityTimelineHttpApiGroup, AdminSecurityTimelineHttpApi, TrustedDeviceHttpApiGroup, TrustedDeviceHttpApi, AdminTrustedDeviceHttpApiGroup, AdminTrustedDeviceHttpApi, CoreAuthHttpApi, AuthClientProtocolApi, PasswordHttpOperationsLive, SessionHttpOperationsLive, EmailVerificationHttpOperationsLive, EmailOtpHttpOperationsLive, EmailAuthHttpOperationsLive, MagicLinkHttpOperationsLive, PasskeyHttpOperationsLive, IdentityHttpOperationsLive, TotpHttpOperationsLive, RecoveryCodesHttpOperationsLive, MfaHttpOperationsLive, StepUpHttpOperationsLive, AdminSessionHttpOperationsLive, AdminPermissionDefinitionHttpOperationsLive, LoginNotificationHttpOperationsLive, SecurityTimelineHttpOperationsLive, AdminSecurityTimelineHttpOperationsLive, TrustedDeviceHttpOperationsLive, AdminTrustedDeviceHttpOperationsLive, OAuthHttpOperationsLive, OAuthProviderAuthorizationHttpOperationsLive, OAuthTokenHttpOperationsLive, LoginApprovalHttpOperationsLive, ApiKeyHttpOperationsLive, RefreshTokenHttpOperationsLive, JwtHttpOperationsLive, JwtDiscoveryHttpOperationsLive, OidcDiscoveryHttpOperationsLive, CoreAuthPasswordGroupLive, PasswordHttpApiGroupLive, PasswordHttpApiLive, CoreAuthSessionGroupLive, AdminSessionHttpApiGroupLive, AdminSessionHttpApiLive, AdminPermissionDefinitionHttpApiGroupLive, AdminPermissionDefinitionHttpRequirementsLive, AdminPermissionDefinitionHttpApiLive, CoreAuthEmailVerificationGroupLive, CoreAuthEmailOtpGroupLive, EmailAuthHttpApiGroupLive, EmailAuthHttpApiLive, CoreAuthMagicLinkGroupLive, PasskeyHttpApiGroupLive, PasskeyHttpApiLive, IdentityHttpApiGroupLive, IdentityHttpApiLive, TotpHttpApiGroupLive, TotpHttpApiLive, RecoveryCodesHttpApiGroupLive, RecoveryCodesHttpApiLive, MfaHttpApiGroupLive, MfaHttpApiLive, StepUpHttpApiGroupLive, StepUpHttpApiLive, OAuthHttpApiGroupLive, OAuthHttpApiLive, ApiKeyHttpApiGroupLive, ApiKeyHttpApiLive, RefreshTokenHttpApiGroupLive, RefreshTokenHttpApiLive, JwtHttpApiGroupLive, JwtHttpApiLive, CoreAuthLoginApprovalGroupLive, CoreAuthLoginNotificationGroupLive, SecurityTimelineHttpApiGroupLive, SecurityTimelineHttpApiLive, OAuthProviderAuthorizationHttpApiGroupLive, OAuthProviderAuthorizationHttpApiLive, OAuthTokenHttpApiGroupLive, OAuthTokenHttpApiLive, JwtDiscoveryHttpApiGroupLive, JwtDiscoveryHttpApiLive, OidcDiscoveryHttpApiGroupLive, OidcDiscoveryHttpApiLive, AdminSecurityTimelineHttpApiGroupLive, AdminSecurityTimelineHttpApiLive, TrustedDeviceHttpApiGroupLive, TrustedDeviceHttpApiLive, AdminTrustedDeviceHttpApiGroupLive, AdminTrustedDeviceHttpApiLive, CoreAuthHttpApiLive, AuthResult, } from "./Api.js";
 export * from "./Endpoints.js";
+export * from "./Audit.js";
+export * from "./EmailGuards.js";
 export * from "./Errors.js";
+export * from "./IdentityGuards.js";
+export * from "./PasswordGuards.js";
+export * from "./RequestGuards.js";
 export * from "./Schemas.js";
-export { AuthHttpApiConfig, AuthHttpApiConfigLive, AuthApiRateLimit, AuthApiRateLimitMiddlewareLive, AuthCsrfMiddleware, AuthCsrfMiddlewareLive, AuthOriginCheckMiddleware, AuthOriginCheckMiddlewareLive, AuthRateLimitMiddleware, AuthRateLimitMiddlewareLive, AuthRateLimitPolicy, AuthRequestMetadata, AuthRequestMetadataMiddleware, AuthRequestMetadataMiddlewareLive, makeAuthRequestMetadata, } from "./Security.js";
+export { AuthHttpApiConfig, AuthHttpApiConfigLive, AuthCsrfMiddleware, AuthCsrfMiddlewareLive, AuthOriginCheckMiddleware, AuthOriginCheckMiddlewareLive, AuthRequestMetadata, AuthRequestMetadataMiddleware, AuthRequestMetadataMiddlewareLive, mapAuthGuardErrors, makeAuthRequestMetadata, } from "./Security.js";
 export * from "./Transport.js";
+export * from "./Operations/index.js";
 //# sourceMappingURL=index.js.map

package/dist/HttpApi/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/HttpApi/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAmBvB,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/HttpApi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,4BAA4B,EAmB5B,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,EACjC,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,sCAAsC,EACtC,yCAAyC,EACzC,+BAA+B,EAI/B,sCAAsC,EACtC,oCAAoC,EASpC,iBAAiB,EACjB,qBAAqB,EAErB,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAE1B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,aAAa,EACb,iBAAiB,EACjB,6BAA6B,EAC7B,+BAA+B,EAC/B,oBAAoB,EACpB,8BAA8B,EAC9B,gCAAgC,EAChC,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EAIjB,wBAAwB,EAExB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,wBAAwB,EAExB,yBAAyB,EAEzB,wBAAwB,EAExB,0BAA0B,EAC1B,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAI3B,yBAAyB,EAIzB,sCAAsC,EAGtC,kCAAkC,EAIlC,+BAA+B,EAG/B,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,qCAAqC,EACrC,gCAAgC,EAChC,6BAA6B,EAC7B,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,sCAAsC,EACtC,iCAAiC,EACjC,yBAAyB,EACzB,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,6BAA6B,EAC7B,4BAA4B,EAC5B,uBAAuB,EACvB,iCAAiC,EACjC,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,EAC9B,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,mCAAmC,EACnC,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,+BAA+B,EAC/B,qBAAqB,EACrB,wBAAwB,EACxB,8BAA8B,EAC9B,2CAA2C,EAC3C,mCAAmC,EACnC,kCAAkC,EAClC,uCAAuC,EACvC,+BAA+B,EAC/B,oCAAoC,EACpC,uBAAuB,EACvB,4CAA4C,EAC5C,4BAA4B,EAC5B,+BAA+B,EAC/B,wBAAwB,EACxB,8BAA8B,EAC9B,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,EACvB,yCAAyC,EACzC,6CAA6C,EAC7C,oCAAoC,EACpC,kCAAkC,EAClC,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,6BAA6B,EAC7B,wBAAwB,EACxB,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,8BAA8B,EAC9B,kCAAkC,EAClC,gCAAgC,EAChC,2BAA2B,EAC3B,0CAA0C,EAC1C,qCAAqC,EACrC,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC7B,wBAAwB,EACxB,qCAAqC,EACrC,gCAAgC,EAChC,6BAA6B,EAC7B,wBAAwB,EACxB,kCAAkC,EAClC,6BAA6B,EAC7B,mBAAmB,EACnB,UAAU,GACX,MAAM,UAAU,CAAC;AAClB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,6BAA6B,EAC7B,iCAAiC,EACjC,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAQvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/dist/Identity.d.ts

@@ -0,0 +1,138 @@
+import { Context, Effect, Layer } from "effect";
+import type { Email, IdentityId, UnixMillis, UserId } from "./Identifiers.js";
+export type IdentityScope = {
+    readonly type: "global";
+} | {
+    readonly type: "tenant";
+    readonly tenantId: string;
+};
+export declare const globalIdentityScope: IdentityScope;
+export declare const tenantIdentityScope: (tenantId: string) => IdentityScope;
+export type IdentityKind = "email" | "username" | (string & {});
+export type IdentityAllowedScopes = "global" | "tenant" | "both";
+export interface LoginIdentityInput {
+    readonly scope: IdentityScope;
+    readonly kind: IdentityKind;
+    readonly value: string;
+}
+export interface NormalizedLoginIdentity extends LoginIdentityInput {
+    readonly normalizedValue: string;
+}
+export interface UserIdentityRow {
+    readonly id: IdentityId;
+    readonly userId: UserId;
+    readonly scope: IdentityScope;
+    readonly kind: IdentityKind;
+    readonly value: string;
+    readonly normalizedValue: string;
+    readonly verifiedAt?: UnixMillis;
+    readonly isPrimaryLogin: boolean;
+    readonly createdAt: UnixMillis;
+    readonly updatedAt: UnixMillis;
+    readonly revokedAt?: UnixMillis;
+    readonly replacedById?: IdentityId;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface NewUserIdentityRow {
+    readonly id: IdentityId;
+    readonly userId: UserId;
+    readonly scope: IdentityScope;
+    readonly kind: IdentityKind;
+    readonly value: string;
+    readonly normalizedValue: string;
+    readonly verifiedAt?: UnixMillis;
+    readonly isPrimaryLogin?: boolean;
+    readonly createdAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface VerifyUserIdentityInput {
+    readonly id: IdentityId;
+    readonly expectedNormalizedValue: string;
+    readonly verifiedAt: UnixMillis;
+}
+export interface RevokeUserIdentityInput {
+    readonly id: IdentityId;
+    readonly userId: UserId;
+    readonly expectedUpdatedAt: UnixMillis;
+    readonly revokedAt: UnixMillis;
+    readonly reason?: string;
+}
+export interface ReplaceUserIdentityInput {
+    readonly id: IdentityId;
+    readonly userId: UserId;
+    readonly expectedUpdatedAt: UnixMillis;
+    readonly replacement: NewUserIdentityRow;
+    readonly replacedAt: UnixMillis;
+}
+export interface SetPrimaryLoginIdentityInput {
+    readonly userId: UserId;
+    readonly identityId: IdentityId;
+    readonly expectedUpdatedAt: UnixMillis;
+    readonly updatedAt: UnixMillis;
+}
+/**
+ * Core's login rule. Email ownership must be proved by EmailVerification;
+ * username and custom kinds are locally verified and eligible by default.
+ * Registering a custom kind only supplies validation and normalization. Apps
+ * that need proofing for a custom kind should deny mutations with
+ * IdentityMutationPolicy until their own proofing flow has completed.
+ */
+export declare const isIdentityLoginEligible: (identity: Pick<UserIdentityRow, "kind" | "verifiedAt" | "revokedAt">) => boolean;
+export type IdentityValidationReason = "invalid-value" | "reserved-value" | (string & {});
+declare const IdentityValidationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityValidationError";
+} & Readonly<A>;
+export declare class IdentityValidationError extends IdentityValidationError_base<{
+    readonly kind: IdentityKind;
+    readonly reason: IdentityValidationReason;
+    readonly message: string;
+}> {
+}
+declare const IdentityKindNotRegisteredError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityKindNotRegisteredError";
+} & Readonly<A>;
+export declare class IdentityKindNotRegisteredError extends IdentityKindNotRegisteredError_base<{
+    readonly kind: IdentityKind;
+}> {
+}
+declare const IdentityScopeNotAllowedError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityScopeNotAllowedError";
+} & Readonly<A>;
+export declare class IdentityScopeNotAllowedError extends IdentityScopeNotAllowedError_base<{
+    readonly kind: IdentityKind;
+    readonly scope: IdentityScope;
+    readonly allowedScopes: IdentityAllowedScopes;
+}> {
+}
+export type IdentityNormalizationError = IdentityValidationError | IdentityKindNotRegisteredError | IdentityScopeNotAllowedError;
+export interface IdentityKindDefinition {
+    readonly kind: IdentityKind;
+    readonly allowedScopes: IdentityAllowedScopes;
+    readonly normalize: (value: string) => Effect.Effect<string, IdentityValidationError>;
+    readonly validate: (value: string) => Effect.Effect<void, IdentityValidationError>;
+}
+export interface IdentityKindRegistryService {
+    readonly get: (kind: IdentityKind) => Effect.Effect<IdentityKindDefinition, IdentityKindNotRegisteredError>;
+    readonly normalize: (input: LoginIdentityInput) => Effect.Effect<NormalizedLoginIdentity, IdentityNormalizationError>;
+}
+declare const IdentityKindRegistry_base: Context.ServiceClass<IdentityKindRegistry, "auth/IdentityKindRegistry", IdentityKindRegistryService>;
+export declare class IdentityKindRegistry extends IdentityKindRegistry_base {
+}
+export declare const normalizeEmail: (value: string) => Effect.Effect<Email, IdentityValidationError>;
+export declare const EmailIdentityKind: IdentityKindDefinition;
+export declare const defaultReservedUsernames: ReadonlySet<string>;
+export interface UsernameIdentityKindOptions {
+    readonly minimumLength?: number;
+    readonly maximumLength?: number;
+    readonly reserved?: ReadonlySet<string>;
+}
+export declare const makeUsernameIdentityKind: (options?: UsernameIdentityKindOptions) => IdentityKindDefinition;
+export declare const UsernameIdentityKind: IdentityKindDefinition;
+export declare const makeIdentityKindRegistry: (definitions: Iterable<IdentityKindDefinition>) => IdentityKindRegistryService;
+export declare const IdentityKindRegistryFromDefinitionsLive: (definitions: Iterable<IdentityKindDefinition>) => Layer.Layer<IdentityKindRegistry, never, never>;
+export declare const IdentityKindRegistryDefaultLive: Layer.Layer<IdentityKindRegistry, never, never>;
+export declare const normalizeLoginIdentity: (input: LoginIdentityInput) => Effect.Effect<NormalizedLoginIdentity, IdentityNormalizationError, IdentityKindRegistry>;
+export declare const emailLoginIdentity: (value: string) => LoginIdentityInput;
+export declare const usernameLoginIdentity: (value: string, scope?: IdentityScope) => LoginIdentityInput;
+export {};
+//# sourceMappingURL=Identity.d.ts.map

package/dist/Identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Identity.d.ts","sourceRoot":"","sources":["../src/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEtD,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG9E,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,eAAO,MAAM,mBAAmB,EAAE,aAAkC,CAAC;AAErE,eAAO,MAAM,mBAAmB,aAAc,MAAM,KAAG,aAGrD,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAChE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,aACxB,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,YAAY,GAAG,WAAW,CAAC,KACnE,OAE+D,CAAC;AAEnE,MAAM,MAAM,wBAAwB,GAChC,eAAe,GACf,gBAAgB,GAChB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;;;;AAElB,qBAAa,uBAAwB,SAAQ,6BAE3C;IACA,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;;;;AAEL,qBAAa,8BAA+B,SAAQ,oCAElD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;CAAG;;;;AAErC,qBAAa,4BAA6B,SAAQ,kCAEhD;IACA,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C,CAAC;CAAG;AAEL,MAAM,MAAM,0BAA0B,GAClC,uBAAuB,GACvB,8BAA8B,GAC9B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,YAAY,KACf,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC;IAC3E,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,kBAAkB,KACtB,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC;CACzE;;AAED,qBAAa,oBAAqB,SAAQ,yBAGV;CAAG;AAUnC,eAAO,MAAM,cAAc,UAClB,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,uBAAuB,CAY9C,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,sBAK/B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAMvD,CAAC;AAEH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,eAAO,MAAM,wBAAwB,aAC1B,2BAA2B,KACnC,sBA6BF,CAAC;AAEF,eAAO,MAAM,oBAAoB,wBAA6B,CAAC;AAO/D,eAAO,MAAM,wBAAwB,gBACtB,QAAQ,CAAC,sBAAsB,CAAC,KAC5C,2BAgCF,CAAC;AAEF,eAAO,MAAM,uCAAuC,gBACrC,QAAQ,CAAC,sBAAsB,CAAC,oDACgC,CAAC;AAEhF,eAAO,MAAM,+BAA+B,iDAIxC,CAAC;AAEL,eAAO,MAAM,sBAAsB,UAC1B,kBAAkB,KACxB,MAAM,CAAC,MAAM,CACd,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,CAEyD,CAAC;AAEhF,eAAO,MAAM,kBAAkB,UAAW,MAAM,KAAG,kBAIjD,CAAC;AAEH,eAAO,MAAM,qBAAqB,UACzB,MAAM,UACN,aAAa,KACnB,kBAA0D,CAAC"}

package/dist/Identity.js

@@ -0,0 +1,105 @@
+import { Context, Data, Effect, Layer } from "effect";
+import { Email as makeEmail } from "./Identifiers.js";
+export const globalIdentityScope = { type: "global" };
+export const tenantIdentityScope = (tenantId) => ({
+    type: "tenant",
+    tenantId,
+});
+/**
+ * Core's login rule. Email ownership must be proved by EmailVerification;
+ * username and custom kinds are locally verified and eligible by default.
+ * Registering a custom kind only supplies validation and normalization. Apps
+ * that need proofing for a custom kind should deny mutations with
+ * IdentityMutationPolicy until their own proofing flow has completed.
+ */
+export const isIdentityLoginEligible = (identity) => identity.revokedAt === undefined &&
+    (identity.kind !== "email" || identity.verifiedAt !== undefined);
+export class IdentityValidationError extends Data.TaggedError("IdentityValidationError") {
+}
+export class IdentityKindNotRegisteredError extends Data.TaggedError("IdentityKindNotRegisteredError") {
+}
+export class IdentityScopeNotAllowedError extends Data.TaggedError("IdentityScopeNotAllowedError") {
+}
+export class IdentityKindRegistry extends Context.Service()("auth/IdentityKindRegistry") {
+}
+const validationError = (kind, message, reason = "invalid-value") => new IdentityValidationError({ kind, reason, message });
+const emailPattern = /^[^\s@]+@[^\s@.]+(?:\.[^\s@.]+)+$/;
+export const normalizeEmail = (value) => {
+    const trimmed = value.trim();
+    const separator = trimmed.lastIndexOf("@");
+    if (separator <= 0 || !emailPattern.test(trimmed)) {
+        return Effect.fail(validationError("email", "Invalid email address"));
+    }
+    return Effect.succeed(makeEmail(`${trimmed.slice(0, separator)}${trimmed.slice(separator).toLowerCase()}`));
+};
+export const EmailIdentityKind = {
+    kind: "email",
+    allowedScopes: "global",
+    normalize: normalizeEmail,
+    validate: (value) => Effect.asVoid(normalizeEmail(value)),
+};
+export const defaultReservedUsernames = new Set([
+    "admin",
+    "administrator",
+    "root",
+    "support",
+    "system",
+]);
+export const makeUsernameIdentityKind = (options = {}) => {
+    const minimumLength = options.minimumLength ?? 3;
+    const maximumLength = options.maximumLength ?? 64;
+    const reserved = options.reserved ?? defaultReservedUsernames;
+    const normalize = (value) => Effect.succeed(value.trim().normalize("NFKC").toLowerCase());
+    const validate = (value) => {
+        if (value.length < minimumLength ||
+            value.length > maximumLength ||
+            !/^[a-z0-9](?:[a-z0-9_.-]*[a-z0-9])?$/.test(value)) {
+            return Effect.fail(validationError("username", `Username must be ${minimumLength}-${maximumLength} lowercase ASCII characters`));
+        }
+        if (reserved.has(value)) {
+            return Effect.fail(validationError("username", "Username is reserved", "reserved-value"));
+        }
+        return Effect.void;
+    };
+    return { kind: "username", allowedScopes: "both", normalize, validate };
+};
+export const UsernameIdentityKind = makeUsernameIdentityKind();
+const scopeAllowed = (allowed, scope) => allowed === "both" || allowed === scope.type;
+export const makeIdentityKindRegistry = (definitions) => {
+    const byKind = new Map(Array.from(definitions, (definition) => [definition.kind, definition]));
+    const get = (kind) => {
+        const definition = byKind.get(kind);
+        return definition === undefined
+            ? Effect.fail(new IdentityKindNotRegisteredError({ kind }))
+            : Effect.succeed(definition);
+    };
+    return IdentityKindRegistry.of({
+        get,
+        normalize: (input) => Effect.gen(function* () {
+            const definition = yield* get(input.kind);
+            if (!scopeAllowed(definition.allowedScopes, input.scope)) {
+                return yield* new IdentityScopeNotAllowedError({
+                    kind: input.kind,
+                    scope: input.scope,
+                    allowedScopes: definition.allowedScopes,
+                });
+            }
+            const normalizedValue = yield* definition.normalize(input.value);
+            yield* definition.validate(normalizedValue);
+            return { ...input, normalizedValue };
+        }),
+    });
+};
+export const IdentityKindRegistryFromDefinitionsLive = (definitions) => Layer.succeed(IdentityKindRegistry)(makeIdentityKindRegistry(definitions));
+export const IdentityKindRegistryDefaultLive = IdentityKindRegistryFromDefinitionsLive([
+    EmailIdentityKind,
+    UsernameIdentityKind,
+]);
+export const normalizeLoginIdentity = (input) => Effect.flatMap(IdentityKindRegistry, (registry) => registry.normalize(input));
+export const emailLoginIdentity = (value) => ({
+    scope: globalIdentityScope,
+    kind: "email",
+    value,
+});
+export const usernameLoginIdentity = (value, scope = globalIdentityScope) => ({ scope, kind: "username", value });
+//# sourceMappingURL=Identity.js.map

package/dist/Identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../src/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGtD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAMtD,MAAM,CAAC,MAAM,mBAAmB,GAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAErE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAiB,EAAE,CAAC,CAAC;IACvE,IAAI,EAAE,QAAQ;IACd,QAAQ;CACT,CAAC,CAAC;AAyEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,QAAoE,EAC3D,EAAE,CACX,QAAQ,CAAC,SAAS,KAAK,SAAS;IAChC,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;AAOnE,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAC3D,yBAAyB,CAKzB;CAAG;AAEL,MAAM,OAAO,8BAA+B,SAAQ,IAAI,CAAC,WAAW,CAClE,gCAAgC,CACA;CAAG;AAErC,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAK9B;CAAG;AA2BL,MAAM,OAAO,oBAAqB,SAAQ,OAAO,CAAC,OAAO,EAGtD,CAAC,2BAA2B,CAAC;CAAG;AAEnC,MAAM,eAAe,GAAG,CACtB,IAAkB,EAClB,OAAe,EACf,MAAM,GAA6B,eAAe,EAClD,EAAE,CAAC,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAE5D,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAEzD,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAa,EACkC,EAAE;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CACnB,SAAS,CACP,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAC1E,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACvD,IAAI,EAAE,OAAO;IACb,aAAa,EAAE,QAAQ;IACvB,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IACnE,OAAO;IACP,eAAe;IACf,MAAM;IACN,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,OAAO,GAAgC,EAAE,EACjB,EAAE;IAC1B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,wBAAwB,CAAC;IAE9D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE;QACjC,IACE,KAAK,CAAC,MAAM,GAAG,aAAa;YAC5B,KAAK,CAAC,MAAM,GAAG,aAAa;YAC5B,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,EAClD,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAChB,eAAe,CACb,UAAU,EACV,oBAAoB,aAAa,IAAI,aAAa,6BAA6B,CAChF,CACF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,IAAI,CAChB,eAAe,CAAC,UAAU,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CACtE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,EAAE,CAAC;AAE/D,MAAM,YAAY,GAAG,CACnB,OAA8B,EAC9B,KAAoB,EACX,EAAE,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC;AAE3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,WAA6C,EAChB,EAAE;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,KAAK,CAAC,IAAI,CACR,WAAW,EACX,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAU,CACvD,CACF,CAAC;IAEF,MAAM,GAAG,GAAuC,CAAC,IAAI,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,UAAU,KAAK,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO,oBAAoB,CAAC,EAAE,CAAC;QAC7B,GAAG;QACH,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,aAAa,EAAE,UAAU,CAAC,aAAa;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjE,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC5C,OAAO,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,CAAC;QACvC,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,WAA6C,EAC7C,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,+BAA+B,GAC1C,uCAAuC,CAAC;IACtC,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAyB,EAKzB,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAsB,EAAE,CAAC,CAAC;IACxE,KAAK,EAAE,mBAAmB;IAC1B,IAAI,EAAE,OAAO;IACb,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAa,EACb,KAAK,GAAkB,mBAAmB,EACtB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC"}

package/dist/IdentityManagement.d.ts

@@ -0,0 +1,189 @@
+import { Context, Effect, Layer } from "effect";
+import type { AuditActor, AuditLogService, AuditRequest } from "./AuditLog.js";
+import type { CryptoService } from "./Crypto.js";
+import { Crypto } from "./Crypto.js";
+import type { EmailAcceptancePolicyService, EmailRiskProviderUnavailableError } from "./EmailRisk.js";
+import { EmailAcceptancePolicy, EmailNotAcceptedError } from "./EmailRisk.js";
+import { IdentityId } from "./Identifiers.js";
+import type { AuditEventId, UnixMillis, UserId } from "./Identifiers.js";
+import { IdentityKindRegistry } from "./Identity.js";
+import type { IdentityKind, IdentityKindRegistryService, IdentityNormalizationError, IdentityScope, LoginIdentityInput, UserIdentityRow } from "./Identity.js";
+import type { ValidatedSession } from "./Sessions.js";
+import { IdentityStore, StorageError, UserStore } from "./Storage.js";
+import type { IdentityStoreService, UserStoreService } from "./Storage.js";
+export interface IdentityInfo {
+    readonly id: IdentityId;
+    readonly scope: IdentityScope;
+    readonly kind: IdentityKind;
+    readonly value: string;
+    readonly verified: boolean;
+    readonly loginEligible: boolean;
+    readonly isPrimaryLogin: boolean;
+    readonly createdAt: UnixMillis;
+    readonly updatedAt: UnixMillis;
+}
+export declare const identityInfo: (row: UserIdentityRow) => IdentityInfo;
+export type IdentityMutationOperation = "add" | "replace" | "revoke" | "set-primary";
+export interface IdentityMutationPolicyInput {
+    readonly operation: IdentityMutationOperation;
+    readonly userId: UserId;
+    readonly current?: IdentityInfo;
+    readonly proposed?: LoginIdentityInput;
+    readonly currentSession?: ValidatedSession;
+}
+declare const IdentityMutationDeniedError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityMutationDeniedError";
+} & Readonly<A>;
+export declare class IdentityMutationDeniedError extends IdentityMutationDeniedError_base<{
+    readonly operation: IdentityMutationOperation;
+    readonly reason?: string;
+}> {
+}
+export interface IdentityMutationPolicyService {
+    readonly authorize: (input: IdentityMutationPolicyInput) => Effect.Effect<void, IdentityMutationDeniedError>;
+}
+declare const IdentityMutationPolicy_base: Context.ServiceClass<IdentityMutationPolicy, "auth/IdentityMutationPolicy", IdentityMutationPolicyService>;
+export declare class IdentityMutationPolicy extends IdentityMutationPolicy_base {
+}
+export declare const IdentityMutationPolicyAllow: Layer.Layer<IdentityMutationPolicy, never, never>;
+declare const IdentityNotFoundError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityNotFoundError";
+} & Readonly<A>;
+export declare class IdentityNotFoundError extends IdentityNotFoundError_base<{
+    readonly id?: IdentityId;
+}> {
+}
+declare const IdentityOwnershipError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityOwnershipError";
+} & Readonly<A>;
+export declare class IdentityOwnershipError extends IdentityOwnershipError_base<{
+    readonly id: IdentityId;
+}> {
+}
+declare const IdentityInactiveError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityInactiveError";
+} & Readonly<A>;
+export declare class IdentityInactiveError extends IdentityInactiveError_base<{
+    readonly id: IdentityId;
+}> {
+}
+declare const IdentityConcurrentModificationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityConcurrentModificationError";
+} & Readonly<A>;
+export declare class IdentityConcurrentModificationError extends IdentityConcurrentModificationError_base<{
+    readonly id: IdentityId;
+    readonly expectedUpdatedAt: UnixMillis;
+}> {
+}
+declare const IdentityAlreadyExistsError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityAlreadyExistsError";
+} & Readonly<A>;
+export declare class IdentityAlreadyExistsError extends IdentityAlreadyExistsError_base<{
+    readonly scope: IdentityScope;
+    readonly kind: IdentityKind;
+}> {
+}
+declare const IdentityUserNotActiveError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityUserNotActiveError";
+} & Readonly<A>;
+export declare class IdentityUserNotActiveError extends IdentityUserNotActiveError_base<{
+    readonly userId: UserId;
+}> {
+}
+declare const LastLoginIdentityError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LastLoginIdentityError";
+} & Readonly<A>;
+export declare class LastLoginIdentityError extends LastLoginIdentityError_base<{
+    readonly id: IdentityId;
+}> {
+}
+declare const IdentityNotLoginEligibleError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityNotLoginEligibleError";
+} & Readonly<A>;
+export declare class IdentityNotLoginEligibleError extends IdentityNotLoginEligibleError_base<{
+    readonly id: IdentityId;
+}> {
+}
+declare const IdentityManagementStorageError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityManagementStorageError";
+} & Readonly<A>;
+export declare class IdentityManagementStorageError extends IdentityManagementStorageError_base<{
+    readonly operation: IdentityMutationOperation | "availability" | "list";
+    readonly cause: StorageError;
+}> {
+}
+declare const IdentityIdGenerationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "IdentityIdGenerationError";
+} & Readonly<A>;
+export declare class IdentityIdGenerationError extends IdentityIdGenerationError_base<{
+    readonly cause: unknown;
+}> {
+}
+export type IdentityManagementError = IdentityNormalizationError | IdentityMutationDeniedError | IdentityNotFoundError | IdentityOwnershipError | IdentityInactiveError | IdentityConcurrentModificationError | IdentityAlreadyExistsError | IdentityUserNotActiveError | LastLoginIdentityError | IdentityNotLoginEligibleError | IdentityManagementStorageError | IdentityIdGenerationError | EmailNotAcceptedError | EmailRiskProviderUnavailableError;
+export interface IdentityAvailabilityInput extends LoginIdentityInput {
+}
+export interface AddIdentityInput extends LoginIdentityInput {
+    readonly userId: UserId;
+    readonly currentSession?: ValidatedSession;
+}
+export interface ReplaceIdentityInput extends LoginIdentityInput {
+    readonly userId: UserId;
+    readonly identityId: IdentityId;
+    readonly expectedUpdatedAt: UnixMillis;
+    readonly currentSession?: ValidatedSession;
+}
+export interface RevokeIdentityInput {
+    readonly userId: UserId;
+    readonly identityId: IdentityId;
+    readonly expectedUpdatedAt: UnixMillis;
+    readonly reason?: string;
+    readonly currentSession?: ValidatedSession;
+}
+export interface SetPrimaryIdentityInput {
+    readonly userId: UserId;
+    readonly identityId: IdentityId;
+    readonly expectedUpdatedAt: UnixMillis;
+    readonly currentSession?: ValidatedSession;
+}
+export interface IdentityManagementService {
+    readonly availability: (input: IdentityAvailabilityInput) => Effect.Effect<boolean, IdentityManagementError>;
+    readonly list: (userId: UserId) => Effect.Effect<readonly IdentityInfo[], IdentityManagementError>;
+    readonly add: (input: AddIdentityInput) => Effect.Effect<IdentityInfo, IdentityManagementError>;
+    readonly replace: (input: ReplaceIdentityInput) => Effect.Effect<IdentityInfo, IdentityManagementError>;
+    readonly revoke: (input: RevokeIdentityInput) => Effect.Effect<IdentityInfo, IdentityManagementError>;
+    readonly setPrimary: (input: SetPrimaryIdentityInput) => Effect.Effect<IdentityInfo, IdentityManagementError>;
+}
+declare const IdentityManagement_base: Context.ServiceClass<IdentityManagement, "auth/IdentityManagement", IdentityManagementService>;
+export declare class IdentityManagement extends IdentityManagement_base {
+}
+export interface IdentityManagementDependencies {
+    readonly identities: IdentityStoreService;
+    readonly users: UserStoreService;
+    readonly registry: IdentityKindRegistryService;
+    readonly policy: IdentityMutationPolicyService;
+    readonly crypto: CryptoService;
+}
+export interface IdentityManagementAuditContext {
+    readonly actor: AuditActor;
+    readonly request?: AuditRequest;
+}
+export interface IdentityManagementAuditOptions {
+    readonly context: (operation: IdentityMutationOperation, userId: UserId) => IdentityManagementAuditContext;
+    readonly eventId?: (operation: IdentityMutationOperation, userId: UserId, identityId: IdentityId) => AuditEventId;
+}
+export declare const makeIdentityManagementEmailAcceptance: (dependencies: {
+    readonly identityManagement: IdentityManagementService;
+    readonly registry: IdentityKindRegistryService;
+    readonly policy: EmailAcceptancePolicyService;
+}) => IdentityManagementService;
+export declare const makeIdentityManagementAudit: (dependencies: {
+    readonly identityManagement: IdentityManagementService;
+    readonly auditLog: AuditLogService;
+    readonly options: IdentityManagementAuditOptions;
+}) => IdentityManagementService;
+export declare const makeIdentityManagement: (dependencies: IdentityManagementDependencies) => IdentityManagementService;
+export declare const IdentityManagementLive: Layer.Layer<IdentityManagement, never, Crypto | IdentityKindRegistry | IdentityMutationPolicy | IdentityStore | UserStore>;
+/** Identity management with email acceptance enforced for add and replace. */
+export declare const IdentityManagementWithEmailAcceptanceLive: Layer.Layer<IdentityManagement, never, Crypto | EmailAcceptancePolicy | IdentityKindRegistry | IdentityMutationPolicy | IdentityStore | UserStore>;
+export {};
+//# sourceMappingURL=IdentityManagement.d.ts.map

package/dist/IdentityManagement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityManagement.d.ts","sourceRoot":"","sources":["../src/IdentityManagement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAE9D,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,YAAY,EAEb,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EACV,4BAA4B,EAC5B,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAS,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAA2B,MAAM,eAAe,CAAC;AAC9E,OAAO,KAAK,EACV,YAAY,EACZ,2BAA2B,EAC3B,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,eAAe,EAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAEL,aAAa,EACb,YAAY,EACZ,SAAS,EACV,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,eAAO,MAAM,YAAY,QAAS,eAAe,KAAG,YAUlD,CAAC;AAEH,MAAM,MAAM,yBAAyB,GACjC,KAAK,GACL,SAAS,GACT,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;;;;AAED,qBAAa,2BAA4B,SAAQ,iCAE/C;IACA,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;CACvD;;AAED,qBAAa,sBAAuB,SAAQ,2BAGV;CAAG;AAErC,eAAO,MAAM,2BAA2B,mDAEsB,CAAC;;;;AAE/D,qBAAa,qBAAsB,SAAQ,2BAEzC;IACA,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;CAC1B,CAAC;CAAG;;;;AACL,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;CACzB,CAAC;CAAG;;;;AACL,qBAAa,qBAAsB,SAAQ,2BAEzC;IACA,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;CACzB,CAAC;CAAG;;;;AACL,qBAAa,mCAAoC,SAAQ,yCAEvD;IAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAA;CAAE,CAAC;CAAG;;;;AACzE,qBAAa,0BAA2B,SAAQ,gCAE9C;IAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;CAAG;;;;AACpE,qBAAa,0BAA2B,SAAQ,gCAE9C;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;CAAG;;;;AACjC,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;CACzB,CAAC;CAAG;;;;AACL,qBAAa,6BAA8B,SAAQ,mCAEjD;IAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAAC;CAAG;;;;AACjC,qBAAa,8BAA+B,SAAQ,oCAElD;IACA,QAAQ,CAAC,SAAS,EAAE,yBAAyB,GAAG,cAAc,GAAG,MAAM,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B,CAAC;CAAG;;;;AACL,qBAAa,yBAA0B,SAAQ,+BAE7C;IACA,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;CAAG;AAEL,MAAM,MAAM,uBAAuB,GAC/B,0BAA0B,GAC1B,2BAA2B,GAC3B,qBAAqB,GACrB,sBAAsB,GACtB,qBAAqB,GACrB,mCAAmC,GACnC,0BAA0B,GAC1B,0BAA0B,GAC1B,sBAAsB,GACtB,6BAA6B,GAC7B,8BAA8B,GAC9B,yBAAyB,GACzB,qBAAqB,GACrB,iCAAiC,CAAC;AAEtC,MAAM,WAAW,yBAA0B,SAAQ,kBAAkB;CAAG;AACxE,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;AACD,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;AACD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,yBAAyB,KAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,CACb,MAAM,EAAE,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,SAAS,YAAY,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACrE,QAAQ,CAAC,GAAG,EAAE,CACZ,KAAK,EAAE,gBAAgB,KACpB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,CAChB,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,mBAAmB,KACvB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;CAC3D;;AAED,qBAAa,kBAAmB,SAAQ,uBAGV;CAAG;AAEjC,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;CACjC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,CAChB,SAAS,EAAE,yBAAyB,EACpC,MAAM,EAAE,MAAM,KACX,8BAA8B,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,CACjB,SAAS,EAAE,yBAAyB,EACpC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,KACnB,YAAY,CAAC;CACnB;AAED,eAAO,MAAM,qCAAqC,iBAAkB;IAClE,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,KAAG,yBAuCH,CAAC;AAEF,eAAO,MAAM,2BAA2B,iBAAkB;IACxD,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC;CAClD,KAAG,yBAwDH,CAAC;AAOF,eAAO,MAAM,sBAAsB,iBACnB,8BAA8B,KAC3C,yBA2QF,CAAC;AAEF,eAAO,MAAM,sBAAsB,4HAelC,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,yCAAyC,oJAUT,CAAC"}