@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.19

package/dist/DelegatedAccessStorageMigrations.js

@@ -0,0 +1,159 @@
+export const delegatedAccessStorageMigration001 = {
+    id: "0001_auth_delegated_access",
+    sql: `create table if not exists auth_invitation (
+  id text primary key,
+  kind text not null,
+  target_type text not null,
+  target_id text not null,
+  intent_type text not null,
+  intent_version integer not null,
+  intent_payload text not null,
+  recipient_type text,
+  recipient_reference text,
+  issued_by_type text,
+  issued_by_id text,
+  created_at integer not null,
+  expires_at integer not null,
+  token_hash text not null,
+  accepted_at integer,
+  accepted_by_type text,
+  accepted_by_id text,
+  revoked_at integer,
+  superseded_at integer,
+  superseded_by_id text,
+  metadata text,
+  check (length(id) = 22 and id not glob '*[^A-Za-z0-9_-]*'),
+  check (length(kind) > 0),
+  check (length(target_type) > 0 and length(target_id) > 0),
+  check (length(intent_type) > 0),
+  check (typeof(intent_version) = 'integer' and intent_version >= 1),
+  check (
+    case
+      when json_valid(intent_payload) then json_type(intent_payload) = 'object'
+      else 0
+    end
+  ),
+  check ((recipient_type is null) = (recipient_reference is null)),
+  check (recipient_type is null or (length(recipient_type) > 0 and length(recipient_reference) > 0)),
+  check ((issued_by_type is null) = (issued_by_id is null)),
+  check (issued_by_type is null or (length(issued_by_type) > 0 and length(issued_by_id) > 0)),
+  check (typeof(created_at) = 'integer' and created_at >= 0),
+  check (typeof(expires_at) = 'integer' and expires_at > created_at),
+  check (length(token_hash) > 7 and substr(token_hash, 1, 7) = 'sha256:'),
+  check ((accepted_at is null) = (accepted_by_type is null)),
+  check ((accepted_by_type is null) = (accepted_by_id is null)),
+  check (accepted_by_type is null or (length(accepted_by_type) > 0 and length(accepted_by_id) > 0)),
+  check ((superseded_at is null) = (superseded_by_id is null)),
+  check (
+    superseded_by_id is null or
+      (length(superseded_by_id) = 22 and superseded_by_id not glob '*[^A-Za-z0-9_-]*')
+  ),
+  check (
+    (accepted_at is not null) +
+      (revoked_at is not null) +
+      (superseded_at is not null) <= 1
+  ),
+  check (accepted_at is null or (typeof(accepted_at) = 'integer' and accepted_at >= created_at)),
+  check (revoked_at is null or (typeof(revoked_at) = 'integer' and revoked_at >= created_at)),
+  check (superseded_at is null or (typeof(superseded_at) = 'integer' and superseded_at >= created_at)),
+  check (
+    metadata is null or
+      case
+        when json_valid(metadata) then json_type(metadata) = 'object'
+        else 0
+      end
+  )
+);
+
+create index if not exists auth_invitation_created_at_idx
+  on auth_invitation (created_at, id);
+create index if not exists auth_invitation_kind_created_at_idx
+  on auth_invitation (kind, created_at, id);
+create index if not exists auth_invitation_target_created_at_idx
+  on auth_invitation (target_type, target_id, created_at, id);
+create index if not exists auth_invitation_recipient_created_at_idx
+  on auth_invitation (recipient_type, recipient_reference, created_at, id);
+create index if not exists auth_invitation_issued_by_created_at_idx
+  on auth_invitation (issued_by_type, issued_by_id, created_at, id);
+create index if not exists auth_invitation_pending_expires_at_idx
+  on auth_invitation (expires_at, created_at, id)
+  where accepted_at is null and revoked_at is null and superseded_at is null;
+
+create table if not exists auth_access_grant (
+  id text primary key,
+  target_type text not null,
+  target_id text not null,
+  capabilities text not null,
+  binding_type text not null,
+  binding_subject_type text,
+  binding_subject_id text,
+  issuer_type text,
+  issuer_id text,
+  created_at integer not null,
+  expires_at integer,
+  token_hash text,
+  revoked_at integer,
+  superseded_at integer,
+  superseded_by_id text,
+  metadata text,
+  check (length(id) = 22 and id not glob '*[^A-Za-z0-9_-]*'),
+  check (length(target_type) > 0 and length(target_id) > 0),
+  check (
+    case
+      when json_valid(capabilities) then
+        json_type(capabilities) = 'array' and json_array_length(capabilities) > 0
+      else 0
+    end
+  ),
+  check (binding_type in ('bearer', 'subject', 'subject-and-bearer')),
+  check ((binding_subject_type is null) = (binding_subject_id is null)),
+  check (binding_subject_type is null or (length(binding_subject_type) > 0 and length(binding_subject_id) > 0)),
+  check (
+    (binding_type = 'bearer' and binding_subject_type is null) or
+      (binding_type in ('subject', 'subject-and-bearer') and binding_subject_type is not null)
+  ),
+  check ((issuer_type is null) = (issuer_id is null)),
+  check (issuer_type is null or (length(issuer_type) > 0 and length(issuer_id) > 0)),
+  check (typeof(created_at) = 'integer' and created_at >= 0),
+  check (
+    expires_at is null or
+      (typeof(expires_at) = 'integer' and expires_at > created_at)
+  ),
+  check ((binding_type = 'subject') = (token_hash is null)),
+  check (
+    token_hash is null or
+      (length(token_hash) > 7 and substr(token_hash, 1, 7) = 'sha256:')
+  ),
+  check ((superseded_at is null) = (superseded_by_id is null)),
+  check (
+    superseded_by_id is null or
+      (length(superseded_by_id) = 22 and superseded_by_id not glob '*[^A-Za-z0-9_-]*')
+  ),
+  check ((revoked_at is not null) + (superseded_at is not null) <= 1),
+  check (revoked_at is null or (typeof(revoked_at) = 'integer' and revoked_at >= created_at)),
+  check (superseded_at is null or (typeof(superseded_at) = 'integer' and superseded_at >= created_at)),
+  check (
+    metadata is null or
+      case
+        when json_valid(metadata) then json_type(metadata) = 'object'
+        else 0
+      end
+  )
+);
+
+create index if not exists auth_access_grant_created_at_idx
+  on auth_access_grant (created_at, id);
+create index if not exists auth_access_grant_target_created_at_idx
+  on auth_access_grant (target_type, target_id, created_at, id);
+create index if not exists auth_access_grant_issuer_created_at_idx
+  on auth_access_grant (issuer_type, issuer_id, created_at, id);
+create index if not exists auth_access_grant_subject_created_at_idx
+  on auth_access_grant (binding_subject_type, binding_subject_id, created_at, id);
+create index if not exists auth_access_grant_active_expires_at_idx
+  on auth_access_grant (expires_at, created_at, id)
+  where revoked_at is null and superseded_at is null;`,
+};
+export const delegatedAccessStorageMigrations = [
+    delegatedAccessStorageMigration001,
+];
+//# sourceMappingURL=DelegatedAccessStorageMigrations.js.map

package/dist/DelegatedAccessStorageMigrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegatedAccessStorageMigrations.js","sourceRoot":"","sources":["../src/DelegatedAccessStorageMigrations.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,kCAAkC,GAC7C;IACE,EAAE,EAAE,4BAA4B;IAChC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sDAuJ6C;CACnD,CAAC;AAEJ,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,kCAAkC;CAC1B,CAAC"}

package/dist/DevEmail.d.ts

@@ -0,0 +1,44 @@
+import { Context, Effect, Layer } from "effect";
+import type { Email, UnixMillis } from "./Identifiers.js";
+import { AuthEmailTemplates, AuthMailer, type AuthEmail, type AuthMailerOptions, type EmailAddress } from "./Mailer.js";
+export type DevEmailKind = AuthEmail["_tag"];
+export interface DevEmailMessage {
+    readonly id: string;
+    readonly kind: DevEmailKind;
+    readonly recipient: Email;
+    readonly sender?: EmailAddress;
+    readonly subject: string;
+    readonly text?: string;
+    readonly html?: string;
+    readonly headers?: Readonly<Record<string, string>>;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+    readonly createdAt: UnixMillis;
+    readonly expiresAt: UnixMillis;
+}
+export interface DevEmailListOptions {
+    readonly recipient?: Email;
+    readonly kind?: DevEmailKind;
+    readonly limit?: number;
+}
+export type DevEmailStoreOperation = "save" | "list" | "clear";
+declare const DevEmailStoreError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "DevEmailStoreError";
+} & Readonly<A>;
+export declare class DevEmailStoreError extends DevEmailStoreError_base<{
+    readonly operation: DevEmailStoreOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface DevEmailStoreService {
+    readonly save: (message: DevEmailMessage) => Effect.Effect<void, DevEmailStoreError>;
+    readonly list: (options?: DevEmailListOptions) => Effect.Effect<readonly DevEmailMessage[], DevEmailStoreError>;
+    readonly clear: () => Effect.Effect<void, DevEmailStoreError>;
+}
+declare const DevEmailStore_base: Context.ServiceClass<DevEmailStore, "auth/DevEmailStore", DevEmailStoreService>;
+export declare class DevEmailStore extends DevEmailStore_base {
+}
+export declare const DevEmailStoreMemoryLive: Layer.Layer<DevEmailStore>;
+export declare const AuthMailerFromDevEmailStoreLive: (options?: AuthMailerOptions) => Layer.Layer<AuthMailer, never, AuthEmailTemplates | DevEmailStore>;
+export {};
+//# sourceMappingURL=DevEmail.d.ts.map

package/dist/DevEmail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevEmail.d.ts","sourceRoot":"","sources":["../src/DevEmail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EACL,kBAAkB,EAClB,UAAU,EAEV,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAE7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;;;;AAE/D,qBAAa,kBAAmB,SAAQ,wBAAuC;IAC7E,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,eAAe,KACrB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,CAAC,EAAE,mBAAmB,KAC1B,MAAM,CAAC,MAAM,CAAC,SAAS,eAAe,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACnE,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;CAC/D;;AAED,qBAAa,aAAc,SAAQ,kBAGV;CAAG;AAQ5B,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,CAgD7D,CAAC;AA8CH,eAAO,MAAM,+BAA+B,aACjC,iBAAiB,KACzB,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAoDjE,CAAC"}

package/dist/DevEmail.js

@@ -0,0 +1,115 @@
+import { Clock, Context, Data, Effect, Layer } from "effect";
+import { UnixMillis as makeUnixMillis } from "./Identifiers.js";
+import { AuthEmailTemplates, AuthMailer, AuthMailerError, } from "./Mailer.js";
+export class DevEmailStoreError extends Data.TaggedError("DevEmailStoreError") {
+}
+export class DevEmailStore extends Context.Service()("auth/DevEmailStore") {
+}
+const memoryCapacity = 100;
+const defaultListLimit = 50;
+const cloneMessage = (message) => structuredClone(message);
+export const DevEmailStoreMemoryLive = Layer.sync(DevEmailStore)(() => {
+    const messages = new Map();
+    return DevEmailStore.of({
+        save: (message) => Effect.sync(() => {
+            messages.delete(message.id);
+            messages.set(message.id, cloneMessage(message));
+            while (messages.size > memoryCapacity) {
+                const oldestId = messages.keys().next().value;
+                if (oldestId === undefined) {
+                    break;
+                }
+                messages.delete(oldestId);
+            }
+        }),
+        list: (options = {}) => Effect.sync(() => {
+            const limit = Math.max(0, Math.floor(options.limit ?? defaultListLimit));
+            const newestFirst = [];
+            for (const message of messages.values()) {
+                newestFirst.unshift(message);
+            }
+            return newestFirst
+                .filter((message) => (options.recipient === undefined ||
+                message.recipient === options.recipient) &&
+                (options.kind === undefined || message.kind === options.kind))
+                .slice(0, limit)
+                .map(cloneMessage);
+        }),
+        clear: () => Effect.sync(() => {
+            messages.clear();
+        }),
+    });
+});
+const messageId = (input) => {
+    switch (input._tag) {
+        case "EmailAuth": {
+            return input.emailOtp.challengeId;
+        }
+        case "EmailOtp":
+        case "MagicLink":
+        case "PasswordReset":
+        case "EmailVerification":
+        case "LoginApproval": {
+            return input.challengeId;
+        }
+        case "LoginNotification": {
+            return (input.reportChallengeId ??
+                `${input.sessionId}:${input.occurredAt}:${input.reason}`);
+        }
+    }
+};
+const messageExpiresAt = (input) => {
+    switch (input._tag) {
+        case "EmailAuth": {
+            return makeUnixMillis(Math.max(Number(input.emailOtp.expiresAt), Number(input.magicLink.expiresAt)));
+        }
+        case "EmailOtp":
+        case "MagicLink":
+        case "PasswordReset":
+        case "EmailVerification":
+        case "LoginApproval": {
+            return input.expiresAt;
+        }
+        case "LoginNotification": {
+            return input.reportExpiresAt ?? input.occurredAt;
+        }
+    }
+};
+export const AuthMailerFromDevEmailStoreLive = (options = {}) => Layer.effect(AuthMailer)(Effect.gen(function* () {
+    const store = yield* DevEmailStore;
+    const templates = yield* AuthEmailTemplates;
+    return AuthMailer.of({
+        send: Effect.fn("auth.dev_email.send")(function* (input) {
+            yield* Effect.annotateCurrentSpan("auth.email.kind", input._tag);
+            const rendered = yield* templates.render(input).pipe(Effect.mapError((cause) => new AuthMailerError({
+                message: "Failed to render dev auth email",
+                cause,
+            })));
+            const createdAt = makeUnixMillis(yield* Clock.currentTimeMillis);
+            const sender = rendered.from ?? options.from;
+            yield* store
+                .save({
+                id: messageId(input),
+                kind: input._tag,
+                recipient: input.to,
+                ...(sender === undefined ? {} : { sender }),
+                subject: rendered.subject,
+                ...(rendered.text === undefined ? {} : { text: rendered.text }),
+                ...(rendered.html === undefined ? {} : { html: rendered.html }),
+                ...(rendered.headers === undefined
+                    ? {}
+                    : { headers: rendered.headers }),
+                ...(input.metadata === undefined
+                    ? {}
+                    : { metadata: input.metadata }),
+                createdAt,
+                expiresAt: messageExpiresAt(input),
+            })
+                .pipe(Effect.mapError((cause) => new AuthMailerError({
+                message: "Failed to store dev auth email",
+                cause,
+            })));
+        }),
+    });
+}));
+//# sourceMappingURL=DevEmail.js.map

package/dist/DevEmail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevEmail.js","sourceRoot":"","sources":["../src/DevEmail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG7D,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,eAAe,GAIhB,MAAM,aAAa,CAAC;AA0BrB,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAI3E;CAAG;AAYL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,YAAY,GAAG,CAAC,OAAwB,EAAmB,EAAE,CACjE,eAAe,CAAC,OAAO,CAAC,CAAC;AAE3B,MAAM,CAAC,MAAM,uBAAuB,GAA+B,KAAK,CAAC,IAAI,CAC3E,aAAa,CACd,CAAC,GAAG,EAAE;IACL,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEpD,OAAO,aAAa,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAEhD,OAAO,QAAQ,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAE9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM;gBACR,CAAC;gBAED,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QACJ,IAAI,EAAE,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,CACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAC9C,CAAC;YACF,MAAM,WAAW,GAAsB,EAAE,CAAC;YAE1C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAED,OAAO,WAAW;iBACf,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC9B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;gBAC1C,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAChE;iBACA,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;iBACf,GAAG,CAAC,YAAY,CAAC,CAAC;QACvB,CAAC,CAAC;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAU,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpC,CAAC;QACD,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,eAAe,CAAC;QACrB,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,WAAW,CAAC;QAC3B,CAAC;QACD,KAAK,mBAAmB,EAAE,CAAC;YACzB,OAAO,CACL,KAAK,CAAC,iBAAiB;gBACvB,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAgB,EAAc,EAAE;IACxD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW,EAAE,CAAC;YACjB,OAAO,cAAc,CACnB,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAClC,CACF,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,eAAe,CAAC;QACrB,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QACD,KAAK,mBAAmB,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,OAAO,GAAsB,EAAE,EACqC,EAAE,CACtE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAE5C,OAAO,UAAU,CAAC,EAAE,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAgB;YAChE,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEjE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAClD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,eAAe,CAAC;gBAClB,OAAO,EAAE,iCAAiC;gBAC1C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACF,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAE7C,KAAK,CAAC,CAAC,KAAK;iBACT,IAAI,CAAC;gBACJ,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/D,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/D,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAClC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC9B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,SAAS;gBACT,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC;aACnC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,eAAe,CAAC;gBAClB,OAAO,EAAE,gCAAgC;gBACzC,KAAK;aACN,CAAC,CACL,CACF,CAAC;QACN,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/dist/DevelopmentSeed.d.ts

@@ -0,0 +1,47 @@
+import { Context, Effect, Layer } from "effect";
+import { UserId } from "./Identifiers.js";
+import { IdentityKindRegistry } from "./Identity.js";
+import { PasswordHasher } from "./Password.js";
+import { CredentialStore, IdentityStore, RegistrationStore, UserStore } from "./Storage.js";
+export declare const developmentSeedUserCount: 100;
+export declare const developmentSeedPassword: "password";
+export declare const developmentSeedVersion: 1;
+export type DevelopmentSeedUserState = "active-verified" | "unverified" | "disabled" | "revoked-identity" | "revoked-password";
+export interface DevelopmentSeedUserDefinition {
+    readonly userNumber: number;
+    readonly email: string;
+    readonly state: DevelopmentSeedUserState;
+}
+export interface SeedDevelopmentUserResult extends DevelopmentSeedUserDefinition {
+    readonly userId: UserId;
+    readonly outcome: "created" | "existing";
+}
+export interface SeedDevelopmentUsersResult {
+    readonly created: number;
+    readonly existing: number;
+    readonly users: readonly SeedDevelopmentUserResult[];
+}
+export interface DevelopmentSeedService {
+    readonly seedUsers: Effect.Effect<SeedDevelopmentUsersResult, DevelopmentSeedError>;
+    readonly seedPasswordUsers: Effect.Effect<SeedDevelopmentUsersResult, DevelopmentSeedError, CredentialStore | PasswordHasher>;
+}
+export type DevelopmentSeedErrorReason = "normalization" | "password-hash" | "storage" | "registration" | "ownership" | "state";
+declare const DevelopmentSeedError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "DevelopmentSeedError";
+} & Readonly<A>;
+export declare class DevelopmentSeedError extends DevelopmentSeedError_base<{
+    readonly reason: DevelopmentSeedErrorReason;
+    readonly message: string;
+    readonly userNumber?: number;
+    readonly cause?: unknown;
+}> {
+}
+export declare const developmentSeedUsers: readonly DevelopmentSeedUserDefinition[];
+declare const DevelopmentSeed_base: Context.ServiceClass<DevelopmentSeed, "auth/DevelopmentSeed", DevelopmentSeedService> & {
+    readonly make: Effect.Effect<DevelopmentSeedService, never, IdentityKindRegistry | IdentityStore | RegistrationStore | UserStore>;
+};
+export declare class DevelopmentSeed extends DevelopmentSeed_base {
+}
+export declare const DevelopmentSeedLive: Layer.Layer<DevelopmentSeed, never, IdentityKindRegistry | IdentityStore | RegistrationStore | UserStore>;
+export {};
+//# sourceMappingURL=DevelopmentSeed.d.ts.map

package/dist/DevelopmentSeed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevelopmentSeed.d.ts","sourceRoot":"","sources":["../src/DevelopmentSeed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAoB,MAAM,QAAQ,CAAC;AAE/E,OAAO,EAAwC,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAsB,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,SAAS,EACV,MAAM,cAAc,CAAC;AAOtB,eAAO,MAAM,wBAAwB,EAAG,GAAY,CAAC;AACrD,eAAO,MAAM,uBAAuB,EAAG,UAAmB,CAAC;AAC3D,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAKjD,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,YAAY,GACZ,UAAU,GACV,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,yBAA0B,SAAQ,6BAA6B;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAC/B,0BAA0B,EAC1B,oBAAoB,CACrB,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CACvC,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,GAAG,cAAc,CACjC,CAAC;CACH;AAED,MAAM,MAAM,0BAA0B,GAClC,eAAe,GACf,eAAe,GACf,SAAS,GACT,cAAc,GACd,WAAW,GACX,OAAO,CAAC;;;;AAEZ,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAiCL,eAAO,MAAM,oBAAoB,EAAE,SAAS,6BAA6B,EAUtE,CAAC;;;;AA4NJ,qBAAa,eAAgB,SAAQ,oBAsWnC;CAAG;AAEL,eAAO,MAAM,mBAAmB,2GAE/B,CAAC"}