@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (637) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +307 -133
  3. package/dist/AbuseProtection.d.ts +100 -0
  4. package/dist/AbuseProtection.d.ts.map +1 -0
  5. package/dist/AbuseProtection.js +71 -0
  6. package/dist/AbuseProtection.js.map +1 -0
  7. package/dist/AccessGrant.d.ts +344 -0
  8. package/dist/AccessGrant.d.ts.map +1 -0
  9. package/dist/AccessGrant.js +687 -0
  10. package/dist/AccessGrant.js.map +1 -0
  11. package/dist/ApiKey.d.ts +0 -12
  12. package/dist/ApiKey.d.ts.map +1 -1
  13. package/dist/ApiKey.js +36 -27
  14. package/dist/ApiKey.js.map +1 -1
  15. package/dist/Assurance.d.ts +415 -0
  16. package/dist/Assurance.d.ts.map +1 -0
  17. package/dist/Assurance.js +764 -0
  18. package/dist/Assurance.js.map +1 -0
  19. package/dist/AtomicPlanExecutor.d.ts +28 -0
  20. package/dist/AtomicPlanExecutor.d.ts.map +1 -0
  21. package/dist/AtomicPlanExecutor.js +5 -0
  22. package/dist/AtomicPlanExecutor.js.map +1 -0
  23. package/dist/AuditLog.d.ts +2314 -52
  24. package/dist/AuditLog.d.ts.map +1 -1
  25. package/dist/AuditLog.js +511 -33
  26. package/dist/AuditLog.js.map +1 -1
  27. package/dist/AuthFlow.d.ts +128 -38
  28. package/dist/AuthFlow.d.ts.map +1 -1
  29. package/dist/AuthFlow.js +611 -263
  30. package/dist/AuthFlow.js.map +1 -1
  31. package/dist/AuthRateLimit.d.ts +96 -0
  32. package/dist/AuthRateLimit.d.ts.map +1 -0
  33. package/dist/AuthRateLimit.js +212 -0
  34. package/dist/AuthRateLimit.js.map +1 -0
  35. package/dist/Challenge.d.ts +0 -3
  36. package/dist/Challenge.d.ts.map +1 -1
  37. package/dist/Challenge.js +1 -4
  38. package/dist/Challenge.js.map +1 -1
  39. package/dist/Client.d.ts +205 -10
  40. package/dist/Client.d.ts.map +1 -1
  41. package/dist/Client.js +397 -16
  42. package/dist/Client.js.map +1 -1
  43. package/dist/CloudflareTurnstile.d.ts +28 -0
  44. package/dist/CloudflareTurnstile.d.ts.map +1 -0
  45. package/dist/CloudflareTurnstile.js +205 -0
  46. package/dist/CloudflareTurnstile.js.map +1 -0
  47. package/dist/Crypto.d.ts +0 -3
  48. package/dist/Crypto.d.ts.map +1 -1
  49. package/dist/Crypto.js +1 -4
  50. package/dist/Crypto.js.map +1 -1
  51. package/dist/DelegatedAccessStorageMigrations.d.ts +7 -0
  52. package/dist/DelegatedAccessStorageMigrations.d.ts.map +1 -0
  53. package/dist/DelegatedAccessStorageMigrations.js +159 -0
  54. package/dist/DelegatedAccessStorageMigrations.js.map +1 -0
  55. package/dist/DevEmail.d.ts +44 -0
  56. package/dist/DevEmail.d.ts.map +1 -0
  57. package/dist/DevEmail.js +115 -0
  58. package/dist/DevEmail.js.map +1 -0
  59. package/dist/DevelopmentSeed.d.ts +47 -0
  60. package/dist/DevelopmentSeed.d.ts.map +1 -0
  61. package/dist/DevelopmentSeed.js +337 -0
  62. package/dist/DevelopmentSeed.js.map +1 -0
  63. package/dist/DisposableEmailDomains.d.ts +19 -0
  64. package/dist/DisposableEmailDomains.d.ts.map +1 -0
  65. package/dist/DisposableEmailDomains.js +85 -0
  66. package/dist/DisposableEmailDomains.js.map +1 -0
  67. package/dist/DomainVerification.d.ts +0 -9
  68. package/dist/DomainVerification.d.ts.map +1 -1
  69. package/dist/DomainVerification.js +36 -22
  70. package/dist/DomainVerification.js.map +1 -1
  71. package/dist/DrizzleBunSqliteStorage.d.ts +18 -0
  72. package/dist/DrizzleBunSqliteStorage.d.ts.map +1 -0
  73. package/dist/DrizzleBunSqliteStorage.js +11 -0
  74. package/dist/DrizzleBunSqliteStorage.js.map +1 -0
  75. package/dist/DrizzleD1SqliteStorage.d.ts +4 -4
  76. package/dist/DrizzleD1SqliteStorage.d.ts.map +1 -1
  77. package/dist/DrizzleD1SqliteStorage.js +5 -5
  78. package/dist/DrizzleD1SqliteStorage.js.map +1 -1
  79. package/dist/DrizzleEffectSqliteStorage.d.ts +13 -4
  80. package/dist/DrizzleEffectSqliteStorage.d.ts.map +1 -1
  81. package/dist/DrizzleEffectSqliteStorage.js +71 -4
  82. package/dist/DrizzleEffectSqliteStorage.js.map +1 -1
  83. package/dist/DrizzleNodeSqliteStorage.d.ts +18 -0
  84. package/dist/DrizzleNodeSqliteStorage.d.ts.map +1 -0
  85. package/dist/DrizzleNodeSqliteStorage.js +11 -0
  86. package/dist/DrizzleNodeSqliteStorage.js.map +1 -0
  87. package/dist/DrizzlePostgresStorage.d.ts +26 -0
  88. package/dist/DrizzlePostgresStorage.d.ts.map +1 -0
  89. package/dist/DrizzlePostgresStorage.js +14 -0
  90. package/dist/DrizzlePostgresStorage.js.map +1 -0
  91. package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts +34 -0
  92. package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts.map +1 -0
  93. package/dist/EffectQbPostgresDelegatedAccessStorage.js +499 -0
  94. package/dist/EffectQbPostgresDelegatedAccessStorage.js.map +1 -0
  95. package/dist/EffectQbPostgresStorage.d.ts +178 -0
  96. package/dist/EffectQbPostgresStorage.d.ts.map +1 -0
  97. package/dist/EffectQbPostgresStorage.js +4637 -0
  98. package/dist/EffectQbPostgresStorage.js.map +1 -0
  99. package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts +112 -0
  100. package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts.map +1 -0
  101. package/dist/EffectQbSqliteDelegatedAccessStorage.js +602 -0
  102. package/dist/EffectQbSqliteDelegatedAccessStorage.js.map +1 -0
  103. package/dist/EffectQbSqliteStorage.d.ts +221 -23
  104. package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
  105. package/dist/EffectQbSqliteStorage.js +2064 -135
  106. package/dist/EffectQbSqliteStorage.js.map +1 -1
  107. package/dist/EmailAuth.d.ts +65 -0
  108. package/dist/EmailAuth.d.ts.map +1 -0
  109. package/dist/EmailAuth.js +171 -0
  110. package/dist/EmailAuth.js.map +1 -0
  111. package/dist/EmailIdentityAuth.d.ts +30 -0
  112. package/dist/EmailIdentityAuth.d.ts.map +1 -0
  113. package/dist/EmailIdentityAuth.js +142 -0
  114. package/dist/EmailIdentityAuth.js.map +1 -0
  115. package/dist/EmailOtp.d.ts +10 -11
  116. package/dist/EmailOtp.d.ts.map +1 -1
  117. package/dist/EmailOtp.js +44 -81
  118. package/dist/EmailOtp.js.map +1 -1
  119. package/dist/EmailRisk.d.ts +48 -0
  120. package/dist/EmailRisk.d.ts.map +1 -0
  121. package/dist/EmailRisk.js +33 -0
  122. package/dist/EmailRisk.js.map +1 -0
  123. package/dist/EmailVerification.d.ts +10 -16
  124. package/dist/EmailVerification.d.ts.map +1 -1
  125. package/dist/EmailVerification.js +85 -42
  126. package/dist/EmailVerification.js.map +1 -1
  127. package/dist/Guard.d.ts +11 -0
  128. package/dist/Guard.d.ts.map +1 -0
  129. package/dist/Guard.js +11 -0
  130. package/dist/Guard.js.map +1 -0
  131. package/dist/HibpPwnedPasswords.d.ts +56 -0
  132. package/dist/HibpPwnedPasswords.d.ts.map +1 -0
  133. package/dist/HibpPwnedPasswords.js +232 -0
  134. package/dist/HibpPwnedPasswords.js.map +1 -0
  135. package/dist/HttpApi/AdminPermissionDefinition.d.ts +4 -0
  136. package/dist/HttpApi/AdminPermissionDefinition.d.ts.map +1 -0
  137. package/dist/HttpApi/AdminPermissionDefinition.js +4 -0
  138. package/dist/HttpApi/AdminPermissionDefinition.js.map +1 -0
  139. package/dist/HttpApi/AdminSecurityTimeline.d.ts +4 -0
  140. package/dist/HttpApi/AdminSecurityTimeline.d.ts.map +1 -0
  141. package/dist/HttpApi/AdminSecurityTimeline.js +4 -0
  142. package/dist/HttpApi/AdminSecurityTimeline.js.map +1 -0
  143. package/dist/HttpApi/AdminSession.d.ts +4 -0
  144. package/dist/HttpApi/AdminSession.d.ts.map +1 -0
  145. package/dist/HttpApi/AdminSession.js +4 -0
  146. package/dist/HttpApi/AdminSession.js.map +1 -0
  147. package/dist/HttpApi/AdminTrustedDevice.d.ts +4 -0
  148. package/dist/HttpApi/AdminTrustedDevice.d.ts.map +1 -0
  149. package/dist/HttpApi/AdminTrustedDevice.js +4 -0
  150. package/dist/HttpApi/AdminTrustedDevice.js.map +1 -0
  151. package/dist/HttpApi/Api.d.ts +939 -884
  152. package/dist/HttpApi/Api.d.ts.map +1 -1
  153. package/dist/HttpApi/Api.js +2254 -940
  154. package/dist/HttpApi/Api.js.map +1 -1
  155. package/dist/HttpApi/ApiKey.d.ts +4 -0
  156. package/dist/HttpApi/ApiKey.d.ts.map +1 -0
  157. package/dist/HttpApi/ApiKey.js +4 -0
  158. package/dist/HttpApi/ApiKey.js.map +1 -0
  159. package/dist/HttpApi/Audit.d.ts +6 -0
  160. package/dist/HttpApi/Audit.d.ts.map +1 -0
  161. package/dist/HttpApi/Audit.js +10 -0
  162. package/dist/HttpApi/Audit.js.map +1 -0
  163. package/dist/HttpApi/ClientApi.d.ts +917 -0
  164. package/dist/HttpApi/ClientApi.d.ts.map +1 -0
  165. package/dist/HttpApi/ClientApi.js +101 -0
  166. package/dist/HttpApi/ClientApi.js.map +1 -0
  167. package/dist/HttpApi/EmailAuth.d.ts +6 -0
  168. package/dist/HttpApi/EmailAuth.d.ts.map +1 -0
  169. package/dist/HttpApi/EmailAuth.js +6 -0
  170. package/dist/HttpApi/EmailAuth.js.map +1 -0
  171. package/dist/HttpApi/EmailGuards.d.ts +115 -0
  172. package/dist/HttpApi/EmailGuards.d.ts.map +1 -0
  173. package/dist/HttpApi/EmailGuards.js +191 -0
  174. package/dist/HttpApi/EmailGuards.js.map +1 -0
  175. package/dist/HttpApi/EmailOtp.d.ts +6 -0
  176. package/dist/HttpApi/EmailOtp.d.ts.map +1 -0
  177. package/dist/HttpApi/EmailOtp.js +6 -0
  178. package/dist/HttpApi/EmailOtp.js.map +1 -0
  179. package/dist/HttpApi/EmailVerification.d.ts +6 -0
  180. package/dist/HttpApi/EmailVerification.d.ts.map +1 -0
  181. package/dist/HttpApi/EmailVerification.js +6 -0
  182. package/dist/HttpApi/EmailVerification.js.map +1 -0
  183. package/dist/HttpApi/Endpoints.d.ts +661 -301
  184. package/dist/HttpApi/Endpoints.d.ts.map +1 -1
  185. package/dist/HttpApi/Endpoints.js +207 -120
  186. package/dist/HttpApi/Endpoints.js.map +1 -1
  187. package/dist/HttpApi/Errors.d.ts +37 -10
  188. package/dist/HttpApi/Errors.d.ts.map +1 -1
  189. package/dist/HttpApi/Errors.js +42 -4
  190. package/dist/HttpApi/Errors.js.map +1 -1
  191. package/dist/HttpApi/Identity.d.ts +6 -0
  192. package/dist/HttpApi/Identity.d.ts.map +1 -0
  193. package/dist/HttpApi/Identity.js +6 -0
  194. package/dist/HttpApi/Identity.js.map +1 -0
  195. package/dist/HttpApi/IdentityGuards.d.ts +31 -0
  196. package/dist/HttpApi/IdentityGuards.d.ts.map +1 -0
  197. package/dist/HttpApi/IdentityGuards.js +33 -0
  198. package/dist/HttpApi/IdentityGuards.js.map +1 -0
  199. package/dist/HttpApi/Jwt.d.ts +4 -0
  200. package/dist/HttpApi/Jwt.d.ts.map +1 -0
  201. package/dist/HttpApi/Jwt.js +4 -0
  202. package/dist/HttpApi/Jwt.js.map +1 -0
  203. package/dist/HttpApi/JwtDiscovery.d.ts +4 -0
  204. package/dist/HttpApi/JwtDiscovery.d.ts.map +1 -0
  205. package/dist/HttpApi/JwtDiscovery.js +4 -0
  206. package/dist/HttpApi/JwtDiscovery.js.map +1 -0
  207. package/dist/HttpApi/LoginApproval.d.ts +5 -0
  208. package/dist/HttpApi/LoginApproval.d.ts.map +1 -0
  209. package/dist/HttpApi/LoginApproval.js +5 -0
  210. package/dist/HttpApi/LoginApproval.js.map +1 -0
  211. package/dist/HttpApi/LoginNotification.d.ts +5 -0
  212. package/dist/HttpApi/LoginNotification.d.ts.map +1 -0
  213. package/dist/HttpApi/LoginNotification.js +5 -0
  214. package/dist/HttpApi/LoginNotification.js.map +1 -0
  215. package/dist/HttpApi/MagicLink.d.ts +6 -0
  216. package/dist/HttpApi/MagicLink.d.ts.map +1 -0
  217. package/dist/HttpApi/MagicLink.js +6 -0
  218. package/dist/HttpApi/MagicLink.js.map +1 -0
  219. package/dist/HttpApi/Mfa.d.ts +5 -0
  220. package/dist/HttpApi/Mfa.d.ts.map +1 -0
  221. package/dist/HttpApi/Mfa.js +5 -0
  222. package/dist/HttpApi/Mfa.js.map +1 -0
  223. package/dist/HttpApi/Middleware.d.ts +26 -0
  224. package/dist/HttpApi/Middleware.d.ts.map +1 -0
  225. package/dist/HttpApi/Middleware.js +13 -0
  226. package/dist/HttpApi/Middleware.js.map +1 -0
  227. package/dist/HttpApi/OAuth.d.ts +4 -0
  228. package/dist/HttpApi/OAuth.d.ts.map +1 -0
  229. package/dist/HttpApi/OAuth.js +4 -0
  230. package/dist/HttpApi/OAuth.js.map +1 -0
  231. package/dist/HttpApi/OAuthDeviceAuthorization.d.ts +106 -0
  232. package/dist/HttpApi/OAuthDeviceAuthorization.d.ts.map +1 -0
  233. package/dist/HttpApi/OAuthDeviceAuthorization.js +415 -0
  234. package/dist/HttpApi/OAuthDeviceAuthorization.js.map +1 -0
  235. package/dist/HttpApi/OAuthProviderAuthorization.d.ts +4 -0
  236. package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map +1 -0
  237. package/dist/HttpApi/OAuthProviderAuthorization.js +4 -0
  238. package/dist/HttpApi/OAuthProviderAuthorization.js.map +1 -0
  239. package/dist/HttpApi/OAuthToken.d.ts +4 -0
  240. package/dist/HttpApi/OAuthToken.d.ts.map +1 -0
  241. package/dist/HttpApi/OAuthToken.js +4 -0
  242. package/dist/HttpApi/OAuthToken.js.map +1 -0
  243. package/dist/HttpApi/OidcDiscovery.d.ts +4 -0
  244. package/dist/HttpApi/OidcDiscovery.d.ts.map +1 -0
  245. package/dist/HttpApi/OidcDiscovery.js +4 -0
  246. package/dist/HttpApi/OidcDiscovery.js.map +1 -0
  247. package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts +28 -0
  248. package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts.map +1 -0
  249. package/dist/HttpApi/Operations/AdminPermissionDefinition.js +5 -0
  250. package/dist/HttpApi/Operations/AdminPermissionDefinition.js.map +1 -0
  251. package/dist/HttpApi/Operations/AdminSession.d.ts +16 -0
  252. package/dist/HttpApi/Operations/AdminSession.d.ts.map +1 -0
  253. package/dist/HttpApi/Operations/AdminSession.js +5 -0
  254. package/dist/HttpApi/Operations/AdminSession.js.map +1 -0
  255. package/dist/HttpApi/Operations/ApiKey.d.ts +16 -0
  256. package/dist/HttpApi/Operations/ApiKey.d.ts.map +1 -0
  257. package/dist/HttpApi/Operations/ApiKey.js +5 -0
  258. package/dist/HttpApi/Operations/ApiKey.js.map +1 -0
  259. package/dist/HttpApi/Operations/Discovery.d.ts +19 -0
  260. package/dist/HttpApi/Operations/Discovery.d.ts.map +1 -0
  261. package/dist/HttpApi/Operations/Discovery.js +7 -0
  262. package/dist/HttpApi/Operations/Discovery.js.map +1 -0
  263. package/dist/HttpApi/Operations/EmailAuth.d.ts +12 -0
  264. package/dist/HttpApi/Operations/EmailAuth.d.ts.map +1 -0
  265. package/dist/HttpApi/Operations/EmailAuth.js +5 -0
  266. package/dist/HttpApi/Operations/EmailAuth.js.map +1 -0
  267. package/dist/HttpApi/Operations/EmailOtp.d.ts +14 -0
  268. package/dist/HttpApi/Operations/EmailOtp.d.ts.map +1 -0
  269. package/dist/HttpApi/Operations/EmailOtp.js +5 -0
  270. package/dist/HttpApi/Operations/EmailOtp.js.map +1 -0
  271. package/dist/HttpApi/Operations/EmailVerification.d.ts +14 -0
  272. package/dist/HttpApi/Operations/EmailVerification.d.ts.map +1 -0
  273. package/dist/HttpApi/Operations/EmailVerification.js +5 -0
  274. package/dist/HttpApi/Operations/EmailVerification.js.map +1 -0
  275. package/dist/HttpApi/Operations/HttpOperation.d.ts +4 -0
  276. package/dist/HttpApi/Operations/HttpOperation.d.ts.map +1 -0
  277. package/dist/HttpApi/Operations/HttpOperation.js +2 -0
  278. package/dist/HttpApi/Operations/HttpOperation.js.map +1 -0
  279. package/dist/HttpApi/Operations/Identity.d.ts +22 -0
  280. package/dist/HttpApi/Operations/Identity.d.ts.map +1 -0
  281. package/dist/HttpApi/Operations/Identity.js +5 -0
  282. package/dist/HttpApi/Operations/Identity.js.map +1 -0
  283. package/dist/HttpApi/Operations/Jwt.d.ts +14 -0
  284. package/dist/HttpApi/Operations/Jwt.d.ts.map +1 -0
  285. package/dist/HttpApi/Operations/Jwt.js +5 -0
  286. package/dist/HttpApi/Operations/Jwt.js.map +1 -0
  287. package/dist/HttpApi/Operations/LoginApproval.d.ts +16 -0
  288. package/dist/HttpApi/Operations/LoginApproval.d.ts.map +1 -0
  289. package/dist/HttpApi/Operations/LoginApproval.js +5 -0
  290. package/dist/HttpApi/Operations/LoginApproval.js.map +1 -0
  291. package/dist/HttpApi/Operations/MagicLink.d.ts +14 -0
  292. package/dist/HttpApi/Operations/MagicLink.d.ts.map +1 -0
  293. package/dist/HttpApi/Operations/MagicLink.js +5 -0
  294. package/dist/HttpApi/Operations/MagicLink.js.map +1 -0
  295. package/dist/HttpApi/Operations/Mfa.d.ts +24 -0
  296. package/dist/HttpApi/Operations/Mfa.d.ts.map +1 -0
  297. package/dist/HttpApi/Operations/Mfa.js +5 -0
  298. package/dist/HttpApi/Operations/Mfa.js.map +1 -0
  299. package/dist/HttpApi/Operations/OAuth.d.ts +20 -0
  300. package/dist/HttpApi/Operations/OAuth.d.ts.map +1 -0
  301. package/dist/HttpApi/Operations/OAuth.js +5 -0
  302. package/dist/HttpApi/Operations/OAuth.js.map +1 -0
  303. package/dist/HttpApi/Operations/OAuthDeviceAuthorization.d.ts +23 -0
  304. package/dist/HttpApi/Operations/OAuthDeviceAuthorization.d.ts.map +1 -0
  305. package/dist/HttpApi/Operations/OAuthDeviceAuthorization.js +7 -0
  306. package/dist/HttpApi/Operations/OAuthDeviceAuthorization.js.map +1 -0
  307. package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts +12 -0
  308. package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts.map +1 -0
  309. package/dist/HttpApi/Operations/OAuthProviderAuthorization.js +5 -0
  310. package/dist/HttpApi/Operations/OAuthProviderAuthorization.js.map +1 -0
  311. package/dist/HttpApi/Operations/OAuthToken.d.ts +26 -0
  312. package/dist/HttpApi/Operations/OAuthToken.d.ts.map +1 -0
  313. package/dist/HttpApi/Operations/OAuthToken.js +9 -0
  314. package/dist/HttpApi/Operations/OAuthToken.js.map +1 -0
  315. package/dist/HttpApi/Operations/Passkey.d.ts +22 -0
  316. package/dist/HttpApi/Operations/Passkey.d.ts.map +1 -0
  317. package/dist/HttpApi/Operations/Passkey.js +5 -0
  318. package/dist/HttpApi/Operations/Passkey.js.map +1 -0
  319. package/dist/HttpApi/Operations/Password.d.ts +22 -0
  320. package/dist/HttpApi/Operations/Password.d.ts.map +1 -0
  321. package/dist/HttpApi/Operations/Password.js +5 -0
  322. package/dist/HttpApi/Operations/Password.js.map +1 -0
  323. package/dist/HttpApi/Operations/RecoveryCodes.d.ts +20 -0
  324. package/dist/HttpApi/Operations/RecoveryCodes.d.ts.map +1 -0
  325. package/dist/HttpApi/Operations/RecoveryCodes.js +5 -0
  326. package/dist/HttpApi/Operations/RecoveryCodes.js.map +1 -0
  327. package/dist/HttpApi/Operations/RefreshToken.d.ts +12 -0
  328. package/dist/HttpApi/Operations/RefreshToken.d.ts.map +1 -0
  329. package/dist/HttpApi/Operations/RefreshToken.js +5 -0
  330. package/dist/HttpApi/Operations/RefreshToken.js.map +1 -0
  331. package/dist/HttpApi/Operations/Security.d.ts +12 -0
  332. package/dist/HttpApi/Operations/Security.d.ts.map +1 -0
  333. package/dist/HttpApi/Operations/Security.js +5 -0
  334. package/dist/HttpApi/Operations/Security.js.map +1 -0
  335. package/dist/HttpApi/Operations/SecurityTimeline.d.ts +19 -0
  336. package/dist/HttpApi/Operations/SecurityTimeline.d.ts.map +1 -0
  337. package/dist/HttpApi/Operations/SecurityTimeline.js +7 -0
  338. package/dist/HttpApi/Operations/SecurityTimeline.js.map +1 -0
  339. package/dist/HttpApi/Operations/Session.d.ts +22 -0
  340. package/dist/HttpApi/Operations/Session.d.ts.map +1 -0
  341. package/dist/HttpApi/Operations/Session.js +5 -0
  342. package/dist/HttpApi/Operations/Session.js.map +1 -0
  343. package/dist/HttpApi/Operations/StepUp.d.ts +22 -0
  344. package/dist/HttpApi/Operations/StepUp.d.ts.map +1 -0
  345. package/dist/HttpApi/Operations/StepUp.js +5 -0
  346. package/dist/HttpApi/Operations/StepUp.js.map +1 -0
  347. package/dist/HttpApi/Operations/Totp.d.ts +20 -0
  348. package/dist/HttpApi/Operations/Totp.d.ts.map +1 -0
  349. package/dist/HttpApi/Operations/Totp.js +5 -0
  350. package/dist/HttpApi/Operations/Totp.js.map +1 -0
  351. package/dist/HttpApi/Operations/TrustedDevice.d.ts +23 -0
  352. package/dist/HttpApi/Operations/TrustedDevice.d.ts.map +1 -0
  353. package/dist/HttpApi/Operations/TrustedDevice.js +7 -0
  354. package/dist/HttpApi/Operations/TrustedDevice.js.map +1 -0
  355. package/dist/HttpApi/Operations/index.d.ts +28 -0
  356. package/dist/HttpApi/Operations/index.d.ts.map +1 -0
  357. package/dist/HttpApi/Operations/index.js +28 -0
  358. package/dist/HttpApi/Operations/index.js.map +1 -0
  359. package/dist/HttpApi/Passkey.d.ts +5 -0
  360. package/dist/HttpApi/Passkey.d.ts.map +1 -0
  361. package/dist/HttpApi/Passkey.js +5 -0
  362. package/dist/HttpApi/Passkey.js.map +1 -0
  363. package/dist/HttpApi/Password.d.ts +220 -0
  364. package/dist/HttpApi/Password.d.ts.map +1 -0
  365. package/dist/HttpApi/Password.js +237 -0
  366. package/dist/HttpApi/Password.js.map +1 -0
  367. package/dist/HttpApi/PasswordContract.d.ts +307 -0
  368. package/dist/HttpApi/PasswordContract.d.ts.map +1 -0
  369. package/dist/HttpApi/PasswordContract.js +63 -0
  370. package/dist/HttpApi/PasswordContract.js.map +1 -0
  371. package/dist/HttpApi/PasswordGuards.d.ts +82 -0
  372. package/dist/HttpApi/PasswordGuards.d.ts.map +1 -0
  373. package/dist/HttpApi/PasswordGuards.js +179 -0
  374. package/dist/HttpApi/PasswordGuards.js.map +1 -0
  375. package/dist/HttpApi/RecoveryCodes.d.ts +5 -0
  376. package/dist/HttpApi/RecoveryCodes.d.ts.map +1 -0
  377. package/dist/HttpApi/RecoveryCodes.js +5 -0
  378. package/dist/HttpApi/RecoveryCodes.js.map +1 -0
  379. package/dist/HttpApi/RefreshToken.d.ts +4 -0
  380. package/dist/HttpApi/RefreshToken.d.ts.map +1 -0
  381. package/dist/HttpApi/RefreshToken.js +4 -0
  382. package/dist/HttpApi/RefreshToken.js.map +1 -0
  383. package/dist/HttpApi/RequestGuards.d.ts +42 -0
  384. package/dist/HttpApi/RequestGuards.d.ts.map +1 -0
  385. package/dist/HttpApi/RequestGuards.js +194 -0
  386. package/dist/HttpApi/RequestGuards.js.map +1 -0
  387. package/dist/HttpApi/Schemas.d.ts +399 -84
  388. package/dist/HttpApi/Schemas.d.ts.map +1 -1
  389. package/dist/HttpApi/Schemas.js +225 -27
  390. package/dist/HttpApi/Schemas.js.map +1 -1
  391. package/dist/HttpApi/Security.d.ts +12 -93
  392. package/dist/HttpApi/Security.d.ts.map +1 -1
  393. package/dist/HttpApi/Security.js +65 -356
  394. package/dist/HttpApi/Security.js.map +1 -1
  395. package/dist/HttpApi/SecurityTimeline.d.ts +4 -0
  396. package/dist/HttpApi/SecurityTimeline.d.ts.map +1 -0
  397. package/dist/HttpApi/SecurityTimeline.js +4 -0
  398. package/dist/HttpApi/SecurityTimeline.js.map +1 -0
  399. package/dist/HttpApi/Session.d.ts +5 -0
  400. package/dist/HttpApi/Session.d.ts.map +1 -0
  401. package/dist/HttpApi/Session.js +5 -0
  402. package/dist/HttpApi/Session.js.map +1 -0
  403. package/dist/HttpApi/SessionGuards.d.ts +15 -0
  404. package/dist/HttpApi/SessionGuards.d.ts.map +1 -0
  405. package/dist/HttpApi/SessionGuards.js +37 -0
  406. package/dist/HttpApi/SessionGuards.js.map +1 -0
  407. package/dist/HttpApi/StepUp.d.ts +5 -0
  408. package/dist/HttpApi/StepUp.d.ts.map +1 -0
  409. package/dist/HttpApi/StepUp.js +5 -0
  410. package/dist/HttpApi/StepUp.js.map +1 -0
  411. package/dist/HttpApi/Totp.d.ts +5 -0
  412. package/dist/HttpApi/Totp.d.ts.map +1 -0
  413. package/dist/HttpApi/Totp.js +5 -0
  414. package/dist/HttpApi/Totp.js.map +1 -0
  415. package/dist/HttpApi/Transport.d.ts +4 -6
  416. package/dist/HttpApi/Transport.d.ts.map +1 -1
  417. package/dist/HttpApi/Transport.js +62 -36
  418. package/dist/HttpApi/Transport.js.map +1 -1
  419. package/dist/HttpApi/TrustedDevice.d.ts +4 -0
  420. package/dist/HttpApi/TrustedDevice.d.ts.map +1 -0
  421. package/dist/HttpApi/TrustedDevice.js +4 -0
  422. package/dist/HttpApi/TrustedDevice.js.map +1 -0
  423. package/dist/HttpApi/index.d.ts +11 -3
  424. package/dist/HttpApi/index.d.ts.map +1 -1
  425. package/dist/HttpApi/index.js +10 -2
  426. package/dist/HttpApi/index.js.map +1 -1
  427. package/dist/Identity.d.ts +138 -0
  428. package/dist/Identity.d.ts.map +1 -0
  429. package/dist/Identity.js +105 -0
  430. package/dist/Identity.js.map +1 -0
  431. package/dist/IdentityManagement.d.ts +189 -0
  432. package/dist/IdentityManagement.d.ts.map +1 -0
  433. package/dist/IdentityManagement.js +317 -0
  434. package/dist/IdentityManagement.js.map +1 -0
  435. package/dist/IncidentAction.d.ts +1 -4
  436. package/dist/IncidentAction.d.ts.map +1 -1
  437. package/dist/IncidentAction.js +15 -9
  438. package/dist/IncidentAction.js.map +1 -1
  439. package/dist/Internal.d.ts +2 -0
  440. package/dist/Internal.d.ts.map +1 -1
  441. package/dist/Internal.js +30 -0
  442. package/dist/Internal.js.map +1 -1
  443. package/dist/Invitation.d.ts +362 -0
  444. package/dist/Invitation.d.ts.map +1 -0
  445. package/dist/Invitation.js +633 -0
  446. package/dist/Invitation.js.map +1 -0
  447. package/dist/IpQualityScore.d.ts +38 -0
  448. package/dist/IpQualityScore.d.ts.map +1 -0
  449. package/dist/IpQualityScore.js +215 -0
  450. package/dist/IpQualityScore.js.map +1 -0
  451. package/dist/Jwt.d.ts +8 -29
  452. package/dist/Jwt.d.ts.map +1 -1
  453. package/dist/Jwt.js +67 -56
  454. package/dist/Jwt.js.map +1 -1
  455. package/dist/LoginApproval.d.ts +15 -30
  456. package/dist/LoginApproval.d.ts.map +1 -1
  457. package/dist/LoginApproval.js +47 -41
  458. package/dist/LoginApproval.js.map +1 -1
  459. package/dist/LoginNotification.d.ts +7 -11
  460. package/dist/LoginNotification.d.ts.map +1 -1
  461. package/dist/LoginNotification.js +30 -17
  462. package/dist/LoginNotification.js.map +1 -1
  463. package/dist/LoginRisk.d.ts +11 -13
  464. package/dist/LoginRisk.d.ts.map +1 -1
  465. package/dist/LoginRisk.js +66 -26
  466. package/dist/LoginRisk.js.map +1 -1
  467. package/dist/LoginRiskEnrichment.d.ts +145 -0
  468. package/dist/LoginRiskEnrichment.d.ts.map +1 -0
  469. package/dist/LoginRiskEnrichment.js +220 -0
  470. package/dist/LoginRiskEnrichment.js.map +1 -0
  471. package/dist/MagicLink.d.ts +9 -8
  472. package/dist/MagicLink.d.ts.map +1 -1
  473. package/dist/MagicLink.js +40 -73
  474. package/dist/MagicLink.js.map +1 -1
  475. package/dist/Mailer.d.ts +19 -12
  476. package/dist/Mailer.d.ts.map +1 -1
  477. package/dist/Mailer.js +10 -12
  478. package/dist/Mailer.js.map +1 -1
  479. package/dist/OAuth.d.ts +138 -96
  480. package/dist/OAuth.d.ts.map +1 -1
  481. package/dist/OAuth.js +522 -221
  482. package/dist/OAuth.js.map +1 -1
  483. package/dist/OAuthDeviceAuthorization.d.ts +378 -0
  484. package/dist/OAuthDeviceAuthorization.d.ts.map +1 -0
  485. package/dist/OAuthDeviceAuthorization.js +860 -0
  486. package/dist/OAuthDeviceAuthorization.js.map +1 -0
  487. package/dist/OAuthDeviceClient.d.ts +76 -0
  488. package/dist/OAuthDeviceClient.d.ts.map +1 -0
  489. package/dist/OAuthDeviceClient.js +362 -0
  490. package/dist/OAuthDeviceClient.js.map +1 -0
  491. package/dist/Passkey.d.ts +15 -17
  492. package/dist/Passkey.d.ts.map +1 -1
  493. package/dist/Passkey.js +86 -39
  494. package/dist/Passkey.js.map +1 -1
  495. package/dist/PasskeyBrowser.d.ts +39 -0
  496. package/dist/PasskeyBrowser.d.ts.map +1 -0
  497. package/dist/PasskeyBrowser.js +206 -0
  498. package/dist/PasskeyBrowser.js.map +1 -0
  499. package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -1
  500. package/dist/PasskeySimpleWebAuthn.js +19 -7
  501. package/dist/PasskeySimpleWebAuthn.js.map +1 -1
  502. package/dist/Password.d.ts +71 -37
  503. package/dist/Password.d.ts.map +1 -1
  504. package/dist/Password.js +295 -81
  505. package/dist/Password.js.map +1 -1
  506. package/dist/PasswordRisk.d.ts +63 -0
  507. package/dist/PasswordRisk.d.ts.map +1 -0
  508. package/dist/PasswordRisk.js +37 -0
  509. package/dist/PasswordRisk.js.map +1 -0
  510. package/dist/Permission.d.ts +308 -0
  511. package/dist/Permission.d.ts.map +1 -0
  512. package/dist/Permission.js +827 -0
  513. package/dist/Permission.js.map +1 -0
  514. package/dist/Policy.d.ts +31 -18
  515. package/dist/Policy.d.ts.map +1 -1
  516. package/dist/Policy.js +58 -14
  517. package/dist/Policy.js.map +1 -1
  518. package/dist/PostgresDelegatedAccessStorageMigrations.d.ts +7 -0
  519. package/dist/PostgresDelegatedAccessStorageMigrations.d.ts.map +1 -0
  520. package/dist/PostgresDelegatedAccessStorageMigrations.js +119 -0
  521. package/dist/PostgresDelegatedAccessStorageMigrations.js.map +1 -0
  522. package/dist/PostgresStorageMigrations.d.ts +16 -0
  523. package/dist/PostgresStorageMigrations.d.ts.map +1 -0
  524. package/dist/PostgresStorageMigrations.js +674 -0
  525. package/dist/PostgresStorageMigrations.js.map +1 -0
  526. package/dist/Privacy.d.ts +0 -3
  527. package/dist/Privacy.d.ts.map +1 -1
  528. package/dist/Privacy.js +2 -5
  529. package/dist/Privacy.js.map +1 -1
  530. package/dist/RateLimiter.d.ts +0 -3
  531. package/dist/RateLimiter.d.ts.map +1 -1
  532. package/dist/RateLimiter.js +1 -4
  533. package/dist/RateLimiter.js.map +1 -1
  534. package/dist/RecoveryCode.d.ts +83 -11
  535. package/dist/RecoveryCode.d.ts.map +1 -1
  536. package/dist/RecoveryCode.js +273 -75
  537. package/dist/RecoveryCode.js.map +1 -1
  538. package/dist/RecoveryPolicy.d.ts +81 -0
  539. package/dist/RecoveryPolicy.d.ts.map +1 -0
  540. package/dist/RecoveryPolicy.js +119 -0
  541. package/dist/RecoveryPolicy.js.map +1 -0
  542. package/dist/RefreshToken.d.ts +0 -9
  543. package/dist/RefreshToken.d.ts.map +1 -1
  544. package/dist/RefreshToken.js +31 -22
  545. package/dist/RefreshToken.js.map +1 -1
  546. package/dist/Retention.d.ts +6 -1
  547. package/dist/Retention.d.ts.map +1 -1
  548. package/dist/Retention.js +49 -12
  549. package/dist/Retention.js.map +1 -1
  550. package/dist/SecurityTimeline.d.ts +1 -4
  551. package/dist/SecurityTimeline.d.ts.map +1 -1
  552. package/dist/SecurityTimeline.js +110 -17
  553. package/dist/SecurityTimeline.js.map +1 -1
  554. package/dist/Sessions.d.ts +124 -29
  555. package/dist/Sessions.d.ts.map +1 -1
  556. package/dist/Sessions.js +626 -94
  557. package/dist/Sessions.js.map +1 -1
  558. package/dist/SqliteStorageSchemaData.d.ts +2 -0
  559. package/dist/SqliteStorageSchemaData.d.ts.map +1 -0
  560. package/dist/SqliteStorageSchemaData.js +508 -0
  561. package/dist/SqliteStorageSchemaData.js.map +1 -0
  562. package/dist/StepUp.d.ts +132 -11
  563. package/dist/StepUp.d.ts.map +1 -1
  564. package/dist/StepUp.js +387 -19
  565. package/dist/StepUp.js.map +1 -1
  566. package/dist/Storage.d.ts +89 -23
  567. package/dist/Storage.d.ts.map +1 -1
  568. package/dist/Storage.js +10 -12
  569. package/dist/Storage.js.map +1 -1
  570. package/dist/StorageMigrations.d.ts +7 -1
  571. package/dist/StorageMigrations.d.ts.map +1 -1
  572. package/dist/StorageMigrations.js +256 -0
  573. package/dist/StorageMigrations.js.map +1 -1
  574. package/dist/StorageSchemaGenerator.d.ts +544 -0
  575. package/dist/StorageSchemaGenerator.d.ts.map +1 -0
  576. package/dist/StorageSchemaGenerator.js +1418 -0
  577. package/dist/StorageSchemaGenerator.js.map +1 -0
  578. package/dist/StrongFactor.d.ts +64 -0
  579. package/dist/StrongFactor.d.ts.map +1 -0
  580. package/dist/StrongFactor.js +100 -0
  581. package/dist/StrongFactor.js.map +1 -0
  582. package/dist/Testing.js +2 -2
  583. package/dist/Testing.js.map +1 -1
  584. package/dist/Totp.d.ts +88 -13
  585. package/dist/Totp.d.ts.map +1 -1
  586. package/dist/Totp.js +192 -34
  587. package/dist/Totp.js.map +1 -1
  588. package/dist/TrustedDevice.d.ts +0 -9
  589. package/dist/TrustedDevice.d.ts.map +1 -1
  590. package/dist/TrustedDevice.js +15 -17
  591. package/dist/TrustedDevice.js.map +1 -1
  592. package/dist/WaitUntil.d.ts +0 -3
  593. package/dist/WaitUntil.d.ts.map +1 -1
  594. package/dist/WaitUntil.js +1 -4
  595. package/dist/WaitUntil.js.map +1 -1
  596. package/dist/Webhook.d.ts +42 -12
  597. package/dist/Webhook.d.ts.map +1 -1
  598. package/dist/Webhook.js +165 -26
  599. package/dist/Webhook.js.map +1 -1
  600. package/dist/alchemy/cloudflare/Email.d.ts.map +1 -1
  601. package/dist/alchemy/cloudflare/Email.js +9 -4
  602. package/dist/alchemy/cloudflare/Email.js.map +1 -1
  603. package/dist/cloudflare/Email.js +1 -1
  604. package/dist/cloudflare/Email.js.map +1 -1
  605. package/dist/cloudflare/RequestMetadata.d.ts +49 -0
  606. package/dist/cloudflare/RequestMetadata.d.ts.map +1 -0
  607. package/dist/cloudflare/RequestMetadata.js +71 -0
  608. package/dist/cloudflare/RequestMetadata.js.map +1 -0
  609. package/dist/index.d.ts +0 -35
  610. package/dist/index.d.ts.map +1 -1
  611. package/dist/index.js +0 -35
  612. package/dist/index.js.map +1 -1
  613. package/dist/internal/AuthFlowFinalizer.d.ts +31 -0
  614. package/dist/internal/AuthFlowFinalizer.d.ts.map +1 -0
  615. package/dist/internal/AuthFlowFinalizer.js +182 -0
  616. package/dist/internal/AuthFlowFinalizer.js.map +1 -0
  617. package/migrations/0001_auth_storage.sql +1 -0
  618. package/migrations/0006_auth_totp_factor.sql +1 -0
  619. package/migrations/0024_auth_permission.sql +39 -0
  620. package/migrations/0025_auth_permission_definition.sql +19 -0
  621. package/migrations/0026_auth_user_identity.sql +59 -0
  622. package/migrations/0027_auth_audit_log_storage_order.sql +46 -0
  623. package/migrations/0028_auth_oauth_client_secret_key.sql +39 -0
  624. package/migrations/0029_auth_oauth_device_authorization.sql +28 -0
  625. package/migrations/delegated-access/0001_auth_delegated_access.sql +152 -0
  626. package/migrations/postgres/0001_auth_core.sql +77 -0
  627. package/migrations/postgres/0002_auth_security_oauth.sql +65 -0
  628. package/migrations/postgres/0003_auth_credentials_tokens.sql +43 -0
  629. package/migrations/postgres/0004_auth_security_history.sql +103 -0
  630. package/migrations/postgres/0005_auth_webhooks.sql +29 -0
  631. package/migrations/postgres/0006_auth_domain_timeline.sql +50 -0
  632. package/migrations/postgres/0007_auth_oauth_clients.sql +85 -0
  633. package/migrations/postgres/0008_auth_oauth_tokens.sql +63 -0
  634. package/migrations/postgres/0009_auth_permissions.sql +66 -0
  635. package/migrations/postgres/0010_auth_oauth_device_authorization.sql +50 -0
  636. package/migrations/postgres/delegated-access/0001_auth_delegated_access.sql +112 -0
  637. package/package.json +309 -2
@@ -0,0 +1,112 @@
1
+ create table auth_invitation (
2
+ id text collate "C" constraint auth_invitation_pkey primary key,
3
+ kind text not null,
4
+ target_type text not null,
5
+ target_id text not null,
6
+ intent_type text not null,
7
+ intent_version integer not null,
8
+ intent_payload jsonb not null,
9
+ recipient_type text,
10
+ recipient_reference text,
11
+ issued_by_type text,
12
+ issued_by_id text,
13
+ created_at bigint not null,
14
+ expires_at bigint not null,
15
+ token_hash text not null,
16
+ accepted_at bigint,
17
+ accepted_by_type text,
18
+ accepted_by_id text,
19
+ revoked_at bigint,
20
+ superseded_at bigint,
21
+ superseded_by_id text,
22
+ metadata jsonb,
23
+ constraint auth_invitation_id_check
24
+ check (id ~ '^[A-Za-z0-9_-]{22}$'),
25
+ constraint auth_invitation_required_text_check
26
+ check (length(kind) > 0 and length(target_type) > 0 and length(target_id) > 0 and length(intent_type) > 0),
27
+ constraint auth_invitation_intent_check
28
+ check (intent_version >= 1 and jsonb_typeof(intent_payload) = 'object'),
29
+ constraint auth_invitation_recipient_pair_check
30
+ check ((recipient_type is null and recipient_reference is null) or (recipient_type is not null and recipient_reference is not null and length(recipient_type) > 0 and length(recipient_reference) > 0)),
31
+ constraint auth_invitation_issued_by_pair_check
32
+ check ((issued_by_type is null and issued_by_id is null) or (issued_by_type is not null and issued_by_id is not null and length(issued_by_type) > 0 and length(issued_by_id) > 0)),
33
+ constraint auth_invitation_token_hash_check
34
+ check (token_hash ~ '^sha256:.+$'),
35
+ constraint auth_invitation_accepted_pair_check
36
+ check ((accepted_at is null and accepted_by_type is null and accepted_by_id is null) or (accepted_at is not null and accepted_by_type is not null and accepted_by_id is not null and length(accepted_by_type) > 0 and length(accepted_by_id) > 0)),
37
+ constraint auth_invitation_superseded_pair_check
38
+ check ((superseded_at is null and superseded_by_id is null) or (superseded_at is not null and superseded_by_id is not null and superseded_by_id ~ '^[A-Za-z0-9_-]{22}$')),
39
+ constraint auth_invitation_terminal_state_check
40
+ check (((accepted_at is not null)::integer + (revoked_at is not null)::integer + (superseded_at is not null)::integer) <= 1),
41
+ constraint auth_invitation_metadata_check
42
+ check (metadata is null or jsonb_typeof(metadata) = 'object'),
43
+ constraint auth_invitation_timestamp_order_check
44
+ check (created_at >= 0 and expires_at > created_at and (accepted_at is null or accepted_at >= created_at) and (revoked_at is null or revoked_at >= created_at) and (superseded_at is null or superseded_at >= created_at))
45
+ );
46
+ create index auth_invitation_created_at_idx
47
+ on auth_invitation (created_at, id);
48
+ create index auth_invitation_kind_created_at_idx
49
+ on auth_invitation (kind, created_at, id);
50
+ create index auth_invitation_target_created_at_idx
51
+ on auth_invitation (target_type, target_id, created_at, id);
52
+ create index auth_invitation_recipient_created_at_idx
53
+ on auth_invitation (recipient_type, recipient_reference, created_at, id);
54
+ create index auth_invitation_issued_by_created_at_idx
55
+ on auth_invitation (issued_by_type, issued_by_id, created_at, id);
56
+ create index auth_invitation_pending_expires_at_idx
57
+ on auth_invitation (expires_at, created_at, id)
58
+ where accepted_at is null and revoked_at is null and superseded_at is null;
59
+
60
+ create table auth_access_grant (
61
+ id text collate "C" constraint auth_access_grant_pkey primary key,
62
+ target_type text not null,
63
+ target_id text not null,
64
+ capabilities jsonb not null,
65
+ binding_type text not null,
66
+ binding_subject_type text,
67
+ binding_subject_id text,
68
+ issuer_type text,
69
+ issuer_id text,
70
+ created_at bigint not null,
71
+ expires_at bigint,
72
+ token_hash text,
73
+ revoked_at bigint,
74
+ superseded_at bigint,
75
+ superseded_by_id text,
76
+ metadata jsonb,
77
+ constraint auth_access_grant_id_check
78
+ check (id ~ '^[A-Za-z0-9_-]{22}$'),
79
+ constraint auth_access_grant_target_check
80
+ check (length(target_type) > 0 and length(target_id) > 0),
81
+ constraint auth_access_grant_capabilities_check
82
+ check (jsonb_typeof(capabilities) = 'array' and jsonb_array_length(capabilities) > 0 and not jsonb_path_exists(capabilities, '$[*] ? (@.type() != "string" || @ == "")')),
83
+ constraint auth_access_grant_binding_type_check
84
+ check (binding_type in ('bearer', 'subject', 'subject-and-bearer')),
85
+ constraint auth_access_grant_binding_subject_check
86
+ check ((binding_type = 'bearer' and binding_subject_type is null and binding_subject_id is null) or (binding_type in ('subject', 'subject-and-bearer') and binding_subject_type is not null and binding_subject_id is not null and length(binding_subject_type) > 0 and length(binding_subject_id) > 0)),
87
+ constraint auth_access_grant_issuer_pair_check
88
+ check ((issuer_type is null and issuer_id is null) or (issuer_type is not null and issuer_id is not null and length(issuer_type) > 0 and length(issuer_id) > 0)),
89
+ constraint auth_access_grant_token_hash_check
90
+ check (token_hash is null or token_hash ~ '^sha256:.+$'),
91
+ constraint auth_access_grant_binding_token_hash_check
92
+ check ((binding_type = 'subject' and token_hash is null) or (binding_type in ('bearer', 'subject-and-bearer') and token_hash is not null)),
93
+ constraint auth_access_grant_superseded_pair_check
94
+ check ((superseded_at is null and superseded_by_id is null) or (superseded_at is not null and superseded_by_id is not null and superseded_by_id ~ '^[A-Za-z0-9_-]{22}$')),
95
+ constraint auth_access_grant_terminal_state_check
96
+ check (((revoked_at is not null)::integer + (superseded_at is not null)::integer) <= 1),
97
+ constraint auth_access_grant_metadata_check
98
+ check (metadata is null or jsonb_typeof(metadata) = 'object'),
99
+ constraint auth_access_grant_timestamp_order_check
100
+ check (created_at >= 0 and (expires_at is null or expires_at > created_at) and (revoked_at is null or revoked_at >= created_at) and (superseded_at is null or superseded_at >= created_at))
101
+ );
102
+ create index auth_access_grant_created_at_idx
103
+ on auth_access_grant (created_at, id);
104
+ create index auth_access_grant_target_created_at_idx
105
+ on auth_access_grant (target_type, target_id, created_at, id);
106
+ create index auth_access_grant_issuer_created_at_idx
107
+ on auth_access_grant (issuer_type, issuer_id, created_at, id);
108
+ create index auth_access_grant_subject_created_at_idx
109
+ on auth_access_grant (binding_subject_type, binding_subject_id, created_at, id);
110
+ create index auth_access_grant_active_expires_at_idx
111
+ on auth_access_grant (expires_at, created_at, id)
112
+ where revoked_at is null and superseded_at is null;
package/package.json CHANGED
@@ -1,8 +1,27 @@
1
1
  {
2
2
  "name": "@effect-auth/core",
3
- "version": "0.1.0-alpha.16",
3
+ "version": "0.1.0-alpha.19",
4
4
  "description": "Composable Effect-first authentication primitives.",
5
+ "keywords": [
6
+ "auth",
7
+ "authentication",
8
+ "effect",
9
+ "effect-ts",
10
+ "oauth",
11
+ "passkeys",
12
+ "sessions",
13
+ "webauthn"
14
+ ],
15
+ "homepage": "https://github.com/nr1brolyfan/effect-auth/tree/main/packages/core#readme",
16
+ "bugs": {
17
+ "url": "https://github.com/nr1brolyfan/effect-auth/issues"
18
+ },
5
19
  "license": "MIT",
20
+ "repository": {
21
+ "type": "git",
22
+ "url": "git+https://github.com/nr1brolyfan/effect-auth.git",
23
+ "directory": "packages/core"
24
+ },
6
25
  "files": [
7
26
  "dist/**/*.d.ts",
8
27
  "dist/**/*.d.ts.map",
@@ -17,10 +36,26 @@
17
36
  "types": "./dist/index.d.ts",
18
37
  "default": "./dist/index.js"
19
38
  },
39
+ "./Assurance": {
40
+ "types": "./dist/Assurance.d.ts",
41
+ "default": "./dist/Assurance.js"
42
+ },
43
+ "./AtomicPlanExecutor": {
44
+ "types": "./dist/AtomicPlanExecutor.d.ts",
45
+ "default": "./dist/AtomicPlanExecutor.js"
46
+ },
20
47
  "./ApiKey": {
21
48
  "types": "./dist/ApiKey.d.ts",
22
49
  "default": "./dist/ApiKey.js"
23
50
  },
51
+ "./AbuseProtection": {
52
+ "types": "./dist/AbuseProtection.d.ts",
53
+ "default": "./dist/AbuseProtection.js"
54
+ },
55
+ "./AccessGrant": {
56
+ "types": "./dist/AccessGrant.d.ts",
57
+ "default": "./dist/AccessGrant.js"
58
+ },
24
59
  "./AuditLog": {
25
60
  "types": "./dist/AuditLog.d.ts",
26
61
  "default": "./dist/AuditLog.js"
@@ -37,6 +72,14 @@
37
72
  "types": "./dist/AuthKernel.d.ts",
38
73
  "default": "./dist/AuthKernel.js"
39
74
  },
75
+ "./AuthRateLimit": {
76
+ "types": "./dist/AuthRateLimit.d.ts",
77
+ "default": "./dist/AuthRateLimit.js"
78
+ },
79
+ "./RecoveryPolicy": {
80
+ "types": "./dist/RecoveryPolicy.d.ts",
81
+ "default": "./dist/RecoveryPolicy.js"
82
+ },
40
83
  "./Challenge": {
41
84
  "types": "./dist/Challenge.d.ts",
42
85
  "default": "./dist/Challenge.js"
@@ -57,6 +100,14 @@
57
100
  "types": "./dist/cloudflare/Email.d.ts",
58
101
  "default": "./dist/cloudflare/Email.js"
59
102
  },
103
+ "./CloudflareRequestMetadata": {
104
+ "types": "./dist/cloudflare/RequestMetadata.d.ts",
105
+ "default": "./dist/cloudflare/RequestMetadata.js"
106
+ },
107
+ "./CloudflareTurnstile": {
108
+ "types": "./dist/CloudflareTurnstile.d.ts",
109
+ "default": "./dist/CloudflareTurnstile.js"
110
+ },
60
111
  "./Client": {
61
112
  "types": "./dist/Client.d.ts",
62
113
  "default": "./dist/Client.js"
@@ -65,26 +116,78 @@
65
116
  "types": "./dist/Crypto.d.ts",
66
117
  "default": "./dist/Crypto.js"
67
118
  },
119
+ "./Guard": {
120
+ "types": "./dist/Guard.d.ts",
121
+ "default": "./dist/Guard.js"
122
+ },
123
+ "./HibpPwnedPasswords": {
124
+ "types": "./dist/HibpPwnedPasswords.d.ts",
125
+ "default": "./dist/HibpPwnedPasswords.js"
126
+ },
68
127
  "./DomainVerification": {
69
128
  "types": "./dist/DomainVerification.d.ts",
70
129
  "default": "./dist/DomainVerification.js"
71
130
  },
131
+ "./DisposableEmailDomains": {
132
+ "types": "./dist/DisposableEmailDomains.d.ts",
133
+ "default": "./dist/DisposableEmailDomains.js"
134
+ },
135
+ "./DevEmail": {
136
+ "types": "./dist/DevEmail.d.ts",
137
+ "default": "./dist/DevEmail.js"
138
+ },
139
+ "./DelegatedAccessStorageMigrations": {
140
+ "types": "./dist/DelegatedAccessStorageMigrations.d.ts",
141
+ "default": "./dist/DelegatedAccessStorageMigrations.js"
142
+ },
72
143
  "./DrizzleD1SqliteStorage": {
73
144
  "types": "./dist/DrizzleD1SqliteStorage.d.ts",
74
145
  "default": "./dist/DrizzleD1SqliteStorage.js"
75
146
  },
147
+ "./DrizzleBunSqliteStorage": {
148
+ "types": "./dist/DrizzleBunSqliteStorage.d.ts",
149
+ "default": "./dist/DrizzleBunSqliteStorage.js"
150
+ },
76
151
  "./DrizzleEffectSqliteStorage": {
77
152
  "types": "./dist/DrizzleEffectSqliteStorage.d.ts",
78
153
  "default": "./dist/DrizzleEffectSqliteStorage.js"
79
154
  },
155
+ "./DrizzleNodeSqliteStorage": {
156
+ "types": "./dist/DrizzleNodeSqliteStorage.d.ts",
157
+ "default": "./dist/DrizzleNodeSqliteStorage.js"
158
+ },
159
+ "./DrizzlePostgresStorage": {
160
+ "types": "./dist/DrizzlePostgresStorage.d.ts",
161
+ "default": "./dist/DrizzlePostgresStorage.js"
162
+ },
80
163
  "./EffectQbSqliteStorage": {
81
164
  "types": "./dist/EffectQbSqliteStorage.d.ts",
82
165
  "default": "./dist/EffectQbSqliteStorage.js"
83
166
  },
167
+ "./EffectQbSqliteDelegatedAccessStorage": {
168
+ "types": "./dist/EffectQbSqliteDelegatedAccessStorage.d.ts",
169
+ "default": "./dist/EffectQbSqliteDelegatedAccessStorage.js"
170
+ },
171
+ "./EffectQbPostgresStorage": {
172
+ "types": "./dist/EffectQbPostgresStorage.d.ts",
173
+ "default": "./dist/EffectQbPostgresStorage.js"
174
+ },
175
+ "./EffectQbPostgresDelegatedAccessStorage": {
176
+ "types": "./dist/EffectQbPostgresDelegatedAccessStorage.d.ts",
177
+ "default": "./dist/EffectQbPostgresDelegatedAccessStorage.js"
178
+ },
179
+ "./EmailAuth": {
180
+ "types": "./dist/EmailAuth.d.ts",
181
+ "default": "./dist/EmailAuth.js"
182
+ },
84
183
  "./EmailOtp": {
85
184
  "types": "./dist/EmailOtp.d.ts",
86
185
  "default": "./dist/EmailOtp.js"
87
186
  },
187
+ "./EmailRisk": {
188
+ "types": "./dist/EmailRisk.d.ts",
189
+ "default": "./dist/EmailRisk.js"
190
+ },
88
191
  "./EmailVerification": {
89
192
  "types": "./dist/EmailVerification.d.ts",
90
193
  "default": "./dist/EmailVerification.js"
@@ -101,10 +204,26 @@
101
204
  "types": "./dist/Identifiers.d.ts",
102
205
  "default": "./dist/Identifiers.js"
103
206
  },
207
+ "./Identity": {
208
+ "types": "./dist/Identity.d.ts",
209
+ "default": "./dist/Identity.js"
210
+ },
211
+ "./IdentityManagement": {
212
+ "types": "./dist/IdentityManagement.d.ts",
213
+ "default": "./dist/IdentityManagement.js"
214
+ },
215
+ "./Invitation": {
216
+ "types": "./dist/Invitation.d.ts",
217
+ "default": "./dist/Invitation.js"
218
+ },
104
219
  "./IncidentAction": {
105
220
  "types": "./dist/IncidentAction.d.ts",
106
221
  "default": "./dist/IncidentAction.js"
107
222
  },
223
+ "./IpQualityScore": {
224
+ "types": "./dist/IpQualityScore.d.ts",
225
+ "default": "./dist/IpQualityScore.js"
226
+ },
108
227
  "./LoginApproval": {
109
228
  "types": "./dist/LoginApproval.d.ts",
110
229
  "default": "./dist/LoginApproval.js"
@@ -117,6 +236,10 @@
117
236
  "types": "./dist/LoginRisk.d.ts",
118
237
  "default": "./dist/LoginRisk.js"
119
238
  },
239
+ "./LoginRiskEnrichment": {
240
+ "types": "./dist/LoginRiskEnrichment.d.ts",
241
+ "default": "./dist/LoginRiskEnrichment.js"
242
+ },
120
243
  "./MachineAuth": {
121
244
  "types": "./dist/MachineAuth.d.ts",
122
245
  "default": "./dist/MachineAuth.js"
@@ -129,6 +252,122 @@
129
252
  "types": "./dist/HttpApi.d.ts",
130
253
  "default": "./dist/HttpApi.js"
131
254
  },
255
+ "./HttpApi/AdminPermissionDefinition": {
256
+ "types": "./dist/HttpApi/AdminPermissionDefinition.d.ts",
257
+ "default": "./dist/HttpApi/AdminPermissionDefinition.js"
258
+ },
259
+ "./HttpApi/AdminSecurityTimeline": {
260
+ "types": "./dist/HttpApi/AdminSecurityTimeline.d.ts",
261
+ "default": "./dist/HttpApi/AdminSecurityTimeline.js"
262
+ },
263
+ "./HttpApi/AdminSession": {
264
+ "types": "./dist/HttpApi/AdminSession.d.ts",
265
+ "default": "./dist/HttpApi/AdminSession.js"
266
+ },
267
+ "./HttpApi/AdminTrustedDevice": {
268
+ "types": "./dist/HttpApi/AdminTrustedDevice.d.ts",
269
+ "default": "./dist/HttpApi/AdminTrustedDevice.js"
270
+ },
271
+ "./HttpApi/ApiKey": {
272
+ "types": "./dist/HttpApi/ApiKey.d.ts",
273
+ "default": "./dist/HttpApi/ApiKey.js"
274
+ },
275
+ "./HttpApi/EmailAuth": {
276
+ "types": "./dist/HttpApi/EmailAuth.d.ts",
277
+ "default": "./dist/HttpApi/EmailAuth.js"
278
+ },
279
+ "./HttpApi/EmailOtp": {
280
+ "types": "./dist/HttpApi/EmailOtp.d.ts",
281
+ "default": "./dist/HttpApi/EmailOtp.js"
282
+ },
283
+ "./HttpApi/EmailVerification": {
284
+ "types": "./dist/HttpApi/EmailVerification.d.ts",
285
+ "default": "./dist/HttpApi/EmailVerification.js"
286
+ },
287
+ "./HttpApi/Identity": {
288
+ "types": "./dist/HttpApi/Identity.d.ts",
289
+ "default": "./dist/HttpApi/Identity.js"
290
+ },
291
+ "./HttpApi/Jwt": {
292
+ "types": "./dist/HttpApi/Jwt.d.ts",
293
+ "default": "./dist/HttpApi/Jwt.js"
294
+ },
295
+ "./HttpApi/JwtDiscovery": {
296
+ "types": "./dist/HttpApi/JwtDiscovery.d.ts",
297
+ "default": "./dist/HttpApi/JwtDiscovery.js"
298
+ },
299
+ "./HttpApi/LoginApproval": {
300
+ "types": "./dist/HttpApi/LoginApproval.d.ts",
301
+ "default": "./dist/HttpApi/LoginApproval.js"
302
+ },
303
+ "./HttpApi/LoginNotification": {
304
+ "types": "./dist/HttpApi/LoginNotification.d.ts",
305
+ "default": "./dist/HttpApi/LoginNotification.js"
306
+ },
307
+ "./HttpApi/MagicLink": {
308
+ "types": "./dist/HttpApi/MagicLink.d.ts",
309
+ "default": "./dist/HttpApi/MagicLink.js"
310
+ },
311
+ "./HttpApi/Mfa": {
312
+ "types": "./dist/HttpApi/Mfa.d.ts",
313
+ "default": "./dist/HttpApi/Mfa.js"
314
+ },
315
+ "./HttpApi/OAuth": {
316
+ "types": "./dist/HttpApi/OAuth.d.ts",
317
+ "default": "./dist/HttpApi/OAuth.js"
318
+ },
319
+ "./HttpApi/OAuthDeviceAuthorization": {
320
+ "types": "./dist/HttpApi/OAuthDeviceAuthorization.d.ts",
321
+ "default": "./dist/HttpApi/OAuthDeviceAuthorization.js"
322
+ },
323
+ "./HttpApi/OAuthProviderAuthorization": {
324
+ "types": "./dist/HttpApi/OAuthProviderAuthorization.d.ts",
325
+ "default": "./dist/HttpApi/OAuthProviderAuthorization.js"
326
+ },
327
+ "./HttpApi/OAuthToken": {
328
+ "types": "./dist/HttpApi/OAuthToken.d.ts",
329
+ "default": "./dist/HttpApi/OAuthToken.js"
330
+ },
331
+ "./HttpApi/OidcDiscovery": {
332
+ "types": "./dist/HttpApi/OidcDiscovery.d.ts",
333
+ "default": "./dist/HttpApi/OidcDiscovery.js"
334
+ },
335
+ "./HttpApi/Passkey": {
336
+ "types": "./dist/HttpApi/Passkey.d.ts",
337
+ "default": "./dist/HttpApi/Passkey.js"
338
+ },
339
+ "./HttpApi/Password": {
340
+ "types": "./dist/HttpApi/Password.d.ts",
341
+ "default": "./dist/HttpApi/Password.js"
342
+ },
343
+ "./HttpApi/RecoveryCodes": {
344
+ "types": "./dist/HttpApi/RecoveryCodes.d.ts",
345
+ "default": "./dist/HttpApi/RecoveryCodes.js"
346
+ },
347
+ "./HttpApi/RefreshToken": {
348
+ "types": "./dist/HttpApi/RefreshToken.d.ts",
349
+ "default": "./dist/HttpApi/RefreshToken.js"
350
+ },
351
+ "./HttpApi/SecurityTimeline": {
352
+ "types": "./dist/HttpApi/SecurityTimeline.d.ts",
353
+ "default": "./dist/HttpApi/SecurityTimeline.js"
354
+ },
355
+ "./HttpApi/Session": {
356
+ "types": "./dist/HttpApi/Session.d.ts",
357
+ "default": "./dist/HttpApi/Session.js"
358
+ },
359
+ "./HttpApi/StepUp": {
360
+ "types": "./dist/HttpApi/StepUp.d.ts",
361
+ "default": "./dist/HttpApi/StepUp.js"
362
+ },
363
+ "./HttpApi/Totp": {
364
+ "types": "./dist/HttpApi/Totp.d.ts",
365
+ "default": "./dist/HttpApi/Totp.js"
366
+ },
367
+ "./HttpApi/TrustedDevice": {
368
+ "types": "./dist/HttpApi/TrustedDevice.d.ts",
369
+ "default": "./dist/HttpApi/TrustedDevice.js"
370
+ },
132
371
  "./Mailer": {
133
372
  "types": "./dist/Mailer.d.ts",
134
373
  "default": "./dist/Mailer.js"
@@ -141,6 +380,14 @@
141
380
  "types": "./dist/OAuth.d.ts",
142
381
  "default": "./dist/OAuth.js"
143
382
  },
383
+ "./OAuthDeviceAuthorization": {
384
+ "types": "./dist/OAuthDeviceAuthorization.d.ts",
385
+ "default": "./dist/OAuthDeviceAuthorization.js"
386
+ },
387
+ "./OAuthDeviceClient": {
388
+ "types": "./dist/OAuthDeviceClient.d.ts",
389
+ "default": "./dist/OAuthDeviceClient.js"
390
+ },
144
391
  "./Policy": {
145
392
  "types": "./dist/Policy.d.ts",
146
393
  "default": "./dist/Policy.js"
@@ -169,10 +416,22 @@
169
416
  "types": "./dist/Password.d.ts",
170
417
  "default": "./dist/Password.js"
171
418
  },
419
+ "./PasswordRisk": {
420
+ "types": "./dist/PasswordRisk.d.ts",
421
+ "default": "./dist/PasswordRisk.js"
422
+ },
172
423
  "./Passkey": {
173
424
  "types": "./dist/Passkey.d.ts",
174
425
  "default": "./dist/Passkey.js"
175
426
  },
427
+ "./PasskeyBrowser": {
428
+ "types": "./dist/PasskeyBrowser.d.ts",
429
+ "default": "./dist/PasskeyBrowser.js"
430
+ },
431
+ "./Permission": {
432
+ "types": "./dist/Permission.d.ts",
433
+ "default": "./dist/Permission.js"
434
+ },
176
435
  "./PasskeySimpleWebAuthn": {
177
436
  "types": "./dist/PasskeySimpleWebAuthn.d.ts",
178
437
  "default": "./dist/PasskeySimpleWebAuthn.js"
@@ -189,14 +448,34 @@
189
448
  "types": "./dist/Storage.d.ts",
190
449
  "default": "./dist/Storage.js"
191
450
  },
451
+ "./DevelopmentSeed": {
452
+ "types": "./dist/DevelopmentSeed.d.ts",
453
+ "default": "./dist/DevelopmentSeed.js"
454
+ },
192
455
  "./StepUp": {
193
456
  "types": "./dist/StepUp.d.ts",
194
457
  "default": "./dist/StepUp.js"
195
458
  },
459
+ "./StrongFactor": {
460
+ "types": "./dist/StrongFactor.d.ts",
461
+ "default": "./dist/StrongFactor.js"
462
+ },
196
463
  "./StorageMigrations": {
197
464
  "types": "./dist/StorageMigrations.d.ts",
198
465
  "default": "./dist/StorageMigrations.js"
199
466
  },
467
+ "./StorageSchemaGenerator": {
468
+ "types": "./dist/StorageSchemaGenerator.d.ts",
469
+ "default": "./dist/StorageSchemaGenerator.js"
470
+ },
471
+ "./PostgresStorageMigrations": {
472
+ "types": "./dist/PostgresStorageMigrations.d.ts",
473
+ "default": "./dist/PostgresStorageMigrations.js"
474
+ },
475
+ "./PostgresDelegatedAccessStorageMigrations": {
476
+ "types": "./dist/PostgresDelegatedAccessStorageMigrations.d.ts",
477
+ "default": "./dist/PostgresDelegatedAccessStorageMigrations.js"
478
+ },
200
479
  "./Testing": {
201
480
  "types": "./dist/Testing.d.ts",
202
481
  "default": "./dist/Testing.js"
@@ -221,10 +500,38 @@
221
500
  "check": "tsc -b --pretty false && bun run type-test && bun run test-type",
222
501
  "prepack": "rm -rf dist && bun run build",
223
502
  "test": "bun run build && bun --bun vitest run --config ../../vitest.config.ts",
503
+ "test:node-runtime": "bun run build && node ../../node_modules/vitest/vitest.mjs run --config ../../vitest.config.ts test/NodeDrizzleEffectSqliteStorage.test.ts",
504
+ "test:postgres": "bun run build && bun --bun vitest run --config ../../vitest.postgres.config.ts",
224
505
  "test-type": "tsc -p tsconfig.test.json --pretty false",
225
506
  "type-test": "tsc -p tsconfig.type-tests.json --pretty false"
226
507
  },
227
508
  "peerDependencies": {
228
- "effect": "4.0.0-beta.92"
509
+ "@effect/sql-d1": "4.0.0-beta.98",
510
+ "@effect/sql-pg": "4.0.0-beta.98",
511
+ "@effect/sql-sqlite-bun": "4.0.0-beta.98",
512
+ "@effect/sql-sqlite-node": "4.0.0-beta.98",
513
+ "drizzle-orm": "1.0.0-rc.4",
514
+ "effect": "4.0.0-beta.98",
515
+ "effect-qb": "4.0.0-beta.98"
516
+ },
517
+ "peerDependenciesMeta": {
518
+ "@effect/sql-d1": {
519
+ "optional": true
520
+ },
521
+ "@effect/sql-pg": {
522
+ "optional": true
523
+ },
524
+ "@effect/sql-sqlite-bun": {
525
+ "optional": true
526
+ },
527
+ "@effect/sql-sqlite-node": {
528
+ "optional": true
529
+ },
530
+ "drizzle-orm": {
531
+ "optional": true
532
+ },
533
+ "effect-qb": {
534
+ "optional": true
535
+ }
229
536
  }
230
537
  }