@effect-auth/core 0.1.0-alpha.3 → 0.1.0-alpha.4

package/dist/TrustedDevice.js

@@ -0,0 +1,222 @@
+import { Context, Data, Duration, Effect, Layer, Option, Redacted, } from "effect";
+import { AuthSecrets } from "./AuthConfig.js";
+import { Crypto } from "./Crypto.js";
+import { addMillis, currentUnixMillis } from "./Internal.js";
+export class TrustedDeviceError extends Data.TaggedError("TrustedDeviceError") {
+}
+export class TrustedDeviceStore extends Context.Service()("auth/TrustedDeviceStore") {
+}
+(function (TrustedDeviceStore) {
+    TrustedDeviceStore.make = (service) => TrustedDeviceStore.of(service);
+})(TrustedDeviceStore || (TrustedDeviceStore = {}));
+export class TrustedDevice extends Context.Service()("auth/TrustedDevice") {
+}
+(function (TrustedDevice) {
+    TrustedDevice.make = (service) => TrustedDevice.of(service);
+})(TrustedDevice || (TrustedDevice = {}));
+export class TrustedDeviceCookie extends Context.Service()("auth/TrustedDeviceCookie") {
+}
+(function (TrustedDeviceCookie) {
+    TrustedDeviceCookie.make = (service) => TrustedDeviceCookie.of(service);
+})(TrustedDeviceCookie || (TrustedDeviceCookie = {}));
+export const defaultTrustedDeviceTtl = Duration.days(90);
+export const defaultTrustedDeviceTokenBytes = 32;
+const defaultTrustedDeviceCookieOptions = {
+    name: "__Host-auth-device",
+    secure: true,
+    httpOnly: true,
+    sameSite: "lax",
+    path: "/",
+};
+const trustedDeviceHashNamespace = "auth.trusted_device.v1";
+const trustedDeviceKey = (userId, tokenHash) => `${userId}:${tokenHash}`;
+const trustedDeviceHash = (dependencies, userId, token, operation) => dependencies.crypto
+    .hmacSha256({
+    key: dependencies.secret,
+    data: `${trustedDeviceHashNamespace}:${userId}:${Redacted.value(token)}`,
+})
+    .pipe(Effect.mapError((cause) => new TrustedDeviceError({
+    operation,
+    message: "Failed to hash trusted device token",
+    cause,
+})));
+const deviceContext = (status) => ({
+    status,
+});
+const cloneRecord = (record) => ({
+    ...record,
+    ...(record.metadata === undefined
+        ? {}
+        : { metadata: { ...record.metadata } }),
+});
+export const makeTrustedDeviceStoreMemory = () => {
+    const devices = new Map();
+    return TrustedDeviceStore.make({
+        find: (input) => Effect.sync(() => {
+            const row = devices.get(trustedDeviceKey(input.userId, input.tokenHash));
+            if (row === undefined || Number(row.expiresAt) <= Number(input.now)) {
+                return Option.none();
+            }
+            return Option.some(cloneRecord(row));
+        }),
+        upsert: (input) => Effect.sync(() => {
+            const key = trustedDeviceKey(input.userId, input.tokenHash);
+            const existing = devices.get(key);
+            const row = {
+                userId: input.userId,
+                tokenHash: input.tokenHash,
+                createdAt: existing?.createdAt ?? input.now,
+                lastSeenAt: input.now,
+                expiresAt: input.expiresAt,
+                metadata: input.metadata ?? existing?.metadata,
+            };
+            devices.set(key, row);
+            return cloneRecord(row);
+        }),
+    });
+};
+export const TrustedDeviceStoreMemoryLive = Layer.sync(TrustedDeviceStore)(makeTrustedDeviceStoreMemory);
+export const makeTrustedDevice = (dependencies) => {
+    const ttl = dependencies.ttl ?? defaultTrustedDeviceTtl;
+    const tokenBytes = dependencies.tokenBytes ?? defaultTrustedDeviceTokenBytes;
+    return TrustedDevice.make({
+        status: Effect.fn("auth.trusted_device.status")(function* (input) {
+            if (input.token === undefined) {
+                return deviceContext("unknown");
+            }
+            const now = yield* currentUnixMillis;
+            const tokenHash = yield* trustedDeviceHash(dependencies, input.userId, input.token, "status");
+            const row = yield* dependencies.store.find({
+                userId: input.userId,
+                tokenHash,
+                now,
+            });
+            return deviceContext(Option.isSome(row) ? "known" : "new");
+        }),
+        trust: Effect.fn("auth.trusted_device.trust")(function* (input) {
+            const now = yield* currentUnixMillis;
+            const token = input.token ??
+                Redacted.make(yield* dependencies.crypto.randomToken(tokenBytes).pipe(Effect.mapError((cause) => new TrustedDeviceError({
+                    operation: "trust",
+                    message: "Failed to create trusted device token",
+                    cause,
+                }))));
+            const tokenHash = yield* trustedDeviceHash(dependencies, input.userId, token, "trust");
+            const expiresAt = addMillis(now, Duration.toMillis(input.ttl ?? ttl));
+            yield* dependencies.store.upsert({
+                userId: input.userId,
+                tokenHash,
+                now,
+                expiresAt,
+                metadata: input.metadata,
+            });
+            return {
+                userId: input.userId,
+                token,
+                expiresAt,
+            };
+        }),
+    });
+};
+export function TrustedDeviceLive(options) {
+    return Layer.effect(TrustedDevice)(Effect.gen(function* () {
+        const crypto = yield* Crypto;
+        const store = yield* TrustedDeviceStore;
+        const resolvedOptions = options ??
+            {
+                secret: (yield* AuthSecrets).privacy,
+            };
+        return makeTrustedDevice({
+            ...resolvedOptions,
+            crypto,
+            store,
+        });
+    }));
+}
+const resolveTrustedDeviceCookieOptions = (options = {}) => {
+    const resolved = {
+        ...defaultTrustedDeviceCookieOptions,
+        ...options,
+    };
+    if (resolved.name.startsWith("__Host-")) {
+        return {
+            ...resolved,
+            secure: true,
+            path: "/",
+            domain: undefined,
+        };
+    }
+    return resolved;
+};
+const sameSiteHeaderValue = (sameSite) => {
+    switch (sameSite) {
+        case "strict": {
+            return "Strict";
+        }
+        case "none": {
+            return "None";
+        }
+        case "lax": {
+            return "Lax";
+        }
+    }
+};
+const appendCookieAttributes = (parts, options) => {
+    if (options.httpOnly) {
+        parts.push("HttpOnly");
+    }
+    if (options.secure) {
+        parts.push("Secure");
+    }
+    parts.push(`SameSite=${sameSiteHeaderValue(options.sameSite)}`);
+    parts.push(`Path=${options.path}`);
+    if (options.domain !== undefined) {
+        parts.push(`Domain=${options.domain}`);
+    }
+    return parts;
+};
+const parseCookieValue = (header, name) => {
+    if (header === null) {
+        return undefined;
+    }
+    for (const part of header.split(";")) {
+        const trimmed = part.trim();
+        const separator = trimmed.indexOf("=");
+        if (separator <= 0) {
+            continue;
+        }
+        if (trimmed.slice(0, separator) !== name) {
+            continue;
+        }
+        try {
+            return decodeURIComponent(trimmed.slice(separator + 1));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+};
+const serializeCookie = (options, value, expiresAt) => {
+    const parts = [`${options.name}=${encodeURIComponent(value)}`];
+    if (expiresAt !== undefined) {
+        parts.push(`Expires=${new Date(Number(expiresAt)).toUTCString()}`);
+    }
+    return appendCookieAttributes(parts, options).join("; ");
+};
+const serializeClearCookie = (options) => appendCookieAttributes([`${options.name}=`, "Max-Age=0", "Expires=Thu, 01 Jan 1970 00:00:00 GMT"], options).join("; ");
+export const makeTrustedDeviceCookie = (options) => {
+    const resolved = resolveTrustedDeviceCookieOptions(options);
+    return TrustedDeviceCookie.make({
+        read: (request) => Effect.succeed((() => {
+            const value = parseCookieValue(request.headers.get("Cookie"), resolved.name);
+            return value === undefined
+                ? Option.none()
+                : Option.some(Redacted.make(value));
+        })()),
+        commit: (input) => Effect.succeed(serializeCookie(resolved, Redacted.value(input.token.token), input.token.expiresAt)),
+        clear: Effect.succeed(serializeClearCookie(resolved)),
+    });
+};
+export const TrustedDeviceCookieLive = (options) => Layer.succeed(TrustedDeviceCookie)(makeTrustedDeviceCookie(options));
+//# sourceMappingURL=TrustedDevice.js.map

package/dist/TrustedDevice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustedDevice.js","sourceRoot":"","sources":["../src/TrustedDevice.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,GACT,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AA+C7D,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAI3E;CAAG;AAcL,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAEjC,WAAiB,kBAAkB;IACpB,uBAAI,GAAG,CAClB,OAAkC,EACP,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC,EAJgB,kBAAkB,KAAlB,kBAAkB,QAIlC;AAWD,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAmBD,MAAM,OAAO,mBAAoB,SAAQ,OAAO,CAAC,OAAO,EAGrD,CAAC,0BAA0B,CAAC;CAAG;AAElC,WAAiB,mBAAmB;IACrB,wBAAI,GAAG,CAClB,OAAmC,EACP,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC,EAJgB,mBAAmB,KAAnB,mBAAmB,QAInC;AA+BD,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,MAAM,iCAAiC,GAAuC;IAC5E,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAE5D,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAU,EAAE,CACrE,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;AAE3B,MAAM,iBAAiB,GAAG,CACxB,YAAkE,EAClE,MAAc,EACd,KAAgC,EAChC,SAAsC,EACtC,EAAE,CACF,YAAY,CAAC,MAAM;KAChB,UAAU,CAAC;IACV,GAAG,EAAE,YAAY,CAAC,MAAM;IACxB,IAAI,EAAE,GAAG,0BAA0B,IAAI,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;CACzE,CAAC;KACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;IACrB,SAAS;IACT,OAAO,EAAE,qCAAqC;IAC9C,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEN,MAAM,aAAa,GAAG,CAAC,MAAyB,EAAsB,EAAE,CAAC,CAAC;IACxE,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,MAA2B,EAAuB,EAAE,CAAC,CAAC;IACzE,GAAG,MAAM;IACT,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAA8B,EAAE;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,OAAO,kBAAkB,CAAC,IAAI,CAAC;QAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CACrB,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAChD,CAAC;YAEF,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,GAAG,GAAwB;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,KAAK,CAAC,GAAG;gBAC3C,UAAU,EAAE,KAAK,CAAC,GAAG;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,QAAQ;aAC/C,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAEtB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACxE,4BAA4B,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE;IACxB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,uBAAuB,CAAC;IACxD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,8BAA8B,CAAC;IAE7E,OAAO,aAAa,CAAC,IAAI,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YAC9D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACxC,YAAY,EACZ,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,EACX,QAAQ,CACT,CAAC;YACF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS;gBACT,GAAG;aACJ,CAAC,CAAC;YAEH,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YAC5D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK;gBACX,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;oBACrB,SAAS,EAAE,OAAO;oBAClB,OAAO,EAAE,uCAAuC;oBAChD,KAAK;iBACN,CAAC,CACL,CACF,CACF,CAAC;YACJ,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACxC,YAAY,EACZ,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,OAAO,CACR,CAAC;YACF,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;YAEtE,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS;gBACT,GAAG;gBACH,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK;gBACL,SAAS;aACV,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAUF,MAAM,UAAU,iBAAiB,CAAC,OAA8B;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;QACxC,MAAM,eAAe,GACnB,OAAO;YACN;gBACC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO;aACL,CAAC;QAEpC,OAAO,iBAAiB,CAAC;YACvB,GAAG,eAAe;YAClB,MAAM;YACN,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,iCAAiC,GAAG,CACxC,UAAsC,EAAE,EACJ,EAAE;IACtC,MAAM,QAAQ,GAAG;QACf,GAAG,iCAAiC;QACpC,GAAG,OAAO;KACX,CAAC;IAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,QAA+B,EAAU,EAAE;IACtE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,KAAe,EACf,OAA2C,EACjC,EAAE;IACZ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAY,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,MAAqB,EACrB,IAAY,EACQ,EAAE;IACtB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,OAA2C,EAC3C,KAAa,EACb,SAAsB,EACd,EAAE;IACV,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,OAA2C,EACnC,EAAE,CACV,sBAAsB,CACpB,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,uCAAuC,CAAC,EAC1E,OAAO,CACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAoC,EACR,EAAE;IAC9B,MAAM,QAAQ,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAE5D,OAAO,mBAAmB,CAAC,IAAI,CAAC;QAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,CAAC,GAAG,EAAE;YACJ,MAAM,KAAK,GAAG,gBAAgB,CAC5B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC7B,QAAQ,CAAC,IAAI,CACd,CAAC;YAEF,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,CACL;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,eAAe,CACb,QAAQ,EACR,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EACjC,KAAK,CAAC,KAAK,CAAC,SAAS,CACtB,CACF;QACH,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;KACtD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAoC,EAAE,EAAE,CAC9E,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/alchemy/cloudflare/Email.d.ts

@@ -0,0 +1,25 @@
+import { RuntimeContext } from "alchemy";
+import * as Cloudflare from "alchemy/Cloudflare";
+import { Effect, Layer } from "effect";
+import { EmailSendError, Mailer, type EmailAddress, type EmailMessage, type MailerService } from "../../Mailer.js";
+export interface AlchemyCloudflareSendEmailClient {
+    readonly send: (message: Cloudflare.SendEmailMessage) => Effect.Effect<unknown, unknown>;
+}
+export interface AlchemyCloudflareMailerOptions {
+    readonly email: AlchemyCloudflareSendEmailClient;
+    readonly from: EmailAddress;
+    readonly provider?: string;
+}
+export type AlchemyCloudflareSendEmailDescriptor<R = never> = Cloudflare.SendEmail | Effect.Effect<Cloudflare.SendEmail, never, R>;
+export interface AlchemyCloudflareMailerLayerOptions<R = never> {
+    readonly sender: AlchemyCloudflareSendEmailDescriptor<R>;
+    readonly from: EmailAddress;
+    readonly provider?: string;
+}
+export declare const renderAlchemyCloudflareEmail: (options: Omit<AlchemyCloudflareMailerOptions, "email">, message: EmailMessage) => Effect.Effect<Cloudflare.SendEmailMessage, EmailSendError>;
+export declare const makeAlchemyCloudflareMailer: (options: AlchemyCloudflareMailerOptions) => MailerService;
+export declare const AlchemyCloudflareMailer: {
+    readonly make: (options: AlchemyCloudflareMailerOptions) => MailerService;
+    readonly layer: <R = never>(options: AlchemyCloudflareMailerLayerOptions<R>) => Layer.Layer<Mailer, never, RuntimeContext | Cloudflare.SendEmailBinding | R>;
+};
+//# sourceMappingURL=Email.d.ts.map

package/dist/alchemy/cloudflare/Email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.d.ts","sourceRoot":"","sources":["../../../src/alchemy/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,EACL,cAAc,EACd,MAAM,EACN,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,UAAU,CAAC,gBAAgB,KACjC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oCAAoC,CAAC,CAAC,GAAG,KAAK,IACtD,UAAU,CAAC,SAAS,GACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAElD,MAAM,WAAW,mCAAmC,CAAC,CAAC,GAAG,KAAK;IAC5D,QAAQ,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AA0HD,eAAO,MAAM,4BAA4B,GACvC,SAAS,IAAI,CAAC,8BAA8B,EAAE,OAAO,CAAC,EACtD,SAAS,YAAY,KACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE,cAAc,CA0DxD,CAAC;AAEL,eAAO,MAAM,2BAA2B,GACtC,SAAS,8BAA8B,KACtC,aAiBC,CAAC;AAcL,eAAO,MAAM,uBAAuB;6BAhCzB,8BAA8B,KACtC,aAAa;qBAiCN,CAAC,mBACE,mCAAmC,CAAC,CAAC,CAAC,KAC9C,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,gBAAgB,GAAG,CAAC,CAAC;CAkBvE,CAAC"}

package/dist/alchemy/cloudflare/Email.js

@@ -0,0 +1,117 @@
+import { RuntimeContext } from "alchemy";
+import * as Cloudflare from "alchemy/Cloudflare";
+import { Effect, Layer } from "effect";
+import { EmailSendError, Mailer, } from "../../Mailer.js";
+const reservedHeaderNames = new Set([
+    "bcc",
+    "cc",
+    "content-transfer-encoding",
+    "content-type",
+    "from",
+    "mime-version",
+    "reply-to",
+    "subject",
+    "to",
+]);
+const sendError = (message, cause, provider = "alchemy-cloudflare") => new EmailSendError({ provider, message, cause });
+const addressEmail = (address) => typeof address === "string" ? address : address.email;
+const addressList = (address) => {
+    if (address === undefined) {
+        return [];
+    }
+    return Array.isArray(address) ? address : [address];
+};
+const validateHeaderName = (name, provider) => {
+    if (!/^[A-Za-z0-9-]+$/.test(name)) {
+        return Effect.fail(sendError(`Invalid email header name: ${name}`, undefined, provider));
+    }
+    if (reservedHeaderNames.has(name.toLowerCase())) {
+        return Effect.fail(sendError(`Email header is managed by AlchemyCloudflareMailer: ${name}`, undefined, provider));
+    }
+    return Effect.succeed(name);
+};
+const validateHeaderValue = (value, provider) => value.includes("\r") || value.includes("\n")
+    ? Effect.fail(sendError("Email header values must not contain newlines", undefined, provider))
+    : Effect.succeed(value);
+const alchemyAddress = (address, provider, options) => Effect.gen(function* () {
+    const email = yield* validateHeaderValue(addressEmail(address), provider);
+    if (typeof address === "string") {
+        return email;
+    }
+    if (address.name === undefined || address.name.length === 0) {
+        return email;
+    }
+    if (!options.allowName) {
+        return yield* Effect.fail(sendError(`Alchemy Cloudflare SendEmail does not support named ${options.field} addresses`, undefined, provider));
+    }
+    return {
+        name: yield* validateHeaderValue(address.name, provider),
+        email,
+    };
+});
+const alchemyRecipients = (addresses, field, provider) => Effect.forEach(addresses, (address) => alchemyAddress(address, provider, { allowName: false, field }).pipe(Effect.map((recipient) => recipient)));
+const optionalRecipients = (addresses) => {
+    if (addresses.length === 0) {
+        return undefined;
+    }
+    return addresses.length === 1 ? addresses[0] : [...addresses];
+};
+export const renderAlchemyCloudflareEmail = (options, message) => Effect.gen(function* () {
+    const provider = options.provider ?? "alchemy-cloudflare";
+    if (message.text === undefined && message.html === undefined) {
+        return yield* Effect.fail(sendError("Email message must include text or html content", undefined, provider));
+    }
+    const to = yield* alchemyRecipients(addressList(message.to), "to", provider);
+    if (to.length === 0) {
+        return yield* Effect.fail(sendError("Email message must include at least one to recipient", undefined, provider));
+    }
+    const cc = yield* alchemyRecipients(addressList(message.cc), "cc", provider);
+    const bcc = yield* alchemyRecipients(addressList(message.bcc), "bcc", provider);
+    const headers = {};
+    for (const [name, value] of Object.entries(message.headers ?? {})) {
+        headers[yield* validateHeaderName(name, provider)] = yield* validateHeaderValue(value, provider);
+    }
+    return {
+        from: yield* alchemyAddress(message.from ?? options.from, provider, {
+            allowName: true,
+            field: "from",
+        }),
+        to: optionalRecipients(to) ?? [],
+        subject: yield* validateHeaderValue(message.subject, provider),
+        ...(message.replyTo === undefined
+            ? {}
+            : {
+                replyTo: yield* alchemyAddress(message.replyTo, provider, {
+                    allowName: true,
+                    field: "reply-to",
+                }),
+            }),
+        ...(cc.length === 0 ? {} : { cc: optionalRecipients(cc) }),
+        ...(bcc.length === 0 ? {} : { bcc: optionalRecipients(bcc) }),
+        ...(Object.keys(headers).length === 0 ? {} : { headers }),
+        ...(message.text === undefined ? {} : { text: message.text }),
+        ...(message.html === undefined ? {} : { html: message.html }),
+    };
+});
+export const makeAlchemyCloudflareMailer = (options) => Mailer.make({
+    send: Effect.fn("auth.alchemy_cloudflare_email.send")(function* (message) {
+        const rendered = yield* renderAlchemyCloudflareEmail(options, message);
+        yield* options.email.send(rendered).pipe(Effect.mapError((cause) => sendError("Alchemy Cloudflare failed to send email", cause, options.provider)));
+    }),
+});
+const bindSendEmail = (sender) => Cloudflare.SendEmail.bind(sender);
+export const AlchemyCloudflareMailer = {
+    make: makeAlchemyCloudflareMailer,
+    layer: (options) => Layer.effect(Mailer)(Effect.gen(function* () {
+        const runtimeContext = yield* RuntimeContext;
+        const email = yield* bindSendEmail(options.sender);
+        return makeAlchemyCloudflareMailer({
+            email: {
+                send: (message) => email.send(message).pipe(Effect.provideService(RuntimeContext, runtimeContext)),
+            },
+            from: options.from,
+            provider: options.provider,
+        });
+    })),
+};
+//# sourceMappingURL=Email.js.map

package/dist/alchemy/cloudflare/Email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.js","sourceRoot":"","sources":["../../../src/alchemy/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,EACL,cAAc,EACd,MAAM,GAIP,MAAM,iBAAiB,CAAC;AA0BzB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,IAAI;IACJ,2BAA2B;IAC3B,cAAc;IACd,MAAM;IACN,cAAc;IACd,UAAU;IACV,SAAS;IACT,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,KAAe,EAAE,QAAQ,GAAG,oBAAoB,EAAE,EAAE,CACtF,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnD,MAAM,YAAY,GAAG,CAAC,OAAqB,EAAS,EAAE,CACpD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;AAExD,MAAM,WAAW,GAAG,CAClB,OAA2D,EAClC,EAAE;IAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAuB,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,QAAgB,EACuB,EAAE;IACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CAAC,8BAA8B,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CACP,uDAAuD,IAAI,EAAE,EAC7D,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,+CAA+C,EAC/C,SAAS,EACT,QAAQ,CACT,CACF;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5B,MAAM,cAAc,GAAG,CACrB,OAAqB,EACrB,QAAgB,EAChB,OAAgE,EACZ,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE1E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,uDAAuD,OAAO,CAAC,KAAK,YAAY,EAChF,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxD,KAAK;KACN,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CACxB,SAAkC,EAClC,KAAa,EACb,QAAgB,EACkC,EAAE,CACpD,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACpC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAmB,CAAC,CAC/C,CACF,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CACzB,SAA4B,EACG,EAAE;IACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,OAAsD,EACtD,OAAqB,EACuC,EAAE,CAC9D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,CAAC;IAE1D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,iDAAiD,EACjD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7E,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,sDAAsD,EACtD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAC7E,KAAK,EACL,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE;YAClE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,MAAM;SACd,CAAC;QACF,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAChC,OAAO,EAAE,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,EAAE,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;oBACxD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,UAAU;iBAClB,CAAC;aACH,CAAC;QACN,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;KACxB,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,OAAuC,EACxB,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC;IACV,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC7D,OAAqB;QAErB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,SAAS,CACP,yCAAyC,EACzC,KAAK,EACL,OAAO,CAAC,QAAQ,CACjB,CACF,CACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CACpB,MAA+C,EAK/C,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAIpC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,CACL,OAA+C,EAC+B,EAAE,CAChF,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEnD,OAAO,2BAA2B,CAAC;YACjC,KAAK,EAAE;gBACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACtB,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,cAAc,CAAC,CACtD;aACJ;YACD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CACH;CACK,CAAC"}

package/dist/cloudflare/Email.d.ts

@@ -0,0 +1,25 @@
+import { Effect, Layer } from "effect";
+import { EmailSendError, Mailer, type EmailAddress, type EmailMessage as AuthEmailMessage, type MailerService } from "../Mailer.js";
+export type MaybePromise<A> = A | PromiseLike<A>;
+export interface CloudflareSendEmailBinding<Message = unknown> {
+    readonly send: (message: Message) => MaybePromise<unknown>;
+}
+export type CloudflareEmailMessageConstructor<Message = unknown> = new (from: string, to: string, raw: string) => Message;
+export interface CloudflareMailerOptions<Message = unknown> {
+    readonly binding: CloudflareSendEmailBinding<Message>;
+    readonly EmailMessage: CloudflareEmailMessageConstructor<Message>;
+    readonly from: EmailAddress;
+    readonly provider?: string;
+}
+export interface CloudflareRenderedEmail {
+    readonly from: string;
+    readonly recipients: readonly string[];
+    readonly raw: string;
+}
+export declare const renderCloudflareEmail: <Message>(options: CloudflareMailerOptions<Message>, message: AuthEmailMessage) => Effect.Effect<CloudflareRenderedEmail, EmailSendError>;
+export declare const makeCloudflareMailer: <Message>(options: CloudflareMailerOptions<Message>) => MailerService;
+export declare const CloudflareMailer: {
+    readonly make: <Message>(options: CloudflareMailerOptions<Message>) => MailerService;
+    readonly layer: <Message>(options: CloudflareMailerOptions<Message>) => Layer.Layer<Mailer, never, never>;
+};
+//# sourceMappingURL=Email.d.ts.map

package/dist/cloudflare/Email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.d.ts","sourceRoot":"","sources":["../../src/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAY,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGjD,OAAO,EACL,cAAc,EACd,MAAM,EACN,KAAK,YAAY,EACjB,KAAK,YAAY,IAAI,gBAAgB,EACrC,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;AAEjD,MAAM,WAAW,0BAA0B,CAAC,OAAO,GAAG,OAAO;IAC3D,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;CAC5D;AAED,MAAM,MAAM,iCAAiC,CAAC,OAAO,GAAG,OAAO,IAAI,KACjE,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,KACR,OAAO,CAAC;AAEb,MAAM,WAAW,uBAAuB,CAAC,OAAO,GAAG,OAAO;IACxD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAClE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAwLD,eAAO,MAAM,qBAAqB,GAAI,OAAO,EAC3C,SAAS,uBAAuB,CAAC,OAAO,CAAC,EACzC,SAAS,gBAAgB,KACxB,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,cAAc,CAqEpD,CAAC;AAEL,eAAO,MAAM,oBAAoB,GAAI,OAAO,EAC1C,SAAS,uBAAuB,CAAC,OAAO,CAAC,KACxC,aAyBC,CAAC;AAEL,eAAO,MAAM,gBAAgB;oBA7BQ,OAAO,WACjC,uBAAuB,CAAC,OAAO,CAAC,KACxC,aAAa;qBA6BN,OAAO,WAAW,uBAAuB,CAAC,OAAO,CAAC;CAElD,CAAC"}

package/dist/cloudflare/Email.js

@@ -0,0 +1,153 @@
+import { Effect, Encoding, Layer } from "effect";
+import { EmailSendError, Mailer, } from "../Mailer.js";
+const crlf = "\r\n";
+const multipartBoundary = "effect-auth-cloudflare-email-boundary";
+const textEncoder = new TextEncoder();
+const reservedHeaderNames = new Set([
+    "bcc",
+    "cc",
+    "content-transfer-encoding",
+    "content-type",
+    "from",
+    "mime-version",
+    "reply-to",
+    "subject",
+    "to",
+]);
+const sendError = (message, cause, provider = "cloudflare") => new EmailSendError({ provider, message, cause });
+const addressEmail = (address) => typeof address === "string" ? address : address.email;
+const escapeDisplayName = (name) => `"${name.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+const addressHeader = (address) => typeof address === "string"
+    ? address
+    : address.name === undefined || address.name.length === 0
+        ? address.email
+        : `${escapeDisplayName(address.name)} <${address.email}>`;
+const addressList = (address) => {
+    if (address === undefined) {
+        return [];
+    }
+    return Array.isArray(address) ? address : [address];
+};
+const uniqueStrings = (values) => [
+    ...new Set(values),
+];
+const validateHeaderName = (name, provider) => {
+    if (!/^[A-Za-z0-9-]+$/.test(name)) {
+        return Effect.fail(sendError(`Invalid email header name: ${name}`, undefined, provider));
+    }
+    if (reservedHeaderNames.has(name.toLowerCase())) {
+        return Effect.fail(sendError(`Email header is managed by CloudflareMailer: ${name}`, undefined, provider));
+    }
+    return Effect.succeed(name);
+};
+const validateHeaderValue = (value, provider) => value.includes("\r") || value.includes("\n")
+    ? Effect.fail(sendError("Email header values must not contain newlines", undefined, provider))
+    : Effect.succeed(value);
+const headerLine = (name, value, provider) => Effect.gen(function* () {
+    const safeName = yield* validateHeaderName(name, provider);
+    const safeValue = yield* validateHeaderValue(value, provider);
+    return `${safeName}: ${safeValue}`;
+});
+const systemHeaderLine = (name, value, provider) => validateHeaderValue(value, provider).pipe(Effect.map((safeValue) => `${name}: ${safeValue}`));
+const wrapBase64 = (value) => value.match(/.{1,76}/g)?.join(crlf) ?? "";
+const base64Body = (content) => wrapBase64(Encoding.encodeBase64(textEncoder.encode(content)));
+const contentPart = (contentType, content) => [
+    `Content-Type: ${contentType}; charset=utf-8`,
+    "Content-Transfer-Encoding: base64",
+    "",
+    base64Body(content),
+].join(crlf);
+const renderedBody = (message, provider) => {
+    if (message.text === undefined && message.html === undefined) {
+        return Effect.fail(sendError("Email message must include text or html content", undefined, provider));
+    }
+    if (message.text !== undefined && message.html !== undefined) {
+        return Effect.succeed([
+            [`Content-Type: multipart/alternative; boundary="${multipartBoundary}"`],
+            [
+                `--${multipartBoundary}`,
+                contentPart("text/plain", message.text),
+                `--${multipartBoundary}`,
+                contentPart("text/html", message.html),
+                `--${multipartBoundary}--`,
+                "",
+            ].join(crlf),
+        ]);
+    }
+    if (message.html !== undefined) {
+        return Effect.succeed([
+            [
+                "Content-Type: text/html; charset=utf-8",
+                "Content-Transfer-Encoding: base64",
+            ],
+            base64Body(message.html),
+        ]);
+    }
+    return Effect.succeed([
+        [
+            "Content-Type: text/plain; charset=utf-8",
+            "Content-Transfer-Encoding: base64",
+        ],
+        base64Body(message.text ?? ""),
+    ]);
+};
+const recipientHeaders = (message) => [
+    addressList(message.to).map(addressHeader).join(", "),
+    ...addressList(message.cc).map(addressHeader),
+];
+const envelopeRecipients = (message) => uniqueStrings([
+    ...addressList(message.to),
+    ...addressList(message.cc),
+    ...addressList(message.bcc),
+].map((address) => addressEmail(address)));
+export const renderCloudflareEmail = (options, message) => Effect.gen(function* () {
+    const provider = options.provider ?? "cloudflare";
+    const from = yield* validateHeaderValue(addressEmail(message.from ?? options.from), provider);
+    const recipients = [];
+    for (const recipient of envelopeRecipients(message)) {
+        recipients.push(yield* validateHeaderValue(recipient, provider));
+    }
+    if (recipients.length === 0) {
+        return yield* sendError("Email message must include at least one recipient", undefined, provider);
+    }
+    const [toHeader] = recipientHeaders(message);
+    const headers = [];
+    const [contentHeaders, body] = yield* renderedBody(message, provider);
+    headers.push(yield* systemHeaderLine("From", addressHeader(message.from ?? options.from), provider));
+    headers.push(yield* systemHeaderLine("To", toHeader, provider));
+    const cc = addressList(message.cc);
+    if (cc.length > 0) {
+        headers.push(yield* systemHeaderLine("Cc", cc.map(addressHeader).join(", "), provider));
+    }
+    if (message.replyTo !== undefined) {
+        headers.push(yield* systemHeaderLine("Reply-To", addressHeader(message.replyTo), provider));
+    }
+    headers.push(yield* systemHeaderLine("Subject", message.subject, provider));
+    headers.push("MIME-Version: 1.0");
+    headers.push(...contentHeaders);
+    for (const [name, value] of Object.entries(message.headers ?? {})) {
+        headers.push(yield* headerLine(name, value, provider));
+    }
+    return {
+        from,
+        recipients,
+        raw: `${headers.join(crlf)}${crlf}${crlf}${body}`,
+    };
+});
+export const makeCloudflareMailer = (options) => Mailer.make({
+    send: Effect.fn("auth.cloudflare_email.send")(function* (message) {
+        const rendered = yield* renderCloudflareEmail(options, message);
+        for (const recipient of rendered.recipients) {
+            const cloudflareMessage = new options.EmailMessage(rendered.from, recipient, rendered.raw);
+            yield* Effect.tryPromise({
+                try: () => Promise.resolve(options.binding.send(cloudflareMessage)),
+                catch: (cause) => sendError("Cloudflare failed to send email", cause, options.provider),
+            });
+        }
+    }),
+});
+export const CloudflareMailer = {
+    make: makeCloudflareMailer,
+    layer: (options) => Layer.succeed(Mailer, makeCloudflareMailer(options)),
+};
+//# sourceMappingURL=Email.js.map

package/dist/cloudflare/Email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.js","sourceRoot":"","sources":["../../src/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGjD,OAAO,EACL,cAAc,EACd,MAAM,GAIP,MAAM,cAAc,CAAC;AA2BtB,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,iBAAiB,GAAG,uCAAuC,CAAC;AAClE,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,IAAI;IACJ,2BAA2B;IAC3B,cAAc;IACd,MAAM;IACN,cAAc;IACd,UAAU;IACV,SAAS;IACT,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,KAAe,EAAE,QAAQ,GAAG,YAAY,EAAE,EAAE,CAC9E,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnD,MAAM,YAAY,GAAG,CAAC,OAAqB,EAAS,EAAE,CACpD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;AAExD,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CACjD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AAE9D,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAU,EAAE,CACtD,OAAO,OAAO,KAAK,QAAQ;IACzB,CAAC,CAAC,OAAO;IACT,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACvD,CAAC,CAAC,OAAO,CAAC,KAAK;QACf,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC;AAEhE,MAAM,WAAW,GAAG,CAClB,OAA2D,EAClC,EAAE;IAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAuB,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,MAAyB,EAAqB,EAAE,CAAC;IACtE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,QAAgB,EACuB,EAAE;IACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CAAC,8BAA8B,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CACP,gDAAgD,IAAI,EAAE,EACtD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,+CAA+C,EAC/C,SAAS,EACT,QAAQ,CACT,CACF;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5B,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE9D,OAAO,GAAG,QAAQ,KAAK,SAAS,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CACvB,IAAY,EACZ,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,SAAS,EAAE,CAAC,CACnD,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAE5C,MAAM,UAAU,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7C,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,OAAe,EAAU,EAAE,CACnE;IACE,iBAAiB,WAAW,iBAAiB;IAC7C,mCAAmC;IACnC,EAAE;IACF,UAAU,CAAC,OAAO,CAAC;CACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,YAAY,GAAG,CACnB,OAAyB,EACzB,QAAgB,EAIhB,EAAE;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CACP,iDAAiD,EACjD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,kDAAkD,iBAAiB,GAAG,CAAC;YACxE;gBACE,KAAK,iBAAiB,EAAE;gBACxB,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;gBACvC,KAAK,iBAAiB,EAAE;gBACxB,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;gBACtC,KAAK,iBAAiB,IAAI;gBAC1B,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,OAAO,CAAC;YACpB;gBACE,wCAAwC;gBACxC,mCAAmC;aACpC;YACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB;YACE,yCAAyC;YACzC,mCAAmC;SACpC;QACD,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,OAAyB,EAAqB,EAAE,CAAC;IACzE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrD,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;CAC9C,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAyB,EAAqB,EAAE,CAC1E,aAAa,CACX;IACE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5B,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAC1C,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,OAAyC,EACzC,OAAyB,EAC+B,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACrC,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAC1C,QAAQ,CACT,CAAC;IACF,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,mDAAmD,EACnD,SAAS,EACT,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEtE,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,MAAM,EACN,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAC3C,QAAQ,CACT,CACF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEhE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEnC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,IAAI,EACJ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAChC,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,UAAU,EACV,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAC9B,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO;QACL,IAAI;QACJ,UAAU;QACV,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE;KAClD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAyC,EAC1B,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC;IACV,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EACrD,OAAyB;QAEzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEhE,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC,YAAY,CAChD,QAAQ,CAAC,IAAI,EACb,SAAS,EACT,QAAQ,CAAC,GAAG,CACb,CAAC;YAEF,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACnE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,SAAS,CACP,iCAAiC,EACjC,KAAK,EACL,OAAO,CAAC,QAAQ,CACjB;aACJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,CAAU,OAAyC,EAAE,EAAE,CAC5D,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;CAC9C,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export declare const packageName: "@effect-auth/core";
+export * from "./ApiKey.js";
 export * from "./AuditLog.js";
 export * from "./AuthConfig.js";
 export * from "./AuthFlow.js";
@@ -8,11 +9,22 @@ export * from "./Crypto.js";
 export * from "./EmailOtp.js";
 export * from "./EmailVerification.js";
 export * from "./Identifiers.js";
+export * from "./Jwt.js";
+export * from "./LoginApproval.js";
+export * from "./LoginNotification.js";
+export * from "./LoginRisk.js";
 export * from "./Mailer.js";
+export * from "./MagicLink.js";
 export * from "./Password.js";
+export * from "./Passkey.js";
 export * from "./Policy.js";
 export * from "./Privacy.js";
+export * from "./RecoveryCode.js";
+export * from "./RefreshToken.js";
 export * from "./Sessions.js";
 export * from "./Storage.js";
+export * from "./StepUp.js";
+export * from "./Totp.js";
+export * from "./TrustedDevice.js";
 export * from "./WaitUntil.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAC;AAExD,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}