@effect-auth/core 0.1.0-alpha.3 → 0.1.0-alpha.5

package/dist/LoginNotification.d.ts

@@ -0,0 +1,183 @@
+import { Context, Duration, Effect, Layer, Redacted } from "effect";
+import type { AuthMethod } from "./AuthFlow.js";
+import { Challenge } from "./Challenge.js";
+import type { ChallengeService } from "./Challenge.js";
+import { Crypto } from "./Crypto.js";
+import type { CryptoService } from "./Crypto.js";
+import type { ChallengeId, Email, SessionId, UnixMillis, UserId } from "./Identifiers.js";
+import type { LoginApprovalIntent, LoginDeviceContext, LoginDeviceStatus } from "./LoginApproval.js";
+import type { LoginRequestContext, LoginRiskContext } from "./LoginRisk.js";
+import { AuthMailer } from "./Mailer.js";
+import type { AuthMailerService } from "./Mailer.js";
+import { Sessions } from "./Sessions.js";
+import type { AuthAssuranceLevel, AuthMethodReference, SessionClaims, SessionsService } from "./Sessions.js";
+import type { WaitUntilService } from "./WaitUntil.js";
+export declare const loginNotificationReportChallengeType: "login-notification-report";
+export declare const defaultLoginNotificationReportTtl: Duration.Duration;
+export declare const defaultLoginNotificationReportSecretBytes = 32;
+export type LoginNotificationReason = "known-device" | "new-device" | "unknown-device" | "high-risk" | (string & {});
+export type LoginNotificationReportAction = "revoke-sessions" | (string & {});
+export interface LoginNotificationSession {
+    readonly sessionId: SessionId;
+    readonly userId: UserId;
+    readonly authTime: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly aal: AuthAssuranceLevel;
+    readonly amr: readonly AuthMethodReference[];
+    readonly claims?: SessionClaims;
+}
+export interface LoginNotificationPolicyInput {
+    readonly userId: UserId;
+    readonly email?: Email;
+    readonly intent?: LoginApprovalIntent;
+    readonly method: AuthMethod;
+    readonly amr: readonly AuthMethodReference[];
+    readonly aal: AuthAssuranceLevel;
+    readonly session: LoginNotificationSession;
+    readonly device: LoginDeviceContext;
+    readonly risk: LoginRiskContext;
+    readonly request?: LoginRequestContext;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface LoginNotificationReportDecision {
+    readonly action?: LoginNotificationReportAction;
+    readonly ttl?: Duration.Duration;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export type LoginNotificationPolicyDecision = {
+    readonly _tag: "Skip";
+} | {
+    readonly _tag: "Notify";
+    readonly reason: LoginNotificationReason;
+    readonly report?: LoginNotificationReportDecision;
+    readonly locale?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export interface LoginNotificationPolicyService {
+    readonly decide: (input: LoginNotificationPolicyInput) => Effect.Effect<LoginNotificationPolicyDecision>;
+}
+declare const LoginNotificationPolicy_base: Context.ServiceClass<LoginNotificationPolicy, "auth/LoginNotificationPolicy", LoginNotificationPolicyService>;
+export declare class LoginNotificationPolicy extends LoginNotificationPolicy_base {
+}
+export declare namespace LoginNotificationPolicy {
+    const make: (service: LoginNotificationPolicyService) => LoginNotificationPolicyService;
+    const custom: (decide: LoginNotificationPolicyService["decide"]) => LoginNotificationPolicyService;
+}
+export declare const LoginNotificationDecision: {
+    skip: () => LoginNotificationPolicyDecision;
+    notify: (input: {
+        readonly reason: LoginNotificationReason;
+        readonly report?: LoginNotificationReportDecision;
+        readonly locale?: string;
+        readonly metadata?: Readonly<Record<string, unknown>>;
+    }) => LoginNotificationPolicyDecision;
+};
+export interface LoginNotificationPolicyOptions {
+    readonly intents?: readonly LoginApprovalIntent[];
+    readonly methods?: readonly AuthMethod[];
+    readonly devices?: readonly LoginDeviceStatus[];
+    readonly reason?: LoginNotificationReason;
+    readonly report?: LoginNotificationReportDecision | false;
+}
+export declare const makeLoginNotificationPolicy: (options?: LoginNotificationPolicyOptions) => LoginNotificationPolicyService;
+export declare const LoginNotificationPolicyLive: (options?: LoginNotificationPolicyOptions) => Layer.Layer<LoginNotificationPolicy, never, never>;
+export interface LoginNotificationReportUrlInput {
+    readonly challengeId: ChallengeId;
+    readonly secret: Redacted.Redacted<string>;
+    readonly userId: UserId;
+    readonly sessionId: SessionId;
+    readonly email?: Email;
+    readonly reason: LoginNotificationReason;
+    readonly action: LoginNotificationReportAction;
+    readonly expiresAt: UnixMillis;
+    readonly request?: LoginRequestContext;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface LoginNotificationNotifyInput extends LoginNotificationPolicyInput {
+}
+export interface LoginNotificationReportInput {
+    readonly challengeId: ChallengeId;
+    readonly secret: Redacted.Redacted<string>;
+}
+export interface LoginNotificationReportResult {
+    readonly userId: UserId;
+    readonly email?: Email;
+    readonly sessionId: SessionId;
+    readonly method: AuthMethod;
+    readonly deviceStatus: LoginDeviceStatus;
+    readonly request?: LoginRequestContext;
+    readonly occurredAt: UnixMillis;
+    readonly reason: LoginNotificationReason;
+    readonly action: LoginNotificationReportAction;
+}
+declare const LoginNotificationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LoginNotificationError";
+} & Readonly<A>;
+export declare class LoginNotificationError extends LoginNotificationError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export type LoginNotificationReportErrorReason = "invalid_report" | "unsupported_action" | "internal";
+declare const LoginNotificationReportError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LoginNotificationReportError";
+} & Readonly<A>;
+export declare class LoginNotificationReportError extends LoginNotificationReportError_base<{
+    readonly reason: LoginNotificationReportErrorReason;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface LoginNotificationReportActionInput {
+    readonly userId: UserId;
+    readonly email?: Email;
+    readonly sessionId: SessionId;
+    readonly method: AuthMethod;
+    readonly deviceStatus: LoginDeviceStatus;
+    readonly request?: LoginRequestContext;
+    readonly occurredAt: UnixMillis;
+    readonly reason: LoginNotificationReason;
+    readonly action: LoginNotificationReportAction;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface LoginNotificationReportActionHandlerService {
+    readonly handle: (input: LoginNotificationReportActionInput) => Effect.Effect<void, LoginNotificationReportError>;
+}
+declare const LoginNotificationReportActionHandler_base: Context.ServiceClass<LoginNotificationReportActionHandler, "auth/LoginNotificationReportActionHandler", LoginNotificationReportActionHandlerService>;
+export declare class LoginNotificationReportActionHandler extends LoginNotificationReportActionHandler_base {
+}
+export declare namespace LoginNotificationReportActionHandler {
+    const make: (service: LoginNotificationReportActionHandlerService) => LoginNotificationReportActionHandlerService;
+    const custom: (handle: LoginNotificationReportActionHandlerService["handle"]) => LoginNotificationReportActionHandlerService;
+}
+export interface LoginNotificationService {
+    readonly notify: (input: LoginNotificationNotifyInput) => Effect.Effect<void, LoginNotificationError>;
+    readonly report: (input: LoginNotificationReportInput) => Effect.Effect<LoginNotificationReportResult, LoginNotificationReportError>;
+}
+declare const LoginNotification_base: Context.ServiceClass<LoginNotification, "auth/LoginNotification", LoginNotificationService>;
+export declare class LoginNotification extends LoginNotification_base {
+}
+export declare namespace LoginNotification {
+    const make: (service: LoginNotificationService) => LoginNotificationService;
+}
+export interface LoginNotificationOptions {
+    readonly makeReportUrl: (input: LoginNotificationReportUrlInput) => string;
+    readonly reportTtl?: Duration.Duration;
+    readonly reportSecretBytes?: number;
+}
+export interface LoginNotificationDependencies extends LoginNotificationOptions {
+    readonly policy: LoginNotificationPolicyService;
+    readonly challenge: ChallengeService;
+    readonly crypto: CryptoService;
+    readonly authMailer: AuthMailerService;
+    readonly actionHandler: LoginNotificationReportActionHandlerService;
+    readonly waitUntil?: WaitUntilService;
+}
+export declare const makeLoginNotificationReportActionHandler: (dependencies: {
+    readonly sessions: SessionsService;
+}) => LoginNotificationReportActionHandlerService;
+export declare const LoginNotificationReportActionHandlerLive: Layer.Layer<LoginNotificationReportActionHandler, never, Sessions>;
+export declare const makeLoginNotification: (dependencies: LoginNotificationDependencies) => LoginNotificationService;
+export declare const LoginNotificationLive: (options: LoginNotificationOptions) => Layer.Layer<LoginNotification, never, Crypto | Sessions | AuthMailer | Challenge>;
+export {};
+//# sourceMappingURL=LoginNotification.d.ts.map

package/dist/LoginNotification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginNotification.d.ts","sourceRoot":"","sources":["../src/LoginNotification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAEP,QAAQ,EACR,MAAM,EACN,KAAK,EAEL,QAAQ,EACT,MAAM,QAAQ,CAAC;AAEhB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EACV,WAAW,EACX,KAAK,EACL,SAAS,EACT,UAAU,EACV,MAAM,EACP,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,eAAe,EAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,eAAO,MAAM,oCAAoC,EAC/C,2BAAoC,CAAC;AAEvC,eAAO,MAAM,iCAAiC,mBAAmB,CAAC;AAClE,eAAO,MAAM,yCAAyC,KAAK,CAAC;AAE5D,MAAM,MAAM,uBAAuB,GAC/B,cAAc,GACd,YAAY,GACZ,gBAAgB,GAChB,WAAW,GACX,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE9E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,+BAA+B,CAAC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD,CAAC;AAEN,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,4BAA4B,KAChC,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;CACrD;;AAED,qBAAa,uBAAwB,SAAQ,4BAGV;CAAG;AAEtC,yBAAiB,uBAAuB,CAAC;IAChC,MAAM,IAAI,GACf,SAAS,8BAA8B,KACtC,8BAAqE,CAAC;IAElE,MAAM,MAAM,GACjB,QAAQ,8BAA8B,CAAC,QAAQ,CAAC,KAC/C,8BAAwE,CAAC;CAC7E;AAID,eAAO,MAAM,yBAAyB;gBAC1B,+BAA+B;oBACzB;QACd,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,+BAA+B,CAAC;QAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACvD,KAAG,+BAA+B;CAOpC,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,+BAA+B,GAAG,KAAK,CAAC;CAC3D;AAED,eAAO,MAAM,2BAA2B,GACtC,UAAS,8BAAmC,KAC3C,8BAwCF,CAAC;AAEF,eAAO,MAAM,2BAA2B,GACtC,UAAU,8BAA8B,uDAEoC,CAAC;AAE/E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,4BAA6B,SAAQ,4BAA4B;CAAG;AAErF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;CAChD;;;;AAED,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,MAAM,kCAAkC,GAC1C,gBAAgB,GAChB,oBAAoB,GACpB,UAAU,CAAC;;;;AAEf,qBAAa,4BAA6B,SAAQ,kCAEhD;IACA,QAAQ,CAAC,MAAM,EAAE,kCAAkC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,kCAAkC,KACtC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;CACxD;;AAED,qBAAa,oCAAqC,SAAQ,yCAGV;CAAG;AAEnD,yBAAiB,oCAAoC,CAAC;IAC7C,MAAM,IAAI,GACf,SAAS,2CAA2C,KACnD,2CAC+C,CAAC;IAE5C,MAAM,MAAM,GACjB,QAAQ,2CAA2C,CAAC,QAAQ,CAAC,KAC5D,2CACkD,CAAC;CACvD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,4BAA4B,KAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,4BAA4B,KAChC,MAAM,CAAC,MAAM,CAChB,6BAA6B,EAC7B,4BAA4B,CAC7B,CAAC;CACH;;AAED,qBAAa,iBAAkB,SAAQ,sBAGV;CAAG;AAEhC,yBAAiB,iBAAiB,CAAC;IAC1B,MAAM,IAAI,GACf,SAAS,wBAAwB,KAChC,wBAAyD,CAAC;CAC9D;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,MAAM,CAAC;IAC3E,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,6BAA8B,SAAQ,wBAAwB;IAC7E,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,2CAA2C,CAAC;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;CACvC;AA8MD,eAAO,MAAM,wCAAwC,GAAI,cAAc;IACrE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC,KAAG,2CAuBA,CAAC;AAEL,eAAO,MAAM,wCAAwC,oEAQpD,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,cAAc,6BAA6B,KAC1C,wBAqIC,CAAC;AAEL,eAAO,MAAM,qBAAqB,GAAI,SAAS,wBAAwB,sFA2BpE,CAAC"}

package/dist/LoginNotification.js

@@ -0,0 +1,329 @@
+import { Context, Data, Duration, Effect, Layer, Option, Redacted, } from "effect";
+import { Challenge } from "./Challenge.js";
+import { Crypto } from "./Crypto.js";
+import { SessionId as makeSessionId, UserId as makeUserId, } from "./Identifiers.js";
+import { AuthMailer } from "./Mailer.js";
+import { Sessions } from "./Sessions.js";
+import { WaitUntil } from "./WaitUntil.js";
+export const loginNotificationReportChallengeType = "login-notification-report";
+export const defaultLoginNotificationReportTtl = Duration.days(7);
+export const defaultLoginNotificationReportSecretBytes = 32;
+export class LoginNotificationPolicy extends Context.Service()("auth/LoginNotificationPolicy") {
+}
+(function (LoginNotificationPolicy) {
+    LoginNotificationPolicy.make = (service) => LoginNotificationPolicy.of(service);
+    LoginNotificationPolicy.custom = (decide) => LoginNotificationPolicy.of({ decide });
+})(LoginNotificationPolicy || (LoginNotificationPolicy = {}));
+const skipDecision = { _tag: "Skip" };
+export const LoginNotificationDecision = {
+    skip: () => skipDecision,
+    notify: (input) => ({
+        _tag: "Notify",
+        reason: input.reason,
+        ...(input.report === undefined ? {} : { report: input.report }),
+        ...(input.locale === undefined ? {} : { locale: input.locale }),
+        ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+    }),
+};
+export const makeLoginNotificationPolicy = (options = {}) => {
+    const intents = options.intents ?? [];
+    const methods = options.methods ?? [];
+    const devices = options.devices ?? [];
+    return LoginNotificationPolicy.make({
+        decide: Effect.fn("auth.login_notification_policy.decide")(function* (input) {
+            if (intents.length > 0 &&
+                (input.intent === undefined || !intents.includes(input.intent))) {
+                return skipDecision;
+            }
+            if (methods.length > 0 && !methods.includes(input.method)) {
+                return skipDecision;
+            }
+            if (devices.length > 0 && !devices.includes(input.device.status)) {
+                return skipDecision;
+            }
+            if (intents.length === 0 &&
+                methods.length === 0 &&
+                devices.length === 0) {
+                return skipDecision;
+            }
+            return LoginNotificationDecision.notify({
+                reason: options.reason ?? reasonFromDeviceStatus(input.device.status),
+                ...(options.report === false
+                    ? {}
+                    : { report: options.report ?? { action: "revoke-sessions" } }),
+            });
+        }),
+    });
+};
+export const LoginNotificationPolicyLive = (options) => Layer.succeed(LoginNotificationPolicy)(makeLoginNotificationPolicy(options));
+export class LoginNotificationError extends Data.TaggedError("LoginNotificationError") {
+}
+export class LoginNotificationReportError extends Data.TaggedError("LoginNotificationReportError") {
+}
+export class LoginNotificationReportActionHandler extends Context.Service()("auth/LoginNotificationReportActionHandler") {
+}
+(function (LoginNotificationReportActionHandler) {
+    LoginNotificationReportActionHandler.make = (service) => LoginNotificationReportActionHandler.of(service);
+    LoginNotificationReportActionHandler.custom = (handle) => LoginNotificationReportActionHandler.of({ handle });
+})(LoginNotificationReportActionHandler || (LoginNotificationReportActionHandler = {}));
+export class LoginNotification extends Context.Service()("auth/LoginNotification") {
+}
+(function (LoginNotification) {
+    LoginNotification.make = (service) => LoginNotification.of(service);
+})(LoginNotification || (LoginNotification = {}));
+const mergeMetadata = (left, right) => {
+    const metadata = { ...left, ...right };
+    return Object.keys(metadata).length === 0 ? undefined : metadata;
+};
+const metadataString = (metadata, key) => {
+    const value = metadata?.[key];
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+};
+const metadataNumber = (metadata, key) => {
+    const value = metadata?.[key];
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+};
+const metadataDeviceStatus = (metadata, key) => {
+    const value = metadataString(metadata, key);
+    return value === "known" || value === "new" || value === "unknown"
+        ? value
+        : undefined;
+};
+const metadataRecord = (metadata, key) => {
+    const value = metadata?.[key];
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+};
+const reportMetadata = (input) => ({
+    ...(input.email === undefined ? {} : { email: input.email }),
+    sessionId: input.sessionId,
+    method: input.method,
+    deviceStatus: input.deviceStatus,
+    ...(input.request === undefined ? {} : { request: input.request }),
+    occurredAt: Number(input.occurredAt),
+    reason: input.reason,
+    action: input.action,
+    ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+});
+const reasonFromDeviceStatus = (status) => {
+    switch (status) {
+        case "known": {
+            return "known-device";
+        }
+        case "new": {
+            return "new-device";
+        }
+        case "unknown": {
+            return "unknown-device";
+        }
+    }
+};
+const invalidateReportChallenge = (challenge, id) => challenge
+    .consume(id)
+    .pipe(Effect.catchTag("ChallengeConsumeError", () => Effect.void));
+const makeReportUrl = (dependencies, input) => Effect.try({
+    try: () => dependencies.makeReportUrl(input),
+    catch: (cause) => new LoginNotificationError({
+        message: "Failed to build login notification report URL",
+        cause,
+    }),
+});
+const issueReport = (dependencies, input, decision, metadata) => Effect.gen(function* () {
+    const { report } = decision;
+    if (report === undefined) {
+        return undefined;
+    }
+    const action = report.action ?? "revoke-sessions";
+    const secret = Redacted.make(yield* dependencies.crypto.randomToken(dependencies.reportSecretBytes ??
+        defaultLoginNotificationReportSecretBytes));
+    const issued = yield* dependencies.challenge.issue({
+        type: loginNotificationReportChallengeType,
+        subject: input.userId,
+        ttl: report.ttl ??
+            dependencies.reportTtl ??
+            defaultLoginNotificationReportTtl,
+        secret,
+        metadata: reportMetadata({
+            ...(input.email === undefined ? {} : { email: input.email }),
+            sessionId: input.session.sessionId,
+            method: input.method,
+            deviceStatus: input.device.status,
+            ...(input.request === undefined ? {} : { request: input.request }),
+            occurredAt: input.session.authTime,
+            reason: decision.reason,
+            action,
+            metadata: report.metadata,
+        }),
+    });
+    const reportUrl = yield* makeReportUrl(dependencies, {
+        challengeId: issued.id,
+        secret,
+        userId: input.userId,
+        sessionId: input.session.sessionId,
+        ...(input.email === undefined ? {} : { email: input.email }),
+        reason: decision.reason,
+        action,
+        expiresAt: issued.expiresAt,
+        ...(input.request === undefined ? {} : { request: input.request }),
+        ...(metadata === undefined ? {} : { metadata }),
+    }).pipe(Effect.matchEffect({
+        onSuccess: Effect.succeed,
+        onFailure: (error) => invalidateReportChallenge(dependencies.challenge, issued.id).pipe(Effect.flatMap(() => Effect.fail(error))),
+    }));
+    return {
+        challengeId: issued.id,
+        url: reportUrl,
+        expiresAt: issued.expiresAt,
+    };
+}).pipe(Effect.mapError((cause) => cause instanceof LoginNotificationError
+    ? cause
+    : new LoginNotificationError({
+        message: "Failed to issue login notification report",
+        cause,
+    })));
+const scheduleDelivery = (dependencies, delivery) => dependencies.waitUntil === undefined
+    ? delivery
+    : dependencies.waitUntil.waitUntil(delivery).pipe(Effect.mapError((cause) => new LoginNotificationError({
+        message: "Failed to schedule login notification",
+        cause,
+    })));
+export const makeLoginNotificationReportActionHandler = (dependencies) => LoginNotificationReportActionHandler.make({
+    handle: Effect.fn("auth.login_notification.report.action")(function* (input) {
+        if (input.action !== "revoke-sessions") {
+            return yield* new LoginNotificationReportError({
+                reason: "unsupported_action",
+                message: `Unsupported login notification action: ${input.action}`,
+            });
+        }
+        yield* dependencies.sessions.revokeAllForUser(input.userId).pipe(Effect.mapError((cause) => new LoginNotificationReportError({
+            reason: "internal",
+            message: "Failed to revoke sessions for reported login",
+            cause,
+        })));
+    }),
+});
+export const LoginNotificationReportActionHandlerLive = Layer.effect(LoginNotificationReportActionHandler)(Effect.gen(function* () {
+    const sessions = yield* Sessions;
+    return makeLoginNotificationReportActionHandler({ sessions });
+}));
+export const makeLoginNotification = (dependencies) => LoginNotification.make({
+    notify: Effect.fn("auth.login_notification.notify")(function* (input) {
+        const decision = yield* dependencies.policy.decide(input);
+        const { email } = input;
+        if (decision._tag === "Skip" || email === undefined) {
+            return;
+        }
+        const metadata = mergeMetadata(input.metadata, decision.metadata);
+        const delivery = Effect.gen(function* () {
+            const report = yield* issueReport(dependencies, input, decision, metadata);
+            yield* dependencies.authMailer
+                .send({
+                _tag: "LoginNotification",
+                to: email,
+                userId: input.userId,
+                sessionId: input.session.sessionId,
+                method: input.method,
+                reason: decision.reason,
+                deviceStatus: input.device.status,
+                request: input.request,
+                occurredAt: input.session.authTime,
+                ...(report === undefined
+                    ? {}
+                    : {
+                        reportChallengeId: report.challengeId,
+                        reportUrl: report.url,
+                        reportExpiresAt: report.expiresAt,
+                    }),
+                ...(decision.locale === undefined
+                    ? {}
+                    : { locale: decision.locale }),
+                ...(metadata === undefined ? {} : { metadata }),
+            })
+                .pipe(Effect.matchEffect({
+                onSuccess: () => Effect.void,
+                onFailure: (cause) => report === undefined
+                    ? Effect.fail(new LoginNotificationError({
+                        message: "Failed to send login notification",
+                        cause,
+                    }))
+                    : invalidateReportChallenge(dependencies.challenge, report.challengeId).pipe(Effect.flatMap(() => Effect.fail(new LoginNotificationError({
+                        message: "Failed to send login notification",
+                        cause,
+                    })))),
+            }));
+        });
+        yield* scheduleDelivery(dependencies, delivery);
+    }),
+    report: Effect.fn("auth.login_notification.report")(function* (input) {
+        const verified = yield* dependencies.challenge
+            .verify({
+            challengeId: input.challengeId,
+            type: loginNotificationReportChallengeType,
+            secret: input.secret,
+        })
+            .pipe(Effect.mapError((cause) => new LoginNotificationReportError({
+            reason: "invalid_report",
+            message: "Invalid login notification report",
+            cause,
+        })));
+        const sessionId = metadataString(verified.metadata, "sessionId");
+        const email = metadataString(verified.metadata, "email");
+        const method = metadataString(verified.metadata, "method");
+        const deviceStatus = metadataDeviceStatus(verified.metadata, "deviceStatus");
+        const request = metadataRecord(verified.metadata, "request");
+        const occurredAt = metadataNumber(verified.metadata, "occurredAt");
+        const reason = metadataString(verified.metadata, "reason");
+        const action = metadataString(verified.metadata, "action");
+        if (sessionId === undefined ||
+            method === undefined ||
+            deviceStatus === undefined ||
+            occurredAt === undefined ||
+            reason === undefined ||
+            action === undefined) {
+            return yield* new LoginNotificationReportError({
+                reason: "invalid_report",
+                message: "Login notification report is missing metadata",
+            });
+        }
+        const reportResult = {
+            userId: makeUserId(verified.subject),
+            ...(email === undefined ? {} : { email: email }),
+            sessionId: makeSessionId(sessionId),
+            method,
+            deviceStatus,
+            ...(request === undefined ? {} : { request }),
+            occurredAt: occurredAt,
+            reason,
+            action,
+        };
+        yield* dependencies.actionHandler.handle({
+            ...reportResult,
+            metadata: metadataRecord(verified.metadata, "metadata"),
+        });
+        return reportResult;
+    }),
+});
+export const LoginNotificationLive = (options) => Layer.effect(LoginNotification)(Effect.gen(function* () {
+    const policy = yield* Effect.serviceOption(LoginNotificationPolicy);
+    const actionHandler = yield* Effect.serviceOption(LoginNotificationReportActionHandler);
+    const waitUntil = yield* Effect.serviceOption(WaitUntil);
+    const challenge = yield* Challenge;
+    const crypto = yield* Crypto;
+    const authMailer = yield* AuthMailer;
+    const sessions = yield* Sessions;
+    return makeLoginNotification({
+        ...options,
+        policy: Option.isSome(policy)
+            ? policy.value
+            : makeLoginNotificationPolicy(),
+        actionHandler: Option.isSome(actionHandler)
+            ? actionHandler.value
+            : makeLoginNotificationReportActionHandler({ sessions }),
+        challenge,
+        crypto,
+        authMailer,
+        ...(Option.isSome(waitUntil) ? { waitUntil: waitUntil.value } : {}),
+    });
+}));
+//# sourceMappingURL=LoginNotification.js.map

package/dist/LoginNotification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginNotification.js","sourceRoot":"","sources":["../src/LoginNotification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,GACT,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AASrC,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,MAAM,IAAI,UAAU,GACrB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAOzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,MAAM,CAAC,MAAM,oCAAoC,GAC/C,2BAAoC,CAAC;AAEvC,MAAM,CAAC,MAAM,iCAAiC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,yCAAyC,GAAG,EAAE,CAAC;AAyD5D,MAAM,OAAO,uBAAwB,SAAQ,OAAO,CAAC,OAAO,EAGzD,CAAC,8BAA8B,CAAC;CAAG;AAEtC,WAAiB,uBAAuB;IACzB,4BAAI,GAAG,CAClB,OAAuC,EACP,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAE5D,8BAAM,GAAG,CACpB,MAAgD,EAChB,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC,EARgB,uBAAuB,KAAvB,uBAAuB,QAQvC;AAED,MAAM,YAAY,GAAoC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAEvE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,GAAoC,EAAE,CAAC,YAAY;IACzD,MAAM,EAAE,CAAC,KAKR,EAAmC,EAAE,CAAC,CAAC;QACtC,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;KACtE,CAAC;CACH,CAAC;AAUF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,UAA0C,EAAE,EACZ,EAAE;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAEtC,OAAO,uBAAuB,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CACxD,QAAQ,CAAC,EAAE,KAAK;YACd,IACE,OAAO,CAAC,MAAM,GAAG,CAAC;gBAClB,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAC/D,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;gBACpB,OAAO,CAAC,MAAM,KAAK,CAAC;gBACpB,OAAO,CAAC,MAAM,KAAK,CAAC,EACpB,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,OAAO,yBAAyB,CAAC,MAAM,CAAC;gBACtC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACrE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;oBAC1B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;aACjE,CAAC,CAAC;QACL,CAAC,CACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,OAAwC,EACxC,EAAE,CACF,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;AAkC/E,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAC1D,wBAAwB,CAIxB;CAAG;AAOL,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAK9B;CAAG;AAqBL,MAAM,OAAO,oCAAqC,SAAQ,OAAO,CAAC,OAAO,EAGtE,CAAC,2CAA2C,CAAC;CAAG;AAEnD,WAAiB,oCAAoC;IACtC,yCAAI,GAAG,CAClB,OAAoD,EACP,EAAE,CAC/C,oCAAoC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAEtC,2CAAM,GAAG,CACpB,MAA6D,EAChB,EAAE,CAC/C,oCAAoC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC,EAVgB,oCAAoC,KAApC,oCAAoC,QAUpD;AAcD,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,WAAiB,iBAAiB;IACnB,sBAAI,GAAG,CAClB,OAAiC,EACP,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC,EAJgB,iBAAiB,KAAjB,iBAAiB,QAIjC;AAiBD,MAAM,aAAa,GAAG,CACpB,IAAmD,EACnD,KAAoD,EACL,EAAE;IACjD,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;IAEvC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,QAAuD,EACvD,GAAW,EACS,EAAE;IACtB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,QAAuD,EACvD,GAAW,EACS,EAAE;IACtB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,QAAuD,EACvD,GAAW,EACoB,EAAE;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE5C,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS;QAChE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,QAAuD,EACvD,GAAW,EACoC,EAAE;IACjD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAA2C;QAC9C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAUvB,EAAqC,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5D,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAClE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;IACpC,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAC7B,MAAyB,EACA,EAAE;IAC3B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,OAAO,gBAAgB,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,SAA2B,EAC3B,EAAe,EACM,EAAE,CACvB,SAAS;KACN,OAAO,CAAC,EAAE,CAAC;KACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAG,CACpB,YAA2C,EAC3C,KAAsC,EACS,EAAE,CACjD,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC;IAC5C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,sBAAsB,CAAC;QACzB,OAAO,EAAE,+CAA+C;QACxD,KAAK;KACN,CAAC;CACL,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAClB,YAA2C,EAC3C,KAAmC,EACnC,QAGC,EACD,QAAuD,EACvD,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAE5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC;IAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAC1B,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CACpC,YAAY,CAAC,iBAAiB;QAC5B,yCAAyC,CAC5C,CACF,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC;QACjD,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,GAAG,EACD,MAAM,CAAC,GAAG;YACV,YAAY,CAAC,SAAS;YACtB,iCAAiC;QACnC,MAAM;QACN,QAAQ,EAAE,cAAc,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5D,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACjC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;KACH,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE;QACnD,WAAW,EAAE,MAAM,CAAC,EAAE;QACtB,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5D,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;KAChD,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,WAAW,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC,OAAO;QACzB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,yBAAyB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACzC;KACJ,CAAC,CACH,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,EAAE;QACtB,GAAG,EAAE,SAAS;QACd,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,KAAK,YAAY,sBAAsB;IACrC,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,IAAI,sBAAsB,CAAC;QACzB,OAAO,EAAE,2CAA2C;QACpD,KAAK;KACN,CAAC,CACP,CACF,CAAC;AAEJ,MAAM,gBAAgB,GAAG,CACvB,YAA2C,EAC3C,QAAqD,EACrD,EAAE,CACF,YAAY,CAAC,SAAS,KAAK,SAAS;IAClC,CAAC,CAAC,QAAQ;IACV,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;QACzB,OAAO,EAAE,uCAAuC;QAChD,KAAK;KACN,CAAC,CACL,CACF,CAAC;AAER,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,YAExD,EAA+C,EAAE,CAChD,oCAAoC,CAAC,IAAI,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CACxD,QAAQ,CAAC,EAAE,KAAK;QACd,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;gBAC7C,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,0CAA0C,KAAK,CAAC,MAAM,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9D,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;YAC/B,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,8CAA8C;YACvD,KAAK;SACN,CAAC,CACL,CACF,CAAC;IACJ,CAAC,CACF;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wCAAwC,GAAG,KAAK,CAAC,MAAM,CAClE,oCAAoC,CACrC,CACC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IAEjC,OAAO,wCAAwC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AAChE,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,YAA2C,EACjB,EAAE,CAC5B,iBAAiB,CAAC,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAExB,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAC/B,YAAY,EACZ,KAAK,EACL,QAAQ,EACR,QAAQ,CACT,CAAC;YAEF,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;iBAC3B,IAAI,CAAC;gBACJ,IAAI,EAAE,mBAAmB;gBACzB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;gBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBACjC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAClC,GAAG,CAAC,MAAM,KAAK,SAAS;oBACtB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;wBACrC,SAAS,EAAE,MAAM,CAAC,GAAG;wBACrB,eAAe,EAAE,MAAM,CAAC,SAAS;qBAClC,CAAC;gBACN,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAChC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;aAChD,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,WAAW,CAAC;gBACjB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;gBAC5B,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,KAAK,SAAS;oBAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,sBAAsB,CAAC;wBACzB,OAAO,EAAE,mCAAmC;wBAC5C,KAAK;qBACN,CAAC,CACH;oBACH,CAAC,CAAC,yBAAyB,CACvB,YAAY,CAAC,SAAS,EACtB,MAAM,CAAC,WAAW,CACnB,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,MAAM,CAAC,IAAI,CACT,IAAI,sBAAsB,CAAC;wBACzB,OAAO,EAAE,mCAAmC;wBAC5C,KAAK;qBACN,CAAC,CACH,CACF,CACF;aACR,CAAC,CACH,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,CAAC,gBAAgB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;aAC3C,MAAM,CAAC;YACN,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,oCAAoC;YAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;YAC/B,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACJ,CAAC;QACF,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAE9C,CAAC;QACd,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE3D,IACE,SAAS,KAAK,SAAS;YACvB,MAAM,KAAK,SAAS;YACpB,YAAY,KAAK,SAAS;YAC1B,UAAU,KAAK,SAAS;YACxB,MAAM,KAAK,SAAS;YACpB,MAAM,KAAK,SAAS,EACpB,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;gBAC7C,MAAM,EAAE,gBAAgB;gBACxB,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;YACzD,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC;YACnC,MAAM;YACN,YAAY;YACZ,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,UAAU,EAAE,UAAwB;YACpC,MAAM;YACN,MAAM;SACiC,CAAC;QAE1C,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC;YACvC,GAAG,YAAY;YACf,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;SACxD,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAiC,EAAE,EAAE,CACzE,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAC/C,oCAAoC,CACrC,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IAEjC,OAAO,qBAAqB,CAAC;QAC3B,GAAG,OAAO;QACV,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,2BAA2B,EAAE;QACjC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,aAAa,CAAC,KAAK;YACrB,CAAC,CAAC,wCAAwC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC1D,SAAS;QACT,MAAM;QACN,UAAU;QACV,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/dist/LoginRisk.d.ts

@@ -0,0 +1,73 @@
+import { Context, Effect, Layer, Schema } from "effect";
+import type { AuthMethod } from "./AuthFlow.js";
+import type { Email, UserId } from "./Identifiers.js";
+import type { LoginDeviceContext } from "./LoginApproval.js";
+import type { AuthAssuranceLevel, AuthMethodReference } from "./Sessions.js";
+export declare const LoginRiskLevelSchema: Schema.Literals<readonly ["unknown", "low", "medium", "high", "critical"]>;
+export type LoginRiskLevel = Schema.Schema.Type<typeof LoginRiskLevelSchema>;
+declare const LoginRiskSignal_base: Schema.Class<LoginRiskSignal, Schema.Struct<{
+    readonly type: Schema.String;
+    readonly level: Schema.optional<Schema.Literals<readonly ["unknown", "low", "medium", "high", "critical"]>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>, {}>;
+export declare class LoginRiskSignal extends LoginRiskSignal_base {
+}
+export interface LoginRiskSignalEncoded extends Schema.Codec.Encoded<typeof LoginRiskSignal> {
+}
+export declare const isLoginRiskSignal: <I>(input: I) => input is I & LoginRiskSignal;
+declare const LoginRiskContext_base: Schema.Class<LoginRiskContext, Schema.Struct<{
+    readonly level: Schema.Literals<readonly ["unknown", "low", "medium", "high", "critical"]>;
+    readonly signals: Schema.$Array<typeof LoginRiskSignal>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>, {}>;
+export declare class LoginRiskContext extends LoginRiskContext_base {
+    hasSignal(type: string): boolean;
+    getSignal(type: string): LoginRiskSignal | undefined;
+    isAtLeast(level: LoginRiskLevel): boolean;
+}
+export interface LoginRiskContextEncoded extends Schema.Codec.Encoded<typeof LoginRiskContext> {
+}
+export declare const isLoginRiskContext: <I>(input: I) => input is I & LoginRiskContext;
+export interface LoginRequestContext {
+    readonly ip?: string;
+    readonly userAgent?: string;
+    readonly country?: string;
+    readonly region?: string;
+    readonly city?: string;
+    readonly latitude?: number;
+    readonly longitude?: number;
+}
+export interface LoginRiskAssessInput {
+    readonly userId: UserId;
+    readonly email?: Email;
+    readonly emailVerified?: boolean;
+    readonly method: AuthMethod;
+    readonly amr: readonly AuthMethodReference[];
+    readonly aal: AuthAssuranceLevel;
+    readonly device: LoginDeviceContext;
+    readonly request?: LoginRequestContext;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+declare const LoginRiskError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LoginRiskError";
+} & Readonly<A>;
+export declare class LoginRiskError extends LoginRiskError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface LoginRiskEngineService {
+    readonly assess: (input: LoginRiskAssessInput) => Effect.Effect<LoginRiskContext, LoginRiskError>;
+}
+declare const LoginRiskEngine_base: Context.ServiceClass<LoginRiskEngine, "auth/LoginRiskEngine", LoginRiskEngineService>;
+export declare class LoginRiskEngine extends LoginRiskEngine_base {
+}
+export declare namespace LoginRiskEngine {
+    const make: (service: LoginRiskEngineService) => LoginRiskEngineService;
+    const custom: (assess: LoginRiskEngineService["assess"]) => LoginRiskEngineService;
+}
+export declare const defaultLoginRiskContext: LoginRiskContext;
+export declare const makeLoginRiskEngineNoop: () => LoginRiskEngineService;
+export declare const LoginRiskEngineNoopLive: Layer.Layer<LoginRiskEngine, never, never>;
+export {};
+//# sourceMappingURL=LoginRisk.d.ts.map

package/dist/LoginRisk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginRisk.d.ts","sourceRoot":"","sources":["../src/LoginRisk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE7E,eAAO,MAAM,oBAAoB,4EAMtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,oBAAoB,CAAC,CAAC;;;;;;AAY7E,qBAAa,eAAgB,SAAQ,oBAMnC;CAAG;AAEL,MAAM,WAAW,sBACf,SAAQ,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,eAAe,CAAC;CAAG;AAEzD,eAAO,MAAM,iBAAiB,+CAA6B,CAAC;;;;;;AAE5D,qBAAa,gBAAiB,SAAQ,qBAMpC;IACA,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIhC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIpD,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO;CAG1C;AAED,MAAM,WAAW,uBACf,SAAQ,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,gBAAgB,CAAC;CAAG;AAE1D,eAAO,MAAM,kBAAkB,gDAA8B,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;;;;AAED,qBAAa,cAAe,SAAQ,oBAAmC;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;CACtD;;AAED,qBAAa,eAAgB,SAAQ,oBAGV;CAAG;AAE9B,yBAAiB,eAAe,CAAC;IACxB,MAAM,IAAI,GACf,SAAS,sBAAsB,KAC9B,sBAAqD,CAAC;IAElD,MAAM,MAAM,GACjB,QAAQ,sBAAsB,CAAC,QAAQ,CAAC,KACvC,sBAAwD,CAAC;CAC7D;AAED,eAAO,MAAM,uBAAuB,EAAE,gBAGpC,CAAC;AAEH,eAAO,MAAM,uBAAuB,QAAO,sBAGvC,CAAC;AAEL,eAAO,MAAM,uBAAuB,4CAGnC,CAAC"}