@effect-auth/core 0.1.0-alpha.3 → 0.1.0-alpha.5

package/dist/cloudflare/Email.js

@@ -0,0 +1,153 @@
+import { Effect, Encoding, Layer } from "effect";
+import { EmailSendError, Mailer, } from "../Mailer.js";
+const crlf = "\r\n";
+const multipartBoundary = "effect-auth-cloudflare-email-boundary";
+const textEncoder = new TextEncoder();
+const reservedHeaderNames = new Set([
+    "bcc",
+    "cc",
+    "content-transfer-encoding",
+    "content-type",
+    "from",
+    "mime-version",
+    "reply-to",
+    "subject",
+    "to",
+]);
+const sendError = (message, cause, provider = "cloudflare") => new EmailSendError({ provider, message, cause });
+const addressEmail = (address) => typeof address === "string" ? address : address.email;
+const escapeDisplayName = (name) => `"${name.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+const addressHeader = (address) => typeof address === "string"
+    ? address
+    : address.name === undefined || address.name.length === 0
+        ? address.email
+        : `${escapeDisplayName(address.name)} <${address.email}>`;
+const addressList = (address) => {
+    if (address === undefined) {
+        return [];
+    }
+    return Array.isArray(address) ? address : [address];
+};
+const uniqueStrings = (values) => [
+    ...new Set(values),
+];
+const validateHeaderName = (name, provider) => {
+    if (!/^[A-Za-z0-9-]+$/.test(name)) {
+        return Effect.fail(sendError(`Invalid email header name: ${name}`, undefined, provider));
+    }
+    if (reservedHeaderNames.has(name.toLowerCase())) {
+        return Effect.fail(sendError(`Email header is managed by CloudflareMailer: ${name}`, undefined, provider));
+    }
+    return Effect.succeed(name);
+};
+const validateHeaderValue = (value, provider) => value.includes("\r") || value.includes("\n")
+    ? Effect.fail(sendError("Email header values must not contain newlines", undefined, provider))
+    : Effect.succeed(value);
+const headerLine = (name, value, provider) => Effect.gen(function* () {
+    const safeName = yield* validateHeaderName(name, provider);
+    const safeValue = yield* validateHeaderValue(value, provider);
+    return `${safeName}: ${safeValue}`;
+});
+const systemHeaderLine = (name, value, provider) => validateHeaderValue(value, provider).pipe(Effect.map((safeValue) => `${name}: ${safeValue}`));
+const wrapBase64 = (value) => value.match(/.{1,76}/g)?.join(crlf) ?? "";
+const base64Body = (content) => wrapBase64(Encoding.encodeBase64(textEncoder.encode(content)));
+const contentPart = (contentType, content) => [
+    `Content-Type: ${contentType}; charset=utf-8`,
+    "Content-Transfer-Encoding: base64",
+    "",
+    base64Body(content),
+].join(crlf);
+const renderedBody = (message, provider) => {
+    if (message.text === undefined && message.html === undefined) {
+        return Effect.fail(sendError("Email message must include text or html content", undefined, provider));
+    }
+    if (message.text !== undefined && message.html !== undefined) {
+        return Effect.succeed([
+            [`Content-Type: multipart/alternative; boundary="${multipartBoundary}"`],
+            [
+                `--${multipartBoundary}`,
+                contentPart("text/plain", message.text),
+                `--${multipartBoundary}`,
+                contentPart("text/html", message.html),
+                `--${multipartBoundary}--`,
+                "",
+            ].join(crlf),
+        ]);
+    }
+    if (message.html !== undefined) {
+        return Effect.succeed([
+            [
+                "Content-Type: text/html; charset=utf-8",
+                "Content-Transfer-Encoding: base64",
+            ],
+            base64Body(message.html),
+        ]);
+    }
+    return Effect.succeed([
+        [
+            "Content-Type: text/plain; charset=utf-8",
+            "Content-Transfer-Encoding: base64",
+        ],
+        base64Body(message.text ?? ""),
+    ]);
+};
+const recipientHeaders = (message) => [
+    addressList(message.to).map(addressHeader).join(", "),
+    ...addressList(message.cc).map(addressHeader),
+];
+const envelopeRecipients = (message) => uniqueStrings([
+    ...addressList(message.to),
+    ...addressList(message.cc),
+    ...addressList(message.bcc),
+].map((address) => addressEmail(address)));
+export const renderCloudflareEmail = (options, message) => Effect.gen(function* () {
+    const provider = options.provider ?? "cloudflare";
+    const from = yield* validateHeaderValue(addressEmail(message.from ?? options.from), provider);
+    const recipients = [];
+    for (const recipient of envelopeRecipients(message)) {
+        recipients.push(yield* validateHeaderValue(recipient, provider));
+    }
+    if (recipients.length === 0) {
+        return yield* sendError("Email message must include at least one recipient", undefined, provider);
+    }
+    const [toHeader] = recipientHeaders(message);
+    const headers = [];
+    const [contentHeaders, body] = yield* renderedBody(message, provider);
+    headers.push(yield* systemHeaderLine("From", addressHeader(message.from ?? options.from), provider));
+    headers.push(yield* systemHeaderLine("To", toHeader, provider));
+    const cc = addressList(message.cc);
+    if (cc.length > 0) {
+        headers.push(yield* systemHeaderLine("Cc", cc.map(addressHeader).join(", "), provider));
+    }
+    if (message.replyTo !== undefined) {
+        headers.push(yield* systemHeaderLine("Reply-To", addressHeader(message.replyTo), provider));
+    }
+    headers.push(yield* systemHeaderLine("Subject", message.subject, provider));
+    headers.push("MIME-Version: 1.0");
+    headers.push(...contentHeaders);
+    for (const [name, value] of Object.entries(message.headers ?? {})) {
+        headers.push(yield* headerLine(name, value, provider));
+    }
+    return {
+        from,
+        recipients,
+        raw: `${headers.join(crlf)}${crlf}${crlf}${body}`,
+    };
+});
+export const makeCloudflareMailer = (options) => Mailer.make({
+    send: Effect.fn("auth.cloudflare_email.send")(function* (message) {
+        const rendered = yield* renderCloudflareEmail(options, message);
+        for (const recipient of rendered.recipients) {
+            const cloudflareMessage = new options.EmailMessage(rendered.from, recipient, rendered.raw);
+            yield* Effect.tryPromise({
+                try: () => Promise.resolve(options.binding.send(cloudflareMessage)),
+                catch: (cause) => sendError("Cloudflare failed to send email", cause, options.provider),
+            });
+        }
+    }),
+});
+export const CloudflareMailer = {
+    make: makeCloudflareMailer,
+    layer: (options) => Layer.succeed(Mailer, makeCloudflareMailer(options)),
+};
+//# sourceMappingURL=Email.js.map

package/dist/cloudflare/Email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Email.js","sourceRoot":"","sources":["../../src/cloudflare/Email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGjD,OAAO,EACL,cAAc,EACd,MAAM,GAIP,MAAM,cAAc,CAAC;AA2BtB,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,iBAAiB,GAAG,uCAAuC,CAAC;AAClE,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,IAAI;IACJ,2BAA2B;IAC3B,cAAc;IACd,MAAM;IACN,cAAc;IACd,UAAU;IACV,SAAS;IACT,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,KAAe,EAAE,QAAQ,GAAG,YAAY,EAAE,EAAE,CAC9E,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnD,MAAM,YAAY,GAAG,CAAC,OAAqB,EAAS,EAAE,CACpD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;AAExD,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CACjD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AAE9D,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAU,EAAE,CACtD,OAAO,OAAO,KAAK,QAAQ;IACzB,CAAC,CAAC,OAAO;IACT,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACvD,CAAC,CAAC,OAAO,CAAC,KAAK;QACf,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC;AAEhE,MAAM,WAAW,GAAG,CAClB,OAA2D,EAClC,EAAE;IAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAuB,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,MAAyB,EAAqB,EAAE,CAAC;IACtE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,QAAgB,EACuB,EAAE;IACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CAAC,8BAA8B,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CACP,gDAAgD,IAAI,EAAE,EACtD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,+CAA+C,EAC/C,SAAS,EACT,QAAQ,CACT,CACF;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5B,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE9D,OAAO,GAAG,QAAQ,KAAK,SAAS,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CACvB,IAAY,EACZ,KAAa,EACb,QAAgB,EACuB,EAAE,CACzC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,SAAS,EAAE,CAAC,CACnD,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAE5C,MAAM,UAAU,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7C,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,OAAe,EAAU,EAAE,CACnE;IACE,iBAAiB,WAAW,iBAAiB;IAC7C,mCAAmC;IACnC,EAAE;IACF,UAAU,CAAC,OAAO,CAAC;CACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,YAAY,GAAG,CACnB,OAAyB,EACzB,QAAgB,EAIhB,EAAE;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAI,CAChB,SAAS,CACP,iDAAiD,EACjD,SAAS,EACT,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,kDAAkD,iBAAiB,GAAG,CAAC;YACxE;gBACE,KAAK,iBAAiB,EAAE;gBACxB,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;gBACvC,KAAK,iBAAiB,EAAE;gBACxB,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;gBACtC,KAAK,iBAAiB,IAAI;gBAC1B,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,OAAO,CAAC;YACpB;gBACE,wCAAwC;gBACxC,mCAAmC;aACpC;YACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB;YACE,yCAAyC;YACzC,mCAAmC;SACpC;QACD,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,OAAyB,EAAqB,EAAE,CAAC;IACzE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrD,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;CAC9C,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAyB,EAAqB,EAAE,CAC1E,aAAa,CACX;IACE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5B,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAC1C,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,OAAyC,EACzC,OAAyB,EAC+B,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACrC,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAC1C,QAAQ,CACT,CAAC;IACF,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,mDAAmD,EACnD,SAAS,EACT,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEtE,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,MAAM,EACN,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAC3C,QAAQ,CACT,CACF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEhE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEnC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,IAAI,EACJ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAChC,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,gBAAgB,CACrB,UAAU,EACV,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAC9B,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO;QACL,IAAI;QACJ,UAAU;QACV,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE;KAClD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAyC,EAC1B,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC;IACV,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EACrD,OAAyB;QAEzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEhE,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC,YAAY,CAChD,QAAQ,CAAC,IAAI,EACb,SAAS,EACT,QAAQ,CAAC,GAAG,CACb,CAAC;YAEF,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACnE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,SAAS,CACP,iCAAiC,EACjC,KAAK,EACL,OAAO,CAAC,QAAQ,CACjB;aACJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,CAAU,OAAyC,EAAE,EAAE,CAC5D,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;CAC9C,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export declare const packageName: "@effect-auth/core";
+export * from "./ApiKey.js";
 export * from "./AuditLog.js";
 export * from "./AuthConfig.js";
 export * from "./AuthFlow.js";
@@ -8,11 +9,24 @@ export * from "./Crypto.js";
 export * from "./EmailOtp.js";
 export * from "./EmailVerification.js";
 export * from "./Identifiers.js";
+export * from "./Jwt.js";
+export * from "./LoginApproval.js";
+export * from "./LoginNotification.js";
+export * from "./LoginRisk.js";
 export * from "./Mailer.js";
+export * from "./MagicLink.js";
+export * from "./OAuth.js";
 export * from "./Password.js";
+export * from "./Passkey.js";
 export * from "./Policy.js";
 export * from "./Privacy.js";
+export * from "./RecoveryCode.js";
+export * from "./RefreshToken.js";
 export * from "./Sessions.js";
 export * from "./Storage.js";
+export * from "./StepUp.js";
+export * from "./Totp.js";
+export * from "./TrustedDevice.js";
 export * from "./WaitUntil.js";
+export * from "./Webhook.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAC;AAExD,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export const packageName = "@effect-auth/core";
+export * from "./ApiKey.js";
 export * from "./AuditLog.js";
 export * from "./AuthConfig.js";
 export * from "./AuthFlow.js";
@@ -8,11 +9,24 @@ export * from "./Crypto.js";
 export * from "./EmailOtp.js";
 export * from "./EmailVerification.js";
 export * from "./Identifiers.js";
+export * from "./Jwt.js";
+export * from "./LoginApproval.js";
+export * from "./LoginNotification.js";
+export * from "./LoginRisk.js";
 export * from "./Mailer.js";
+export * from "./MagicLink.js";
+export * from "./OAuth.js";
 export * from "./Password.js";
+export * from "./Passkey.js";
 export * from "./Policy.js";
 export * from "./Privacy.js";
+export * from "./RecoveryCode.js";
+export * from "./RefreshToken.js";
 export * from "./Sessions.js";
 export * from "./Storage.js";
+export * from "./StepUp.js";
+export * from "./Totp.js";
+export * from "./TrustedDevice.js";
 export * from "./WaitUntil.js";
+export * from "./Webhook.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/migrations/0003_auth_login_approval_review.sql

@@ -0,0 +1,22 @@
+create table if not exists auth_login_approval_review (
+  approval_challenge_id text primary key,
+  flow_id text not null,
+  user_id text not null,
+  channel text not null,
+  reason text not null,
+  session_binding text not null,
+  same_device_required integer not null,
+  status text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  reviewed_at integer,
+  reviewed_by text,
+  denied_reason text,
+  risk text,
+  metadata text,
+  review_metadata text
+);
+
+create index if not exists auth_login_approval_review_flow_id_idx on auth_login_approval_review (flow_id);
+create index if not exists auth_login_approval_review_user_id_idx on auth_login_approval_review (user_id);
+create index if not exists auth_login_approval_review_status_expires_at_idx on auth_login_approval_review (status, expires_at);

package/migrations/0004_auth_trusted_device.sql

@@ -0,0 +1,12 @@
+create table if not exists auth_trusted_device (
+  user_id text not null,
+  token_hash text not null,
+  created_at integer not null,
+  last_seen_at integer not null,
+  expires_at integer not null,
+  metadata text,
+  primary key (user_id, token_hash)
+);
+
+create index if not exists auth_trusted_device_user_id_idx on auth_trusted_device (user_id);
+create index if not exists auth_trusted_device_expires_at_idx on auth_trusted_device (expires_at);

package/migrations/0005_auth_passkey.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_passkey_credential (
+  id text primary key,
+  user_id text not null,
+  credential_id text not null,
+  public_key text not null,
+  sign_count integer not null,
+  transports text,
+  backed_up integer,
+  created_at integer not null,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_passkey_credential_credential_id_idx on auth_passkey_credential (credential_id);
+create index if not exists auth_passkey_credential_user_id_idx on auth_passkey_credential (user_id);
+create index if not exists auth_passkey_credential_revoked_at_idx on auth_passkey_credential (revoked_at);

package/migrations/0006_auth_totp_factor.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_totp_factor (
+  id text primary key,
+  user_id text not null,
+  secret text not null,
+  algorithm text not null,
+  digits integer not null,
+  period integer not null,
+  created_at integer not null,
+  confirmed_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_totp_factor_user_id_idx on auth_totp_factor (user_id);
+create index if not exists auth_totp_factor_confirmed_at_idx on auth_totp_factor (confirmed_at);
+create index if not exists auth_totp_factor_revoked_at_idx on auth_totp_factor (revoked_at);

package/migrations/0007_auth_recovery_code.sql

@@ -0,0 +1,13 @@
+create table if not exists auth_recovery_code (
+  id text primary key,
+  user_id text not null,
+  code_hash text not null,
+  created_at integer not null,
+  used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_recovery_code_user_id_idx on auth_recovery_code (user_id);
+create index if not exists auth_recovery_code_used_at_idx on auth_recovery_code (used_at);
+create index if not exists auth_recovery_code_revoked_at_idx on auth_recovery_code (revoked_at);

package/migrations/0008_auth_api_key.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_api_key (
+  id text primary key,
+  user_id text not null,
+  prefix text not null,
+  secret_hash text not null,
+  scopes text not null,
+  created_at integer not null,
+  expires_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_api_key_prefix_idx on auth_api_key (prefix);
+create index if not exists auth_api_key_user_id_idx on auth_api_key (user_id);
+create index if not exists auth_api_key_expires_at_idx on auth_api_key (expires_at);
+create index if not exists auth_api_key_revoked_at_idx on auth_api_key (revoked_at);

package/migrations/0009_auth_refresh_token.sql

@@ -0,0 +1,21 @@
+create table if not exists auth_refresh_token (
+  id text primary key,
+  family_id text not null,
+  user_id text not null,
+  secret_hash text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  last_used_at integer,
+  rotated_at integer,
+  replaced_by_id text,
+  revoked_at integer,
+  reuse_detected_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_refresh_token_secret_hash_idx on auth_refresh_token (secret_hash);
+create index if not exists auth_refresh_token_family_id_idx on auth_refresh_token (family_id);
+create index if not exists auth_refresh_token_user_id_idx on auth_refresh_token (user_id);
+create index if not exists auth_refresh_token_expires_at_idx on auth_refresh_token (expires_at);
+create index if not exists auth_refresh_token_rotated_at_idx on auth_refresh_token (rotated_at);
+create index if not exists auth_refresh_token_revoked_at_idx on auth_refresh_token (revoked_at);

package/migrations/0010_auth_jwt_revocation.sql

@@ -0,0 +1,8 @@
+create table if not exists auth_jwt_revocation (
+  jwt_id text primary key,
+  revoked_at integer not null,
+  expires_at integer,
+  reason text
+);
+
+create index if not exists auth_jwt_revocation_expires_at_idx on auth_jwt_revocation (expires_at);

package/migrations/0011_auth_oauth_account.sql

@@ -0,0 +1,16 @@
+create table if not exists auth_oauth_account (
+  id text primary key,
+  provider_id text not null,
+  provider_account_id text not null,
+  user_id text not null,
+  email text,
+  email_verified integer,
+  created_at integer not null,
+  updated_at integer not null,
+  unlinked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_oauth_account_provider_account_idx on auth_oauth_account (provider_id, provider_account_id);
+create index if not exists auth_oauth_account_user_id_idx on auth_oauth_account (user_id);
+create index if not exists auth_oauth_account_unlinked_at_idx on auth_oauth_account (unlinked_at);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@effect-auth/core",
-  "version": "0.1.0-alpha.3",
+  "version": "0.1.0-alpha.5",
   "description": "Composable Effect-first authentication primitives.",
   "license": "MIT",
   "files": [
@@ -17,6 +17,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./ApiKey": {
+      "types": "./dist/ApiKey.d.ts",
+      "default": "./dist/ApiKey.js"
+    },
     "./AuditLog": {
       "types": "./dist/AuditLog.d.ts",
       "default": "./dist/AuditLog.js"
@@ -41,10 +45,18 @@
       "types": "./dist/alchemy/cloudflare/RateLimitDurableObject.d.ts",
       "default": "./dist/alchemy/cloudflare/RateLimitDurableObject.js"
     },
+    "./AlchemyCloudflareEmail": {
+      "types": "./dist/alchemy/cloudflare/Email.d.ts",
+      "default": "./dist/alchemy/cloudflare/Email.js"
+    },
     "./CloudflareRateLimitDurableObject": {
       "types": "./dist/cloudflare/RateLimitDurableObject.d.ts",
       "default": "./dist/cloudflare/RateLimitDurableObject.js"
     },
+    "./CloudflareEmail": {
+      "types": "./dist/cloudflare/Email.d.ts",
+      "default": "./dist/cloudflare/Email.js"
+    },
     "./Client": {
       "types": "./dist/Client.d.ts",
       "default": "./dist/Client.js"
@@ -73,10 +85,30 @@
       "types": "./dist/WaitUntil.d.ts",
       "default": "./dist/WaitUntil.js"
     },
+    "./Webhook": {
+      "types": "./dist/Webhook.d.ts",
+      "default": "./dist/Webhook.js"
+    },
     "./Identifiers": {
       "types": "./dist/Identifiers.d.ts",
       "default": "./dist/Identifiers.js"
     },
+    "./LoginApproval": {
+      "types": "./dist/LoginApproval.d.ts",
+      "default": "./dist/LoginApproval.js"
+    },
+    "./LoginNotification": {
+      "types": "./dist/LoginNotification.d.ts",
+      "default": "./dist/LoginNotification.js"
+    },
+    "./LoginRisk": {
+      "types": "./dist/LoginRisk.d.ts",
+      "default": "./dist/LoginRisk.js"
+    },
+    "./Jwt": {
+      "types": "./dist/Jwt.d.ts",
+      "default": "./dist/Jwt.js"
+    },
     "./HttpApi": {
       "types": "./dist/HttpApi.d.ts",
       "default": "./dist/HttpApi.js"
@@ -85,6 +117,14 @@
       "types": "./dist/Mailer.d.ts",
       "default": "./dist/Mailer.js"
     },
+    "./MagicLink": {
+      "types": "./dist/MagicLink.d.ts",
+      "default": "./dist/MagicLink.js"
+    },
+    "./OAuth": {
+      "types": "./dist/OAuth.d.ts",
+      "default": "./dist/OAuth.js"
+    },
     "./Policy": {
       "types": "./dist/Policy.d.ts",
       "default": "./dist/Policy.js"
@@ -97,6 +137,14 @@
       "types": "./dist/RateLimiter.d.ts",
       "default": "./dist/RateLimiter.js"
     },
+    "./RecoveryCode": {
+      "types": "./dist/RecoveryCode.d.ts",
+      "default": "./dist/RecoveryCode.js"
+    },
+    "./RefreshToken": {
+      "types": "./dist/RefreshToken.d.ts",
+      "default": "./dist/RefreshToken.js"
+    },
     "./KyselyStorage": {
       "types": "./dist/KyselyStorage.d.ts",
       "default": "./dist/KyselyStorage.js"
@@ -105,6 +153,10 @@
       "types": "./dist/Password.d.ts",
       "default": "./dist/Password.js"
     },
+    "./Passkey": {
+      "types": "./dist/Passkey.d.ts",
+      "default": "./dist/Passkey.js"
+    },
     "./Sessions": {
       "types": "./dist/Sessions.d.ts",
       "default": "./dist/Sessions.js"
@@ -113,6 +165,10 @@
       "types": "./dist/Storage.d.ts",
       "default": "./dist/Storage.js"
     },
+    "./StepUp": {
+      "types": "./dist/StepUp.d.ts",
+      "default": "./dist/StepUp.js"
+    },
     "./StorageMigrations": {
       "types": "./dist/StorageMigrations.d.ts",
       "default": "./dist/StorageMigrations.js"
@@ -121,6 +177,14 @@
       "types": "./dist/Testing.d.ts",
       "default": "./dist/Testing.js"
     },
+    "./Totp": {
+      "types": "./dist/Totp.d.ts",
+      "default": "./dist/Totp.js"
+    },
+    "./TrustedDevice": {
+      "types": "./dist/TrustedDevice.d.ts",
+      "default": "./dist/TrustedDevice.js"
+    },
     "./package.json": {
       "default": "./package.json"
     }