@gaganref/confect-server 10.3.1-fork.68 → 10.3.1-fork.69

package/dist/Auth.d.ts

@@ -1,14 +1,31 @@
-import type { Auth as ConvexAuth, MutationAuth as ConvexMutationAuth, SignJwtOptions } from "convex/server";
+import type { Auth as ConvexAuth, MutationAuth as ConvexMutationAuth, SignJwtOptions, UserIdentity } from "convex/server";
 import * as Context from "effect/Context";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
 import * as Schema from "effect/Schema";
 import type * as DatabaseSchema from "./DatabaseSchema.js";
 declare const Auth_base: Context.ServiceClass<Auth, "@confect/server/Auth", {
-    getUserIdentity: Effect.Effect<import("convex/server").UserIdentity, NoUserIdentityFoundError, never>;
+    getUserIdentity: Effect.Effect<UserIdentity, NoUserIdentityFoundError, never>;
 }>;
 export declare class Auth extends Auth_base {
 }
+/**
+ * The outcome of Convex's identity verification for the current request.
+ */
+export type Identity = {
+    readonly _tag: "Absent";
+} | {
+    readonly _tag: "Valid";
+    readonly identity: UserIdentity;
+} | {
+    readonly _tag: "Invalid";
+};
+/**
+ * Read HTTP identity without failing for missing or rejected credentials.
+ * Convex verifies the credential. Rejected reads expose no token or error
+ * detail.
+ */
+export declare const getUserIdentity: Effect.Effect<Identity, never, Auth>;
 export declare const layer: (auth: ConvexAuth) => Layer.Layer<Auth, never, never>;
 declare const MutationAuth_base: Context.ServiceClass<MutationAuth, "@confect/server/Auth/MutationAuth", {
     readonly signJwt: (options: SignJwtOptions) => Effect.Effect<string>;

package/dist/Auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../src/Auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,IAAI,UAAU,EAClB,YAAY,IAAI,kBAAkB,EAClC,cAAc,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,cAAc,MAAM,qBAAqB,CAAC;;;;AAgB3D,qBAAa,IAAK,SAAQ,SAEzB;CAAG;AAEJ,eAAO,MAAM,KAAK,SAAU,UAAU,oCAAoC,CAAC;;sBAQrD,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;;AANxE;;GAEG;AACH,qBAAa,YAAa,SAAQ,iBAKM;CAAG;AAE3C;;GAEG;AACH,eAAO,MAAM,aAAa,SAAU,kBAAkB,4CAGlD,CAAC;AAEL,MAAM,MAAM,SAAS,CAAC,MAAM,SAAS,cAAc,CAAC,MAAM,IACxD,MAAM,CAAC,MAAM,CAAC,SAAS,WAAW,GAAG,KAAK,GAAG,IAAI,CAAC;AAEpD,eAAO,MAAM,cAAc,GAAI,MAAM,SAAS,cAAc,CAAC,MAAM,UACzD,MAAM,QACR,UAAU,KACf,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAKK,CAAC;;AAEtC,qBAAa,wBAAyB,SAAQ,6BAG7C;IACC,IAAa,OAAO,IAAI,MAAM,CAE7B;CACF"}
+{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../src/Auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,IAAI,UAAU,EAClB,YAAY,IAAI,kBAAkB,EAClC,cAAc,EACd,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,cAAc,MAAM,qBAAqB,CAAC;;;;AAgB3D,qBAAa,IAAK,SAAQ,SAEzB;CAAG;AAEJ;;GAEG;AACH,MAAM,MAAM,QAAQ,GAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAUhE,CAAC;AAEF,eAAO,MAAM,KAAK,SAAU,UAAU,oCAAoC,CAAC;;sBAQrD,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;;AANxE;;GAEG;AACH,qBAAa,YAAa,SAAQ,iBAKM;CAAG;AAE3C;;GAEG;AACH,eAAO,MAAM,aAAa,SAAU,kBAAkB,4CAGlD,CAAC;AAEL,MAAM,MAAM,SAAS,CAAC,MAAM,SAAS,cAAc,CAAC,MAAM,IACxD,MAAM,CAAC,MAAM,CAAC,SAAS,WAAW,GAAG,KAAK,GAAG,IAAI,CAAC;AAEpD,eAAO,MAAM,cAAc,GAAI,MAAM,SAAS,cAAc,CAAC,MAAM,UACzD,MAAM,QACR,UAAU,KACf,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAKK,CAAC;;AAEtC,qBAAa,wBAAyB,SAAQ,6BAG7C;IACC,IAAa,OAAO,IAAI,MAAM,CAE7B;CACF"}

package/dist/Auth.js

@@ -11,6 +11,7 @@ var Auth_exports = /* @__PURE__ */ __exportAll({
 	Auth: () => Auth,
 	MutationAuth: () => MutationAuth,
 	NoUserIdentityFoundError: () => NoUserIdentityFoundError,
+	getUserIdentity: () => getUserIdentity,
 	layer: () => layer,
 	layerForTarget: () => layerForTarget,
 	mutationLayer: () => mutationLayer
@@ -20,6 +21,15 @@ const make = (auth) => ({ getUserIdentity: Effect.promise(() => auth.getUserIden
 	onSome: Effect.succeed
 })))) });
 var Auth = class extends Context.Service()("@confect/server/Auth") {};
+/**
+* Read HTTP identity without failing for missing or rejected credentials.
+* Convex verifies the credential. Rejected reads expose no token or error
+* detail.
+*/
+const getUserIdentity = Auth.pipe(Effect.flatMap((auth) => auth.getUserIdentity.pipe(Effect.map((identity) => ({
+	_tag: "Valid",
+	identity
+})), Effect.catchTag("NoUserIdentityFoundError", () => Effect.succeed({ _tag: "Absent" })), Effect.catchDefect(() => Effect.succeed({ _tag: "Invalid" })))));
 const layer = (auth) => Layer.succeed(Auth, make(auth));
 /**
 * Mutation-only deployment signing, available in applications and components.
@@ -36,6 +46,6 @@ var NoUserIdentityFoundError = class extends Schema.TaggedError()("NoUserIdentit
 	}
 };
 //#endregion
-export { Auth, Auth_exports, MutationAuth, NoUserIdentityFoundError, layer, layerForTarget, mutationLayer };
+export { Auth, Auth_exports, MutationAuth, NoUserIdentityFoundError, getUserIdentity, layer, layerForTarget, mutationLayer };
 
 //# sourceMappingURL=Auth.js.map

package/dist/Auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.js","names":[],"sources":["../src/Auth.ts"],"sourcesContent":["import type {\n  Auth as ConvexAuth,\n  MutationAuth as ConvexMutationAuth,\n  SignJwtOptions,\n} from \"convex/server\";\nimport * as Context from \"effect/Context\";\nimport { flow } from \"effect/Function\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Match from \"effect/Match\";\nimport * as Option from \"effect/Option\";\nimport * as Schema from \"effect/Schema\";\nimport type * as DatabaseSchema from \"./DatabaseSchema.js\";\n\nconst make = (auth: ConvexAuth) => ({\n  getUserIdentity: Effect.promise(() => auth.getUserIdentity()).pipe(\n    Effect.andThen(\n      flow(\n        Option.fromNullishOr,\n        Option.match({\n          onNone: () => Effect.fail(new NoUserIdentityFoundError()),\n          onSome: Effect.succeed,\n        }),\n      ),\n    ),\n  ),\n});\n\nexport class Auth extends Context.Service<Auth, ReturnType<typeof make>>()(\n  \"@confect/server/Auth\",\n) {}\n\nexport const layer = (auth: ConvexAuth) => Layer.succeed(Auth, make(auth));\n\n/**\n * Mutation-only deployment signing, available in applications and components.\n */\nexport class MutationAuth extends Context.Service<\n  MutationAuth,\n  {\n    readonly signJwt: (options: SignJwtOptions) => Effect.Effect<string>;\n  }\n>()(\"@confect/server/Auth/MutationAuth\") {}\n\n/**\n * SDK rejections remain defects, as with the other native auth operations.\n */\nexport const mutationLayer = (auth: ConvexMutationAuth) =>\n  Layer.succeed(MutationAuth, {\n    signJwt: (options) => Effect.promise(() => auth.signJwt(options)),\n  });\n\nexport type ForTarget<Target extends DatabaseSchema.Target> =\n  Target[\"kind\"] extends \"component\" ? never : Auth;\n\nexport const layerForTarget = <Target extends DatabaseSchema.Target>(\n  target: Target,\n  auth: ConvexAuth,\n): Layer.Layer<ForTarget<Target>> =>\n  Match.value(target.kind).pipe(\n    Match.when(\"app\", () => layer(auth)),\n    Match.when(\"component\", () => Layer.empty),\n    Match.exhaustive,\n  ) as Layer.Layer<ForTarget<Target>>;\n\nexport class NoUserIdentityFoundError extends Schema.TaggedError<NoUserIdentityFoundError>()(\n  \"NoUserIdentityFoundError\",\n  {},\n) {\n  override get message(): string {\n    return \"No user identity found\";\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAcA,MAAM,QAAQ,UAAsB,EAClC,iBAAiB,OAAO,cAAc,KAAK,gBAAgB,CAAC,CAAC,CAAC,KAC5D,OAAO,QACL,KACE,OAAO,eACP,OAAO,MAAM;CACX,cAAc,OAAO,KAAK,IAAI,yBAAyB,CAAC;CACxD,QAAQ,OAAO;AACjB,CAAC,CACH,CACF,CACF,EACF;AAEA,IAAa,OAAb,cAA0B,QAAQ,QAAuC,CAAC,CACxE,sBACF,CAAC,CAAC,CAAC;AAEH,MAAa,SAAS,SAAqB,MAAM,QAAQ,MAAM,KAAK,IAAI,CAAC;;;;AAKzE,IAAa,eAAb,cAAkC,QAAQ,QAKxC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;;;;AAK1C,MAAa,iBAAiB,SAC5B,MAAM,QAAQ,cAAc,EAC1B,UAAU,YAAY,OAAO,cAAc,KAAK,QAAQ,OAAO,CAAC,EAClE,CAAC;AAKH,MAAa,kBACX,QACA,SAEA,MAAM,MAAM,OAAO,IAAI,CAAC,CAAC,KACvB,MAAM,KAAK,aAAa,MAAM,IAAI,CAAC,GACnC,MAAM,KAAK,mBAAmB,MAAM,KAAK,GACzC,MAAM,UACR;AAEF,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA,CAAC,CACH,CAAC,CAAC;CACA,IAAa,UAAkB;EAC7B,OAAO;CACT;AACF"}
+{"version":3,"file":"Auth.js","names":[],"sources":["../src/Auth.ts"],"sourcesContent":["import type {\n  Auth as ConvexAuth,\n  MutationAuth as ConvexMutationAuth,\n  SignJwtOptions,\n  UserIdentity,\n} from \"convex/server\";\nimport * as Context from \"effect/Context\";\nimport { flow } from \"effect/Function\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Match from \"effect/Match\";\nimport * as Option from \"effect/Option\";\nimport * as Schema from \"effect/Schema\";\nimport type * as DatabaseSchema from \"./DatabaseSchema.js\";\n\nconst make = (auth: ConvexAuth) => ({\n  getUserIdentity: Effect.promise(() => auth.getUserIdentity()).pipe(\n    Effect.andThen(\n      flow(\n        Option.fromNullishOr,\n        Option.match({\n          onNone: () => Effect.fail(new NoUserIdentityFoundError()),\n          onSome: Effect.succeed,\n        }),\n      ),\n    ),\n  ),\n});\n\nexport class Auth extends Context.Service<Auth, ReturnType<typeof make>>()(\n  \"@confect/server/Auth\",\n) {}\n\n/**\n * The outcome of Convex's identity verification for the current request.\n */\nexport type Identity =\n  | { readonly _tag: \"Absent\" }\n  | { readonly _tag: \"Valid\"; readonly identity: UserIdentity }\n  | { readonly _tag: \"Invalid\" };\n\n/**\n * Read HTTP identity without failing for missing or rejected credentials.\n * Convex verifies the credential. Rejected reads expose no token or error\n * detail.\n */\nexport const getUserIdentity: Effect.Effect<Identity, never, Auth> = Auth.pipe(\n  Effect.flatMap((auth) =>\n    auth.getUserIdentity.pipe(\n      Effect.map((identity): Identity => ({ _tag: \"Valid\", identity })),\n      Effect.catchTag(\"NoUserIdentityFoundError\", () =>\n        Effect.succeed<Identity>({ _tag: \"Absent\" }),\n      ),\n      Effect.catchDefect(() => Effect.succeed<Identity>({ _tag: \"Invalid\" })),\n    ),\n  ),\n);\n\nexport const layer = (auth: ConvexAuth) => Layer.succeed(Auth, make(auth));\n\n/**\n * Mutation-only deployment signing, available in applications and components.\n */\nexport class MutationAuth extends Context.Service<\n  MutationAuth,\n  {\n    readonly signJwt: (options: SignJwtOptions) => Effect.Effect<string>;\n  }\n>()(\"@confect/server/Auth/MutationAuth\") {}\n\n/**\n * SDK rejections remain defects, as with the other native auth operations.\n */\nexport const mutationLayer = (auth: ConvexMutationAuth) =>\n  Layer.succeed(MutationAuth, {\n    signJwt: (options) => Effect.promise(() => auth.signJwt(options)),\n  });\n\nexport type ForTarget<Target extends DatabaseSchema.Target> =\n  Target[\"kind\"] extends \"component\" ? never : Auth;\n\nexport const layerForTarget = <Target extends DatabaseSchema.Target>(\n  target: Target,\n  auth: ConvexAuth,\n): Layer.Layer<ForTarget<Target>> =>\n  Match.value(target.kind).pipe(\n    Match.when(\"app\", () => layer(auth)),\n    Match.when(\"component\", () => Layer.empty),\n    Match.exhaustive,\n  ) as Layer.Layer<ForTarget<Target>>;\n\nexport class NoUserIdentityFoundError extends Schema.TaggedError<NoUserIdentityFoundError>()(\n  \"NoUserIdentityFoundError\",\n  {},\n) {\n  override get message(): string {\n    return \"No user identity found\";\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAeA,MAAM,QAAQ,UAAsB,EAClC,iBAAiB,OAAO,cAAc,KAAK,gBAAgB,CAAC,CAAC,CAAC,KAC5D,OAAO,QACL,KACE,OAAO,eACP,OAAO,MAAM;CACX,cAAc,OAAO,KAAK,IAAI,yBAAyB,CAAC;CACxD,QAAQ,OAAO;AACjB,CAAC,CACH,CACF,CACF,EACF;AAEA,IAAa,OAAb,cAA0B,QAAQ,QAAuC,CAAC,CACxE,sBACF,CAAC,CAAC,CAAC;;;;;;AAeH,MAAa,kBAAwD,KAAK,KACxE,OAAO,SAAS,SACd,KAAK,gBAAgB,KACnB,OAAO,KAAK,cAAwB;CAAE,MAAM;CAAS;AAAS,EAAE,GAChE,OAAO,SAAS,kCACd,OAAO,QAAkB,EAAE,MAAM,SAAS,CAAC,CAC7C,GACA,OAAO,kBAAkB,OAAO,QAAkB,EAAE,MAAM,UAAU,CAAC,CAAC,CACxE,CACF,CACF;AAEA,MAAa,SAAS,SAAqB,MAAM,QAAQ,MAAM,KAAK,IAAI,CAAC;;;;AAKzE,IAAa,eAAb,cAAkC,QAAQ,QAKxC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;;;;AAK1C,MAAa,iBAAiB,SAC5B,MAAM,QAAQ,cAAc,EAC1B,UAAU,YAAY,OAAO,cAAc,KAAK,QAAQ,OAAO,CAAC,EAClE,CAAC;AAKH,MAAa,kBACX,QACA,SAEA,MAAM,MAAM,OAAO,IAAI,CAAC,CAAC,KACvB,MAAM,KAAK,aAAa,MAAM,IAAI,CAAC,GACnC,MAAM,KAAK,mBAAmB,MAAM,KAAK,GACzC,MAAM,UACR;AAEF,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA,CAAC,CACH,CAAC,CAAC;CACA,IAAa,UAAkB;EAC7B,OAAO;CACT;AACF"}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@gaganref/confect-server",
-  "version": "10.3.1-fork.68",
+  "version": "10.3.1-fork.69",
   "dependencies": {
     "@effect/ai-openai-compat": "4.0.4",
     "@effect/ai-openrouter": "4.0.4"
   },
   "peerDependencies": {
-    "@confect/core": "npm:@gaganref/confect-core@10.3.1-fork.68",
+    "@confect/core": "npm:@gaganref/confect-core@10.3.1-fork.69",
     "@effect/platform-node": ">=4.0.0 <4.1.0",
     "convex": "^1.49.0",
     "effect": ">=4.0.4 <4.1.0"

package/src/Auth.ts

@@ -2,6 +2,7 @@ import type {
   Auth as ConvexAuth,
   MutationAuth as ConvexMutationAuth,
   SignJwtOptions,
+  UserIdentity,
 } from "convex/server";
 import * as Context from "effect/Context";
 import { flow } from "effect/Function";
@@ -30,6 +31,31 @@ export class Auth extends Context.Service<Auth, ReturnType<typeof make>>()(
   "@confect/server/Auth",
 ) {}
 
+/**
+ * The outcome of Convex's identity verification for the current request.
+ */
+export type Identity =
+  | { readonly _tag: "Absent" }
+  | { readonly _tag: "Valid"; readonly identity: UserIdentity }
+  | { readonly _tag: "Invalid" };
+
+/**
+ * Read HTTP identity without failing for missing or rejected credentials.
+ * Convex verifies the credential. Rejected reads expose no token or error
+ * detail.
+ */
+export const getUserIdentity: Effect.Effect<Identity, never, Auth> = Auth.pipe(
+  Effect.flatMap((auth) =>
+    auth.getUserIdentity.pipe(
+      Effect.map((identity): Identity => ({ _tag: "Valid", identity })),
+      Effect.catchTag("NoUserIdentityFoundError", () =>
+        Effect.succeed<Identity>({ _tag: "Absent" }),
+      ),
+      Effect.catchDefect(() => Effect.succeed<Identity>({ _tag: "Invalid" })),
+    ),
+  ),
+);
+
 export const layer = (auth: ConvexAuth) => Layer.succeed(Auth, make(auth));
 
 /**