@passlock/node 2.0.1 → 2.0.3

package/dist/network.d.ts

@@ -0,0 +1,134 @@
+import { Context, Effect, Layer } from "effect";
+/**
+ * Supported HTTP methods accepted by {@link fetchNetwork}.
+ */
+export type NetworkMethod = "get" | "post" | "delete" | "patch";
+/**
+ * Lightweight response model used by this package.
+ *
+ * Invariants:
+ * - `json` is lazy: parsing only happens when the effect is run.
+ * - `json` is memoized per response wrapper, so repeated evaluation does not
+ *   parse the same payload multiple times.
+ */
+export interface NetworkResponse {
+    readonly status: number;
+    readonly statusText: string;
+    readonly statusMessage: string;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly json: Effect.Effect<unknown, NetworkResponseError>;
+}
+/**
+ * Accepted request header input formats.
+ */
+export type NetworkHeaders = Headers | Readonly<Record<string, string>> | Array<[string, string]>;
+/**
+ * Optional request options for {@link fetchNetwork}.
+ */
+export interface FetchNetworkOptions {
+    readonly headers?: NetworkHeaders;
+}
+declare const NetworkFetch_base: Context.TagClass<NetworkFetch, "@passlock/node/network/Fetch", typeof fetch>;
+/**
+ * Effect service tag for the fetch implementation.
+ *
+ * Supply this service with `Effect.provide` / layers to swap fetch behavior
+ * in tests or alternate runtimes.
+ */
+export declare class NetworkFetch extends NetworkFetch_base {
+}
+/**
+ * Default live fetch layer backed by `globalThis.fetch`.
+ */
+export declare const NetworkFetchLive: Layer.Layer<NetworkFetch>;
+/**
+ * HTTP status buckets used by {@link matchStatus}.
+ */
+export type NetworkResponseStatusCase = "2xx" | "3xx" | "4xx" | "5xx";
+type MatchStatusHandler<Resp extends NetworkResponse = NetworkResponse, A = unknown, E = unknown> = (response: Resp) => Effect.Effect<A, E, never>;
+type HandlerEffect<Cases extends MatchStatusCases<Resp>, Resp extends NetworkResponse, Case extends NetworkResponseStatusCase | "orElse"> = Case extends keyof Cases ? NonNullable<Cases[Case]> extends MatchStatusHandler<Resp> ? ReturnType<NonNullable<Cases[Case]>> : never : never;
+type MatchStatusEffectUnion<Cases extends MatchStatusCases<Resp>, Resp extends NetworkResponse> = HandlerEffect<Cases, Resp, "2xx"> | HandlerEffect<Cases, Resp, "3xx"> | HandlerEffect<Cases, Resp, "4xx"> | HandlerEffect<Cases, Resp, "5xx"> | HandlerEffect<Cases, Resp, "orElse">;
+type EffectSuccess<T> = T extends Effect.Effect<infer A, unknown, unknown> ? A : never;
+type EffectError<T> = T extends Effect.Effect<unknown, infer E, unknown> ? E : never;
+type EffectContext<T> = T extends Effect.Effect<unknown, unknown, infer R> ? R : never;
+/**
+ * Handlers used by {@link matchStatus}.
+ *
+ * Invariants:
+ * - `orElse` is always required.
+ * - Specific status family handlers are optional and fall back to `orElse`
+ *   when missing.
+ */
+export interface MatchStatusCases<Resp extends NetworkResponse = NetworkResponse> {
+    readonly "2xx"?: MatchStatusHandler<Resp>;
+    readonly "3xx"?: MatchStatusHandler<Resp>;
+    readonly "4xx"?: MatchStatusHandler<Resp>;
+    readonly "5xx"?: MatchStatusHandler<Resp>;
+    readonly orElse: MatchStatusHandler<Resp>;
+}
+declare const NetworkRequestError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").Equals<A, {}> extends true ? void : { readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }) => import("effect/Cause").YieldableError & {
+    readonly _tag: "@error/NetworkRequest";
+} & Readonly<A>;
+/**
+ * Raised when the underlying fetch call fails before a response is received.
+ */
+export declare class NetworkRequestError extends NetworkRequestError_base<{
+    readonly method: NetworkMethod;
+    readonly url: string;
+    readonly message: string;
+}> {
+}
+declare const NetworkPayloadError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").Equals<A, {}> extends true ? void : { readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }) => import("effect/Cause").YieldableError & {
+    readonly _tag: "@error/NetworkPayload";
+} & Readonly<A>;
+/**
+ * Raised when request payload serialization fails.
+ */
+export declare class NetworkPayloadError extends NetworkPayloadError_base<{
+    readonly method: NetworkMethod;
+    readonly message: string;
+}> {
+}
+declare const NetworkResponseError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").Equals<A, {}> extends true ? void : { readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }) => import("effect/Cause").YieldableError & {
+    readonly _tag: "@error/NetworkResponse";
+} & Readonly<A>;
+/**
+ * Raised when response body parsing fails.
+ */
+export declare class NetworkResponseError extends NetworkResponseError_base<{
+    readonly method: NetworkMethod;
+    readonly url: string;
+    readonly message: string;
+}> {
+}
+/**
+ * Convert an HTTP status code into its status family bucket.
+ *
+ * Returns `undefined` for codes outside the 2xx-5xx families.
+ */
+export declare const statusToCase: (status: number) => NetworkResponseStatusCase | undefined;
+/**
+ * Route a {@link NetworkResponse} to the first matching status-family handler.
+ *
+ * Invariants:
+ * - `2xx`/`3xx`/`4xx`/`5xx` handlers are matched by status family.
+ * - `orElse` is always used as a fallback when no specific family handler exists.
+ * - The returned effect type is inferred as the union of all handler effects.
+ */
+export declare const matchStatus: <Resp extends NetworkResponse, Cases extends MatchStatusCases<Resp>>(response: Resp, cases: Cases) => Effect.Effect<EffectSuccess<MatchStatusEffectUnion<Cases, Resp>>, EffectError<MatchStatusEffectUnion<Cases, Resp>>, EffectContext<MatchStatusEffectUnion<Cases, Resp>>>;
+/**
+ * Convert `Headers` into a readonly plain record.
+ */
+export declare const headersToRecord: (headers: Headers) => Readonly<Record<string, string>>;
+/**
+ * Execute a fetch request using the injected {@link NetworkFetch} service.
+ *
+ * Invariants:
+ * - method is always normalized to upper-case before dispatch.
+ * - JSON payload (if present) is serialized before request execution.
+ * - caller headers override payload-derived headers when keys overlap.
+ * - the returned `NetworkResponse.json` remains lazy.
+ */
+export declare const fetchNetwork: (url: string | URL, method: NetworkMethod, payload?: unknown, options?: FetchNetworkOptions) => Effect.Effect<NetworkResponse, NetworkRequestError | NetworkPayloadError, NetworkFetch>;
+export {};
+//# sourceMappingURL=network.d.ts.map

package/dist/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAErD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;CAC5D;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,OAAO,GACP,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAE3B;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAClC;;AAED;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,iBAG/B;CAAG;AAEN;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAGtD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAA;AAErE,KAAK,kBAAkB,CACrB,IAAI,SAAS,eAAe,GAAG,eAAe,EAC9C,CAAC,GAAG,OAAO,EACX,CAAC,GAAG,OAAO,IACT,CAAC,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;AAElD,KAAK,aAAa,CAChB,KAAK,SAAS,gBAAgB,CAAC,IAAI,CAAC,EACpC,IAAI,SAAS,eAAe,EAC5B,IAAI,SAAS,yBAAyB,GAAG,QAAQ,IAC/C,IAAI,SAAS,MAAM,KAAK,GACxB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,GACvD,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GACpC,KAAK,GACP,KAAK,CAAA;AAET,KAAK,sBAAsB,CACzB,KAAK,SAAS,gBAAgB,CAAC,IAAI,CAAC,EACpC,IAAI,SAAS,eAAe,IAE1B,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GACjC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GACjC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GACjC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GACjC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;AASxC,KAAK,aAAa,CAAC,CAAC,IAClB,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AAEhE,KAAK,WAAW,CAAC,CAAC,IAChB,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AAEhE,KAAK,aAAa,CAAC,CAAC,IAClB,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AAEhE;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAC/B,IAAI,SAAS,eAAe,GAAG,eAAe;IAE9C,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAA;CAC1C;;;;AAOD;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,yBAEvC;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,CAAC;CAAG;;;;AAEL;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,yBAEvC;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,CAAC;CAAG;;;;AAEL;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,CAAC;CAAG;AAKL;;;;GAIG;AACH,eAAO,MAAM,YAAY,GACvB,QAAQ,MAAM,KACb,yBAAyB,GAAG,SAO9B,CAAA;AAiBD;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,GACtB,IAAI,SAAS,eAAe,EAC5B,KAAK,SAAS,gBAAgB,CAAC,IAAI,CAAC,EAEpC,UAAU,IAAI,EACd,OAAO,KAAK,KACX,MAAM,CAAC,MAAM,CACd,aAAa,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAClD,WAAW,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAChD,aAAa,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CASjD,CAAA;AA8CH;;GAEG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,OAAO,KACf,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAA0C,CAAA;AAwD5E;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GACvB,KAAK,MAAM,GAAG,GAAG,EACjB,QAAQ,aAAa,EACrB,UAAU,OAAO,EACjB,UAAU,mBAAmB,KAC5B,MAAM,CAAC,MAAM,CACd,eAAe,EACf,mBAAmB,GAAG,mBAAmB,EACzC,YAAY,CAsCV,CAAA"}

package/dist/network.js

@@ -0,0 +1,172 @@
+import { Context, Data, Effect, Layer } from "effect";
+/**
+ * Effect service tag for the fetch implementation.
+ *
+ * Supply this service with `Effect.provide` / layers to swap fetch behavior
+ * in tests or alternate runtimes.
+ */
+export class NetworkFetch extends Context.Tag("@passlock/node/network/Fetch")() {
+}
+/**
+ * Default live fetch layer backed by `globalThis.fetch`.
+ */
+export const NetworkFetchLive = Layer.succeed(NetworkFetch, globalThis.fetch);
+/**
+ * Raised when the underlying fetch call fails before a response is received.
+ */
+export class NetworkRequestError extends Data.TaggedError("@error/NetworkRequest") {
+}
+/**
+ * Raised when request payload serialization fails.
+ */
+export class NetworkPayloadError extends Data.TaggedError("@error/NetworkPayload") {
+}
+/**
+ * Raised when response body parsing fails.
+ */
+export class NetworkResponseError extends Data.TaggedError("@error/NetworkResponse") {
+}
+const formatMessage = (cause, fallback) => cause instanceof Error ? cause.message : fallback;
+/**
+ * Convert an HTTP status code into its status family bucket.
+ *
+ * Returns `undefined` for codes outside the 2xx-5xx families.
+ */
+export const statusToCase = (status) => {
+    if (status >= 200 && status <= 299)
+        return "2xx";
+    if (status >= 300 && status <= 399)
+        return "3xx";
+    if (status >= 400 && status <= 499)
+        return "4xx";
+    if (status >= 500 && status <= 599)
+        return "5xx";
+    return undefined;
+};
+const resolveStatusHandler = (response, cases) => {
+    const statusCase = statusToCase(response.status);
+    if (!statusCase)
+        return cases.orElse;
+    const handler = cases[statusCase];
+    return (handler ?? cases.orElse);
+};
+/**
+ * Route a {@link NetworkResponse} to the first matching status-family handler.
+ *
+ * Invariants:
+ * - `2xx`/`3xx`/`4xx`/`5xx` handlers are matched by status family.
+ * - `orElse` is always used as a fallback when no specific family handler exists.
+ * - The returned effect type is inferred as the union of all handler effects.
+ */
+export const matchStatus = (response, cases) => Effect.suspend(() => {
+    const handler = resolveStatusHandler(response, cases);
+    return handler(response);
+});
+/**
+ * Serialize an optional payload into a JSON request body.
+ *
+ * Invariants:
+ * - `GET` requests cannot carry a payload and fail with `NetworkPayloadError`.
+ * - when a payload exists, `content-type: application/json` is emitted.
+ */
+const serializePayload = (method, payload) => {
+    if (payload === undefined) {
+        return Effect.succeed(undefined);
+    }
+    if (method === "get") {
+        return Effect.fail(new NetworkPayloadError({
+            method,
+            message: "GET requests do not support a request body",
+        }));
+    }
+    return Effect.try({
+        try: () => ({
+            body: JSON.stringify(payload),
+            headers: { "content-type": "application/json" },
+        }),
+        catch: (cause) => new NetworkPayloadError({
+            method,
+            message: formatMessage(cause, "Unable to serialize payload to JSON"),
+        }),
+    });
+};
+/**
+ * Convert `Headers` into a readonly plain record.
+ */
+export const headersToRecord = (headers) => Object.fromEntries(headers.entries());
+const normalizeHeaders = (headers) => {
+    if (headers instanceof Headers) {
+        return new Headers(headers);
+    }
+    if (Array.isArray(headers)) {
+        return new Headers(headers);
+    }
+    return new Headers(headers);
+};
+const mergeHeaders = (...headers) => Object.assign({}, ...headers);
+/**
+ * Build a lazy, memoized JSON parser effect from a response.
+ *
+ * Invariants:
+ * - parsing happens on effect execution, not during response construction.
+ * - parsing uses `response.clone()` so the original response body remains untouched.
+ */
+const makeJsonEffect = (response, context) => {
+    let cached;
+    return Effect.tryPromise({
+        try: () => {
+            cached = cached ?? response.clone().json();
+            return cached;
+        },
+        catch: (cause) => new NetworkResponseError({
+            method: context.method,
+            url: context.url,
+            message: formatMessage(cause, "Unable to parse response JSON"),
+        }),
+    });
+};
+const toNetworkResponse = (response, context) => ({
+    status: response.status,
+    statusText: response.statusText,
+    statusMessage: response.statusText,
+    headers: headersToRecord(response.headers),
+    json: makeJsonEffect(response, context),
+});
+/**
+ * Execute a fetch request using the injected {@link NetworkFetch} service.
+ *
+ * Invariants:
+ * - method is always normalized to upper-case before dispatch.
+ * - JSON payload (if present) is serialized before request execution.
+ * - caller headers override payload-derived headers when keys overlap.
+ * - the returned `NetworkResponse.json` remains lazy.
+ */
+export const fetchNetwork = (url, method, payload, options) => Effect.gen(function* () {
+    const requestUrl = String(url);
+    const context = { method, url: requestUrl };
+    const fetchImpl = yield* NetworkFetch;
+    const serialized = yield* serializePayload(method, payload);
+    const providedHeaders = options?.headers
+        ? headersToRecord(normalizeHeaders(options.headers))
+        : {};
+    const requestHeaders = mergeHeaders(serialized?.headers ?? {}, providedHeaders);
+    const hasHeaders = Object.keys(requestHeaders).length > 0;
+    const response = yield* Effect.tryPromise({
+        try: () => fetchImpl(requestUrl, {
+            method: method.toUpperCase(),
+            ...(hasHeaders ? { headers: requestHeaders } : {}),
+            ...(serialized
+                ? {
+                    body: serialized.body,
+                }
+                : {}),
+        }),
+        catch: (cause) => new NetworkRequestError({
+            method,
+            url: requestUrl,
+            message: formatMessage(cause, "Network request failed"),
+        }),
+    });
+    return toNetworkResponse(response, context);
+});
+//# sourceMappingURL=network.js.map

package/dist/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAsCrD;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAG1E;CAAG;AAEN;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8B,KAAK,CAAC,OAAO,CACtE,YAAY,EACZ,UAAU,CAAC,KAAK,CACjB,CAAA;AAwED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,uBAAuB,CAKvB;CAAG;AAEL;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,uBAAuB,CAIvB;CAAG;AAEL;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,wBAAwB,CAKxB;CAAG;AAEL,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,QAAgB,EAAU,EAAE,CACjE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAc,EACyB,EAAE;IACzC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAEhD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAI3B,QAAc,EACd,KAAY,EAC6B,EAAE;IAC3C,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU;QACb,OAAO,KAAK,CAAC,MAAiD,CAAA;IAEhE,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;IACjC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAA4C,CAAA;AAC7E,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAIzB,QAAc,EACd,KAAY,EAKZ,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC1B,CAAC,CAIA,CAAA;AAEH;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CACvB,MAAqB,EACrB,OAAiB,EAQjB,EAAE;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,mBAAmB,CAAC;YACtB,MAAM;YACN,OAAO,EAAE,4CAA4C;SACtD,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;QACF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,mBAAmB,CAAC;YACtB,MAAM;YACN,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,qCAAqC,CAAC;SACrE,CAAC;KACL,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAgB,EACkB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;AAE5E,MAAM,gBAAgB,GAAG,CAAC,OAAuB,EAAW,EAAE;IAC5D,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;AAC7B,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CACnB,GAAG,OAAwD,EACzB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAA;AAEpE;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,CACrB,QAAkB,EAClB,OAAuB,EACuB,EAAE;IAChD,IAAI,MAAoC,CAAA;IAExC,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;YAC1C,OAAO,MAAM,CAAA;QACf,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,oBAAoB,CAAC;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC;SAC/D,CAAC;KACL,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CACxB,QAAkB,EAClB,OAAuB,EACN,EAAE,CAAC,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,aAAa,EAAE,QAAQ,CAAC,UAAU;IAClC,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC1C,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC;CACxC,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,GAAiB,EACjB,MAAqB,EACrB,OAAiB,EACjB,OAA6B,EAK7B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,OAAO,GAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAE3D,MAAM,eAAe,GAAG,OAAO,EAAE,OAAO;QACtC,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,cAAc,GAAG,YAAY,CACjC,UAAU,EAAE,OAAO,IAAI,EAAE,EACzB,eAAe,CAChB,CAAA;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAEzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CACR,SAAS,CAAC,UAAU,EAAE;YACpB,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACE,IAAI,EAAE,UAAU,CAAC,IAAI;iBACtB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACJ,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,mBAAmB,CAAC;YACtB,MAAM;YACN,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,wBAAwB,CAAC;SACxD,CAAC;KACL,CAAC,CAAA;IAEF,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC,CAAC,CAAA","sourcesContent":["import { Context, Data, Effect, Layer } from \"effect\"\n\n/**\n * Supported HTTP methods accepted by {@link fetchNetwork}.\n */\nexport type NetworkMethod = \"get\" | \"post\" | \"delete\" | \"patch\"\n\n/**\n * Lightweight response model used by this package.\n *\n * Invariants:\n * - `json` is lazy: parsing only happens when the effect is run.\n * - `json` is memoized per response wrapper, so repeated evaluation does not\n *   parse the same payload multiple times.\n */\nexport interface NetworkResponse {\n  readonly status: number\n  readonly statusText: string\n  readonly statusMessage: string\n  readonly headers: Readonly<Record<string, string>>\n  readonly json: Effect.Effect<unknown, NetworkResponseError>\n}\n\n/**\n * Accepted request header input formats.\n */\nexport type NetworkHeaders =\n  | Headers\n  | Readonly<Record<string, string>>\n  | Array<[string, string]>\n\n/**\n * Optional request options for {@link fetchNetwork}.\n */\nexport interface FetchNetworkOptions {\n  readonly headers?: NetworkHeaders\n}\n\n/**\n * Effect service tag for the fetch implementation.\n *\n * Supply this service with `Effect.provide` / layers to swap fetch behavior\n * in tests or alternate runtimes.\n */\nexport class NetworkFetch extends Context.Tag(\"@passlock/node/network/Fetch\")<\n  NetworkFetch,\n  typeof fetch\n>() {}\n\n/**\n * Default live fetch layer backed by `globalThis.fetch`.\n */\nexport const NetworkFetchLive: Layer.Layer<NetworkFetch> = Layer.succeed(\n  NetworkFetch,\n  globalThis.fetch\n)\n\n/**\n * HTTP status buckets used by {@link matchStatus}.\n */\nexport type NetworkResponseStatusCase = \"2xx\" | \"3xx\" | \"4xx\" | \"5xx\"\n\ntype MatchStatusHandler<\n  Resp extends NetworkResponse = NetworkResponse,\n  A = unknown,\n  E = unknown,\n> = (response: Resp) => Effect.Effect<A, E, never>\n\ntype HandlerEffect<\n  Cases extends MatchStatusCases<Resp>,\n  Resp extends NetworkResponse,\n  Case extends NetworkResponseStatusCase | \"orElse\",\n> = Case extends keyof Cases\n  ? NonNullable<Cases[Case]> extends MatchStatusHandler<Resp>\n    ? ReturnType<NonNullable<Cases[Case]>>\n    : never\n  : never\n\ntype MatchStatusEffectUnion<\n  Cases extends MatchStatusCases<Resp>,\n  Resp extends NetworkResponse,\n> =\n  | HandlerEffect<Cases, Resp, \"2xx\">\n  | HandlerEffect<Cases, Resp, \"3xx\">\n  | HandlerEffect<Cases, Resp, \"4xx\">\n  | HandlerEffect<Cases, Resp, \"5xx\">\n  | HandlerEffect<Cases, Resp, \"orElse\">\n\ntype MatchStatusResolvedHandler<\n  Cases extends MatchStatusCases<Resp>,\n  Resp extends NetworkResponse,\n> = NonNullable<\n  Cases[\"2xx\"] | Cases[\"3xx\"] | Cases[\"4xx\"] | Cases[\"5xx\"] | Cases[\"orElse\"]\n>\n\ntype EffectSuccess<T> =\n  T extends Effect.Effect<infer A, unknown, unknown> ? A : never\n\ntype EffectError<T> =\n  T extends Effect.Effect<unknown, infer E, unknown> ? E : never\n\ntype EffectContext<T> =\n  T extends Effect.Effect<unknown, unknown, infer R> ? R : never\n\n/**\n * Handlers used by {@link matchStatus}.\n *\n * Invariants:\n * - `orElse` is always required.\n * - Specific status family handlers are optional and fall back to `orElse`\n *   when missing.\n */\nexport interface MatchStatusCases<\n  Resp extends NetworkResponse = NetworkResponse,\n> {\n  readonly \"2xx\"?: MatchStatusHandler<Resp>\n  readonly \"3xx\"?: MatchStatusHandler<Resp>\n  readonly \"4xx\"?: MatchStatusHandler<Resp>\n  readonly \"5xx\"?: MatchStatusHandler<Resp>\n  readonly orElse: MatchStatusHandler<Resp>\n}\n\ntype RequestContext = {\n  readonly method: NetworkMethod\n  readonly url: string\n}\n\n/**\n * Raised when the underlying fetch call fails before a response is received.\n */\nexport class NetworkRequestError extends Data.TaggedError(\n  \"@error/NetworkRequest\"\n)<{\n  readonly method: NetworkMethod\n  readonly url: string\n  readonly message: string\n}> {}\n\n/**\n * Raised when request payload serialization fails.\n */\nexport class NetworkPayloadError extends Data.TaggedError(\n  \"@error/NetworkPayload\"\n)<{\n  readonly method: NetworkMethod\n  readonly message: string\n}> {}\n\n/**\n * Raised when response body parsing fails.\n */\nexport class NetworkResponseError extends Data.TaggedError(\n  \"@error/NetworkResponse\"\n)<{\n  readonly method: NetworkMethod\n  readonly url: string\n  readonly message: string\n}> {}\n\nconst formatMessage = (cause: unknown, fallback: string): string =>\n  cause instanceof Error ? cause.message : fallback\n\n/**\n * Convert an HTTP status code into its status family bucket.\n *\n * Returns `undefined` for codes outside the 2xx-5xx families.\n */\nexport const statusToCase = (\n  status: number\n): NetworkResponseStatusCase | undefined => {\n  if (status >= 200 && status <= 299) return \"2xx\"\n  if (status >= 300 && status <= 399) return \"3xx\"\n  if (status >= 400 && status <= 499) return \"4xx\"\n  if (status >= 500 && status <= 599) return \"5xx\"\n\n  return undefined\n}\n\nconst resolveStatusHandler = <\n  Resp extends NetworkResponse,\n  Cases extends MatchStatusCases<Resp>,\n>(\n  response: Resp,\n  cases: Cases\n): MatchStatusResolvedHandler<Cases, Resp> => {\n  const statusCase = statusToCase(response.status)\n  if (!statusCase)\n    return cases.orElse as MatchStatusResolvedHandler<Cases, Resp>\n\n  const handler = cases[statusCase]\n  return (handler ?? cases.orElse) as MatchStatusResolvedHandler<Cases, Resp>\n}\n\n/**\n * Route a {@link NetworkResponse} to the first matching status-family handler.\n *\n * Invariants:\n * - `2xx`/`3xx`/`4xx`/`5xx` handlers are matched by status family.\n * - `orElse` is always used as a fallback when no specific family handler exists.\n * - The returned effect type is inferred as the union of all handler effects.\n */\nexport const matchStatus = <\n  Resp extends NetworkResponse,\n  Cases extends MatchStatusCases<Resp>,\n>(\n  response: Resp,\n  cases: Cases\n): Effect.Effect<\n  EffectSuccess<MatchStatusEffectUnion<Cases, Resp>>,\n  EffectError<MatchStatusEffectUnion<Cases, Resp>>,\n  EffectContext<MatchStatusEffectUnion<Cases, Resp>>\n> =>\n  Effect.suspend(() => {\n    const handler = resolveStatusHandler(response, cases)\n    return handler(response)\n  }) as Effect.Effect<\n    EffectSuccess<MatchStatusEffectUnion<Cases, Resp>>,\n    EffectError<MatchStatusEffectUnion<Cases, Resp>>,\n    EffectContext<MatchStatusEffectUnion<Cases, Resp>>\n  >\n\n/**\n * Serialize an optional payload into a JSON request body.\n *\n * Invariants:\n * - `GET` requests cannot carry a payload and fail with `NetworkPayloadError`.\n * - when a payload exists, `content-type: application/json` is emitted.\n */\nconst serializePayload = (\n  method: NetworkMethod,\n  payload?: unknown\n): Effect.Effect<\n  | {\n      readonly body: string\n      readonly headers: Readonly<Record<string, string>>\n    }\n  | undefined,\n  NetworkPayloadError\n> => {\n  if (payload === undefined) {\n    return Effect.succeed(undefined)\n  }\n\n  if (method === \"get\") {\n    return Effect.fail(\n      new NetworkPayloadError({\n        method,\n        message: \"GET requests do not support a request body\",\n      })\n    )\n  }\n\n  return Effect.try({\n    try: () => ({\n      body: JSON.stringify(payload),\n      headers: { \"content-type\": \"application/json\" },\n    }),\n    catch: (cause) =>\n      new NetworkPayloadError({\n        method,\n        message: formatMessage(cause, \"Unable to serialize payload to JSON\"),\n      }),\n  })\n}\n\n/**\n * Convert `Headers` into a readonly plain record.\n */\nexport const headersToRecord = (\n  headers: Headers\n): Readonly<Record<string, string>> => Object.fromEntries(headers.entries())\n\nconst normalizeHeaders = (headers: NetworkHeaders): Headers => {\n  if (headers instanceof Headers) {\n    return new Headers(headers)\n  }\n\n  if (Array.isArray(headers)) {\n    return new Headers(headers)\n  }\n\n  return new Headers(headers)\n}\n\nconst mergeHeaders = (\n  ...headers: ReadonlyArray<Readonly<Record<string, string>>>\n): Readonly<Record<string, string>> => Object.assign({}, ...headers)\n\n/**\n * Build a lazy, memoized JSON parser effect from a response.\n *\n * Invariants:\n * - parsing happens on effect execution, not during response construction.\n * - parsing uses `response.clone()` so the original response body remains untouched.\n */\nconst makeJsonEffect = (\n  response: Response,\n  context: RequestContext\n): Effect.Effect<unknown, NetworkResponseError> => {\n  let cached: Promise<unknown> | undefined\n\n  return Effect.tryPromise({\n    try: () => {\n      cached = cached ?? response.clone().json()\n      return cached\n    },\n    catch: (cause) =>\n      new NetworkResponseError({\n        method: context.method,\n        url: context.url,\n        message: formatMessage(cause, \"Unable to parse response JSON\"),\n      }),\n  })\n}\n\nconst toNetworkResponse = (\n  response: Response,\n  context: RequestContext\n): NetworkResponse => ({\n  status: response.status,\n  statusText: response.statusText,\n  statusMessage: response.statusText,\n  headers: headersToRecord(response.headers),\n  json: makeJsonEffect(response, context),\n})\n\n/**\n * Execute a fetch request using the injected {@link NetworkFetch} service.\n *\n * Invariants:\n * - method is always normalized to upper-case before dispatch.\n * - JSON payload (if present) is serialized before request execution.\n * - caller headers override payload-derived headers when keys overlap.\n * - the returned `NetworkResponse.json` remains lazy.\n */\nexport const fetchNetwork = (\n  url: string | URL,\n  method: NetworkMethod,\n  payload?: unknown,\n  options?: FetchNetworkOptions\n): Effect.Effect<\n  NetworkResponse,\n  NetworkRequestError | NetworkPayloadError,\n  NetworkFetch\n> =>\n  Effect.gen(function* () {\n    const requestUrl = String(url)\n    const context: RequestContext = { method, url: requestUrl }\n    const fetchImpl = yield* NetworkFetch\n    const serialized = yield* serializePayload(method, payload)\n\n    const providedHeaders = options?.headers\n      ? headersToRecord(normalizeHeaders(options.headers))\n      : {}\n\n    const requestHeaders = mergeHeaders(\n      serialized?.headers ?? {},\n      providedHeaders\n    )\n    const hasHeaders = Object.keys(requestHeaders).length > 0\n\n    const response = yield* Effect.tryPromise({\n      try: () =>\n        fetchImpl(requestUrl, {\n          method: method.toUpperCase(),\n          ...(hasHeaders ? { headers: requestHeaders } : {}),\n          ...(serialized\n            ? {\n                body: serialized.body,\n              }\n            : {}),\n        }),\n      catch: (cause) =>\n        new NetworkRequestError({\n          method,\n          url: requestUrl,\n          message: formatMessage(cause, \"Network request failed\"),\n        }),\n    })\n\n    return toNetworkResponse(response, context)\n  })\n"]}

package/dist/passkey/passkey.d.ts

@@ -0,0 +1,132 @@
+import { Effect, type Layer, Stream } from "effect";
+import { type NetworkFetch } from "../network.js";
+import { ForbiddenError, NotFoundError } from "../schemas/index.js";
+import * as PasskeySchemas from "../schemas/passkey.js";
+import type { AuthenticatedOptions } from "../shared.js";
+/**
+ * WebAuthn specific passkey data
+ */
+export type Credential = {
+    id: string;
+    userId: string;
+    username: string;
+    aaguid: string;
+    backedUp: boolean;
+    counter: number;
+    deviceType: PasskeySchemas.CredentialDeviceType;
+    transports: ReadonlyArray<PasskeySchemas.Transports>;
+    publicKey: Uint8Array<ArrayBufferLike>;
+    rpId: string;
+};
+/**
+ * Passkeys are usually synced across devices **but only within
+ * a specific platform/ecosystem** e.g. a passkey created on Apple
+ * devices would typically be synced across devices sharing the same
+ * iCloud ID.
+ *
+ * However, if the user also wants to sign in from their Windows
+ * or Android/Chrome devices they will need an additional passkey.
+ * Therefore when listing the passkeys registered to a user's account
+ * it's a good idea to tell them which platform the passkeys relate to.
+ *
+ * We've also included links to icons (SVG) so you can give your users
+ * a quick visual indication.
+ */
+export type Platform = {
+    name?: string | undefined;
+    icon?: string | undefined;
+};
+/**
+ * The server-side component of a passkey
+ *
+ * @category Passkeys
+ */
+export type Passkey = {
+    _tag: "Passkey";
+    /**
+     * Not to be confused with the credential.id
+     */
+    id: string;
+    /**
+     * Not to be confused with the credential.userId
+     */
+    userId?: string | undefined;
+    enabled: boolean;
+    credential: Credential;
+    platform?: Platform | undefined;
+    lastUsed?: number | undefined;
+    createdAt: number;
+    updatedAt: number;
+};
+export declare const isPasskey: (payload: unknown) => payload is Passkey;
+export type PasskeySummary = {
+    readonly _tag: "PasskeySummary";
+    readonly id: string;
+    readonly userId: string;
+    readonly enabled: boolean;
+    readonly credential: {
+        readonly id: string;
+        readonly userId: string;
+    };
+    readonly lastUsed?: number | undefined;
+    readonly createdAt: number;
+};
+export declare const isPasskeySummary: (payload: unknown) => payload is PasskeySummary;
+export type UpdatedPasskeys = {
+    _tag: "UpdatedPasskeys";
+    updated: ReadonlyArray<Passkey>;
+};
+export declare const isUpdatedPasskeys: (payload: unknown) => payload is UpdatedPasskeys;
+export type FindAllPasskeys = {
+    readonly _tag: "FindAllPasskeys";
+    readonly cursor: string | null;
+    readonly records: ReadonlyArray<PasskeySummary>;
+};
+export declare const isFindAllPasskeys: (payload: unknown) => payload is FindAllPasskeys;
+export type UpdatedPasskeyUsernames = {
+    _tag: "UpdatedPasskeyUsernames";
+    credentials: ReadonlyArray<{
+        rpId: string;
+        userId: string;
+        username: string;
+        displayName: string;
+    }>;
+};
+export declare const isUpdatedPasskeyUsernames: (payload: unknown) => payload is UpdatedPasskeyUsernames;
+export interface GetPasskeyOptions extends AuthenticatedOptions {
+    passkeyId: string;
+}
+export declare const getPasskey: (options: GetPasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+export interface DeletePasskeyOptions extends AuthenticatedOptions {
+    passkeyId: string;
+}
+export declare const deletePasskey: (options: DeletePasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+/**
+ * @category Passkeys
+ */
+export interface AssignUserOptions extends AuthenticatedOptions {
+    passkeyId: string;
+    /**
+     * Custom User ID to align with your own systems
+     */
+    userId: string;
+}
+export declare const assignUser: (options: AssignUserOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+export interface UpdatePasskeyOptions extends AuthenticatedOptions {
+    passkeyId: string;
+    userId?: string;
+    username?: string;
+}
+export declare const updatePasskey: (options: UpdatePasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+export interface UpdatePasskeyUsernamesOptions extends AuthenticatedOptions {
+    userId: string;
+    username: string;
+    displayName?: string;
+}
+export declare const updatePasskeyUsernames: (options: UpdatePasskeyUsernamesOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<UpdatedPasskeyUsernames, NotFoundError | ForbiddenError>;
+export declare const listPasskeysStream: (options: AuthenticatedOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Stream.Stream<PasskeySummary, ForbiddenError>;
+export interface ListPasskeyOptions extends AuthenticatedOptions {
+    cursor?: string;
+}
+export declare const listPasskeys: (options: ListPasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<FindAllPasskeys, ForbiddenError>;
+//# sourceMappingURL=passkey.d.ts.map

package/dist/passkey/passkey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.d.ts","sourceRoot":"","sources":["../../src/passkey/passkey.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EACN,KAAK,KAAK,EAKV,MAAM,EACP,MAAM,QAAQ,CAAA;AAEf,OAAO,EAGL,KAAK,YAAY,EAMlB,MAAM,eAAe,CAAA;AACtB,OAAO,EAEL,cAAc,EACd,aAAa,EACd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAIxD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,cAAc,CAAC,oBAAoB,CAAA;IAC/C,UAAU,EAAE,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;IACpD,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,CAAA;IACtC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,SAAS,CAAA;IACf;;OAEG;IACH,EAAE,EAAE,MAAM,CAAA;IACV;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,SAAS,OAAO,KAAG,OAAO,IAAI,OACZ,CAAA;AAU5C,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,SAAS,OAAO,KAAG,OAAO,IAAI,cACZ,CAAA;AAanD,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,iBAAiB,CAAA;IACvB,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;CAChC,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,SAAS,OAAO,KACf,OAAO,IAAI,eACsC,CAAA;AAapD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAA;CAChD,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,SAAS,OAAO,KACf,OAAO,IAAI,eACsC,CAAA;AAapD,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,yBAAyB,CAAA;IAC/B,WAAW,EAAE,aAAa,CAAC;QACzB,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAC,CAAA;CACH,CAAA;AAED,eAAO,MAAM,yBAAyB,GACpC,SAAS,OAAO,KACf,OAAO,IAAI,uBAQb,CAAA;AAeD,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,UAAU,GACrB,SAAS,iBAAiB,EAC1B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAqCrD,CAAA;AAIH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,aAAa,GACxB,SAAS,oBAAoB,EAC7B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAuCrD,CAAA;AAIH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;CACf;AAGD,eAAO,MAAM,UAAU,GACrB,SAAS,iBAAiB,EAC1B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CA2CrD,CAAA;AAIH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,aAAa,GACxB,SAAS,oBAAoB,EAC7B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CA4CrD,CAAA;AA6DH,MAAM,WAAW,6BAA8B,SAAQ,oBAAoB;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,eAAO,MAAM,sBAAsB,GACjC,SAAS,6BAA6B,EACtC,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,aAAa,GAAG,cAAc,CAkBrE,CAAA;AAIH,eAAO,MAAM,kBAAkB,GAC7B,SAAS,oBAAoB,EAC7B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,cAAc,CAW5C,CAAA;AAEH,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,eAAO,MAAM,YAAY,GACvB,SAAS,kBAAkB,EAC3B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,cAAc,CAqC7C,CAAA"}

package/dist/passkey/passkey.js

@@ -0,0 +1,158 @@
+import { Array, Chunk, Effect, Match, Option, pipe, Schema, Stream, } from "effect";
+import { fetchNetwork, matchStatus, NetworkFetchLive, } from "../network.js";
+import { FindAllPasskeys as FindAllPasskeysSchema, ForbiddenError, NotFoundError, } from "../schemas/index.js";
+import * as PasskeySchemas from "../schemas/passkey.js";
+export const isPasskey = (payload) => Schema.is(PasskeySchemas.Passkey)(payload);
+export const isPasskeySummary = (payload) => Schema.is(PasskeySchemas.PasskeySummary)(payload);
+export const isUpdatedPasskeys = (payload) => Schema.is(PasskeySchemas.UpdatedPasskeys)(payload);
+export const isFindAllPasskeys = (payload) => Schema.is(PasskeySchemas.FindAllPasskeys)(payload);
+export const isUpdatedPasskeyUsernames = (payload) => {
+    if (typeof payload !== "object")
+        return false;
+    if (payload === null)
+        return false;
+    if (!("_tag" in payload))
+        return false;
+    if (typeof payload._tag !== "string")
+        return false;
+    if (payload._tag !== "UpdatedPasskeyUsernames")
+        return false;
+    return true;
+};
+/* END UpdatedPasskeyUsernames */
+const authorizationHeaders = (apiKey) => ({
+    authorization: `Bearer ${apiKey}`,
+});
+const decodeResponseJson = (response, schema) => pipe(response.json, Effect.flatMap(Schema.decodeUnknown(schema)));
+export const getPasskey = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { tenancyId, passkeyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "get", undefined, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(ForbiddenError, NotFoundError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (data) => Effect.succeed(data)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+export const deletePasskey = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { tenancyId, passkeyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "delete", undefined, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(ForbiddenError, NotFoundError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (deletedPasskey) => Effect.succeed(deletedPasskey)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+// TODO reuse updatePasskey
+export const assignUser = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { userId, passkeyId } = options;
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "patch", { userId }, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(NotFoundError, ForbiddenError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (passkey) => Effect.succeed(passkey)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+export const updatePasskey = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { userId, passkeyId, username } = options;
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "patch", { userId, username }, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(NotFoundError, ForbiddenError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (passkey) => Effect.succeed(passkey)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+const updateUserPasskeys = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { userId, username } = options;
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/users/${userId}/passkeys/`, baseUrl);
+    const response = yield* fetchNetwork(url, "patch", { userId, username }, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.UpdatedPasskeys),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(NotFoundError, ForbiddenError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("UpdatedPasskeys", (result) => Effect.succeed(result)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+export const updatePasskeyUsernames = (options, fetchLayer = NetworkFetchLive) => pipe(updateUserPasskeys(options, fetchLayer), Effect.map((result) => result.updated), Effect.map(Array.map((passkey) => {
+    return {
+        rpId: passkey.credential.rpId,
+        userId: passkey.credential.userId,
+        username: passkey.credential.username,
+        displayName: options.displayName ?? passkey.credential.username,
+    };
+})), Effect.map((credentials) => ({
+    _tag: "UpdatedPasskeyUsernames",
+    credentials,
+})));
+/* List Passkeys */
+export const listPasskeysStream = (options, fetchLayer = NetworkFetchLive) => pipe(Stream.paginateChunkEffect(null, (cursor) => pipe(listPasskeys(cursor ? { ...options, cursor } : options, fetchLayer), Effect.map((result) => [
+    Chunk.fromIterable(result.records),
+    Option.fromNullable(result.cursor),
+]))));
+export const listPasskeys = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/`, baseUrl);
+    if (options.cursor) {
+        url.searchParams.append("cursor", options.cursor);
+    }
+    const response = yield* fetchNetwork(url, "get", undefined, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, FindAllPasskeysSchema),
+        orElse: (res) => decodeResponseJson(res, ForbiddenError),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("FindAllPasskeys", (data) => Effect.succeed(data)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+//# sourceMappingURL=passkey.js.map