@passlock/server 2.1.0

package/dist/network.js

@@ -0,0 +1,172 @@
+import { Context, Data, Effect, Layer } from "effect";
+/**
+ * Effect service tag for the fetch implementation.
+ *
+ * Supply this service with `Effect.provide` / layers to swap fetch behavior
+ * in tests or alternate runtimes.
+ */
+export class NetworkFetch extends Context.Tag("NetworkFetch")() {
+}
+/**
+ * Default live fetch layer backed by `globalThis.fetch`.
+ */
+export const NetworkFetchLive = Layer.succeed(NetworkFetch, globalThis.fetch);
+/**
+ * Raised when the underlying fetch call fails before a response is received.
+ */
+export class NetworkRequestError extends Data.TaggedError("@error/NetworkRequest") {
+}
+/**
+ * Raised when request payload serialization fails.
+ */
+export class NetworkPayloadError extends Data.TaggedError("@error/NetworkPayload") {
+}
+/**
+ * Raised when response body parsing fails.
+ */
+export class NetworkResponseError extends Data.TaggedError("@error/NetworkResponse") {
+}
+const formatMessage = (cause, fallback) => cause instanceof Error ? cause.message : fallback;
+/**
+ * Convert an HTTP status code into its status family bucket.
+ *
+ * Returns `undefined` for codes outside the 2xx-5xx families.
+ */
+export const statusToCase = (status) => {
+    if (status >= 200 && status <= 299)
+        return "2xx";
+    if (status >= 300 && status <= 399)
+        return "3xx";
+    if (status >= 400 && status <= 499)
+        return "4xx";
+    if (status >= 500 && status <= 599)
+        return "5xx";
+    return undefined;
+};
+const resolveStatusHandler = (response, cases) => {
+    const statusCase = statusToCase(response.status);
+    if (!statusCase)
+        return cases.orElse;
+    const handler = cases[statusCase];
+    return (handler ?? cases.orElse);
+};
+/**
+ * Route a {@link NetworkResponse} to the first matching status-family handler.
+ *
+ * Invariants:
+ * - `2xx`/`3xx`/`4xx`/`5xx` handlers are matched by status family.
+ * - `orElse` is always used as a fallback when no specific family handler exists.
+ * - The returned effect type is inferred as the union of all handler effects.
+ */
+export const matchStatus = (response, cases) => Effect.suspend(() => {
+    const handler = resolveStatusHandler(response, cases);
+    return handler(response);
+});
+/**
+ * Serialize an optional payload into a JSON request body.
+ *
+ * Invariants:
+ * - `GET` requests cannot carry a payload and fail with `NetworkPayloadError`.
+ * - when a payload exists, `content-type: application/json` is emitted.
+ */
+const serializePayload = (method, payload) => {
+    if (payload === undefined) {
+        return Effect.succeed(undefined);
+    }
+    if (method === "get") {
+        return Effect.fail(new NetworkPayloadError({
+            method,
+            message: "GET requests do not support a request body",
+        }));
+    }
+    return Effect.try({
+        try: () => ({
+            body: JSON.stringify(payload),
+            headers: { "content-type": "application/json" },
+        }),
+        catch: (cause) => new NetworkPayloadError({
+            method,
+            message: formatMessage(cause, "Unable to serialize payload to JSON"),
+        }),
+    });
+};
+/**
+ * Convert `Headers` into a readonly plain record.
+ */
+export const headersToRecord = (headers) => Object.fromEntries(headers.entries());
+const normalizeHeaders = (headers) => {
+    if (headers instanceof Headers) {
+        return new Headers(headers);
+    }
+    if (Array.isArray(headers)) {
+        return new Headers(headers);
+    }
+    return new Headers(headers);
+};
+const mergeHeaders = (...headers) => Object.assign({}, ...headers);
+/**
+ * Build a lazy, memoized JSON parser effect from a response.
+ *
+ * Invariants:
+ * - parsing happens on effect execution, not during response construction.
+ * - parsing uses `response.clone()` so the original response body remains untouched.
+ */
+const makeJsonEffect = (response, context) => {
+    let cached;
+    return Effect.tryPromise({
+        try: () => {
+            cached = cached ?? response.clone().json();
+            return cached;
+        },
+        catch: (cause) => new NetworkResponseError({
+            method: context.method,
+            url: context.url,
+            message: formatMessage(cause, "Unable to parse response JSON"),
+        }),
+    });
+};
+const toNetworkResponse = (response, context) => ({
+    status: response.status,
+    statusText: response.statusText,
+    statusMessage: response.statusText,
+    headers: headersToRecord(response.headers),
+    json: makeJsonEffect(response, context),
+});
+/**
+ * Execute a fetch request using the injected {@link NetworkFetch} service.
+ *
+ * Invariants:
+ * - method is always normalized to upper-case before dispatch.
+ * - JSON payload (if present) is serialized before request execution.
+ * - caller headers override payload-derived headers when keys overlap.
+ * - the returned `NetworkResponse.json` remains lazy.
+ */
+export const fetchNetwork = (url, method, payload, options) => Effect.gen(function* () {
+    const requestUrl = String(url);
+    const context = { method, url: requestUrl };
+    const fetchImpl = yield* NetworkFetch;
+    const serialized = yield* serializePayload(method, payload);
+    const providedHeaders = options?.headers
+        ? headersToRecord(normalizeHeaders(options.headers))
+        : {};
+    const requestHeaders = mergeHeaders(serialized?.headers ?? {}, providedHeaders);
+    const hasHeaders = Object.keys(requestHeaders).length > 0;
+    const response = yield* Effect.tryPromise({
+        try: () => fetchImpl(requestUrl, {
+            method: method.toUpperCase(),
+            ...(hasHeaders ? { headers: requestHeaders } : {}),
+            ...(serialized
+                ? {
+                    body: serialized.body,
+                }
+                : {}),
+        }),
+        catch: (cause) => new NetworkRequestError({
+            method,
+            url: requestUrl,
+            message: formatMessage(cause, "Network request failed"),
+        }),
+    });
+    return toNetworkResponse(response, context);
+});
+//# sourceMappingURL=network.js.map

package/dist/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAsCrD;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAG1D;CAAG;AAEN;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8B,KAAK,CAAC,OAAO,CACtE,YAAY,EACZ,UAAU,CAAC,KAAK,CACjB,CAAA;AAwED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,uBAAuB,CAKvB;CAAG;AAEL;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,uBAAuB,CAIvB;CAAG;AAEL;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,wBAAwB,CAKxB;CAAG;AAEL,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,QAAgB,EAAU,EAAE,CACjE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAc,EACyB,EAAE;IACzC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAA;IAEhD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAI3B,QAAc,EACd,KAAY,EAC6B,EAAE;IAC3C,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU;QACb,OAAO,KAAK,CAAC,MAAiD,CAAA;IAEhE,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;IACjC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAA4C,CAAA;AAC7E,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAIzB,QAAc,EACd,KAAY,EAKZ,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC1B,CAAC,CAIA,CAAA;AAEH;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CACvB,MAAqB,EACrB,OAAiB,EAQjB,EAAE;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,mBAAmB,CAAC;YACtB,MAAM;YACN,OAAO,EAAE,4CAA4C;SACtD,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;QACF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,mBAAmB,CAAC;YACtB,MAAM;YACN,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,qCAAqC,CAAC;SACrE,CAAC;KACL,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAgB,EACkB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;AAE5E,MAAM,gBAAgB,GAAG,CAAC,OAAuB,EAAW,EAAE;IAC5D,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;AAC7B,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CACnB,GAAG,OAAwD,EACzB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAA;AAEpE;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,CACrB,QAAkB,EAClB,OAAuB,EACuB,EAAE;IAChD,IAAI,MAAoC,CAAA;IAExC,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;YAC1C,OAAO,MAAM,CAAA;QACf,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,oBAAoB,CAAC;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC;SAC/D,CAAC;KACL,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CACxB,QAAkB,EAClB,OAAuB,EACN,EAAE,CAAC,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,aAAa,EAAE,QAAQ,CAAC,UAAU;IAClC,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC1C,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC;CACxC,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,GAAiB,EACjB,MAAqB,EACrB,OAAiB,EACjB,OAA6B,EAK7B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,OAAO,GAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAE3D,MAAM,eAAe,GAAG,OAAO,EAAE,OAAO;QACtC,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,cAAc,GAAG,YAAY,CACjC,UAAU,EAAE,OAAO,IAAI,EAAE,EACzB,eAAe,CAChB,CAAA;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAEzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CACR,SAAS,CAAC,UAAU,EAAE;YACpB,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACE,IAAI,EAAE,UAAU,CAAC,IAAI;iBACtB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACJ,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,mBAAmB,CAAC;YACtB,MAAM;YACN,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,wBAAwB,CAAC;SACxD,CAAC;KACL,CAAC,CAAA;IAEF,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC,CAAC,CAAA","sourcesContent":["import { Context, Data, Effect, Layer } from \"effect\"\n\n/**\n * Supported HTTP methods accepted by {@link fetchNetwork}.\n */\nexport type NetworkMethod = \"get\" | \"post\" | \"delete\" | \"patch\"\n\n/**\n * Lightweight response model used by this package.\n *\n * Invariants:\n * - `json` is lazy: parsing only happens when the effect is run.\n * - `json` is memoized per response wrapper, so repeated evaluation does not\n *   parse the same payload multiple times.\n */\nexport interface NetworkResponse {\n  readonly status: number\n  readonly statusText: string\n  readonly statusMessage: string\n  readonly headers: Readonly<Record<string, string>>\n  readonly json: Effect.Effect<unknown, NetworkResponseError>\n}\n\n/**\n * Accepted request header input formats.\n */\nexport type NetworkHeaders =\n  | Headers\n  | Readonly<Record<string, string>>\n  | Array<[string, string]>\n\n/**\n * Optional request options for {@link fetchNetwork}.\n */\nexport interface FetchNetworkOptions {\n  readonly headers?: NetworkHeaders\n}\n\n/**\n * Effect service tag for the fetch implementation.\n *\n * Supply this service with `Effect.provide` / layers to swap fetch behavior\n * in tests or alternate runtimes.\n */\nexport class NetworkFetch extends Context.Tag(\"NetworkFetch\")<\n  NetworkFetch,\n  typeof fetch\n>() {}\n\n/**\n * Default live fetch layer backed by `globalThis.fetch`.\n */\nexport const NetworkFetchLive: Layer.Layer<NetworkFetch> = Layer.succeed(\n  NetworkFetch,\n  globalThis.fetch\n)\n\n/**\n * HTTP status buckets used by {@link matchStatus}.\n */\nexport type NetworkResponseStatusCase = \"2xx\" | \"3xx\" | \"4xx\" | \"5xx\"\n\ntype MatchStatusHandler<\n  Resp extends NetworkResponse = NetworkResponse,\n  A = unknown,\n  E = unknown,\n> = (response: Resp) => Effect.Effect<A, E, never>\n\ntype HandlerEffect<\n  Cases extends MatchStatusCases<Resp>,\n  Resp extends NetworkResponse,\n  Case extends NetworkResponseStatusCase | \"orElse\",\n> = Case extends keyof Cases\n  ? NonNullable<Cases[Case]> extends MatchStatusHandler<Resp>\n    ? ReturnType<NonNullable<Cases[Case]>>\n    : never\n  : never\n\ntype MatchStatusEffectUnion<\n  Cases extends MatchStatusCases<Resp>,\n  Resp extends NetworkResponse,\n> =\n  | HandlerEffect<Cases, Resp, \"2xx\">\n  | HandlerEffect<Cases, Resp, \"3xx\">\n  | HandlerEffect<Cases, Resp, \"4xx\">\n  | HandlerEffect<Cases, Resp, \"5xx\">\n  | HandlerEffect<Cases, Resp, \"orElse\">\n\ntype MatchStatusResolvedHandler<\n  Cases extends MatchStatusCases<Resp>,\n  Resp extends NetworkResponse,\n> = NonNullable<\n  Cases[\"2xx\"] | Cases[\"3xx\"] | Cases[\"4xx\"] | Cases[\"5xx\"] | Cases[\"orElse\"]\n>\n\ntype EffectSuccess<T> =\n  T extends Effect.Effect<infer A, unknown, unknown> ? A : never\n\ntype EffectError<T> =\n  T extends Effect.Effect<unknown, infer E, unknown> ? E : never\n\ntype EffectContext<T> =\n  T extends Effect.Effect<unknown, unknown, infer R> ? R : never\n\n/**\n * Handlers used by {@link matchStatus}.\n *\n * Invariants:\n * - `orElse` is always required.\n * - Specific status family handlers are optional and fall back to `orElse`\n *   when missing.\n */\nexport interface MatchStatusCases<\n  Resp extends NetworkResponse = NetworkResponse,\n> {\n  readonly \"2xx\"?: MatchStatusHandler<Resp>\n  readonly \"3xx\"?: MatchStatusHandler<Resp>\n  readonly \"4xx\"?: MatchStatusHandler<Resp>\n  readonly \"5xx\"?: MatchStatusHandler<Resp>\n  readonly orElse: MatchStatusHandler<Resp>\n}\n\ntype RequestContext = {\n  readonly method: NetworkMethod\n  readonly url: string\n}\n\n/**\n * Raised when the underlying fetch call fails before a response is received.\n */\nexport class NetworkRequestError extends Data.TaggedError(\n  \"@error/NetworkRequest\"\n)<{\n  readonly method: NetworkMethod\n  readonly url: string\n  readonly message: string\n}> {}\n\n/**\n * Raised when request payload serialization fails.\n */\nexport class NetworkPayloadError extends Data.TaggedError(\n  \"@error/NetworkPayload\"\n)<{\n  readonly method: NetworkMethod\n  readonly message: string\n}> {}\n\n/**\n * Raised when response body parsing fails.\n */\nexport class NetworkResponseError extends Data.TaggedError(\n  \"@error/NetworkResponse\"\n)<{\n  readonly method: NetworkMethod\n  readonly url: string\n  readonly message: string\n}> {}\n\nconst formatMessage = (cause: unknown, fallback: string): string =>\n  cause instanceof Error ? cause.message : fallback\n\n/**\n * Convert an HTTP status code into its status family bucket.\n *\n * Returns `undefined` for codes outside the 2xx-5xx families.\n */\nexport const statusToCase = (\n  status: number\n): NetworkResponseStatusCase | undefined => {\n  if (status >= 200 && status <= 299) return \"2xx\"\n  if (status >= 300 && status <= 399) return \"3xx\"\n  if (status >= 400 && status <= 499) return \"4xx\"\n  if (status >= 500 && status <= 599) return \"5xx\"\n\n  return undefined\n}\n\nconst resolveStatusHandler = <\n  Resp extends NetworkResponse,\n  Cases extends MatchStatusCases<Resp>,\n>(\n  response: Resp,\n  cases: Cases\n): MatchStatusResolvedHandler<Cases, Resp> => {\n  const statusCase = statusToCase(response.status)\n  if (!statusCase)\n    return cases.orElse as MatchStatusResolvedHandler<Cases, Resp>\n\n  const handler = cases[statusCase]\n  return (handler ?? cases.orElse) as MatchStatusResolvedHandler<Cases, Resp>\n}\n\n/**\n * Route a {@link NetworkResponse} to the first matching status-family handler.\n *\n * Invariants:\n * - `2xx`/`3xx`/`4xx`/`5xx` handlers are matched by status family.\n * - `orElse` is always used as a fallback when no specific family handler exists.\n * - The returned effect type is inferred as the union of all handler effects.\n */\nexport const matchStatus = <\n  Resp extends NetworkResponse,\n  Cases extends MatchStatusCases<Resp>,\n>(\n  response: Resp,\n  cases: Cases\n): Effect.Effect<\n  EffectSuccess<MatchStatusEffectUnion<Cases, Resp>>,\n  EffectError<MatchStatusEffectUnion<Cases, Resp>>,\n  EffectContext<MatchStatusEffectUnion<Cases, Resp>>\n> =>\n  Effect.suspend(() => {\n    const handler = resolveStatusHandler(response, cases)\n    return handler(response)\n  }) as Effect.Effect<\n    EffectSuccess<MatchStatusEffectUnion<Cases, Resp>>,\n    EffectError<MatchStatusEffectUnion<Cases, Resp>>,\n    EffectContext<MatchStatusEffectUnion<Cases, Resp>>\n  >\n\n/**\n * Serialize an optional payload into a JSON request body.\n *\n * Invariants:\n * - `GET` requests cannot carry a payload and fail with `NetworkPayloadError`.\n * - when a payload exists, `content-type: application/json` is emitted.\n */\nconst serializePayload = (\n  method: NetworkMethod,\n  payload?: unknown\n): Effect.Effect<\n  | {\n      readonly body: string\n      readonly headers: Readonly<Record<string, string>>\n    }\n  | undefined,\n  NetworkPayloadError\n> => {\n  if (payload === undefined) {\n    return Effect.succeed(undefined)\n  }\n\n  if (method === \"get\") {\n    return Effect.fail(\n      new NetworkPayloadError({\n        method,\n        message: \"GET requests do not support a request body\",\n      })\n    )\n  }\n\n  return Effect.try({\n    try: () => ({\n      body: JSON.stringify(payload),\n      headers: { \"content-type\": \"application/json\" },\n    }),\n    catch: (cause) =>\n      new NetworkPayloadError({\n        method,\n        message: formatMessage(cause, \"Unable to serialize payload to JSON\"),\n      }),\n  })\n}\n\n/**\n * Convert `Headers` into a readonly plain record.\n */\nexport const headersToRecord = (\n  headers: Headers\n): Readonly<Record<string, string>> => Object.fromEntries(headers.entries())\n\nconst normalizeHeaders = (headers: NetworkHeaders): Headers => {\n  if (headers instanceof Headers) {\n    return new Headers(headers)\n  }\n\n  if (Array.isArray(headers)) {\n    return new Headers(headers)\n  }\n\n  return new Headers(headers)\n}\n\nconst mergeHeaders = (\n  ...headers: ReadonlyArray<Readonly<Record<string, string>>>\n): Readonly<Record<string, string>> => Object.assign({}, ...headers)\n\n/**\n * Build a lazy, memoized JSON parser effect from a response.\n *\n * Invariants:\n * - parsing happens on effect execution, not during response construction.\n * - parsing uses `response.clone()` so the original response body remains untouched.\n */\nconst makeJsonEffect = (\n  response: Response,\n  context: RequestContext\n): Effect.Effect<unknown, NetworkResponseError> => {\n  let cached: Promise<unknown> | undefined\n\n  return Effect.tryPromise({\n    try: () => {\n      cached = cached ?? response.clone().json()\n      return cached\n    },\n    catch: (cause) =>\n      new NetworkResponseError({\n        method: context.method,\n        url: context.url,\n        message: formatMessage(cause, \"Unable to parse response JSON\"),\n      }),\n  })\n}\n\nconst toNetworkResponse = (\n  response: Response,\n  context: RequestContext\n): NetworkResponse => ({\n  status: response.status,\n  statusText: response.statusText,\n  statusMessage: response.statusText,\n  headers: headersToRecord(response.headers),\n  json: makeJsonEffect(response, context),\n})\n\n/**\n * Execute a fetch request using the injected {@link NetworkFetch} service.\n *\n * Invariants:\n * - method is always normalized to upper-case before dispatch.\n * - JSON payload (if present) is serialized before request execution.\n * - caller headers override payload-derived headers when keys overlap.\n * - the returned `NetworkResponse.json` remains lazy.\n */\nexport const fetchNetwork = (\n  url: string | URL,\n  method: NetworkMethod,\n  payload?: unknown,\n  options?: FetchNetworkOptions\n): Effect.Effect<\n  NetworkResponse,\n  NetworkRequestError | NetworkPayloadError,\n  NetworkFetch\n> =>\n  Effect.gen(function* () {\n    const requestUrl = String(url)\n    const context: RequestContext = { method, url: requestUrl }\n    const fetchImpl = yield* NetworkFetch\n    const serialized = yield* serializePayload(method, payload)\n\n    const providedHeaders = options?.headers\n      ? headersToRecord(normalizeHeaders(options.headers))\n      : {}\n\n    const requestHeaders = mergeHeaders(\n      serialized?.headers ?? {},\n      providedHeaders\n    )\n    const hasHeaders = Object.keys(requestHeaders).length > 0\n\n    const response = yield* Effect.tryPromise({\n      try: () =>\n        fetchImpl(requestUrl, {\n          method: method.toUpperCase(),\n          ...(hasHeaders ? { headers: requestHeaders } : {}),\n          ...(serialized\n            ? {\n                body: serialized.body,\n              }\n            : {}),\n        }),\n      catch: (cause) =>\n        new NetworkRequestError({\n          method,\n          url: requestUrl,\n          message: formatMessage(cause, \"Network request failed\"),\n        }),\n    })\n\n    return toNetworkResponse(response, context)\n  })\n"]}

package/dist/passkey/passkey.d.ts

@@ -0,0 +1,132 @@
+import { Effect, type Layer, Stream } from "effect";
+import { type NetworkFetch } from "../network.js";
+import { ForbiddenError, NotFoundError } from "../schemas/index.js";
+import * as PasskeySchemas from "../schemas/passkey.js";
+import type { AuthenticatedOptions } from "../shared.js";
+/**
+ * WebAuthn specific passkey data
+ */
+export type Credential = {
+    id: string;
+    userId: string;
+    username: string;
+    aaguid: string;
+    backedUp: boolean;
+    counter: number;
+    deviceType: PasskeySchemas.CredentialDeviceType;
+    transports: ReadonlyArray<PasskeySchemas.Transports>;
+    publicKey: Uint8Array<ArrayBufferLike>;
+    rpId: string;
+};
+/**
+ * Passkeys are usually synced across devices **but only within
+ * a specific platform/ecosystem** e.g. a passkey created on Apple
+ * devices would typically be synced across devices sharing the same
+ * iCloud ID.
+ *
+ * However, if the user also wants to sign in from their Windows
+ * or Android/Chrome devices they will need an additional passkey.
+ * Therefore when listing the passkeys registered to a user's account
+ * it's a good idea to tell them which platform the passkeys relate to.
+ *
+ * We've also included links to icons (SVG) so you can give your users
+ * a quick visual indication.
+ */
+export type Platform = {
+    name?: string | undefined;
+    icon?: string | undefined;
+};
+/**
+ * The server-side component of a passkey
+ *
+ * @category Passkeys
+ */
+export type Passkey = {
+    _tag: "Passkey";
+    /**
+     * Not to be confused with the credential.id
+     */
+    id: string;
+    /**
+     * Not to be confused with the credential.userId
+     */
+    userId?: string | undefined;
+    enabled: boolean;
+    credential: Credential;
+    platform?: Platform | undefined;
+    lastUsed?: number | undefined;
+    createdAt: number;
+    updatedAt: number;
+};
+export declare const isPasskey: (payload: unknown) => payload is Passkey;
+export type PasskeySummary = {
+    readonly _tag: "PasskeySummary";
+    readonly id: string;
+    readonly userId: string;
+    readonly enabled: boolean;
+    readonly credential: {
+        readonly id: string;
+        readonly userId: string;
+    };
+    readonly lastUsed?: number | undefined;
+    readonly createdAt: number;
+};
+export declare const isPasskeySummary: (payload: unknown) => payload is PasskeySummary;
+export type UpdatedPasskeys = {
+    _tag: "UpdatedPasskeys";
+    updated: ReadonlyArray<Passkey>;
+};
+export declare const isUpdatedPasskeys: (payload: unknown) => payload is UpdatedPasskeys;
+export type FindAllPasskeys = {
+    readonly _tag: "FindAllPasskeys";
+    readonly cursor: string | null;
+    readonly records: ReadonlyArray<PasskeySummary>;
+};
+export declare const isFindAllPasskeys: (payload: unknown) => payload is FindAllPasskeys;
+export type UpdatedPasskeyUsernames = {
+    _tag: "UpdatedPasskeyUsernames";
+    credentials: ReadonlyArray<{
+        rpId: string;
+        userId: string;
+        username: string;
+        displayName: string;
+    }>;
+};
+export declare const isUpdatedPasskeyUsernames: (payload: unknown) => payload is UpdatedPasskeyUsernames;
+export interface GetPasskeyOptions extends AuthenticatedOptions {
+    passkeyId: string;
+}
+export declare const getPasskey: (options: GetPasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+export interface DeletePasskeyOptions extends AuthenticatedOptions {
+    passkeyId: string;
+}
+export declare const deletePasskey: (options: DeletePasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+/**
+ * @category Passkeys
+ */
+export interface AssignUserOptions extends AuthenticatedOptions {
+    passkeyId: string;
+    /**
+     * Custom User ID to align with your own systems
+     */
+    userId: string;
+}
+export declare const assignUser: (options: AssignUserOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+export interface UpdatePasskeyOptions extends AuthenticatedOptions {
+    passkeyId: string;
+    userId?: string;
+    username?: string;
+}
+export declare const updatePasskey: (options: UpdatePasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<Passkey, NotFoundError | ForbiddenError>;
+export interface UpdatePasskeyUsernamesOptions extends AuthenticatedOptions {
+    userId: string;
+    username: string;
+    displayName?: string;
+}
+export declare const updatePasskeyUsernames: (options: UpdatePasskeyUsernamesOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<UpdatedPasskeyUsernames, NotFoundError | ForbiddenError>;
+export declare const listPasskeysStream: (options: AuthenticatedOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Stream.Stream<PasskeySummary, ForbiddenError>;
+export interface ListPasskeyOptions extends AuthenticatedOptions {
+    cursor?: string;
+}
+export declare const listPasskeys: (options: ListPasskeyOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<FindAllPasskeys, ForbiddenError>;
+//# sourceMappingURL=passkey.d.ts.map

package/dist/passkey/passkey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.d.ts","sourceRoot":"","sources":["../../src/passkey/passkey.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EACN,KAAK,KAAK,EAKV,MAAM,EACP,MAAM,QAAQ,CAAA;AAEf,OAAO,EAGL,KAAK,YAAY,EAMlB,MAAM,eAAe,CAAA;AACtB,OAAO,EAEL,cAAc,EACd,aAAa,EACd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAIxD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,cAAc,CAAC,oBAAoB,CAAA;IAC/C,UAAU,EAAE,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;IACpD,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,CAAA;IACtC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,SAAS,CAAA;IACf;;OAEG;IACH,EAAE,EAAE,MAAM,CAAA;IACV;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,SAAS,OAAO,KAAG,OAAO,IAAI,OACZ,CAAA;AAU5C,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,SAAS,OAAO,KAAG,OAAO,IAAI,cACZ,CAAA;AAanD,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,iBAAiB,CAAA;IACvB,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;CAChC,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,SAAS,OAAO,KACf,OAAO,IAAI,eACsC,CAAA;AAapD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAA;CAChD,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,SAAS,OAAO,KACf,OAAO,IAAI,eACsC,CAAA;AAapD,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,yBAAyB,CAAA;IAC/B,WAAW,EAAE,aAAa,CAAC;QACzB,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAC,CAAA;CACH,CAAA;AAED,eAAO,MAAM,yBAAyB,GACpC,SAAS,OAAO,KACf,OAAO,IAAI,uBAQb,CAAA;AAeD,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,UAAU,GACrB,SAAS,iBAAiB,EAC1B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAqCrD,CAAA;AAIH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,aAAa,GACxB,SAAS,oBAAoB,EAC7B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAuCrD,CAAA;AAIH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;CACf;AAGD,eAAO,MAAM,UAAU,GACrB,SAAS,iBAAiB,EAC1B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CA2CrD,CAAA;AAIH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,aAAa,GACxB,SAAS,oBAAoB,EAC7B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CA4CrD,CAAA;AA6DH,MAAM,WAAW,6BAA8B,SAAQ,oBAAoB;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,eAAO,MAAM,sBAAsB,GACjC,SAAS,6BAA6B,EACtC,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,aAAa,GAAG,cAAc,CAkBrE,CAAA;AAIH,eAAO,MAAM,kBAAkB,GAC7B,SAAS,oBAAoB,EAC7B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,cAAc,CAW5C,CAAA;AAEH,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,eAAO,MAAM,YAAY,GACvB,SAAS,kBAAkB,EAC3B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,cAAc,CAqC7C,CAAA"}

package/dist/passkey/passkey.js

@@ -0,0 +1,158 @@
+import { Array, Chunk, Effect, Match, Option, pipe, Schema, Stream, } from "effect";
+import { fetchNetwork, matchStatus, NetworkFetchLive, } from "../network.js";
+import { FindAllPasskeys as FindAllPasskeysSchema, ForbiddenError, NotFoundError, } from "../schemas/index.js";
+import * as PasskeySchemas from "../schemas/passkey.js";
+export const isPasskey = (payload) => Schema.is(PasskeySchemas.Passkey)(payload);
+export const isPasskeySummary = (payload) => Schema.is(PasskeySchemas.PasskeySummary)(payload);
+export const isUpdatedPasskeys = (payload) => Schema.is(PasskeySchemas.UpdatedPasskeys)(payload);
+export const isFindAllPasskeys = (payload) => Schema.is(PasskeySchemas.FindAllPasskeys)(payload);
+export const isUpdatedPasskeyUsernames = (payload) => {
+    if (typeof payload !== "object")
+        return false;
+    if (payload === null)
+        return false;
+    if (!("_tag" in payload))
+        return false;
+    if (typeof payload._tag !== "string")
+        return false;
+    if (payload._tag !== "UpdatedPasskeyUsernames")
+        return false;
+    return true;
+};
+/* END UpdatedPasskeyUsernames */
+const authorizationHeaders = (apiKey) => ({
+    authorization: `Bearer ${apiKey}`,
+});
+const decodeResponseJson = (response, schema) => pipe(response.json, Effect.flatMap(Schema.decodeUnknown(schema)));
+export const getPasskey = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { tenancyId, passkeyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "get", undefined, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(ForbiddenError, NotFoundError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (data) => Effect.succeed(data)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+export const deletePasskey = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { tenancyId, passkeyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "delete", undefined, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(ForbiddenError, NotFoundError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (deletedPasskey) => Effect.succeed(deletedPasskey)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+// TODO reuse updatePasskey
+export const assignUser = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { userId, passkeyId } = options;
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "patch", { userId }, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(NotFoundError, ForbiddenError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (passkey) => Effect.succeed(passkey)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+export const updatePasskey = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { userId, passkeyId, username } = options;
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl);
+    const response = yield* fetchNetwork(url, "patch", { userId, username }, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(NotFoundError, ForbiddenError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("Passkey", (passkey) => Effect.succeed(passkey)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+const updateUserPasskeys = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { userId, username } = options;
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/users/${userId}/passkeys/`, baseUrl);
+    const response = yield* fetchNetwork(url, "patch", { userId, username }, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, PasskeySchemas.UpdatedPasskeys),
+        orElse: (res) => decodeResponseJson(res, Schema.Union(NotFoundError, ForbiddenError)),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("UpdatedPasskeys", (result) => Effect.succeed(result)), Match.tag("@error/NotFound", (err) => Effect.fail(err)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+export const updatePasskeyUsernames = (options, fetchLayer = NetworkFetchLive) => pipe(updateUserPasskeys(options, fetchLayer), Effect.map((result) => result.updated), Effect.map(Array.map((passkey) => {
+    return {
+        rpId: passkey.credential.rpId,
+        userId: passkey.credential.userId,
+        username: passkey.credential.username,
+        displayName: options.displayName ?? passkey.credential.username,
+    };
+})), Effect.map((credentials) => ({
+    _tag: "UpdatedPasskeyUsernames",
+    credentials,
+})));
+/* List Passkeys */
+export const listPasskeysStream = (options, fetchLayer = NetworkFetchLive) => pipe(Stream.paginateChunkEffect(null, (cursor) => pipe(listPasskeys(cursor ? { ...options, cursor } : options, fetchLayer), Effect.map((result) => [
+    Chunk.fromIterable(result.records),
+    Option.fromNullable(result.cursor),
+]))));
+export const listPasskeys = (options, fetchLayer = NetworkFetchLive) => pipe(Effect.gen(function* () {
+    const baseUrl = options.endpoint ?? "https://api.passlock.dev";
+    const { tenancyId } = options;
+    const url = new URL(`/${tenancyId}/passkeys/`, baseUrl);
+    if (options.cursor) {
+        url.searchParams.append("cursor", options.cursor);
+    }
+    const response = yield* fetchNetwork(url, "get", undefined, {
+        headers: authorizationHeaders(options.apiKey),
+    });
+    const encoded = yield* matchStatus(response, {
+        "2xx": (res) => decodeResponseJson(res, FindAllPasskeysSchema),
+        orElse: (res) => decodeResponseJson(res, ForbiddenError),
+    });
+    return yield* pipe(Match.value(encoded), Match.tag("FindAllPasskeys", (data) => Effect.succeed(data)), Match.tag("@error/Forbidden", (err) => Effect.fail(err)), Match.exhaustive);
+}), Effect.catchTags({
+    "@error/NetworkPayload": (err) => Effect.die(err),
+    "@error/NetworkRequest": (err) => Effect.die(err),
+    "@error/NetworkResponse": (err) => Effect.die(err),
+    ParseError: (err) => Effect.die(err),
+}), Effect.provide(fetchLayer));
+//# sourceMappingURL=passkey.js.map

package/dist/passkey/passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.js","sourceRoot":"","sources":["../../src/passkey/passkey.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,KAAK,EACL,MAAM,EAEN,KAAK,EACL,MAAM,EACN,IAAI,EACJ,MAAM,EACN,MAAM,GACP,MAAM,QAAQ,CAAA;AAEf,OAAO,EACL,YAAY,EACZ,WAAW,EAEX,gBAAgB,GAKjB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,cAAc,EACd,aAAa,GACd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AA+DvD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAsB,EAAE,CAChE,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAA;AAuB5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAgB,EAA6B,EAAE,CAC9E,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAA;AAkBnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAgB,EACY,EAAE,CAC9B,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAA;AAmBpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAgB,EACY,EAAE,CAC9B,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAA;AAuBpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,OAAgB,EACoB,EAAE;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAClD,IAAI,OAAO,CAAC,IAAI,KAAK,yBAAyB;QAAE,OAAO,KAAK,CAAA;IAE5D,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,iCAAiC;AAEjC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IAChD,aAAa,EAAE,UAAU,MAAM,EAAE;CAClC,CAAC,CAAA;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAyB,EACzB,MAA8B,EAC9B,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAQtE,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,OAA0B,EAC1B,aAAwC,gBAAgB,EACA,EAAE,CAC1D,IAAI,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAA;IAC9D,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAExC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,SAAS,aAAa,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE;QAC1D,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC9C,CAAC,CAAA;IAEF,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC;QAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,kBAAkB,CAChB,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,aAAa,CAAC,CAC5C;KACJ,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACpD,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxD,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvD,KAAK,CAAC,UAAU,CACjB,CAAA;AACH,CAAC,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;IACf,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,wBAAwB,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAA;AAQH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,OAA6B,EAC7B,aAAwC,gBAAgB,EACA,EAAE,CAC1D,IAAI,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAA;IAC9D,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAExC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,SAAS,aAAa,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE;QAC7D,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC9C,CAAC,CAAA;IAEF,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC;QAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,kBAAkB,CAChB,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,aAAa,CAAC,CAC5C;KACJ,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,EAAE,CACtC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAC/B,EACD,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxD,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvD,KAAK,CAAC,UAAU,CACjB,CAAA;AACH,CAAC,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;IACf,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,wBAAwB,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAA;AAgBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,OAA0B,EAC1B,aAAwC,gBAAgB,EACA,EAAE,CAC1D,IAAI,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAA;IAC9D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,SAAS,aAAa,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAClC,GAAG,EACH,OAAO,EACP,EAAE,MAAM,EAAE,EACV;QACE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC9C,CACF,CAAA;IAED,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC;QAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,kBAAkB,CAChB,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,CAC5C;KACJ,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAC1D,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvD,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxD,KAAK,CAAC,UAAU,CACjB,CAAA;AACH,CAAC,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;IACf,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,wBAAwB,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAA;AAUH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,OAA6B,EAC7B,aAAwC,gBAAgB,EACA,EAAE,CAC1D,IAAI,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAA;IAE9D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,SAAS,aAAa,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAClC,GAAG,EACH,OAAO,EACP,EAAE,MAAM,EAAE,QAAQ,EAAE,EACpB;QACE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC9C,CACF,CAAA;IAED,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC;QAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,kBAAkB,CAChB,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,CAC5C;KACJ,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAC1D,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvD,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxD,KAAK,CAAC,UAAU,CACjB,CAAA;AACH,CAAC,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;IACf,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,wBAAwB,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAA;AASH,MAAM,kBAAkB,GAAG,CACzB,OAAiC,EACjC,aAAwC,gBAAgB,EACQ,EAAE,CAClE,IAAI,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAA;IAE9D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACpC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,SAAS,UAAU,MAAM,YAAY,EAAE,OAAO,CAAC,CAAA;IAEvE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAClC,GAAG,EACH,OAAO,EACP,EAAE,MAAM,EAAE,QAAQ,EAAE,EACpB;QACE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC9C,CACF,CAAA;IAED,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,eAAe,CAAC;QACzD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,kBAAkB,CAChB,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,CAC5C;KACJ,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAChE,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvD,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxD,KAAK,CAAC,UAAU,CACjB,CAAA;AACH,CAAC,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;IACf,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,wBAAwB,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAA;AAUH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,OAAsC,EACtC,aAAwC,gBAAgB,EACgB,EAAE,CAC1E,IAAI,CACF,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,EACvC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EACtC,MAAM,CAAC,GAAG,CACR,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;IACpB,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI;QAC7B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM;QACjC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ;QACrC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ;KAChE,CAAA;AACH,CAAC,CAAC,CACH,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,EAAE,yBAAyB;IAC/B,WAAW;CACZ,CAAC,CAAC,CACJ,CAAA;AAEH,mBAAmB;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAA6B,EAC7B,aAAwC,gBAAgB,EACT,EAAE,CACjD,IAAI,CACF,MAAM,CAAC,mBAAmB,CAAC,IAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3D,IAAI,CACF,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,EACnE,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrB,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;IAClC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;CACnC,CAAC,CACH,CACF,CACF,CAAA;AAMH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAA2B,EAC3B,aAAwC,gBAAgB,EACR,EAAE,CAClD,IAAI,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAA;IAC9D,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,SAAS,YAAY,EAAE,OAAO,CAAC,CAAA;IACvD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE;QAC1D,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC9C,CAAC,CAAA;IAEF,MAAM,OAAO,GAAqC,KAAK,CAAC,CAAC,WAAW,CAClE,QAAQ,EACR;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC;QAC9D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC;KACzD,CACF,CAAA;IAED,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAC5D,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxD,KAAK,CAAC,UAAU,CACjB,CAAA;AACH,CAAC,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;IACf,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,uBAAuB,EAAE,CAAC,GAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,wBAAwB,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,CAAA","sourcesContent":["import {\n  Array,\n  Chunk,\n  Effect,\n  type Layer,\n  Match,\n  Option,\n  pipe,\n  Schema,\n  Stream,\n} from \"effect\"\nimport type { satisfy } from \"src/schemas/satisfy.js\"\nimport {\n  fetchNetwork,\n  matchStatus,\n  type NetworkFetch,\n  NetworkFetchLive,\n  type NetworkPayloadError,\n  type NetworkRequestError,\n  type NetworkResponse,\n  type NetworkResponseError,\n} from \"../network.js\"\nimport {\n  FindAllPasskeys as FindAllPasskeysSchema,\n  ForbiddenError,\n  NotFoundError,\n} from \"../schemas/index.js\"\nimport * as PasskeySchemas from \"../schemas/passkey.js\"\nimport type { AuthenticatedOptions } from \"../shared.js\"\n\n/* Passkey */\n\n/**\n * WebAuthn specific passkey data\n */\nexport type Credential = {\n  id: string\n  userId: string\n  username: string\n  aaguid: string\n  backedUp: boolean\n  counter: number\n  deviceType: PasskeySchemas.CredentialDeviceType\n  transports: ReadonlyArray<PasskeySchemas.Transports>\n  publicKey: Uint8Array<ArrayBufferLike>\n  rpId: string\n}\n\n/**\n * Passkeys are usually synced across devices **but only within\n * a specific platform/ecosystem** e.g. a passkey created on Apple\n * devices would typically be synced across devices sharing the same\n * iCloud ID.\n *\n * However, if the user also wants to sign in from their Windows\n * or Android/Chrome devices they will need an additional passkey.\n * Therefore when listing the passkeys registered to a user's account\n * it's a good idea to tell them which platform the passkeys relate to.\n *\n * We've also included links to icons (SVG) so you can give your users\n * a quick visual indication.\n */\nexport type Platform = {\n  name?: string | undefined\n  icon?: string | undefined\n}\n\n/**\n * The server-side component of a passkey\n *\n * @category Passkeys\n */\nexport type Passkey = {\n  _tag: \"Passkey\"\n  /**\n   * Not to be confused with the credential.id\n   */\n  id: string\n  /**\n   * Not to be confused with the credential.userId\n   */\n  userId?: string | undefined\n  enabled: boolean\n  credential: Credential\n  platform?: Platform | undefined\n  lastUsed?: number | undefined\n  createdAt: number\n  updatedAt: number\n}\n\nexport const isPasskey = (payload: unknown): payload is Passkey =>\n  Schema.is(PasskeySchemas.Passkey)(payload)\n\n/**\n * needed to ensure the Passkey === Passkey.Type\n * @internal\n * */\nexport type _Passkey = satisfy<typeof PasskeySchemas.Passkey.Type, Passkey>\n\n/* PasskeySummary */\n\nexport type PasskeySummary = {\n  readonly _tag: \"PasskeySummary\"\n  readonly id: string\n  readonly userId: string\n  readonly enabled: boolean\n  readonly credential: {\n    readonly id: string\n    readonly userId: string\n  }\n  readonly lastUsed?: number | undefined\n  readonly createdAt: number\n}\n\nexport const isPasskeySummary = (payload: unknown): payload is PasskeySummary =>\n  Schema.is(PasskeySchemas.PasskeySummary)(payload)\n\n/**\n * needed to ensure the PasskeySummary === PasskeySummary.Type\n * @internal\n */\nexport type _PasskeySummary = satisfy<\n  typeof PasskeySchemas.PasskeySummary.Type,\n  PasskeySummary\n>\n\n/* UpdatedPasskeys */\n\nexport type UpdatedPasskeys = {\n  _tag: \"UpdatedPasskeys\"\n  updated: ReadonlyArray<Passkey>\n}\n\nexport const isUpdatedPasskeys = (\n  payload: unknown\n): payload is UpdatedPasskeys =>\n  Schema.is(PasskeySchemas.UpdatedPasskeys)(payload)\n\n/**\n * needed to ensure the UpdatedPasskeys === UpdatedPasskeys.Type\n * @internal\n * */\nexport type _UpdatedPasskeys = satisfy<\n  typeof PasskeySchemas.UpdatedPasskeys.Type,\n  UpdatedPasskeys\n>\n\n/* FindAllPasskeys */\n\nexport type FindAllPasskeys = {\n  readonly _tag: \"FindAllPasskeys\"\n  readonly cursor: string | null\n  readonly records: ReadonlyArray<PasskeySummary>\n}\n\nexport const isFindAllPasskeys = (\n  payload: unknown\n): payload is FindAllPasskeys =>\n  Schema.is(PasskeySchemas.FindAllPasskeys)(payload)\n\n/**\n * needed to ensure the FindAllPasskeys === FindAllPasskeys.Type\n * @internal\n */\nexport type _FindAllPasskeys = satisfy<\n  typeof FindAllPasskeysSchema.Type,\n  FindAllPasskeys\n>\n\n/* UpdatedPasskeyUsernames (update names by userId) */\n\nexport type UpdatedPasskeyUsernames = {\n  _tag: \"UpdatedPasskeyUsernames\"\n  credentials: ReadonlyArray<{\n    rpId: string\n    userId: string\n    username: string\n    displayName: string\n  }>\n}\n\nexport const isUpdatedPasskeyUsernames = (\n  payload: unknown\n): payload is UpdatedPasskeyUsernames => {\n  if (typeof payload !== \"object\") return false\n  if (payload === null) return false\n  if (!(\"_tag\" in payload)) return false\n  if (typeof payload._tag !== \"string\") return false\n  if (payload._tag !== \"UpdatedPasskeyUsernames\") return false\n\n  return true\n}\n\n/* END UpdatedPasskeyUsernames */\n\nconst authorizationHeaders = (apiKey: string) => ({\n  authorization: `Bearer ${apiKey}`,\n})\n\nconst decodeResponseJson = <A, I, R>(\n  response: NetworkResponse,\n  schema: Schema.Schema<A, I, R>\n) => pipe(response.json, Effect.flatMap(Schema.decodeUnknown(schema)))\n\n/* Get Passkey */\n\nexport interface GetPasskeyOptions extends AuthenticatedOptions {\n  passkeyId: string\n}\n\nexport const getPasskey = (\n  options: GetPasskeyOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<Passkey, NotFoundError | ForbiddenError> =>\n  pipe(\n    Effect.gen(function* () {\n      const baseUrl = options.endpoint ?? \"https://api.passlock.dev\"\n      const { tenancyId, passkeyId } = options\n\n      const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl)\n\n      const response = yield* fetchNetwork(url, \"get\", undefined, {\n        headers: authorizationHeaders(options.apiKey),\n      })\n\n      const encoded: Passkey | ForbiddenError | NotFoundError =\n        yield* matchStatus(response, {\n          \"2xx\": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),\n          orElse: (res) =>\n            decodeResponseJson(\n              res,\n              Schema.Union(ForbiddenError, NotFoundError)\n            ),\n        })\n\n      return yield* pipe(\n        Match.value(encoded),\n        Match.tag(\"Passkey\", (data) => Effect.succeed(data)),\n        Match.tag(\"@error/Forbidden\", (err) => Effect.fail(err)),\n        Match.tag(\"@error/NotFound\", (err) => Effect.fail(err)),\n        Match.exhaustive\n      )\n    }),\n    Effect.catchTags({\n      \"@error/NetworkPayload\": (err: NetworkPayloadError) => Effect.die(err),\n      \"@error/NetworkRequest\": (err: NetworkRequestError) => Effect.die(err),\n      \"@error/NetworkResponse\": (err: NetworkResponseError) => Effect.die(err),\n      ParseError: (err) => Effect.die(err),\n    }),\n    Effect.provide(fetchLayer)\n  )\n\n/* Delete Passkey */\n\nexport interface DeletePasskeyOptions extends AuthenticatedOptions {\n  passkeyId: string\n}\n\nexport const deletePasskey = (\n  options: DeletePasskeyOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<Passkey, NotFoundError | ForbiddenError> =>\n  pipe(\n    Effect.gen(function* () {\n      const baseUrl = options.endpoint ?? \"https://api.passlock.dev\"\n      const { tenancyId, passkeyId } = options\n\n      const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl)\n\n      const response = yield* fetchNetwork(url, \"delete\", undefined, {\n        headers: authorizationHeaders(options.apiKey),\n      })\n\n      const encoded: Passkey | ForbiddenError | NotFoundError =\n        yield* matchStatus(response, {\n          \"2xx\": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),\n          orElse: (res) =>\n            decodeResponseJson(\n              res,\n              Schema.Union(ForbiddenError, NotFoundError)\n            ),\n        })\n\n      return yield* pipe(\n        Match.value(encoded),\n        Match.tag(\"Passkey\", (deletedPasskey) =>\n          Effect.succeed(deletedPasskey)\n        ),\n        Match.tag(\"@error/Forbidden\", (err) => Effect.fail(err)),\n        Match.tag(\"@error/NotFound\", (err) => Effect.fail(err)),\n        Match.exhaustive\n      )\n    }),\n    Effect.catchTags({\n      \"@error/NetworkPayload\": (err: NetworkPayloadError) => Effect.die(err),\n      \"@error/NetworkRequest\": (err: NetworkRequestError) => Effect.die(err),\n      \"@error/NetworkResponse\": (err: NetworkResponseError) => Effect.die(err),\n      ParseError: (err) => Effect.die(err),\n    }),\n    Effect.provide(fetchLayer)\n  )\n\n/* Assign User */\n\n/**\n * @category Passkeys\n */\nexport interface AssignUserOptions extends AuthenticatedOptions {\n  passkeyId: string\n\n  /**\n   * Custom User ID to align with your own systems\n   */\n  userId: string\n}\n\n// TODO reuse updatePasskey\nexport const assignUser = (\n  options: AssignUserOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<Passkey, NotFoundError | ForbiddenError> =>\n  pipe(\n    Effect.gen(function* () {\n      const baseUrl = options.endpoint ?? \"https://api.passlock.dev\"\n      const { userId, passkeyId } = options\n      const { tenancyId } = options\n\n      const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl)\n\n      const response = yield* fetchNetwork(\n        url,\n        \"patch\",\n        { userId },\n        {\n          headers: authorizationHeaders(options.apiKey),\n        }\n      )\n\n      const encoded: Passkey | NotFoundError | ForbiddenError =\n        yield* matchStatus(response, {\n          \"2xx\": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),\n          orElse: (res) =>\n            decodeResponseJson(\n              res,\n              Schema.Union(NotFoundError, ForbiddenError)\n            ),\n        })\n\n      return yield* pipe(\n        Match.value(encoded),\n        Match.tag(\"Passkey\", (passkey) => Effect.succeed(passkey)),\n        Match.tag(\"@error/NotFound\", (err) => Effect.fail(err)),\n        Match.tag(\"@error/Forbidden\", (err) => Effect.fail(err)),\n        Match.exhaustive\n      )\n    }),\n    Effect.catchTags({\n      \"@error/NetworkPayload\": (err: NetworkPayloadError) => Effect.die(err),\n      \"@error/NetworkRequest\": (err: NetworkRequestError) => Effect.die(err),\n      \"@error/NetworkResponse\": (err: NetworkResponseError) => Effect.die(err),\n      ParseError: (err) => Effect.die(err),\n    }),\n    Effect.provide(fetchLayer)\n  )\n\n/* Update passkey */\n\nexport interface UpdatePasskeyOptions extends AuthenticatedOptions {\n  passkeyId: string\n  userId?: string\n  username?: string\n}\n\nexport const updatePasskey = (\n  options: UpdatePasskeyOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<Passkey, NotFoundError | ForbiddenError> =>\n  pipe(\n    Effect.gen(function* () {\n      const baseUrl = options.endpoint ?? \"https://api.passlock.dev\"\n\n      const { userId, passkeyId, username } = options\n      const { tenancyId } = options\n\n      const url = new URL(`/${tenancyId}/passkeys/${passkeyId}`, baseUrl)\n\n      const response = yield* fetchNetwork(\n        url,\n        \"patch\",\n        { userId, username },\n        {\n          headers: authorizationHeaders(options.apiKey),\n        }\n      )\n\n      const encoded: Passkey | NotFoundError | ForbiddenError =\n        yield* matchStatus(response, {\n          \"2xx\": (res) => decodeResponseJson(res, PasskeySchemas.Passkey),\n          orElse: (res) =>\n            decodeResponseJson(\n              res,\n              Schema.Union(NotFoundError, ForbiddenError)\n            ),\n        })\n\n      return yield* pipe(\n        Match.value(encoded),\n        Match.tag(\"Passkey\", (passkey) => Effect.succeed(passkey)),\n        Match.tag(\"@error/NotFound\", (err) => Effect.fail(err)),\n        Match.tag(\"@error/Forbidden\", (err) => Effect.fail(err)),\n        Match.exhaustive\n      )\n    }),\n    Effect.catchTags({\n      \"@error/NetworkPayload\": (err: NetworkPayloadError) => Effect.die(err),\n      \"@error/NetworkRequest\": (err: NetworkRequestError) => Effect.die(err),\n      \"@error/NetworkResponse\": (err: NetworkResponseError) => Effect.die(err),\n      ParseError: (err) => Effect.die(err),\n    }),\n    Effect.provide(fetchLayer)\n  )\n\n/* Update passkeys by userId (currently not exported) */\n\ninterface UpdateUserPasskeyOptions extends AuthenticatedOptions {\n  userId: string\n  username?: string\n}\n\nconst updateUserPasskeys = (\n  options: UpdateUserPasskeyOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<UpdatedPasskeys, NotFoundError | ForbiddenError> =>\n  pipe(\n    Effect.gen(function* () {\n      const baseUrl = options.endpoint ?? \"https://api.passlock.dev\"\n\n      const { userId, username } = options\n      const { tenancyId } = options\n\n      const url = new URL(`/${tenancyId}/users/${userId}/passkeys/`, baseUrl)\n\n      const response = yield* fetchNetwork(\n        url,\n        \"patch\",\n        { userId, username },\n        {\n          headers: authorizationHeaders(options.apiKey),\n        }\n      )\n\n      const encoded: UpdatedPasskeys | NotFoundError | ForbiddenError =\n        yield* matchStatus(response, {\n          \"2xx\": (res) =>\n            decodeResponseJson(res, PasskeySchemas.UpdatedPasskeys),\n          orElse: (res) =>\n            decodeResponseJson(\n              res,\n              Schema.Union(NotFoundError, ForbiddenError)\n            ),\n        })\n\n      return yield* pipe(\n        Match.value(encoded),\n        Match.tag(\"UpdatedPasskeys\", (result) => Effect.succeed(result)),\n        Match.tag(\"@error/NotFound\", (err) => Effect.fail(err)),\n        Match.tag(\"@error/Forbidden\", (err) => Effect.fail(err)),\n        Match.exhaustive\n      )\n    }),\n    Effect.catchTags({\n      \"@error/NetworkPayload\": (err: NetworkPayloadError) => Effect.die(err),\n      \"@error/NetworkRequest\": (err: NetworkRequestError) => Effect.die(err),\n      \"@error/NetworkResponse\": (err: NetworkResponseError) => Effect.die(err),\n      ParseError: (err) => Effect.die(err),\n    }),\n    Effect.provide(fetchLayer)\n  )\n\n/* Update usernames by userId */\n\nexport interface UpdatePasskeyUsernamesOptions extends AuthenticatedOptions {\n  userId: string\n  username: string\n  displayName?: string\n}\n\nexport const updatePasskeyUsernames = (\n  options: UpdatePasskeyUsernamesOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<UpdatedPasskeyUsernames, NotFoundError | ForbiddenError> =>\n  pipe(\n    updateUserPasskeys(options, fetchLayer),\n    Effect.map((result) => result.updated),\n    Effect.map(\n      Array.map((passkey) => {\n        return {\n          rpId: passkey.credential.rpId,\n          userId: passkey.credential.userId,\n          username: passkey.credential.username,\n          displayName: options.displayName ?? passkey.credential.username,\n        }\n      })\n    ),\n    Effect.map((credentials) => ({\n      _tag: \"UpdatedPasskeyUsernames\",\n      credentials,\n    }))\n  )\n\n/* List Passkeys */\n\nexport const listPasskeysStream = (\n  options: AuthenticatedOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Stream.Stream<PasskeySummary, ForbiddenError> =>\n  pipe(\n    Stream.paginateChunkEffect(null as string | null, (cursor) =>\n      pipe(\n        listPasskeys(cursor ? { ...options, cursor } : options, fetchLayer),\n        Effect.map((result) => [\n          Chunk.fromIterable(result.records),\n          Option.fromNullable(result.cursor),\n        ])\n      )\n    )\n  )\n\nexport interface ListPasskeyOptions extends AuthenticatedOptions {\n  cursor?: string\n}\n\nexport const listPasskeys = (\n  options: ListPasskeyOptions,\n  fetchLayer: Layer.Layer<NetworkFetch> = NetworkFetchLive\n): Effect.Effect<FindAllPasskeys, ForbiddenError> =>\n  pipe(\n    Effect.gen(function* () {\n      const baseUrl = options.endpoint ?? \"https://api.passlock.dev\"\n      const { tenancyId } = options\n\n      const url = new URL(`/${tenancyId}/passkeys/`, baseUrl)\n      if (options.cursor) {\n        url.searchParams.append(\"cursor\", options.cursor)\n      }\n\n      const response = yield* fetchNetwork(url, \"get\", undefined, {\n        headers: authorizationHeaders(options.apiKey),\n      })\n\n      const encoded: FindAllPasskeys | ForbiddenError = yield* matchStatus(\n        response,\n        {\n          \"2xx\": (res) => decodeResponseJson(res, FindAllPasskeysSchema),\n          orElse: (res) => decodeResponseJson(res, ForbiddenError),\n        }\n      )\n\n      return yield* pipe(\n        Match.value(encoded),\n        Match.tag(\"FindAllPasskeys\", (data) => Effect.succeed(data)),\n        Match.tag(\"@error/Forbidden\", (err) => Effect.fail(err)),\n        Match.exhaustive\n      )\n    }),\n    Effect.catchTags({\n      \"@error/NetworkPayload\": (err: NetworkPayloadError) => Effect.die(err),\n      \"@error/NetworkRequest\": (err: NetworkRequestError) => Effect.die(err),\n      \"@error/NetworkResponse\": (err: NetworkResponseError) => Effect.die(err),\n      ParseError: (err) => Effect.die(err),\n    }),\n    Effect.provide(fetchLayer)\n  )\n"]}

package/dist/principal/principal.d.ts

@@ -0,0 +1,22 @@
+import { Effect, type Layer } from "effect";
+import { type NetworkFetch } from "../network.js";
+import { ForbiddenError, InvalidCodeError } from "../schemas/errors.js";
+import { type ExtendedPrincipal, type Principal } from "../schemas/principal.js";
+import type { AuthenticatedOptions, PasslockOptions } from "../shared.js";
+export interface ExchangeCodeOptions extends AuthenticatedOptions {
+    code: string;
+}
+export declare const exchangeCode: (options: ExchangeCodeOptions, fetchLayer?: Layer.Layer<NetworkFetch>) => Effect.Effect<ExtendedPrincipal, InvalidCodeError | ForbiddenError>;
+declare const VerificationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").Equals<A, {}> extends true ? void : { readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }) => import("effect/Cause").YieldableError & {
+    readonly _tag: "@error/Verification";
+} & Readonly<A>;
+export declare class VerificationError extends VerificationError_base<{
+    message: string;
+}> {
+}
+export interface VerifyIdTokenOptions extends PasslockOptions {
+    token: string;
+}
+export declare const verifyIdToken: (options: VerifyIdTokenOptions) => Effect.Effect<Principal, VerificationError>;
+export {};
+//# sourceMappingURL=principal.d.ts.map

package/dist/principal/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/principal/principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,MAAM,EAAE,KAAK,KAAK,EAAuB,MAAM,QAAQ,CAAA;AAGtE,OAAO,EAGL,KAAK,YAAY,EAKlB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,EACL,KAAK,iBAAiB,EAGtB,KAAK,SAAS,EACf,MAAM,yBAAyB,CAAA;AAEhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEzE,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,IAAI,EAAE,MAAM,CAAA;CACb;AAED,eAAO,MAAM,YAAY,GACvB,SAAS,mBAAmB,EAC5B,aAAY,KAAK,CAAC,KAAK,CAAC,YAAY,CAAoB,KACvD,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,GAAG,cAAc,CAiDlE,CAAA;;;;AAEH,qBAAa,iBAAkB,SAAQ,uBAAwC;IAC7E,OAAO,EAAE,MAAM,CAAA;CAChB,CAAC;CAAG;AAEL,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,KAAK,EAAE,MAAM,CAAA;CACd;AAED,eAAO,MAAM,aAAa,GACxB,SAAS,oBAAoB,KAC5B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAwC1C,CAAA"}