@shivaedev/platform 0.3.7 → 0.4.0

package/dist/better-auth/where.js

@@ -0,0 +1,93 @@
+import { all, and, not, or } from "@shivaedev/effect-prisma";
+const escapeLike = (value) => value.replaceAll("\\", "\\\\").replaceAll("%", "\\%").replaceAll("_", "\\_");
+const nonNullValues = (value) => (Array.isArray(value) ? value : [value]).filter((item) => item !== null);
+const insensitiveStrings = (field, where, values) => {
+    const ilike = field.ilike;
+    if (where.mode !== "insensitive" || ilike === undefined || !values.every((item) => typeof item === "string")) {
+        return undefined;
+    }
+    return values.map((item) => ilike(escapeLike(String(item))));
+};
+const membership = (field, where) => {
+    const values = nonNullValues(where.value);
+    if (values.length === 0) {
+        return and(field.isNull(), field.isNotNull());
+    }
+    const matches = insensitiveStrings(field, where, values);
+    return matches === undefined ? field.in(values) : or(...matches);
+};
+const exclusion = (field, where) => {
+    const values = nonNullValues(where.value);
+    if (values.length === 0) {
+        return undefined;
+    }
+    const matches = insensitiveStrings(field, where, values);
+    return matches === undefined ? field.notIn(values) : and(...matches.map((match) => not(match)));
+};
+const likePattern = (operator, escaped) => {
+    if (operator === "contains")
+        return `%${escaped}%`;
+    return operator === "starts_with" ? `${escaped}%` : `%${escaped}`;
+};
+const pattern = (field, where) => {
+    if (typeof where.value !== "string") {
+        throw new TypeError(`${where.operator} requires a string value`);
+    }
+    const text = likePattern(where.operator, escapeLike(where.value));
+    return where.mode === "insensitive" && field.ilike !== undefined ? field.ilike(text) : field.like(text);
+};
+const insensitiveEquality = (field, where) => {
+    const value = where.value;
+    if (where.mode !== "insensitive" || typeof value !== "string" || field.ilike === undefined)
+        return undefined;
+    if (where.operator === "eq")
+        return field.ilike(escapeLike(value));
+    if (where.operator === "ne")
+        return not(field.ilike(escapeLike(value)));
+    return undefined;
+};
+const comparison = (field, where) => {
+    const value = where.value;
+    switch (where.operator) {
+        case "eq":
+            return value === null ? field.isNull() : field.eq(value);
+        case "ne":
+            return value === null ? field.isNotNull() : field.neq(value);
+        case "lt":
+            return field.lt(value);
+        case "lte":
+            return field.lte(value);
+        case "gt":
+            return field.gt(value);
+        case "gte":
+            return field.gte(value);
+        case "in":
+            return membership(field, where);
+        case "not_in":
+            return exclusion(field, where);
+        case "contains":
+        case "starts_with":
+        case "ends_with":
+            return pattern(field, where);
+    }
+};
+export const whereExpression = (fields, where) => {
+    const conjunctions = [];
+    const disjunctions = [];
+    for (const condition of where) {
+        const field = fields[condition.field];
+        if (field === undefined) {
+            throw new TypeError(`Unknown database field: ${condition.field}`);
+        }
+        const expression = insensitiveEquality(field, condition) ?? comparison(field, condition);
+        if (expression === undefined)
+            continue;
+        (condition.connector === "OR" ? disjunctions : conjunctions).push(expression);
+    }
+    if (disjunctions.length > 0)
+        conjunctions.push(or(...disjunctions));
+    if (conjunctions.length === 0)
+        return all();
+    return conjunctions.length === 1 ? conjunctions[0] : and(...conjunctions);
+};
+//# sourceMappingURL=where.js.map

package/dist/better-auth/where.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"where.js","sourceRoot":"","sources":["../../src/better-auth/where.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,0BAA0B,CAAC;AAuB7D,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAE3H,MAAM,aAAa,GAAG,CAAC,KAAc,EAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAE3I,MAAM,kBAAkB,GAAG,CAAC,KAAmB,EAAE,KAAmB,EAAE,MAA8B,EAAE,EAAE;IACvG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9G,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAE,KAAmB,EAAc,EAAE;IAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAE,KAAmB,EAA0B,EAAE;IACtF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAkC,EAAE,OAAe,EAAU,EAAE;IACnF,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,OAAO,GAAG,CAAC;IACnD,OAAO,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAAmB,EAAE,KAAmB,EAAc,EAAE;IACxE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,0BAA0B,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAmB,EAAE,KAAmB,EAA0B,EAAE;IAChG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7G,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAE,KAAmB,EAA0B,EAAE;IACvF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,IAAI;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC1D,KAAK,IAAI;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,IAAI;YACR,OAAO,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,KAAK,KAAK;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,IAAI;YACR,OAAO,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,KAAK,KAAK;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,IAAI;YACR,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,QAAQ;YACZ,OAAO,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa,CAAC;QACnB,KAAK,WAAW;YACf,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAoC,EAAE,KAAkC,EAA0B,EAAE;IACnI,MAAM,YAAY,GAAiB,EAAE,CAAC;IACtC,MAAM,YAAY,GAAiB,EAAE,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,2BAA2B,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACzF,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS;QACvC,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;IACpE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,EAAE,CAAC;IAC5C,OAAO,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;AAC3E,CAAC,CAAC"}

package/dist/better-auth.d.ts

@@ -1,2 +1,2 @@
-export { type EffectPrismaAdapterOptions, effectPrismaAdapter, } from "./better-auth/adapter.js";
+export { type EffectPrismaAdapterOptions, effectPrismaAdapter, } from "./better-auth/adapter.ts";
 //# sourceMappingURL=better-auth.d.ts.map

package/dist/errors/rejected-field.d.ts

@@ -0,0 +1,7 @@
+import { Option } from "effect";
+export interface RejectedField {
+    readonly field: string;
+    readonly message: string;
+}
+export declare const rejectedField: (error: unknown) => Option.Option<RejectedField>;
+//# sourceMappingURL=rejected-field.d.ts.map

package/dist/errors/rejected-field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejected-field.d.ts","sourceRoot":"","sources":["../../src/errors/rejected-field.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AAExC,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAMD,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,KAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CACF,CAAC"}

package/dist/errors/rejected-field.js

@@ -0,0 +1,5 @@
+import { Option, Schema } from "effect";
+const Rejected = Schema.Struct({ _tag: Schema.String, field: Schema.String, message: Schema.String });
+const decode = Schema.decodeUnknownOption(Rejected);
+export const rejectedField = (error) => Option.map(decode(error), ({ field, message }) => ({ field, message }));
+//# sourceMappingURL=rejected-field.js.map

package/dist/errors/rejected-field.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejected-field.js","sourceRoot":"","sources":["../../src/errors/rejected-field.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAOxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAEtG,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AAEpD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAgC,EAAE,CAC7E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC"}

package/dist/errors/taxonomy.d.ts

@@ -0,0 +1,40 @@
+import { Schema } from "effect";
+declare const NotFound_base: Schema.Class<NotFound, Schema.TaggedStruct<"NotFound", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class NotFound extends NotFound_base {
+}
+declare const Unauthorized_base: Schema.Class<Unauthorized, Schema.TaggedStruct<"Unauthorized", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class Unauthorized extends Unauthorized_base {
+}
+declare const Forbidden_base: Schema.Class<Forbidden, Schema.TaggedStruct<"Forbidden", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class Forbidden extends Forbidden_base {
+}
+declare const BadRequest_base: Schema.Class<BadRequest, Schema.TaggedStruct<"BadRequest", {
+    message: Schema.String;
+    field: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+export declare class BadRequest extends BadRequest_base {
+}
+declare const Conflict_base: Schema.Class<Conflict, Schema.TaggedStruct<"Conflict", {
+    message: Schema.String;
+    field: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+export declare class Conflict extends Conflict_base {
+}
+declare const PreconditionFailed_base: Schema.Class<PreconditionFailed, Schema.TaggedStruct<"PreconditionFailed", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class PreconditionFailed extends PreconditionFailed_base {
+}
+declare const AuthUnavailable_base: Schema.Class<AuthUnavailable, Schema.TaggedStruct<"AuthUnavailable", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class AuthUnavailable extends AuthUnavailable_base {
+}
+export {};
+//# sourceMappingURL=taxonomy.d.ts.map

package/dist/errors/taxonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.d.ts","sourceRoot":"","sources":["../../src/errors/taxonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;AAKhC,qBAAa,QAAS,SAAQ,aAAqD;CAAG;;;;AAEtF,qBAAa,YAAa,SAAQ,iBAA6D;CAAG;;;;AAElG,qBAAa,SAAU,SAAQ,cAAuD;CAAG;;;;;AAEzF,qBAAa,UAAW,SAAQ,eAAwD;CAAG;;;;;AAE3F,qBAAa,QAAS,SAAQ,aAAoD;CAAG;;;;AAErF,qBAAa,kBAAmB,SAAQ,uBAAyE;CAAG;;;;AAEpH,qBAAa,eAAgB,SAAQ,oBAAmE;CAAG"}

package/dist/errors/taxonomy.js

@@ -0,0 +1,18 @@
+import { Schema } from "effect";
+const described = { message: Schema.String };
+const perField = { message: Schema.String, field: Schema.optionalKey(Schema.String) };
+export class NotFound extends Schema.TaggedError()("NotFound", described) {
+}
+export class Unauthorized extends Schema.TaggedError()("Unauthorized", described) {
+}
+export class Forbidden extends Schema.TaggedError()("Forbidden", described) {
+}
+export class BadRequest extends Schema.TaggedError()("BadRequest", perField) {
+}
+export class Conflict extends Schema.TaggedError()("Conflict", perField) {
+}
+export class PreconditionFailed extends Schema.TaggedError()("PreconditionFailed", described) {
+}
+export class AuthUnavailable extends Schema.TaggedError()("AuthUnavailable", described) {
+}
+//# sourceMappingURL=taxonomy.js.map

package/dist/errors/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../../src/errors/taxonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC7C,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAEtF,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,WAAW,EAAY,CAAC,UAAU,EAAE,SAAS,CAAC;CAAG;AAEtF,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE,SAAS,CAAC;CAAG;AAElG,MAAM,OAAO,SAAU,SAAQ,MAAM,CAAC,WAAW,EAAa,CAAC,WAAW,EAAE,SAAS,CAAC;CAAG;AAEzF,MAAM,OAAO,UAAW,SAAQ,MAAM,CAAC,WAAW,EAAc,CAAC,YAAY,EAAE,QAAQ,CAAC;CAAG;AAE3F,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,WAAW,EAAY,CAAC,UAAU,EAAE,QAAQ,CAAC;CAAG;AAErF,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAAC,oBAAoB,EAAE,SAAS,CAAC;CAAG;AAEpH,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,EAAmB,CAAC,iBAAiB,EAAE,SAAS,CAAC;CAAG"}

package/dist/errors.d.ts

@@ -0,0 +1,3 @@
+export { type RejectedField, rejectedField } from "./errors/rejected-field.ts";
+export { AuthUnavailable, BadRequest, Conflict, Forbidden, NotFound, PreconditionFailed, Unauthorized } from "./errors/taxonomy.ts";
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/errors.js

@@ -0,0 +1,3 @@
+export { rejectedField } from "./errors/rejected-field.js";
+export { AuthUnavailable, BadRequest, Conflict, Forbidden, NotFound, PreconditionFailed, Unauthorized } from "./errors/taxonomy.js";
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/node-http/subscription-signal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-signal.d.ts","sourceRoot":"","sources":["../../src/node-http/subscription-signal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAUjD,MAAM,WAAW,6BAA6B;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACnD,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,sBAAsB;IACtC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC7B;AAOD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GAClC,SAAS,6BAA6B,KACpC,sBAgCF,CAAC"}
+{"version":3,"file":"subscription-signal.d.ts","sourceRoot":"","sources":["../../src/node-http/subscription-signal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,MAAM,WAAW,6BAA6B;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACnD,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,sBAAsB;IACtC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC7B;AAYD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GAAI,SAAS,6BAA6B,KAAG,sBAgC/E,CAAC"}

package/dist/node-http/subscription-signal.js

@@ -1,4 +1,9 @@
-const nodeRequestFrom = (request) => request?.runtime?.node?.req;
+const property = (value, key) => (typeof value === "object" && value !== null ? Reflect.get(value, key) : undefined);
+const isIncomingMessage = (value) => typeof property(value, "socket") === "object" && typeof property(value, "once") === "function";
+const nodeRequestFrom = (request) => {
+    const req = property(property(property(request, "runtime"), "node"), "req");
+    return isIncomingMessage(req) ? req : undefined;
+};
 /**
  * Combine Web/procedure abort signals with node request and socket close events.
  * The node events cover long-lived responses under Bun's node:http compatibility

package/dist/node-http/subscription-signal.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-signal.js","sourceRoot":"","sources":["../../src/node-http/subscription-signal.ts"],"names":[],"mappings":"AA0BA,MAAM,eAAe,GAAG,CACvB,OAA4B,EACE,EAAE,CAC/B,OAAsD,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACrC,OAAsC,EACb,EAAE;IAC3B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,MAAM,cAAc,GAAG,GAAG,EAAE;QAC3B,IAAI,CAAC,WAAW,CAAC,QAAQ;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACpC,IAAI,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAElE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACN,OAAO,EAAE,GAAG,EAAE;YACb,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACpD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;KAChC,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"subscription-signal.js","sourceRoot":"","sources":["../../src/node-http/subscription-signal.ts"],"names":[],"mappings":"AAkBA,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE/I,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAA4B,EAAE,CACtE,OAAO,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,UAAU,CAAC;AAEhG,MAAM,eAAe,GAAG,CAAC,OAA4B,EAA+B,EAAE;IACrF,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAsC,EAA0B,EAAE;IACxG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,MAAM,cAAc,GAAG,GAAG,EAAE;QAC3B,IAAI,CAAC,WAAW,CAAC,QAAQ;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACpC,IAAI,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAElE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACN,OAAO,EAAE,GAAG,EAAE;YACb,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACpD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;KAChC,CAAC;AACH,CAAC,CAAC"}

package/dist/node-http.d.ts

@@ -1,2 +1,2 @@
-export { type NodeSubscriptionSignal, type NodeSubscriptionSignalOptions, nodeSubscriptionSignal, } from "./node-http/subscription-signal.js";
+export { type NodeSubscriptionSignal, type NodeSubscriptionSignalOptions, nodeSubscriptionSignal, } from "./node-http/subscription-signal.ts";
 //# sourceMappingURL=node-http.d.ts.map

package/dist/rpc/identity.d.ts

@@ -0,0 +1,15 @@
+import { Context, type Option } from "effect";
+declare const RequestId_base: Context.ServiceClass<RequestId, "@shivaedev/platform/rpc/RequestId", string>;
+export declare class RequestId extends RequestId_base {
+}
+export interface IdentityValue {
+    readonly id: string;
+}
+declare const Identity_base: Context.ServiceClass<Identity, "@shivaedev/platform/rpc/Identity", IdentityValue>;
+export declare class Identity extends Identity_base {
+}
+declare const OptionalIdentity_base: Context.ServiceClass<OptionalIdentity, "@shivaedev/platform/rpc/OptionalIdentity", Option.Option<IdentityValue>>;
+export declare class OptionalIdentity extends OptionalIdentity_base {
+}
+export {};
+//# sourceMappingURL=identity.d.ts.map

package/dist/rpc/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/rpc/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;;AAE9C,qBAAa,SAAU,SAAQ,cAAyE;CAAG;AAE3G,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;;AAED,qBAAa,QAAS,SAAQ,aAA8E;CAAG;;AAE/G,qBAAa,gBAAiB,SAAQ,qBAA6G;CAAG"}

package/dist/rpc/identity.js

@@ -0,0 +1,8 @@
+import { Context } from "effect";
+export class RequestId extends Context.Service()("@shivaedev/platform/rpc/RequestId") {
+}
+export class Identity extends Context.Service()("@shivaedev/platform/rpc/Identity") {
+}
+export class OptionalIdentity extends Context.Service()("@shivaedev/platform/rpc/OptionalIdentity") {
+}
+//# sourceMappingURL=identity.js.map

package/dist/rpc/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/rpc/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,QAAQ,CAAC;AAE9C,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAAqB,CAAC,mCAAmC,CAAC;CAAG;AAM3G,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAA2B,CAAC,kCAAkC,CAAC;CAAG;AAE/G,MAAM,OAAO,gBAAiB,SAAQ,OAAO,CAAC,OAAO,EAAkD,CAAC,0CAA0C,CAAC;CAAG"}

package/dist/rpc/middleware.d.ts

@@ -0,0 +1,15 @@
+import { Schema } from "effect";
+import { RpcMiddleware } from "effect/unstable/rpc";
+import { AuthUnavailable, Forbidden, Unauthorized } from "../errors/taxonomy.ts";
+import type { Identity, OptionalIdentity, RequestId } from "./identity.ts";
+declare const RequestTracing_base: RpcMiddleware.ServiceClass<RequestTracing, "@shivaedev/platform/rpc/RequestTracing", RequestId, Schema.Never, never, never, false>;
+export declare class RequestTracing extends RequestTracing_base {
+}
+declare const Authenticated_base: RpcMiddleware.ServiceClass<Authenticated, "@shivaedev/platform/rpc/Authenticated", Identity, Schema.Union<readonly [typeof Unauthorized, typeof AuthUnavailable, typeof Forbidden]>, never, never, false>;
+export declare class Authenticated extends Authenticated_base {
+}
+declare const MaybeAuthenticated_base: RpcMiddleware.ServiceClass<MaybeAuthenticated, "@shivaedev/platform/rpc/MaybeAuthenticated", OptionalIdentity, Schema.Union<readonly [typeof AuthUnavailable, typeof Forbidden]>, never, never, false>;
+export declare class MaybeAuthenticated extends MaybeAuthenticated_base {
+}
+export {};
+//# sourceMappingURL=middleware.d.ts.map

package/dist/rpc/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/rpc/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;;AAE3E,qBAAa,cAAe,SAAQ,mBAA0G;CAAG;;AAEjJ,qBAAa,aAAc,SAAQ,kBAEjC;CAAG;;AAEL,qBAAa,kBAAmB,SAAQ,uBAGvC;CAAG"}

package/dist/rpc/middleware.js

@@ -0,0 +1,12 @@
+import { Schema } from "effect";
+import { RpcMiddleware } from "effect/unstable/rpc";
+import { AuthUnavailable, Forbidden, Unauthorized } from "../errors/taxonomy.js";
+export class RequestTracing extends RpcMiddleware.Service()("@shivaedev/platform/rpc/RequestTracing") {
+}
+export class Authenticated extends RpcMiddleware.Service()("@shivaedev/platform/rpc/Authenticated", {
+    error: Schema.Union([Unauthorized, AuthUnavailable, Forbidden]),
+}) {
+}
+export class MaybeAuthenticated extends RpcMiddleware.Service()("@shivaedev/platform/rpc/MaybeAuthenticated", { error: Schema.Union([AuthUnavailable, Forbidden]) }) {
+}
+//# sourceMappingURL=middleware.js.map

package/dist/rpc/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/rpc/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGjF,MAAM,OAAO,cAAe,SAAQ,aAAa,CAAC,OAAO,EAA2C,CAAC,wCAAwC,CAAC;CAAG;AAEjJ,MAAM,OAAO,aAAc,SAAQ,aAAa,CAAC,OAAO,EAAyC,CAAC,uCAAuC,EAAE;IAC1I,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;CAC/D,CAAC;CAAG;AAEL,MAAM,OAAO,kBAAmB,SAAQ,aAAa,CAAC,OAAO,EAAsD,CAClH,4CAA4C,EAC5C,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,EAAE,CACrD;CAAG"}

package/dist/rpc-server/adapters/better-auth-sessions.d.ts

@@ -0,0 +1,4 @@
+import type { SessionProvider, SessionShape } from "../session.ts";
+export type GetSession<Session extends SessionShape> = (headers: globalThis.Headers) => Promise<Session | null>;
+export declare const betterAuthSessions: <Session extends SessionShape>(getSession: GetSession<Session>) => SessionProvider<Session>;
+//# sourceMappingURL=better-auth-sessions.d.ts.map

package/dist/rpc-server/adapters/better-auth-sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-sessions.d.ts","sourceRoot":"","sources":["../../../src/rpc-server/adapters/better-auth-sessions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,MAAM,UAAU,CAAC,OAAO,SAAS,YAAY,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAQhH,eAAO,MAAM,kBAAkB,GAAI,OAAO,SAAS,YAAY,EAAE,YAAY,UAAU,CAAC,OAAO,CAAC,KAAG,eAAe,CAAC,OAAO,CAOxH,CAAC"}

package/dist/rpc-server/adapters/better-auth-sessions.js

@@ -0,0 +1,11 @@
+import { Effect, Option } from "effect";
+import { AuthUnavailable } from "../../errors/taxonomy.js";
+import { redact } from "../redact.js";
+const unavailable = (cause) => Effect.andThen(Effect.logError("Authentication provider failed", redact(cause)), Effect.fail(new AuthUnavailable({ message: "Authentication is temporarily unavailable" })));
+export const betterAuthSessions = (getSession) => ({
+    get: Effect.fn("PlatformRpc.betterAuthSession")(function* (headers) {
+        const session = yield* Effect.tryPromise(() => getSession(new globalThis.Headers(headers))).pipe(Effect.catch((error) => unavailable(error.cause)));
+        return Option.fromNullishOr(session);
+    }),
+});
+//# sourceMappingURL=better-auth-sessions.js.map

package/dist/rpc-server/adapters/better-auth-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-sessions.js","sourceRoot":"","sources":["../../../src/rpc-server/adapters/better-auth-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAKtC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,EAAE,CACtC,MAAM,CAAC,OAAO,CACb,MAAM,CAAC,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAChE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC,CAC1F,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAA+B,UAA+B,EAA4B,EAAE,CAAC,CAAC;IAC/H,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAwB;QAClF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/F,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACjD,CAAC;QACF,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC;CACF,CAAC,CAAC"}

package/dist/rpc-server/origin.d.ts

@@ -0,0 +1,15 @@
+import { Option } from "effect";
+import { Headers } from "effect/unstable/http";
+export interface OriginRequest {
+    readonly origin: Option.Option<string>;
+    readonly rpc: string;
+    readonly headers: Headers.Headers;
+}
+export type OriginPolicy = (request: OriginRequest) => boolean;
+export interface TrustedOriginsOptions {
+    readonly allow: ReadonlyArray<string>;
+    readonly missing: "allow" | "reject";
+}
+export declare const trustedOrigins: (options: TrustedOriginsOptions) => OriginPolicy;
+export declare const originRequest: (headers: Headers.Headers, rpc: string) => OriginRequest;
+//# sourceMappingURL=origin.d.ts.map

package/dist/rpc-server/origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.d.ts","sourceRoot":"","sources":["../../src/rpc-server/origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;CAClC;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC;AAE/D,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;CACrC;AAED,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAAG,YAK/B,CAAC;AAEL,eAAO,MAAM,aAAa,GAAI,SAAS,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM,KAAG,aAIpE,CAAC"}

package/dist/rpc-server/origin.js

@@ -0,0 +1,12 @@
+import { Option } from "effect";
+import { Headers } from "effect/unstable/http";
+export const trustedOrigins = (options) => ({ origin }) => Option.match(origin, {
+    onNone: () => options.missing === "allow",
+    onSome: (value) => options.allow.includes(value),
+});
+export const originRequest = (headers, rpc) => ({
+    origin: Headers.get(headers, "origin"),
+    rpc,
+    headers,
+});
+//# sourceMappingURL=origin.js.map

package/dist/rpc-server/origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.js","sourceRoot":"","sources":["../../src/rpc-server/origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAe/C,MAAM,CAAC,MAAM,cAAc,GAC1B,CAAC,OAA8B,EAAgB,EAAE,CACjD,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACd,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO;IACzC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAE,GAAW,EAAiB,EAAE,CAAC,CAAC;IACvF,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC;IACtC,GAAG;IACH,OAAO;CACP,CAAC,CAAC"}

package/dist/rpc-server/redact-cause.d.ts

@@ -0,0 +1,6 @@
+import { Cause, ErrorReporter } from "effect";
+import { type SensitiveKey } from "./sensitive.ts";
+export declare const redactDefect: (defect: unknown, sensitive?: SensitiveKey) => unknown;
+export declare const redactCause: <E>(cause: Cause.Cause<E>, sensitive?: SensitiveKey) => Cause.Cause<E>;
+export declare const redactingErrorReporter: (reporter: ErrorReporter.ErrorReporter, sensitive?: SensitiveKey) => ErrorReporter.ErrorReporter;
+//# sourceMappingURL=redact-cause.d.ts.map

package/dist/rpc-server/redact-cause.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-cause.d.ts","sourceRoot":"","sources":["../../src/rpc-server/redact-cause.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAW,aAAa,EAAa,MAAM,QAAQ,CAAC;AAElE,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAoB/E,eAAO,MAAM,YAAY,GAAI,QAAQ,OAAO,EAAE,YAAW,YAA6B,KAAG,OACF,CAAC;AAExF,eAAO,MAAM,WAAW,GAAI,CAAC,EAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAW,YAA6B,KAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAO5G,CAAC;AAEH,eAAO,MAAM,sBAAsB,GAClC,UAAU,aAAa,CAAC,aAAa,EACrC,YAAW,YAA6B,KACtC,aAAa,CAAC,aAGf,CAAC"}

package/dist/rpc-server/redact-cause.js

@@ -0,0 +1,28 @@
+import { Cause, Context, ErrorReporter, Predicate } from "effect";
+import { redact } from "./redact.js";
+import { isSensitiveKey, redactText } from "./sensitive.js";
+const reporterHints = (error, sensitive) => ({
+    ...(ErrorReporter.isIgnored(error) ? { [ErrorReporter.ignore]: true } : {}),
+    ...(ErrorReporter.severity in error ? { [ErrorReporter.severity]: ErrorReporter.getSeverity(error) } : {}),
+    ...(ErrorReporter.attributes in error ? { [ErrorReporter.attributes]: redact(ErrorReporter.getAttributes(error), sensitive) } : {}),
+});
+const redactError = (error, sensitive) => {
+    const options = error.cause === undefined ? undefined : { cause: redact(error.cause, sensitive) };
+    const copy = new Error(redactText(error.message, sensitive), options);
+    Object.defineProperty(copy, "name", { value: error.name, writable: true, configurable: true });
+    Object.defineProperty(copy, "stack", {
+        value: error.stack === undefined ? undefined : redactText(error.stack, sensitive),
+        writable: true,
+        configurable: true,
+    });
+    return Object.assign(copy, redact(Object.fromEntries(Object.entries(error)), sensitive), reporterHints(error, sensitive));
+};
+export const redactDefect = (defect, sensitive = isSensitiveKey) => Predicate.isError(defect) ? redactError(defect, sensitive) : redact(defect, sensitive);
+export const redactCause = (cause, sensitive = isSensitiveKey) => Cause.fromReasons(cause.reasons.flatMap((reason) => Cause.isDieReason(reason)
+    ? Cause.annotate(Cause.die(redactDefect(reason.defect, sensitive)), Context.makeUnsafe(reason.annotations)).reasons
+    : [reason]));
+export const redactingErrorReporter = (reporter, sensitive = isSensitiveKey) => ({
+    [ErrorReporter.TypeId]: ErrorReporter.TypeId,
+    report: (options) => reporter.report({ ...options, cause: redactCause(options.cause, sensitive) }),
+});
+//# sourceMappingURL=redact-cause.js.map

package/dist/rpc-server/redact-cause.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-cause.js","sourceRoot":"","sources":["../../src/rpc-server/redact-cause.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAqB,MAAM,gBAAgB,CAAC;AAE/E,MAAM,aAAa,GAAG,CAAC,KAAY,EAAE,SAAuB,EAAE,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,GAAG,CAAC,aAAa,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,GAAG,CAAC,aAAa,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACnI,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,SAAuB,EAAS,EAAE;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;IAClG,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC;QACjF,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAC3H,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAe,EAAE,YAA0B,cAAc,EAAW,EAAE,CAClG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAI,KAAqB,EAAE,YAA0B,cAAc,EAAkB,EAAE,CACjH,KAAK,CAAC,WAAW,CAChB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAkB,CAAC,MAAM,EAAE,EAAE,CACjD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;IACnH,CAAC,CAAC,CAAC,MAAM,CAAC,CACX,CACD,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACrC,QAAqC,EACrC,YAA0B,cAAc,EACV,EAAE,CAAC,CAAC;IAClC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM;IAC5C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;CAClG,CAAC,CAAC"}

package/dist/rpc-server/redact.d.ts

@@ -0,0 +1,3 @@
+import { type SensitiveKey } from "./sensitive.ts";
+export declare const redact: (value: unknown, sensitive?: SensitiveKey) => unknown;
+//# sourceMappingURL=redact.d.ts.map

package/dist/rpc-server/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/rpc-server/redact.ts"],"names":[],"mappings":"AACA,OAAO,EAAwC,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAwCzF,eAAO,MAAM,MAAM,GAAI,OAAO,OAAO,EAAE,YAAW,YAA6B,KAAG,OAAoC,CAAC"}

package/dist/rpc-server/redact.js

@@ -0,0 +1,46 @@
+import { Predicate, Redacted } from "effect";
+import { isSensitiveKey, REDACTED, redactText } from "./sensitive.js";
+const MAX_DEPTH = 8;
+const MAX_ENTRIES = 50;
+const binary = (value) => {
+    if (ArrayBuffer.isView(value))
+        return `<${value.constructor.name} ${value.byteLength} bytes>`;
+    if (value instanceof ArrayBuffer)
+        return `<ArrayBuffer ${value.byteLength} bytes>`;
+    return undefined;
+};
+const entriesOf = (value) => {
+    const entries = Object.entries(value);
+    if (!Predicate.isError(value))
+        return entries;
+    const shape = [
+        ["name", value.name],
+        ["message", value.message],
+        ["stack", value.stack],
+    ];
+    return value.cause === undefined ? [...shape, ...entries] : [...shape, ...entries, ["cause", value.cause]];
+};
+const walk = (value, sensitive, depth) => {
+    if (Redacted.isRedacted(value))
+        return REDACTED;
+    if (Predicate.isString(value))
+        return redactText(value, sensitive);
+    if (!Predicate.isObjectOrArray(value))
+        return value;
+    const summary = binary(value);
+    if (summary !== undefined)
+        return summary;
+    if (depth >= MAX_DEPTH)
+        return "<truncated>";
+    if (Array.isArray(value)) {
+        const items = value.slice(0, MAX_ENTRIES).map((item) => walk(item, sensitive, depth + 1));
+        return value.length > MAX_ENTRIES ? [...items, `<${value.length - MAX_ENTRIES} more items>`] : items;
+    }
+    const entries = entriesOf(value);
+    const kept = entries
+        .slice(0, MAX_ENTRIES)
+        .map(([key, nested]) => [key, sensitive(key) ? REDACTED : walk(nested, sensitive, depth + 1)]);
+    return Object.fromEntries(entries.length > MAX_ENTRIES ? [...kept, ["<truncated>", `${entries.length - MAX_ENTRIES} more keys`]] : kept);
+};
+export const redact = (value, sensitive = isSensitiveKey) => walk(value, sensitive, 0);
+//# sourceMappingURL=redact.js.map

package/dist/rpc-server/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/rpc-server/redact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAqB,MAAM,gBAAgB,CAAC;AAEzF,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAsB,EAAE;IACpD,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,SAAS,CAAC;IAC9F,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,gBAAgB,KAAK,CAAC,UAAU,SAAS,CAAC;IACnF,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAA4B,EAAE;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,MAAM,KAAK,GAA6B;QACvC,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;KACtB,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5G,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,SAAuB,EAAE,KAAa,EAAW,EAAE;IAChF,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,aAAa,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1F,OAAO,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO;SAClB,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAqB,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1I,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,YAA0B,cAAc,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC"}

package/dist/rpc-server/sensitive.d.ts

@@ -0,0 +1,5 @@
+export declare const REDACTED = "<redacted>";
+export type SensitiveKey = (key: string) => boolean;
+export declare const isSensitiveKey: SensitiveKey;
+export declare const redactText: (text: string, sensitive: SensitiveKey) => string;
+//# sourceMappingURL=sensitive.d.ts.map

package/dist/rpc-server/sensitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../../src/rpc-server/sensitive.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,eAAe,CAAC;AA0BrC,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AASpD,eAAO,MAAM,cAAc,EAAE,YAO5B,CAAC;AAcF,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,WAAW,YAAY,KAAG,MAGlE,CAAC"}

package/dist/rpc-server/sensitive.js

@@ -0,0 +1,49 @@
+export const REDACTED = "<redacted>";
+const MAX_STRING = 2048;
+const SENSITIVE_PARTS = [
+    "password",
+    "passphrase",
+    "secret",
+    "token",
+    "authorization",
+    "cookie",
+    "apikey",
+    "accesskey",
+    "credential",
+    "privatekey",
+    "jwt",
+    "bearer",
+    "signature",
+    "sessionid",
+    "cardnumber",
+    "accountnumber",
+    "csrf",
+    "xsrf",
+];
+const SENSITIVE_WORDS = ["otp", "pin", "cvv", "cvc", "ssn", "iban"];
+const SENSITIVE_NAMES = ["session", "pan"];
+const wordsOf = (key) => key
+    .replaceAll(/([a-z0-9])([A-Z])/g, "$1 $2")
+    .replaceAll(/([A-Z])([A-Z][a-z])/g, "$1 $2")
+    .toLowerCase()
+    .split(/[\s_-]+/);
+export const isSensitiveKey = (key) => {
+    const normalized = key.toLowerCase().replaceAll(/[-_]/g, "");
+    return (SENSITIVE_NAMES.includes(normalized) ||
+        SENSITIVE_PARTS.some((part) => normalized.includes(part)) ||
+        wordsOf(key).some((word) => SENSITIVE_WORDS.includes(word)));
+};
+const AUTH_SCHEME = /\b(Bearer|Basic)\s+[A-Za-z0-9._~+/-]+=*/gi;
+const JWT = /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/g;
+const URL_PASSWORD = /(\/\/[^:/\s@]+:)[^@/\s]+@/g;
+const ASSIGNMENT = /([A-Za-z][\w.-]*)(["']?\s*[=:]\s*["']?)([^\s"'&,;]+)/g;
+const scrub = (text, sensitive) => text
+    .replaceAll(AUTH_SCHEME, `$1 ${REDACTED}`)
+    .replaceAll(JWT, REDACTED)
+    .replaceAll(URL_PASSWORD, `$1${REDACTED}@`)
+    .replaceAll(ASSIGNMENT, (match, key, separator) => (sensitive(key) ? `${key}${separator}${REDACTED}` : match));
+export const redactText = (text, sensitive) => {
+    const scrubbed = scrub(text, sensitive);
+    return scrubbed.length > MAX_STRING ? `${scrubbed.slice(0, MAX_STRING)}…<${scrubbed.length - MAX_STRING} more chars>` : scrubbed;
+};
+//# sourceMappingURL=sensitive.js.map

package/dist/rpc-server/sensitive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.js","sourceRoot":"","sources":["../../src/rpc-server/sensitive.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,eAAe,GAAG;IACvB,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,eAAe;IACf,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,QAAQ;IACR,WAAW;IACX,WAAW;IACX,YAAY;IACZ,eAAe;IACf,MAAM;IACN,MAAM;CACN,CAAC;AACF,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAI3C,MAAM,OAAO,GAAG,CAAC,GAAW,EAAiB,EAAE,CAC9C,GAAG;KACD,UAAU,CAAC,oBAAoB,EAAE,OAAO,CAAC;KACzC,UAAU,CAAC,sBAAsB,EAAE,OAAO,CAAC;KAC3C,WAAW,EAAE;KACb,KAAK,CAAC,SAAS,CAAC,CAAC;AAEpB,MAAM,CAAC,MAAM,cAAc,GAAiB,CAAC,GAAG,EAAE,EAAE;IACnD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,CACN,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC3D,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,2CAA2C,CAAC;AAChE,MAAM,GAAG,GAAG,sDAAsD,CAAC;AACnE,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAClD,MAAM,UAAU,GAAG,uDAAuD,CAAC;AAE3E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,SAAuB,EAAU,EAAE,CAC/D,IAAI;KACF,UAAU,CAAC,WAAW,EAAE,MAAM,QAAQ,EAAE,CAAC;KACzC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;KACzB,UAAU,CAAC,YAAY,EAAE,KAAK,QAAQ,GAAG,CAAC;KAC1C,UAAU,CAAC,UAAU,EAAE,CAAC,KAAa,EAAE,GAAW,EAAE,SAAiB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAEzI,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,SAAuB,EAAU,EAAE;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,UAAU,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClI,CAAC,CAAC"}

package/dist/rpc-server/session.d.ts

@@ -0,0 +1,21 @@
+import { Effect, Layer, Option } from "effect";
+import type { Headers } from "effect/unstable/http";
+import { type AuthUnavailable, Forbidden } from "../errors/taxonomy.ts";
+import { Authenticated, MaybeAuthenticated } from "../rpc/middleware.ts";
+import { type OriginPolicy } from "./origin.ts";
+export interface SessionShape {
+    readonly user: {
+        readonly id: string;
+    };
+}
+export interface SessionProvider<Session extends SessionShape> {
+    readonly get: (headers: Headers.Headers) => Effect.Effect<Option.Option<Session>, AuthUnavailable>;
+}
+export interface SessionPolicy<Session extends SessionShape> {
+    readonly provider: SessionProvider<Session>;
+    readonly origin: OriginPolicy;
+}
+export declare const resolveSession: <Session extends SessionShape>(policy: SessionPolicy<Session>, headers: Headers.Headers, rpc: string) => Effect.Effect<Option.Option<Session>, AuthUnavailable | Forbidden>;
+export declare const authenticatedLayer: <Session extends SessionShape>(policy: SessionPolicy<Session>) => Layer.Layer<Authenticated>;
+export declare const maybeAuthenticatedLayer: <Session extends SessionShape>(policy: SessionPolicy<Session>) => Layer.Layer<MaybeAuthenticated>;
+//# sourceMappingURL=session.d.ts.map

package/dist/rpc-server/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/rpc-server/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAgB,MAAM,uBAAuB,CAAC;AAEtF,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,KAAK,YAAY,EAAiB,MAAM,aAAa,CAAC;AAG/D,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC;AAED,MAAM,WAAW,eAAe,CAAC,OAAO,SAAS,YAAY;IAC5D,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC;CACnG;AAED,MAAM,WAAW,aAAa,CAAC,OAAO,SAAS,YAAY;IAC1D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC9B;AAED,eAAO,MAAM,cAAc,EAAE,CAAC,OAAO,SAAS,YAAY,EACzD,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,EAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,EACxB,GAAG,EAAE,MAAM,KACP,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,CAMpE,CAAC;AAIH,eAAO,MAAM,kBAAkB,GAAI,OAAO,SAAS,YAAY,EAAE,QAAQ,aAAa,CAAC,OAAO,CAAC,KAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAQzH,CAAC;AAEH,eAAO,MAAM,uBAAuB,GAAI,OAAO,SAAS,YAAY,EAAE,QAAQ,aAAa,CAAC,OAAO,CAAC,KAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAQnI,CAAC"}