@voidhash/mimic-effect 0.0.8 → 1.0.0-beta.1

package/dist/Metrics.mjs

@@ -0,0 +1,106 @@
+import { Metric, MetricBoundaries } from "effect";
+
+//#region src/Metrics.ts
+/**
+* @voidhash/mimic-effect - Metrics
+*
+* Observability metrics using Effect's Metric API.
+*/
+/**
+* Current active WebSocket connections
+*/
+const connectionsActive = Metric.gauge("mimic.connections.active");
+/**
+* Total connections over lifetime
+*/
+const connectionsTotal = Metric.counter("mimic.connections.total");
+/**
+* Connection duration histogram (milliseconds)
+*/
+const connectionsDuration = Metric.histogram("mimic.connections.duration_ms", MetricBoundaries.exponential({
+	start: 100,
+	factor: 2,
+	count: 15
+}));
+/**
+* Connection errors (auth failures, etc.)
+*/
+const connectionsErrors = Metric.counter("mimic.connections.errors");
+/**
+* Documents currently in memory
+*/
+const documentsActive = Metric.gauge("mimic.documents.active");
+/**
+* New documents created
+*/
+const documentsCreated = Metric.counter("mimic.documents.created");
+/**
+* Documents restored from storage
+*/
+const documentsRestored = Metric.counter("mimic.documents.restored");
+/**
+* Documents garbage collected (evicted)
+*/
+const documentsEvicted = Metric.counter("mimic.documents.evicted");
+/**
+* Successfully processed transactions
+*/
+const transactionsProcessed = Metric.counter("mimic.transactions.processed");
+/**
+* Rejected transactions
+*/
+const transactionsRejected = Metric.counter("mimic.transactions.rejected");
+/**
+* Transaction processing latency histogram (milliseconds)
+*/
+const transactionsLatency = Metric.histogram("mimic.transactions.latency_ms", MetricBoundaries.exponential({
+	start: .1,
+	factor: 2,
+	count: 15
+}));
+/**
+* Snapshots saved to ColdStorage
+*/
+const storageSnapshots = Metric.counter("mimic.storage.snapshots");
+/**
+* Snapshot save duration histogram (milliseconds)
+*/
+const storageSnapshotLatency = Metric.histogram("mimic.storage.snapshot_latency_ms", MetricBoundaries.exponential({
+	start: 1,
+	factor: 2,
+	count: 12
+}));
+/**
+* WAL entries written to HotStorage
+*/
+const storageWalAppends = Metric.counter("mimic.storage.wal_appends");
+/**
+* Presence set operations
+*/
+const presenceUpdates = Metric.counter("mimic.presence.updates");
+/**
+* Active presence entries
+*/
+const presenceActive = Metric.gauge("mimic.presence.active");
+const MimicMetrics = {
+	connectionsActive,
+	connectionsTotal,
+	connectionsDuration,
+	connectionsErrors,
+	documentsActive,
+	documentsCreated,
+	documentsRestored,
+	documentsEvicted,
+	transactionsProcessed,
+	transactionsRejected,
+	transactionsLatency,
+	storageSnapshots,
+	storageSnapshotLatency,
+	storageWalAppends,
+	presenceUpdates,
+	presenceActive
+};
+
+//#endregion
+export { MimicMetrics, connectionsActive, connectionsDuration, connectionsErrors, connectionsTotal, documentsActive, documentsCreated, documentsEvicted, documentsRestored, presenceActive, presenceUpdates, storageSnapshotLatency, storageSnapshots, storageWalAppends, transactionsLatency, transactionsProcessed, transactionsRejected };
+//# sourceMappingURL=Metrics.mjs.map

package/dist/Metrics.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Metrics.mjs","names":[],"sources":["../src/Metrics.ts"],"sourcesContent":["/**\n * @voidhash/mimic-effect - Metrics\n *\n * Observability metrics using Effect's Metric API.\n */\nimport { Metric, MetricBoundaries } from \"effect\";\n\n// =============================================================================\n// Connection Metrics\n// =============================================================================\n\n/**\n * Current active WebSocket connections\n */\nexport const connectionsActive = Metric.gauge(\"mimic.connections.active\");\n\n/**\n * Total connections over lifetime\n */\nexport const connectionsTotal = Metric.counter(\"mimic.connections.total\");\n\n/**\n * Connection duration histogram (milliseconds)\n */\nexport const connectionsDuration = Metric.histogram(\n  \"mimic.connections.duration_ms\",\n  MetricBoundaries.exponential({\n    start: 100,\n    factor: 2,\n    count: 15, // Up to ~3.2 million ms (~53 minutes)\n  })\n);\n\n/**\n * Connection errors (auth failures, etc.)\n */\nexport const connectionsErrors = Metric.counter(\"mimic.connections.errors\");\n\n// =============================================================================\n// Document Metrics\n// =============================================================================\n\n/**\n * Documents currently in memory\n */\nexport const documentsActive = Metric.gauge(\"mimic.documents.active\");\n\n/**\n * New documents created\n */\nexport const documentsCreated = Metric.counter(\"mimic.documents.created\");\n\n/**\n * Documents restored from storage\n */\nexport const documentsRestored = Metric.counter(\"mimic.documents.restored\");\n\n/**\n * Documents garbage collected (evicted)\n */\nexport const documentsEvicted = Metric.counter(\"mimic.documents.evicted\");\n\n// =============================================================================\n// Transaction Metrics\n// =============================================================================\n\n/**\n * Successfully processed transactions\n */\nexport const transactionsProcessed = Metric.counter(\n  \"mimic.transactions.processed\"\n);\n\n/**\n * Rejected transactions\n */\nexport const transactionsRejected = Metric.counter(\n  \"mimic.transactions.rejected\"\n);\n\n/**\n * Transaction processing latency histogram (milliseconds)\n */\nexport const transactionsLatency = Metric.histogram(\n  \"mimic.transactions.latency_ms\",\n  MetricBoundaries.exponential({\n    start: 0.1,\n    factor: 2,\n    count: 15, // Up to ~1638 ms\n  })\n);\n\n// =============================================================================\n// Storage Metrics\n// =============================================================================\n\n/**\n * Snapshots saved to ColdStorage\n */\nexport const storageSnapshots = Metric.counter(\"mimic.storage.snapshots\");\n\n/**\n * Snapshot save duration histogram (milliseconds)\n */\nexport const storageSnapshotLatency = Metric.histogram(\n  \"mimic.storage.snapshot_latency_ms\",\n  MetricBoundaries.exponential({\n    start: 1,\n    factor: 2,\n    count: 12, // Up to ~4 seconds\n  })\n);\n\n/**\n * WAL entries written to HotStorage\n */\nexport const storageWalAppends = Metric.counter(\"mimic.storage.wal_appends\");\n\n// =============================================================================\n// Presence Metrics\n// =============================================================================\n\n/**\n * Presence set operations\n */\nexport const presenceUpdates = Metric.counter(\"mimic.presence.updates\");\n\n/**\n * Active presence entries\n */\nexport const presenceActive = Metric.gauge(\"mimic.presence.active\");\n\n// =============================================================================\n// Export namespace\n// =============================================================================\n\nexport const MimicMetrics = {\n  // Connection\n  connectionsActive,\n  connectionsTotal,\n  connectionsDuration,\n  connectionsErrors,\n\n  // Document\n  documentsActive,\n  documentsCreated,\n  documentsRestored,\n  documentsEvicted,\n\n  // Transaction\n  transactionsProcessed,\n  transactionsRejected,\n  transactionsLatency,\n\n  // Storage\n  storageSnapshots,\n  storageSnapshotLatency,\n  storageWalAppends,\n\n  // Presence\n  presenceUpdates,\n  presenceActive,\n};\n"],"mappings":";;;;;;;;;;;AAcA,MAAa,oBAAoB,OAAO,MAAM,2BAA2B;;;;AAKzE,MAAa,mBAAmB,OAAO,QAAQ,0BAA0B;;;;AAKzE,MAAa,sBAAsB,OAAO,UACxC,iCACA,iBAAiB,YAAY;CAC3B,OAAO;CACP,QAAQ;CACR,OAAO;CACR,CAAC,CACH;;;;AAKD,MAAa,oBAAoB,OAAO,QAAQ,2BAA2B;;;;AAS3E,MAAa,kBAAkB,OAAO,MAAM,yBAAyB;;;;AAKrE,MAAa,mBAAmB,OAAO,QAAQ,0BAA0B;;;;AAKzE,MAAa,oBAAoB,OAAO,QAAQ,2BAA2B;;;;AAK3E,MAAa,mBAAmB,OAAO,QAAQ,0BAA0B;;;;AASzE,MAAa,wBAAwB,OAAO,QAC1C,+BACD;;;;AAKD,MAAa,uBAAuB,OAAO,QACzC,8BACD;;;;AAKD,MAAa,sBAAsB,OAAO,UACxC,iCACA,iBAAiB,YAAY;CAC3B,OAAO;CACP,QAAQ;CACR,OAAO;CACR,CAAC,CACH;;;;AASD,MAAa,mBAAmB,OAAO,QAAQ,0BAA0B;;;;AAKzE,MAAa,yBAAyB,OAAO,UAC3C,qCACA,iBAAiB,YAAY;CAC3B,OAAO;CACP,QAAQ;CACR,OAAO;CACR,CAAC,CACH;;;;AAKD,MAAa,oBAAoB,OAAO,QAAQ,4BAA4B;;;;AAS5E,MAAa,kBAAkB,OAAO,QAAQ,yBAAyB;;;;AAKvE,MAAa,iBAAiB,OAAO,MAAM,wBAAwB;AAMnE,MAAa,eAAe;CAE1B;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CAGA;CACA;CACA;CAGA;CACA;CACA;CAGA;CACA;CACD"}

package/dist/MimicAuthService.cjs

@@ -1,55 +1,71 @@
-const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
-let effect_Effect = require("effect/Effect");
-effect_Effect = require_rolldown_runtime.__toESM(effect_Effect);
-let effect_Layer = require("effect/Layer");
-effect_Layer = require_rolldown_runtime.__toESM(effect_Layer);
-let effect_Context = require("effect/Context");
-effect_Context = require_rolldown_runtime.__toESM(effect_Context);
+const require_Errors = require('./Errors.cjs');
+let effect = require("effect");
 
 //#region src/MimicAuthService.ts
 /**
-* @since 0.0.1
-* Authentication service interface for Mimic connections.
-* Provides pluggable authentication adapters.
+* @voidhash/mimic-effect - MimicAuthService
+*
+* Authentication and authorization service interface and implementations.
 */
-var MimicAuthService_exports = /* @__PURE__ */ require_rolldown_runtime.__export({
-	MimicAuthServiceTag: () => MimicAuthServiceTag,
-	layer: () => layer,
-	layerEffect: () => layerEffect,
-	layerService: () => layerService,
-	make: () => make,
-	makeEffect: () => makeEffect
-});
 /**
-* Context tag for MimicAuthService service.
+* Context tag for MimicAuthService
 */
-var MimicAuthServiceTag = class extends effect_Context.Tag("@voidhash/mimic-server-effect/MimicAuthService")() {};
+var MimicAuthServiceTag = class extends effect.Context.Tag("@voidhash/mimic-effect/MimicAuthService")() {};
 /**
-* Create a MimicAuthService layer from an auth handler function.
+* Create a MimicAuthService layer from an Effect that produces the service.
+*
+* This allows you to access other Effect services when implementing authentication.
+*
+* @example
+* ```typescript
+* const Auth = MimicAuthService.make(
+*   Effect.gen(function*() {
+*     const db = yield* DatabaseService
+*     const jwt = yield* JwtService
+*
+*     return {
+*       authenticate: (token, documentId) =>
+*         Effect.gen(function*() {
+*           const payload = yield* jwt.verify(token).pipe(
+*             Effect.mapError(() => new AuthenticationError({ reason: "Invalid token" }))
+*           )
+*
+*           const permission = yield* db.getDocumentPermission(payload.userId, documentId)
+*
+*           return { userId: payload.userId, permission }
+*         })
+*     }
+*   })
+* )
+* ```
 */
-const layer = (options) => effect_Layer.succeed(MimicAuthServiceTag, { authenticate: (token) => effect_Effect.promise(() => Promise.resolve(options.authHandler(token))) });
-/**
-* Create a MimicAuthService layer from an auth service implementation.
-*/
-const layerService = (service) => effect_Layer.succeed(MimicAuthServiceTag, service);
-/**
-* Create a MimicAuthService layer from an Effect that produces an auth service.
-*/
-const layerEffect = (effect) => effect_Layer.effect(MimicAuthServiceTag, effect);
-/**
-* Create an auth service from an auth handler function.
-*/
-const make = (authHandler) => ({ authenticate: (token) => effect_Effect.promise(() => Promise.resolve(authHandler(token))) });
-/**
-* Create an auth service from an Effect-based authenticate function.
-*/
-const makeEffect = (authenticate) => ({ authenticate });
+const make = (effect$1) => effect.Layer.effect(MimicAuthServiceTag, effect$1);
+let NoAuth;
+(function(_NoAuth) {
+	_NoAuth.make = () => effect.Layer.succeed(MimicAuthServiceTag, { authenticate: (_token, _documentId) => effect.Effect.succeed({
+		userId: "anonymous",
+		permission: "write"
+	}) });
+})(NoAuth || (NoAuth = {}));
+let Static;
+(function(_Static) {
+	_Static.make = (options) => effect.Layer.succeed(MimicAuthServiceTag, { authenticate: (token, _documentId) => {
+		var _options$permissions$;
+		const permission = (_options$permissions$ = options.permissions[token]) !== null && _options$permissions$ !== void 0 ? _options$permissions$ : options.defaultPermission;
+		if (permission === void 0) return effect.Effect.fail(new require_Errors.AuthenticationError({ reason: "Unknown user" }));
+		return effect.Effect.succeed({
+			userId: token,
+			permission
+		});
+	} });
+})(Static || (Static = {}));
+const MimicAuthService = {
+	Tag: MimicAuthServiceTag,
+	make,
+	NoAuth,
+	Static
+};
 
 //#endregion
-exports.MimicAuthServiceTag = MimicAuthServiceTag;
-Object.defineProperty(exports, 'MimicAuthService_exports', {
-  enumerable: true,
-  get: function () {
-    return MimicAuthService_exports;
-  }
-});
+exports.MimicAuthService = MimicAuthService;
+exports.MimicAuthServiceTag = MimicAuthServiceTag;

package/dist/MimicAuthService.d.cts

@@ -1,65 +1,78 @@
-import * as Effect from "effect/Effect";
-import * as Layer from "effect/Layer";
-import * as Context from "effect/Context";
+import { AuthContext, Permission } from "./Types.cjs";
+import { AuthenticationError } from "./Errors.cjs";
+import { Context, Effect, Layer } from "effect";
 
 //#region src/MimicAuthService.d.ts
-declare namespace MimicAuthService_d_exports {
-  export { AuthHandler, AuthResult, MimicAuthService, MimicAuthServiceTag, layer, layerEffect, layerService, make, makeEffect };
-}
-/**
- * Result of an authentication attempt.
- */
-type AuthResult = {
-  readonly success: true;
-  readonly userId?: string;
-} | {
-  readonly success: false;
-  readonly error: string;
-};
-/**
- * Authentication handler function type.
- * Can be synchronous or return a Promise.
- */
-type AuthHandler = (token: string) => Promise<AuthResult> | AuthResult;
+
 /**
- * Authentication service interface.
- * Implementations can authenticate connections using various methods (JWT, API keys, etc.)
+ * MimicAuthService interface for authentication and authorization.
+ *
+ * The `authenticate` method receives the token from the client's auth message
+ * and the document ID being accessed. It should return an AuthContext on success
+ * or fail with AuthenticationError on failure.
+ *
+ * The permission in AuthContext determines what the user can do:
+ * - "read": Can subscribe, receive transactions, get snapshots
+ * - "write": All of the above, plus can submit transactions and set presence
  */
 interface MimicAuthService {
   /**
-   * Authenticate a connection using the provided token.
-   * @param token - The authentication token provided by the client
-   * @returns The authentication result
+   * Authenticate a connection and return authorization context.
+   *
+   * @param token - The token provided by the client
+   * @param documentId - The document ID being accessed
+   * @returns AuthContext with userId and permission level
    */
-  readonly authenticate: (token: string) => Effect.Effect<AuthResult>;
+  readonly authenticate: (token: string, documentId: string) => Effect.Effect<AuthContext, AuthenticationError>;
 }
-declare const MimicAuthServiceTag_base: Context.TagClass<MimicAuthServiceTag, "@voidhash/mimic-server-effect/MimicAuthService", MimicAuthService>;
+declare const MimicAuthServiceTag_base: Context.TagClass<MimicAuthServiceTag, "@voidhash/mimic-effect/MimicAuthService", MimicAuthService>;
 /**
- * Context tag for MimicAuthService service.
+ * Context tag for MimicAuthService
  */
 declare class MimicAuthServiceTag extends MimicAuthServiceTag_base {}
 /**
- * Create a MimicAuthService layer from an auth handler function.
- */
-declare const layer: (options: {
-  readonly authHandler: AuthHandler;
-}) => Layer.Layer<MimicAuthServiceTag>;
-/**
- * Create a MimicAuthService layer from an auth service implementation.
- */
-declare const layerService: (service: MimicAuthService) => Layer.Layer<MimicAuthServiceTag>;
-/**
- * Create a MimicAuthService layer from an Effect that produces an auth service.
- */
-declare const layerEffect: <E, R>(effect: Effect.Effect<MimicAuthService, E, R>) => Layer.Layer<MimicAuthServiceTag, E, R>;
-/**
- * Create an auth service from an auth handler function.
+ * No-authentication implementation.
+ *
+ * Everyone gets write access with userId "anonymous".
+ * ONLY USE FOR DEVELOPMENT/TESTING.
  */
-declare const make: (authHandler: AuthHandler) => MimicAuthService;
+declare namespace NoAuth {
+  /**
+   * Create a NoAuth layer.
+   * All connections are authenticated with write permission.
+   */
+  const make: () => Layer.Layer<MimicAuthServiceTag>;
+}
 /**
- * Create an auth service from an Effect-based authenticate function.
+ * Static permissions implementation.
+ *
+ * Permissions are defined at configuration time.
+ * The token is treated as the userId.
  */
-declare const makeEffect: (authenticate: (token: string) => Effect.Effect<AuthResult>) => MimicAuthService;
+declare namespace Static {
+  interface Options {
+    /**
+     * Map of userId (token) to permission level
+     */
+    readonly permissions: Record<string, Permission>;
+    /**
+     * Default permission for users not in the permissions map.
+     * If undefined, unknown users will fail authentication.
+     */
+    readonly defaultPermission?: Permission;
+  }
+  /**
+   * Create a Static auth layer.
+   * The token is treated as the userId, and permissions are looked up from the config.
+   */
+  const make: (options: Options) => Layer.Layer<MimicAuthServiceTag>;
+}
+declare const MimicAuthService: {
+  Tag: typeof MimicAuthServiceTag;
+  make: <E, R>(effect: Effect.Effect<MimicAuthService, E, R>) => Layer.Layer<MimicAuthServiceTag, E, R>;
+  NoAuth: typeof NoAuth;
+  Static: typeof Static;
+};
 //#endregion
-export { MimicAuthServiceTag, MimicAuthService_d_exports };
+export { MimicAuthService, MimicAuthServiceTag };
 //# sourceMappingURL=MimicAuthService.d.cts.map

package/dist/MimicAuthService.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"MimicAuthService.d.cts","names":[],"sources":["../src/MimicAuthService.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;KAgBY,UAAA;;;;;;AAAZ,CAAA;AAQA;;;;AAA6E,KAAjE,WAAA,GAAiE,CAAA,KAAA,EAAA,MAAA,EAAA,GAAhC,OAAgC,CAAxB,UAAwB,CAAA,GAAV,UAAU;AAU7E;AAOC;;;UAPgB,gBAAA;;AAgBjB;AAWA;;;EAEI,SAAM,YAAA,EAAA,CAAA,KAAA,EAAA,MAAA,EAAA,GAvBkC,MAAA,CAAO,MAuBzC,CAvBgD,UAuBhD,CAAA;;AASV,cA/BC,wBAgC4C,kBAAA,oBAAA,EAAA,gDAAA,kBAAA,CAAA;;;;AADuB,cAtBvD,mBAAA,SAA4B,wBAAA,CAsB2B;;;;AAO1D,cAlBG,KAkBI,EAAA,CAAA,OAAA,EAAA;EACF,SAAA,WAAA,EAlBS,WAkBT;CAAqB,EAAA,GAjBhC,KAAA,CAAM,KAiB0B,CAjBpB,mBAiBoB,CAAA;;;;AAUvB,cAlBA,YAkBqB,EAAA,CAAc,OAAA,EAlBV,gBAqBpC,EAAA,GArBuD,KAAA,CAAM,KAqB7D,CArBmE,mBAqBnE,CAAA;AAKF;;;AAEG,cAtBU,WAsBV,EAAA,CAAA,CAAA,EAAA,CAAA,CAAA,CAAA,MAAA,EArBO,MAAA,CAAO,MAqBd,CArBqB,gBAqBrB,EArBuC,CAqBvC,EArB0C,CAqB1C,CAAA,EAAA,GApBA,KAAA,CAAM,KAoBN,CApBY,mBAoBZ,EApBiC,CAoBjC,EApBoC,CAoBpC,CAAA;;;;cAVU,oBAAqB,gBAAc;;;;cAQnC,8CACsB,MAAA,CAAO,OAAO,gBAC9C"}
+{"version":3,"file":"MimicAuthService.d.cts","names":[],"sources":["../src/MimicAuthService.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAoCC;;;;;AASD;AAmDA;AAyBA;;AAK0B,UAtGT,gBAAA,CAsGS;EAKO;;;;;AA4BjC;;EA7EwB,SAAA,YAAA,EAAA,CAAA,KAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,EAAA,GA/CjB,MAAA,CAAO,MA+CU,CA/CH,WA+CG,EA/CU,mBA+CV,CAAA;;cA9CvB,wBA8C4C,kBAAA,oBAAA,EAAA,yCAAA,kBAAA,CAAA;;;;AACN,cAtC1B,mBAAA,SAA4B,wBAAA,CAsCF;;;;;;;kBAatB,MAAA;;;;;oBAKS,KAAA,CAAM,MAAM;;;;;;;;kBAoBrB,MAAA;;;;;0BAKS,eAAe;;;;;iCAKR;;;;;;wBAOD,YAAU,KAAA,CAAM,MAAM;;cAqBzC;;uBA7EH,MAAA,CAAO,OAAO,kBAAkB,GAAG,OAC1C,KAAA,CAAM,MAAM,qBAAqB,GAAG"}

package/dist/MimicAuthService.d.mts

@@ -1,65 +1,78 @@
-import * as Effect from "effect/Effect";
-import * as Layer from "effect/Layer";
-import * as Context from "effect/Context";
+import { AuthContext, Permission } from "./Types.mjs";
+import { AuthenticationError } from "./Errors.mjs";
+import { Context, Effect, Layer } from "effect";
 
 //#region src/MimicAuthService.d.ts
-declare namespace MimicAuthService_d_exports {
-  export { AuthHandler, AuthResult, MimicAuthService, MimicAuthServiceTag, layer, layerEffect, layerService, make, makeEffect };
-}
-/**
- * Result of an authentication attempt.
- */
-type AuthResult = {
-  readonly success: true;
-  readonly userId?: string;
-} | {
-  readonly success: false;
-  readonly error: string;
-};
-/**
- * Authentication handler function type.
- * Can be synchronous or return a Promise.
- */
-type AuthHandler = (token: string) => Promise<AuthResult> | AuthResult;
+
 /**
- * Authentication service interface.
- * Implementations can authenticate connections using various methods (JWT, API keys, etc.)
+ * MimicAuthService interface for authentication and authorization.
+ *
+ * The `authenticate` method receives the token from the client's auth message
+ * and the document ID being accessed. It should return an AuthContext on success
+ * or fail with AuthenticationError on failure.
+ *
+ * The permission in AuthContext determines what the user can do:
+ * - "read": Can subscribe, receive transactions, get snapshots
+ * - "write": All of the above, plus can submit transactions and set presence
  */
 interface MimicAuthService {
   /**
-   * Authenticate a connection using the provided token.
-   * @param token - The authentication token provided by the client
-   * @returns The authentication result
+   * Authenticate a connection and return authorization context.
+   *
+   * @param token - The token provided by the client
+   * @param documentId - The document ID being accessed
+   * @returns AuthContext with userId and permission level
    */
-  readonly authenticate: (token: string) => Effect.Effect<AuthResult>;
+  readonly authenticate: (token: string, documentId: string) => Effect.Effect<AuthContext, AuthenticationError>;
 }
-declare const MimicAuthServiceTag_base: Context.TagClass<MimicAuthServiceTag, "@voidhash/mimic-server-effect/MimicAuthService", MimicAuthService>;
+declare const MimicAuthServiceTag_base: Context.TagClass<MimicAuthServiceTag, "@voidhash/mimic-effect/MimicAuthService", MimicAuthService>;
 /**
- * Context tag for MimicAuthService service.
+ * Context tag for MimicAuthService
  */
 declare class MimicAuthServiceTag extends MimicAuthServiceTag_base {}
 /**
- * Create a MimicAuthService layer from an auth handler function.
- */
-declare const layer: (options: {
-  readonly authHandler: AuthHandler;
-}) => Layer.Layer<MimicAuthServiceTag>;
-/**
- * Create a MimicAuthService layer from an auth service implementation.
- */
-declare const layerService: (service: MimicAuthService) => Layer.Layer<MimicAuthServiceTag>;
-/**
- * Create a MimicAuthService layer from an Effect that produces an auth service.
- */
-declare const layerEffect: <E, R>(effect: Effect.Effect<MimicAuthService, E, R>) => Layer.Layer<MimicAuthServiceTag, E, R>;
-/**
- * Create an auth service from an auth handler function.
+ * No-authentication implementation.
+ *
+ * Everyone gets write access with userId "anonymous".
+ * ONLY USE FOR DEVELOPMENT/TESTING.
  */
-declare const make: (authHandler: AuthHandler) => MimicAuthService;
+declare namespace NoAuth {
+  /**
+   * Create a NoAuth layer.
+   * All connections are authenticated with write permission.
+   */
+  const make: () => Layer.Layer<MimicAuthServiceTag>;
+}
 /**
- * Create an auth service from an Effect-based authenticate function.
+ * Static permissions implementation.
+ *
+ * Permissions are defined at configuration time.
+ * The token is treated as the userId.
  */
-declare const makeEffect: (authenticate: (token: string) => Effect.Effect<AuthResult>) => MimicAuthService;
+declare namespace Static {
+  interface Options {
+    /**
+     * Map of userId (token) to permission level
+     */
+    readonly permissions: Record<string, Permission>;
+    /**
+     * Default permission for users not in the permissions map.
+     * If undefined, unknown users will fail authentication.
+     */
+    readonly defaultPermission?: Permission;
+  }
+  /**
+   * Create a Static auth layer.
+   * The token is treated as the userId, and permissions are looked up from the config.
+   */
+  const make: (options: Options) => Layer.Layer<MimicAuthServiceTag>;
+}
+declare const MimicAuthService: {
+  Tag: typeof MimicAuthServiceTag;
+  make: <E, R>(effect: Effect.Effect<MimicAuthService, E, R>) => Layer.Layer<MimicAuthServiceTag, E, R>;
+  NoAuth: typeof NoAuth;
+  Static: typeof Static;
+};
 //#endregion
-export { MimicAuthServiceTag, MimicAuthService_d_exports };
+export { MimicAuthService, MimicAuthServiceTag };
 //# sourceMappingURL=MimicAuthService.d.mts.map

package/dist/MimicAuthService.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"MimicAuthService.d.mts","names":[],"sources":["../src/MimicAuthService.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;KAgBY,UAAA;;;;;;AAAZ,CAAA;AAQA;;;;AAA6E,KAAjE,WAAA,GAAiE,CAAA,KAAA,EAAA,MAAA,EAAA,GAAhC,OAAgC,CAAxB,UAAwB,CAAA,GAAV,UAAU;AAU7E;AAOC;;;UAPgB,gBAAA;;AAgBjB;AAWA;;;EAEI,SAAM,YAAA,EAAA,CAAA,KAAA,EAAA,MAAA,EAAA,GAvBkC,MAAA,CAAO,MAuBzC,CAvBgD,UAuBhD,CAAA;;AASV,cA/BC,wBAgC4C,kBAAA,oBAAA,EAAA,gDAAA,kBAAA,CAAA;;;;AADuB,cAtBvD,mBAAA,SAA4B,wBAAA,CAsB2B;;;;AAO1D,cAlBG,KAkBI,EAAA,CAAA,OAAA,EAAA;EACF,SAAA,WAAA,EAlBS,WAkBT;CAAqB,EAAA,GAjBhC,KAAA,CAAM,KAiB0B,CAjBpB,mBAiBoB,CAAA;;;;AAUvB,cAlBA,YAkBqB,EAAA,CAAc,OAAA,EAlBV,gBAqBpC,EAAA,GArBuD,KAAA,CAAM,KAqB7D,CArBmE,mBAqBnE,CAAA;AAKF;;;AAEG,cAtBU,WAsBV,EAAA,CAAA,CAAA,EAAA,CAAA,CAAA,CAAA,MAAA,EArBO,MAAA,CAAO,MAqBd,CArBqB,gBAqBrB,EArBuC,CAqBvC,EArB0C,CAqB1C,CAAA,EAAA,GApBA,KAAA,CAAM,KAoBN,CApBY,mBAoBZ,EApBiC,CAoBjC,EApBoC,CAoBpC,CAAA;;;;cAVU,oBAAqB,gBAAc;;;;cAQnC,8CACsB,MAAA,CAAO,OAAO,gBAC9C"}
+{"version":3,"file":"MimicAuthService.d.mts","names":[],"sources":["../src/MimicAuthService.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAoCC;;;;;AASD;AAmDA;AAyBA;;AAK0B,UAtGT,gBAAA,CAsGS;EAKO;;;;;AA4BjC;;EA7EwB,SAAA,YAAA,EAAA,CAAA,KAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,EAAA,GA/CjB,MAAA,CAAO,MA+CU,CA/CH,WA+CG,EA/CU,mBA+CV,CAAA;;cA9CvB,wBA8C4C,kBAAA,oBAAA,EAAA,yCAAA,kBAAA,CAAA;;;;AACN,cAtC1B,mBAAA,SAA4B,wBAAA,CAsCF;;;;;;;kBAatB,MAAA;;;;;oBAKS,KAAA,CAAM,MAAM;;;;;;;;kBAoBrB,MAAA;;;;;0BAKS,eAAe;;;;;iCAKR;;;;;;wBAOD,YAAU,KAAA,CAAM,MAAM;;cAqBzC;;uBA7EH,MAAA,CAAO,OAAO,kBAAkB,GAAG,OAC1C,KAAA,CAAM,MAAM,qBAAqB,GAAG"}

package/dist/MimicAuthService.mjs

@@ -1,47 +1,71 @@
-import { __export } from "./_virtual/rolldown_runtime.mjs";
-import * as Effect from "effect/Effect";
-import * as Layer from "effect/Layer";
-import * as Context from "effect/Context";
+import { AuthenticationError } from "./Errors.mjs";
+import { Context, Effect, Layer } from "effect";
 
 //#region src/MimicAuthService.ts
 /**
-* @since 0.0.1
-* Authentication service interface for Mimic connections.
-* Provides pluggable authentication adapters.
+* @voidhash/mimic-effect - MimicAuthService
+*
+* Authentication and authorization service interface and implementations.
 */
-var MimicAuthService_exports = /* @__PURE__ */ __export({
-	MimicAuthServiceTag: () => MimicAuthServiceTag,
-	layer: () => layer,
-	layerEffect: () => layerEffect,
-	layerService: () => layerService,
-	make: () => make,
-	makeEffect: () => makeEffect
-});
 /**
-* Context tag for MimicAuthService service.
+* Context tag for MimicAuthService
 */
-var MimicAuthServiceTag = class extends Context.Tag("@voidhash/mimic-server-effect/MimicAuthService")() {};
+var MimicAuthServiceTag = class extends Context.Tag("@voidhash/mimic-effect/MimicAuthService")() {};
 /**
-* Create a MimicAuthService layer from an auth handler function.
+* Create a MimicAuthService layer from an Effect that produces the service.
+*
+* This allows you to access other Effect services when implementing authentication.
+*
+* @example
+* ```typescript
+* const Auth = MimicAuthService.make(
+*   Effect.gen(function*() {
+*     const db = yield* DatabaseService
+*     const jwt = yield* JwtService
+*
+*     return {
+*       authenticate: (token, documentId) =>
+*         Effect.gen(function*() {
+*           const payload = yield* jwt.verify(token).pipe(
+*             Effect.mapError(() => new AuthenticationError({ reason: "Invalid token" }))
+*           )
+*
+*           const permission = yield* db.getDocumentPermission(payload.userId, documentId)
+*
+*           return { userId: payload.userId, permission }
+*         })
+*     }
+*   })
+* )
+* ```
 */
-const layer = (options) => Layer.succeed(MimicAuthServiceTag, { authenticate: (token) => Effect.promise(() => Promise.resolve(options.authHandler(token))) });
-/**
-* Create a MimicAuthService layer from an auth service implementation.
-*/
-const layerService = (service) => Layer.succeed(MimicAuthServiceTag, service);
-/**
-* Create a MimicAuthService layer from an Effect that produces an auth service.
-*/
-const layerEffect = (effect) => Layer.effect(MimicAuthServiceTag, effect);
-/**
-* Create an auth service from an auth handler function.
-*/
-const make = (authHandler) => ({ authenticate: (token) => Effect.promise(() => Promise.resolve(authHandler(token))) });
-/**
-* Create an auth service from an Effect-based authenticate function.
-*/
-const makeEffect = (authenticate) => ({ authenticate });
+const make = (effect) => Layer.effect(MimicAuthServiceTag, effect);
+let NoAuth;
+(function(_NoAuth) {
+	_NoAuth.make = () => Layer.succeed(MimicAuthServiceTag, { authenticate: (_token, _documentId) => Effect.succeed({
+		userId: "anonymous",
+		permission: "write"
+	}) });
+})(NoAuth || (NoAuth = {}));
+let Static;
+(function(_Static) {
+	_Static.make = (options) => Layer.succeed(MimicAuthServiceTag, { authenticate: (token, _documentId) => {
+		var _options$permissions$;
+		const permission = (_options$permissions$ = options.permissions[token]) !== null && _options$permissions$ !== void 0 ? _options$permissions$ : options.defaultPermission;
+		if (permission === void 0) return Effect.fail(new AuthenticationError({ reason: "Unknown user" }));
+		return Effect.succeed({
+			userId: token,
+			permission
+		});
+	} });
+})(Static || (Static = {}));
+const MimicAuthService = {
+	Tag: MimicAuthServiceTag,
+	make,
+	NoAuth,
+	Static
+};
 
 //#endregion
-export { MimicAuthServiceTag, MimicAuthService_exports };
+export { MimicAuthService, MimicAuthServiceTag };
 //# sourceMappingURL=MimicAuthService.mjs.map