@yielded/auth 0.1.0-beta.1

package/dist/phone/lifecycleModels.d.mts

@@ -0,0 +1,164 @@
+import { HookDenied } from "../hooks/models.mjs";
+import { PhoneOtpRejected, PhoneOtpUnavailable } from "./models.mjs";
+import { Schema } from "effect";
+//#region src/phone/lifecycleModels.d.ts
+declare const PhoneCommandId: Schema.NonEmptyString;
+declare const PhoneLifecycleAction: Schema.Literals<readonly ["register", "verify", "change"]>;
+type PhoneLifecycleAction = typeof PhoneLifecycleAction.Type;
+declare const PhoneLifecyclePolicy: Schema.Struct<{
+  readonly maximumEvidenceAgeMillis: Schema.Int;
+  readonly requireImmediateInvalidation: Schema.Boolean;
+}>;
+type PhoneLifecyclePolicy = typeof PhoneLifecyclePolicy.Type;
+declare const PhoneAdmissionPolicy: Schema.Struct<{
+  readonly windowMillis: Schema.Int;
+  readonly networkRequests: Schema.Int;
+  readonly networkAttempts: Schema.Int;
+  readonly maximumMessages: Schema.Int;
+  readonly requestRetentionMillis: Schema.Int;
+}>;
+type PhoneAdmissionPolicy = typeof PhoneAdmissionPolicy.Type;
+declare const PhoneCustody: Schema.Struct<{
+  readonly phoneNumber: Schema.String;
+  readonly custodyRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+  readonly credentialRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+  readonly verifiedAtMillis: Schema.NullOr<Schema.Int>;
+  readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+  readonly credentialId: Schema.NonEmptyString;
+  readonly state: Schema.Literals<readonly ["unverified", "verified", "retired"]>;
+}>;
+type PhoneCustody = typeof PhoneCustody.Type;
+declare const PhoneLifecycleTarget: Schema.Struct<{
+  readonly phoneNumber: Schema.String;
+  readonly custody: Schema.NullOr<Schema.Struct<{
+    readonly phoneNumber: Schema.String;
+    readonly custodyRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly credentialRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly verifiedAtMillis: Schema.NullOr<Schema.Int>;
+    readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+    readonly credentialId: Schema.NonEmptyString;
+    readonly state: Schema.Literals<readonly ["unverified", "verified", "retired"]>;
+  }>>;
+  readonly revision: Schema.NullOr<Schema.Struct<{
+    readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+    readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly credentials: Schema.$Array<Schema.Struct<{
+      readonly credentialId: Schema.NonEmptyString;
+      readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    }>>;
+  }>>;
+  readonly source: Schema.NullOr<Schema.Struct<{
+    readonly phoneNumber: Schema.String;
+    readonly custodyRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly credentialRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly verifiedAtMillis: Schema.NullOr<Schema.Int>;
+    readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+    readonly credentialId: Schema.NonEmptyString;
+    readonly state: Schema.Literals<readonly ["unverified", "verified", "retired"]>;
+  }>>;
+  readonly eligible: Schema.Boolean;
+}>;
+type PhoneLifecycleTarget = typeof PhoneLifecycleTarget.Type;
+declare const PhoneActionChallenge: Schema.Struct<{
+  readonly moduleId: Schema.NonEmptyString;
+  readonly action: Schema.Literals<readonly ["verify", "change"]>;
+  readonly commandId: Schema.NonEmptyString;
+  readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
+  readonly phoneNumber: Schema.String;
+  readonly sourcePhoneNumber: Schema.optionalKey<Schema.String>;
+  readonly revision: Schema.Struct<{
+    readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+    readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly credentials: Schema.$Array<Schema.Struct<{
+      readonly credentialId: Schema.NonEmptyString;
+      readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    }>>;
+  }>;
+  readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
+}>;
+type PhoneActionChallenge = typeof PhoneActionChallenge.Type;
+declare const PhoneActionAuthorization: Schema.Struct<{
+  readonly challenge: Schema.Struct<{
+    readonly moduleId: Schema.NonEmptyString;
+    readonly action: Schema.Literals<readonly ["verify", "change"]>;
+    readonly commandId: Schema.NonEmptyString;
+    readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
+    readonly phoneNumber: Schema.String;
+    readonly sourcePhoneNumber: Schema.optionalKey<Schema.String>;
+    readonly revision: Schema.Struct<{
+      readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+      readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+      readonly credentials: Schema.$Array<Schema.Struct<{
+        readonly credentialId: Schema.NonEmptyString;
+        readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+      }>>;
+    }>;
+    readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
+  }>;
+  readonly evidence: Schema.Struct<{
+    readonly revision: Schema.Struct<{
+      readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+      readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+      readonly credentials: Schema.$Array<Schema.Struct<{
+        readonly credentialId: Schema.NonEmptyString;
+        readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+      }>>;
+    }>;
+    readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
+    readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
+    readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
+      readonly method: Schema.NonEmptyString;
+      readonly credentialId: Schema.NonEmptyString;
+      readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
+      readonly userVerified: Schema.Boolean;
+      readonly phishingResistant: Schema.Boolean;
+      readonly verifiedAt: Schema.DateTimeUtcFromMillis;
+    }>>;
+  }>;
+  readonly requirement: Schema.Struct<{
+    readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
+      readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
+      readonly userVerified: Schema.Boolean;
+      readonly phishingResistant: Schema.Boolean;
+      readonly minimumCredentials: Schema.Int;
+    }>>;
+    readonly maximumAgeMillis: Schema.Int;
+  }>;
+  readonly actionRequirement: Schema.Struct<{
+    readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
+      readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
+      readonly userVerified: Schema.Boolean;
+      readonly phishingResistant: Schema.Boolean;
+      readonly minimumCredentials: Schema.Int;
+    }>>;
+    readonly maximumAgeMillis: Schema.Int;
+  }>;
+}>;
+type PhoneActionAuthorization = typeof PhoneActionAuthorization.Type;
+declare const PhoneActionRequired_base: Schema.Class<PhoneActionRequired, Schema.TaggedStruct<"PhoneActionRequired", {}>, import("effect/Cause").YieldableError>;
+declare class PhoneActionRequired extends PhoneActionRequired_base {}
+declare const PhoneConfigurationError_base: Schema.Class<PhoneConfigurationError, Schema.TaggedStruct<"PhoneConfigurationError", {}>, import("effect/Cause").YieldableError>;
+declare class PhoneConfigurationError extends PhoneConfigurationError_base {}
+declare const PhoneLifecycleFailure: Schema.Union<readonly [typeof PhoneOtpRejected, typeof PhoneOtpUnavailable, typeof PhoneActionRequired, typeof PhoneConfigurationError, typeof HookDenied]>;
+declare const PhoneMutationDecision: Schema.Union<readonly [Schema.TaggedStruct<"Accepted", {
+  readonly credential: Schema.Struct<{
+    readonly moduleId: Schema.NonEmptyString;
+    readonly phoneNumber: Schema.String;
+    readonly custodyRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly verifiedAtMillis: Schema.Int;
+    readonly credentialId: Schema.NonEmptyString;
+    readonly credentialRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly revision: Schema.Struct<{
+      readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+      readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+      readonly credentials: Schema.$Array<Schema.Struct<{
+        readonly credentialId: Schema.NonEmptyString;
+        readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+      }>>;
+    }>;
+  }>;
+}>, Schema.TaggedStruct<"Rejected", {}>]>;
+type PhoneMutationDecision = typeof PhoneMutationDecision.Type;
+//#endregion
+export { PhoneActionAuthorization, PhoneActionChallenge, PhoneActionRequired, PhoneAdmissionPolicy, PhoneCommandId, PhoneConfigurationError, PhoneCustody, PhoneLifecycleAction, PhoneLifecycleFailure, PhoneLifecyclePolicy, PhoneLifecycleTarget, PhoneMutationDecision };
+//# sourceMappingURL=lifecycleModels.d.mts.map

package/dist/phone/lifecycleModels.mjs

@@ -0,0 +1,91 @@
+import { SubjectId, TokenDigest } from "../Schema.mjs";
+import { HookDenied } from "../hooks/models.mjs";
+import { AuthenticationEvidence, AuthenticationFlowId, AuthenticationRequirement, AuthenticationRevision, SecurityRevision } from "../sessions/models.mjs";
+import { PhoneCredentialSnapshot, PhoneNumber, PhoneOtpRejected, PhoneOtpUnavailable } from "./models.mjs";
+import { Schema } from "effect";
+//#region src/phone/lifecycleModels.ts
+const PhoneCommandId = Schema.NonEmptyString.check(Schema.isMaxLength(256));
+const PhoneLifecycleAction = Schema.Literals([
+	"register",
+	"verify",
+	"change"
+]);
+const PhoneLifecyclePolicy = Schema.Struct({
+	maximumEvidenceAgeMillis: Schema.Int.check(Schema.isBetween({
+		minimum: 1e3,
+		maximum: 3e5
+	})),
+	requireImmediateInvalidation: Schema.Boolean
+});
+const PhoneAdmissionPolicy = Schema.Struct({
+	windowMillis: Schema.Int.check(Schema.isBetween({
+		minimum: 1e3,
+		maximum: 864e5
+	})),
+	networkRequests: Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: 1e4
+	})),
+	networkAttempts: Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: 1e5
+	})),
+	maximumMessages: Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: 1e6
+	})),
+	requestRetentionMillis: Schema.Int.check(Schema.isBetween({
+		minimum: 36e5,
+		maximum: 2592e6
+	}))
+});
+const PhoneCustody = Schema.Struct({
+	phoneNumber: PhoneNumber,
+	custodyRevision: SecurityRevision,
+	credentialRevision: SecurityRevision,
+	verifiedAtMillis: Schema.NullOr(Schema.Int),
+	subjectId: SubjectId,
+	credentialId: Schema.NonEmptyString,
+	state: Schema.Literals([
+		"unverified",
+		"verified",
+		"retired"
+	])
+});
+const PhoneLifecycleTarget = Schema.Struct({
+	phoneNumber: PhoneNumber,
+	custody: Schema.NullOr(PhoneCustody),
+	revision: Schema.NullOr(AuthenticationRevision),
+	source: Schema.NullOr(PhoneCustody),
+	eligible: Schema.Boolean
+});
+const PhoneActionChallenge = Schema.Struct({
+	moduleId: Schema.NonEmptyString,
+	action: Schema.Literals(["verify", "change"]),
+	commandId: PhoneCommandId,
+	flowId: AuthenticationFlowId,
+	phoneNumber: PhoneNumber,
+	sourcePhoneNumber: Schema.optionalKey(PhoneNumber),
+	revision: AuthenticationRevision,
+	bindingDigest: TokenDigest
+});
+const PhoneActionAuthorization = Schema.Struct({
+	challenge: PhoneActionChallenge,
+	evidence: AuthenticationEvidence,
+	requirement: AuthenticationRequirement,
+	actionRequirement: AuthenticationRequirement
+});
+var PhoneActionRequired = class extends Schema.TaggedError()("PhoneActionRequired", {}) {};
+var PhoneConfigurationError = class extends Schema.TaggedError()("PhoneConfigurationError", {}) {};
+const PhoneLifecycleFailure = Schema.Union([
+	PhoneOtpRejected,
+	PhoneOtpUnavailable,
+	PhoneActionRequired,
+	PhoneConfigurationError,
+	HookDenied
+]);
+const PhoneMutationDecision = Schema.Union([Schema.TaggedStruct("Accepted", { credential: PhoneCredentialSnapshot }), Schema.TaggedStruct("Rejected", {})]);
+//#endregion
+export { PhoneActionAuthorization, PhoneActionChallenge, PhoneActionRequired, PhoneAdmissionPolicy, PhoneCommandId, PhoneConfigurationError, PhoneCustody, PhoneLifecycleAction, PhoneLifecycleFailure, PhoneLifecyclePolicy, PhoneLifecycleTarget, PhoneMutationDecision };
+
+//# sourceMappingURL=lifecycleModels.mjs.map

package/dist/phone/lifecycleModels.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycleModels.mjs","names":[],"sources":["../../src/phone/lifecycleModels.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\nimport { HookDenied } from \"../hooks/models\";\nimport { SubjectId, TokenDigest } from \"../Schema\";\nimport {\n  AuthenticationEvidence,\n  AuthenticationRequirement,\n  AuthenticationRevision,\n  SecurityRevision,\n  AuthenticationFlowId,\n} from \"../sessions/models\";\nimport {\n  PhoneCredentialSnapshot,\n  PhoneNumber,\n  PhoneOtpRejected,\n  PhoneOtpUnavailable,\n} from \"./models\";\nexport const PhoneCommandId = Schema.NonEmptyString.check(Schema.isMaxLength(256));\nexport const PhoneLifecycleAction = Schema.Literals([\"register\", \"verify\", \"change\"]);\nexport type PhoneLifecycleAction = typeof PhoneLifecycleAction.Type;\n\nexport const PhoneLifecyclePolicy = Schema.Struct({\n  maximumEvidenceAgeMillis: Schema.Int.check(Schema.isBetween({ minimum: 1000, maximum: 300000 })),\n  requireImmediateInvalidation: Schema.Boolean,\n});\n\nexport type PhoneLifecyclePolicy = typeof PhoneLifecyclePolicy.Type;\n\nexport const PhoneAdmissionPolicy = Schema.Struct({\n  windowMillis: Schema.Int.check(Schema.isBetween({ minimum: 1000, maximum: 86400000 })),\n  networkRequests: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 10000 })),\n  networkAttempts: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 100000 })),\n  maximumMessages: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1000000 })),\n  requestRetentionMillis: Schema.Int.check(\n    Schema.isBetween({ minimum: 3600000, maximum: 2592000000 }),\n  ),\n});\n\nexport type PhoneAdmissionPolicy = typeof PhoneAdmissionPolicy.Type;\n\nexport const PhoneCustody = Schema.Struct({\n  phoneNumber: PhoneNumber,\n  custodyRevision: SecurityRevision,\n  credentialRevision: SecurityRevision,\n  verifiedAtMillis: Schema.NullOr(Schema.Int),\n  subjectId: SubjectId,\n  credentialId: Schema.NonEmptyString,\n  state: Schema.Literals([\"unverified\", \"verified\", \"retired\"]),\n});\n\nexport type PhoneCustody = typeof PhoneCustody.Type;\n\nexport const PhoneLifecycleTarget = Schema.Struct({\n  phoneNumber: PhoneNumber,\n  custody: Schema.NullOr(PhoneCustody),\n  revision: Schema.NullOr(AuthenticationRevision),\n  source: Schema.NullOr(PhoneCustody),\n  eligible: Schema.Boolean,\n});\n\nexport type PhoneLifecycleTarget = typeof PhoneLifecycleTarget.Type;\n\nexport const PhoneActionChallenge = Schema.Struct({\n  moduleId: Schema.NonEmptyString,\n  action: Schema.Literals([\"verify\", \"change\"]),\n  commandId: PhoneCommandId,\n  flowId: AuthenticationFlowId,\n  phoneNumber: PhoneNumber,\n  sourcePhoneNumber: Schema.optionalKey(PhoneNumber),\n  revision: AuthenticationRevision,\n  bindingDigest: TokenDigest,\n});\n\nexport type PhoneActionChallenge = typeof PhoneActionChallenge.Type;\n\nexport const PhoneActionAuthorization = Schema.Struct({\n  challenge: PhoneActionChallenge,\n  evidence: AuthenticationEvidence,\n  requirement: AuthenticationRequirement,\n  actionRequirement: AuthenticationRequirement,\n});\n\nexport type PhoneActionAuthorization = typeof PhoneActionAuthorization.Type;\n\nexport class PhoneActionRequired extends Schema.TaggedError<PhoneActionRequired>()(\n  \"PhoneActionRequired\",\n  {},\n) {}\n\nexport class PhoneConfigurationError extends Schema.TaggedError<PhoneConfigurationError>()(\n  \"PhoneConfigurationError\",\n  {},\n) {}\n\nexport const PhoneLifecycleFailure = Schema.Union([\n  PhoneOtpRejected,\n  PhoneOtpUnavailable,\n  PhoneActionRequired,\n  PhoneConfigurationError,\n  HookDenied,\n]);\n\nexport const PhoneMutationDecision = Schema.Union([\n  Schema.TaggedStruct(\"Accepted\", { credential: PhoneCredentialSnapshot }),\n  Schema.TaggedStruct(\"Rejected\", {}),\n]);\n\nexport type PhoneMutationDecision = typeof PhoneMutationDecision.Type;\n"],"mappings":";;;;;;AAiBA,MAAa,iBAAiB,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;AACjF,MAAa,uBAAuB,OAAO,SAAS;CAAC;CAAY;CAAU;AAAQ,CAAC;AAGpF,MAAa,uBAAuB,OAAO,OAAO;CAChD,0BAA0B,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAM,SAAS;CAAO,CAAC,CAAC;CAC/F,8BAA8B,OAAO;AACvC,CAAC;AAID,MAAa,uBAAuB,OAAO,OAAO;CAChD,cAAc,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAM,SAAS;CAAS,CAAC,CAAC;CACrF,iBAAiB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAM,CAAC,CAAC;CAClF,iBAAiB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAO,CAAC,CAAC;CACnF,iBAAiB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAQ,CAAC,CAAC;CACpF,wBAAwB,OAAO,IAAI,MACjC,OAAO,UAAU;EAAE,SAAS;EAAS,SAAS;CAAW,CAAC,CAC5D;AACF,CAAC;AAID,MAAa,eAAe,OAAO,OAAO;CACxC,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB,OAAO,OAAO,OAAO,GAAG;CAC1C,WAAW;CACX,cAAc,OAAO;CACrB,OAAO,OAAO,SAAS;EAAC;EAAc;EAAY;CAAS,CAAC;AAC9D,CAAC;AAID,MAAa,uBAAuB,OAAO,OAAO;CAChD,aAAa;CACb,SAAS,OAAO,OAAO,YAAY;CACnC,UAAU,OAAO,OAAO,sBAAsB;CAC9C,QAAQ,OAAO,OAAO,YAAY;CAClC,UAAU,OAAO;AACnB,CAAC;AAID,MAAa,uBAAuB,OAAO,OAAO;CAChD,UAAU,OAAO;CACjB,QAAQ,OAAO,SAAS,CAAC,UAAU,QAAQ,CAAC;CAC5C,WAAW;CACX,QAAQ;CACR,aAAa;CACb,mBAAmB,OAAO,YAAY,WAAW;CACjD,UAAU;CACV,eAAe;AACjB,CAAC;AAID,MAAa,2BAA2B,OAAO,OAAO;CACpD,WAAW;CACX,UAAU;CACV,aAAa;CACb,mBAAmB;AACrB,CAAC;AAID,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA,CAAC,CACH,CAAC,CAAC,CAAC;AAEH,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,CAAC,CACH,CAAC,CAAC,CAAC;AAEH,MAAa,wBAAwB,OAAO,MAAM;CAChD;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAa,wBAAwB,OAAO,MAAM,CAChD,OAAO,aAAa,YAAY,EAAE,YAAY,wBAAwB,CAAC,GACvE,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC"}

package/dist/phone/models.d.mts

@@ -0,0 +1,41 @@
+import { Schema } from "effect";
+//#region src/phone/models.d.ts
+/** Canonical international input. Country eligibility belongs to the application. */
+declare const PhoneNumber: Schema.String;
+type PhoneNumber = typeof PhoneNumber.Type;
+declare const PhoneOtpComplete: Schema.Struct<{
+  readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
+  readonly phoneNumber: Schema.String;
+  readonly requestBinding: Schema.RedactedFromValue<Schema.String>;
+  readonly reference: Schema.Struct<{
+    readonly proofId: Schema.brand<Schema.String, "effect-auth/ProofId">;
+    readonly purpose: Schema.brand<Schema.String, "effect-auth/ProofPurpose">;
+    readonly keyId: Schema.String;
+  }>;
+  readonly code: Schema.RedactedFromValue<Schema.String>;
+}>;
+type PhoneOtpComplete = typeof PhoneOtpComplete.Type;
+declare const PhoneCredentialSnapshot: Schema.Struct<{
+  readonly moduleId: Schema.NonEmptyString;
+  readonly phoneNumber: Schema.String;
+  readonly custodyRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+  readonly verifiedAtMillis: Schema.Int;
+  readonly credentialId: Schema.NonEmptyString;
+  readonly credentialRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+  readonly revision: Schema.Struct<{
+    readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
+    readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    readonly credentials: Schema.$Array<Schema.Struct<{
+      readonly credentialId: Schema.NonEmptyString;
+      readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
+    }>>;
+  }>;
+}>;
+type PhoneCredentialSnapshot = typeof PhoneCredentialSnapshot.Type;
+declare const PhoneOtpRejected_base: Schema.Class<PhoneOtpRejected, Schema.TaggedStruct<"PhoneOtpRejected", {}>, import("effect/Cause").YieldableError>;
+declare class PhoneOtpRejected extends PhoneOtpRejected_base {}
+declare const PhoneOtpUnavailable_base: Schema.Class<PhoneOtpUnavailable, Schema.TaggedStruct<"PhoneOtpUnavailable", {}>, import("effect/Cause").YieldableError>;
+declare class PhoneOtpUnavailable extends PhoneOtpUnavailable_base {}
+//#endregion
+export { PhoneCredentialSnapshot, PhoneNumber, PhoneOtpComplete, PhoneOtpRejected, PhoneOtpUnavailable };
+//# sourceMappingURL=models.d.mts.map

package/dist/phone/models.mjs

@@ -0,0 +1,29 @@
+import { AuthenticationRevision, SecurityRevision } from "../sessions/models.mjs";
+import { ProofReference } from "../proofs/models.mjs";
+import { RequestBindingCredential, RequestBindingFlowId } from "../operations/requestBindingModels.mjs";
+import { Schema } from "effect";
+//#region src/phone/models.ts
+/** Canonical international input. Country eligibility belongs to the application. */
+const PhoneNumber = Schema.String.check(Schema.isPattern(/^\+[1-9][0-9]{1,14}$/));
+const PhoneOtpComplete = Schema.Struct({
+	flowId: RequestBindingFlowId,
+	phoneNumber: PhoneNumber,
+	requestBinding: RequestBindingCredential,
+	reference: ProofReference,
+	code: Schema.RedactedFromValue(Schema.String.check(Schema.isPattern(/^[0-9]{6,10}$/)))
+});
+const PhoneCredentialSnapshot = Schema.Struct({
+	moduleId: Schema.NonEmptyString.check(Schema.isMaxLength(128)),
+	phoneNumber: PhoneNumber,
+	custodyRevision: SecurityRevision,
+	verifiedAtMillis: Schema.Int,
+	credentialId: Schema.NonEmptyString.check(Schema.isMaxLength(256)),
+	credentialRevision: SecurityRevision,
+	revision: AuthenticationRevision
+});
+var PhoneOtpRejected = class extends Schema.TaggedError()("PhoneOtpRejected", {}) {};
+var PhoneOtpUnavailable = class extends Schema.TaggedError()("PhoneOtpUnavailable", {}) {};
+//#endregion
+export { PhoneCredentialSnapshot, PhoneNumber, PhoneOtpComplete, PhoneOtpRejected, PhoneOtpUnavailable };
+
+//# sourceMappingURL=models.mjs.map

package/dist/phone/models.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.mjs","names":[],"sources":["../../src/phone/models.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\nimport { RequestBindingCredential, RequestBindingFlowId } from \"../operations/requestBinding\";\nimport { ProofReference } from \"../proofs/models\";\nimport { AuthenticationRevision, SecurityRevision } from \"../sessions/models\";\n\n/** Canonical international input. Country eligibility belongs to the application. */\nexport const PhoneNumber = Schema.String.check(Schema.isPattern(/^\\+[1-9][0-9]{1,14}$/));\nexport type PhoneNumber = typeof PhoneNumber.Type;\n\nexport const PhoneOtpComplete = Schema.Struct({\n  flowId: RequestBindingFlowId,\n  phoneNumber: PhoneNumber,\n  requestBinding: RequestBindingCredential,\n  reference: ProofReference,\n  code: Schema.RedactedFromValue(Schema.String.check(Schema.isPattern(/^[0-9]{6,10}$/))),\n});\n\nexport type PhoneOtpComplete = typeof PhoneOtpComplete.Type;\n\nexport const PhoneCredentialSnapshot = Schema.Struct({\n  moduleId: Schema.NonEmptyString.check(Schema.isMaxLength(128)),\n  phoneNumber: PhoneNumber,\n  custodyRevision: SecurityRevision,\n  verifiedAtMillis: Schema.Int,\n  credentialId: Schema.NonEmptyString.check(Schema.isMaxLength(256)),\n  credentialRevision: SecurityRevision,\n  revision: AuthenticationRevision,\n});\n\nexport type PhoneCredentialSnapshot = typeof PhoneCredentialSnapshot.Type;\n\nexport class PhoneOtpRejected extends Schema.TaggedError<PhoneOtpRejected>()(\n  \"PhoneOtpRejected\",\n  {},\n) {}\n\nexport class PhoneOtpUnavailable extends Schema.TaggedError<PhoneOtpUnavailable>()(\n  \"PhoneOtpUnavailable\",\n  {},\n) {}\n"],"mappings":";;;;;;AAOA,MAAa,cAAc,OAAO,OAAO,MAAM,OAAO,UAAU,sBAAsB,CAAC;AAGvF,MAAa,mBAAmB,OAAO,OAAO;CAC5C,QAAQ;CACR,aAAa;CACb,gBAAgB;CAChB,WAAW;CACX,MAAM,OAAO,kBAAkB,OAAO,OAAO,MAAM,OAAO,UAAU,eAAe,CAAC,CAAC;AACvF,CAAC;AAID,MAAa,0BAA0B,OAAO,OAAO;CACnD,UAAU,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;CAC7D,aAAa;CACb,iBAAiB;CACjB,kBAAkB,OAAO;CACzB,cAAc,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;CACjE,oBAAoB;CACpB,UAAU;AACZ,CAAC;AAID,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAC1E,oBACA,CAAC,CACH,CAAC,CAAC,CAAC;AAEH,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA,CAAC,CACH,CAAC,CAAC,CAAC"}