@absolutejs/auth 0.59.0 → 0.59.1

package/dist/linkedProviders/index.d.ts

@@ -0,0 +1,3 @@
+export { createOAuthAccountLinkedProviderCredentialResolver, type OAuthLinkedProviderAccount, type OAuthLinkedProviderAccountStore } from './oauthAccountResolver';
+export { createOAuthLinkedProviderCredentialResolver } from './oauthResolver';
+export { createLinkedProviderCredentialResolver } from './resolver';

package/dist/manifest.d.ts

@@ -0,0 +1,18 @@
+import type { AuthConfig } from './types';
+export declare const manifest: Omit<import("@absolutejs/manifest").PackageManifest<AuthConfig<unknown>, never>, "contract" | "settings" | "tools"> & (({
+    contract: 1;
+    tools?: Record<string, import("@absolutejs/manifest").LegacyManifestTool<never>> | undefined;
+} | {
+    contract: 2;
+    tools?: Record<string, import("@absolutejs/manifest").AuthorizedManifestTool<never>> | undefined;
+}) & {
+    settings: import("@sinclair/typebox").TObject<{
+        cleanupIntervalMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        cookieSecure: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+        maxSessions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        providersConfiguration: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+            scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        }>>>;
+        sessionDurationMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+    }>;
+});

package/dist/manifest.json

@@ -0,0 +1,373 @@
+{
+	"contract": 2,
+	"discovery": {
+		"audiences": [
+			"applications",
+			"agent-hosts"
+		],
+		"intents": [
+			"authenticate people and agents",
+			"issue scoped agent delegations",
+			"publish OAuth discovery"
+		],
+		"keywords": [
+			"auth",
+			"oauth",
+			"oidc",
+			"agents",
+			"delegation",
+			"device-flow"
+		],
+		"protocols": [
+			"OAuth 2.0",
+			"OpenID Connect",
+			"ID-JAG"
+		]
+	},
+	"identity": {
+		"accent": "#6366f1",
+		"category": "auth",
+		"description": "OAuth/OIDC sign-in for people and AI agents, including open auth.md registration, scoped delegation, agent account linking, 60+ providers, passkeys, MFA, enterprise SSO/SCIM, organizations, roles, and API keys.",
+		"docsUrl": "https://github.com/absolutejs/auth",
+		"name": "@absolutejs/auth",
+		"tagline": "Let people and agents create accounts and sign in."
+	},
+	"implements": [
+		{
+			"contract": "auth/session-store",
+			"factory": "createNeonAuthSessionStore",
+			"from": "@absolutejs/auth",
+			"requires": {
+				"env": [
+					{
+						"description": "Postgres connection string",
+						"example": "postgres://user:pass@host/db",
+						"key": "DATABASE_URL",
+						"secret": true
+					}
+				]
+			},
+			"title": "Your Postgres database (recommended)",
+			"wiring": {
+				"code": "createNeonAuthSessionStore(${env.DATABASE_URL} ?? \"\", decodeSessionUserRecord)",
+				"imports": [
+					{
+						"from": "@absolutejs/auth",
+						"names": [
+							"createNeonAuthSessionStore",
+							"decodeSessionUserRecord"
+						]
+					}
+				]
+			}
+		},
+		{
+			"contract": "auth/session-store",
+			"factory": "createInMemoryAuthSessionStore",
+			"from": "@absolutejs/auth",
+			"title": "In memory (development only — sign-ins reset on restart)",
+			"wiring": {
+				"code": "createInMemoryAuthSessionStore()",
+				"imports": [
+					{
+						"from": "@absolutejs/auth",
+						"names": [
+							"createInMemoryAuthSessionStore"
+						]
+					}
+				]
+			}
+		}
+	],
+	"lifecycle": [
+		{
+			"command": "bunx absolute-auth migrate",
+			"id": "migrate",
+			"idempotent": true,
+			"kind": "migration",
+			"title": "Set up the sign-in tables in your database",
+			"when": "after-install"
+		},
+		{
+			"command": "bunx absolute-auth migrate",
+			"id": "migrate-upgrade",
+			"idempotent": true,
+			"kind": "migration",
+			"title": "Apply new sign-in tables after upgrading",
+			"when": "after-upgrade"
+		}
+	],
+	"presets": [
+		{
+			"id": "social-login",
+			"title": "Social login (Google + GitHub)",
+			"values": {
+				"providersConfiguration": {
+					"github": {},
+					"google": {}
+				}
+			}
+		}
+	],
+	"requires": {
+		"env": [
+			{
+				"description": "Postgres connection string (sign-in tables live here)",
+				"example": "postgres://user:pass@host/db",
+				"key": "DATABASE_URL",
+				"secret": true
+			},
+			{
+				"description": "Discord OAuth client id",
+				"docsUrl": "https://discord.com/developers/applications",
+				"key": "DISCORD_CLIENT_ID",
+				"when": "providersConfiguration.discord"
+			},
+			{
+				"description": "Discord OAuth client secret",
+				"docsUrl": "https://discord.com/developers/applications",
+				"key": "DISCORD_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.discord"
+			},
+			{
+				"description": "Facebook OAuth client id",
+				"docsUrl": "https://developers.facebook.com/apps",
+				"key": "FACEBOOK_CLIENT_ID",
+				"when": "providersConfiguration.facebook"
+			},
+			{
+				"description": "Facebook OAuth client secret",
+				"docsUrl": "https://developers.facebook.com/apps",
+				"key": "FACEBOOK_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.facebook"
+			},
+			{
+				"description": "Github OAuth client id",
+				"docsUrl": "https://github.com/settings/developers",
+				"key": "GITHUB_CLIENT_ID",
+				"when": "providersConfiguration.github"
+			},
+			{
+				"description": "Github OAuth client secret",
+				"docsUrl": "https://github.com/settings/developers",
+				"key": "GITHUB_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.github"
+			},
+			{
+				"description": "Google OAuth client id",
+				"docsUrl": "https://console.cloud.google.com/apis/credentials",
+				"key": "GOOGLE_CLIENT_ID",
+				"when": "providersConfiguration.google"
+			},
+			{
+				"description": "Google OAuth client secret",
+				"docsUrl": "https://console.cloud.google.com/apis/credentials",
+				"key": "GOOGLE_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.google"
+			},
+			{
+				"description": "Linkedin OAuth client id",
+				"docsUrl": "https://www.linkedin.com/developers/apps",
+				"key": "LINKEDIN_CLIENT_ID",
+				"when": "providersConfiguration.linkedin"
+			},
+			{
+				"description": "Linkedin OAuth client secret",
+				"docsUrl": "https://www.linkedin.com/developers/apps",
+				"key": "LINKEDIN_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.linkedin"
+			},
+			{
+				"description": "Microsoft OAuth client id",
+				"docsUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade",
+				"key": "MICROSOFT_CLIENT_ID",
+				"when": "providersConfiguration.microsoft"
+			},
+			{
+				"description": "Microsoft OAuth client secret",
+				"docsUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade",
+				"key": "MICROSOFT_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.microsoft"
+			},
+			{
+				"description": "Slack OAuth client id",
+				"docsUrl": "https://api.slack.com/apps",
+				"key": "SLACK_CLIENT_ID",
+				"when": "providersConfiguration.slack"
+			},
+			{
+				"description": "Slack OAuth client secret",
+				"docsUrl": "https://api.slack.com/apps",
+				"key": "SLACK_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.slack"
+			},
+			{
+				"description": "Spotify OAuth client id",
+				"docsUrl": "https://developer.spotify.com/dashboard",
+				"key": "SPOTIFY_CLIENT_ID",
+				"when": "providersConfiguration.spotify"
+			},
+			{
+				"description": "Spotify OAuth client secret",
+				"docsUrl": "https://developer.spotify.com/dashboard",
+				"key": "SPOTIFY_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.spotify"
+			},
+			{
+				"description": "Twitch OAuth client id",
+				"docsUrl": "https://dev.twitch.tv/console/apps",
+				"key": "TWITCH_CLIENT_ID",
+				"when": "providersConfiguration.twitch"
+			},
+			{
+				"description": "Twitch OAuth client secret",
+				"docsUrl": "https://dev.twitch.tv/console/apps",
+				"key": "TWITCH_CLIENT_SECRET",
+				"secret": true,
+				"when": "providersConfiguration.twitch"
+			}
+		],
+		"peers": [
+			{
+				"name": "elysia",
+				"range": ">=1.0",
+				"reason": "plugin host"
+			}
+		],
+		"services": [
+			{
+				"description": "Stores accounts, sessions, and audit events",
+				"id": "postgres"
+			}
+		]
+	},
+	"settings": {
+		"type": "object",
+		"properties": {
+			"cleanupIntervalMs": {
+				"description": "How often expired sessions are swept, in milliseconds.",
+				"minimum": 1000,
+				"title": "Session cleanup interval",
+				"x-group": "advanced",
+				"type": "number"
+			},
+			"cookieSecure": {
+				"description": "Only send the sign-in cookie over HTTPS. Leave off in local development.",
+				"title": "HTTPS-only cookies",
+				"x-group": "advanced",
+				"type": "boolean"
+			},
+			"maxSessions": {
+				"description": "How many devices someone can stay signed in on at once.",
+				"minimum": 1,
+				"title": "Signed-in devices per person",
+				"x-group": "sessions",
+				"type": "integer"
+			},
+			"providersConfiguration": {
+				"description": "Which services people can sign in with. Each needs a client id and secret from that provider.",
+				"title": "Sign-in providers",
+				"x-group": "providers",
+				"type": "object",
+				"patternProperties": {
+					"^(.*)$": {
+						"type": "object",
+						"properties": {
+							"scope": {
+								"description": "Extra permissions to request from the provider.",
+								"title": "Permissions",
+								"type": "array",
+								"items": {
+									"type": "string"
+								}
+							}
+						}
+					}
+				}
+			},
+			"sessionDurationMs": {
+				"description": "How long someone stays signed in, in milliseconds. Default is 7 days.",
+				"minimum": 60000,
+				"title": "Stay signed in for",
+				"x-group": "sessions",
+				"type": "number"
+			}
+		}
+	},
+	"slots": {
+		"sessionStore": {
+			"configPath": "authSessionStore",
+			"contract": "auth/session-store",
+			"description": "Where live sign-in sessions are kept",
+			"known": [
+				"@absolutejs/auth#postgres",
+				"@absolutejs/auth#memory"
+			],
+			"required": true
+		},
+		"verificationProvider": {
+			"configPath": "verificationProvider",
+			"contract": "auth/verification-provider",
+			"description": "Provider-managed phone verification for MFA and future passwordless flows",
+			"known": [
+				"@absolutejs/auth-twilio"
+			],
+			"required": false
+		}
+	},
+	"wiring": [
+		{
+			"description": "Sign in with Google, GitHub, and 60+ other services. Add email/password later from settings.",
+			"id": "default",
+			"server": {
+				"code": ".use(\n\tawait auth({\n\t\t// TODO: return your application user for a session subject.\n\t\tgetUser: (sub) => ({ sub }),\n\t\tauthSessionStore: ${slot.sessionStore},\n\t\tcookieSecure: ${settings.cookieSecure},\n\t\tmaxSessions: ${settings.maxSessions},\n\t\tprovidersConfiguration: providersFromEnv(${settings.providersConfiguration} ?? {}),\n\t\tsessionDurationMs: ${settings.sessionDurationMs}\n\t})\n)",
+				"imports": [
+					{
+						"from": "@absolutejs/auth",
+						"names": [
+							"auth",
+							"providersFromEnv"
+						]
+					}
+				],
+				"placement": "server-plugin"
+			},
+			"title": "Social sign-in (OAuth)"
+		}
+	],
+	"tools": {
+		"list_sign_in_providers": {
+			"annotations": {
+				"readOnlyHint": true
+			},
+			"authorization": {
+				"approval": "never",
+				"audience": "admin",
+				"effects": [
+					"read"
+				],
+				"requiredScopes": [
+					"auth:inspect"
+				]
+			},
+			"capabilities": [
+				"read",
+				"glob"
+			],
+			"description": "List which sign-in providers this project has configured, and which are missing credentials.",
+			"input": {
+				"type": "object",
+				"properties": {}
+			},
+			"kind": "workspace"
+		}
+	}
+}

package/dist/oidc/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Declaration-stable OIDC provider entry point.
+ *
+ * Server applications that only need to issue and verify OAuth/OIDC tokens
+ * should import this subpath instead of loading every optional Auth feature
+ * through the package root.
+ */
+export type { OidcProviderConfig } from './config';
+export { generateSigningKey, jwkThumbprint, signJwt, signingVerificationKeys, toPublicJwk, verifyJwt, verifyJwtWithKeys, type SigningKey, type SigningKeyIdentity } from './keys';
+export { revokeOAuthClientCredentials } from './operator';
+export { createNeonAuthorizationCodeStore, createNeonClientAssertionJtiStore, createNeonClientRegistrationTokenStore, createNeonDeviceAuthorizationStore, createNeonInitialAccessTokenStore, createNeonOAuthClientStore, createNeonOidcRefreshTokenStore, createPostgresAuthorizationCodeStore, createPostgresClientAssertionJtiStore, createPostgresClientRegistrationTokenStore, createPostgresDeviceAuthorizationStore, createPostgresInitialAccessTokenStore, createPostgresOAuthClientStore, createPostgresOidcRefreshTokenStore } from './postgresStores';
+export type { AuthorizationCodeStore, ClientAssertionJtiStore, ClientRegistrationTokenStore, DeviceAuthorizationStore, InitialAccessTokenStore, OAuthClient, OAuthClientStore, OidcRefreshTokenConnection, OidcRefreshTokenStore } from './types';

package/dist/oidc/operator.d.ts

@@ -0,0 +1,14 @@
+import type { AuthorizationCodeStore, ClientRegistrationTokenStore, DeviceAuthorizationStore, OidcRefreshTokenStore } from './types';
+type OAuthClientCredentialStores = {
+    authorizationCodeStore: AuthorizationCodeStore;
+    clientRegistrationTokenStore: ClientRegistrationTokenStore;
+    deviceAuthorizationStore: DeviceAuthorizationStore;
+    refreshTokenStore: OidcRefreshTokenStore;
+};
+export declare const revokeOAuthClientCredentials: (clientId: string, stores: OAuthClientCredentialStores) => Promise<{
+    revokedAuthorizationCodes: number;
+    revokedDeviceAuthorizations: number;
+    revokedRefreshTokens: number;
+    revokedRegistrationTokens: number;
+}>;
+export {};

package/dist/plugins/denyDisposableEmail.d.ts

@@ -0,0 +1,7 @@
+export type DenyDisposableEmailDecision = {
+    allow: false;
+    reason: string;
+} | {
+    allow: true;
+};
+export declare const denyDisposableEmailPlugin: (email: string) => Promise<DenyDisposableEmailDecision>;

package/dist/plugins/discordAlert.d.ts

@@ -0,0 +1,7 @@
+import type { AuditEvent, AuditEventType, AuditSink } from '../audit/types';
+export type DiscordAlertOptions = {
+    events?: readonly AuditEventType[];
+    formatContent?: (event: AuditEvent) => string;
+    webhookUrl: string;
+};
+export declare const discordAlertPlugin: ({ events, formatContent, webhookUrl }: DiscordAlertOptions) => AuditSink;

package/dist/plugins/geoBlock.d.ts

@@ -0,0 +1,8 @@
+export type GeoBlockOptions = {
+    allowCountries: readonly string[];
+    denyCountries?: never;
+} | {
+    allowCountries?: never;
+    denyCountries: readonly string[];
+};
+export declare const geoBlockPlugin: (options: GeoBlockOptions) => (headers: Record<string, string | undefined>) => boolean;

package/dist/plugins/index.d.ts

@@ -0,0 +1,12 @@
+export { denyDisposableEmailPlugin } from './denyDisposableEmail';
+export type { DenyDisposableEmailDecision } from './denyDisposableEmail';
+export { discordAlertPlugin } from './discordAlert';
+export type { DiscordAlertOptions } from './discordAlert';
+export { geoBlockPlugin } from './geoBlock';
+export type { GeoBlockOptions } from './geoBlock';
+export { pagerdutyAlertPlugin } from './pagerdutyAlert';
+export type { PagerDutyAlertOptions, PagerDutySeverity } from './pagerdutyAlert';
+export { posthogIdentifyPlugin } from './posthogIdentify';
+export type { PosthogIdentifyOptions } from './posthogIdentify';
+export { slackAlertPlugin } from './slackAlert';
+export type { SlackAlertOptions } from './slackAlert';

package/dist/plugins/pagerdutyAlert.d.ts

@@ -0,0 +1,9 @@
+import type { AuditEventType, AuditSink } from '../audit/types';
+export type PagerDutySeverity = 'critical' | 'error' | 'info' | 'warning';
+export type PagerDutyAlertOptions = {
+    events?: readonly AuditEventType[];
+    routingKey: string;
+    severity?: PagerDutySeverity;
+    source?: string;
+};
+export declare const pagerdutyAlertPlugin: ({ events, routingKey, severity, source }: PagerDutyAlertOptions) => AuditSink;

package/dist/plugins/posthogIdentify.d.ts

@@ -0,0 +1,7 @@
+import type { AuditEvent, AuditSink } from '../audit/types';
+export type PosthogIdentifyOptions = {
+    host?: string;
+    projectApiKey: string;
+    properties?: (event: AuditEvent) => Record<string, unknown>;
+};
+export declare const posthogIdentifyPlugin: ({ host, projectApiKey, properties }: PosthogIdentifyOptions) => AuditSink;

package/dist/plugins/slackAlert.d.ts

@@ -0,0 +1,7 @@
+import type { AuditEvent, AuditEventType, AuditSink } from '../audit/types';
+export type SlackAlertOptions = {
+    events?: readonly AuditEventType[];
+    formatMessage?: (event: AuditEvent) => string;
+    webhookUrl: string;
+};
+export declare const slackAlertPlugin: ({ events, formatMessage, webhookUrl }: SlackAlertOptions) => AuditSink;

package/dist/providers/index.d.ts

@@ -0,0 +1,2 @@
+export type { CredentialsFor, OAuth2Client, OAuth2TokenResponse, OIDCProvider, PKCEProvider, ProviderConfiguration, ProviderOption, ProvidersMap, RefreshableProvider, RevocableProvider, ScopeRequiredProvider } from 'citra';
+export { decodeJWT, extractPropFromIdentity, isOIDCProviderOption, isPKCEProviderOption, isRefreshableOAuth2Client, isRefreshableProviderOption, isRevocableOAuth2Client, isRevocableProviderOption, isValidProviderOption, oidcProviderOptions, pkceProviderOptions, providerOptions, providers, refreshableProviderOptions, revocableProviderOptions, scopeRequiredProviderOptions } from 'citra';

package/dist/saml.d.ts

@@ -0,0 +1 @@
+export { createNodeSamlAdapter, type NodeSamlAdapterOptions } from './sso/nodeSamlAdapter';

package/dist/server.d.ts

@@ -0,0 +1,32 @@
+import type { AuthInstance } from './authContext';
+import type { AuthConfig } from './types';
+/**
+ * Create the complete AbsoluteJS auth application through a declaration-stable
+ * server entry point. Import this subpath in server applications so TypeScript
+ * does not need to load declarations for every optional Auth feature.
+ */
+export declare const auth: <UserType>(configuration: AuthConfig<UserType>) => Promise<AuthInstance<UserType>>;
+export { createAuthContext } from './authContext';
+export type { AuthInstance } from './authContext';
+export type { AuditSink } from './audit/types';
+export type { PortalConfig } from './portal/config';
+export type { SetupCapability, SetupSession, SetupSessionStore } from './portal/types';
+export { createSetupSession } from './portal/operations';
+export { createPostgresSetupSessionStore } from './portal/postgresSetupSessionStore';
+export { protectRoutePlugin } from './routes/protectRoute';
+export type { ScimConfig } from './scim/config';
+export type { ScimFilter, ScimGroup, ScimGroupInput, ScimTokenStore, ScimUser, ScimUserInput } from './scim/types';
+export { createPostgresScimTokenStore } from './scim/postgresScimTokenStore';
+export type { AuthSessionStore } from './session/types';
+export { VerificationProviderError, type VerificationCheckInput, type VerificationCheckResult, type VerificationCheckStatus, type VerificationProvider, type VerificationProviderErrorKind, type VerificationPurpose, type VerificationStartInput, type VerificationStartResult } from './verification/types';
+export type { NodeSamlAdapterOptions } from './sso/nodeSamlAdapter';
+export { createNodeSamlAdapter } from './sso/nodeSamlAdapter';
+export type { SsoIdentity, SSOConfig } from './sso/config';
+export type { SSOConnection, SSOConnectionStore } from './sso/types';
+export { createPostgresSsoConnectionStore } from './sso/postgresSsoConnectionStore';
+export { isUserSessionId } from './typeGuards';
+export { userSessionIdTypebox } from './typebox';
+export type { AuthConfig, OAuth2ConfigurationOptions, SessionData, UnregisteredSessionData, UserSessionId } from './types';
+export { instantiateUserSession } from './utils';
+export type { OAuth2TokenResponse, ProviderOption } from 'citra';
+export { extractPropFromIdentity, isValidProviderOption, providers } from 'citra';

package/dist/sso/nodeSamlAdapter.d.ts

@@ -0,0 +1,8 @@
+import 'reflect-metadata';
+import type { SamlAdapter } from './config';
+export type NodeSamlAdapterOptions = {
+    spPrivateKey?: string;
+    spCertificate?: string;
+    signatureAlgorithm?: 'sha1' | 'sha256' | 'sha512';
+};
+export declare const createNodeSamlAdapter: (options?: NodeSamlAdapterOptions) => Promise<SamlAdapter>;

package/dist/vault/index.d.ts

@@ -0,0 +1,5 @@
+export { createSecretCipher, createVersionedSecretCipher, type SecretCipher } from '../compliance/cipher';
+export { createVault, rotateVaultKey, type Vault } from './config';
+export { createInMemoryVaultStore } from './inMemoryVaultStore';
+export { createNeonVaultStore, createPostgresVaultStore, vaultEntriesTable } from './postgresVaultStore';
+export type { VaultEntry, VaultStore } from './types';

package/dist/webauthn/simpleWebAuthnAdapter.d.ts

@@ -0,0 +1,3 @@
+import 'reflect-metadata';
+import type { WebAuthnAdapter } from './adapter';
+export declare const createSimpleWebAuthnAdapter: () => Promise<WebAuthnAdapter>;

package/dist/webauthn.d.ts

@@ -0,0 +1 @@
+export { createSimpleWebAuthnAdapter } from './webauthn/simpleWebAuthnAdapter';

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.59.0",
+	"version": "0.59.1",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -22,7 +22,7 @@
 		"test": "bun test",
 		"format": "absolute prettier --write",
 		"lint": "absolute eslint",
-		"prepack": "bun -e \"for (const path of ['dist/oidc/config.d.ts','dist/oidc/types.d.ts','dist/oidc/postgresStores.d.ts']) if (!(await Bun.file(path).exists())) throw new Error('Run bun run build before packing: missing ' + path)\"",
+		"prepack": "bun -e \"for (const path of ['dist/index.d.ts','dist/server.d.ts','dist/agents/index.d.ts','dist/oidc/index.d.ts','dist/oidc/config.d.ts','dist/oidc/types.d.ts','dist/oidc/postgresStores.d.ts']) if (!(await Bun.file(path).exists())) throw new Error('Run bun run build before packing: missing ' + path)\"",
 		"typecheck": "absolute typecheck",
 		"verify-package": "absolute-manifest verify-package",
 		"check:package": "bun run typecheck && bun run lint && bun run test && bun run verify-package && bun run build && bun run verify-package --artifacts",