@absolutejs/auth 0.74.0 → 0.75.0

package/README.md

@@ -118,13 +118,14 @@ stacked and reversible, and web/server runtimes never install the registry.
 When portable push is enabled, Auth also owns its authenticated installation
 boundary. Pass the existing Dispatch push lifecycle directly; the server derives
 the principal, tenant, and authorized topics and returns an opaque installation
-identity. The native shell is the only code that sees the APNs/FCM token, and
-ordinary application/page code cannot read it:
+identity. The native shell handles APNs/FCM tokens, while the generated PWA
+runtime handles structured browser subscriptions; ordinary page code reads
+neither provider credential:
 
 ```ts
 const authApplication = await auth({
 	// ...normal Auth + OIDC configuration
-	nativePush: {
+	push: {
 		registrar: pushLifecycle,
 		tenant: (principal) => principal.user.organizationId,
 		topics: (principal) => topicsFor(principal.user)
@@ -132,9 +133,10 @@ const authApplication = await auth({
 });
 ```
 
-The fixed `/auth/mobile/push` route accepts bearer-authenticated native clients
-and cookie-authenticated web clients, but never accepts user ID, tenant, or
-topics from either. Token rotation and deletion require the server-issued
+The fixed `/auth/push` route accepts bearer-authenticated native clients and
+cookie-authenticated web clients, but never accepts user ID, tenant, or topics
+from either. The prior `/auth/mobile/push` path remains an installed-client
+compatibility alias. Credential rotation and deletion require the server-issued
 installation identity and Dispatch verifies that it belongs to the current
 principal. Native sign-out attempts removal while credentials still exist and
 always clears the local provider registration even when the network is down.

package/dist/apikeys/routes.d.ts

@@ -31,7 +31,7 @@ export declare const apiKeysRoutes: ({ accessTokenStore, accessTokenTtlMs, apiCl
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/compliance/routes.d.ts

@@ -62,7 +62,7 @@ export declare const complianceRoutes: <UserType>({ authSessionStore, compliance
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/credentials/emailVerification.d.ts

@@ -46,7 +46,7 @@ export declare const credentialsEmailVerification: <UserType>({ credentialStore,
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/credentials/login.d.ts

@@ -41,7 +41,7 @@ export declare const credentialsLogin: <UserType>({ authSessionStore, checkBreac
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/credentials/passwordReset.d.ts

@@ -52,7 +52,7 @@ export declare const credentialsPasswordReset: <UserType>({ credentialStore, onP
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/credentials/register.d.ts

@@ -41,7 +41,7 @@ export declare const credentialsRegister: <UserType>({ authSessionStore, cookieS
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/htmx/configuredRoutes.d.ts

@@ -511,7 +511,7 @@ export declare const createConfiguredAuthHtmxRoutes: <UserType>({ authSessionSto
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/htmx/routes.d.ts

@@ -506,7 +506,7 @@ export declare const createAuthHtmxRoutes: <UserType extends AuthHtmxUser>(confi
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/index.js

@@ -6191,24 +6191,97 @@ var createMfaGate = ({ getUserId, mfaStore }) => async (user) => isMfaEnrolled(a
 
 // src/nativePush.ts
 import { Elysia as Elysia17, t as t11 } from "elysia";
+var DEFAULT_PUSH_ROUTE = "/auth/push";
 var DEFAULT_NATIVE_PUSH_ROUTE = "/auth/mobile/push";
 var requireServerText = (value, field) => {
   const normalized = value.trim();
   if (!normalized)
-    throw new TypeError(`Native push ${field} must not be empty.`);
+    throw new TypeError(`Push ${field} must not be empty.`);
   return normalized;
 };
 var isInstallationOwnershipError = (error) => error instanceof Error && error.name === "PushInstallationOwnershipError";
-var nativePushRoutes = ({
+var pushRoutes = ({
   accessTokens,
   authSessionStore,
   config
 }) => {
-  const resolveTenant = async (principal) => requireServerText(typeof config.tenant === "function" ? await config.tenant(principal) : config.tenant, "native tenant");
+  const resolveTenant = async (principal) => requireServerText(typeof config.tenant === "function" ? await config.tenant(principal) : config.tenant, "tenant");
   const resolveTopics = async (principal) => [
     ...new Set((await config.topics?.(principal) ?? []).map((topic) => requireServerText(topic, "topic")))
   ].sort();
-  return new Elysia17({ name: "@absolutejs/auth/native-push" }).use(sessionStore()).guard({
+  const register = async (body, principal) => {
+    try {
+      const registration = await config.registrar.registerInstallation({
+        ...body.installationId ? { installationId: body.installationId } : {},
+        ...body.locale ? { locale: body.locale } : {},
+        ...body.platform === "webpush" ? {
+          platform: body.platform,
+          subscription: body.subscription
+        } : { platform: body.platform, token: body.token },
+        tenant: await resolveTenant(principal),
+        topics: await resolveTopics(principal),
+        userId: principal.subject
+      });
+      return {
+        installationId: requireServerText(registration.installationId, "installation id"),
+        registered: true
+      };
+    } catch (error) {
+      if (isInstallationOwnershipError(error))
+        return null;
+      throw error;
+    }
+  };
+  const remove = async (installationId, principal) => {
+    try {
+      await config.registrar.removeInstallation({
+        installationId,
+        tenant: await resolveTenant(principal),
+        userId: principal.subject
+      });
+    } catch (error) {
+      if (isInstallationOwnershipError(error))
+        return false;
+      throw error;
+    }
+    return true;
+  };
+  const commonRegistrationFields = {
+    installationId: t11.Optional(t11.String({ maxLength: 128, minLength: 1 })),
+    locale: t11.Optional(t11.String({ maxLength: 64, minLength: 1 }))
+  };
+  const registrationBody = t11.Union([
+    t11.Object({
+      ...commonRegistrationFields,
+      platform: t11.Union([t11.Literal("apns"), t11.Literal("fcm")]),
+      token: t11.String({ maxLength: 8192, minLength: 1 })
+    }),
+    t11.Object({
+      ...commonRegistrationFields,
+      platform: t11.Literal("webpush"),
+      subscription: t11.Object({
+        endpoint: t11.String({ maxLength: 8192, minLength: 1 }),
+        keys: t11.Object({
+          auth: t11.String({ maxLength: 8192, minLength: 1 }),
+          p256dh: t11.String({ maxLength: 8192, minLength: 1 })
+        })
+      })
+    })
+  ]);
+  const registrationOptions = {
+    body: registrationBody,
+    beforeHandle: ({
+      pushPrincipal,
+      status
+    }) => pushPrincipal ? undefined : status("Unauthorized", "User is not authenticated")
+  };
+  const removalOptions = {
+    body: t11.Object({
+      installationId: t11.String({ maxLength: 128, minLength: 1 })
+    }),
+    beforeHandle: registrationOptions.beforeHandle
+  };
+  return new Elysia17({ name: "@absolutejs/auth/push" }).use(sessionStore()).guard({
     cookie: t11.Cookie({ user_session_id: userSessionIdTypebox }),
     schema: "merge"
   }).derive(async ({
@@ -6229,56 +6302,36 @@ var nativePushRoutes = ({
       authorization: headers.authorization,
       config: accessTokens
     });
-    return { nativePushPrincipal: principal };
-  }).post(DEFAULT_NATIVE_PUSH_ROUTE, {
-    body: t11.Object({
-      installationId: t11.Optional(t11.String({ maxLength: 128, minLength: 1 })),
-      locale: t11.Optional(t11.String({ maxLength: 64, minLength: 1 })),
-      platform: t11.Union([t11.Literal("apns"), t11.Literal("fcm")]),
-      token: t11.String({ maxLength: 8192, minLength: 1 })
-    }),
-    beforeHandle: ({ nativePushPrincipal, status }) => nativePushPrincipal ? undefined : status("Unauthorized", "User is not authenticated")
-  }, async ({ body, nativePushPrincipal, status }) => {
-    if (!nativePushPrincipal)
+    return { pushPrincipal: principal };
+  }).post(DEFAULT_PUSH_ROUTE, registrationOptions, async ({ body, pushPrincipal, status }) => {
+    if (!pushPrincipal)
       return status("Unauthorized", "User is not authenticated");
-    let registration;
-    try {
-      registration = await config.registrar.registerInstallation({
-        ...body.installationId ? { installationId: body.installationId } : {},
-        ...body.locale ? { locale: body.locale } : {},
-        platform: body.platform,
-        tenant: await resolveTenant(nativePushPrincipal),
-        token: body.token,
-        topics: await resolveTopics(nativePushPrincipal),
-        userId: nativePushPrincipal.subject
-      });
-    } catch (error) {
-      if (isInstallationOwnershipError(error))
-        return status("Conflict", {
-          code: "installation-ownership"
-        });
-      throw error;
-    }
-    return {
-      installationId: requireServerText(registration.installationId, "installation id"),
-      registered: true
-    };
-  }).delete(DEFAULT_NATIVE_PUSH_ROUTE, {
-    body: t11.Object({
-      installationId: t11.String({ maxLength: 128, minLength: 1 })
-    }),
-    beforeHandle: ({ nativePushPrincipal, status }) => nativePushPrincipal ? undefined : status("Unauthorized", "User is not authenticated")
-  }, async ({ body, nativePushPrincipal, status }) => {
-    if (!nativePushPrincipal)
+    const result = await register(body, pushPrincipal);
+    return result ?? status("Conflict", {
+      code: "installation-ownership"
+    });
+  }).post(DEFAULT_NATIVE_PUSH_ROUTE, registrationOptions, async ({ body, pushPrincipal, status }) => {
+    if (!pushPrincipal)
+      return status("Unauthorized", "User is not authenticated");
+    const result = await register(body, pushPrincipal);
+    return result ?? status("Conflict", {
+      code: "installation-ownership"
+    });
+  }).delete(DEFAULT_PUSH_ROUTE, removalOptions, async ({ body, pushPrincipal, status }) => {
+    if (!pushPrincipal)
+      return status("Unauthorized", "User is not authenticated");
+    return await remove(body.installationId, pushPrincipal) ? { removed: true } : status("Conflict", {
+      code: "installation-ownership"
+    });
+  }).delete(DEFAULT_NATIVE_PUSH_ROUTE, removalOptions, async ({ body, pushPrincipal, status }) => {
+    if (!pushPrincipal)
       return status("Unauthorized", "User is not authenticated");
-    await config.registrar.removeInstallation({
-      installationId: body.installationId,
-      tenant: await resolveTenant(nativePushPrincipal),
-      userId: nativePushPrincipal.subject
+    return await remove(body.installationId, pushPrincipal) ? { removed: true } : status("Conflict", {
+      code: "installation-ownership"
     });
-    return { removed: true };
   });
 };
+var nativePushRoutes = pushRoutes;
 
 // src/mfa/routes.ts
 import { Elysia as Elysia22 } from "elysia";
@@ -40047,6 +40100,7 @@ var buildAuthApplications = async (configuration) => {
     customProviders,
     mfa,
     nativePush: nativePush2,
+    push,
     verificationProvider,
     passwordless,
     lockout,
@@ -40083,8 +40137,11 @@ var buildAuthApplications = async (configuration) => {
     onRevocationError,
     onSessionCleanup
   } = configuration;
-  if (nativePush2 && !oidc)
-    throw new Error("nativePush requires the OIDC provider");
+  if (push && nativePush2)
+    throw new Error("Configure `push`, not both `push` and `nativePush`");
+  const pushConfig = push ?? nativePush2;
+  if (pushConfig && !oidc)
+    throw new Error("push requires the OIDC provider");
   if (agentAuth?.agentRegistration !== undefined) {
     if (oidc === undefined) {
       throw new Error("agentAuth.agentRegistration requires the OIDC provider");
@@ -40328,18 +40385,18 @@ var buildAuthApplications = async (configuration) => {
       emit: auditEmit
     }) : new Elysia48
   ]);
-  const nativePushApplication = new Elysia48;
-  if (nativePush2 && oidcConfig)
-    nativePushApplication.use(nativePushRoutes({
+  const pushApplication = new Elysia48;
+  if (pushConfig && oidcConfig)
+    pushApplication.use(pushRoutes({
       accessTokens: {
         oidc: oidcConfig,
         getUser: async (subject) => await getUser(subject) ?? null
       },
       authSessionStore,
-      config: nativePush2
+      config: pushConfig
     }));
   const extendedFeatureRoutes = new Elysia48().use([
-    nativePushApplication,
+    pushApplication,
     portal ? portalRoutes({ ...portal, emit: auditEmit }) : new Elysia48,
     webauthn ? webauthnRoutes({
       ...webauthn,
@@ -40496,6 +40553,7 @@ export {
   readSessionRing,
   readSessionCookie,
   readAuthSyncPartition,
+  pushRoutes,
   pushAuthorizationRequest,
   pruneInactiveUsers,
   providersFromEnv,
@@ -40886,6 +40944,7 @@ export {
   DEFAULT_SCIM_ROUTE,
   DEFAULT_ROLES_ROUTE,
   DEFAULT_RESET_TOKEN_TTL_MS,
+  DEFAULT_PUSH_ROUTE,
   DEFAULT_PORTAL_ROUTE,
   DEFAULT_PASSWORDLESS_SESSION_TTL_MS,
   DEFAULT_PASSWORDLESS_ROUTE,
@@ -40914,5 +40973,5 @@ export {
   ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV
 };
 
-//# debugId=3448A14AC106260464756E2164756E21
+//# debugId=A9E81CE91544BE6B64756E2164756E21
 //# sourceMappingURL=index.js.map