@absolutejs/auth 0.80.1 → 0.82.0

package/dist/manifest.json

@@ -333,7 +333,7 @@
 	},
 	"wiring": [
 		{
-			"description": "Sign in with Google, GitHub, and 60+ other services. Add email/password later from settings.",
+			"description": "Sign in with Google, GitHub, and 60+ other services. For email/password use get_credentials_integration and supply application-owned user, storage and email bindings.",
 			"id": "default",
 			"server": {
 				"code": ".use(\n\tawait auth({\n\t\t// TODO: return your application user for a session subject.\n\t\tgetUser: (sub) => ({ sub }),\n\t\tauthSessionStore: ${slot.sessionStore},\n\t\tcookieSecure: ${settings.cookieSecure},\n\t\tmaxSessions: ${settings.maxSessions},\n\t\tprovidersConfiguration: providersFromEnv(${settings.providersConfiguration} ?? {}),\n\t\tsessionDurationMs: ${settings.sessionDurationMs}\n\t})\n)",
@@ -352,6 +352,30 @@
 		}
 	],
 	"tools": {
+		"get_credentials_integration": {
+			"annotations": {
+				"readOnlyHint": true
+			},
+			"authorization": {
+				"approval": "never",
+				"audience": "admin",
+				"effects": [
+					"read"
+				],
+				"requiredScopes": [
+					"auth:inspect"
+				]
+			},
+			"capabilities": [
+				"read"
+			],
+			"description": "Get the package-owned typed email/password API and protected account route recipe. Reuse createCredentialsApi rather than inventing request wrappers. Requires application-owned user callbacks, a durable session and credential store, and real email delivery.",
+			"input": {
+				"type": "object",
+				"properties": {}
+			},
+			"kind": "workspace"
+		},
 		"list_sign_in_providers": {
 			"annotations": {
 				"readOnlyHint": true

package/dist/routes/signout.d.ts

@@ -5,7 +5,198 @@ type SignOutProps<UserType> = {
     signoutRoute?: RouteString;
     onSignOut: OnSignOut<UserType>;
 };
-export declare const signout: <UserType>({ authSessionStore, signoutRoute, onSignOut }: SignOutProps<UserType>) => import("elysia/types").AddRoute<"", "local", {
+/** Fixed path for directly typed Eden clients; the same session revocation and
+ * cookie-clearing implementation as auth's configurable sign-out route. */
+export declare const createSignoutApi: <UserType>(configuration: {
+    authSessionStore: AuthSessionStore<UserType>;
+    onSignOut?: OnSignOut<UserType>;
+}) => import("elysia/types").AddRoute<"", "local", {
+    decorator: {};
+    store: {
+        session: SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+    derive: {};
+}, {
+    typebox: {};
+    error: [];
+}, import("elysia/types").DefaultMetadata, {}, import("elysia/types").DefaultEphemeral, {
+    derive: {};
+    schema: {};
+    schemas: {};
+    response: {};
+    error: [];
+}, "delete", "/oauth2/signout", import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+    cookie: import("elysia").TCookieObject<{
+        auth_provider: import("typebox").TOptional<import("typebox").TString>;
+        user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+    }>;
+}, {}, "/oauth2/signout">, import("elysia/types").MergeScopedSchemas<{}, {}, {}>>, {}, ({ status, store: { session }, cookie: { user_session_id, auth_provider } }: {
+    body: unknown;
+    query: Record<string, string | undefined>;
+    params: {};
+    headers: Record<string, string | undefined>;
+    cookie: Record<string, import("elysia").Cookie<unknown>> & {
+        user_session_id: import("elysia").Cookie<`${string}-${string}-${string}-${string}-${string}` | undefined>;
+        auth_provider: import("elysia").Cookie<string | undefined>;
+    };
+    server: import("elysia").Server | null;
+    redirect: import("elysia").redirect;
+    set: {
+        headers: import("elysia").HTTPHeaders;
+        status?: number | keyof import("elysia").StatusMap;
+        cookie?: Record<string, import("elysia").BaseCookie>;
+    };
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+        readonly 100: "Continue";
+        readonly 101: "Switching Protocols";
+        readonly 102: "Processing";
+        readonly 103: "Early Hints";
+        readonly 200: "OK";
+        readonly 201: "Created";
+        readonly 202: "Accepted";
+        readonly 203: "Non-Authoritative Information";
+        readonly 204: "No Content";
+        readonly 205: "Reset Content";
+        readonly 206: "Partial Content";
+        readonly 207: "Multi-Status";
+        readonly 208: "Already Reported";
+        readonly 300: "Multiple Choices";
+        readonly 301: "Moved Permanently";
+        readonly 302: "Found";
+        readonly 303: "See Other";
+        readonly 304: "Not Modified";
+        readonly 307: "Temporary Redirect";
+        readonly 308: "Permanent Redirect";
+        readonly 400: "Bad Request";
+        readonly 401: "Unauthorized";
+        readonly 402: "Payment Required";
+        readonly 403: "Forbidden";
+        readonly 404: "Not Found";
+        readonly 405: "Method Not Allowed";
+        readonly 406: "Not Acceptable";
+        readonly 407: "Proxy Authentication Required";
+        readonly 408: "Request Timeout";
+        readonly 409: "Conflict";
+        readonly 410: "Gone";
+        readonly 411: "Length Required";
+        readonly 412: "Precondition Failed";
+        readonly 413: "Payload Too Large";
+        readonly 414: "URI Too Long";
+        readonly 415: "Unsupported Media Type";
+        readonly 416: "Range Not Satisfiable";
+        readonly 417: "Expectation Failed";
+        readonly 418: "I'm a teapot";
+        readonly 420: "Enhance Your Calm";
+        readonly 421: "Misdirected Request";
+        readonly 422: "Unprocessable Content";
+        readonly 423: "Locked";
+        readonly 424: "Failed Dependency";
+        readonly 425: "Too Early";
+        readonly 426: "Upgrade Required";
+        readonly 428: "Precondition Required";
+        readonly 429: "Too Many Requests";
+        readonly 431: "Request Header Fields Too Large";
+        readonly 451: "Unavailable For Legal Reasons";
+        readonly 500: "Internal Server Error";
+        readonly 501: "Not Implemented";
+        readonly 502: "Bad Gateway";
+        readonly 503: "Service Unavailable";
+        readonly 504: "Gateway Timeout";
+        readonly 505: "HTTP Version Not Supported";
+        readonly 506: "Variant Also Negotiates";
+        readonly 507: "Insufficient Storage";
+        readonly 508: "Loop Detected";
+        readonly 510: "Not Extended";
+        readonly 511: "Network Authentication Required";
+    }[Code] : Code>(code: Code, response?: T) => import("elysia").ElysiaStatus<Code, T, Code extends "Continue" | "Switching Protocols" | "Processing" | "Early Hints" | "OK" | "Created" | "Accepted" | "Non-Authoritative Information" | "No Content" | "Reset Content" | "Partial Content" | "Multi-Status" | "Already Reported" | "Multiple Choices" | "Moved Permanently" | "Found" | "See Other" | "Not Modified" | "Temporary Redirect" | "Permanent Redirect" | "Bad Request" | "Unauthorized" | "Payment Required" | "Forbidden" | "Not Found" | "Method Not Allowed" | "Not Acceptable" | "Proxy Authentication Required" | "Request Timeout" | "Conflict" | "Gone" | "Length Required" | "Precondition Failed" | "Payload Too Large" | "URI Too Long" | "Unsupported Media Type" | "Range Not Satisfiable" | "Expectation Failed" | "I'm a teapot" | "Enhance Your Calm" | "Misdirected Request" | "Unprocessable Content" | "Locked" | "Failed Dependency" | "Too Early" | "Upgrade Required" | "Precondition Required" | "Too Many Requests" | "Request Header Fields Too Large" | "Unavailable For Legal Reasons" | "Internal Server Error" | "Not Implemented" | "Bad Gateway" | "Service Unavailable" | "Gateway Timeout" | "HTTP Version Not Supported" | "Variant Also Negotiates" | "Insufficient Storage" | "Loop Detected" | "Not Extended" | "Network Authentication Required" ? {
+        readonly Continue: 100;
+        readonly "Switching Protocols": 101;
+        readonly Processing: 102;
+        readonly "Early Hints": 103;
+        readonly OK: 200;
+        readonly Created: 201;
+        readonly Accepted: 202;
+        readonly "Non-Authoritative Information": 203;
+        readonly "No Content": 204;
+        readonly "Reset Content": 205;
+        readonly "Partial Content": 206;
+        readonly "Multi-Status": 207;
+        readonly "Already Reported": 208;
+        readonly "Multiple Choices": 300;
+        readonly "Moved Permanently": 301;
+        readonly Found: 302;
+        readonly "See Other": 303;
+        readonly "Not Modified": 304;
+        readonly "Temporary Redirect": 307;
+        readonly "Permanent Redirect": 308;
+        readonly "Bad Request": 400;
+        readonly Unauthorized: 401;
+        readonly "Payment Required": 402;
+        readonly Forbidden: 403;
+        readonly "Not Found": 404;
+        readonly "Method Not Allowed": 405;
+        readonly "Not Acceptable": 406;
+        readonly "Proxy Authentication Required": 407;
+        readonly "Request Timeout": 408;
+        readonly Conflict: 409;
+        readonly Gone: 410;
+        readonly "Length Required": 411;
+        readonly "Precondition Failed": 412;
+        readonly "Payload Too Large": 413;
+        readonly "URI Too Long": 414;
+        readonly "Unsupported Media Type": 415;
+        readonly "Range Not Satisfiable": 416;
+        readonly "Expectation Failed": 417;
+        readonly "I'm a teapot": 418;
+        readonly "Enhance Your Calm": 420;
+        readonly "Misdirected Request": 421;
+        readonly "Unprocessable Content": 422;
+        readonly Locked: 423;
+        readonly "Failed Dependency": 424;
+        readonly "Too Early": 425;
+        readonly "Upgrade Required": 426;
+        readonly "Precondition Required": 428;
+        readonly "Too Many Requests": 429;
+        readonly "Request Header Fields Too Large": 431;
+        readonly "Unavailable For Legal Reasons": 451;
+        readonly "Internal Server Error": 500;
+        readonly "Not Implemented": 501;
+        readonly "Bad Gateway": 502;
+        readonly "Service Unavailable": 503;
+        readonly "Gateway Timeout": 504;
+        readonly "HTTP Version Not Supported": 505;
+        readonly "Variant Also Negotiates": 506;
+        readonly "Insufficient Storage": 507;
+        readonly "Loop Detected": 508;
+        readonly "Not Extended": 510;
+        readonly "Network Authentication Required": 511;
+    }[Code] : Code>;
+    defer: (fn: import("elysia/types").AfterResponseHandler<NoInfer<import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+        cookie: import("elysia").TCookieObject<{
+            auth_provider: import("typebox").TOptional<import("typebox").TString>;
+            user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+        }>;
+    }, {}, "/oauth2/signout">, import("elysia/types").MergeScopedSchemas<{}, {}, {}>>>, NoInfer<{
+        decorator: {};
+        store: {
+            session: SessionRecord<UserType>;
+            unregisteredSession: import("..").UnregisteredSessionRecord;
+        };
+        derive: {};
+    } & {
+        derive: {};
+    }>>) => import("elysia/types").MaybePromise<void>;
+    readonly path: string;
+    route?: string | undefined;
+    rid?: string | undefined;
+    request: Request;
+    store: {
+        session: SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+}) => Promise<Response | import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "No user session id found", 401> | import("elysia").ElysiaStatus<"Internal Server Error", "Sign out operation failed", 500>>>;
+export declare const signout: <UserType>(configuration: SignOutProps<UserType>) => import("elysia/types").AddRoute<"", "local", {
     decorator: {};
     store: {
         session: SessionRecord<UserType>;

package/dist/server.d.ts

@@ -34,3 +34,5 @@ export type { AuthConfig, OAuth2ConfigurationOptions, SessionData, UnregisteredS
 export { instantiateUserSession } from './utils';
 export type { OAuth2TokenResponse, ProviderOption } from 'citra';
 export { extractPropFromIdentity, isValidProviderOption, providers } from 'citra';
+export { createCredentialsApi } from './credentials/api';
+export { createSignoutApi } from './routes/signout';

package/dist/server.js

@@ -4015,7 +4015,7 @@ var createCustomOAuth2Client = (providerConfig, credentials) => buildOAuth2Clien
 var createOAuth2Client = (providerName, config) => buildOAuth2Client(providers[providerName], config);
 
 // src/index.ts
-import { Elysia as Elysia48 } from "elysia";
+import { Elysia as Elysia49 } from "elysia";
 
 // src/apikeys/routes.ts
 import { Elysia, t } from "elysia";
@@ -6858,7 +6858,11 @@ var DEFAULT_RESET_TOKEN_TTL_MS = MILLISECONDS_IN_AN_HOUR;
 var DEFAULT_VERIFICATION_TOKEN_TTL_MS = MILLISECONDS_IN_A_DAY;
 
 // src/credentials/emailVerification.ts
-var credentialsEmailVerification = ({
+var credentialsEmailVerification = (configuration) => credentialsEmailVerificationRoute({
+  ...configuration,
+  verifyEmailRoute: configuration.verifyEmailRoute ?? "/auth/verify-email"
+});
+var credentialsEmailVerificationRoute = ({
   credentialStore,
   getUserByEmail,
   onCreateCredentialUser,
@@ -6867,7 +6871,7 @@ var credentialsEmailVerification = ({
   onSendEmail,
   requireEmailVerification = false,
   verificationTokenDurationMs = DEFAULT_VERIFICATION_TOKEN_TTL_MS,
-  verifyEmailRoute = "/auth/verify-email"
+  verifyEmailRoute
 }) => new Elysia10().post(verifyEmailRoute, { body: t7.Object({ token: t7.String() }) }, async ({ body: { token }, status }) => {
   const consumed = await credentialStore.consumeVerificationToken(await hashToken(token));
   if (!consumed) {
@@ -7147,7 +7151,11 @@ var isPasswordCompromised = (password) => isPasswordBreached(password);
 // src/credentials/login.ts
 var dummyPasswordHashPromise;
 var dummyPasswordHash = () => dummyPasswordHashPromise ??= hashPassword("absolutejs-auth-timing-equalizer");
-var credentialsLogin = ({
+var credentialsLogin = (configuration) => credentialsLoginRoute({
+  ...configuration,
+  loginRoute: configuration.loginRoute ?? "/auth/login"
+});
+var credentialsLoginRoute = ({
   authSessionStore,
   checkBreachesOnLogin,
   cookieSecure,
@@ -7156,7 +7164,7 @@ var credentialsLogin = ({
   getUserByEmail,
   isMfaRequired,
   lockoutGuard,
-  loginRoute = "/auth/login",
+  loginRoute,
   onCredentialsLoginError,
   onCredentialsLoginSuccess,
   onUntrustedOrigin,
@@ -7269,12 +7277,16 @@ var credentialsLogin = ({
 // src/credentials/passwordReset.ts
 init_crypto();
 import { Elysia as Elysia12, t as t9 } from "elysia";
-var credentialsPasswordReset = ({
+var credentialsPasswordReset = (configuration) => credentialsPasswordResetRoute({
+  ...configuration,
+  resetPasswordRoute: configuration.resetPasswordRoute ?? "/auth/reset-password"
+});
+var credentialsPasswordResetRoute = ({
   credentialStore,
   onPasswordReset,
   onSendEmail,
   passwordPolicy,
-  resetPasswordRoute = "/auth/reset-password",
+  resetPasswordRoute,
   resetTokenDurationMs = DEFAULT_RESET_TOKEN_TTL_MS
 }) => new Elysia12().post(`${resetPasswordRoute}/request`, { body: t9.Object({ email: t9.String() }) }, async ({ body: { email }, status }) => {
   const normalizedEmail = email.trim().toLowerCase();
@@ -7331,7 +7343,11 @@ var credentialsPasswordReset = ({
 // src/credentials/register.ts
 init_crypto();
 import { Elysia as Elysia13, t as t10 } from "elysia";
-var credentialsRegister = ({
+var credentialsRegister = (configuration) => credentialsRegisterRoute({
+  ...configuration,
+  registerRoute: configuration.registerRoute ?? "/auth/register"
+});
+var credentialsRegisterRoute = ({
   authSessionStore,
   cookieSecure,
   credentialStore,
@@ -7344,7 +7360,7 @@ var credentialsRegister = ({
   onSendEmail,
   onUntrustedOrigin,
   passwordPolicy,
-  registerRoute = "/auth/register",
+  registerRoute,
   requireEmailVerification = false,
   revealRegistrationConflicts = false,
   sessionDurationMs = DEFAULT_CREDENTIAL_SESSION_TTL_MS,
@@ -12850,9 +12866,18 @@ var runSignOut = async (onSignOut, args) => {
     return false;
   }
 };
-var signout = ({
+var createSignoutApi = (configuration) => createSignoutRoute({
+  ...configuration,
+  onSignOut: configuration.onSignOut,
+  signoutRoute: "/oauth2/signout"
+});
+var signout = (configuration) => createSignoutRoute({
+  ...configuration,
+  signoutRoute: configuration.signoutRoute ?? "/oauth2/signout"
+});
+var createSignoutRoute = ({
   authSessionStore,
-  signoutRoute = "/oauth2/signout",
+  signoutRoute,
   onSignOut
 }) => new Elysia35().use(sessionStore()).delete(signoutRoute, {
   cookie: t28.Cookie({
@@ -41561,6 +41586,21 @@ var createInMemorySetupSessionStore = () => {
     }
   };
 };
+// src/credentials/api.ts
+import { Elysia as Elysia48 } from "elysia";
+var createCredentialsApi = (configuration) => new Elysia48().use(credentialsRegisterRoute({
+  ...configuration,
+  registerRoute: "/auth/register"
+})).use(credentialsLoginRoute({
+  ...configuration,
+  loginRoute: "/auth/login"
+})).use(credentialsEmailVerificationRoute({
+  ...configuration,
+  verifyEmailRoute: "/auth/verify-email"
+})).use(credentialsPasswordResetRoute({
+  ...configuration,
+  resetPasswordRoute: "/auth/reset-password"
+}));
 
 // src/index.ts
 var validatePositiveOptions = (prefix, options) => {
@@ -41794,7 +41834,7 @@ var buildAuthApplications = async (configuration) => {
   const auditedOnRevocationSuccess = auditEmit ? composeRevocationAudit(onRevocationSuccess, auditEmit) : onRevocationSuccess;
   const auditedOnSignOut = auditEmit ? composeSignOutAudit(onSignOut, auditEmit) : onSignOut;
   const pluginSeed = pluginDependencySeed(configuration);
-  const coreRoutes = new Elysia48({
+  const coreRoutes = new Elysia49({
     name: "@absolutejs/auth/core-routes",
     seed: pluginSeed
   }).use([
@@ -41851,62 +41891,62 @@ var buildAuthApplications = async (configuration) => {
       profileRoute
     })
   ]);
-  const identityFeatureRoutes = new Elysia48().use([
+  const identityFeatureRoutes = new Elysia49().use([
     auditedCredentials ? credentialRoutes({
       ...auditedCredentials,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       lockoutGuard
-    }) : new Elysia48,
+    }) : new Elysia49,
     auditedMfa ? mfaRoutes({
       ...auditedMfa,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       verificationProvider
-    }) : new Elysia48,
+    }) : new Elysia49,
     passwordless ? passwordlessRoutes({
       ...passwordless,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       emit: auditEmit
-    }) : new Elysia48,
-    sessions ? sessionRoutes({ ...sessions, authSessionStore }) : new Elysia48,
+    }) : new Elysia49,
+    sessions ? sessionRoutes({ ...sessions, authSessionStore }) : new Elysia49,
     sso ? oidcSsoRoutes({
       ...sso,
       authSessionStore,
       cookieSecure: resolvedCookieSecure
-    }) : new Elysia48,
+    }) : new Elysia49,
     sso && sso.samlAdapter ? samlSsoRoutes({
       ...sso,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       samlAdapter: sso.samlAdapter
-    }) : new Elysia48
+    }) : new Elysia49
   ]);
-  const organizationFeatureRoutes = new Elysia48().use([
+  const organizationFeatureRoutes = new Elysia49().use([
     sso && sso.getOrganizationByEmailDomain ? ssoDiscoveryRoute({
       getOrganizationByEmailDomain: sso.getOrganizationByEmailDomain,
       ssoConnectionStore: sso.ssoConnectionStore,
       ssoRoute: sso.ssoRoute
-    }) : new Elysia48,
-    scim ? scimRoutes(scim) : new Elysia48,
-    apikeys ? apiKeysRoutes(apikeys) : new Elysia48,
+    }) : new Elysia49,
+    scim ? scimRoutes(scim) : new Elysia49,
+    apikeys ? apiKeysRoutes(apikeys) : new Elysia49,
     oidcConfig ? oidcProviderRoutes({
       ...oidcConfig,
       authSessionStore
-    }) : new Elysia48,
+    }) : new Elysia49,
     organizations ? organizationRoutes({
       ...organizations,
       authSessionStore,
       emit: auditEmit
-    }) : new Elysia48,
+    }) : new Elysia49,
     roles ? roleRoutes({
       ...roles,
       authSessionStore,
       emit: auditEmit
-    }) : new Elysia48
+    }) : new Elysia49
   ]);
-  const pushApplication = new Elysia48;
+  const pushApplication = new Elysia49;
   if (pushConfig && oidcConfig)
     pushApplication.use(pushRoutes({
       accessTokens: {
@@ -41916,24 +41956,24 @@ var buildAuthApplications = async (configuration) => {
       authSessionStore,
       config: pushConfig
     }));
-  const extendedFeatureRoutes = new Elysia48().use([
+  const extendedFeatureRoutes = new Elysia49().use([
     pushApplication,
-    portal ? portalRoutes({ ...portal, emit: auditEmit }) : new Elysia48,
+    portal ? portalRoutes({ ...portal, emit: auditEmit }) : new Elysia49,
     webauthn ? webauthnRoutes({
       ...webauthn,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       emit: auditEmit
-    }) : new Elysia48,
+    }) : new Elysia49,
     compliance ? complianceRoutes({
       ...compliance,
       authSessionStore,
       emit: auditEmit
-    }) : new Elysia48,
+    }) : new Elysia49,
     createConfiguredAuthHtmxRoutes({ authSessionStore, config: htmx }),
     agentAuthRoutes(resolvedAgentAuth)
   ]);
-  const featureRoutes = new Elysia48({
+  const featureRoutes = new Elysia49({
     name: "@absolutejs/auth/feature-routes",
     seed: pluginSeed
   }).use([
@@ -41956,7 +41996,7 @@ var buildAuthApplications = async (configuration) => {
 };
 var auth = async (configuration) => {
   const { authContext, coreRoutes, featureRoutes } = await buildAuthApplications(configuration);
-  const application = new Elysia48({
+  const application = new Elysia49({
     name: "@absolutejs/auth",
     seed: pluginDependencySeed(configuration)
   });
@@ -42127,11 +42167,13 @@ export {
   auth2 as auth,
   createAbsoluteAuthSyncBridge,
   createAuthContext,
+  createCredentialsApi,
   createNodeSamlAdapter,
   createPostgresScimTokenStore,
   createPostgresSetupSessionStore,
   createPostgresSsoConnectionStore,
   createSetupSession,
+  createSignoutApi,
   deriveAuthSyncNamespace,
   extractPropFromIdentity,
   instantiateUserSession,
@@ -42144,5 +42186,5 @@ export {
   userSessionIdTypebox
 };
 
-//# debugId=DE4780E5239C13EA64756E2164756E21
+//# debugId=B801BF9A602847F164756E2164756E21
 //# sourceMappingURL=server.js.map