@adonis-agora/authkit-core 0.8.0 → 0.10.0

package/build/index.d.ts

@@ -1,7 +1,7 @@
-export type { Identity, SessionResolver } from './src/types/identity.js';
-export { ORG_ID_CLAIMS, deriveOrgId, deriveOrgSlug, deriveOrgRole, } from './src/types/identity.js';
-export type { ClientConfig, TtlConfig, JwksConfig, KeystoreStoreConfig, ObservabilityConfig, ResolvedAuthServerConfig, AccessTokenFormat, AccessTokenResourceConfig, AccessTokensConfig, } from './src/types/server_config.js';
-export { AUTHKIT_METRICS } from './src/metrics.js';
 export type { AuthkitMetricName } from './src/metrics.js';
-export { InMemorySnapshot, NoopRecorder } from './src/metrics_recorder.js';
+export { AUTHKIT_METRICS } from './src/metrics.js';
 export type { MetricsRecorder, MetricsSnapshot } from './src/metrics_recorder.js';
+export { InMemorySnapshot, NoopRecorder } from './src/metrics_recorder.js';
+export type { Identity, SessionResolver } from './src/types/identity.js';
+export { deriveOrgId, deriveOrgRole, deriveOrgSlug, ORG_ID_CLAIMS, } from './src/types/identity.js';
+export type { AccessTokenFormat, AccessTokenResourceConfig, AccessTokensConfig, ClientConfig, JwksConfig, KeystoreStoreConfig, ObservabilityConfig, ResolvedAuthServerConfig, TtlConfig, } from './src/types/server_config.js';

package/build/index.js

@@ -1,3 +1,3 @@
-export { ORG_ID_CLAIMS, deriveOrgId, deriveOrgSlug, deriveOrgRole, } from './src/types/identity.js';
 export { AUTHKIT_METRICS } from './src/metrics.js';
 export { InMemorySnapshot, NoopRecorder } from './src/metrics_recorder.js';
+export { deriveOrgId, deriveOrgRole, deriveOrgSlug, ORG_ID_CLAIMS, } from './src/types/identity.js';

package/build/src/metrics.d.ts

@@ -1,15 +1,15 @@
 /** Nomes canônicos das métricas OTel emitidas pela lib (usados no Plano 3). */
 export declare const AUTHKIT_METRICS: {
-    readonly loginSuccess: "authkit.login.success";
-    readonly loginFailure: "authkit.login.failure";
-    readonly tokenIssued: "authkit.token.issued";
-    readonly refreshRotated: "authkit.refresh.rotated";
-    readonly grantRevoked: "authkit.grant.revoked";
-    readonly sessionsActive: "authkit.sessions.active";
-    readonly passwordHashDuration: "authkit.password.hash.duration";
-    readonly resolveDuration: "authkit.resolve.duration";
-    readonly resolveErrors: "authkit.resolve.errors";
-    readonly jwksRefresh: "authkit.jwks.refresh";
-    readonly tokenRefresh: "authkit.token.refresh";
+    readonly loginSuccess: 'authkit.login.success';
+    readonly loginFailure: 'authkit.login.failure';
+    readonly tokenIssued: 'authkit.token.issued';
+    readonly refreshRotated: 'authkit.refresh.rotated';
+    readonly grantRevoked: 'authkit.grant.revoked';
+    readonly sessionsActive: 'authkit.sessions.active';
+    readonly passwordHashDuration: 'authkit.password.hash.duration';
+    readonly resolveDuration: 'authkit.resolve.duration';
+    readonly resolveErrors: 'authkit.resolve.errors';
+    readonly jwksRefresh: 'authkit.jwks.refresh';
+    readonly tokenRefresh: 'authkit.token.refresh';
 };
 export type AuthkitMetricName = (typeof AUTHKIT_METRICS)[keyof typeof AUTHKIT_METRICS];

package/build/src/metrics_recorder.d.ts

@@ -29,5 +29,5 @@ export declare class NoopRecorder implements MetricsRecorder {
     record(): void;
     snapshot(): MetricsSnapshot;
 }
-export { AUTHKIT_METRICS };
 export type { AuthkitMetricName };
+export { AUTHKIT_METRICS };

package/build/src/types/identity.d.ts

@@ -51,7 +51,7 @@ export interface SessionResolver {
  * nome (`tid` no Entra ID, `organization_id` em vários). Derivar em UM lugar só
  * evita que cada app — e cada lib do Agora — reescreva essa tabela.
  */
-export declare const ORG_ID_CLAIMS: readonly ["active_organization_id", "org_id", "organization_id", "tenant_id", "tid"];
+export declare const ORG_ID_CLAIMS: readonly ['active_organization_id', 'org_id', 'organization_id', 'tenant_id', 'tid'];
 /** Deriva a org/tenant ativo das claims cruas. `null` quando ausente. */
 export declare function deriveOrgId(claims: Record<string, unknown> | undefined): string | null;
 /** Deriva o slug da org ativa das claims cruas. `null` quando ausente. */

package/build/src/types/server_config.d.ts

@@ -10,6 +10,16 @@ export interface ClientConfig {
     grants?: string[];
     /** 'none' para public clients (SPA com PKCE) */
     tokenEndpointAuthMethod?: 'client_secret_basic' | 'client_secret_post' | 'none';
+    /**
+     * Tipo de aplicação (OIDC Registration §2, `application_type`). Default `'web'`.
+     *
+     * `'native'` (RFC 8252 — OAuth 2.0 for Native Apps) libera os redirects de app
+     * mobile/desktop: esquema privado (`com.example.app:/callback`), URL https
+     * "claimed" (universal/app links) e loopback `http://127.0.0.1` com qualquer
+     * porta. Client nativo é SEMPRE público (sem `clientSecret`,
+     * `tokenEndpointAuthMethod: 'none'`) — PKCE já é obrigatório no issuer.
+     */
+    applicationType?: 'web' | 'native';
     /**
      * Endpoint do RP que recebe o POST de OIDC Back-Channel Logout. Quando definido,
      * o IdP envia um `logout_token` para esta URI ao encerrar a sessão/grant do usuário.

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@adonis-agora/authkit-core",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Shared core types and utilities for AuthKit — the AdonisJS OIDC/OAuth2 server and client toolkits.",
   "license": "MIT",
   "author": "dudousxd",
-  "homepage": "https://github.com/DavideCarvalho/adonis-agora-authkit/tree/main/packages/authkit-core#readme",
   "repository": {
     "type": "git",
     "url": "https://github.com/DavideCarvalho/adonis-agora-authkit.git",
     "directory": "packages/authkit-core"
   },
+  "homepage": "https://davidecarvalho.github.io/agora/docs/authkit",
   "bugs": {
     "url": "https://github.com/DavideCarvalho/adonis-agora-authkit/issues"
   },
@@ -34,14 +34,17 @@
     ".": "./build/index.js",
     "./types": "./build/index.js"
   },
+  "engines": {
+    "node": ">=24"
+  },
   "devDependencies": {
-    "@adonisjs/core": "7.4.0",
+    "@adonisjs/core": "7.5.0",
     "@adonisjs/tsconfig": "2.0.0",
     "@japa/assert": "4.2.0",
     "@japa/runner": "5.3.0",
     "@poppinss/ts-exec": "1.4.4",
-    "@types/node": "25.9.1",
-    "typescript": "6.0.3"
+    "@types/node": "26.5.1",
+    "typescript": "7.0.2"
   },
   "scripts": {
     "build": "tsc",