@aura-stack/auth 0.7.0 → 0.7.2

package/dist/{index-C9U6ICDT.d.ts → index-1ADcIVGC.d.ts}

@@ -1,13 +1,13 @@
 import * as _$_aura_stack_router0 from "@aura-stack/router";
 import { ClientOptions, GlobalContext } from "@aura-stack/router";
 import { ZodObject, ZodRawShape, ZodTypeAny, infer as __Infer, z } from "zod/v4";
+import { Type } from "arktype";
+import { TObject, TProperties, TSchema, Type as Type$1 } from "typebox";
 import { JWK, JWTPayload } from "@aura-stack/jose/jose";
-import { DecodeJWTOptions, EncodeJWTOptions, JWEHeaderParameters, JWTDecryptOptions, JWTHeaderParameters, JWTVerifyOptions, Prettify, TypedJWTPayload, TypedJWTPayload as TypedJWTPayload$1 } from "@aura-stack/jose";
+import { DecodeJWTOptions, EncodeJWTOptions, JWEHeaderParameters, JWTDecryptOptions, JWTHeaderParameters, JWTVerifyOptions, TypedJWTPayload, TypedJWTPayload as TypedJWTPayload$1 } from "@aura-stack/jose";
 import { SerializeOptions } from "@aura-stack/router/cookie";
 import * as valibot from "valibot";
 import { AnySchema, BaseSchema, InferOutput, ObjectEntries, ObjectSchema } from "valibot";
-import { Type } from "arktype";
-import { Static, TObject, TProperties, TSchema, Type as Type$1 } from "typebox";
 import * as _$arktype_internal_variants_object_ts0 from "arktype/internal/variants/object.ts";
 import * as _$zod_v4_core0 from "zod/v4/core";
 import { infer as infer$1 } from "zod/v4/core";
@@ -193,8 +193,8 @@ type IsArkType<T extends Identities> = T extends EditableShapeArkType<UserShapeA
 type IsZod<T extends Identities> = T extends EditableShape<UserShape> ? true : false;
 type IsValibot<T extends Identities> = T extends EditableShapeValibot<UserShapeValibot> ? true : false;
 type SchemaTypes = ZodObject<any> | valibot.ObjectSchema<any, undefined> | Type<{}> | Type$1.TObject;
-type Identities = EditableShape<UserShape> | EditableShapeValibot<UserShapeValibot> | EditableShapeArkType<UserShapeArkType> | EditableShapeTypebox<UserShapeTypeBox>;
-type ReturnShapeType<T> = T extends EditableShape<UserShape> ? z.ZodObject<T> : T extends EditableShapeValibot<UserShapeValibot> ? valibot.ObjectSchema<T, undefined> : T extends EditableShapeArkType<UserShapeArkType> ? T : T extends EditableShapeTypebox<UserShapeTypeBox> ? Type$1.TObject<T> : never;
+type Identities = EditableShape<UserShape> | EditableShapeValibot<UserShapeValibot> | EditableShapeArkType<UserShapeArkType> | EditableShapeTypebox<UserShapeTypeBox> | EditableUser;
+type ReturnShapeType<T> = T extends EditableShape<UserShape> ? z.ZodObject<T> : T extends EditableShapeValibot<UserShapeValibot> ? valibot.ObjectSchema<T, undefined> : T extends EditableShapeArkType<UserShapeArkType> ? T : T extends EditableShapeTypebox<UserShapeTypeBox> ? Type$1.TObject<T> : T extends EditableUser ? z.ZodObject<T> : never;
 declare const createIdentity: <S extends Identities>(shape: S) => ReturnShapeType<S>;
 //#endregion
 //#region src/shared/logger.d.ts
@@ -1345,7 +1345,7 @@ type JWTSealedMode = {
 type JWTConfigBase = JWTSignedMode | JWTEncryptedMode | JWTSealedMode;
 /** How session/JWT lifetime is enforced relative to `iat`, absolute caps, and sliding windows. */
 type JWTExpirationStrategy = "fixed" | "rolling" | "absolute" | "sliding";
-type JWTConfig = Prettify$1<{
+type JWTConfig = Prettify<{
   /**
    * Token lifetime.
    */
@@ -1752,21 +1752,21 @@ type TrustedProxyHeadersConfig = {
  */
 type SecureCookie = {
   strategy: "secure";
-} & Prettify$1<Omit<SerializeOptions, "secure" | "encode">>;
+} & Prettify<Omit<SerializeOptions, "secure" | "encode">>;
 /**
  * Cookie type with __Host- prefix, must be Secure, Path=/, no Domain attribute.
  * @see https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-__host-prefix
  */
 type HostCookie = {
   strategy: "host";
-} & Prettify$1<Omit<SerializeOptions, "secure" | "path" | "domain" | "encode">>;
+} & Prettify<Omit<SerializeOptions, "secure" | "path" | "domain" | "encode">>;
 /**
  * Standard cookie type without security prefixes.
  * Can be sent over both HTTP and HTTPS connections (default in development).
  */
 type StandardCookie = {
   strategy?: "standard";
-} & Prettify$1<Omit<SerializeOptions, "encode">>;
+} & Prettify<Omit<SerializeOptions, "encode">>;
 /**
  * Union type for cookie options based on the specified strategy.
  * - `secure`: Cookies are only sent over HTTPS connections
@@ -1953,7 +1953,7 @@ type InternalContext<Identity extends Identities> = RouterGlobalContext<FromShap
 //#endregion
 //#region src/@types/utility.d.ts
 /** Expands intersection types into a single flat object type for readable editor hints. */
-type Prettify$1<T> = { [K in keyof T]: T[K] };
+type Prettify<T> = { [K in keyof T]: T[K] };
 /**
  * A string that must be one of the literals in `T`, or any other string (`U`).
  * Useful for autocomplete on known keys while still allowing custom values.
@@ -1967,10 +1967,11 @@ type EditableShapeZod<T extends ZodRawShape> = EditableShape<T>;
 type AnyShape = Record<string, AnySchema>;
 type EditableShapeValibot<T extends ObjectEntries> = { [K in keyof T]: T[K] extends ObjectSchema<infer Inner extends AnyShape, undefined> ? ObjectSchema<EditableShapeValibot<Inner>, undefined> : BaseSchema<any, any, any> };
 type EditableShapeTypebox<T extends TProperties> = { [K in keyof T]: T[K] extends TObject ? Wrap<EditableShapeTypebox<T[K]["properties"]>> : TSchema };
+type EditableUser = { [K in keyof User]: any };
 type ConfigSchema<T extends Identities> = IsZod<T> extends true ? ZodObject<T & ZodRawShape> : T extends EditableShapeValibot<UserShapeValibot> ? ObjectSchema<T & ObjectEntries, undefined> : IsArkType<T> extends true ? T : T extends EditableShapeTypebox<UserShapeTypeBox> ? TObject<T & TProperties> : never;
 type ValibotShapeToObject<S extends ObjectEntries> = Merge<InferOutput<ObjectSchema<S, undefined>>, User>;
 type ArktypeShapeToObject<S extends Type> = S extends Type<infer Shape> ? Wrap<Merge<Shape, User>> : never;
-type TypeboxShapeToObject<S extends TProperties> = S extends TProperties ? Wrap<Merge<Static<TObject<S>>, User>> : never;
+type TypeboxShapeToObject<S> = Wrap<Merge<S, User>>;
 type EditableShapeArkType<T extends Type> = T extends Type<infer Shape> ? Type<{ [K in keyof Shape]: any }> : never;
 /** Merges type `B` over `A`, replacing overlapping keys with `B`. */
 type Merge<A, B> = Omit<A, keyof B> & B;
@@ -1979,7 +1980,7 @@ type Merge<A, B> = Omit<A, keyof B> & B;
  * so identity fields always include the base user contract.
  */
 type ZodShapeToObject<S extends ZodRawShape = ZodRawShape> = Merge<__Infer<ZodObject<S>>, User>;
-type FromShapeToObject<S> = S extends ZodRawShape ? ZodShapeToObject<S> : S extends ObjectEntries ? ValibotShapeToObject<S> : S extends Type ? ArktypeShapeToObject<S> : S extends TProperties ? TypeboxShapeToObject<S> : never;
+type FromShapeToObject<S> = S extends ZodRawShape ? ZodShapeToObject<S> : S extends ObjectEntries ? ValibotShapeToObject<S> : S extends Type ? ArktypeShapeToObject<S> : S extends TProperties ? TypeboxShapeToObject<S> : S extends User ? S : never;
 /** Recursively makes every property required. */
 type DeepRequired<T> = { [K in keyof T]-?: T[K] extends object ? DeepRequired<T[K]> : T[K] };
 /** Recursively makes every property optional. */
@@ -1999,7 +2000,7 @@ type Wrap<T> = T extends any ? { [K in keyof T]: T[K] } : never;
  *
  * type User = InferUser<typeof auth>
  */
-type InferUser<Config extends AuthInstance> = Config extends AuthInstance<infer Identity> ? Prettify$1<Identity> : User;
+type InferUser<Config extends AuthInstance> = Config extends AuthInstance<infer Identity> ? Prettify<Identity> : User;
 /**
  * Infers the session type from an {@link AuthInstance} config.
  * @example
@@ -2013,7 +2014,7 @@ type InferUser<Config extends AuthInstance> = Config extends AuthInstance<infer
  *
  * type Session = InferSession<typeof auth>
  */
-type InferSession<Config extends AuthInstance> = Prettify$1<Session<Wrap<InferUser<Config>>>>;
+type InferSession<Config extends AuthInstance> = Prettify<Session<Wrap<InferUser<Config>>>>;
 /**
  * Shorthand for a Zod object’s `.shape` property.
  */
@@ -2029,7 +2030,7 @@ type InferZodShape<T extends ZodObject> = T["shape"];
  *
  * type User = UserFrom<typeof schema>
  */
-type UserFrom<T extends ZodObject> = Prettify$1<ZodShapeToObject<InferZodShape<T>>>;
+type UserFrom<T extends ZodObject> = Prettify<ZodShapeToObject<InferZodShape<T>>>;
 /**
  * Infers the session type from a Zod identity schema.
  * @example
@@ -2045,13 +2046,14 @@ type SessionFrom<T extends ZodObject> = Wrap<Session<Wrap<UserFrom<T>>>>;
 /**
  * HTTP `Response` with `json()` typed to resolve to `Body` (defaults to `unknown`).
  */
-type AuthResponse<Body = unknown> = Prettify$1<Omit<Response, "json"> & {
+type AuthResponse<Body = unknown> = Prettify<Omit<Response, "json"> & {
   json(): Promise<Body>;
 }>;
+type RequiredKeys<Obj extends object, Keys extends keyof Obj = keyof Obj> = Wrap<{ [K in Keys]-?: Obj[K] } & Omit<Obj, Keys>>;
 //#endregion
 //#region src/createAuth.d.ts
 declare const createAuthInstance: <Identity extends Identities>(authConfig: AuthConfig<Identity>) => {
-  handlers: _$_aura_stack_router0.Router<[_$_aura_stack_router0.RouteEndpoint<"GET", "/signIn/:oauth", {
+  handlers: _$_aura_stack_router0.Router<[_$_aura_stack_router0.RouteEndpoint<"/signIn/:oauth", _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
     schemas?: {
       params: _$zod.ZodObject<{
         oauth: _$zod.ZodEnum<{
@@ -2079,107 +2081,85 @@ declare const createAuthInstance: <Identity extends Identities>(authConfig: Auth
         redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
       }, _$zod_v4_core0.$strip>;
     } | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<"/signIn/:oauth", {
-      params: _$zod.ZodObject<{
-        oauth: _$zod.ZodEnum<{
-          [x: string & Record<never, never>]: string & Record<never, never>;
-          github: "github";
-          bitbucket: "bitbucket";
-          figma: "figma";
-          discord: "discord";
-          gitlab: "gitlab";
-          spotify: "spotify";
-          x: "x";
-          strava: "strava";
-          mailchimp: "mailchimp";
-          pinterest: "pinterest";
-          twitch: "twitch";
-          notion: "notion";
-          dropbox: "dropbox";
-          atlassian: "atlassian";
-          clickUp: "clickUp";
-          dribbble: "dribbble";
-        }>;
-      }, _$zod_v4_core0.$strip>;
-      searchParams: _$zod.ZodObject<{
-        redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
-        redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
-      }, _$zod_v4_core0.$strip>;
-    }>[] | undefined;
-  }, (ctx: {
-    params: {
-      oauth: "github" | "bitbucket" | "figma" | "discord" | "gitlab" | "spotify" | "x" | "strava" | "mailchimp" | "pinterest" | "twitch" | "notion" | "dropbox" | "atlassian" | "clickUp" | "dribbble" | (string & Record<never, never>);
-    };
-    body: undefined;
-    searchParams: {
-      redirect: boolean;
-      redirectTo?: string | undefined;
-    };
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "GET";
-    route: "/signIn/:oauth";
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Prettify$1<Omit<Response, "json"> & {
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<"/signIn/:oauth", _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
+    params: _$zod.ZodObject<{
+      oauth: _$zod.ZodEnum<{
+        [x: string & Record<never, never>]: string & Record<never, never>;
+        github: "github";
+        bitbucket: "bitbucket";
+        figma: "figma";
+        discord: "discord";
+        gitlab: "gitlab";
+        spotify: "spotify";
+        x: "x";
+        strava: "strava";
+        mailchimp: "mailchimp";
+        pinterest: "pinterest";
+        twitch: "twitch";
+        notion: "notion";
+        dropbox: "dropbox";
+        atlassian: "atlassian";
+        clickUp: "clickUp";
+        dribbble: "dribbble";
+      }>;
+    }, _$zod_v4_core0.$strip>;
+    searchParams: _$zod.ZodObject<{
+      redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
+      redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
+    }, _$zod_v4_core0.$strip>;
+  }>>) => Promise<Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: true;
       redirect: boolean;
       signInURL: string;
     }>;
-  }> | Prettify$1<Omit<Response, "json"> & {
+  }> | Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: false;
       redirect: false;
       signInURL: null;
     }>;
-  }>>>, _$_aura_stack_router0.RouteEndpoint<"POST", `/${string}`, {
+  }>>>, _$_aura_stack_router0.RouteEndpoint<`/${string}`, _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
     schemas?: {
       body: _$zod.ZodObject<{
         username: _$zod.ZodString;
         password: _$zod.ZodString;
       }, _$zod_v4_core0.$strip>;
       searchParams: _$zod.ZodObject<{
+        redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
         redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
       }, _$zod_v4_core0.$strip>;
     } | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<`/${string}`, {
-      body: _$zod.ZodObject<{
-        username: _$zod.ZodString;
-        password: _$zod.ZodString;
-      }, _$zod_v4_core0.$strip>;
-      searchParams: _$zod.ZodObject<{
-        redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
-      }, _$zod_v4_core0.$strip>;
-    }>[] | undefined;
-  }, (ctx: {
-    params: {};
-    body: {
-      username: string;
-      password: string;
-    };
-    searchParams: {
-      redirectTo?: string | undefined;
-    };
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "POST";
-    route: `/${string}`;
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Prettify$1<Omit<Response, "json"> & {
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<`/${string}`, _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
+    body: _$zod.ZodObject<{
+      username: _$zod.ZodString;
+      password: _$zod.ZodString;
+    }, _$zod_v4_core0.$strip>;
+    searchParams: _$zod.ZodObject<{
+      redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
+      redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
+    }, _$zod_v4_core0.$strip>;
+  }>>) => Promise<Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: true;
+      redirect: true;
+      redirectURL: null;
+    } | {
+      success: true;
+      redirect: false;
       redirectURL: string;
+    } | {
+      success: true;
+      redirect: false;
+      redirectURL: null;
     }>;
-  }> | Prettify$1<Omit<Response, "json"> & {
+  }> | Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: false;
+      redirect: false;
       redirectURL: null;
     }>;
-  }>>>, _$_aura_stack_router0.RouteEndpoint<"GET", "/callback/:oauth", {
+  }>>>, _$_aura_stack_router0.RouteEndpoint<"/callback/:oauth", _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
     schemas?: {
       params: _$zod.ZodObject<{
         oauth: _$zod.ZodEnum<{
@@ -2207,64 +2187,35 @@ declare const createAuthInstance: <Identity extends Identities>(authConfig: Auth
         state: _$zod.ZodString;
       }, _$zod_v4_core0.$strip>;
     } | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<"/callback/:oauth", {
-      params: _$zod.ZodObject<{
-        oauth: _$zod.ZodEnum<{
-          [x: string & Record<never, never>]: string & Record<never, never>;
-          github: "github";
-          bitbucket: "bitbucket";
-          figma: "figma";
-          discord: "discord";
-          gitlab: "gitlab";
-          spotify: "spotify";
-          x: "x";
-          strava: "strava";
-          mailchimp: "mailchimp";
-          pinterest: "pinterest";
-          twitch: "twitch";
-          notion: "notion";
-          dropbox: "dropbox";
-          atlassian: "atlassian";
-          clickUp: "clickUp";
-          dribbble: "dribbble";
-        }>;
-      }, _$zod_v4_core0.$strip>;
-      searchParams: _$zod.ZodObject<{
-        code: _$zod.ZodString;
-        state: _$zod.ZodString;
-      }, _$zod_v4_core0.$strip>;
-    }>[] | undefined;
-  }, (ctx: {
-    params: {
-      oauth: "github" | "bitbucket" | "figma" | "discord" | "gitlab" | "spotify" | "x" | "strava" | "mailchimp" | "pinterest" | "twitch" | "notion" | "dropbox" | "atlassian" | "clickUp" | "dribbble" | (string & Record<never, never>);
-    };
-    body: undefined;
-    searchParams: {
-      code: string;
-      state: string;
-    };
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "GET";
-    route: "/callback/:oauth";
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Response>>, _$_aura_stack_router0.RouteEndpoint<"GET", "/session", {
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<"/callback/:oauth", _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
+    params: _$zod.ZodObject<{
+      oauth: _$zod.ZodEnum<{
+        [x: string & Record<never, never>]: string & Record<never, never>;
+        github: "github";
+        bitbucket: "bitbucket";
+        figma: "figma";
+        discord: "discord";
+        gitlab: "gitlab";
+        spotify: "spotify";
+        x: "x";
+        strava: "strava";
+        mailchimp: "mailchimp";
+        pinterest: "pinterest";
+        twitch: "twitch";
+        notion: "notion";
+        dropbox: "dropbox";
+        atlassian: "atlassian";
+        clickUp: "clickUp";
+        dribbble: "dribbble";
+      }>;
+    }, _$zod_v4_core0.$strip>;
+    searchParams: _$zod.ZodObject<{
+      code: _$zod.ZodString;
+      state: _$zod.ZodString;
+    }, _$zod_v4_core0.$strip>;
+  }>>) => Promise<Response>>, _$_aura_stack_router0.RouteEndpoint<"/session", "GET", {
     schemas?: _$_aura_stack_router0.EndpointSchemas | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<"/session", _$_aura_stack_router0.EndpointSchemas>[] | undefined;
-  }, (ctx: {
-    params: {};
-    body: undefined;
-    searchParams: URLSearchParams;
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "GET";
-    route: "/session";
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Prettify$1<Omit<Response, "json"> & {
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<"/session", "GET", _$_aura_stack_router0.EndpointSchemas>>) => Promise<Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: true;
       session: Session<{
@@ -2274,83 +2225,62 @@ declare const createAuthInstance: <Identity extends Identities>(authConfig: Auth
         email?: string | null | undefined;
       }>;
     }>;
-  }> | Prettify$1<Omit<Response, "json"> & {
+  }> | Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: false;
       session: null;
     }>;
-  }>>>, _$_aura_stack_router0.RouteEndpoint<"POST", `/${string}`, {
+  }>>>, _$_aura_stack_router0.RouteEndpoint<`/${string}`, _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
     schemas?: {
       searchParams: _$zod.ZodObject<{
-        token_type_hint: _$zod.ZodLiteral<"session_token">;
+        redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
         redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
-      }, _$zod_v4_core0.$strip>;
-    } | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<`/${string}`, {
-      searchParams: _$zod.ZodObject<{
         token_type_hint: _$zod.ZodLiteral<"session_token">;
-        redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
       }, _$zod_v4_core0.$strip>;
-    }>[] | undefined;
-  }, (ctx: {
-    params: {};
-    body: undefined;
-    searchParams: {
-      token_type_hint: "session_token";
-      redirectTo?: string | undefined;
-    };
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "POST";
-    route: `/${string}`;
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Prettify$1<Omit<Response, "json"> & {
+    } | undefined;
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<`/${string}`, _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
+    searchParams: _$zod.ZodObject<{
+      redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
+      redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
+      token_type_hint: _$zod.ZodLiteral<"session_token">;
+    }, _$zod_v4_core0.$strip>;
+  }>>) => Promise<Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: true;
-      redirect: boolean;
+      redirect: true;
+      redirectURL: null;
+    } | {
+      success: true;
+      redirect: false;
       redirectURL: string;
+    } | {
+      success: true;
+      redirect: false;
+      redirectURL: null;
     }>;
-  }> | Prettify$1<Omit<Response, "json"> & {
+  }> | Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: false;
-      redirect: boolean;
+      redirect: false;
       redirectURL: null;
     }>;
-  }>>>, _$_aura_stack_router0.RouteEndpoint<"GET", "/csrfToken", {
+  }>>>, _$_aura_stack_router0.RouteEndpoint<"/csrfToken", "GET", {
     schemas?: _$_aura_stack_router0.EndpointSchemas | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<"/csrfToken", _$_aura_stack_router0.EndpointSchemas>[] | undefined;
-  }, (ctx: {
-    params: {};
-    body: undefined;
-    searchParams: URLSearchParams;
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "GET";
-    route: "/csrfToken";
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Response>>, _$_aura_stack_router0.RouteEndpoint<"PATCH", `/${string}`, {
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<"/csrfToken", "GET", _$_aura_stack_router0.EndpointSchemas>>) => Promise<Response>>, _$_aura_stack_router0.RouteEndpoint<`/${string}`, _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
     schemas?: {
       body: any;
+      searchParams: _$zod.ZodObject<{
+        redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
+        redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
+      }, _$zod_v4_core0.$strip>;
     } | undefined;
-    use?: _$_aura_stack_router0.MiddlewareFunction<`/${string}`, {
-      body: any;
-    }>[] | undefined;
-  }, (ctx: {
-    params: {};
+  }, (ctx: _$_aura_stack_router0.RequestContext<_$_aura_stack_router0.EndpointMeta<`/${string}`, _$_aura_stack_router0.HTTPMethod | _$_aura_stack_router0.HTTPMethod[], {
     body: any;
-    searchParams: URLSearchParams;
-    headers: _$_aura_stack_router0.HeadersBuilder;
-    request: Request;
-    url: URL;
-    method: "PATCH";
-    route: `/${string}`;
-    context: _$_aura_stack_router0.GlobalContext;
-    json: <T>(data: T, init?: ResponseInit) => _$_aura_stack_router0.JsonResponse<T>;
-  }) => Promise<Prettify$1<Omit<Response, "json"> & {
+    searchParams: _$zod.ZodObject<{
+      redirect: _$zod.ZodDefault<_$zod.ZodOptional<_$zod.ZodCodec<_$zod.ZodString, _$zod.ZodBoolean>>>;
+      redirectTo: _$zod.ZodOptional<_$zod.ZodString>;
+    }, _$zod_v4_core0.$strip>;
+  }>>) => Promise<Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: true;
       session: Session<{
@@ -2359,12 +2289,34 @@ declare const createAuthInstance: <Identity extends Identities>(authConfig: Auth
         image?: string | null | undefined;
         email?: string | null | undefined;
       }>;
+      redirect: true;
+      redirectURL: null;
+    } | {
+      success: true;
+      session: Session<{
+        sub: string;
+        name?: string | null | undefined;
+        image?: string | null | undefined;
+        email?: string | null | undefined;
+      }>;
+      redirect: false;
       redirectURL: string;
+    } | {
+      success: true;
+      session: Session<{
+        sub: string;
+        name?: string | null | undefined;
+        image?: string | null | undefined;
+        email?: string | null | undefined;
+      }>;
+      redirect: false;
+      redirectURL: null;
     }>;
-  }> | Prettify$1<Omit<Response, "json"> & {
+  }> | Prettify<Omit<Response, "json"> & {
     json(): Promise<{
       success: false;
       session: null;
+      redirect: false;
       redirectURL: null;
     }>;
   }>>>]>;
@@ -2451,7 +2403,7 @@ type ErrorType = AuthorizationError["error"] | AccessTokenError["error"] | Token
  * Machine-readable codes for internal auth failures (configuration, crypto, environment, etc.).
  * Used with {@link AuthInternalError} and logging.
  */
-type AuthInternalErrorCode = "INVALID_OAUTH_CONFIGURATION" | "INVALID_JWT_TOKEN" | "JOSE_INITIALIZATION_FAILED" | "SESSION_STORE_NOT_INITIALIZED" | "COOKIE_STORE_NOT_INITIALIZED" | "COOKIE_PARSING_FAILED" | "COOKIE_NOT_FOUND" | "INVALID_ENVIRONMENT_CONFIGURATION" | "INVALID_URL" | "INVALID_SALT_SECRET_VALUE" | "UNTRUSTED_ORIGIN" | "INVALID_OAUTH_PROVIDER_CONFIGURATION" | "DUPLICATED_OAUTH_PROVIDER_ID" | "CREDENTIALS_PROVIDER_NOT_CONFIGURED" | "IDENTITY_VALIDATION_FAILED";
+type AuthInternalErrorCode = "INVALID_OAUTH_CONFIGURATION" | "INVALID_JWT_TOKEN" | "JOSE_INITIALIZATION_FAILED" | "SESSION_STORE_NOT_INITIALIZED" | "COOKIE_STORE_NOT_INITIALIZED" | "COOKIE_PARSING_FAILED" | "COOKIE_NOT_FOUND" | "INVALID_ENVIRONMENT_CONFIGURATION" | "INVALID_URL" | "INVALID_SALT_SECRET_VALUE" | "UNTRUSTED_ORIGIN" | "INVALID_OAUTH_PROVIDER_CONFIGURATION" | "DUPLICATED_OAUTH_PROVIDER_ID" | "CREDENTIALS_PROVIDER_NOT_CONFIGURED" | "IDENTITY_VALIDATION_FAILED" | "UPDATE_SESSION_INVALID";
 /**
  * Machine-readable codes for security-sensitive failures (CSRF, session, open redirect, OAuth state).
  */
@@ -2521,7 +2473,7 @@ interface APIOptionsWithRedirectTo {
   /**
    * Optional redirect strategy for server/programmatic API functions.
    *
-   * - `true`: the generated response is a redirect response.
+   * - `true`: The response includes a `Location` header.
    * - `false`: the API returns redirect data (`signInURL` or `redirectURL`) for custom handling.
    *
    * Defaults are action-specific; see each API option type.
@@ -2643,16 +2595,32 @@ interface SignInCredentialsOptions extends OptionsWithRedirectTo {
    */
   payload: CredentialsPayload;
 }
-/** Client-side credentials sign-in return type (redirect mode or manual redirect data). */
-type SignInCredentialsReturn<Options extends SignInCredentialsOptions> = Options extends {
-  redirect: false;
-} ? {
+type SignInCredentialsReturnData = /** redirect: true & redirectTo: string */{
+  success: true;
+  redirect: true;
+  redirectURL: null;
+} /** redirect: false & redirectTo: string */ | {
   success: true;
+  redirect: false;
   redirectURL: string;
-} | {
+}
+/** redirect: false & redirectTo: null | undefined (not set) */
+/** redirect: true & redirectTo: null | undefined (not set) */
+| {
+  success: true;
+  redirect: false;
+  redirectURL: null;
+} /** Failed credentials */ | {
   success: false;
+  redirect: false;
   redirectURL: null;
-} : void;
+};
+/** Client-side credentials sign-in return type (redirect mode or manual redirect data). */
+type SignInCredentialsReturn<Options extends SignInCredentialsOptions> = Options extends {
+  redirect: false;
+} ? Extract<SignInCredentialsReturnData, {
+  redirect: false;
+}> : void;
 /** Server/programmatic credentials sign-in options. */
 interface SignInCredentialsAPIOptions extends APIOptionsWithRedirectTo, APIOptionsWithRequest {
   /**
@@ -2666,83 +2634,73 @@ interface SignInCredentialsAPIOptions extends APIOptionsWithRedirectTo, APIOptio
   payload: CredentialsPayload;
 }
 /** Programmatic credentials sign-in result with response metadata and `toResponse()`. */
-type SignInCredentialsAPIReturn = AuthActionAPIReturn<{
-  success: true;
-  redirectURL: string;
-} | {
-  success: false;
-  redirectURL: null;
-}>;
+type SignInCredentialsAPIReturn = AuthActionAPIReturn<SignInCredentialsReturnData>;
 /** Client-side sign-out options. */
 interface SignOutOptions extends OptionsWithRedirectTo {}
-/** Client-side sign-out return type (redirect mode or manual redirect data). */
-type SignOutReturn<Options extends SignOutOptions> = Options extends {
-  redirect: false;
-} ? {
+type SignOutReturnData = /** redirect: true & redirectTo: string */{
+  success: true;
+  redirect: true;
+  redirectURL: null;
+} /** redirect: false & redirectTo: string */ | {
   success: true;
   redirect: false;
   redirectURL: string;
-} | {
+}
+/** redirect: false & redirectTo: null | undefined (not set) */
+/** redirect: true & redirectTo: null | undefined (not set) */
+| {
+  success: true;
+  redirect: false;
+  redirectURL: null;
+} /** Failed */ | {
   success: false;
   redirect: false;
   redirectURL: null;
-} : void;
+};
+/** Client-side sign-out return type (redirect mode or manual redirect data). */
+type SignOutReturn<Options extends SignOutOptions> = Options extends {
+  redirect: false;
+} ? Extract<SignOutReturnData, {
+  redirect: false;
+}> : void;
 /** Server/programmatic options for `signOut` API. */
-interface SignOutAPIOptions extends APIOptionsWithRedirectTo, APIOptionsWithSkipCSRFCheck {
-  /**
-   * Required headers used to execute sign-out.
-   * Must include `session_token` and `csrf_token` cookies for CSRF validation.
-   * @example
-   * {
-   *   Cookie: "session_token=abc123; csrf_token=def456"
-   * }
-   */
-  headers: HeadersInit;
-  /**
-   * Optional `Request` object as an alternative to manually providing `headers`.
-   */
-  request?: Request;
-}
+interface SignOutAPIOptions extends RequiredKeys<APIOptionsWithRequest, "headers">, APIOptionsWithSkipCSRFCheck {}
 /** Programmatic sign-out result with redirect metadata and `toResponse()`. */
-type SignOutAPIReturn = AuthActionAPIReturn<{
-  success: true;
-  redirect: boolean;
-  redirectURL: string;
-} | {
-  success: false;
-  redirect: boolean;
-  redirectURL: null;
-}>;
+type SignOutAPIReturn = AuthActionAPIReturn<SignOutReturnData>;
 /** Client-side `updateSession` options: partial session payload plus optional redirect behavior. */
 interface UpdateSessionOptions<DefaultUser extends User = User> extends OptionsWithRedirectTo {
   /** Partial session data to merge into the current session. */
   session: DeepPartial<Session<DefaultUser>>;
 }
-/** Client-side `updateSession` return type. */
-type UpdateSessionReturn<Options extends UpdateSessionOptions, DefaultUser extends User = User> = Options extends {
+type UpdateSessionReturnData<DefaultUser extends User = User> = /** redirect: true & redirectTo: string */{
+  success: true;
+  session: Session<DefaultUser>;
+  redirect: true;
+  redirectURL: null;
+} /** redirect: false & redirectTo: string */ | {
+  success: true;
+  session: Session<DefaultUser>;
   redirect: false;
-} ? {
+  redirectURL: string;
+} /** redirect: false & redirectTo: null | undefined (not set) */ | {
   success: true;
   session: Session<DefaultUser>;
-} | {
+  redirect: false;
+  redirectURL: null;
+} /** Failed session update */ | {
   success: false;
   session: null;
-} : void;
+  redirect: false;
+  redirectURL: null;
+};
+/** Client-side `updateSession` return type. */
+type UpdateSessionReturn<Options extends UpdateSessionOptions<DefaultUser>, DefaultUser extends User = User> = Options extends {
+  redirect: false;
+} ? Extract<UpdateSessionReturnData<DefaultUser>, {
+  redirect: false;
+}> : void;
 /** Server/programmatic options for `updateSession` API. */
-interface UpdateSessionAPIOptions<DefaultUser extends User = User> extends APIOptionsWithRequest, APIOptionsWithSkipCSRFCheck {
-  /**
-   * Required headers used to execute session update.
-   * Must include `session_token` and `csrf_token` cookies for CSRF validation.
-   * @example
-   * {
-   *  Cookie: "session_token=abc123; csrf_token=def456"
-   * }
-   */
-  headers: HeadersInit;
-  /**
-   * Optional `Request` object as an alternative to manually providing `headers`.
-   */
-  request?: Request;
+interface UpdateSessionAPIOptions<DefaultUser extends User = User> extends RequiredKeys<APIOptionsWithRequest, "headers">, APIOptionsWithSkipCSRFCheck {
   /**
    * Partial session payload used to update the current session.
    * @see Session
@@ -2757,15 +2715,7 @@ interface UpdateSessionAPIOptions<DefaultUser extends User = User> extends APIOp
   session: DeepPartial<Session<DefaultUser>>;
 }
 /** Programmatic session update result with redirect metadata and `toResponse()`. */
-type UpdateSessionAPIReturn<DefaultUser extends User = User> = AuthActionAPIReturn<{
-  success: true;
-  session: Session<DefaultUser>;
-  redirectURL: string;
-} | {
-  success: false;
-  session: null;
-  redirectURL: null;
-}>;
+type UpdateSessionAPIReturn<DefaultUser extends User = User> = AuthActionAPIReturn<UpdateSessionReturnData<DefaultUser>>;
 //#endregion
 //#region src/@types/index.d.ts
 /**
@@ -2789,8 +2739,8 @@ type AuthClient = ReturnType<typeof createAuthInstance>["handlers"];
  * Options for {@link createAuthClient} (browser HTTP client). Extends the router client with an optional `baseURL`
  * when the client runs outside the browser (e.g. server-side fetch to your app origin).
  */
-type AuthClientOptions = Prettify$1<Omit<ClientOptions, "baseURL"> & {
+type AuthClientOptions = Prettify<Omit<ClientOptions, "baseURL"> & {
   baseURL?: string;
 }>;
 //#endregion
-export { LiteralUnion as $, Nameplate as $n, JWTMode as $t, APIErrorMap as A, NotionUser as An, StandardCookie as At, AuthResponse as B, mailchimp as Bn, AsymmetricKeyPair as Bt, SignOutAPIReturn as C, DropboxProfile as Cn, JoseInstance as Ct, UpdateSessionAPIReturn as D, dropbox as Dn, SchemaRegistryContext as Dt, UpdateSessionAPIOptions as E, RootInfo as En, RouterGlobalContext as Et, ErrorType as F, twitch as Fn, OAuthProvider as Ft, EditableShapeArkType as G, XProfile as Gn, JWTConfig as Gt, DeepPartial as H, SummaryClub as Hn, CreateSessionStrategyOptions as Ht, OAuthError as I, PinterestProfile as In, OAuthProviderConfig as It, EditableShapeZod as J, SpotifyProfile as Jn, JWTEncryptionAlgorithm as Jt, EditableShapeTypebox as K, x as Kn, JWTConfigBase as Kt, TokenRevocationError as L, pinterest as Ln, OAuthProviderCredentials as Lt, AuthInternalErrorCode as M, Person as Mn, TrustedOrigin as Mt, AuthSecurityErrorCode as N, notion as Nn, TrustedProxyHeadersConfig as Nt, UpdateSessionOptions as O, Bot as On, SecureCookie as Ot, AuthorizationError as P, TwitchProfile as Pn, AuthorizeParams as Pt, InferZodShape as Q, DiscordProfile as Qn, JWTManager as Qt, createAuth as R, Login as Rn, OAuthProviderRecord as Rt, SignOutAPIOptions as S, AccountType as Sn, InternalLogger as St, SignOutReturn as T, Name as Tn, Logger as Tt, DeepRequired as U, SummaryGear as Un, CryptoSecret as Ut, ConfigSchema as V, StravaProfile as Vn, AsymmetricKeyPairFromEnv as Vt, EditableShape as W, strava as Wn, GetStatelessSessionReturn as Wt, InferSession as X, GitLabProfile as Xn, JWTKey as Xt, FromShapeToObject as Y, spotify as Yn, JWTExpirationStrategy as Yt, InferUser as Z, gitlab as Zn, JWTKeyAlgorithm as Zt, SignInCredentialsAPIReturn as _, ClickUpProfile as _n, UserShape as _r, CredentialsProvider as _t, OAuthEnv as a, Session as an, GitHubProfile as ar, ValibotShapeToObject as at, SignInOptions as b, ExtendedProfile as bn, UserShapeValibot as br, IdentityConfig as bt, APIOptionsWithRequest as c, StatelessStrategyConfig as cn, Identities as cr, AuthAPI as ct, GetSessionAPIOptions as d, builtInOAuthProviders as dn, IsZod as dr, AuthRuntimeConfig as dt, JWTSealedMode as en, discord as er, Merge as et, GetSessionAPIReturn as f, createBuiltInOAuthProviders as fn, SchemaTypes as fr, CookieConfig as ft, SignInCredentialsAPIOptions as g, dribbble as gn, UserIdentityValibot as gr, CredentialsPayload as gt, SignInAPIReturn as h, DribbbleTeams as hn, UserIdentityTypeBox as hr, CookieStrategyAttributes as ht, JWTStandardClaims as i, SecretKey as in, bitbucket as ir, UserFrom as it, AccessTokenError as j, Owner as jn, SyslogOptions as jt, UpdateSessionReturn as k, NotionProfile as kn, Severity as kt, APIOptionsWithSkipCSRFCheck as l, User as ln, IsArkType as lr, AuthConfig as lt, SignInAPIOptions as m, DribbbleProfile as mn, UserIdentityArkType as mr, CookieStoreConfig as mt, AuthClientOptions as n, JWTSigningAlgorithm as nn, figma as nr, SessionFrom as nt, TypedJWTPayload$1 as o, SessionConfig as on, github as or, Wrap as ot, OptionsWithRedirectTo as p, DribbbleDefault as pn, UserIdentity as pr, CookieName as pt, EditableShapeValibot as q, SpotifyImage as qn, JWTEncryptedMode as qt, JWTPayloadWithToken as r, JWTStrategyOptions as rn, BitbucketProfile as rr, TypeboxShapeToObject as rt, APIOptionsWithRedirectTo as s, SessionStrategy as sn, createSyslogMessage as sr, ZodShapeToObject as st, AuthClient as t, JWTSignedMode as tn, FigmaProfile as tr, Prettify$1 as tt, FunctionAPIContext as u, BuiltInOAuthProvider as un, IsValibot as ur, AuthInstance as ut, SignInCredentialsOptions as v, clickUp as vn, UserShapeArkType as vr, CredentialsProviderContext as vt, SignOutOptions as w, FullTeam as wn, LogLevel as wt, SignInReturn as x, atlassian as xn, createIdentity as xr, InternalContext as xt, SignInCredentialsReturn as y, AtlassianProfile as yn, UserShapeTypeBox as yr, HostCookie as yt, ArktypeShapeToObject as z, MailchimpProfile as zn, ResponseType as zt };
+export { FromShapeToObject as $, SpotifyProfile as $n, JWTEncryptionAlgorithm as $t, UpdateSessionOptions as A, Name as An, Logger as At, TokenRevocationError as B, twitch as Bn, OAuthProvider as Bt, SignOutAPIOptions as C, clickUp as Cn, UserShapeArkType as Cr, CredentialsProviderContext as Ct, SignOutReturnData as D, AccountType as Dn, InternalLogger as Dt, SignOutReturn as E, atlassian as En, createIdentity as Er, InternalContext as Et, AuthInternalErrorCode as F, NotionUser as Fn, StandardCookie as Ft, DeepPartial as G, mailchimp as Gn, AsymmetricKeyPair as Gt, ArktypeShapeToObject as H, pinterest as Hn, OAuthProviderCredentials as Ht, AuthSecurityErrorCode as I, Owner as In, SyslogOptions as It, EditableShapeArkType as J, SummaryGear as Jn, CryptoSecret as Jt, DeepRequired as K, StravaProfile as Kn, AsymmetricKeyPairFromEnv as Kt, AuthorizationError as L, Person as Ln, TrustedOrigin as Lt, UpdateSessionReturnData as M, dropbox as Mn, SchemaRegistryContext as Mt, APIErrorMap as N, Bot as Nn, SecureCookie as Nt, UpdateSessionAPIOptions as O, DropboxProfile as On, JoseInstance as Ot, AccessTokenError as P, NotionProfile as Pn, Severity as Pt, EditableUser as Q, SpotifyImage as Qn, JWTEncryptedMode as Qt, ErrorType as R, notion as Rn, TrustedProxyHeadersConfig as Rt, SignInReturn as S, ClickUpProfile as Sn, UserShape as Sr, CredentialsProvider as St, SignOutOptions as T, ExtendedProfile as Tn, UserShapeValibot as Tr, IdentityConfig as Tt, AuthResponse as U, Login as Un, OAuthProviderRecord as Ut, createAuth as V, PinterestProfile as Vn, OAuthProviderConfig as Vt, ConfigSchema as W, MailchimpProfile as Wn, ResponseType as Wt, EditableShapeValibot as X, XProfile as Xn, JWTConfig as Xt, EditableShapeTypebox as Y, strava as Yn, GetStatelessSessionReturn as Yt, EditableShapeZod as Z, x as Zn, JWTConfigBase as Zt, SignInCredentialsAPIReturn as _, createBuiltInOAuthProviders as _n, SchemaTypes as _r, CookieConfig as _t, OAuthEnv as a, JWTSealedMode as an, discord as ar, Prettify as at, SignInCredentialsReturnData as b, DribbbleTeams as bn, UserIdentityTypeBox as br, CookieStrategyAttributes as bt, APIOptionsWithRequest as c, JWTStrategyOptions as cn, BitbucketProfile as cr, TypeboxShapeToObject as ct, GetSessionAPIOptions as d, SessionConfig as dn, github as dr, Wrap as dt, JWTExpirationStrategy as en, spotify as er, InferSession as et, GetSessionAPIReturn as f, SessionStrategy as fn, createSyslogMessage as fr, ZodShapeToObject as ft, SignInCredentialsAPIOptions as g, builtInOAuthProviders as gn, IsZod as gr, AuthRuntimeConfig as gt, SignInAPIReturn as h, BuiltInOAuthProvider as hn, IsValibot as hr, AuthInstance as ht, JWTStandardClaims as i, JWTMode as in, Nameplate as ir, Merge as it, UpdateSessionReturn as j, RootInfo as jn, RouterGlobalContext as jt, UpdateSessionAPIReturn as k, FullTeam as kn, LogLevel as kt, APIOptionsWithSkipCSRFCheck as l, SecretKey as ln, bitbucket as lr, UserFrom as lt, SignInAPIOptions as m, User as mn, IsArkType as mr, AuthConfig as mt, AuthClientOptions as n, JWTKeyAlgorithm as nn, gitlab as nr, InferZodShape as nt, TypedJWTPayload$1 as o, JWTSignedMode as on, FigmaProfile as or, RequiredKeys as ot, OptionsWithRedirectTo as p, StatelessStrategyConfig as pn, Identities as pr, AuthAPI as pt, EditableShape as q, SummaryClub as qn, CreateSessionStrategyOptions as qt, JWTPayloadWithToken as r, JWTManager as rn, DiscordProfile as rr, LiteralUnion as rt, APIOptionsWithRedirectTo as s, JWTSigningAlgorithm as sn, figma as sr, SessionFrom as st, AuthClient as t, JWTKey as tn, GitLabProfile as tr, InferUser as tt, FunctionAPIContext as u, Session as un, GitHubProfile as ur, ValibotShapeToObject as ut, SignInCredentialsOptions as v, DribbbleDefault as vn, UserIdentity as vr, CookieName as vt, SignOutAPIReturn as w, AtlassianProfile as wn, UserShapeTypeBox as wr, HostCookie as wt, SignInOptions as x, dribbble as xn, UserIdentityValibot as xr, CredentialsPayload as xt, SignInCredentialsReturn as y, DribbbleProfile as yn, UserIdentityArkType as yr, CookieStoreConfig as yt, OAuthError as z, TwitchProfile as zn, AuthorizeParams as zt };