@aura-stack/hono 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Auth Stack Js
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,96 @@
+<div align="center">
+  
+<h1><b>@aura-stack/hono</b></h1>
+
+**Hono middleware and utilities for the Aura Stack authentication library**
+
+[![npm version](https://img.shields.io/npm/v/@aura-stack/hono.svg)](https://www.npmjs.com/package/@aura-stack/hono)
+[![JSR version](https://jsr.io/badges/@aura-stack/hono)](https://jsr.io/@aura-stack/hono)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+[Official Docs](https://aura-stack-auth.vercel.app/docs) · [Hono Package Docs](https://aura-stack-auth.vercel.app/docs/packages/hono)
+
+</div>
+
+## Overview
+
+`@aura-stack/hono` provides a seamless integration layer for **Hono** applications using **Aura Auth**. It allows you to easily mount authentication handlers and protect your routes using type-safe middlewares that run anywhere (Cloudflare Workers, Deno, Bun, Node.js).
+
+It leverages Hono's `Context` to provide session management and authentication flows with first-class TypeScript support.
+
+## Features
+
+- **Hono Middleware** — Standard `withAuth` middleware that keeps your handlers clean.
+- **Environment Agnostic** — Works on any runtime supported by Hono.
+- **Type-safe Context** — Access the session directly via `c.get('session')` with full type safety.
+- **Unified Handlers** — Bridge Web Request/Response API handlers to Hono seamlessly.
+- **Native OAuth Support** — Optimized for Hono's internal routing and request handling.
+
+## Installation
+
+```bash
+pnpm add @aura-stack/hono @aura-stack/auth
+```
+
+## Quick Start
+
+### 1. Configure Auth
+
+Create your authentication instance. This typically goes in a shared file like `lib/auth.ts`.
+
+```tsx
+import { createAuth } from "@aura-stack/hono"
+
+export const auth = createAuth({
+  oauth: ["github"],
+  // your configuration
+})
+
+export const { toHandler, withAuth } = auth
+```
+
+### 2. Mount Auth Endpoints
+
+Mount the authentication endpoints using `Hono.all()`.
+
+```tsx
+import { Hono } from "hono"
+import { toHandler } from "./lib/auth"
+
+const app = new Hono()
+
+// All Aura Auth routes (sign-in, sign-out, session, etc.)
+app.all("/api/auth/*", toHandler)
+```
+
+### 3. Protect Your Routes
+
+Use the `withAuth` middleware to protect routes. The session will be available in the Hono context.
+
+```tsx
+import { withAuth } from "./lib/auth"
+
+app.get("/api/protected", withAuth, (c) => {
+  const session = c.get("session")
+
+  if (!session) {
+    return c.json({ error: "Unauthorized" }, 401)
+  }
+
+  return c.json({ message: `Hello, ${session.user.name}!` })
+})
+```
+
+## Documentation
+
+Visit the [**official documentation website**](https://aura-stack-auth.vercel.app) for more detailed guides and API references.
+
+## License
+
+Licensed under the [MIT License](LICENSE). © [Aura Stack](https://github.com/aura-stack-ts)
+
+---
+
+<p align="center">
+  Made with ❤️ by <a href="https://github.com/aura-stack-ts">Aura Stack team</a>
+</p>

package/dist/_core/cookies.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/cookies`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/cookies.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/cookies";

package/dist/_core/cookies.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/cookies";

package/dist/_core/crypto.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/crypto`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/crypto.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/crypto";

package/dist/_core/crypto.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/crypto";

package/dist/_core/identity.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/identity`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/identity.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/identity";

package/dist/_core/identity.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/identity";

package/dist/_core/shared.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/shared`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/shared.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/shared";

package/dist/_core/shared.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/shared";

package/dist/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require(`@aura-stack/auth`),t=require(`hono/factory`);const n=async(e,t)=>await e.ALL(t.req.raw),r=({api:e})=>(0,t.createMiddleware)(async(t,n)=>{try{let r=await e.getSession({headers:t.req.raw.headers});return t.set(`session`,r.session),await n()}catch{return t.set(`session`,null),await n()}}),i=t=>{let i=(0,e.createAuth)(t);return{...i,toHandler:e=>n(i.handlers,e),withAuth:r(i)}};exports.createAuth=i;

package/dist/index.d.ts

@@ -0,0 +1,675 @@
+import { AuthConfig as AuthConfig$1, Session as Session$1, User as User$1 } from "@aura-stack/auth";
+import { FromShapeToObject, Identities } from "@aura-stack/auth/identity";
+import * as _$hono from "hono";
+import { Context } from "hono";
+import * as _$_aura_stack_auth_types0 from "@aura-stack/auth/types";
+import { AuthConfig, AuthInstance, Session, User } from "@aura-stack/auth/types";
+import * as _$_aura_stack_auth_oauth0 from "@aura-stack/auth/oauth";
+
+//#region src/lib/with-auth.d.ts
+type EnvWithSession<DefaultUser extends User$1 = User$1> = {
+  session?: Session$1<DefaultUser> | null;
+};
+//#endregion
+//#region ../../node_modules/.pnpm/jose@6.2.1/node_modules/jose/dist/types/types.d.ts
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters$1 {
+  /** JWK "kty" (Key Type) Parameter */
+  kty?: string;
+  /**
+   * JWK "alg" (Algorithm) Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+   */
+  alg?: string;
+  /** JWK "key_ops" (Key Operations) Parameter */
+  key_ops?: string[];
+  /** JWK "ext" (Extractable) Parameter */
+  ext?: boolean;
+  /** JWK "use" (Public Key Use) Parameter */
+  use?: string;
+  /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+  x5c?: string[];
+  /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+  x5t?: string;
+  /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+  'x5t#S256'?: string;
+  /** JWK "x5u" (X.509 URL) Parameter */
+  x5u?: string;
+  /** JWK "kid" (Key ID) Parameter */
+  kid?: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA", "EC", "OKP", "AKP", and
+ * "oct" key types are supported.
+ *
+ * @see {@link JWK_AKP_Public}
+ * @see {@link JWK_AKP_Private}
+ * @see {@link JWK_OKP_Public}
+ * @see {@link JWK_OKP_Private}
+ * @see {@link JWK_EC_Public}
+ * @see {@link JWK_EC_Private}
+ * @see {@link JWK_RSA_Public}
+ * @see {@link JWK_RSA_Private}
+ * @see {@link JWK_oct}
+ */
+interface JWK$1 extends JWKParameters$1 {
+  /**
+   * - EC JWK "crv" (Curve) Parameter
+   * - OKP JWK "crv" (The Subtype of Key Pair) Parameter
+   */
+  crv?: string;
+  /**
+   * - Private RSA JWK "d" (Private Exponent) Parameter
+   * - Private EC JWK "d" (ECC Private Key) Parameter
+   * - Private OKP JWK "d" (The Private Key) Parameter
+   */
+  d?: string;
+  /** Private RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+  dp?: string;
+  /** Private RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+  dq?: string;
+  /** RSA JWK "e" (Exponent) Parameter */
+  e?: string;
+  /** Oct JWK "k" (Key Value) Parameter */
+  k?: string;
+  /** RSA JWK "n" (Modulus) Parameter */
+  n?: string;
+  /** Private RSA JWK "p" (First Prime Factor) Parameter */
+  p?: string;
+  /** Private RSA JWK "q" (Second Prime Factor) Parameter */
+  q?: string;
+  /** Private RSA JWK "qi" (First CRT Coefficient) Parameter */
+  qi?: string;
+  /**
+   * - EC JWK "x" (X Coordinate) Parameter
+   * - OKP JWK "x" (The public key) Parameter
+   */
+  x?: string;
+  /** EC JWK "y" (Y Coordinate) Parameter */
+  y?: string;
+  /** AKP JWK "pub" (Public Key) Parameter */
+  pub?: string;
+  /** AKP JWK "priv" (Private key) Parameter */
+  priv?: string;
+}
+/** Header Parameters common to JWE and JWS */
+interface JoseHeaderParameters$1 {
+  /** "kid" (Key ID) Header Parameter */
+  kid?: string;
+  /** "x5t" (X.509 Certificate SHA-1 Thumbprint) Header Parameter */
+  x5t?: string;
+  /** "x5c" (X.509 Certificate Chain) Header Parameter */
+  x5c?: string[];
+  /** "x5u" (X.509 URL) Header Parameter */
+  x5u?: string;
+  /** "jku" (JWK Set URL) Header Parameter */
+  jku?: string;
+  /** "jwk" (JSON Web Key) Header Parameter */
+  jwk?: Pick<JWK$1, 'kty' | 'crv' | 'x' | 'y' | 'e' | 'n' | 'alg' | 'pub'>;
+  /** "typ" (Type) Header Parameter */
+  typ?: string;
+  /** "cty" (Content Type) Header Parameter */
+  cty?: string;
+}
+/** Recognized JWS Header Parameters, any other Header Members may also be present. */
+interface JWSHeaderParameters$1 extends JoseHeaderParameters$1 {
+  /**
+   * JWS "alg" (Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}
+   */
+  alg?: string;
+  /**
+   * This JWS Extension Header Parameter modifies the JWS Payload representation and the JWS Signing
+   * Input computation as per {@link https://www.rfc-editor.org/rfc/rfc7797 RFC7797}.
+   */
+  b64?: boolean;
+  /** JWS "crit" (Critical) Header Parameter */
+  crit?: string[];
+  /** Any other JWS Header member. */
+  [propName: string]: unknown;
+}
+/** Recognized JWE Header Parameters, any other Header members may also be present. */
+interface JWEHeaderParameters$1 extends JoseHeaderParameters$1 {
+  /**
+   * JWE "alg" (Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}
+   */
+  alg?: string;
+  /**
+   * JWE "enc" (Encryption Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}
+   */
+  enc?: string;
+  /** JWE "crit" (Critical) Header Parameter */
+  crit?: string[];
+  /**
+   * JWE "zip" (Compression Algorithm) Header Parameter.
+   *
+   * The only supported value is `"DEF"` (DEFLATE). Requires the `CompressionStream` /
+   * `DecompressionStream` APIs to be available in the runtime.
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7516#section-4.1.3 JWE "zip" Header Parameter}
+   */
+  zip?: string;
+  /** Any other JWE Header member. */
+  [propName: string]: unknown;
+}
+/** Shared Interface with a "crit" property for all sign, verify, encrypt and decrypt operations. */
+interface CritOption$1 {
+  /**
+   * An object with keys representing recognized "crit" (Critical) Header Parameter names. The value
+   * for those is either `true` or `false`. `true` when the Header Parameter MUST be integrity
+   * protected, `false` when it's irrelevant.
+   *
+   * This makes the "Extension Header Parameter "..." is not recognized" error go away.
+   *
+   * Use this when a given JWS/JWT/JWE profile requires the use of proprietary non-registered "crit"
+   * (Critical) Header Parameters. This will only make sure the Header Parameter is syntactically
+   * correct when provided and that it is optionally integrity protected. It will not process the
+   * Header Parameter in any way or reject the operation if it is missing. You MUST still verify the
+   * Header Parameter was present and process it according to the profile's validation steps after
+   * the operation succeeds.
+   *
+   * The JWS extension Header Parameter `b64` is always recognized and processed properly. No other
+   * registered Header Parameters that need this kind of default built-in treatment are currently
+   * available.
+   */
+  crit?: {
+    [propName: string]: boolean;
+  };
+}
+/** JWE Decryption options. */
+interface DecryptOptions$1 extends CritOption$1 {
+  /**
+   * A list of accepted JWE "alg" (Algorithm) Header Parameter values. By default all "alg"
+   * (Algorithm) Header Parameter values applicable for the used key/secret are allowed except for
+   * all PBES2 Key Management Algorithms, these need to be explicitly allowed using this option.
+   */
+  keyManagementAlgorithms?: string[];
+  /**
+   * A list of accepted JWE "enc" (Encryption Algorithm) Header Parameter values. By default all
+   * "enc" (Encryption Algorithm) values applicable for the used key/secret are allowed.
+   */
+  contentEncryptionAlgorithms?: string[];
+  /**
+   * (PBES2 Key Management Algorithms only) Maximum allowed "p2c" (PBES2 Count) Header Parameter
+   * value. The PBKDF2 iteration count defines the algorithm's computational expense. By default
+   * this value is set to 10000.
+   */
+  maxPBES2Count?: number;
+  /**
+   * Maximum allowed size (in bytes) of the decompressed plaintext when the JWE `"zip"` (Compression
+   * Algorithm) Header Parameter is present. By default this value is set to 250000 (250 KB). The
+   * value must be `0`, a positive safe integer, or `Infinity`.
+   *
+   * Set to `0` to reject all compressed JWEs during decryption.
+   *
+   * Set to `Infinity` to disable the decompressed size limit.
+   */
+  maxDecompressedLength?: number;
+}
+/** JWT Claims Set verification options. */
+interface JWTClaimVerificationOptions$1 {
+  /**
+   * Expected JWT "aud" (Audience) Claim value(s).
+   *
+   * This option makes the JWT "aud" (Audience) Claim presence required.
+   */
+  audience?: string | string[];
+  /**
+   * Clock skew tolerance
+   *
+   * - In seconds when number (e.g. 5)
+   * - Resolved into a number of seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
+   *
+   * Used when validating the JWT "nbf" (Not Before) and "exp" (Expiration Time) claims, and when
+   * validating the "iat" (Issued At) claim if the {@link maxTokenAge `maxTokenAge` option} is set.
+   */
+  clockTolerance?: string | number;
+  /**
+   * Expected JWT "iss" (Issuer) Claim value(s).
+   *
+   * This option makes the JWT "iss" (Issuer) Claim presence required.
+   */
+  issuer?: string | string[];
+  /**
+   * Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.
+   *
+   * - In seconds when number (e.g. 5)
+   * - Resolved into a number of seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
+   *
+   * This option makes the JWT "iat" (Issued At) Claim presence required.
+   */
+  maxTokenAge?: string | number;
+  /**
+   * Expected JWT "sub" (Subject) Claim value.
+   *
+   * This option makes the JWT "sub" (Subject) Claim presence required.
+   */
+  subject?: string;
+  /**
+   * Expected JWT "typ" (Type) Header Parameter value.
+   *
+   * This option makes the JWT "typ" (Type) Header Parameter presence required.
+   */
+  typ?: string;
+  /** Date to use when comparing NumericDate claims, defaults to `new Date()`. */
+  currentDate?: Date;
+  /**
+   * Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if
+   * the {@link issuer `issuer` option} is set, then JWT "iss" (Issuer) Claim must be present; if the
+   * {@link audience `audience` option} is set, then JWT "aud" (Audience) Claim must be present; if
+   * the {@link subject `subject` option} is set, then JWT "sub" (Subject) Claim must be present; if
+   * the {@link maxTokenAge `maxTokenAge` option} is set, then JWT "iat" (Issued At) Claim must be
+   * present.
+   */
+  requiredClaims?: string[];
+}
+/** JWS Verification options. */
+interface VerifyOptions$1 extends CritOption$1 {
+  /**
+   * A list of accepted JWS "alg" (Algorithm) Header Parameter values. By default all "alg"
+   * (Algorithm) values applicable for the used key/secret are allowed.
+   *
+   * > [!NOTE]\
+   * > Unsecured JWTs (`{ "alg": "none" }`) are never accepted by this API.
+   */
+  algorithms?: string[];
+}
+/** Recognized JWT Claims Set members, any other members may also be present. */
+interface JWTPayload {
+  /**
+   * JWT Issuer
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.1 RFC7519#section-4.1.1}
+   */
+  iss?: string;
+  /**
+   * JWT Subject
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.2 RFC7519#section-4.1.2}
+   */
+  sub?: string;
+  /**
+   * JWT Audience
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.3 RFC7519#section-4.1.3}
+   */
+  aud?: string | string[];
+  /**
+   * JWT ID
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 RFC7519#section-4.1.7}
+   */
+  jti?: string;
+  /**
+   * JWT Not Before
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.5 RFC7519#section-4.1.5}
+   */
+  nbf?: number;
+  /**
+   * JWT Expiration Time
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.4 RFC7519#section-4.1.4}
+   */
+  exp?: number;
+  /**
+   * JWT Issued At
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
+   */
+  iat?: number;
+  /** Any other JWT Claim Set member. */
+  [propName: string]: unknown;
+}
+/** Recognized Compact JWS Header Parameters, any other Header Members may also be present. */
+interface CompactJWSHeaderParameters$1 extends JWSHeaderParameters$1 {
+  alg: string;
+}
+/** Recognized Signed JWT Header Parameters, any other Header Members may also be present. */
+interface JWTHeaderParameters$1 extends CompactJWSHeaderParameters$1 {
+  b64?: true;
+}
+//#endregion
+//#region ../../node_modules/.pnpm/jose@6.2.1/node_modules/jose/dist/types/jwt/verify.d.ts
+/** Combination of JWS Verification options and JWT Claims Set verification options. */
+interface JWTVerifyOptions$1 extends VerifyOptions$1, JWTClaimVerificationOptions$1 {}
+//#endregion
+//#region ../jose/dist/index.d.ts
+type TypedJWTPayload<Payload extends JWTPayload> = JWTPayload & Payload;
+/**
+ * JWT options for signin and encryption.
+ */
+interface EncodeJWTOptions {
+  sign?: JWTHeaderParameters$1;
+  encrypt?: JWEHeaderParameters$1;
+}
+/**
+ * Decoded JWT payload options for verification and decryption.
+ */
+interface DecodeJWTOptions {
+  verify?: JWTVerifyOptions$1;
+  decrypt?: DecryptOptions$1;
+}
+//#endregion
+//#region ../../node_modules/.deno/jose@6.2.2/node_modules/jose/dist/types/types.d.ts
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters {
+  /** JWK "kty" (Key Type) Parameter */
+  kty?: string;
+  /**
+   * JWK "alg" (Algorithm) Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+   */
+  alg?: string;
+  /** JWK "key_ops" (Key Operations) Parameter */
+  key_ops?: string[];
+  /** JWK "ext" (Extractable) Parameter */
+  ext?: boolean;
+  /** JWK "use" (Public Key Use) Parameter */
+  use?: string;
+  /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+  x5c?: string[];
+  /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+  x5t?: string;
+  /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+  'x5t#S256'?: string;
+  /** JWK "x5u" (X.509 URL) Parameter */
+  x5u?: string;
+  /** JWK "kid" (Key ID) Parameter */
+  kid?: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA", "EC", "OKP", "AKP", and
+ * "oct" key types are supported.
+ *
+ * @see {@link JWK_AKP_Public}
+ * @see {@link JWK_AKP_Private}
+ * @see {@link JWK_OKP_Public}
+ * @see {@link JWK_OKP_Private}
+ * @see {@link JWK_EC_Public}
+ * @see {@link JWK_EC_Private}
+ * @see {@link JWK_RSA_Public}
+ * @see {@link JWK_RSA_Private}
+ * @see {@link JWK_oct}
+ */
+interface JWK extends JWKParameters {
+  /**
+   * - EC JWK "crv" (Curve) Parameter
+   * - OKP JWK "crv" (The Subtype of Key Pair) Parameter
+   */
+  crv?: string;
+  /**
+   * - Private RSA JWK "d" (Private Exponent) Parameter
+   * - Private EC JWK "d" (ECC Private Key) Parameter
+   * - Private OKP JWK "d" (The Private Key) Parameter
+   */
+  d?: string;
+  /** Private RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+  dp?: string;
+  /** Private RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+  dq?: string;
+  /** RSA JWK "e" (Exponent) Parameter */
+  e?: string;
+  /** Oct JWK "k" (Key Value) Parameter */
+  k?: string;
+  /** RSA JWK "n" (Modulus) Parameter */
+  n?: string;
+  /** Private RSA JWK "p" (First Prime Factor) Parameter */
+  p?: string;
+  /** Private RSA JWK "q" (Second Prime Factor) Parameter */
+  q?: string;
+  /** Private RSA JWK "qi" (First CRT Coefficient) Parameter */
+  qi?: string;
+  /**
+   * - EC JWK "x" (X Coordinate) Parameter
+   * - OKP JWK "x" (The public key) Parameter
+   */
+  x?: string;
+  /** EC JWK "y" (Y Coordinate) Parameter */
+  y?: string;
+  /** AKP JWK "pub" (Public Key) Parameter */
+  pub?: string;
+  /** AKP JWK "priv" (Private key) Parameter */
+  priv?: string;
+}
+/** Header Parameters common to JWE and JWS */
+interface JoseHeaderParameters {
+  /** "kid" (Key ID) Header Parameter */
+  kid?: string;
+  /** "x5t" (X.509 Certificate SHA-1 Thumbprint) Header Parameter */
+  x5t?: string;
+  /** "x5c" (X.509 Certificate Chain) Header Parameter */
+  x5c?: string[];
+  /** "x5u" (X.509 URL) Header Parameter */
+  x5u?: string;
+  /** "jku" (JWK Set URL) Header Parameter */
+  jku?: string;
+  /** "jwk" (JSON Web Key) Header Parameter */
+  jwk?: Pick<JWK, 'kty' | 'crv' | 'x' | 'y' | 'e' | 'n' | 'alg' | 'pub'>;
+  /** "typ" (Type) Header Parameter */
+  typ?: string;
+  /** "cty" (Content Type) Header Parameter */
+  cty?: string;
+}
+/** Recognized JWS Header Parameters, any other Header Members may also be present. */
+interface JWSHeaderParameters extends JoseHeaderParameters {
+  /**
+   * JWS "alg" (Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}
+   */
+  alg?: string;
+  /**
+   * This JWS Extension Header Parameter modifies the JWS Payload representation and the JWS Signing
+   * Input computation as per {@link https://www.rfc-editor.org/rfc/rfc7797 RFC7797}.
+   */
+  b64?: boolean;
+  /** JWS "crit" (Critical) Header Parameter */
+  crit?: string[];
+  /** Any other JWS Header member. */
+  [propName: string]: unknown;
+}
+/** Recognized JWE Header Parameters, any other Header members may also be present. */
+interface JWEHeaderParameters extends JoseHeaderParameters {
+  /**
+   * JWE "alg" (Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}
+   */
+  alg?: string;
+  /**
+   * JWE "enc" (Encryption Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}
+   */
+  enc?: string;
+  /** JWE "crit" (Critical) Header Parameter */
+  crit?: string[];
+  /**
+   * JWE "zip" (Compression Algorithm) Header Parameter.
+   *
+   * The only supported value is `"DEF"` (DEFLATE). Requires the `CompressionStream` /
+   * `DecompressionStream` APIs to be available in the runtime.
+   *
+   * @see {@link https://www.rfc-editor.org/rfc/rfc7516#section-4.1.3 JWE "zip" Header Parameter}
+   */
+  zip?: string;
+  /** Any other JWE Header member. */
+  [propName: string]: unknown;
+}
+/** Shared Interface with a "crit" property for all sign, verify, encrypt and decrypt operations. */
+interface CritOption {
+  /**
+   * An object with keys representing recognized "crit" (Critical) Header Parameter names. The value
+   * for those is either `true` or `false`. `true` when the Header Parameter MUST be integrity
+   * protected, `false` when it's irrelevant.
+   *
+   * This makes the "Extension Header Parameter "..." is not recognized" error go away.
+   *
+   * Use this when a given JWS/JWT/JWE profile requires the use of proprietary non-registered "crit"
+   * (Critical) Header Parameters. This will only make sure the Header Parameter is syntactically
+   * correct when provided and that it is optionally integrity protected. It will not process the
+   * Header Parameter in any way or reject the operation if it is missing. You MUST still verify the
+   * Header Parameter was present and process it according to the profile's validation steps after
+   * the operation succeeds.
+   *
+   * The JWS extension Header Parameter `b64` is always recognized and processed properly. No other
+   * registered Header Parameters that need this kind of default built-in treatment are currently
+   * available.
+   */
+  crit?: {
+    [propName: string]: boolean;
+  };
+}
+/** JWE Decryption options. */
+interface DecryptOptions extends CritOption {
+  /**
+   * A list of accepted JWE "alg" (Algorithm) Header Parameter values. By default all "alg"
+   * (Algorithm) Header Parameter values applicable for the used key/secret are allowed except for
+   * all PBES2 Key Management Algorithms, these need to be explicitly allowed using this option.
+   */
+  keyManagementAlgorithms?: string[];
+  /**
+   * A list of accepted JWE "enc" (Encryption Algorithm) Header Parameter values. By default all
+   * "enc" (Encryption Algorithm) values applicable for the used key/secret are allowed.
+   */
+  contentEncryptionAlgorithms?: string[];
+  /**
+   * (PBES2 Key Management Algorithms only) Maximum allowed "p2c" (PBES2 Count) Header Parameter
+   * value. The PBKDF2 iteration count defines the algorithm's computational expense. By default
+   * this value is set to 10000.
+   */
+  maxPBES2Count?: number;
+  /**
+   * Maximum allowed size (in bytes) of the decompressed plaintext when the JWE `"zip"` (Compression
+   * Algorithm) Header Parameter is present. By default this value is set to 250000 (250 KB). The
+   * value must be `0`, a positive safe integer, or `Infinity`.
+   *
+   * Set to `0` to reject all compressed JWEs during decryption.
+   *
+   * Set to `Infinity` to disable the decompressed size limit.
+   */
+  maxDecompressedLength?: number;
+}
+/** JWT Claims Set verification options. */
+interface JWTClaimVerificationOptions {
+  /**
+   * Expected JWT "aud" (Audience) Claim value(s).
+   *
+   * This option makes the JWT "aud" (Audience) Claim presence required.
+   */
+  audience?: string | string[];
+  /**
+   * Clock skew tolerance
+   *
+   * - In seconds when number (e.g. 5)
+   * - Resolved into a number of seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
+   *
+   * Used when validating the JWT "nbf" (Not Before) and "exp" (Expiration Time) claims, and when
+   * validating the "iat" (Issued At) claim if the {@link maxTokenAge `maxTokenAge` option} is set.
+   */
+  clockTolerance?: string | number;
+  /**
+   * Expected JWT "iss" (Issuer) Claim value(s).
+   *
+   * This option makes the JWT "iss" (Issuer) Claim presence required.
+   */
+  issuer?: string | string[];
+  /**
+   * Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.
+   *
+   * - In seconds when number (e.g. 5)
+   * - Resolved into a number of seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
+   *
+   * This option makes the JWT "iat" (Issued At) Claim presence required.
+   */
+  maxTokenAge?: string | number;
+  /**
+   * Expected JWT "sub" (Subject) Claim value.
+   *
+   * This option makes the JWT "sub" (Subject) Claim presence required.
+   */
+  subject?: string;
+  /**
+   * Expected JWT "typ" (Type) Header Parameter value.
+   *
+   * This option makes the JWT "typ" (Type) Header Parameter presence required.
+   */
+  typ?: string;
+  /** Date to use when comparing NumericDate claims, defaults to `new Date()`. */
+  currentDate?: Date;
+  /**
+   * Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if
+   * the {@link issuer `issuer` option} is set, then JWT "iss" (Issuer) Claim must be present; if the
+   * {@link audience `audience` option} is set, then JWT "aud" (Audience) Claim must be present; if
+   * the {@link subject `subject` option} is set, then JWT "sub" (Subject) Claim must be present; if
+   * the {@link maxTokenAge `maxTokenAge` option} is set, then JWT "iat" (Issued At) Claim must be
+   * present.
+   */
+  requiredClaims?: string[];
+}
+/** JWS Verification options. */
+interface VerifyOptions extends CritOption {
+  /**
+   * A list of accepted JWS "alg" (Algorithm) Header Parameter values. By default all "alg"
+   * (Algorithm) values applicable for the used key/secret are allowed.
+   *
+   * > [!NOTE]\
+   * > Unsecured JWTs (`{ "alg": "none" }`) are never accepted by this API.
+   */
+  algorithms?: string[];
+}
+/** Recognized Compact JWS Header Parameters, any other Header Members may also be present. */
+interface CompactJWSHeaderParameters extends JWSHeaderParameters {
+  alg: string;
+}
+/** Recognized Signed JWT Header Parameters, any other Header Members may also be present. */
+interface JWTHeaderParameters extends CompactJWSHeaderParameters {
+  b64?: true;
+}
+//#endregion
+//#region ../../node_modules/.deno/jose@6.2.2/node_modules/jose/dist/types/jwt/verify.d.ts
+/** Combination of JWS Verification options and JWT Claims Set verification options. */
+interface JWTVerifyOptions extends VerifyOptions, JWTClaimVerificationOptions {}
+//#endregion
+//#region ../../node_modules/.deno/jose@6.2.2/node_modules/jose/dist/types/jwt/decrypt.d.ts
+/** Combination of JWE Decryption options and JWT Claims Set verification options. */
+interface JWTDecryptOptions extends DecryptOptions, JWTClaimVerificationOptions {}
+//#endregion
+//#region src/createAuth.d.ts
+declare const createAuth: <Identity extends Identities>(config: AuthConfig$1<Identity>) => {
+  toHandler: (ctx: Context) => Promise<Response>;
+  withAuth: _$hono.MiddlewareHandler<{
+    Variables: EnvWithSession<FromShapeToObject<Identity>>;
+  }, string, {}, Response>;
+  api: {
+    getSession: (options: _$_aura_stack_auth_types0.GetSessionAPIOptions) => Promise<_$_aura_stack_auth_types0.GetSessionAPIReturn<FromShapeToObject<Identity>>>;
+    signIn: (oauth: _$_aura_stack_auth_types0.LiteralUnion<_$_aura_stack_auth_oauth0.BuiltInOAuthProvider>, options?: _$_aura_stack_auth_types0.SignInAPIOptions) => Promise<_$_aura_stack_auth_types0.SignInAPIReturn>;
+    signInCredentials: (options: _$_aura_stack_auth_types0.SignInCredentialsAPIOptions) => Promise<_$_aura_stack_auth_types0.SignInCredentialsAPIReturn>;
+    updateSession: (options: _$_aura_stack_auth_types0.UpdateSessionAPIOptions<FromShapeToObject<Identity>>) => Promise<_$_aura_stack_auth_types0.UpdateSessionAPIReturn<FromShapeToObject<Identity>>>;
+    signOut: (options: _$_aura_stack_auth_types0.SignOutAPIOptions) => Promise<_$_aura_stack_auth_types0.SignOutAPIReturn>;
+  };
+  jose: {
+    signJWS: (payload: TypedJWTPayload<Partial<FromShapeToObject<Identity>>>, options?: JWTHeaderParameters) => Promise<string>;
+    verifyJWS: (token: string, options?: JWTVerifyOptions) => Promise<TypedJWTPayload<FromShapeToObject<Identity>>>;
+    encryptJWE: (payload: TypedJWTPayload<Partial<FromShapeToObject<Identity>>>, options?: JWEHeaderParameters) => Promise<string>;
+    decryptJWE: (token: string, options?: JWTDecryptOptions) => Promise<TypedJWTPayload<FromShapeToObject<Identity>>>;
+    encodeJWT: (payload: TypedJWTPayload<Partial<FromShapeToObject<Identity>>>, options?: EncodeJWTOptions) => Promise<string>;
+    decodeJWT: (token: string, options?: DecodeJWTOptions) => Promise<TypedJWTPayload<FromShapeToObject<Identity>>>;
+  };
+  handlers: {
+    GET: (request: Request) => Response | Promise<Response>;
+    POST: (request: Request) => Response | Promise<Response>;
+    PATCH: (request: Request) => Response | Promise<Response>;
+    ALL: (request: Request) => Response | Promise<Response>;
+  };
+};
+//#endregion
+export { type AuthConfig, type AuthInstance, type Session, type User, createAuth };

package/dist/index.js

@@ -0,0 +1 @@
+import{createAuth as e}from"@aura-stack/auth";import{createMiddleware as t}from"hono/factory";const n=async(e,t)=>await e.ALL(t.req.raw),r=({api:e})=>t(async(t,n)=>{try{let r=await e.getSession({headers:t.req.raw.headers});return t.set(`session`,r.session),await n()}catch{return t.set(`session`,null),await n()}}),i=t=>{let i=e(t);return{...i,toHandler:e=>n(i.handlers,e),withAuth:r(i)}};export{i as createAuth};

package/dist/oauth/atlassian.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/atlassian`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/atlassian.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/atlassian";

package/dist/oauth/atlassian.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/atlassian";

package/dist/oauth/bitbucket.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/bitbucket`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/bitbucket.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/bitbucket";

package/dist/oauth/bitbucket.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/bitbucket";

package/dist/oauth/click-up.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/click-up`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/click-up.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/click-up";

package/dist/oauth/click-up.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/click-up";

package/dist/oauth/discord.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/discord`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/discord.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/discord";

package/dist/oauth/discord.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/discord";

package/dist/oauth/dribbble.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/dribbble`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/dribbble.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/dribbble";

package/dist/oauth/dribbble.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/dribbble";

package/dist/oauth/dropbox.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/dropbox`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/dropbox.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/dropbox";

package/dist/oauth/dropbox.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/dropbox";

package/dist/oauth/figma.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/figma`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/figma.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/figma";

package/dist/oauth/figma.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/figma";

package/dist/oauth/github.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/github`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/github.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/github";

package/dist/oauth/github.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/github";

package/dist/oauth/gitlab.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/gitlab`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/gitlab.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/gitlab";

package/dist/oauth/gitlab.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/gitlab";

package/dist/oauth/index.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/index`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/index.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/index";

package/dist/oauth/index.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/index";

package/dist/oauth/mailchimp.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/mailchimp`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/mailchimp.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/mailchimp";

package/dist/oauth/mailchimp.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/mailchimp";

package/dist/oauth/notion.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/notion`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/notion.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/notion";

package/dist/oauth/notion.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/notion";

package/dist/oauth/pinterest.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/pinterest`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/pinterest.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/pinterest";

package/dist/oauth/pinterest.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/pinterest";

package/dist/oauth/spotify.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/spotify`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/spotify.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/spotify";

package/dist/oauth/spotify.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/spotify";

package/dist/oauth/strava.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/strava`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/strava.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/strava";

package/dist/oauth/strava.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/strava";

package/dist/oauth/twitch.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/twitch`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/twitch.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/twitch";

package/dist/oauth/twitch.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/twitch";

package/dist/oauth/x.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/x`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/x.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/x";

package/dist/oauth/x.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/x";

package/package.json

@@ -0,0 +1,108 @@
+{
+  "name": "@aura-stack/hono",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Authentication integration for Hono applications. Provides middleware, route handlers and session verification powered by Aura Auth.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aura-stack-ts/auth"
+  },
+  "sideEffects": false,
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./oauth": {
+      "types": "./dist/oauth/index.d.ts",
+      "import": "./dist/oauth/index.js",
+      "require": "./dist/oauth/index.cjs"
+    },
+    "./oauth/*": {
+      "types": "./dist/oauth/*.d.ts",
+      "import": "./dist/oauth/*.js",
+      "require": "./dist/oauth/*.cjs"
+    },
+    "./identity": {
+      "types": "./dist/_core/identity.d.ts",
+      "import": "./dist/_core/identity.js",
+      "require": "./dist/_core/identity.cjs"
+    },
+    "./crypto": {
+      "types": "./dist/_core/crypto.d.ts",
+      "import": "./dist/_core/crypto.js",
+      "require": "./dist/_core/crypto.cjs"
+    },
+    "./shared": {
+      "types": "./dist/_core/shared.d.ts",
+      "import": "./dist/_core/shared.js",
+      "require": "./dist/_core/shared.cjs"
+    },
+    "./cookies": {
+      "types": "./dist/_core/cookies.d.ts",
+      "import": "./dist/_core/cookies.js",
+      "require": "./dist/_core/cookies.cjs"
+    }
+  },
+  "keywords": [
+    "auth",
+    "oauth",
+    "oauth2",
+    "security",
+    "session",
+    "authentication",
+    "authorization",
+    "hono",
+    "honojs",
+    "bun",
+    "edge-runtime",
+    "cloudflare-workers",
+    "middleware",
+    "typescript",
+    "javascript",
+    "web-api",
+    "aura-stack",
+    "aura-stack-ts",
+    "aura auth",
+    "aura-auth"
+  ],
+  "author": "Aura Stack <aurastackjs@gmail.com> | Hernan Alvarado <halvaradop.dev@gmail.com>",
+  "homepage": "https://aura-stack-auth.vercel.app",
+  "bugs": {
+    "url": "https://github.com/aura-stack-ts/auth/issues"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@aura-stack/auth": "0.7.1"
+  },
+  "devDependencies": {
+    "hono": "^4.12.8",
+    "@types/bun": "^1.3.9",
+    "vitest": "4.1.4",
+    "@aura-stack/tsconfig": "0.0.0",
+    "@aura-stack/tsdown-config": "0.0.0"
+  },
+  "peerDependencies": {
+    "hono": ">=4.0.0"
+  },
+  "scripts": {
+    "dev": "tsdown --watch",
+    "build": "pnpm sync:modules && tsdown",
+    "lint": "oxlint",
+    "lint:fix": "oxlint --fix",
+    "test": "vitest --run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest --run --coverage",
+    "format": "oxfmt",
+    "format:check": "oxfmt --check",
+    "type-check": "tsc --noEmit",
+    "clean": "rm -rf dist src/_core src/oauth",
+    "clean:cts": "[ -d dist ] && find dist -type f -name \"*.cts\" -delete || true",
+    "sync:modules": "node ../shared/scripts/modules.js"
+  }
+}