@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/plugins/sentinel/client.d.mts

@@ -0,0 +1,30 @@
+import "../../helper-BgOIGHsu.mjs";
+import "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
+import "../../index-CxlWnL9c.mjs";
+import "../../index-EABwA_BH.mjs";
+import "../../index-zBdYQGaS.mjs";
+import "../../index-DRM35ir1.mjs";
+import "../../index-DS-R7st3.mjs";
+import "../../index-CgeC2eGC.mjs";
+import "../../index-DG-X1PK5.mjs";
+import "../../index-BAVzFqII.mjs";
+import "../../index-CUknVRZp.mjs";
+import "../../index-CP3FNbOZ.mjs";
+import "../../index-Df4SvZaE.mjs";
+import "../../index-COGe8UJx.mjs";
+import "../../index-Blmhq6eA.mjs";
+import "../../index-Db8jqUq2.mjs";
+import "../../index-DyH_CgmX.mjs";
+import "../../index-BNDRYfTF.mjs";
+import "../../index-DXVU0HGr.mjs";
+import "../../index-QmocqGM-.mjs";
+import "../../index-CKnPAS5n.mjs";
+import "../../index-CaqpCfE5.mjs";
+import "../../index-xoYsoOiR.mjs";
+import "../../index-mxEUX2Gs.mjs";
+import "../../index-Cv9iMevV.mjs";
+import { t as sentinelClient } from "../../client-DZHNfxuR.mjs";
+export { sentinelClient };

package/dist/plugins/sentinel/client.mjs

@@ -0,0 +1,5 @@
+import "../../random-32E3cU5o.mjs";
+import "../../pow-OK01yPG3.mjs";
+import { t as sentinelClient } from "../../client-4QEb0rUr.mjs";
+
+export { sentinelClient };

package/dist/plugins/sentinel/index.d.mts

@@ -0,0 +1,29 @@
+import "../../helper-BgOIGHsu.mjs";
+import "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
+import "../../index-CxlWnL9c.mjs";
+import "../../index-EABwA_BH.mjs";
+import "../../index-zBdYQGaS.mjs";
+import { S as SentinelOptions, _ as haversineDistanceKm, b as GeoLocation, c as sentinel, d as POW_SOLUTION_HEADER, f as createNonce, g as verifySolution, h as solveChallenge, l as POW_CHALLENGE_HEADER, m as parsePowHeader, p as hasLeadingZeroBits, u as POW_REASON_HEADER, v as normalizeEmail, x as SecurityAction, y as SENTINEL_ERROR_CODES } from "../../index-DRM35ir1.mjs";
+import "../../index-DS-R7st3.mjs";
+import "../../index-CgeC2eGC.mjs";
+import "../../index-DG-X1PK5.mjs";
+import "../../index-BAVzFqII.mjs";
+import "../../index-CUknVRZp.mjs";
+import "../../index-CP3FNbOZ.mjs";
+import "../../index-Df4SvZaE.mjs";
+import "../../index-COGe8UJx.mjs";
+import "../../index-Blmhq6eA.mjs";
+import "../../index-Db8jqUq2.mjs";
+import "../../index-DyH_CgmX.mjs";
+import "../../index-BNDRYfTF.mjs";
+import "../../index-DXVU0HGr.mjs";
+import "../../index-QmocqGM-.mjs";
+import "../../index-CKnPAS5n.mjs";
+import "../../index-CaqpCfE5.mjs";
+import "../../index-xoYsoOiR.mjs";
+import "../../index-mxEUX2Gs.mjs";
+import "../../index-Cv9iMevV.mjs";
+export { GeoLocation, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SENTINEL_ERROR_CODES, SecurityAction, SentinelOptions, createNonce, hasLeadingZeroBits, haversineDistanceKm, normalizeEmail, parsePowHeader, sentinel, solveChallenge, verifySolution };

package/dist/plugins/sentinel/index.mjs

@@ -0,0 +1,22 @@
+import "../../utils-B03WRaGi.mjs";
+import "../../url-VB2gAbTI.mjs";
+import "../../api-Dk8Yj_J5.mjs";
+import "../../get-request-ip-DSjrEpGo.mjs";
+import "../../json-D0TBLy4q.mjs";
+import "../../crypto-CCyta8xj.mjs";
+import "../../jwt-CmxZAGe2.mjs";
+import "../../random-32E3cU5o.mjs";
+import "../../cookies-BuvlgcA-.mjs";
+import "../../date-CMr04reD.mjs";
+import "../../db-7vHnL1XA.mjs";
+import "../../dialect-HsWUfpYY.mjs";
+import "../../get-tables-CKvSyDST.mjs";
+import "../../types-DCPpFKUB.mjs";
+import "../../misc-fKH4d5XQ.mjs";
+import "../../session-BB3oqApE.mjs";
+import "../../registry-CqG_3Qnx.mjs";
+import "../../haveibeenpwned-CzNda7Tn.mjs";
+import { a as hasLeadingZeroBits, c as verifySolution, i as createNonce, n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "../../pow-OK01yPG3.mjs";
+import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../../sentinel-C-D1IHJo.mjs";
+
+export { POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SENTINEL_ERROR_CODES, createNonce, hasLeadingZeroBits, haversineDistanceKm, normalizeEmail, parsePowHeader, sentinel, solveChallenge, verifySolution };

package/dist/plugins/two-factor/index.d.mts

@@ -1,7 +1,7 @@
-import "../../helper-tmxW3BHj.mjs";
-import "../../index-Cxi7TbLE.mjs";
-import "../../types-B1OL7hyf.mjs";
-import "../../index-65G5U5DB-DSdjzreF.mjs";
-import "../../plugins-hFZT3hmK.mjs";
-import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactor, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactorClient } from "../../client-BOX93C3d.mjs";
+import "../../helper-BgOIGHsu.mjs";
+import "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
+import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../../index-xoYsoOiR.mjs";
 export { TWO_FACTOR_ERROR_CODES, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, UserWithTwoFactor, twoFactor, twoFactorClient };

package/dist/plugins/two-factor/index.mjs

@@ -1,20 +1,21 @@
-import "../../utils-SOMB4Px5.mjs";
+import "../../utils-B03WRaGi.mjs";
 import "../../url-VB2gAbTI.mjs";
-import "../../api-0pR_I-Nx.mjs";
+import "../../api-Dk8Yj_J5.mjs";
 import "../../get-request-ip-DSjrEpGo.mjs";
 import "../../json-D0TBLy4q.mjs";
-import "../../crypto-Bb42eMrH.mjs";
+import "../../crypto-CCyta8xj.mjs";
 import "../../jwt-CmxZAGe2.mjs";
-import "../../cookies-cJObLwn1.mjs";
-import "../../date-Cx2yCiC4.mjs";
-import "../../db-BrstmDhc.mjs";
-import "../../dialect-CeddeGHf.mjs";
-import "../../get-tables-BQP7YW9c.mjs";
-import "../../types-Bjn15Uy6.mjs";
-import "../../misc-beA1w3XV.mjs";
-import "../../session-Dgp133Yt.mjs";
-import "../../password-sVC4nePO.mjs";
-import { n as TWO_FACTOR_ERROR_CODES, t as twoFactor } from "../../two-factor-ClUXxom2.mjs";
-import { t as twoFactorClient } from "../../client-CygJhqeB.mjs";
+import "../../random-32E3cU5o.mjs";
+import "../../cookies-BuvlgcA-.mjs";
+import "../../date-CMr04reD.mjs";
+import "../../db-7vHnL1XA.mjs";
+import "../../dialect-HsWUfpYY.mjs";
+import "../../get-tables-CKvSyDST.mjs";
+import "../../types-DCPpFKUB.mjs";
+import "../../misc-fKH4d5XQ.mjs";
+import "../../session-BB3oqApE.mjs";
+import "../../password-5CdcAVaH.mjs";
+import { n as TWO_FACTOR_ERROR_CODES, t as twoFactor } from "../../two-factor-CDVjxx4f.mjs";
+import { t as twoFactorClient } from "../../client-BuveH3MN.mjs";
 
 export { TWO_FACTOR_ERROR_CODES, twoFactor, twoFactorClient };

package/dist/plugins/username/index.d.mts

@@ -1,4 +1,4 @@
-import "../../helper-tmxW3BHj.mjs";
-import "../../plugins-hFZT3hmK.mjs";
-import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../../index-CuFzhoS6.mjs";
+import "../../helper-BgOIGHsu.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
+import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../../index-Cv9iMevV.mjs";
 export { USERNAME_ERROR_CODES, UsernameOptions, username };

package/dist/plugins/username/index.mjs

@@ -1,18 +1,19 @@
-import "../../utils-SOMB4Px5.mjs";
+import "../../utils-B03WRaGi.mjs";
 import "../../url-VB2gAbTI.mjs";
-import "../../api-0pR_I-Nx.mjs";
+import "../../api-Dk8Yj_J5.mjs";
 import "../../get-request-ip-DSjrEpGo.mjs";
 import "../../json-D0TBLy4q.mjs";
-import "../../crypto-Bb42eMrH.mjs";
+import "../../crypto-CCyta8xj.mjs";
 import "../../jwt-CmxZAGe2.mjs";
-import "../../cookies-cJObLwn1.mjs";
-import "../../date-Cx2yCiC4.mjs";
-import "../../db-BrstmDhc.mjs";
-import "../../dialect-CeddeGHf.mjs";
-import "../../get-tables-BQP7YW9c.mjs";
-import "../../types-Bjn15Uy6.mjs";
-import "../../misc-beA1w3XV.mjs";
-import "../../session-Dgp133Yt.mjs";
-import { n as USERNAME_ERROR_CODES, t as username } from "../../username-DiGklOGl.mjs";
+import "../../random-32E3cU5o.mjs";
+import "../../cookies-BuvlgcA-.mjs";
+import "../../date-CMr04reD.mjs";
+import "../../db-7vHnL1XA.mjs";
+import "../../dialect-HsWUfpYY.mjs";
+import "../../get-tables-CKvSyDST.mjs";
+import "../../types-DCPpFKUB.mjs";
+import "../../misc-fKH4d5XQ.mjs";
+import "../../session-BB3oqApE.mjs";
+import { n as USERNAME_ERROR_CODES, t as username } from "../../username-BHNvcvsY.mjs";
 
 export { USERNAME_ERROR_CODES, username };

package/dist/{plugins-hFZT3hmK.d.mts → plugins-Dy_FrD4Y.d.mts}

@@ -1,4 +1,4 @@
-import { h as UnionToIntersection } from "./helper-tmxW3BHj.mjs";
+import { h as UnionToIntersection } from "./helper-BgOIGHsu.mjs";
 import { PayvoAuthOptions, PayvoAuthPlugin } from "@gatwech/core";
 import { PayvoAuthPluginDBSchema } from "@gatwech/core/db";
 

package/dist/{plugins-3jfNste3.mjs → plugins-yF8CFUDR.mjs}

@@ -1,11 +1,11 @@
-import { t as APIError } from "./api-0pR_I-Nx.mjs";
+import { t as APIError } from "./api-Dk8Yj_J5.mjs";
 import { t as getIp } from "./get-request-ip-DSjrEpGo.mjs";
 import { t as safeJSONParse } from "./json-D0TBLy4q.mjs";
-import { r as generateRandomString } from "./crypto-Bb42eMrH.mjs";
-import { n as mergeSchema, t as getDate } from "./date-Cx2yCiC4.mjs";
-import { r as getSessionFromCtx, u as sessionMiddleware } from "./session-Dgp133Yt.mjs";
-import { n as parser_default } from "./parser-DcrIEuXE.mjs";
-import { n as role } from "./access-BO2g7QVe.mjs";
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { n as mergeSchema, t as getDate } from "./date-CMr04reD.mjs";
+import { r as getSessionFromCtx, u as sessionMiddleware } from "./session-BB3oqApE.mjs";
+import { n as parser_default } from "./parser-D7EkhAjZ.mjs";
+import { n as role } from "./access-BM6jSA5j.mjs";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { createAuthEndpoint, createAuthEndpoint as createAuthEndpoint$1, createAuthMiddleware, createAuthMiddleware as createAuthMiddleware$1, optionsMiddleware } from "@gatwech/core/api";
 import * as z$1 from "zod";
@@ -1424,12 +1424,15 @@ const apiKey = (options) => {
 const lastLoginMethod = (userConfig) => {
 	const paths = [
 		"/callback/:id",
-		"/oauth2/callback/:id",
+		"/oauth2/callback/:providerId",
 		"/sign-in/email",
 		"/sign-up/email"
 	];
 	const defaultResolveMethod = (ctx) => {
-		if (paths.includes(ctx.path)) return ctx.params?.id ? ctx.params.id : ctx.path.split("/").pop();
+		if (paths.includes(ctx.path)) {
+			const providerId = ctx.params?.id ?? ctx.params?.providerId;
+			return providerId ? providerId : ctx.path.split("/").pop();
+		}
 		return null;
 	};
 	const config = {

package/dist/pow-OK01yPG3.mjs

@@ -0,0 +1,61 @@
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { utf8ToBytes } from "@noble/hashes/utils.js";
+
+//#region src/plugins/sentinel/pow.ts
+const POW_CHALLENGE_HEADER = "x-pow-challenge";
+const POW_REASON_HEADER = "x-pow-reason";
+const POW_SOLUTION_HEADER = "x-pow-solution";
+function createNonce() {
+	return generateRandomString(32, "a-z", "0-9");
+}
+/** Attempts between yielding to the event loop while solving */
+const SOLVE_BATCH_SIZE = 5e3;
+function digest(nonce, solution) {
+	return sha256(utf8ToBytes(`${nonce}:${solution}`));
+}
+/** Whether a hash starts with at least `difficulty` zero bits */
+function hasLeadingZeroBits(hash, difficulty) {
+	let remaining = difficulty;
+	for (const byte of hash) {
+		if (remaining <= 0) return true;
+		if (remaining >= 8) {
+			if (byte !== 0) return false;
+			remaining -= 8;
+			continue;
+		}
+		return byte >> 8 - remaining === 0;
+	}
+	return remaining <= 0;
+}
+/**
+* Whether `sha256("<nonce>:<solution>")` has at least `difficulty` leading
+* zero bits
+*/
+async function verifySolution(nonce, solution, difficulty) {
+	return hasLeadingZeroBits(digest(nonce, solution), difficulty);
+}
+/**
+* Find a solution for a challenge by trying incrementing counters. Yields to
+* the event loop between batches, so solving doesn't block the page.
+*/
+async function solveChallenge(nonce, difficulty) {
+	for (let counter = 0;; counter++) {
+		const solution = counter.toString(36);
+		if (hasLeadingZeroBits(digest(nonce, solution), difficulty)) return solution;
+		if (counter % SOLVE_BATCH_SIZE === SOLVE_BATCH_SIZE - 1) await new Promise((resolve) => setTimeout(resolve, 0));
+	}
+}
+/** Parses `<nonce>:<value>` header values */
+function parsePowHeader(value) {
+	if (!value) return null;
+	const separator = value.indexOf(":");
+	if (separator < 1 || separator === value.length - 1) return null;
+	return {
+		nonce: value.slice(0, separator),
+		value: value.slice(separator + 1)
+	};
+}
+
+//#endregion
+export { hasLeadingZeroBits as a, verifySolution as c, createNonce as i, POW_REASON_HEADER as n, parsePowHeader as o, POW_SOLUTION_HEADER as r, solveChallenge as s, POW_CHALLENGE_HEADER as t };

package/dist/{proxy-CL9PZXJA.mjs → proxy-C_KXfOhk.mjs}

@@ -1,5 +1,5 @@
 import { t as getBaseURL } from "./url-VB2gAbTI.mjs";
-import { t as parseJSON } from "./parser-DcrIEuXE.mjs";
+import { t as parseJSON } from "./parser-D7EkhAjZ.mjs";
 import { BetterFetchError, createFetch } from "@better-fetch/fetch";
 import { atom, onMount } from "nanostores";
 

package/dist/random-32E3cU5o.mjs

@@ -0,0 +1,7 @@
+import { createRandomStringGenerator } from "@gatwech/utils/random";
+
+//#region src/crypto/random.ts
+const generateRandomString = createRandomStringGenerator("a-z", "0-9", "A-Z", "-_");
+
+//#endregion
+export { generateRandomString as t };

package/dist/registry-CqG_3Qnx.mjs

@@ -0,0 +1,194 @@
+//#region src/plugins/audit-log/events.ts
+/**
+* Audit event types recorded by the audit log plugin
+*/
+const AUDIT_EVENT_TYPES = {
+	USER_SIGNED_UP: "user_signed_up",
+	USER_PROFILE_UPDATED: "user_profile_updated",
+	USER_PROFILE_IMAGE_UPDATED: "user_profile_image_updated",
+	USER_EMAIL_VERIFIED: "user_email_verified",
+	USER_BANNED: "user_banned",
+	USER_UNBANNED: "user_unbanned",
+	USER_DELETED: "user_deleted",
+	USER_ROLE_UPDATED: "user_role_updated",
+	USER_EMAIL_CHANGED: "user_email_changed",
+	USER_PHONE_NUMBER_CHANGED: "user_phone_number_changed",
+	USER_SIGNED_IN: "user_signed_in",
+	USER_SIGNED_OUT: "user_signed_out",
+	SESSION_CREATED: "session_created",
+	SESSION_REVOKED: "session_revoked",
+	SESSIONS_REVOKED_ALL: "sessions_revoked_all",
+	USER_IMPERSONATED: "user_impersonated",
+	USER_IMPERSONATION_STOPPED: "user_impersonation_stopped",
+	DEVICE_AUTHORIZATION_APPROVED: "device_authorization_approved",
+	DEVICE_AUTHORIZATION_DENIED: "device_authorization_denied",
+	ACCOUNT_LINKED: "account_linked",
+	ACCOUNT_UNLINKED: "account_unlinked",
+	PASSWORD_CHANGED: "password_changed",
+	TWO_FACTOR_ENABLED: "two_factor_enabled",
+	TWO_FACTOR_DISABLED: "two_factor_disabled",
+	BACKUP_CODES_GENERATED: "two_factor_backup_codes_generated",
+	PASSKEY_ADDED: "passkey_added",
+	PASSKEY_REMOVED: "passkey_removed",
+	API_KEY_CREATED: "api_key_created",
+	API_KEY_UPDATED: "api_key_updated",
+	API_KEY_DELETED: "api_key_deleted",
+	PASSWORD_RESET_REQUESTED: "password_reset_requested",
+	PASSWORD_RESET_COMPLETED: "password_reset_completed",
+	EMAIL_VERIFICATION_SENT: "email_verification_sent",
+	ORGANIZATION_CREATED: "organization_created",
+	ORGANIZATION_UPDATED: "organization_updated",
+	ORGANIZATION_DELETED: "organization_deleted",
+	ORGANIZATION_ROLE_CREATED: "organization_role_created",
+	ORGANIZATION_ROLE_UPDATED: "organization_role_updated",
+	ORGANIZATION_ROLE_DELETED: "organization_role_deleted",
+	MEMBER_ADDED: "member_added",
+	MEMBER_REMOVED: "member_removed",
+	MEMBER_ROLE_UPDATED: "member_role_updated",
+	MEMBER_INVITED: "member_invited",
+	INVITE_ACCEPTED: "invite_accepted",
+	INVITE_REJECTED: "invite_rejected",
+	INVITE_CANCELLED: "invite_cancelled",
+	TEAM_CREATED: "team_created",
+	TEAM_UPDATED: "team_updated",
+	TEAM_DELETED: "team_deleted",
+	TEAM_MEMBER_ADDED: "team_member_added",
+	TEAM_MEMBER_REMOVED: "team_member_removed",
+	USER_SIGN_IN_FAILED: "user_sign_in_failed",
+	VERIFICATION_FAILED: "verification_failed"
+};
+/**
+* Security event types recorded by the sentinel plugin
+*
+* Declared here so both plugins share the same event types
+*/
+const SECURITY_EVENT_TYPES = {
+	BLOCKED: "security_blocked",
+	ALLOWED_AFTER_CHALLENGE: "security_allowed",
+	CREDENTIAL_STUFFING: "security_credential_stuffing",
+	IMPOSSIBLE_TRAVEL: "security_impossible_travel",
+	GEO_BLOCKED: "security_geo_blocked",
+	BOT_BLOCKED: "security_bot_blocked",
+	SUSPICIOUS_IP: "security_suspicious_ip",
+	VELOCITY_EXCEEDED: "security_velocity_exceeded",
+	FREE_TRIAL_ABUSE: "security_free_trial_abuse",
+	COMPROMISED_PASSWORD: "security_compromised_password",
+	STALE_ACCOUNT: "security_stale_account",
+	INVALID_EMAIL: "security_invalid_email"
+};
+const ALL_EVENT_TYPES = [...Object.values(AUDIT_EVENT_TYPES), ...Object.values(SECURITY_EVENT_TYPES)];
+/** Endpoints that complete a sign-in by creating a session */
+const SIGN_IN_PATHS = [
+	"/sign-in/email",
+	"/sign-in/email-otp",
+	"/sign-in/phone-number",
+	"/sign-in/username",
+	"/magic-link/verify",
+	"/sign-in/anonymous",
+	"/sign-in/social",
+	"/sign-in/oauth2",
+	"/callback/:id",
+	"/oauth2/callback/:providerId",
+	"/one-tap/callback",
+	"/passkey/verify-authentication",
+	"/two-factor/verify-totp",
+	"/two-factor/verify-otp",
+	"/two-factor/verify-backup-code",
+	"/one-time-token/verify",
+	"/device/token",
+	"/verify-email",
+	"/email-otp/verify-email",
+	"/phone-number/verify"
+];
+/** Sign-in endpoints that check credentials, so a failure is a failed attempt */
+const CREDENTIAL_SIGN_IN_PATHS = [
+	"/sign-in/email",
+	"/sign-in/email-otp",
+	"/sign-in/phone-number",
+	"/sign-in/username",
+	"/passkey/verify-authentication",
+	"/two-factor/verify-totp",
+	"/two-factor/verify-otp",
+	"/two-factor/verify-backup-code"
+];
+/**
+* Endpoints that check a one-time code or token outside a sign-in, so a
+* failure is a failed attempt
+*/
+const VERIFICATION_PATHS = [
+	"/email-otp/check-verification-otp",
+	"/email-otp/verify-email",
+	"/email-otp/reset-password",
+	"/phone-number/verify",
+	"/phone-number/reset-password",
+	"/reset-password",
+	"/one-time-token/verify"
+];
+/** Endpoints whose successful response maps to a single event */
+const PATH_EVENTS = {
+	"/revoke-session": AUDIT_EVENT_TYPES.SESSION_REVOKED,
+	"/revoke-sessions": AUDIT_EVENT_TYPES.SESSIONS_REVOKED_ALL,
+	"/revoke-other-sessions": AUDIT_EVENT_TYPES.SESSIONS_REVOKED_ALL,
+	"/multi-session/revoke": AUDIT_EVENT_TYPES.SESSION_REVOKED,
+	"/admin/revoke-user-session": AUDIT_EVENT_TYPES.SESSION_REVOKED,
+	"/admin/revoke-user-sessions": AUDIT_EVENT_TYPES.SESSIONS_REVOKED_ALL,
+	"/change-password": AUDIT_EVENT_TYPES.PASSWORD_CHANGED,
+	"/set-password": AUDIT_EVENT_TYPES.PASSWORD_CHANGED,
+	"/admin/set-user-password": AUDIT_EVENT_TYPES.PASSWORD_CHANGED,
+	"/request-password-reset": AUDIT_EVENT_TYPES.PASSWORD_RESET_REQUESTED,
+	"/forget-password/email-otp": AUDIT_EVENT_TYPES.PASSWORD_RESET_REQUESTED,
+	"/phone-number/request-password-reset": AUDIT_EVENT_TYPES.PASSWORD_RESET_REQUESTED,
+	"/reset-password": AUDIT_EVENT_TYPES.PASSWORD_RESET_COMPLETED,
+	"/email-otp/reset-password": AUDIT_EVENT_TYPES.PASSWORD_RESET_COMPLETED,
+	"/phone-number/reset-password": AUDIT_EVENT_TYPES.PASSWORD_RESET_COMPLETED,
+	"/send-verification-email": AUDIT_EVENT_TYPES.EMAIL_VERIFICATION_SENT,
+	"/email-otp/send-verification-otp": AUDIT_EVENT_TYPES.EMAIL_VERIFICATION_SENT,
+	"/unlink-account": AUDIT_EVENT_TYPES.ACCOUNT_UNLINKED,
+	"/two-factor/generate-backup-codes": AUDIT_EVENT_TYPES.BACKUP_CODES_GENERATED,
+	"/passkey/verify-registration": AUDIT_EVENT_TYPES.PASSKEY_ADDED,
+	"/passkey/delete-passkey": AUDIT_EVENT_TYPES.PASSKEY_REMOVED,
+	"/api-key/create": AUDIT_EVENT_TYPES.API_KEY_CREATED,
+	"/api-key/update": AUDIT_EVENT_TYPES.API_KEY_UPDATED,
+	"/api-key/delete": AUDIT_EVENT_TYPES.API_KEY_DELETED,
+	"/admin/stop-impersonating": AUDIT_EVENT_TYPES.USER_IMPERSONATION_STOPPED,
+	"/device/approve": AUDIT_EVENT_TYPES.DEVICE_AUTHORIZATION_APPROVED,
+	"/device/deny": AUDIT_EVENT_TYPES.DEVICE_AUTHORIZATION_DENIED,
+	"/organization/create": AUDIT_EVENT_TYPES.ORGANIZATION_CREATED,
+	"/organization/update": AUDIT_EVENT_TYPES.ORGANIZATION_UPDATED,
+	"/organization/delete": AUDIT_EVENT_TYPES.ORGANIZATION_DELETED,
+	"/organization/create-role": AUDIT_EVENT_TYPES.ORGANIZATION_ROLE_CREATED,
+	"/organization/update-role": AUDIT_EVENT_TYPES.ORGANIZATION_ROLE_UPDATED,
+	"/organization/delete-role": AUDIT_EVENT_TYPES.ORGANIZATION_ROLE_DELETED,
+	"/organization/add-member": AUDIT_EVENT_TYPES.MEMBER_ADDED,
+	"/organization/remove-member": AUDIT_EVENT_TYPES.MEMBER_REMOVED,
+	"/organization/leave": AUDIT_EVENT_TYPES.MEMBER_REMOVED,
+	"/organization/update-member-role": AUDIT_EVENT_TYPES.MEMBER_ROLE_UPDATED,
+	"/organization/invite-member": AUDIT_EVENT_TYPES.MEMBER_INVITED,
+	"/organization/accept-invitation": AUDIT_EVENT_TYPES.INVITE_ACCEPTED,
+	"/organization/reject-invitation": AUDIT_EVENT_TYPES.INVITE_REJECTED,
+	"/organization/cancel-invitation": AUDIT_EVENT_TYPES.INVITE_CANCELLED,
+	"/organization/create-team": AUDIT_EVENT_TYPES.TEAM_CREATED,
+	"/organization/update-team": AUDIT_EVENT_TYPES.TEAM_UPDATED,
+	"/organization/remove-team": AUDIT_EVENT_TYPES.TEAM_DELETED,
+	"/organization/add-team-member": AUDIT_EVENT_TYPES.TEAM_MEMBER_ADDED,
+	"/organization/remove-team-member": AUDIT_EVENT_TYPES.TEAM_MEMBER_REMOVED
+};
+
+//#endregion
+//#region src/plugins/audit-log/registry.ts
+/**
+* Recorders registered by `auditLog()`, keyed by the database adapter of the
+* auth instance they belong to (it's the same object for the whole lifetime
+* of the instance, unlike the options), so other plugins record through the
+* same sinks
+*/
+const recorders = /* @__PURE__ */ new WeakMap();
+function registerAuditRecorder(context, record) {
+	recorders.set(context.adapter, record);
+}
+function getAuditRecorder(context) {
+	return recorders.get(context.adapter);
+}
+
+//#endregion
+export { CREDENTIAL_SIGN_IN_PATHS as a, SIGN_IN_PATHS as c, AUDIT_EVENT_TYPES as i, VERIFICATION_PATHS as l, registerAuditRecorder as n, PATH_EVENTS as o, ALL_EVENT_TYPES as r, SECURITY_EVENT_TYPES as s, getAuditRecorder as t };