@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/{auth-CBUoBX6o.mjs → auth-vfCyIIeV.mjs}

@@ -1,12 +1,12 @@
-import { t as generateId } from "./utils-SOMB4Px5.mjs";
+import { t as generateId } from "./utils-B03WRaGi.mjs";
 import { r as getOrigin, t as getBaseURL } from "./url-VB2gAbTI.mjs";
-import { a as getEndpoints, n as checkEndpointConflicts, s as router } from "./api-0pR_I-Nx.mjs";
-import { a as verifyPassword, i as hashPassword } from "./crypto-Bb42eMrH.mjs";
-import { i as getCookies, t as createCookieGetter } from "./cookies-cJObLwn1.mjs";
-import { a as createInternalAdapter, r as getAdapter, s as getMigrations } from "./db-BrstmDhc.mjs";
-import { n as getKyselyDatabaseType } from "./dialect-CeddeGHf.mjs";
-import { t as getAuthTables } from "./get-tables-BQP7YW9c.mjs";
-import { t as checkPassword } from "./password-sVC4nePO.mjs";
+import { a as getEndpoints, n as checkEndpointConflicts, s as router } from "./api-Dk8Yj_J5.mjs";
+import { i as verifyPassword, r as hashPassword } from "./crypto-CCyta8xj.mjs";
+import { i as getCookies, t as createCookieGetter } from "./cookies-BuvlgcA-.mjs";
+import { a as createInternalAdapter, r as getAdapter, s as getMigrations } from "./db-7vHnL1XA.mjs";
+import { n as getKyselyDatabaseType } from "./dialect-HsWUfpYY.mjs";
+import { t as getAuthTables } from "./get-tables-CKvSyDST.mjs";
+import { t as checkPassword } from "./password-5CdcAVaH.mjs";
 import { runWithAdapter } from "@gatwech/core/context";
 import { createLogger, env, isProduction, isTest } from "@gatwech/core/env";
 import { BASE_ERROR_CODES, PayvoAuthError } from "@gatwech/core/error";

package/dist/{bearer-Djf_awfo.mjs → bearer-DvQLM00l.mjs}

@@ -1,4 +1,4 @@
-import { l as parseSetCookieHeader } from "./cookies-cJObLwn1.mjs";
+import { l as parseSetCookieHeader } from "./cookies-BuvlgcA-.mjs";
 import { serializeSignedCookie } from "better-call";
 import { createAuthMiddleware } from "@gatwech/core/api";
 import { createHMAC } from "@gatwech/utils/hmac";
@@ -26,7 +26,7 @@ const bearer = (options) => {
 					}
 					try {
 						const decodedToken = decodeURIComponent(signedToken);
-						if (!await createHMAC("SHA-256", "base64urlnopad").verify(c.context.secret, decodedToken.split(".")[0], decodedToken.split(".")[1])) return;
+						if (!await createHMAC("SHA-256", "base64").verify(c.context.secret, decodedToken.split(".")[0], decodedToken.split(".")[1])) return;
 					} catch (e) {
 						return;
 					}

package/dist/client/index.d.mts

@@ -1,13 +1,13 @@
-import { d as PrettifyDeep, h as UnionToIntersection } from "../helper-tmxW3BHj.mjs";
-import { B as InferPluginsFromClient, F as ClientStore, G as PayvoAuthClientPlugin, H as InferUserFromClient, I as InferActions, K as SessionQueryParams, L as InferAdditionalFromClient, M as AtomListener, N as ClientAtomListener, P as ClientOptions, R as InferClientAPI, U as IsSignal, V as InferSessionFromClient, W as PayvoAuthClientOptions, q as Store, z as InferErrorCodes } from "../index-Cxi7TbLE.mjs";
-import "../types-B1OL7hyf.mjs";
-import "../index-65G5U5DB-DSdjzreF.mjs";
-import "../plugins-hFZT3hmK.mjs";
+import { d as PrettifyDeep, h as UnionToIntersection } from "../helper-BgOIGHsu.mjs";
+import { B as InferPluginsFromClient, F as ClientStore, G as PayvoAuthClientPlugin, H as InferUserFromClient, I as InferActions, K as SessionQueryParams, L as InferAdditionalFromClient, M as AtomListener, N as ClientAtomListener, P as ClientOptions, R as InferClientAPI, U as IsSignal, V as InferSessionFromClient, W as PayvoAuthClientOptions, q as Store, z as InferErrorCodes } from "../index-BNhJglHC.mjs";
+import "../types-DNQ9XQrB.mjs";
+import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../plugins-Dy_FrD4Y.mjs";
 import { PayvoAuthClientOptions as PayvoAuthClientOptions$1, PayvoAuthClientPlugin as PayvoAuthClientPlugin$1, PayvoAuthOptions, PayvoAuthPlugin } from "@gatwech/core";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
-import * as _better_fetch_fetch17 from "@better-fetch/fetch";
+import * as _better_fetch_fetch36 from "@better-fetch/fetch";
 import { BetterFetch, BetterFetchError, BetterFetchOption } from "@better-fetch/fetch";
-import * as nanostores0 from "nanostores";
+import * as nanostores2 from "nanostores";
 import { Atom, PreinitializedWritableAtom, WritableAtom } from "nanostores";
 export * from "@better-fetch/fetch";
 export * from "nanostores";
@@ -79,27 +79,27 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions$1>(optio
     error: BetterFetchError | null;
     isPending: boolean;
   }>;
-  $fetch: _better_fetch_fetch17.BetterFetch<{
-    plugins: (_better_fetch_fetch17.BetterFetchPlugin | {
+  $fetch: _better_fetch_fetch36.BetterFetch<{
+    plugins: (_better_fetch_fetch36.BetterFetchPlugin | {
       id: string;
       name: string;
       hooks: {
-        onSuccess(context: _better_fetch_fetch17.SuccessContext<any>): void;
+        onSuccess(context: _better_fetch_fetch36.SuccessContext<any>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onRequest<T extends Record<string, any>>(context: _better_fetch_fetch17.RequestContext<T>): void;
+        onRequest<T extends Record<string, any>>(context: _better_fetch_fetch36.RequestContext<T>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onSuccess: ((context: _better_fetch_fetch17.SuccessContext<any>) => Promise<void> | void) | undefined;
-        onError: ((context: _better_fetch_fetch17.ErrorContext) => Promise<void> | void) | undefined;
-        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch17.RequestContext<T>) => Promise<_better_fetch_fetch17.RequestContext | void> | _better_fetch_fetch17.RequestContext | void) | undefined;
-        onResponse: ((context: _better_fetch_fetch17.ResponseContext) => Promise<Response | void | _better_fetch_fetch17.ResponseContext> | Response | _better_fetch_fetch17.ResponseContext | void) | undefined;
+        onSuccess: ((context: _better_fetch_fetch36.SuccessContext<any>) => Promise<void> | void) | undefined;
+        onError: ((context: _better_fetch_fetch36.ErrorContext) => Promise<void> | void) | undefined;
+        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch36.RequestContext<T>) => Promise<_better_fetch_fetch36.RequestContext | void> | _better_fetch_fetch36.RequestContext | void) | undefined;
+        onResponse: ((context: _better_fetch_fetch36.ResponseContext) => Promise<Response | void | _better_fetch_fetch36.ResponseContext> | Response | _better_fetch_fetch36.ResponseContext | void) | undefined;
       };
     })[];
     method: string;
@@ -119,12 +119,12 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions$1>(optio
     referrerPolicy?: ReferrerPolicy | undefined;
     signal?: (AbortSignal | null) | undefined;
     window?: null | undefined;
-    onRetry?: ((response: _better_fetch_fetch17.ResponseContext) => Promise<void> | void) | undefined;
+    onRetry?: ((response: _better_fetch_fetch36.ResponseContext) => Promise<void> | void) | undefined;
     hookOptions?: {
       cloneResponse?: boolean;
     } | undefined;
     timeout?: number | undefined;
-    customFetchImpl: _better_fetch_fetch17.FetchEsque;
+    customFetchImpl: _better_fetch_fetch36.FetchEsque;
     baseURL: string;
     throw?: boolean | undefined;
     auth?: ({
@@ -144,16 +144,16 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions$1>(optio
     params?: any;
     duplex?: "full" | "half" | undefined;
     jsonParser: (text: string) => Promise<any> | any;
-    retry?: _better_fetch_fetch17.RetryOptions | undefined;
+    retry?: _better_fetch_fetch36.RetryOptions | undefined;
     retryAttempt?: number | undefined;
-    output?: (_better_fetch_fetch17.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-    errorSchema?: _better_fetch_fetch17.StandardSchemaV1 | undefined;
+    output?: (_better_fetch_fetch36.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+    errorSchema?: _better_fetch_fetch36.StandardSchemaV1 | undefined;
     disableValidation?: boolean | undefined;
   }, unknown, unknown, {}>;
   $store: {
     notify: (signal?: (Omit<string, "$sessionSignal"> | "$sessionSignal") | undefined) => void;
     listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
-    atoms: Record<string, nanostores0.WritableAtom<any>>;
+    atoms: Record<string, nanostores2.WritableAtom<any>>;
   };
   $Infer: {
     Session: NonNullable<InferClientAPI<Option> extends {

package/dist/client/index.mjs

@@ -1,7 +1,7 @@
 import "../url-VB2gAbTI.mjs";
-import "../misc-beA1w3XV.mjs";
-import { a as createBroadcastChannel, i as useAuthQuery, r as createSessionRefreshManager } from "../proxy-CL9PZXJA.mjs";
-import "../parser-DcrIEuXE.mjs";
-import { n as InferPlugin, r as createAuthClient, t as InferAuth } from "../client-aExCkfwm.mjs";
+import "../misc-fKH4d5XQ.mjs";
+import { a as createBroadcastChannel, i as useAuthQuery, r as createSessionRefreshManager } from "../proxy-C_KXfOhk.mjs";
+import "../parser-D7EkhAjZ.mjs";
+import { n as InferPlugin, r as createAuthClient, t as InferAuth } from "../client-xga7yFIX.mjs";
 
 export { InferAuth, InferPlugin, createAuthClient, createBroadcastChannel, createSessionRefreshManager, useAuthQuery };

package/dist/client/plugins/index.d.mts

@@ -1,31 +1,39 @@
-import { a as LiteralNumber, c as OmitId, d as PrettifyDeep, f as Primitive, g as WithoutEmpty, h as UnionToIntersection, i as HasRequiredKeys, l as PreserveJSDoc, m as StripEmptyObjects, n as DeepPartial, o as LiteralString, p as RequiredKeysOf, r as Expand, s as LiteralUnion, t as Awaitable, u as Prettify } from "../../helper-tmxW3BHj.mjs";
-import { K as SessionQueryParams, Y as Auth, g as User$1, h as Session$1, i as PayvoAuthPlugin$1, mn as InferAdditionalFieldsFromPluginOptions, r as PayvoAuthOptions$1 } from "../../index-Cxi7TbLE.mjs";
-import "../../types-B1OL7hyf.mjs";
-import "../../index-65G5U5DB-DSdjzreF.mjs";
-import "../../plugins-hFZT3hmK.mjs";
-import { a as Role, i as AccessControl, o as Statements } from "../../index-C7fQuk-V.mjs";
-import { t as admin } from "../../admin-DtfO1PLg.mjs";
-import { r as anonymous } from "../../index-B3n8e37d.mjs";
-import { r as apiKey } from "../../index-CM-CFWwr.mjs";
-import { t as deviceAuthorizationClient } from "../../client-CNY0tn9g.mjs";
-import { n as emailOTP } from "../../index-D_k662QG.mjs";
-import { n as genericOAuth } from "../../index-Buhn3hkR.mjs";
-import { t as jwt } from "../../index-34ONrP8l.mjs";
-import { t as magicLink } from "../../index-BYMI9r_d.mjs";
-import { t as multiSession } from "../../index-DoXZYQpq.mjs";
-import { t as oneTimeToken } from "../../index-C-u1h_WX.mjs";
-import "../../index-z0KSvE5i.mjs";
-import { F as OrganizationOptions, S as Team, b as OrganizationRole, c as InferMember, f as InferTeam, g as Member, l as InferOrganization, p as Invitation, r as OrganizationPlugin, s as InferInvitation, v as Organization, w as TeamMember } from "../../index-BHoQlf7a.mjs";
-import { r as phoneNumber } from "../../index-DKNNV1kb.mjs";
-import { t as twoFactorClient } from "../../client-BOX93C3d.mjs";
-import { n as Passkey, t as passkey } from "../../index-DlaMq1nb.mjs";
-import { n as username } from "../../index-CuFzhoS6.mjs";
-import * as _gatwech_core33 from "@gatwech/core";
+import { a as LiteralNumber, c as OmitId, d as PrettifyDeep, f as Primitive, g as WithoutEmpty, h as UnionToIntersection, i as HasRequiredKeys, l as PreserveJSDoc, m as StripEmptyObjects, n as DeepPartial, o as LiteralString, p as RequiredKeysOf, r as Expand, s as LiteralUnion, t as Awaitable, u as Prettify } from "../../helper-BgOIGHsu.mjs";
+import { K as SessionQueryParams, Y as Auth, g as User$1, h as Session$1, i as PayvoAuthPlugin$1, mn as InferAdditionalFieldsFromPluginOptions, r as PayvoAuthOptions$1 } from "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
+import { a as Role, i as AccessControl, o as Statements } from "../../index-CxlWnL9c.mjs";
+import { t as admin } from "../../index-EABwA_BH.mjs";
+import { r as anonymous } from "../../index-zBdYQGaS.mjs";
+import { L as apiKey } from "../../index-DRM35ir1.mjs";
+import "../../index-DS-R7st3.mjs";
+import "../../index-CgeC2eGC.mjs";
+import "../../index-DG-X1PK5.mjs";
+import { i as deviceAuthorizationClient } from "../../index-BAVzFqII.mjs";
+import { n as emailOTP } from "../../index-CUknVRZp.mjs";
+import { n as genericOAuth } from "../../index-CP3FNbOZ.mjs";
+import "../../index-Df4SvZaE.mjs";
+import { t as jwt } from "../../index-COGe8UJx.mjs";
+import { t as magicLink } from "../../index-Blmhq6eA.mjs";
+import { t as multiSession } from "../../index-Db8jqUq2.mjs";
+import "../../index-DyH_CgmX.mjs";
+import "../../index-BNDRYfTF.mjs";
+import { t as oneTimeToken } from "../../index-DXVU0HGr.mjs";
+import "../../index-QmocqGM-.mjs";
+import { F as OrganizationOptions, S as Team, b as OrganizationRole, c as InferMember, f as InferTeam, g as Member, l as InferOrganization, p as Invitation, r as OrganizationPlugin, s as InferInvitation, v as Organization, w as TeamMember } from "../../index-CKnPAS5n.mjs";
+import { r as phoneNumber } from "../../index-CaqpCfE5.mjs";
+import { n as twoFactorClient } from "../../index-xoYsoOiR.mjs";
+import { n as Passkey, t as passkey } from "../../index-mxEUX2Gs.mjs";
+import { n as username } from "../../index-Cv9iMevV.mjs";
+import { t as auditLogClient } from "../../client-CSOs1YN7.mjs";
+import { t as sentinelClient } from "../../client-DZHNfxuR.mjs";
+import * as _gatwech_core58 from "@gatwech/core";
 import { ClientStore, PayvoAuthOptions } from "@gatwech/core";
 import { DBFieldAttribute } from "@gatwech/core/db";
-import * as _better_fetch_fetch34 from "@better-fetch/fetch";
+import * as _better_fetch_fetch53 from "@better-fetch/fetch";
 import { BetterFetch, BetterFetchOption } from "@better-fetch/fetch";
-import * as nanostores1 from "nanostores";
+import * as nanostores3 from "nanostores";
 import { atom } from "nanostores";
 
 //#region src/plugins/additional-fields/client.d.ts
@@ -361,10 +369,10 @@ interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId"
 }
 declare const oneTapClient: (options: GoogleOneTapOptions) => {
   id: "one-tap";
-  getActions: ($fetch: _better_fetch_fetch34.BetterFetch, _: _gatwech_core33.ClientStore) => {
+  getActions: ($fetch: _better_fetch_fetch53.BetterFetch, _: _gatwech_core58.ClientStore) => {
     oneTap: (opts?: GoogleOneTapActionOptions | undefined, fetchOptions?: BetterFetchOption | undefined) => Promise<void>;
   };
-  getAtoms($fetch: _better_fetch_fetch34.BetterFetch): {};
+  getAtoms($fetch: _better_fetch_fetch53.BetterFetch): {};
 };
 //#endregion
 //#region src/plugins/one-time-token/client.d.ts
@@ -463,7 +471,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
       } ? true : false;
     };
   }>;
-  getActions: ($fetch: _better_fetch_fetch34.BetterFetch, _$store: _gatwech_core33.ClientStore, co: _gatwech_core33.PayvoAuthClientOptions | undefined) => {
+  getActions: ($fetch: _better_fetch_fetch53.BetterFetch, _$store: _gatwech_core58.ClientStore, co: _gatwech_core58.PayvoAuthClientOptions | undefined) => {
     $Infer: {
       ActiveOrganization: CO["teams"] extends {
         enabled: true;
@@ -547,12 +555,12 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
       }) => boolean;
     };
   };
-  getAtoms: ($fetch: _better_fetch_fetch34.BetterFetch) => {
-    $listOrg: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    $activeOrgSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    $activeMemberSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    $activeMemberRoleSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    activeOrganization: nanostores1.PreinitializedWritableAtom<{
+  getAtoms: ($fetch: _better_fetch_fetch53.BetterFetch) => {
+    $listOrg: nanostores3.PreinitializedWritableAtom<boolean> & object;
+    $activeOrgSignal: nanostores3.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberSignal: nanostores3.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberRoleSignal: nanostores3.PreinitializedWritableAtom<boolean> & object;
+    activeOrganization: nanostores3.PreinitializedWritableAtom<{
       data: Prettify<({
         id: string;
         name: string;
@@ -564,14 +572,14 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
         members: InferMember<CO, false>[];
         invitations: InferInvitation<CO, false>[];
       }> | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch53.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
         query?: SessionQueryParams;
       } | undefined) => void;
     }> & object;
-    listOrganizations: nanostores1.PreinitializedWritableAtom<{
+    listOrganizations: nanostores3.PreinitializedWritableAtom<{
       data: ({
         id: string;
         name: string;
@@ -580,14 +588,14 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
         logo?: string | null | undefined;
         metadata?: any;
       } & InferAdditionalFieldsFromPluginOptions<"organization", CO, false> extends infer T_1 ? { [K in keyof T_1]: T_1[K] } : never)[] | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch53.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
         query?: SessionQueryParams;
       } | undefined) => void;
     }> & object;
-    activeMember: nanostores1.PreinitializedWritableAtom<{
+    activeMember: nanostores3.PreinitializedWritableAtom<{
       data: {
         id: string;
         organizationId: string;
@@ -595,18 +603,18 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
         role: string;
         createdAt: Date;
       } | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch53.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
         query?: SessionQueryParams;
       } | undefined) => void;
     }> & object;
-    activeMemberRole: nanostores1.PreinitializedWritableAtom<{
+    activeMemberRole: nanostores3.PreinitializedWritableAtom<{
       data: {
         role: string;
       } | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch53.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
@@ -904,16 +912,16 @@ declare const passkeyClient: () => {
     };
   };
   getAtoms($fetch: BetterFetch): {
-    listPasskeys: nanostores1.PreinitializedWritableAtom<{
+    listPasskeys: nanostores3.PreinitializedWritableAtom<{
       data: Passkey[] | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch53.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
         query?: SessionQueryParams;
       } | undefined) => void;
     }> & object;
-    $listPasskeys: nanostores1.PreinitializedWritableAtom<any> & object;
+    $listPasskeys: nanostores3.PreinitializedWritableAtom<any> & object;
   };
   pathMethods: {
     "/passkey/register": "POST";
@@ -946,4 +954,4 @@ declare const InferServerPlugin: <AuthOrOption extends PayvoAuthOptions | {
   } ? P : never : never;
 };
 //#endregion
-export { ApiKeyClientPlugin, Awaitable, DeepPartial, Expand, GoogleOneTapActionOptions, GoogleOneTapOptions, HasRequiredKeys, InferServerPlugin, LastLoginMethodClientConfig, LiteralNumber, LiteralString, LiteralUnion, OmitId, PreserveJSDoc, Prettify, PrettifyDeep, Primitive, RequiredKeysOf, StripEmptyObjects, UnionToIntersection, WithoutEmpty, adminClient, anonymousClient, apiKeyClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, twoFactorClient, usernameClient };
+export { ApiKeyClientPlugin, Awaitable, DeepPartial, Expand, GoogleOneTapActionOptions, GoogleOneTapOptions, HasRequiredKeys, InferServerPlugin, LastLoginMethodClientConfig, LiteralNumber, LiteralString, LiteralUnion, OmitId, PreserveJSDoc, Prettify, PrettifyDeep, Primitive, RequiredKeysOf, StripEmptyObjects, UnionToIntersection, WithoutEmpty, adminClient, anonymousClient, apiKeyClient, auditLogClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, sentinelClient, twoFactorClient, usernameClient };

package/dist/client/plugins/index.mjs

@@ -1,15 +1,19 @@
 import "../../url-VB2gAbTI.mjs";
-import "../../misc-beA1w3XV.mjs";
-import { i as useAuthQuery } from "../../proxy-CL9PZXJA.mjs";
-import "../../parser-DcrIEuXE.mjs";
-import "../../client-aExCkfwm.mjs";
-import "../../access-BO2g7QVe.mjs";
-import { a as userAc, t as adminAc$1 } from "../../access-DT1f6l5k.mjs";
-import { t as hasPermission } from "../../has-permission-BpAr7uCn.mjs";
-import { t as deviceAuthorizationClient } from "../../client-WiN43tAS.mjs";
-import { a as memberAc, o as ownerAc, r as defaultRoles, t as adminAc } from "../../access-C6O_osEz.mjs";
-import { n as hasPermissionFn } from "../../permission-DLYUF3cW.mjs";
-import { t as twoFactorClient } from "../../client-CygJhqeB.mjs";
+import "../../random-32E3cU5o.mjs";
+import "../../misc-fKH4d5XQ.mjs";
+import { i as useAuthQuery } from "../../proxy-C_KXfOhk.mjs";
+import "../../parser-D7EkhAjZ.mjs";
+import "../../client-xga7yFIX.mjs";
+import "../../access-BM6jSA5j.mjs";
+import { a as userAc, t as adminAc$1 } from "../../access-bhklJd7m.mjs";
+import { t as hasPermission } from "../../has-permission-Bvg8de8g.mjs";
+import { t as deviceAuthorizationClient } from "../../client-cBiytuOL.mjs";
+import { a as memberAc, o as ownerAc, r as defaultRoles, t as adminAc } from "../../access-CrwEFPHE.mjs";
+import { n as hasPermissionFn } from "../../permission-CDDWgA_O.mjs";
+import "../../pow-OK01yPG3.mjs";
+import { t as twoFactorClient } from "../../client-BuveH3MN.mjs";
+import { t as auditLogClient } from "../../client-DzOqXJUm.mjs";
+import { t as sentinelClient } from "../../client-4QEb0rUr.mjs";
 import { atom } from "nanostores";
 import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 
@@ -536,4 +540,4 @@ const InferServerPlugin = () => {
 };
 
 //#endregion
-export { InferServerPlugin, adminClient, anonymousClient, apiKeyClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, twoFactorClient, usernameClient };
+export { InferServerPlugin, adminClient, anonymousClient, apiKeyClient, auditLogClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, sentinelClient, twoFactorClient, usernameClient };

package/dist/client/react/index.d.mts

@@ -1,11 +1,11 @@
-import { d as PrettifyDeep, h as UnionToIntersection } from "../../helper-tmxW3BHj.mjs";
-import { I as InferActions, K as SessionQueryParams, R as InferClientAPI, U as IsSignal, z as InferErrorCodes } from "../../index-Cxi7TbLE.mjs";
-import "../../types-B1OL7hyf.mjs";
-import "../../index-65G5U5DB-DSdjzreF.mjs";
-import "../../plugins-hFZT3hmK.mjs";
+import { d as PrettifyDeep, h as UnionToIntersection } from "../../helper-BgOIGHsu.mjs";
+import { I as InferActions, K as SessionQueryParams, R as InferClientAPI, U as IsSignal, z as InferErrorCodes } from "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
 import { PayvoAuthClientOptions, PayvoAuthClientPlugin } from "@gatwech/core";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
-import * as _better_fetch_fetch0 from "@better-fetch/fetch";
+import * as _better_fetch_fetch2 from "@better-fetch/fetch";
 import { BetterFetchError } from "@better-fetch/fetch";
 import * as nanostores0 from "nanostores";
 import { Store, StoreValue } from "nanostores";
@@ -97,27 +97,27 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions>(options
       error: null;
     } ? S : Res : never>;
   };
-  $fetch: _better_fetch_fetch0.BetterFetch<{
-    plugins: (_better_fetch_fetch0.BetterFetchPlugin | {
+  $fetch: _better_fetch_fetch2.BetterFetch<{
+    plugins: (_better_fetch_fetch2.BetterFetchPlugin | {
       id: string;
       name: string;
       hooks: {
-        onSuccess(context: _better_fetch_fetch0.SuccessContext<any>): void;
+        onSuccess(context: _better_fetch_fetch2.SuccessContext<any>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onRequest<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>): void;
+        onRequest<T extends Record<string, any>>(context: _better_fetch_fetch2.RequestContext<T>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onSuccess: ((context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void> | void) | undefined;
-        onError: ((context: _better_fetch_fetch0.ErrorContext) => Promise<void> | void) | undefined;
-        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>) => Promise<_better_fetch_fetch0.RequestContext | void> | _better_fetch_fetch0.RequestContext | void) | undefined;
-        onResponse: ((context: _better_fetch_fetch0.ResponseContext) => Promise<Response | void | _better_fetch_fetch0.ResponseContext> | Response | _better_fetch_fetch0.ResponseContext | void) | undefined;
+        onSuccess: ((context: _better_fetch_fetch2.SuccessContext<any>) => Promise<void> | void) | undefined;
+        onError: ((context: _better_fetch_fetch2.ErrorContext) => Promise<void> | void) | undefined;
+        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch2.RequestContext<T>) => Promise<_better_fetch_fetch2.RequestContext | void> | _better_fetch_fetch2.RequestContext | void) | undefined;
+        onResponse: ((context: _better_fetch_fetch2.ResponseContext) => Promise<Response | void | _better_fetch_fetch2.ResponseContext> | Response | _better_fetch_fetch2.ResponseContext | void) | undefined;
       };
     })[];
     method: string;
@@ -137,12 +137,12 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions>(options
     referrerPolicy?: ReferrerPolicy | undefined;
     signal?: (AbortSignal | null) | undefined;
     window?: null | undefined;
-    onRetry?: ((response: _better_fetch_fetch0.ResponseContext) => Promise<void> | void) | undefined;
+    onRetry?: ((response: _better_fetch_fetch2.ResponseContext) => Promise<void> | void) | undefined;
     hookOptions?: {
       cloneResponse?: boolean;
     } | undefined;
     timeout?: number | undefined;
-    customFetchImpl: _better_fetch_fetch0.FetchEsque;
+    customFetchImpl: _better_fetch_fetch2.FetchEsque;
     baseURL: string;
     throw?: boolean | undefined;
     auth?: ({
@@ -162,10 +162,10 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions>(options
     params?: any;
     duplex?: "full" | "half" | undefined;
     jsonParser: (text: string) => Promise<any> | any;
-    retry?: _better_fetch_fetch0.RetryOptions | undefined;
+    retry?: _better_fetch_fetch2.RetryOptions | undefined;
     retryAttempt?: number | undefined;
-    output?: (_better_fetch_fetch0.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-    errorSchema?: _better_fetch_fetch0.StandardSchemaV1 | undefined;
+    output?: (_better_fetch_fetch2.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+    errorSchema?: _better_fetch_fetch2.StandardSchemaV1 | undefined;
     disableValidation?: boolean | undefined;
   }, unknown, unknown, {}>;
   $store: {

package/dist/client/react/index.mjs

@@ -1,6 +1,6 @@
 import "../../url-VB2gAbTI.mjs";
-import { n as getClientConfig, t as createDynamicPathProxy } from "../../proxy-CL9PZXJA.mjs";
-import "../../parser-DcrIEuXE.mjs";
+import { n as getClientConfig, t as createDynamicPathProxy } from "../../proxy-C_KXfOhk.mjs";
+import "../../parser-D7EkhAjZ.mjs";
 import { listenKeys } from "nanostores";
 import { useCallback, useRef, useSyncExternalStore } from "react";
 

package/dist/client-4QEb0rUr.mjs

@@ -0,0 +1,95 @@
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "./pow-OK01yPG3.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+
+//#region src/plugins/sentinel/client.ts
+const VISITOR_ID_STORAGE_KEY = "payvo-auth.visitor_id";
+/** A random id kept for the lifetime of the browser storage */
+function storedVisitorId() {
+	try {
+		const storage = globalThis.localStorage;
+		const existing = storage?.getItem(VISITOR_ID_STORAGE_KEY);
+		if (existing) return existing;
+		const created = generateRandomString(32, "a-z", "0-9");
+		storage?.setItem(VISITOR_ID_STORAGE_KEY, created);
+		return created;
+	} catch {
+		return generateRandomString(32, "a-z", "0-9");
+	}
+}
+const sentinelClient = (options) => {
+	const autoSolveChallenge = options?.autoSolveChallenge ?? true;
+	const timeout = options?.identifyOptions?.timeout ?? 1e3;
+	const retry = {
+		attempts: options?.identifyOptions?.retry?.attempts ?? 2,
+		baseDelay: options?.identifyOptions?.retry?.baseDelay ?? 400,
+		maxDelay: options?.identifyOptions?.retry?.maxDelay ?? 600
+	};
+	let visitorId;
+	async function identify(fingerprint) {
+		const identifyUrl = options?.identifyUrl?.replace(/\/+$/, "");
+		if (!identifyUrl) return fingerprint;
+		for (let attempt = 0; attempt <= retry.attempts; attempt++) {
+			if (attempt > 0) {
+				const delay = Math.min(retry.baseDelay * 2 ** (attempt - 1), retry.maxDelay);
+				await new Promise((resolve) => setTimeout(resolve, delay));
+			}
+			const { data } = await betterFetch(`${identifyUrl}/v1/identify`, {
+				method: "POST",
+				headers: options?.identifyOptions?.headers,
+				body: {
+					fingerprint,
+					userAgent: globalThis.navigator?.userAgent ?? null
+				},
+				timeout
+			}).catch(() => ({ data: null }));
+			if (data?.visitorId) return data.visitorId;
+		}
+		return fingerprint;
+	}
+	function getVisitorId() {
+		visitorId ??= (async () => {
+			return identify(options?.getFingerprint ? await options.getFingerprint() : storedVisitorId());
+		})();
+		return visitorId;
+	}
+	return {
+		id: "sentinel",
+		$InferServerPlugin: {},
+		fetchPlugins: [{
+			id: "sentinel",
+			name: "sentinel",
+			hooks: {
+				async onRequest(context) {
+					context.headers.set("x-visitor-id", await getVisitorId());
+					return context;
+				},
+				async onResponse({ response, request }) {
+					if (response.status !== 423) return;
+					const challenge = parsePowHeader(response.headers.get(POW_CHALLENGE_HEADER));
+					if (!challenge) return;
+					options?.onChallengeReceived?.(response.headers.get(POW_REASON_HEADER) ?? "unknown");
+					if (!autoSolveChallenge) return;
+					try {
+						const startedAt = Date.now();
+						const solution = await solveChallenge(challenge.nonce, Number(challenge.value));
+						options?.onChallengeSolved?.(Date.now() - startedAt);
+						const headers = new Headers(request.headers);
+						headers.set(POW_SOLUTION_HEADER, `${challenge.nonce}:${solution}`);
+						const retried = await (request.customFetchImpl ?? fetch)(request.url, {
+							...request,
+							headers
+						});
+						if (retried.status === 423 && retried.headers.has(POW_CHALLENGE_HEADER)) options?.onChallengeFailed?.(/* @__PURE__ */ new Error("The challenge solution was rejected"));
+						return retried;
+					} catch (e) {
+						options?.onChallengeFailed?.(e instanceof Error ? e : new Error(String(e)));
+					}
+				}
+			}
+		}]
+	};
+};
+
+//#endregion
+export { sentinelClient as t };

package/dist/client-CSOs1YN7.d.mts

@@ -0,0 +1,14 @@
+import { n as auditLog } from "./index-DRM35ir1.mjs";
+
+//#region src/plugins/audit-log/client.d.ts
+declare const auditLogClient: () => {
+  id: "audit-log";
+  $InferServerPlugin: ReturnType<typeof auditLog>;
+  pathMethods: {
+    "/audit-log/get-audit-logs": "GET";
+    "/audit-log/get-all-audit-logs": "GET";
+    "/audit-log/get-event-types": "GET";
+  };
+};
+//#endregion
+export { auditLogClient as t };