@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.20

package/dist/{session-Dgp133Yt.mjs → session-BB3oqApE.mjs}

@@ -1,7 +1,7 @@
 import { t as safeJSONParse } from "./json-D0TBLy4q.mjs";
 import { i as verifyJWT, n as symmetricDecodeJWT } from "./jwt-CmxZAGe2.mjs";
-import { c as setSessionCookie, f as getChunkedCookie, n as deleteSessionCookie, p as getSessionQuerySchema, s as setCookieCache } from "./cookies-cJObLwn1.mjs";
-import { c as parseSessionOutput, t as getDate, u as parseUserOutput } from "./date-Cx2yCiC4.mjs";
+import { c as setSessionCookie, f as getChunkedCookie, n as deleteSessionCookie, p as getSessionQuerySchema, s as setCookieCache } from "./cookies-BuvlgcA-.mjs";
+import { c as parseSessionOutput, t as getDate, u as parseUserOutput } from "./date-CMr04reD.mjs";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
 import { APIError } from "better-call";
 import { createAuthEndpoint, createAuthMiddleware } from "@gatwech/core/api";

package/dist/src/adapters/memory-adapter/memory-adapter.d.ts

@@ -6,4 +6,4 @@ export interface MemoryDB {
 export interface MemoryAdapterConfig {
     debugLogs?: DBAdapterDebugLogOption | undefined;
 }
-export declare const memoryAdapter: (db: MemoryDB, config?: MemoryAdapterConfig | undefined) => (options: PayvoAuthOptions) => import("packages/core/dist/index-65G5U5DB.mjs").nt<PayvoAuthOptions>;
+export declare const memoryAdapter: (db: MemoryDB, config?: MemoryAdapterConfig | undefined) => (options: PayvoAuthOptions) => import("packages/core/dist/index-Df0KhQRf.mjs").nt<PayvoAuthOptions>;

package/dist/src/adapters/prisma-adapter/test/auth.d.ts

@@ -1,3 +1,3 @@
 export declare const auth: import("../../..").Auth<{
-    database: (options: import("packages/core/dist/index-65G5U5DB.mjs").g) => import("packages/core/dist/index-65G5U5DB.mjs").nt<import("packages/core/dist/index-65G5U5DB.mjs").g>;
+    database: (options: import("packages/core/dist/index-Df0KhQRf.mjs").g) => import("packages/core/dist/index-Df0KhQRf.mjs").nt<import("packages/core/dist/index-Df0KhQRf.mjs").g>;
 }>;

package/dist/src/adapters/tests/auth-flow.d.ts

@@ -8,11 +8,11 @@ export declare const authFlowTestSuite: (options?: ({
 } & {
     showDB?: () => Promise<void>;
 }) | undefined) => (helpers: {
-    adapter: () => Promise<import("packages/core/dist/index-65G5U5DB.mjs").nt<import("packages/core/dist/index-65G5U5DB.mjs").g>>;
+    adapter: () => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").nt<import("packages/core/dist/index-Df0KhQRf.mjs").g>>;
     log: import("../test-adapter").Logger;
     adapterDisplayName: string;
-    getPayvoAuthOptions: () => import("packages/core/dist/index-65G5U5DB.mjs").g;
-    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-65G5U5DB.mjs").g) => Promise<import("packages/core/dist/index-65G5U5DB.mjs").g>;
+    getPayvoAuthOptions: () => import("packages/core/dist/index-Df0KhQRf.mjs").g;
+    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-Df0KhQRf.mjs").g) => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").g>;
     cleanup: () => Promise<void>;
     runMigrations: () => Promise<void>;
     prefixTests?: string | undefined;

package/dist/src/adapters/tests/normal.d.ts

@@ -7,7 +7,7 @@ export declare const normalTestSuite: (options?: {
         ALL?: boolean;
     }> | undefined;
 } | undefined) => (helpers: {
-    adapter: () => Promise<import("packages/core/dist/index-65G5U5DB.mjs").nt<import("@gatwech/core").PayvoAuthOptions>>;
+    adapter: () => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").nt<import("@gatwech/core").PayvoAuthOptions>>;
     log: import("../test-adapter").Logger;
     adapterDisplayName: string;
     getPayvoAuthOptions: () => import("@gatwech/core").PayvoAuthOptions;

package/dist/src/adapters/tests/number-id.d.ts

@@ -3,11 +3,11 @@ export declare const numberIdTestSuite: (options?: {
         ALL?: boolean;
     }> | undefined;
 } | undefined) => (helpers: {
-    adapter: () => Promise<import("packages/core/dist/index-65G5U5DB.mjs").nt<import("packages/core/dist/index-65G5U5DB.mjs").g>>;
+    adapter: () => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").nt<import("packages/core/dist/index-Df0KhQRf.mjs").g>>;
     log: import("../test-adapter").Logger;
     adapterDisplayName: string;
-    getPayvoAuthOptions: () => import("packages/core/dist/index-65G5U5DB.mjs").g;
-    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-65G5U5DB.mjs").g) => Promise<import("packages/core/dist/index-65G5U5DB.mjs").g>;
+    getPayvoAuthOptions: () => import("packages/core/dist/index-Df0KhQRf.mjs").g;
+    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-Df0KhQRf.mjs").g) => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").g>;
     cleanup: () => Promise<void>;
     runMigrations: () => Promise<void>;
     prefixTests?: string | undefined;

package/dist/src/adapters/tests/performance.d.ts

@@ -10,11 +10,11 @@ export declare const performanceTestSuite: (options?: ({
     userSeedCount?: number;
     dialect?: string;
 }) | undefined) => (helpers: {
-    adapter: () => Promise<import("packages/core/dist/index-65G5U5DB.mjs").nt<import("packages/core/dist/index-65G5U5DB.mjs").g>>;
+    adapter: () => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").nt<import("packages/core/dist/index-Df0KhQRf.mjs").g>>;
     log: import("../test-adapter").Logger;
     adapterDisplayName: string;
-    getPayvoAuthOptions: () => import("packages/core/dist/index-65G5U5DB.mjs").g;
-    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-65G5U5DB.mjs").g) => Promise<import("packages/core/dist/index-65G5U5DB.mjs").g>;
+    getPayvoAuthOptions: () => import("packages/core/dist/index-Df0KhQRf.mjs").g;
+    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-Df0KhQRf.mjs").g) => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").g>;
     cleanup: () => Promise<void>;
     runMigrations: () => Promise<void>;
     prefixTests?: string | undefined;

package/dist/src/adapters/tests/transactions.d.ts

@@ -6,11 +6,11 @@ export declare const transactionsTestSuite: (options?: {
         ALL?: boolean;
     }> | undefined;
 } | undefined) => (helpers: {
-    adapter: () => Promise<import("packages/core/dist/index-65G5U5DB.mjs").nt<import("packages/core/dist/index-65G5U5DB.mjs").g>>;
+    adapter: () => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").nt<import("packages/core/dist/index-Df0KhQRf.mjs").g>>;
     log: import("../test-adapter").Logger;
     adapterDisplayName: string;
-    getPayvoAuthOptions: () => import("packages/core/dist/index-65G5U5DB.mjs").g;
-    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-65G5U5DB.mjs").g) => Promise<import("packages/core/dist/index-65G5U5DB.mjs").g>;
+    getPayvoAuthOptions: () => import("packages/core/dist/index-Df0KhQRf.mjs").g;
+    modifyPayvoAuthOptions: (options: import("packages/core/dist/index-Df0KhQRf.mjs").g) => Promise<import("packages/core/dist/index-Df0KhQRf.mjs").g>;
     cleanup: () => Promise<void>;
     runMigrations: () => Promise<void>;
     prefixTests?: string | undefined;

package/dist/src/api/index.d.ts

@@ -3305,8 +3305,8 @@ export declare function getEndpoints<Option extends PayvoAuthOptions>(ctx: Promi
                 returnHeaders?: ReturnHeaders | undefined;
             }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
                 headers: Headers;
-                response: import("packages/core/dist/index-65G5U5DB.mjs").X;
-            } : import("packages/core/dist/index-65G5U5DB.mjs").X>;
+                response: import("packages/core/dist/index-Df0KhQRf.mjs").X;
+            } : import("packages/core/dist/index-Df0KhQRf.mjs").X>;
             options: {
                 method: "POST";
                 body: import("zod").ZodObject<{
@@ -3480,11 +3480,11 @@ export declare function getEndpoints<Option extends PayvoAuthOptions>(ctx: Promi
             }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
                 headers: Headers;
                 response: {
-                    user: import("packages/core/dist/index-65G5U5DB.mjs").Z;
+                    user: import("packages/core/dist/index-Df0KhQRf.mjs").Z;
                     data: Record<string, any>;
                 } | null;
             } : {
-                user: import("packages/core/dist/index-65G5U5DB.mjs").Z;
+                user: import("packages/core/dist/index-Df0KhQRf.mjs").Z;
                 data: Record<string, any>;
             } | null>;
             options: {
@@ -6878,8 +6878,8 @@ export declare const router: <Option extends PayvoAuthOptions>(ctx: AuthContext,
                 returnHeaders?: ReturnHeaders | undefined;
             }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
                 headers: Headers;
-                response: import("packages/core/dist/index-65G5U5DB.mjs").X;
-            } : import("packages/core/dist/index-65G5U5DB.mjs").X>;
+                response: import("packages/core/dist/index-Df0KhQRf.mjs").X;
+            } : import("packages/core/dist/index-Df0KhQRf.mjs").X>;
             options: {
                 method: "POST";
                 body: import("zod").ZodObject<{
@@ -7053,11 +7053,11 @@ export declare const router: <Option extends PayvoAuthOptions>(ctx: AuthContext,
             }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
                 headers: Headers;
                 response: {
-                    user: import("packages/core/dist/index-65G5U5DB.mjs").Z;
+                    user: import("packages/core/dist/index-Df0KhQRf.mjs").Z;
                     data: Record<string, any>;
                 } | null;
             } : {
-                user: import("packages/core/dist/index-65G5U5DB.mjs").Z;
+                user: import("packages/core/dist/index-Df0KhQRf.mjs").Z;
                 data: Record<string, any>;
             } | null>;
             options: {

package/dist/src/client/plugins/index.d.ts

@@ -3,6 +3,7 @@ export * from "../../plugins/additional-fields/client";
 export * from "../../plugins/admin/client";
 export * from "../../plugins/anonymous/client";
 export * from "../../plugins/api-key/client";
+export * from "../../plugins/audit-log/client";
 export * from "../../plugins/custom-session/client";
 export * from "../../plugins/device-authorization/client";
 export * from "../../plugins/email-otp/client";
@@ -15,6 +16,7 @@ export * from "../../plugins/one-tap/client";
 export * from "../../plugins/one-time-token/client";
 export * from "../../plugins/organization/client";
 export * from "../../plugins/phone-number/client";
+export * from "../../plugins/sentinel/client";
 export * from "../../plugins/two-factor/client";
 export * from "../../plugins/passkey/client";
 export * from "../../plugins/username/client";

package/dist/src/plugins/admin/admin.d.ts

@@ -976,11 +976,11 @@ export declare const admin: <O extends AdminOptions>(options?: O | undefined) =>
                 headers: Headers;
                 response: {
                     session: Session & Record<string, any>;
-                    user: import("packages/core/dist/index-65G5U5DB.mjs")._t & Record<string, any>;
+                    user: import("packages/core/dist/index-Df0KhQRf.mjs")._t & Record<string, any>;
                 };
             } : {
                 session: Session & Record<string, any>;
-                user: import("packages/core/dist/index-65G5U5DB.mjs")._t & Record<string, any>;
+                user: import("packages/core/dist/index-Df0KhQRf.mjs")._t & Record<string, any>;
             }>;
             options: {
                 method: "POST";

package/dist/src/plugins/api-key/index.d.ts

@@ -1421,8 +1421,8 @@ export declare const apiKey: (options?: ApiKeyOptions | undefined) => {
                     required: false;
                     input: true;
                     transform: {
-                        input(value: import("packages/core/dist/index-65G5U5DB.mjs").jt): string;
-                        output(value: import("packages/core/dist/index-65G5U5DB.mjs").jt): any;
+                        input(value: import("packages/core/dist/index-Df0KhQRf.mjs").jt): string;
+                        output(value: import("packages/core/dist/index-Df0KhQRf.mjs").jt): any;
                     };
                 };
             };

package/dist/src/plugins/audit-log/client.d.ts

@@ -0,0 +1,10 @@
+import type { auditLog } from ".";
+export declare const auditLogClient: () => {
+    id: "audit-log";
+    $InferServerPlugin: ReturnType<typeof auditLog>;
+    pathMethods: {
+        "/audit-log/get-audit-logs": "GET";
+        "/audit-log/get-all-audit-logs": "GET";
+        "/audit-log/get-event-types": "GET";
+    };
+};

package/dist/src/plugins/audit-log/events.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Audit event types recorded by the audit log plugin
+ */
+export declare const AUDIT_EVENT_TYPES: {
+    readonly USER_SIGNED_UP: "user_signed_up";
+    readonly USER_PROFILE_UPDATED: "user_profile_updated";
+    readonly USER_PROFILE_IMAGE_UPDATED: "user_profile_image_updated";
+    readonly USER_EMAIL_VERIFIED: "user_email_verified";
+    readonly USER_BANNED: "user_banned";
+    readonly USER_UNBANNED: "user_unbanned";
+    readonly USER_DELETED: "user_deleted";
+    readonly USER_ROLE_UPDATED: "user_role_updated";
+    readonly USER_EMAIL_CHANGED: "user_email_changed";
+    readonly USER_PHONE_NUMBER_CHANGED: "user_phone_number_changed";
+    readonly USER_SIGNED_IN: "user_signed_in";
+    readonly USER_SIGNED_OUT: "user_signed_out";
+    readonly SESSION_CREATED: "session_created";
+    readonly SESSION_REVOKED: "session_revoked";
+    readonly SESSIONS_REVOKED_ALL: "sessions_revoked_all";
+    readonly USER_IMPERSONATED: "user_impersonated";
+    readonly USER_IMPERSONATION_STOPPED: "user_impersonation_stopped";
+    readonly DEVICE_AUTHORIZATION_APPROVED: "device_authorization_approved";
+    readonly DEVICE_AUTHORIZATION_DENIED: "device_authorization_denied";
+    readonly ACCOUNT_LINKED: "account_linked";
+    readonly ACCOUNT_UNLINKED: "account_unlinked";
+    readonly PASSWORD_CHANGED: "password_changed";
+    readonly TWO_FACTOR_ENABLED: "two_factor_enabled";
+    readonly TWO_FACTOR_DISABLED: "two_factor_disabled";
+    readonly BACKUP_CODES_GENERATED: "two_factor_backup_codes_generated";
+    readonly PASSKEY_ADDED: "passkey_added";
+    readonly PASSKEY_REMOVED: "passkey_removed";
+    readonly API_KEY_CREATED: "api_key_created";
+    readonly API_KEY_UPDATED: "api_key_updated";
+    readonly API_KEY_DELETED: "api_key_deleted";
+    readonly PASSWORD_RESET_REQUESTED: "password_reset_requested";
+    readonly PASSWORD_RESET_COMPLETED: "password_reset_completed";
+    readonly EMAIL_VERIFICATION_SENT: "email_verification_sent";
+    readonly ORGANIZATION_CREATED: "organization_created";
+    readonly ORGANIZATION_UPDATED: "organization_updated";
+    readonly ORGANIZATION_DELETED: "organization_deleted";
+    readonly ORGANIZATION_ROLE_CREATED: "organization_role_created";
+    readonly ORGANIZATION_ROLE_UPDATED: "organization_role_updated";
+    readonly ORGANIZATION_ROLE_DELETED: "organization_role_deleted";
+    readonly MEMBER_ADDED: "member_added";
+    readonly MEMBER_REMOVED: "member_removed";
+    readonly MEMBER_ROLE_UPDATED: "member_role_updated";
+    readonly MEMBER_INVITED: "member_invited";
+    readonly INVITE_ACCEPTED: "invite_accepted";
+    readonly INVITE_REJECTED: "invite_rejected";
+    readonly INVITE_CANCELLED: "invite_cancelled";
+    readonly TEAM_CREATED: "team_created";
+    readonly TEAM_UPDATED: "team_updated";
+    readonly TEAM_DELETED: "team_deleted";
+    readonly TEAM_MEMBER_ADDED: "team_member_added";
+    readonly TEAM_MEMBER_REMOVED: "team_member_removed";
+    readonly USER_SIGN_IN_FAILED: "user_sign_in_failed";
+    readonly VERIFICATION_FAILED: "verification_failed";
+};
+/**
+ * Security event types recorded by the sentinel plugin
+ *
+ * Declared here so both plugins share the same event types
+ */
+export declare const SECURITY_EVENT_TYPES: {
+    readonly BLOCKED: "security_blocked";
+    readonly ALLOWED_AFTER_CHALLENGE: "security_allowed";
+    readonly CREDENTIAL_STUFFING: "security_credential_stuffing";
+    readonly IMPOSSIBLE_TRAVEL: "security_impossible_travel";
+    readonly GEO_BLOCKED: "security_geo_blocked";
+    readonly BOT_BLOCKED: "security_bot_blocked";
+    readonly SUSPICIOUS_IP: "security_suspicious_ip";
+    readonly VELOCITY_EXCEEDED: "security_velocity_exceeded";
+    readonly FREE_TRIAL_ABUSE: "security_free_trial_abuse";
+    readonly COMPROMISED_PASSWORD: "security_compromised_password";
+    readonly STALE_ACCOUNT: "security_stale_account";
+    readonly INVALID_EMAIL: "security_invalid_email";
+};
+export type AuditEventType = (typeof AUDIT_EVENT_TYPES)[keyof typeof AUDIT_EVENT_TYPES] | (typeof SECURITY_EVENT_TYPES)[keyof typeof SECURITY_EVENT_TYPES];
+export declare const ALL_EVENT_TYPES: AuditEventType[];
+/** Endpoints that complete a sign-in by creating a session */
+export declare const SIGN_IN_PATHS: string[];
+/** Sign-in endpoints that check credentials, so a failure is a failed attempt */
+export declare const CREDENTIAL_SIGN_IN_PATHS: string[];
+/**
+ * Endpoints that check a one-time code or token outside a sign-in, so a
+ * failure is a failed attempt
+ */
+export declare const VERIFICATION_PATHS: string[];
+/** Endpoints whose successful response maps to a single event */
+export declare const PATH_EVENTS: Record<string, AuditEventType>;