@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.20

package/dist/{auth-CBUoBX6o.mjs → auth-vfCyIIeV.mjs}

@@ -1,12 +1,12 @@
-import { t as generateId } from "./utils-SOMB4Px5.mjs";
+import { t as generateId } from "./utils-B03WRaGi.mjs";
 import { r as getOrigin, t as getBaseURL } from "./url-VB2gAbTI.mjs";
-import { a as getEndpoints, n as checkEndpointConflicts, s as router } from "./api-0pR_I-Nx.mjs";
-import { a as verifyPassword, i as hashPassword } from "./crypto-Bb42eMrH.mjs";
-import { i as getCookies, t as createCookieGetter } from "./cookies-cJObLwn1.mjs";
-import { a as createInternalAdapter, r as getAdapter, s as getMigrations } from "./db-BrstmDhc.mjs";
-import { n as getKyselyDatabaseType } from "./dialect-CeddeGHf.mjs";
-import { t as getAuthTables } from "./get-tables-BQP7YW9c.mjs";
-import { t as checkPassword } from "./password-sVC4nePO.mjs";
+import { a as getEndpoints, n as checkEndpointConflicts, s as router } from "./api-Dk8Yj_J5.mjs";
+import { i as verifyPassword, r as hashPassword } from "./crypto-CCyta8xj.mjs";
+import { i as getCookies, t as createCookieGetter } from "./cookies-BuvlgcA-.mjs";
+import { a as createInternalAdapter, r as getAdapter, s as getMigrations } from "./db-7vHnL1XA.mjs";
+import { n as getKyselyDatabaseType } from "./dialect-HsWUfpYY.mjs";
+import { t as getAuthTables } from "./get-tables-CKvSyDST.mjs";
+import { t as checkPassword } from "./password-5CdcAVaH.mjs";
 import { runWithAdapter } from "@gatwech/core/context";
 import { createLogger, env, isProduction, isTest } from "@gatwech/core/env";
 import { BASE_ERROR_CODES, PayvoAuthError } from "@gatwech/core/error";

package/dist/{bearer-Djf_awfo.mjs → bearer-DvQLM00l.mjs}

@@ -1,4 +1,4 @@
-import { l as parseSetCookieHeader } from "./cookies-cJObLwn1.mjs";
+import { l as parseSetCookieHeader } from "./cookies-BuvlgcA-.mjs";
 import { serializeSignedCookie } from "better-call";
 import { createAuthMiddleware } from "@gatwech/core/api";
 import { createHMAC } from "@gatwech/utils/hmac";
@@ -26,7 +26,7 @@ const bearer = (options) => {
 					}
 					try {
 						const decodedToken = decodeURIComponent(signedToken);
-						if (!await createHMAC("SHA-256", "base64urlnopad").verify(c.context.secret, decodedToken.split(".")[0], decodedToken.split(".")[1])) return;
+						if (!await createHMAC("SHA-256", "base64").verify(c.context.secret, decodedToken.split(".")[0], decodedToken.split(".")[1])) return;
 					} catch (e) {
 						return;
 					}

package/dist/client/index.d.mts

@@ -1,11 +1,11 @@
-import { d as PrettifyDeep, h as UnionToIntersection } from "../helper-tmxW3BHj.mjs";
-import { B as InferPluginsFromClient, F as ClientStore, G as PayvoAuthClientPlugin, H as InferUserFromClient, I as InferActions, K as SessionQueryParams, L as InferAdditionalFromClient, M as AtomListener, N as ClientAtomListener, P as ClientOptions, R as InferClientAPI, U as IsSignal, V as InferSessionFromClient, W as PayvoAuthClientOptions, q as Store, z as InferErrorCodes } from "../index-Cxi7TbLE.mjs";
-import "../types-B1OL7hyf.mjs";
-import "../index-65G5U5DB-DSdjzreF.mjs";
-import "../plugins-hFZT3hmK.mjs";
+import { d as PrettifyDeep, h as UnionToIntersection } from "../helper-BgOIGHsu.mjs";
+import { B as InferPluginsFromClient, F as ClientStore, G as PayvoAuthClientPlugin, H as InferUserFromClient, I as InferActions, K as SessionQueryParams, L as InferAdditionalFromClient, M as AtomListener, N as ClientAtomListener, P as ClientOptions, R as InferClientAPI, U as IsSignal, V as InferSessionFromClient, W as PayvoAuthClientOptions, q as Store, z as InferErrorCodes } from "../index-BNhJglHC.mjs";
+import "../types-DNQ9XQrB.mjs";
+import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../plugins-Dy_FrD4Y.mjs";
 import { PayvoAuthClientOptions as PayvoAuthClientOptions$1, PayvoAuthClientPlugin as PayvoAuthClientPlugin$1, PayvoAuthOptions, PayvoAuthPlugin } from "@gatwech/core";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
-import * as _better_fetch_fetch17 from "@better-fetch/fetch";
+import * as _better_fetch_fetch20 from "@better-fetch/fetch";
 import { BetterFetch, BetterFetchError, BetterFetchOption } from "@better-fetch/fetch";
 import * as nanostores0 from "nanostores";
 import { Atom, PreinitializedWritableAtom, WritableAtom } from "nanostores";
@@ -79,27 +79,27 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions$1>(optio
     error: BetterFetchError | null;
     isPending: boolean;
   }>;
-  $fetch: _better_fetch_fetch17.BetterFetch<{
-    plugins: (_better_fetch_fetch17.BetterFetchPlugin | {
+  $fetch: _better_fetch_fetch20.BetterFetch<{
+    plugins: (_better_fetch_fetch20.BetterFetchPlugin | {
       id: string;
       name: string;
       hooks: {
-        onSuccess(context: _better_fetch_fetch17.SuccessContext<any>): void;
+        onSuccess(context: _better_fetch_fetch20.SuccessContext<any>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onRequest<T extends Record<string, any>>(context: _better_fetch_fetch17.RequestContext<T>): void;
+        onRequest<T extends Record<string, any>>(context: _better_fetch_fetch20.RequestContext<T>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onSuccess: ((context: _better_fetch_fetch17.SuccessContext<any>) => Promise<void> | void) | undefined;
-        onError: ((context: _better_fetch_fetch17.ErrorContext) => Promise<void> | void) | undefined;
-        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch17.RequestContext<T>) => Promise<_better_fetch_fetch17.RequestContext | void> | _better_fetch_fetch17.RequestContext | void) | undefined;
-        onResponse: ((context: _better_fetch_fetch17.ResponseContext) => Promise<Response | void | _better_fetch_fetch17.ResponseContext> | Response | _better_fetch_fetch17.ResponseContext | void) | undefined;
+        onSuccess: ((context: _better_fetch_fetch20.SuccessContext<any>) => Promise<void> | void) | undefined;
+        onError: ((context: _better_fetch_fetch20.ErrorContext) => Promise<void> | void) | undefined;
+        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch20.RequestContext<T>) => Promise<_better_fetch_fetch20.RequestContext | void> | _better_fetch_fetch20.RequestContext | void) | undefined;
+        onResponse: ((context: _better_fetch_fetch20.ResponseContext) => Promise<Response | void | _better_fetch_fetch20.ResponseContext> | Response | _better_fetch_fetch20.ResponseContext | void) | undefined;
       };
     })[];
     method: string;
@@ -119,12 +119,12 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions$1>(optio
     referrerPolicy?: ReferrerPolicy | undefined;
     signal?: (AbortSignal | null) | undefined;
     window?: null | undefined;
-    onRetry?: ((response: _better_fetch_fetch17.ResponseContext) => Promise<void> | void) | undefined;
+    onRetry?: ((response: _better_fetch_fetch20.ResponseContext) => Promise<void> | void) | undefined;
     hookOptions?: {
       cloneResponse?: boolean;
     } | undefined;
     timeout?: number | undefined;
-    customFetchImpl: _better_fetch_fetch17.FetchEsque;
+    customFetchImpl: _better_fetch_fetch20.FetchEsque;
     baseURL: string;
     throw?: boolean | undefined;
     auth?: ({
@@ -144,10 +144,10 @@ declare function createAuthClient<Option extends PayvoAuthClientOptions$1>(optio
     params?: any;
     duplex?: "full" | "half" | undefined;
     jsonParser: (text: string) => Promise<any> | any;
-    retry?: _better_fetch_fetch17.RetryOptions | undefined;
+    retry?: _better_fetch_fetch20.RetryOptions | undefined;
     retryAttempt?: number | undefined;
-    output?: (_better_fetch_fetch17.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-    errorSchema?: _better_fetch_fetch17.StandardSchemaV1 | undefined;
+    output?: (_better_fetch_fetch20.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+    errorSchema?: _better_fetch_fetch20.StandardSchemaV1 | undefined;
     disableValidation?: boolean | undefined;
   }, unknown, unknown, {}>;
   $store: {

package/dist/client/index.mjs

@@ -1,7 +1,7 @@
 import "../url-VB2gAbTI.mjs";
-import "../misc-beA1w3XV.mjs";
-import { a as createBroadcastChannel, i as useAuthQuery, r as createSessionRefreshManager } from "../proxy-CL9PZXJA.mjs";
-import "../parser-DcrIEuXE.mjs";
-import { n as InferPlugin, r as createAuthClient, t as InferAuth } from "../client-aExCkfwm.mjs";
+import "../misc-fKH4d5XQ.mjs";
+import { a as createBroadcastChannel, i as useAuthQuery, r as createSessionRefreshManager } from "../proxy-C_KXfOhk.mjs";
+import "../parser-D7EkhAjZ.mjs";
+import { n as InferPlugin, r as createAuthClient, t as InferAuth } from "../client-xga7yFIX.mjs";
 
 export { InferAuth, InferPlugin, createAuthClient, createBroadcastChannel, createSessionRefreshManager, useAuthQuery };

package/dist/client/plugins/index.d.mts

@@ -1,29 +1,37 @@
-import { a as LiteralNumber, c as OmitId, d as PrettifyDeep, f as Primitive, g as WithoutEmpty, h as UnionToIntersection, i as HasRequiredKeys, l as PreserveJSDoc, m as StripEmptyObjects, n as DeepPartial, o as LiteralString, p as RequiredKeysOf, r as Expand, s as LiteralUnion, t as Awaitable, u as Prettify } from "../../helper-tmxW3BHj.mjs";
-import { K as SessionQueryParams, Y as Auth, g as User$1, h as Session$1, i as PayvoAuthPlugin$1, mn as InferAdditionalFieldsFromPluginOptions, r as PayvoAuthOptions$1 } from "../../index-Cxi7TbLE.mjs";
-import "../../types-B1OL7hyf.mjs";
-import "../../index-65G5U5DB-DSdjzreF.mjs";
-import "../../plugins-hFZT3hmK.mjs";
-import { a as Role, i as AccessControl, o as Statements } from "../../index-C7fQuk-V.mjs";
-import { t as admin } from "../../admin-DtfO1PLg.mjs";
-import { r as anonymous } from "../../index-B3n8e37d.mjs";
-import { r as apiKey } from "../../index-CM-CFWwr.mjs";
-import { t as deviceAuthorizationClient } from "../../client-CNY0tn9g.mjs";
-import { n as emailOTP } from "../../index-D_k662QG.mjs";
-import { n as genericOAuth } from "../../index-Buhn3hkR.mjs";
-import { t as jwt } from "../../index-34ONrP8l.mjs";
-import { t as magicLink } from "../../index-BYMI9r_d.mjs";
-import { t as multiSession } from "../../index-DoXZYQpq.mjs";
-import { t as oneTimeToken } from "../../index-C-u1h_WX.mjs";
-import "../../index-z0KSvE5i.mjs";
-import { F as OrganizationOptions, S as Team, b as OrganizationRole, c as InferMember, f as InferTeam, g as Member, l as InferOrganization, p as Invitation, r as OrganizationPlugin, s as InferInvitation, v as Organization, w as TeamMember } from "../../index-BHoQlf7a.mjs";
-import { r as phoneNumber } from "../../index-DKNNV1kb.mjs";
-import { t as twoFactorClient } from "../../client-BOX93C3d.mjs";
-import { n as Passkey, t as passkey } from "../../index-DlaMq1nb.mjs";
-import { n as username } from "../../index-CuFzhoS6.mjs";
-import * as _gatwech_core33 from "@gatwech/core";
+import { a as LiteralNumber, c as OmitId, d as PrettifyDeep, f as Primitive, g as WithoutEmpty, h as UnionToIntersection, i as HasRequiredKeys, l as PreserveJSDoc, m as StripEmptyObjects, n as DeepPartial, o as LiteralString, p as RequiredKeysOf, r as Expand, s as LiteralUnion, t as Awaitable, u as Prettify } from "../../helper-BgOIGHsu.mjs";
+import { K as SessionQueryParams, Y as Auth, g as User$1, h as Session$1, i as PayvoAuthPlugin$1, mn as InferAdditionalFieldsFromPluginOptions, r as PayvoAuthOptions$1 } from "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
+import { a as Role, i as AccessControl, o as Statements } from "../../index-CxlWnL9c.mjs";
+import { t as admin } from "../../index-XfE0WjTN.mjs";
+import { r as anonymous } from "../../index-CNd5jqLl.mjs";
+import { L as apiKey } from "../../index-D57DuhZR.mjs";
+import "../../index-CP8x1TFq.mjs";
+import "../../index-DGeoJ4gu.mjs";
+import "../../index-BsSKcKgO.mjs";
+import { i as deviceAuthorizationClient } from "../../index-DFSRYWFI.mjs";
+import { n as emailOTP } from "../../index-CC920PPp.mjs";
+import { n as genericOAuth } from "../../index-CBiGsvDd.mjs";
+import "../../index-DwPAddfE.mjs";
+import { t as jwt } from "../../index-Dnd8S4S4.mjs";
+import { t as magicLink } from "../../index-4I1YhYhk.mjs";
+import { t as multiSession } from "../../index-DyXi7S2M.mjs";
+import "../../index-DTkcY7xH.mjs";
+import "../../index-sb-UFLuo.mjs";
+import { t as oneTimeToken } from "../../index-D6ku0rUC.mjs";
+import "../../index-QmocqGM-.mjs";
+import { F as OrganizationOptions, S as Team, b as OrganizationRole, c as InferMember, f as InferTeam, g as Member, l as InferOrganization, p as Invitation, r as OrganizationPlugin, s as InferInvitation, v as Organization, w as TeamMember } from "../../index-KhbNmMmG.mjs";
+import { r as phoneNumber } from "../../index-CofuaNMl.mjs";
+import { n as twoFactorClient } from "../../index-Bml-PCqP.mjs";
+import { n as Passkey, t as passkey } from "../../index-BX7rl07Z.mjs";
+import { n as username } from "../../index-CzpdkTdv.mjs";
+import { t as auditLogClient } from "../../client-F67q-Lbi.mjs";
+import { t as sentinelClient } from "../../client-C_qmyez2.mjs";
+import * as _gatwech_core63 from "@gatwech/core";
 import { ClientStore, PayvoAuthOptions } from "@gatwech/core";
 import { DBFieldAttribute } from "@gatwech/core/db";
-import * as _better_fetch_fetch34 from "@better-fetch/fetch";
+import * as _better_fetch_fetch37 from "@better-fetch/fetch";
 import { BetterFetch, BetterFetchOption } from "@better-fetch/fetch";
 import * as nanostores1 from "nanostores";
 import { atom } from "nanostores";
@@ -361,10 +369,10 @@ interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId"
 }
 declare const oneTapClient: (options: GoogleOneTapOptions) => {
   id: "one-tap";
-  getActions: ($fetch: _better_fetch_fetch34.BetterFetch, _: _gatwech_core33.ClientStore) => {
+  getActions: ($fetch: _better_fetch_fetch37.BetterFetch, _: _gatwech_core63.ClientStore) => {
     oneTap: (opts?: GoogleOneTapActionOptions | undefined, fetchOptions?: BetterFetchOption | undefined) => Promise<void>;
   };
-  getAtoms($fetch: _better_fetch_fetch34.BetterFetch): {};
+  getAtoms($fetch: _better_fetch_fetch37.BetterFetch): {};
 };
 //#endregion
 //#region src/plugins/one-time-token/client.d.ts
@@ -463,7 +471,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
       } ? true : false;
     };
   }>;
-  getActions: ($fetch: _better_fetch_fetch34.BetterFetch, _$store: _gatwech_core33.ClientStore, co: _gatwech_core33.PayvoAuthClientOptions | undefined) => {
+  getActions: ($fetch: _better_fetch_fetch37.BetterFetch, _$store: _gatwech_core63.ClientStore, co: _gatwech_core63.PayvoAuthClientOptions | undefined) => {
     $Infer: {
       ActiveOrganization: CO["teams"] extends {
         enabled: true;
@@ -547,7 +555,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
       }) => boolean;
     };
   };
-  getAtoms: ($fetch: _better_fetch_fetch34.BetterFetch) => {
+  getAtoms: ($fetch: _better_fetch_fetch37.BetterFetch) => {
     $listOrg: nanostores1.PreinitializedWritableAtom<boolean> & object;
     $activeOrgSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
     $activeMemberSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
@@ -564,7 +572,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
         members: InferMember<CO, false>[];
         invitations: InferInvitation<CO, false>[];
       }> | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch37.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
@@ -580,7 +588,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
         logo?: string | null | undefined;
         metadata?: any;
       } & InferAdditionalFieldsFromPluginOptions<"organization", CO, false> extends infer T_1 ? { [K in keyof T_1]: T_1[K] } : never)[] | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch37.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
@@ -595,7 +603,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
         role: string;
         createdAt: Date;
       } | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch37.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
@@ -606,7 +614,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
       data: {
         role: string;
       } | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch37.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
@@ -906,7 +914,7 @@ declare const passkeyClient: () => {
   getAtoms($fetch: BetterFetch): {
     listPasskeys: nanostores1.PreinitializedWritableAtom<{
       data: Passkey[] | null;
-      error: null | _better_fetch_fetch34.BetterFetchError;
+      error: null | _better_fetch_fetch37.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
@@ -946,4 +954,4 @@ declare const InferServerPlugin: <AuthOrOption extends PayvoAuthOptions | {
   } ? P : never : never;
 };
 //#endregion
-export { ApiKeyClientPlugin, Awaitable, DeepPartial, Expand, GoogleOneTapActionOptions, GoogleOneTapOptions, HasRequiredKeys, InferServerPlugin, LastLoginMethodClientConfig, LiteralNumber, LiteralString, LiteralUnion, OmitId, PreserveJSDoc, Prettify, PrettifyDeep, Primitive, RequiredKeysOf, StripEmptyObjects, UnionToIntersection, WithoutEmpty, adminClient, anonymousClient, apiKeyClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, twoFactorClient, usernameClient };
+export { ApiKeyClientPlugin, Awaitable, DeepPartial, Expand, GoogleOneTapActionOptions, GoogleOneTapOptions, HasRequiredKeys, InferServerPlugin, LastLoginMethodClientConfig, LiteralNumber, LiteralString, LiteralUnion, OmitId, PreserveJSDoc, Prettify, PrettifyDeep, Primitive, RequiredKeysOf, StripEmptyObjects, UnionToIntersection, WithoutEmpty, adminClient, anonymousClient, apiKeyClient, auditLogClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, sentinelClient, twoFactorClient, usernameClient };

package/dist/client/plugins/index.mjs

@@ -1,15 +1,19 @@
 import "../../url-VB2gAbTI.mjs";
-import "../../misc-beA1w3XV.mjs";
-import { i as useAuthQuery } from "../../proxy-CL9PZXJA.mjs";
-import "../../parser-DcrIEuXE.mjs";
-import "../../client-aExCkfwm.mjs";
-import "../../access-BO2g7QVe.mjs";
-import { a as userAc, t as adminAc$1 } from "../../access-DT1f6l5k.mjs";
-import { t as hasPermission } from "../../has-permission-BpAr7uCn.mjs";
-import { t as deviceAuthorizationClient } from "../../client-WiN43tAS.mjs";
-import { a as memberAc, o as ownerAc, r as defaultRoles, t as adminAc } from "../../access-C6O_osEz.mjs";
-import { n as hasPermissionFn } from "../../permission-DLYUF3cW.mjs";
-import { t as twoFactorClient } from "../../client-CygJhqeB.mjs";
+import "../../random-32E3cU5o.mjs";
+import "../../misc-fKH4d5XQ.mjs";
+import { i as useAuthQuery } from "../../proxy-C_KXfOhk.mjs";
+import "../../parser-D7EkhAjZ.mjs";
+import "../../client-xga7yFIX.mjs";
+import "../../access-BM6jSA5j.mjs";
+import { a as userAc, t as adminAc$1 } from "../../access-bhklJd7m.mjs";
+import { t as hasPermission } from "../../has-permission-Bvg8de8g.mjs";
+import { t as deviceAuthorizationClient } from "../../client-cBiytuOL.mjs";
+import { a as memberAc, o as ownerAc, r as defaultRoles, t as adminAc } from "../../access-CrwEFPHE.mjs";
+import { n as hasPermissionFn } from "../../permission-CDDWgA_O.mjs";
+import "../../pow-OK01yPG3.mjs";
+import { t as twoFactorClient } from "../../client-BuveH3MN.mjs";
+import { t as auditLogClient } from "../../client-DzOqXJUm.mjs";
+import { t as sentinelClient } from "../../client-4QEb0rUr.mjs";
 import { atom } from "nanostores";
 import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 
@@ -536,4 +540,4 @@ const InferServerPlugin = () => {
 };
 
 //#endregion
-export { InferServerPlugin, adminClient, anonymousClient, apiKeyClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, twoFactorClient, usernameClient };
+export { InferServerPlugin, adminClient, anonymousClient, apiKeyClient, auditLogClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, sentinelClient, twoFactorClient, usernameClient };

package/dist/client/react/index.d.mts

@@ -1,8 +1,8 @@
-import { d as PrettifyDeep, h as UnionToIntersection } from "../../helper-tmxW3BHj.mjs";
-import { I as InferActions, K as SessionQueryParams, R as InferClientAPI, U as IsSignal, z as InferErrorCodes } from "../../index-Cxi7TbLE.mjs";
-import "../../types-B1OL7hyf.mjs";
-import "../../index-65G5U5DB-DSdjzreF.mjs";
-import "../../plugins-hFZT3hmK.mjs";
+import { d as PrettifyDeep, h as UnionToIntersection } from "../../helper-BgOIGHsu.mjs";
+import { I as InferActions, K as SessionQueryParams, R as InferClientAPI, U as IsSignal, z as InferErrorCodes } from "../../index-BNhJglHC.mjs";
+import "../../types-DNQ9XQrB.mjs";
+import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../../plugins-Dy_FrD4Y.mjs";
 import { PayvoAuthClientOptions, PayvoAuthClientPlugin } from "@gatwech/core";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
 import * as _better_fetch_fetch0 from "@better-fetch/fetch";

package/dist/client/react/index.mjs

@@ -1,6 +1,6 @@
 import "../../url-VB2gAbTI.mjs";
-import { n as getClientConfig, t as createDynamicPathProxy } from "../../proxy-CL9PZXJA.mjs";
-import "../../parser-DcrIEuXE.mjs";
+import { n as getClientConfig, t as createDynamicPathProxy } from "../../proxy-C_KXfOhk.mjs";
+import "../../parser-D7EkhAjZ.mjs";
 import { listenKeys } from "nanostores";
 import { useCallback, useRef, useSyncExternalStore } from "react";
 

package/dist/client-4QEb0rUr.mjs

@@ -0,0 +1,95 @@
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "./pow-OK01yPG3.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+
+//#region src/plugins/sentinel/client.ts
+const VISITOR_ID_STORAGE_KEY = "payvo-auth.visitor_id";
+/** A random id kept for the lifetime of the browser storage */
+function storedVisitorId() {
+	try {
+		const storage = globalThis.localStorage;
+		const existing = storage?.getItem(VISITOR_ID_STORAGE_KEY);
+		if (existing) return existing;
+		const created = generateRandomString(32, "a-z", "0-9");
+		storage?.setItem(VISITOR_ID_STORAGE_KEY, created);
+		return created;
+	} catch {
+		return generateRandomString(32, "a-z", "0-9");
+	}
+}
+const sentinelClient = (options) => {
+	const autoSolveChallenge = options?.autoSolveChallenge ?? true;
+	const timeout = options?.identifyOptions?.timeout ?? 1e3;
+	const retry = {
+		attempts: options?.identifyOptions?.retry?.attempts ?? 2,
+		baseDelay: options?.identifyOptions?.retry?.baseDelay ?? 400,
+		maxDelay: options?.identifyOptions?.retry?.maxDelay ?? 600
+	};
+	let visitorId;
+	async function identify(fingerprint) {
+		const identifyUrl = options?.identifyUrl?.replace(/\/+$/, "");
+		if (!identifyUrl) return fingerprint;
+		for (let attempt = 0; attempt <= retry.attempts; attempt++) {
+			if (attempt > 0) {
+				const delay = Math.min(retry.baseDelay * 2 ** (attempt - 1), retry.maxDelay);
+				await new Promise((resolve) => setTimeout(resolve, delay));
+			}
+			const { data } = await betterFetch(`${identifyUrl}/v1/identify`, {
+				method: "POST",
+				headers: options?.identifyOptions?.headers,
+				body: {
+					fingerprint,
+					userAgent: globalThis.navigator?.userAgent ?? null
+				},
+				timeout
+			}).catch(() => ({ data: null }));
+			if (data?.visitorId) return data.visitorId;
+		}
+		return fingerprint;
+	}
+	function getVisitorId() {
+		visitorId ??= (async () => {
+			return identify(options?.getFingerprint ? await options.getFingerprint() : storedVisitorId());
+		})();
+		return visitorId;
+	}
+	return {
+		id: "sentinel",
+		$InferServerPlugin: {},
+		fetchPlugins: [{
+			id: "sentinel",
+			name: "sentinel",
+			hooks: {
+				async onRequest(context) {
+					context.headers.set("x-visitor-id", await getVisitorId());
+					return context;
+				},
+				async onResponse({ response, request }) {
+					if (response.status !== 423) return;
+					const challenge = parsePowHeader(response.headers.get(POW_CHALLENGE_HEADER));
+					if (!challenge) return;
+					options?.onChallengeReceived?.(response.headers.get(POW_REASON_HEADER) ?? "unknown");
+					if (!autoSolveChallenge) return;
+					try {
+						const startedAt = Date.now();
+						const solution = await solveChallenge(challenge.nonce, Number(challenge.value));
+						options?.onChallengeSolved?.(Date.now() - startedAt);
+						const headers = new Headers(request.headers);
+						headers.set(POW_SOLUTION_HEADER, `${challenge.nonce}:${solution}`);
+						const retried = await (request.customFetchImpl ?? fetch)(request.url, {
+							...request,
+							headers
+						});
+						if (retried.status === 423 && retried.headers.has(POW_CHALLENGE_HEADER)) options?.onChallengeFailed?.(/* @__PURE__ */ new Error("The challenge solution was rejected"));
+						return retried;
+					} catch (e) {
+						options?.onChallengeFailed?.(e instanceof Error ? e : new Error(String(e)));
+					}
+				}
+			}
+		}]
+	};
+};
+
+//#endregion
+export { sentinelClient as t };

package/dist/client-C_qmyez2.d.mts

@@ -0,0 +1,75 @@
+import { c as sentinel } from "./index-D57DuhZR.mjs";
+import * as _better_fetch_fetch16 from "@better-fetch/fetch";
+
+//#region src/plugins/sentinel/client.d.ts
+declare const sentinelClient: (options?: {
+  /**
+   * Base URL of the hosted identify service. Without it, the fingerprint is
+   * sent as the visitor id.
+   */
+  identifyUrl?: string | undefined;
+  /**
+   * Identify request options
+   */
+  identifyOptions?: {
+    /**
+     * Request timeout in milliseconds
+     *
+     * @default 1000
+     */
+    timeout?: number | undefined;
+    /**
+     * Retries after a failed request, with exponential backoff
+     *
+     * @default { attempts: 2, baseDelay: 400, maxDelay: 600 }
+     */
+    retry?: {
+      attempts?: number | undefined;
+      baseDelay?: number | undefined;
+      maxDelay?: number | undefined;
+    } | undefined;
+    /**
+     * Additional headers, e.g. the publishable key
+     */
+    headers?: Record<string, string> | undefined;
+  } | undefined;
+  /**
+   * Return a browser fingerprint, e.g. from FingerprintJS. By default a
+   * random id is created and kept in `localStorage`.
+   */
+  getFingerprint?: (() => string | Promise<string>) | undefined;
+  /**
+   * Solve proof-of-work challenges and retry the request once
+   *
+   * @default true
+   */
+  autoSolveChallenge?: boolean | undefined;
+  /**
+   * Called when a proof-of-work challenge is received
+   */
+  onChallengeReceived?: ((reason: string) => void) | undefined;
+  /**
+   * Called after a challenge is solved
+   */
+  onChallengeSolved?: ((solveTimeMs: number) => void) | undefined;
+  /**
+   * Called when solving a challenge fails or its solution is rejected
+   */
+  onChallengeFailed?: ((error: Error) => void) | undefined;
+} | undefined) => {
+  id: "sentinel";
+  $InferServerPlugin: ReturnType<typeof sentinel>;
+  fetchPlugins: {
+    id: string;
+    name: string;
+    hooks: {
+      onRequest<T extends Record<string, any>>(context: _better_fetch_fetch16.RequestContext<T>): Promise<_better_fetch_fetch16.RequestContext<T>>;
+      onResponse({
+        response,
+        request
+      }: _better_fetch_fetch16.ResponseContext): Promise<Response | undefined>;
+    };
+  }[];
+};
+//#endregion
+export { sentinelClient as t };

package/dist/client-DzOqXJUm.mjs

@@ -0,0 +1,15 @@
+//#region src/plugins/audit-log/client.ts
+const auditLogClient = () => {
+	return {
+		id: "audit-log",
+		$InferServerPlugin: {},
+		pathMethods: {
+			"/audit-log/get-audit-logs": "GET",
+			"/audit-log/get-all-audit-logs": "GET",
+			"/audit-log/get-event-types": "GET"
+		}
+	};
+};
+
+//#endregion
+export { auditLogClient as t };

package/dist/client-F67q-Lbi.d.mts

@@ -0,0 +1,14 @@
+import { n as auditLog } from "./index-D57DuhZR.mjs";
+
+//#region src/plugins/audit-log/client.d.ts
+declare const auditLogClient: () => {
+  id: "audit-log";
+  $InferServerPlugin: ReturnType<typeof auditLog>;
+  pathMethods: {
+    "/audit-log/get-audit-logs": "GET";
+    "/audit-log/get-all-audit-logs": "GET";
+    "/audit-log/get-event-types": "GET";
+  };
+};
+//#endregion
+export { auditLogClient as t };

package/dist/{client-aExCkfwm.mjs → client-xga7yFIX.mjs}

@@ -1,5 +1,5 @@
-import { t as capitalizeFirstLetter } from "./misc-beA1w3XV.mjs";
-import { n as getClientConfig, t as createDynamicPathProxy } from "./proxy-CL9PZXJA.mjs";
+import { t as capitalizeFirstLetter } from "./misc-fKH4d5XQ.mjs";
+import { n as getClientConfig, t as createDynamicPathProxy } from "./proxy-C_KXfOhk.mjs";
 
 //#region src/client/vanilla.ts
 function createAuthClient(options) {

package/dist/cookies/index.d.mts

@@ -1,7 +1,7 @@
-import "../helper-tmxW3BHj.mjs";
-import "../index-Cxi7TbLE.mjs";
-import "../types-B1OL7hyf.mjs";
-import "../index-65G5U5DB-DSdjzreF.mjs";
-import "../plugins-hFZT3hmK.mjs";
-import { a as getCookies, c as setCookieCache, d as getChunkedCookie, f as parseSetCookieHeader, i as getCookieCache, l as setSessionCookie, n as createCookieGetter, o as getSessionCookie, p as setCookieToHeader, r as deleteSessionCookie, s as parseCookies, t as EligibleCookies, u as createSessionStore } from "../index-DR0xXno9.mjs";
+import "../helper-BgOIGHsu.mjs";
+import "../index-BNhJglHC.mjs";
+import "../types-DNQ9XQrB.mjs";
+import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../plugins-Dy_FrD4Y.mjs";
+import { a as getCookies, c as setCookieCache, d as getChunkedCookie, f as parseSetCookieHeader, i as getCookieCache, l as setSessionCookie, n as createCookieGetter, o as getSessionCookie, p as setCookieToHeader, r as deleteSessionCookie, s as parseCookies, t as EligibleCookies, u as createSessionStore } from "../index-CsxtcAO0.mjs";
 export { EligibleCookies, createCookieGetter, createSessionStore, deleteSessionCookie, getChunkedCookie, getCookieCache, getCookies, getSessionCookie, parseCookies, parseSetCookieHeader, setCookieCache, setCookieToHeader, setSessionCookie };

package/dist/cookies/index.mjs

@@ -1,7 +1,7 @@
 import "../url-VB2gAbTI.mjs";
 import "../json-D0TBLy4q.mjs";
 import "../jwt-CmxZAGe2.mjs";
-import { a as getSessionCookie, c as setSessionCookie, d as createSessionStore, f as getChunkedCookie, i as getCookies, l as parseSetCookieHeader, n as deleteSessionCookie, o as parseCookies, r as getCookieCache, s as setCookieCache, t as createCookieGetter, u as setCookieToHeader } from "../cookies-cJObLwn1.mjs";
-import "../date-Cx2yCiC4.mjs";
+import { a as getSessionCookie, c as setSessionCookie, d as createSessionStore, f as getChunkedCookie, i as getCookies, l as parseSetCookieHeader, n as deleteSessionCookie, o as parseCookies, r as getCookieCache, s as setCookieCache, t as createCookieGetter, u as setCookieToHeader } from "../cookies-BuvlgcA-.mjs";
+import "../date-CMr04reD.mjs";
 
 export { createCookieGetter, createSessionStore, deleteSessionCookie, getChunkedCookie, getCookieCache, getCookies, getSessionCookie, parseCookies, parseSetCookieHeader, setCookieCache, setCookieToHeader, setSessionCookie };

package/dist/{cookies-cJObLwn1.mjs → cookies-BuvlgcA-.mjs}

@@ -1,7 +1,7 @@
 import { t as getBaseURL } from "./url-VB2gAbTI.mjs";
 import { t as safeJSONParse } from "./json-D0TBLy4q.mjs";
 import { i as verifyJWT, n as symmetricDecodeJWT, r as symmetricEncodeJWT, t as signJWT } from "./jwt-CmxZAGe2.mjs";
-import { t as getDate, u as parseUserOutput } from "./date-Cx2yCiC4.mjs";
+import { t as getDate, u as parseUserOutput } from "./date-CMr04reD.mjs";
 import { env, isProduction } from "@gatwech/core/env";
 import { PayvoAuthError } from "@gatwech/core/error";
 import * as z$1 from "zod";

package/dist/crypto/index.mjs

@@ -1,4 +1,5 @@
-import { a as verifyPassword, i as hashPassword, n as symmetricEncrypt, o as constantTimeEqual, r as generateRandomString, t as symmetricDecrypt } from "../crypto-Bb42eMrH.mjs";
+import { a as constantTimeEqual, i as verifyPassword, n as symmetricEncrypt, r as hashPassword, t as symmetricDecrypt } from "../crypto-CCyta8xj.mjs";
 import { i as verifyJWT, n as symmetricDecodeJWT, r as symmetricEncodeJWT, t as signJWT } from "../jwt-CmxZAGe2.mjs";
+import { t as generateRandomString } from "../random-32E3cU5o.mjs";
 
 export { constantTimeEqual, generateRandomString, hashPassword, signJWT, symmetricDecodeJWT, symmetricDecrypt, symmetricEncodeJWT, symmetricEncrypt, verifyJWT, verifyPassword };

package/dist/{crypto-Bb42eMrH.mjs → crypto-CCyta8xj.mjs}

@@ -5,7 +5,6 @@ import { bytesToHex, hexToBytes, managedNonce, utf8ToBytes } from "@noble/cipher
 import { hex } from "@gatwech/utils/hex";
 import { scryptAsync } from "@noble/hashes/scrypt.js";
 import { hexToBytes as hexToBytes$1 } from "@noble/hashes/utils.js";
-import { createRandomStringGenerator } from "@gatwech/utils/random";
 
 //#region src/crypto/buffer.ts
 /**
@@ -48,10 +47,6 @@ const verifyPassword = async ({ hash, password }) => {
 	return constantTimeEqual(await generateKey(password, salt), hexToBytes$1(key));
 };
 
-//#endregion
-//#region src/crypto/random.ts
-const generateRandomString = createRandomStringGenerator("a-z", "0-9", "A-Z", "-_");
-
 //#endregion
 //#region src/crypto/index.ts
 const symmetricEncrypt = async ({ key, data }) => {
@@ -67,4 +62,4 @@ const symmetricDecrypt = async ({ key, data }) => {
 };
 
 //#endregion
-export { verifyPassword as a, hashPassword as i, symmetricEncrypt as n, constantTimeEqual as o, generateRandomString as r, symmetricDecrypt as t };
+export { constantTimeEqual as a, verifyPassword as i, symmetricEncrypt as n, hashPassword as r, symmetricDecrypt as t };